EEVblog Electronics Community Forum

Products => Thermal Imaging => Topic started by: mikeselectricstuff on October 13, 2013, 09:18:10 am

Title: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 13, 2013, 09:18:10 am
TL;DR :
26 Dec 2016  Updated method for firmware V2.11  (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)( no need to downgrade to 2.3)
10 Jan 2016 There is a new firmware, V2.8, which needs to be downgraded to 2.3 for the hack to work. Instructions in This post (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)
30 Mar 2015 Link to step-by-step guide for 2.3 firmware (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg640825/#msg640825)
12th Jan 2015  Link to hack instructions for 2.3 firmware (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647)
24th Oct 2014
It appears that V2.3 firmware has now been successfully hacked, but only for increased resolution - see This post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297) and the few that follow for more details.
13th July 2014
New units are shipping with firmware V2.3, which appears to have an encrypted config file. Details of how this version it affects hackability are not yet established - check the end of the thread for updates.
(An earlier version, 2.1 appeared briefly but was reported to have connectivity issues.) 
One user  has reported that an old unit sent back for repair was upgraded to 2.3 during repair (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478554/#msg478554), but was still hackable afterwards. See follow-ups to this post for more info.

1.2x has countermeasures against the original hack, however  1.21  and 1.22 have now been successfully hacked.
This post will be updated with any important developments, however always
check the end of the thread for latest info


newbie Q&A thread (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/) - please post questions about implementing existing hacks there and not in this thread

Marphy's TIConfig utility for one-click upgrade of all current firmware versions (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg421535/#msg421535)

1.21/1.22 firmware hack info  (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)

DaveWB's video tutorials for old and new firmware versions (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787)

Link to old firmware hack info for all 1.19.x versions b (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

Link to Taucher's menu hacks (Beta - for advanced users) (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024) These enable extra features not even available on the E8 like manual temperature mode, additional pallettes and measure modes, and digital zoom.
check the end of the thread[/b] for any very recent updates.

Info on hacking E30 to E60 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266)

Link to Nersut's detailed guide to hacking the i series (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174)
Link to older i3 hack info (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)

Tomas123's links on post- processing and measurements using E4 images (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

Jolly's raspberry Pi E4 video recorder (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918)

Links to useful files and documents :
Aurora's Useful  information thread, including log of versions and serial numbers (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)
 
Flir Tools http://www.flir.com/thermography/americas/us/view/?id=54865 (http://www.flir.com/thermography/americas/us/view/?id=54865)

Direct (non-registration required) link to Flir RNDIS driver http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)

Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

Info on console commands etc. http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)


There is  lots of other useful info in this thread so well worth a read.

Yes, it has a 320x240 60fps sensor - same as the £4700 E8 model and even more expensive Ex0 series
FLIR E4 Thermal Imaging Camera teardown (https://www.youtube.com/watch?v=NtqUE67BUDI#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 13, 2013, 09:24:14 am
Perfect timing sir!  :-+ I just got me some tea + fresh banana bread!

*watches*
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 13, 2013, 09:51:35 am
Thanks Mike,

Something interesting to watch on a Sunday morning, rather than 'Sunday Brunch' on Channel 4 !

Fraser

UPDATE:

I have posted a UK supplier recommendation here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110)

Message  #1109

The company is willing to offer a discount to EEVBlog members.


UPDATE:

I have created an E4 'Useful information' thread here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: niflheimer on October 13, 2013, 10:14:49 am
Just watched it - impressive how they've managed to reduce both the BOM and the cost of the sensor. I wouldn't be surprised if the only things different on the other models are the add-on boards for wifi/BT and a slightly different firmware and caps table.

The X-ray is new though - film type ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on October 13, 2013, 10:52:51 am
another software locked hardware i see :)  wonder what it actually cost  to sell the same thing for cheaper than the advanced optioned ones
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 13, 2013, 11:04:35 am
Mike,

Another excellent video. thank you. I have commented in the other thread but I noted the 2009 micro-bolometer date. The FLIR TAU engine is looking like a more likely candidate than ever. It's relatively old, so development costs have likely been recovered, and this is just stripping it back to basics for usage in consumer grade products. Sadly I cannot find any internal pictures of the TAU.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on October 13, 2013, 11:23:31 am
Oh man, imagine if we can change the limitation just by rewriting the EEPROM!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 13, 2013, 12:14:39 pm
:-+ :-+ Excellent video!

I would've pulled on the various different-coloured parts of the "snout" first before putting more force into the button. The x-ray didn't reveal those screws behind the snout?

At 30:08 you can see Mg marked on the frame so it very clearly is magnesium. The exposed bond wires were unexpected and disturbingly fragile; I'm a little surprised they didn't encapsulate them with epoxy like a COB, although that might have something to do with the thermal requirements.

The CPU has an Ethernet interface - maybe it's broken out on one of the pads.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alm on October 13, 2013, 02:11:19 pm
Mike commented on this the first time he discussed the PCB.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 13, 2013, 02:14:17 pm
Oh , I was wondering g what that little cutout on the pcb was!
Thermal sensor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 13, 2013, 03:38:46 pm
Mike,

Another excellent video. thank you. I have commented in the other thread but I noted the 2009 micro-bolometer date. The FLIR TAU engine is looking like a more likely candidate than ever. It's relatively old, so development costs have likely been recovered, and this is just stripping it back to basics for usage in consumer grade products. Sadly I cannot find any internal pictures of the TAU.
I'd love to know how much the cheapest Tau costs - could be some scope for hacking there - chances are it has the same datastream inside
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mos6502 on October 13, 2013, 10:47:18 pm
The Tau 640 is around 10k ... maybe you can interpolate from that.

Problem with the Tau is that they fall under the ITAR regluations ... dunno if they even talk to you unless you're an international corporation.

BTW, excellent videos Mike. I love 'em.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on October 13, 2013, 10:47:44 pm
Dave, have you considered to include great teardown videos like this one in your official eevblog? 

You can have a short introduction and summary as a host and have the guest's  contributed video in between.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Noize on October 13, 2013, 11:10:25 pm
Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 13, 2013, 11:12:12 pm
Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!
No it's a mailroom x-ray I picked up a while ago. Have shot half a teardown but not got round to finishing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on October 14, 2013, 07:11:21 am
Maybe someone who know more about this can chime in but doesn't exposing the die present a major failure point from corrosion?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on October 14, 2013, 08:10:49 am
Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!
No it's a mailroom x-ray I picked up a while ago. Have shot half a teardown but not got round to finishing

I had just figured you scrapped as much of the metal as you could and condensed the unit, but now that I think about it, the luggage xray was made to be in motion and this one was still.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: l3iggs on October 14, 2013, 04:25:42 pm
Hey Mike, thanks for taking the time to put together a very interesting tear down. Have you attempted to coax the data stream out of the sensor module without the main board attached?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 14, 2013, 05:09:30 pm
Hey Mike, thanks for taking the time to put together a very interesting tear down. Have you attempted to coax the data stream out of the sensor module without the main board attached?
No but may look at some point -My guess is FPGA could be generating some of the timing signals. Will probably need to make a riser adapter to get at the pins though - need to see if I can ID and obtain the board-board connectors.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewalker on October 14, 2013, 08:06:53 pm
X-raing the sensor could reveal something?

Alexander.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 14, 2013, 08:08:39 pm
X-raing the sensor could reveal something?

Alexander.
Yes but unfortunately my x-ray doesn't have the resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on October 15, 2013, 07:23:25 am
X-raing the sensor could reveal something?

Alexander.
Yes but unfortunately my x-ray doesn't have the resolution.

It would be interesting to xray it while it was on and capture the video from the flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: algorath on October 15, 2013, 01:36:27 pm
great video as always. and yes, your trigger torturing really did hurt hehe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tesla500 on October 15, 2013, 05:16:26 pm
Can you try using another thermal camera to look through the top window of the E4's sensor?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 15, 2013, 05:18:15 pm
Can you try using another thermal camera to look through the top window of the E4's sensor?
I did try but close-focus on my other TIC isn't good enough to see anything
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 15, 2013, 06:11:26 pm
Such thermal investigation would be a challenge as the temperature differential inside the Micro-bolometer FPA is intentionally very small. The sensing elements do not produce heat. The resolution of the FireFlIR (320x240) is also too low for die detail, even when using a close-up lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tesla500 on October 15, 2013, 06:32:18 pm
Such thermal investigation would be a challenge as the temperature differential inside the Micro-bolometer FPA is intentionally very small. The sensing elements do not produce heat. The resolution of the FireFlIR (320x240) is also too low for die detail, even when using a close-up lens.

Yes, but you could potentially hold a "light" (soldering iron?) over it and see differences in thermal reflectivity on the microbolometer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 15, 2013, 07:29:37 pm
Next time I have it apart, I will try with a halogen lamp
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 15, 2013, 08:12:34 pm
Next time I have it apart, I will try with a halogen lamp

If needed, i can send you a 600W HPS plus ballast. That should give you enough heat and light  :-DD

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 18, 2013, 02:06:21 pm


I found an interesting and enlightening document on Microbolometer design that had Inframetrics input. I have placed it under its own heading here:

https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg312455/#msg312455 (https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg312455/#msg312455)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 18, 2013, 10:30:48 pm
How exactly did you get the serial boot data off of the E4? Which pins, and with what PC adapter? Which serial format was it in?
38K4 baud on a pin on the unused FFC connector - I've not had time yet to figure out all the pins, but I2C, CPU reset and power button are on there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 19, 2013, 09:02:56 am
Pins I know so far - all I've done so far is test for input/output using pullup/pulldown resistor
 4 & 6 look good candidates for serial in.
Logic levels are 3.3v
Starting from end nearest to the unpopulated FFC connector
1 On/Off switch (to ground)
2 Power - Vbattery during run and charge - possibly via a FET switch as I didn't see continuity to bat terminal
3 Output
4 Input
5 Serial TXD 38K4
6 Input
7 0V
8 /Reset
9  Output
10 Input
11 Output
12 Input
13 Input
14 I2C SDA
15 I2C SCL
16 0V

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 19, 2013, 02:21:14 pm
Someone emailed me last week with info on hacking the i series but was very wary of releasing - apparently there is a power-up key combination that gets you into a config screen, from which you can enable networking and do stuff like changing the resolution of i3 to i7, disabling the text overlay and reducing display noise - don't have it to hand ATM but I think it was something like holding play+down key at startup.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on October 19, 2013, 02:58:04 pm
Damn, this is getting intense, sub'd, thanks Mike !  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 19, 2013, 03:25:53 pm
Edit: wrote I4 accidentely - I now corrected it to I3.

OHHHHH - if hacking an I3->I7 would be possible, I would purchase a I3 right away.
I doubt that hacking could be so unbelievable easy but  if Mike confirms during the weekend that there is a keyboard combination for enhancing resolution to 140x140 I am going to order one on monday.

The decision would be the same for me as with the Rigol product: only because of the available hacks I purchased DS2072 & DSA815-TG & DG4062: I am willing to spend some money for decent functionality but price/functionality- relation has to be a really good one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 19, 2013, 04:05:18 pm
Edit: wrote I4 accidentely - I now corrected it to I3.

OHHHHH - if hacking an I3->I7 would be possible, I would purchase a I3 right away.

Might be worth waiting to see what's possible on the E4, unless i3's are being heaviliy discounted. And no, I don't know anything yet before you ask, but haven't started seriously looking yet. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 19, 2013, 04:07:17 pm
Maybe worth splitting i-series discussion to a different thread to avoid confusion?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 19, 2013, 06:21:03 pm
We could almost do with a Thermal camera section on its own....there is a lot of interest in these units and mush fun to be had with them  ;)

I thought about starting a thread that will contain pictures taken of electronics using such units to show what is possibkle with teh different models and resolutions.

I would support the i series hacking or investigations being in a separate thread to avoid too much criss crossing within the flow of conversations.

I feel sure that there will be many interested in the whole range of topics and Mike has already proven that many wish to know what 'magic' goes on inside the modern TIC.

All very interesting and informative stuff  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 20, 2013, 08:10:33 am
At a glance there are a ton more DMM and scope threads than TICs, and they don't get their own section...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 09:45:37 am
But DMMs and scopes are BORING in comparison !  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 10:01:15 am
So if you hold the 'load' button down during startup.....
Quote
Bootloader 16.3 for ASCO (May  6 2013 11:41:42)
PMIC wake up: R5=40h E_SEQ_RDY  R6=1h E_nONKEY
PMIC status:  R1=1h nONKEY  R2=a0h COMP_DET GP_FB2
Fuel gauge check: res=1, voltage=3704
Reset reason (0x00000000): Power ON

Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel.

Initiating image update in 0 seconds.
Launching flash image  ...
+InitSpecifiedEthDevice
INFO: Trying to initialize the built-in USB/MSD...
MSD:: initialization
MSD: USB initialization completed

..and if you then plug it into the PC
Quote
USB Attach: High speed
Appears as a drive, but just a couple of uninteresting text files - probably looking for a firmware file to be saved

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 10:24:55 am
..and if you send a <space> to the UART during boot....
<quote>
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)

ACTIONS:
S) Save configuration
D) Download image now
L) Launch existing flash image now
R) Launch existing flash image now in SAFE (restricted) mode
E) Erase flash file system area
B) Erase OS Image area
</quote>
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack - unfortunately I've lost the email I had about that.
Safe mode doesn't do anything interesting
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 11:01:06 am
Oh Mike.....you LOST the hack email   :palm:

Or did you hear the distinctive thump-thump-thump of the black helicopters rotors overhead ?  :scared:

If you ask GCHQ or the NSA nicely, they may provide you with their copy of the email  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 11:23:01 am
Oh Mike.....you LOST the hack email   :palm:

Or did you hear the distinctive thump-thump-thump of the black helicopters rotors overhead ?  :scared:

If you ask GCHQ or the NSA nicely, they may provide you with their copy of the email  :-DD
Yep - hard disk on that laptop was failing around the time I got it - have tried to recover but no joy so far - may still be in there somewhere..

However.....
If you download the Ex firmware from Flir, and rename the .fif file to .cab  Many very interesting things appear.... Will take some time to examine....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 11:31:44 am
This looks interesting....
Quote
Restarting in high resolution mode/service mode
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 20, 2013, 11:40:36 am
Especially after seeing those erase options I hope you've dumped the flash image and stored it in a safe place for backup... for recovering from any accidental bricking. One of the first things I do when RE'ing a device is try to get a complete firmware image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 12:05:24 pm
Ahhhh, the infamouse computer hard disk crash..... what you have to ask yourself is.....did it just 'die' or was it Killed by the Dark Net  >:D

With regard to the proding of the firmware in your camera.  A back-up would be prudent if possible as from what I have learn't each camera is calibrated, and the calibration data is vital to correct image appearance. My PM570 has this important Microbolometer calibration data on the same Flash chip as the OS firmware. It uses a block addressable 28F16 for all its Flash storage needs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 03:41:33 pm
oooh look - I found another serial port...
Code: [Select]
List of all available commands (+ description)

  command /?     For more information on a specific command

?        List all available commands without description).
ALIAS    Sets, removes or shows aliases.
ATTRIB   Displays or changes file attributes.
BEEP     Beep the speaker.
CALL     Calls one batch program from another.
CD       Displays the name of or changes the current directory.
CHOICE   Waits for the user to choose one of a set of choices.
CLS      Clears the screen.
CMD      Starts a new instance of the FLIR command line interpreter.
COPY     Copies one or more files to another location.
DATE     Displays or sets the date.
DELETE   Deletes one or more files.
DIR      Displays a list of files and subdirectories in a directory.
ECHO     Displays messages, or turns command echoing on or off.
ERASE    Deletes one or more files.
EXIT     Quits the CMD.EXE program (command interpreter).
FOR      Runs a specified command for each file in a set of files.
FREE     (free) disc space.
GOTO     Directs the FLIR command line interpreter to a labeled line in
         a batch program.
HELP     Provides Help information for FLIR commands.
HISTORY  List all commands which has been used
IF       Performs conditional processing in batch programs.
MD       Creates a directory.
MKDIR    Creates a directory.
MOVE     Moves one or more files from one directory to another
         directory.
PATH     Displays or sets a search path for executable files.
PAUSE    Suspends processing of a batch file and displays a message.
POPD     Restores the previous value of the current directory saved by
         PUSHD.
PROMPT   Changes the command prompt.
PUSHD    Saves the current directory then changes it.
RD       Removes a directory.
REM      Records comments (remarks) in batch files.
REN      Renames a file or files.
RENAME   Renames a file or files.
REPLACE  Replaces files.
RMDIR    Removes a directory.
SCREEN   Move cursor and optionally print text.
SET      Displays, sets, or removes FLIR command line interpreter environment va
riables.
SHIFT    Shifts the position of replaceable parameters in batch files.
START    Starts a separate window to run a specified program or command.
         Executes command.
TIME     Displays or sets the system time.
TIMER    Allow the use of ten stopwatches.
TYPE     Displays the contents of a text file.
VER      Displays the FLIR command line interpreter and Windows CE version.

\>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 03:51:09 pm
Entry point into the command line for the Embedded Win CE computer ?.
Now how to extract and edit the boot batch files to change some settings  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 04:19:49 pm
Looks like a boot filesystem and a 'working' one. Tons of config/cal data. Looks like model assignment may be baked into the cal process to some extent.

Looking to see if I can copy files between the flash Filesystem and the filesystem that's visible through the USB. Any 
CE experts out there?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 06:17:13 pm
I just remembered something about WinCE not being able to access a volume when it was mounted via USB.
Once USB unplugged, you get another folder in the root directory - FlashIFS, so you can copy stuff on & off the device via this..!
http://youtu.be/sN3WK3IpH6E (http://youtu.be/sN3WK3IpH6E)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 20, 2013, 06:33:21 pm
Love the new boot splash!  ;D

And that other serial port also looks pretty damn interesting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 06:36:10 pm
This looks important....
Code: [Select]
\flashfs\system\appcore.d\config.d>type conf.cfg
#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E4"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 80
.caps.config.image.settings.IRheight int32 60
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool false
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool false
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool false
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool false
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool false
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool false
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool false
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool false
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool false
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool false
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool false
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool false
.caps.config.image.zoom.maxFactor double 1
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool false
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool false
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63903771
# CRC01 f032b591
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 06:42:15 pm
..and this similar but interestingly different file in a "service" directory, could be handy if it's looking at the CRCs.
Code: [Select]
# Generated at CONFIG_DATE CONFIG_TIME
#
.caps entry
.caps.config entry
.caps.config.name text "app prodconvconf_std"
.caps.config.revision text "999.9KaKaOnly"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRheight int32 240
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 20, 2013, 06:42:52 pm
This looks important....

Ooo...that does look important.  I had been looking through the update I downloaded from the FLIR website, but that folder is not included.  I did find this while trying to disassemble the .exe's in the firware...  Hopefully when my E4 arrives I'll be able to help more (ordered yesterday after convincing myself that it could one day be an E8).

Code: [Select]
usage: gethwtype [-h] [-v]
   -h   Help, show this text
   -v   verbose, show additional info

Identifies FLIR hardware that this utility runs on


Shows hardware as: <type><subtype>


Known hardwares:

Qx - unknown HW.
H1 - Fire camera
Y1 - T-MkII(Ylva) camera
Z3 - ASCO camera
Z2 - IVCO or ZOCO_BLUE camera
Z1 - ZOCO camera
S1 - SART camera
F1 - Liston camera
T1 - PT camera
R1 - A2 camera
X1 - Ixx
G1 - GF
P2 - P-Cam, BACP2
P1C- P-Cam, BACP rev >=08, UIP rev>=05
P1B- P-Cam, BACP rev >=08, UIP rev 03/04
P1A- P-Cam, BACP rev 07
A5B- A-Cam S, AHCO3 AND SB0601 30 Hz detector
A5A- A-Cam S, AHCO3 AND SB0601 9 Hz detector
A4B- A-Cam R, AHCO AND SB0601 30 Hz detector
A4A- A-Cam R, AHCO AND SB0601 9 Hz detector
A3B- A-Cam S, AHCO AND SB0601 30 Hz detector
A3A- A-Cam S, AHCO AND SB0601 9 Hz detector
A2B- A-Cam R, AHCO AND SB040 30 Hz detector
A2A- A-Cam R, AHCO AND SB040 9 Hz detector
A1B- A-Cam S, AHCO AND SB0401 30 Hz detector
A1A- A-Cam S, AHCO AND SB0401 9 Hz detector
Ex - T-Cam, unknown subtype (remote)
E4 - T-Cam, BACT2 AND ULIS detector
E3B- T-Cam, BACT2 AND SB0601 30 Hz detector
E3A- T-Cam, BACT2 AND SB0601 9 Hz detector
E2B- T-Cam, BACT AND SB0601 30 Hz detector
E2A- T-Cam, BACT AND SB0601 9 Hz detector
E1B- T-Cam, BACE rev 04-07 AND SB0401 30Hz
E1A- T-Cam, BACE rev 04-07 AND SB0401 9 Hz
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 06:54:18 pm
I don't need an E4 (or an E8) but I am rivetted to this thread. I love it when someone with a decent brain penetrates the OS of a sytem to increase its capabilities. Its like some sort of 'Black Op'  :-+

Great work Mike and you may get some additional help with Beaan-dip also working on the challenge.  :)

My FLIR PM5xx and 6xx series TIC's also have two serial ports. One for remote control, and one dedicated to factory use. I shall have to give the factory port a poke to see what is there  :)

I am not as skilled in this area as Mike but I would be interested to see whether I can enable the (already fitted) high temperaturefilter on my cameras. It just needs a software change to set it to 'present'. The menu then permits its use. I had better repair my remaining project unit first though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 07:21:13 pm
Quote
Ooo...that does look important.  I had been looking through the update I downloaded from the FLIR website, but that folder is not included.

It appears that the contents of flashfs are created at factory test/cal time.,and comprise a ton of config & cal data
flashBFS seems to be system, which looks like what is in the update file.
The file creation dates are also interesting.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 07:35:21 pm
Oops!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 07:58:14 pm
Editing that conf.cfg file doesn't seem to do anything...  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 08:01:44 pm
Quote
usage: gethwtype [-h] [-v]

Z3 - ASCO camera

returns Z3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 20, 2013, 08:08:06 pm
Editing that conf.cfg file doesn't seem to do anything...  :(

I wonder if this has anything to do with it... from /system/combtabs.d/combtab.appkit:

Code: [Select]
# combtab file for Astra
# This file should be present as different filenames in
# appkit, prodkit and OS project directory
TYPE combtab
#unique file identifier
DATE 2013-08-14
# Newest date for any combtab file identifies file to use.
# We cannot rely on file date because that might change when transfering files
KITS osimgkit, appkit, prodkit
# KITS line identifies resource branch for columns used in file. comma separated.
SHORT os, appkit, prodkit
# SHORT line identifies kits in the concatenated fullver resource. comma separated.
COMBINATIONS
# this line identifies that table starts.
# table lines comma separated as KITS above
# KITS osimgkit, appkit, prodkit
0.1.1, 1.0.1, 0.1.0, 0.1.0.1
0.2.2, 1.0.3, 0.2.0, 0.1.0.2
0.3.3, 1.0.5, 0.3.0, 0.1.0.3
0.4.3, 1.0.7, 0.3.0, 0.1.0.3
0.5.3, 1.0.7, 0.4.0, 0.1.0.3
0.5.4, 1.0.7, 0.4.0, 0.1.0.4
0.6.5, 1.0.9, 0.5.0, 0.1.0.5
0.7.6, 1.0.11, 0.6.0, 0.1.0.6
0.8.7,  1.0.11, 0.6.1,  0.6.1.7
0.9.7,  1.0.11, 0.6.2,  0.6.1.7
0.10.8,  1.0.11, 0.6.3,  0.6.1.8
0.11.8,  1.0.13, 0.6.3,  0.6.1.8
0.12.8,  1.0.13, 0.6.4,  0.6.1.8
0.13.8,  1.0.13, 0.6.5,  0.6.1.8
0.13.9,  1.0.13, 0.6.5,  0.6.1.9
0.14.9,  1.0.15, 0.6.5,  0.6.1.9
0.15.9,  1.0.15, 0.6.6,  0.6.1.9
0.15.10,  1.0.15, 0.6.6, 0.6.1.10
0.16.10,  1.0.17, 0.6.6, 0.6.1.10
0.17.10,  1.0.17, 0.6.7, 0.6.1.10
0.17.11,  1.0.17, 0.6.7, 0.6.1.11
0.18.11,  1.0.19, 0.6.7, 0.6.1.11
0.19.11,  1.0.19, 0.6.8, 0.6.1.11
0.19.12,  1.0.19, 0.6.8, 0.6.1.12
0.20.12,  1.0.21, 0.6.8, 0.6.1.12
0.21.12,  1.0.21, 0.6.9, 0.6.1.12
0.21.13,  1.0.21, 0.6.9, 0.6.1.13
0.22.13,  1.0.21, 0.6.10, 0.6.1.13
0.23.13,  1.0.23, 0.6.10, 0.6.1.13
1.0.1, 16.0.0, 1.0.0, 1.0.0.1
1.1.1, 16.0.2, 1.0.0, 1.0.0.1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 20, 2013, 08:12:17 pm
Maybe all of this could convince the thermal camera makers to reduce their prices. I can dream, right? ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 08:19:21 pm
Nope, it will teach them to install security in their design to prevent such firmware analysis  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 20, 2013, 08:25:44 pm
That kind of reminds me of when Texas Instruments went after graphing calculator hobbyists for breaking their signing keys (https://en.wikipedia.org/wiki/Texas_Instruments_signing_key_controversy). It didn't end too well (https://en.wikipedia.org/wiki/Streisand_effect) for the company.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 08:26:22 pm
Digging around UI files in the FW update suggests a hidden menu.
 
Quote
  <ui_model type="RetailModeSettingsModel" name="retailModeSettingsModel">
    <ui_model_item type="SettingItem" ID="OFF" label="ID_RETAIL_OFF" radio="true"/>
    <ui_model_item type="SettingItem" ID="ELECTRICAL" label="ID_RETAIL_ELECTRICAL_APPLICATIONS" radio="true"/>
    <ui_model_item type="SettingItem" ID="BUILDING" label="ID_RETAIL_BUILDING_APPLICATIONS" radio="true"/>
  </ui_model>

<ui_model type="HiddenServiceSettingsModel" name="hiddenServiceSettingsModel">
    <ui_model_item type="SettingItem" ID="USB_MODE" label="ID_SETUP_USB_MODE"

nextModel="usbModeSettingsModel" nextQML="SettingsPage.qml" settingType="entry" />
    <ui_model_item type="SettingItem" ID="EXPORT_INFO" label="ID_SETUP_EXPORT_INFO" />

    <ui_model_item type="SettingItem" ID="VERSION_INFO" label="ID_SETUP_VERSION_INFO" nextModel="versionSettingsModel" nextQML="SettingsPage.qml" settingType="entry" />
  </ui_model>
Quote
  <ui_model type="USBModeSettingsModel" name="usbModeSettingsModel">
    <ui_model_item type="SettingItem" ID="MSD" label="MSD" radio="true"/>
    <ui_model_item type="SettingItem" ID="UVC" label="UVC" radio="true"/>
    <ui_model_item type="SettingItem" ID="RNDIS" label="RNDIS" radio="true" />
    <ui_model_item type="SettingItem" ID="RNDIS_UVC" label="RNDIS and UVC" radio="true"/>
    <ui_model_item type="SettingItem" ID="RNDIS_MSD" label="RNDIS and MSD" radio="true"/>
    <ui_model_item type="SettingItem" ID="UVC_MSD" label="UVC and MSD" radio="true" />
    <ui_model_item type="SettingItem" ID="RNDIS_UVC_MSD" label="RNDIS, UVC and MSD" radio="true"/>
  </ui_model>
I believe RNDIS is the critical thing - from what I recall from the i7 email it allows virtual networking to either TELNET or similar into the console, or FTP access.
Incidentally re. comments about noise earlier  :

"Normal" mode :
Quote
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
"Service" mode :
Quote
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0


 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 08:28:13 pm
Editing that conf.cfg file doesn't seem to do anything...  :(

I wonder if this has anything to do with it... from /system/combtabs.d/combtab.appkit:

Code: [Select]
# combtab file for Astra
# This file should be present as different filenames in
# appkit, prodkit and OS project directory
TYPE combtab
#unique file identifier
DATE 2013-08-14
# Newest date for any combtab file identifies file to use.
# We cannot rely on file date because that might change when transfering files
KITS osimgkit, appkit, prodkit
# KITS line identifies resource branch for columns used in file. comma separated.
SHORT os, appkit, prodkit
# SHORT line identifies kits in the concatenated fullver resource. comma separated.
COMBINATIONS
# this line identifies that table starts.
# table lines comma separated as KITS above
# KITS osimgkit, appkit, prodkit
0.1.1, 1.0.1, 0.1.0, 0.1.0.1
0.2.2, 1.0.3, 0.2.0, 0.1.0.2
0.3.3, 1.0.5, 0.3.0, 0.1.0.3
0.4.3, 1.0.7, 0.3.0, 0.1.0.3
0.5.3, 1.0.7, 0.4.0, 0.1.0.3
0.5.4, 1.0.7, 0.4.0, 0.1.0.4
0.6.5, 1.0.9, 0.5.0, 0.1.0.5
0.7.6, 1.0.11, 0.6.0, 0.1.0.6
0.8.7,  1.0.11, 0.6.1,  0.6.1.7
0.9.7,  1.0.11, 0.6.2,  0.6.1.7
0.10.8,  1.0.11, 0.6.3,  0.6.1.8
0.11.8,  1.0.13, 0.6.3,  0.6.1.8
0.12.8,  1.0.13, 0.6.4,  0.6.1.8
0.13.8,  1.0.13, 0.6.5,  0.6.1.8
0.13.9,  1.0.13, 0.6.5,  0.6.1.9
0.14.9,  1.0.15, 0.6.5,  0.6.1.9
0.15.9,  1.0.15, 0.6.6,  0.6.1.9
0.15.10,  1.0.15, 0.6.6, 0.6.1.10
0.16.10,  1.0.17, 0.6.6, 0.6.1.10
0.17.10,  1.0.17, 0.6.7, 0.6.1.10
0.17.11,  1.0.17, 0.6.7, 0.6.1.11
0.18.11,  1.0.19, 0.6.7, 0.6.1.11
0.19.11,  1.0.19, 0.6.8, 0.6.1.11
0.19.12,  1.0.19, 0.6.8, 0.6.1.12
0.20.12,  1.0.21, 0.6.8, 0.6.1.12
0.21.12,  1.0.21, 0.6.9, 0.6.1.12
0.21.13,  1.0.21, 0.6.9, 0.6.1.13
0.22.13,  1.0.21, 0.6.10, 0.6.1.13
0.23.13,  1.0.23, 0.6.10, 0.6.1.13
1.0.1, 16.0.0, 1.0.0, 1.0.0.1
1.1.1, 16.0.2, 1.0.0, 1.0.0.1
I saw those - I think those numbers may be a reference to numbers in the eeprom.
BTW there is an I2C command in the console that appear to allow eeprom fiddling

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on October 20, 2013, 08:35:51 pm
I just remembered something about WinCE not being able to access a volume when it was mounted via USB.
Once USB unplugged, you get another folder in the root directory - FlashIFS, so you can copy stuff on & off the device via this..!
http://youtu.be/sN3WK3IpH6E (http://youtu.be/sN3WK3IpH6E)

 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 08:42:24 pm
I think this means the hidden menu comes after any item in the camera settings menu. Either a magic key in the menu, or a key combination at startup (probably hard start, not out of standby)
Quote

<ui_model type="CameraInfoSettingsModel" name="cameraInfoSettingsModel">
    <ui_model_item type="SettingItem" ID="MODEL" label="ID_SETUP_MODEL" value="*" nextModel="hiddenServiceSettingsModel"/>
    <ui_model_item type="SettingItem" ID="SERIAL" label="ID_SETUP_SERIAL" value="*" nextModel="hiddenServiceSettingsModel"/>
    <ui_model_item type="SettingItem" ID="PART" label="ID_SETUP_PART" value="*" nextModel="hiddenServiceSettingsModel"/>
    <ui_model_item type="SettingItem" ID="SOFTWARE" label="ID_SETUP_SOFTWARE" value="*" nextModel="hiddenServiceSettingsModel"/>
  </ui_model>

If someone has an E4 and some time on their hands, it would be worth trying some random key combinations at powerup, then going into the camera info screen & seeing if you can get deeper....
I can't immediately find any obvious keys in this menu with a normal startup
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 20, 2013, 09:00:44 pm
Mike,

My email provider keeps copies of my email on line for remote acess. Any chance your 'lost' i7 email still resides on your on-line  email arechive ? It might make your life a little easier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 09:21:23 pm
Oh Mike.....you LOST the hack email   :palm:

Or did you hear the distinctive thump-thump-thump of the black helicopters rotors overhead ?  :scared:

If you ask GCHQ or the NSA nicely, they may provide you with their copy of the email  :-DD
Yep - hard disk on that laptop was failing around the time I got it - have tried to recover but no joy so far - may still be in there somewhere..

However.....
If you download the Ex firmware from Flir, and rename the .fif file to .cab  Many very interesting things appear.... Will take some time to examine....

What, you don't have your emails backed up or hosted online?  :palm:
Mostly yes, but  it was on a laptop I use in the house for casual email & web access & must have accidentally deleted the message from server before downloading on main PC. I didn't pay too much attention at the time as it seemed rather specific to the i7 - was only a few days later I realised it could be more significant.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 20, 2013, 09:40:07 pm
Well, just in case you lose your posts in here and Dave's backups don't work ... not to worry, I'm mirroring this thread. And that does get backed up. :P

OT: was the big fat error when you edited the conf file? You could try editing it and then restoring the datestamp to the original date. Just in case they do something with the datestamp. Did you grab a serial dump during changed conf? I noticed a kind of expect count check in there for message counts. At start it said something along the lines of "expecting N messages" and then near the end it confirmed having received precisely N of those messages.

Also, does anyone have any direct links to E4 and E8 firmware downloads?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 09:44:17 pm
OT: was the big fat error when you edited the conf file?
No - I was messing around running random executables.
Quote
Did you grab a serial dump during changed conf?
Doesn't look obviously different - didn't look in fine detail - no error messages or anything, either with an edited file (=possible  bad crc) or swapping the service one in..
Quote
Also, does anyone have any direct links to E4 and E8 firmware downloads?
Ex is on the Flir site (need to register) - has a silly javascript link so can't link direct.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 10:44:53 pm
Some possibly interesting snippets in this file
http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)
For a different model, but recent, and the web  interface matches some things found in the web folder of the Ex FW update file

Also possibly interesting stuff in the file linked in the above doc  - documents some of the WinCE  executables
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 20, 2013, 11:33:13 pm
Here are the pinouts I've determined so far on the hidden bottom connector of the i7, for those interested. Is such a connector present on the E-series?
No -the connector is an internal FFC con.
You may find a second UART - on bootup it only throws out a few chars.
Also worth a good look through the FW update file, if available.

The PDF linked from the PDF I found above is very interesting.
All the settings are in "resources" a la Windows registry. These appear related to the various conf files, but not clear in which direction - it may be the files are derived from the resource settings or vice versa.
Look at the resource related commands in that second PDF. Beware rls -r recursive option - it spits out a LOT of data!
Unfortunately rset doesn't appear to work on image size, but have been able to set user settings using it.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 20, 2013, 11:47:45 pm
Unfortunately rset doesn't appear to work on image size, but have been able to set user settings using it.
I also just went over the telnet commands, and was about to suggest rset. ;) . Too bad that is a nogo.

For future reference I grabbed all the firmware I could find for various models. Always handy to compare the .fif contents.

For those interested, you can grab it here (ex_pn639_v1.18.7 is for Ex series):
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ix_v4.3.2_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ix_v4.3.2_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ixx_bxx_v2.19.1_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ixx_bxx_v2.19.1_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_exx_pn490_v2.23.14_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_exx_pn490_v2.23.14_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_exx_pn645_pn646_v3.8.5_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_exx_pn645_pn646_v3.8.5_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_kxx_v1.19.9_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_kxx_v1.19.9_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t420-t440_v1.31.18_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t420-t440_v1.31.18_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t6xx_v2.34.17_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t6xx_v2.34.17_update_pack.zip)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_gf3xx_v2.15.10_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_gf3xx_v2.15.10_update_pack.zip)
http://support.flir.com/SwDownload/Assets/ATS/CameraFirmware/UpdateG33.zip (http://support.flir.com/SwDownload/Assets/ATS/CameraFirmware/UpdateG33.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 21, 2013, 12:21:36 am
So, I was digging through more of the update.  Saw this...not sure if it refers to just image files or all of them, but it has a switch for forcing a file to load with a broken CRC...

Code: [Select]
usage: ftest [-q] [-n nr] [-e] [-x] [-i imageid] [-g groupid] [-s siteid]           
             [-l 0|1] [-t <tag>:<subtag>:<rev>:<file>] [-j <file>] [-d <tag>]           
             [-m] [-f] [-c <file>] [-r <x>:<y>:[e:]<file>] [-a <file>]           
             [-v <file>] [-b <file>] <image1> [image2] ...

  -q   quiet mode, only print error messages (on stderr)                                                                                                                                                                                                                         
  -n   read file <nr> in seq file, or \"iter\" to iterate whole file                                                                                                                                                                                                             
  -e   extract parts to file                                                                                                                                                                                                                                                     
  -x   extract each image in a sequence                                                                                                                                                                                                                                           
  -i   replace EXIF image ID with <imageid>, \"rand\" creates new                                                                                                                                                                                                                 
  -g   replace EXIF group ID with <groupid>, \"rand\" creates new                                                                                                                                                                                                                 
  -s   replace EXIF site ID with <siteid>, \"rand\" creates new                                                                                                                                                                                                                   
  -l   replace stitchLast with 0 or 1                                                                                                                                                                                                                                             
  -t   replace/add <tag> with data from <file> at revision <rev>                                                                                                                                                                                                                 
  -j   replace JPEG pixels with data from <file>                                                                                                                                                                                                                                 
  -d   delete <tag> from file                                                                                                                                                                                                                                                     
  -m   force map stats calc on image                                                                                                                                                                                                                                             
  -f   force loading by ignoring broken CRCs                                                                                                                                                                                                                                     
  -c   create color JPEG <file> from FFF data                                                                                                                                                                                                                                     
  -r   rescale to size <x>x<y> in <file> (add :e: for exact rescale)                                                                                                                                                                                                             
  -a   resave using original format to <file>                                                                                                                                                                                                                                     
  -v   save IR pixels as temp values as csv data in <file>                                                                                                                                                                                                                       
  -b   save image1, image2,... to seq <file> (.csq = compressed) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 21, 2013, 12:30:58 am
Here are the pinouts I've determined so far on the hidden bottom connector of the i7, for those interested. Is such a connector present on the E-series?
BTW I'm pretty sure the i7 hack was using rset - image resolution, noise turned off, so if you can find a console UART or USB networking mode you may be in.
The hidden menu was 2 keys, one of which was one of the arrows, pressed after powerup.

As the front keypad acts like a keyboard ( You can fake buttons with bt.exe and enter/arrows navigate WinCe menus clears menus ), it may be a case of hitting keys at a certain time rather than hplding down from powerup.


rset does have an optional password so could be that making it fail.

Still unsure of the relationship between resources and the files.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 21, 2013, 12:31:09 am
Looking at facet_Z3.rcc would seem to suggest they are using Qt for their gui. Which is a good thing, as Qt doesn't suck. :P And it would also seem to suggest that at least that part was made in Sweden.

As for crc ... I noticed in camera.cmd it does this:
Code: [Select]
Check if crc have changed
kitcrc -c \FlashBFS\system\kits.d\appkit.rev
[*FAIL*][$GOTO failed2]
kitcrc -c \FlashBFS\system\kits.d\prodkit.rev
[*FAIL*][$GOTO failed2]

So you might be able to use kitcrc to adjust things to your liking. At any rate, camera.cmd is full of inspiration. ;)

Duh. blind. of course they use Qt.
Code: [Select]
./FlashBFS/system/QtDeclarative4.dll
./FlashBFS/system/QtCore4.dll
./FlashBFS/system/QtGui4.dll
./FlashBFS/system/QtNetwork4.dll
./FlashBFS/system/QtScript4.dll
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 21, 2013, 12:58:44 am
rset does have an optional password so could be that making it fail.

appcore.exe has a string Reference to "Lock, Unlock: 1235"...possibly related?

Let me know if I'm just clogging up the thread with useless junk...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 21, 2013, 05:04:08 am
From http://www.termsys.demon.co.uk/vtansi.htm (http://www.termsys.demon.co.uk/vtansi.htm)
ANSI/VT100 Terminal Control Escape Sequences
Query Cursor Position   <ESC>[6n

    Requests a Report Cursor Position response from the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 21, 2013, 09:03:29 am
Here are the pinouts I've determined so far on the hidden bottom connector of the i7, for those interested. Is such a connector present on the E-series?
BTW I'm pretty sure the i7 hack was using rset - image resolution, noise turned off, so if you can find a console UART or USB networking mode you may be in.
The hidden menu was 2 keys, one of which was one of the arrows, pressed after powerup.

As the front keypad acts like a keyboard ( You can fake buttons with bt.exe and enter/arrows navigate WinCe menus clears menus ), it may be a case of hitting keys at a certain time rather than hplding down from powerup.


rset does have an optional password so could be that making it fail.

Still unsure of the relationship between resources and the files.

Found another TX port, which spits out " \> [6n" consistently on hard boot. Can't get any of the other ports to respond, though.
That looks like the console port - run a terminal program and send carriage returns to pins to find RXD until you see that prompt repeating.
The E4 gives a short version string at boot so may be slightly different :
Quote
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 21, 2013, 10:37:47 pm
Doesn't look like those .cfg files do much - it will start with the file not present - suspect they are debug output etc.
Looking at what  & when it reads from eeprom. Looks like most records have a 2 byte check at the end - anyone good at CRC-spotting? CRC in bold.
Quite a few sections get read multiple times - I've omitted duplicates
AEW is eeprom address
D0W is realtime clock

 Following read at power-up only
Quote
Time   Restart   Address   Data
-388.0us      AEW   80
-40.78us   X   AFR   0B 91 39 00 00 00 00 00 00 00 00 00 00 00 00
1.860s      AEW   40
1.860s   X   AFR   54 31 39 38 32 38 33 00 00 00 31 39 39 36 37 37 33 30 00 00 31 30 00 00 00 00 00 00 00 00 F7
1.900s      D0W   0
1.901s   X   D1R   27 54 23 01 21 10 13  ; RTC
1.930s      D0W   0
1.931s   X   D1R   27 54 23 01 21 10 13
2.246s      AEW   0
2.246s   X   AFR   46 4C 49 52 20 45 34 00 00 00 00 00 00 00 00 00 00 00 00 00 36 33 39 30 31 2D 30 31 30 31 00 00 00 00 00 00 36 33 39 30 33 37 37 31 00 00 32 30 31 33 2D 31 30 2D 30 32 00 00 30 31 00 00 DC C7
4.419s      AEW   C0
4.419s   X   AFR    50 00 3C 00 00 06 00 00 00 00 00 00 00 00 8C 06
50 00 = 80 decimal, 3C 00 = 60 decimal - VERY INTERESTING!!! also 60Hz/6=10 - could the 06 be framerate?

Following read at app restart from console, and after above at powerup
Quote
1.233s      AEW   A0
1.234s   X   AFR   54 31 39 38 33 30 34 00 00 00 36 33 38 30 34 35 38 35 00 00 30 31 00 00 FF FF FF FF FF FF FB 98
1.251s      AEW   0
1.252s   X   AFR   46
1.254s      AEW   D0
1.255s   X   AFR   FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
1.482s      AEW   C0
1.483s   X   AFR   50 00 3C 00 00 06 00 00 00 00 00 00 00 00 8C 06

3.661s      AEW   0
3.662s   X   AFR   46 4C 49 52 20 45 34 00 00 00 00 00 00 00 00 00 00 00 00 00 36 33 39 30 31 2D 30 31 30 31 00 00 00 00 00 00 36 33 39 30 33 37 37 31 00 00 32 30 31 33 2D 31 30 2D 30 32 00 00 30 31 00 00 DC C7
3.673s      AEW   0
3.674s   X   AFR   46
3.675s      AEW   0
3.676s   X   AFR   46 4C 49 52 20 45 34 00 00 00 00 00 00 00 00 00 00 00 00 00 36 33 39 30 31 2D 30 31 30 31 00 00 00 00 00 00 36 33 39 30 33 37 37 31 00 00 32 30 31 33 2D 31 30 2D 30 32 00 00 30 31 00 00 DC C7




19.86s      AEW   A0
19.86s   X   AFR   54 31 39 38 33 30 34 00 00 00 36 33 38 30 34 35 38 35 00 00 30 31 00 00 FF FF FF FF FF FF FB 98


29.66s      AEW   40
29.66s   X   AFR   54 31 39 38 32 38 33 00 00 00 31 39 39 36 37 37 33 30 00 00 31 30 00 00 00 00 00 00 00 00 F7 A8


hang on a minute.... I think I spotted the check method 
50 00 3C 00 00 06 00 00 00 00 00 00 00 00 8C 06

50 00
3c 00
00 06
00 00
....
00 00
Check is 8C 06
It's a simple 16 bit checksum FFS!!!!

Let's check with another  one to see how the carry works..
54 31
39 38
32 38
33 00
00 00
31 39
39 36
37 37
33 30
00 00
31 30
00 00
00 00
00 00
00 00
F7 A8

Add them up  (Lsb:Msb) - 1A8F7 - Yesss!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 21, 2013, 10:51:07 pm
Hmmm - changed eeprom and it changed it back....!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on October 22, 2013, 12:02:03 am
Hmmm - changed eeprom and it changed it back....!

That's... odd. It must be cross-checking with something on the flash so you can't just change one place.

But if it's just going to overwrite the eeprom, why even have the eeprom?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 22, 2013, 12:50:57 am
That looks like the console port - run a terminal program and send carriage returns to pins to find RXD until you see that prompt repeating.
The E4 gives a short version string at boot so may be slightly different :

No carriage return, but sending anything to the port above the TX2 port (likely RXD) makes it appear on the serial monitor -- that doesn't happen with any of the other ports. Question marks don't do anything -- perhaps the [6n is asking the device what position the keyboard is in, so that it can trigger CLI mode?

Had to enable NL & CR in terminal!  :palm:

For comparison, remember this is from i7, not E4!

Code: [Select]
\>?

?         alias     attrib    beep      bootdeletecall      cd        chdir
choice    cls       copy      date      del       delete    delay     dir
dirs      echo      echos     echoerr   echoserr  erase     exit      for
free      goto      help      history   if        irqlog    memory    md
mkdir     move      path      pause     popd      prompt    pushd     rd
rem       ren       rename    restart   replace   rmdir     rcd       rpwd
rls       rset      rclone    rcreate   rdelete   rdump     rfind     rpatch
rreload   screen    set       shift     start     time      timer     type
ver       

\>help

List of all available commands (+ description)

  command /?     For more information on a specific command

?        List all available commands without description).
ALIAS    Sets, removes or shows aliases.
ATTRIB   Displays or changes file attributes.
BEEP     Beep the speaker.
CALL     Calls one batch program from another.
CD       Displays the name of or changes the current directory.
CHOICE   Waits for the user to choose one of a set of choices.
CLS      Clears the screen.
CMD      Starts a new instance of the FLIR command line interpreter.
COPY     Copies one or more files to another location.
DATE     Displays or sets the date.
DELETE   Deletes one or more files.
DIR      Displays a list of files and subdirectories in a directory.
ECHO     Displays messages, or turns command echoing on or off.
ERASE    Deletes one or more files.
EXIT     Quits the CMD.EXE program (command interpreter).
FOR      Runs a specified command for each file in a set of files.
FREE     (free) disc space.
GOTO     Directs the FLIR command line interpreter to a labeled line in
         a batch program.
HELP     Provides Help information for FLIR commands.
HISTORY  List all commands which has been used
IF       Performs conditional processing in batch programs.
MD       Creates a directory.
MKDIR    Creates a directory.
MOVE     Moves one or more files from one directory to another
         directory.
PATH     Displays or sets a search path for executable files.
PAUSE    Suspends processing of a batch file and displays a message.
POPD     Restores the previous value of the current directory saved by
         PUSHD.
PROMPT   Changes the command prompt.
PUSHD    Saves the current directory then changes it.
RD       Removes a directory.
REM      Records comments (remarks) in batch files.
REN      Renames a file or files.
RENAME   Renames a file or files.
REPLACE  Replaces files.
RMDIR    Removes a directory.
SCREEN   Move cursor and optionally print text.
SET      Displays, sets, or removes FLIR command line interpreter environment variables.
SHIFT    Shifts the position of replaceable parameters in batch files.
START    Starts a separate window to run a specified program or command.
         Executes command.
TIME     Displays or sets the system time.
TIMER    Allow the use of ten stopwatches.
TYPE     Displays the contents of a text file.
VER      Displays the FLIR command line interpreter and Windows CE version.


Time to explore resources with rls and rcd...


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 22, 2013, 12:53:34 am
fvd.exe and fvd.dll look interesting - I think this is the first thing run at boot time - contains the downsampling message as well as references to eeprom checksum error.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 22, 2013, 01:15:30 am
Hmmm - changed eeprom and it changed it back....!

Here's hoping it didn't just increment a tamper counter.  Strike 1  hehe.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 22, 2013, 09:04:21 am
Code: [Select]
\>rls system

MACaddr         "censored"
eeprom                           
focus                           
fvd                             
powerButton                     
restart                    false
restartDelay                   1
sync                          ""
tempsens                         
tempsensActive              true
tempsensError              "0 0"
tempsensValid               true
time                             
usbmode                    "MSD"
webpasswd                "IRCAM"

\>

Still trying to figure out how to use rls/rcd...
The resource stuff like a tree. rcd is a convenient way of sitting at a deep level so you don't need to specify the full path.
e.g. to see teh time value you can do
rls system.time
or rcd system
rls time

rls [path] -r will show the whole  subtree
-l shows more info including attributes

rset allows values to be changed once you've used rls to find the key and format

rdump allows a tree to be dumped to a file

most of these utils have some inbuilt help using /?

Also have a look in the flashBFS\system dir for other executables.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 22, 2013, 10:07:51 am
Hmmm - changed eeprom and it changed it back....!

That's... odd. It must be cross-checking with something on the flash so you can't just change one place.

But if it's just going to overwrite the eeprom, why even have the eeprom?!
Another possibility is that there is data stored in the sensor itself (possibly in OTP), as is often done for regular camera chips.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 22, 2013, 01:29:42 pm
I accidentely stumbled upon the attached file.
It might be helpful in some way (commands/parameters), it might not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 22, 2013, 02:54:32 pm
I accidentely stumbled upon the attached file.
It might be helpful in some way (commands/parameters), it might not.
Yes - that's the one linked from the PDF I mentioned earlier - some parts are out of date but some useful snippets in there
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 22, 2013, 03:26:02 pm
wonder how difficult it would be to decompile the *.exe and figure out what's happening when the downsampling messages are printed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 22, 2013, 04:18:04 pm
wonder how difficult it would be to decompile the *.exe and figure out what's happening when the downsampling messages are printed?
fvd.exe and fvd.dll aren't very big, so should be fairly doable, given a decent cross-referencing diassember
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 22, 2013, 06:33:24 pm
It is an ARM processor though so availability of those for EXE files may be scarce, probably IDA Pro will do it but I don't know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AF6LJ on October 22, 2013, 10:09:13 pm
Good Video, I enjoyed watching it.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 22, 2013, 11:57:37 pm
I was looking at them with the demo of IDA Pro. It does have the option for ARM but you can't access it in the demo...it would do it as a generic binary and I got what looked like assembly, but I'm not good enough to make heads or tails of it. I was just digging out the strings from the exe's in the update and posting them earlier since I still don't have my camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 24, 2013, 02:16:49 am
Okay,

I'm not good enough to make heads or tails of a lot of what I'm seeing here.  I don't have a full version of IDA Pro so I can't disassemble for ARM, but I can as a generic binary.  I'm still learning but maybe this will mean something to someone else.  Attached are the results of IDA's disassembly and code generation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 24, 2013, 06:34:32 am
The free/demo version of ida pro only do windows 32 x86 code.
At best you can read the strings in the binary.

Im sure some others around here have the pro version, required for rigol hacks.

Dont know any arm decompilers off the top of my head.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ed.Kloonk on October 24, 2013, 08:17:02 am
Sorry for being late to the party. Wanted to say thanks Mike for this vid and the review. And the x-ray machine vid.

I watch them here and there after downloading them (slowly) and forget to say ta!

 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 08:30:37 am
I've been silently following the E4 related threads for some time. Must say, juicy information :)

I don't have an E4 (yet... -  that may change :) ) but I've tried to put together some bits of information that I've found around in this thread. IMHO the simple way to go is using the Web Interface (you can access most, if not all, camera settings from there - including a special Service Menu) - all menus conveniently listed in FlashBFS/system/web/ and sub-folders

..and if you send a <space> to the UART during boot....
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack


As Mike said, if 7) is changed to USB RNDIS (and may be that IP address and subnet mask also need to be set manually and DHCP disabled - if the PC doesn't assign them automatically over USB), the web service can be accessed.

Now, as for the A310 FLIR (the attached PDF with Technical Notes), it must be password protected, but I see that the password is already known: webpasswd "IRCAM"

Therefore (stating the obvious) the login info should be:
Username: flir
Password: IRCAM

Could someone try this?

P.S. With the risk of being Cpt. Obvious, I just want to be involved in this and help if I can do so ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:11:55 am
Okay,

I'm not good enough to make heads or tails of a lot of what I'm seeing here.  I don't have a full version of IDA Pro so I can't disassemble for ARM, but I can as a generic binary.  I'm still learning but maybe this will mean something to someone else.  Attached are the results of IDA's disassembly and code generation.

Not really useful unfortunately - it really needs a disassembler that knows the instruction set, even if it doesn't understand the .EXE structure
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:17:57 am
I've been silently following the E4 related threads for some time. Must say, juicy information :)

I don't have an E4 (yet... -  that may change :) ) but I've tried to put together some bits of information that I've found around in this thread. IMHO the simple way to go is using the Web Interface (you can access most, if not all, camera settings from there - including a special Service Menu) - all menus conveniently listed in FlashBFS/system/web/ and sub-folders

..and if you send a <space> to the UART during boot....
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack


As Mike said, if 7) is changed to USB RNDIS (and may be that IP address and subnet mask also need to be set manually and DHCP disabled - if the PC doesn't assign them automatically over USB), the web service can be accessed.

Now, as for the A310 FLIR (the attached PDF with Technical Notes), it must be password protected, but I see that the password is already known: webpasswd "IRCAM"

Therefore (stating the obvious) the login info should be:
Username: flir
Password: IRCAM

Could someone try this?

P.S. With the risk of being Cpt. Obvious, I just want to be involved in this and help if I can do so ;D

Is there something you need to do to get a PC (XP or Win7) to recognise and talk to a RNDIS device ? I tried setting this option but the PC didn't show anything other than the normal MSD and camera USB devices.

I am fairly convinced there is a secret menu that allows access to this setting without needing to access the serial port, probably a a magic key combination.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 09:30:22 am
Yes, it appears there's a FLIR provided IP over USB driver. I'm digging up for that now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:38:58 am
This looks useful http://carolos.za.net/software.html (http://carolos.za.net/software.html)
Quote
   

ABOUT ChARMeD:
ChARMeD is a Windows Mobile / Pocket PC /  Win CE (for ARM CPUs) Disassembler and Assembler

The name ChARMeD stands for:
  Carolo's Hexadecimal ARM Editor and Disassembler

FEATURES:

·    Disassemble a Windows CE Executable for ARM CPUs.
·    Assemble instructions in ARM Assembler.
·    Upload modified file to Windows CE Device.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 10:09:57 am
Rats! ChARMed doesn't seem to understand this flavour of ARM... Anyone have access to a full version of IDA PRO?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on October 24, 2013, 10:20:30 am
I am fairly convinced there is a secret menu that allows access to this setting without needing to access the serial port, probably a a magic key combination.

Not an expert, thinking of that since now there is a possibly working dis-assembler + with that believe, maybe it might be a time saver to focus only at the IO related routines/code section than handles the keys and it's keys lookup table ?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 24, 2013, 10:42:09 am
Rats! ChARMed doesn't seem to understand this flavour of ARM... Anyone have access to a full version of IDA PRO?

Jups, I have an old IDA Pro 6.2.1 running on my Mac and I found an even older 6.1.0 on my windows laptop.
Not that I am anywhere good at disassembling ARM code, but drop me a PM with a link to these files and I'll give it a shot.

Regards,

EqX
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:21:56 am
 I think I've now worked out all the I2C devices :
0x92 Temperature sensor
0xD0 Realtime clock
0xAE EEPROM
0xAA BQ27510 battery manager

Only just figured out the last one as the device marking was only a partial number. This has the capability of hiding data so not impossible that it might be involved in more than battery management  - not looked at what it's reading from it & when yet.

The visible camera will also have an I2C interface but it's not directly connected to the main I2C bus - may be via a level shifter as these modules are usually on 1.8v levels, or on a different bus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 24, 2013, 11:39:50 am
Rats! ChARMed doesn't seem to understand this flavour of ARM... Anyone have access to a full version of IDA PRO?
It's a mix of Thumb (http://en.wikipedia.org/wiki/ARM_architecture#Thumb) mode and regular. ChARMed only supports regular ARM.

Anyway I took a look with an old version of IDA (not all ARM instructions supported so there's valid code mixed with bits of rubbish) and it looks like it might be reading resolution etc. from the sensor itself over I2C...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 11:45:36 am
I'm sorry it took some time (I still have to work on other stuff meantime). I've found the drivers! I can clearly confirm these contain the FLIR RNDIS driver (I've studied the drivers MSI content and found among other drivers the RNDIS driver).

Mike, could you please install the Device Drivers, do the USB RNDIS setting and see if you get the device discovered in Windows? You find the drivers at FLIR support page on Download Software tab (Product: PC Software (Thermography) -> FLIR Device Drivers).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 12:00:01 pm
Anyway I took a look with an old version of IDA (not all ARM instructions supported so there's valid code mixed with bits of rubbish) and it looks like it might be reading resolution etc. from the sensor itself over I2C...
That's the next thing on my list to look at when I get time - I saw some I2C traffic I couldn't figure out which turned out to be the power manager, but there is almost certainly another I2C bus used by the visible cam, which I'll find and probe to see if there are any other devices on it, and if it's connected to the sensor connector.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 01:43:41 pm
From the Ex firmware, using the resources in the web folder and some fiddling around I was able to make the index.asp run on PC  just to have an overview of the menu items available in the web interface. See attached image.

I'm pretty sure the EEPROM->Edit Camera Information menu allows changing the 'Camera part number' to the one of E8 for instance. There seems to be a locking mechanism in place for EEPROM editing (protected by password) - I don't know yet how it's implemented but it may have to do with Mike's attempt to directly modify the EEPROM content: Mike: Hmmm - changed eeprom and it changed it back....! See also attached a picture of the EEPROM->Edit Camera Information.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 02:00:42 pm
I'm pretty sure the EEPROM->Edit Camera Information menu allows changing the 'Camera part number' to the one of E8 for instance. There seems to be a locking mechanism in place for EEPROM editing (protected by password) - I don't know yet how it's implemented but it may have to do with Mike's attempt to directly modify the EEPROM content: Mike: Hmmm - changed eeprom and it changed it back....! See also attached a picture of the EEPROM->Edit Camera Information.
My guess is the lock/unlock is a simple mechanism to prevent accidental changes - either a value in EEPROM or a password in the firmware.

Had a very quick scan trhough a disassembly of FVP.DLL, and there is some code that does a 16 bit checksum of an area of memory under certain circumstances puts 80 and 60 in specific locations, so probably some default behaviour if anything isn't correct. Need to look in more detail at what gets read from eeprom when..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 02:17:21 pm
Thanks for the insight on that! I'll try to do some disassemblying too, maybe I can find anything useful.

What's your opinion on the web interface -> EEPROM -> Edit Camera Information -> Camera part number, edit to E8 part number? Do you think that would work? While some dissasebly work could shed a light on how that info is used (I'll try to find out), what's your guess?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 02:55:19 pm
I have tried changing E4 to E8 in the eeprom with no effect.

I have found code (100033AC for those following along) that reads 16 bytes from the EE, checksums it and if sums OK, stores the EEPROM values somewhere , and if not stores 80 and 60 in the same locations. Still looking at other eeprom related code. I think the 6 near the resoltion data is also significant - seems to correlate with the "downsampling setting" vales displayed at boot.

I only had a very quick try at changing the ee so could be I got the sum wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 24, 2013, 03:00:14 pm
I have tried changing E4 to E8 in the eeprom with no effect.

I have found code (100033AC for those following along) that reads 16 bytes from the EE, checksums it and if sums OK, stores the EEPROM values somewhere , and if not stores 80 and 60 in the same locations. Still looking at other eeprom related code. I think the 6 near the resoltion data is also significant - seems to correlate with the "downsampling setting" vales displayed at boot.

I only had a very quick try at changing the ee so could be I got the sum wrong.

Assuming that you made a backup of the EEProm: Did you try to erase the thing? Just speculating here, but maybe the contents will be built from the config files you had fiddled with earlier.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 24, 2013, 03:08:35 pm
I will be on vacation now for a week ..... hoping that you guys find a solution in the meantime. :-+
If not; I can offer to lend an E8 for a day or two and read out the eeprom for you, assuming that it will help.
I can of course readout even more from the E8, but will need some help. If there is no progress here when I return, I will write a PM to Mike then.
I keep my fingers crossed.

Peter
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 03:22:53 pm
I will be on vacation now for a week ..... hoping that you guys find a solution in the meantime. :-+
If not; I can offer to lend an E8 for a day or two and read out the eeprom for you, assuming that it will help.
I can of course readout even more from the E8, but will need some help. If there is no progress here when I return, I will write a PM to Mike then.
I keep my fingers crossed.

Peter

Info from an E8 would certainly be very useful - it can all be read out with a serial connection after removing 2 screws, unless we can find the hidden menu and get the USB stuff happenning and get a console prompt over it..!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 04:30:57 pm
Hmmm. found code that looks for the string "T198389" from I2C address 0XA0, and if found "SB0801 detector   found " else "ULIS detector found"

Don't have the bootup text to hand to see which the E4 returns

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 07:51:22 pm
Interesting snittet...

FLIR::CObfuscatedStringResource::Obfuscate(class FLIR::CResourceValue const &, class FLIR::CResourceValue   &, enum    FLIR::CObfuscatedStringResource::OBFUSCATE_MODE_T)
.idata:0005B364   IMPORT


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 08:54:53 pm
Looking at the USB RNDIS stuff.
Installed FLIR drivers as mentioned earlier.
No joy changing the USB mode in the boot menu, but at the console,
usbfn RNDIS
appears to do the trick - the PC popped up a USB driver prompt, and "install automatically" made it happy.
This setting is volatile.
usbfn Mass_Storage_Class
switches back to a PC-accessable drive,  can't see a way to run both at the same time.

IP address was 192.168.0.2 ( not what I had set in boot menu), as shown by ipconfig at boot menu
Web browser pointed at 192.168.0.2 gives this screen.

Telnet takes you to the console, and appears to allow access to everything that the serial console does, e.g. the I2C command to fiddle with eeprom.  8)

There is an FTP client, but the flir/3vlig login doesn't work


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 09:13:59 pm
Heh, that's good news Mike! Now if we only knew what needs to be changed to make it an E8 :)

Meanwhile I've spent some time trying to find out how to get in the Hidden Service Settings menu (to be able to enable USB RNDIS without opening the camera). I think "facet_Z3.rcc" is the file to check for key-combination parsing. I'm still trying to find out a way to decode parts of it.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:24:59 pm
Heh, that's good news Mike! Now if we only knew what needs to be changed to make it an E8 :)

Meanwhile I've spent some time trying to find out how to get in the Hidden Service Settings menu (to be able to enable USB RNDIS without opening the camera). I think "facet_Z3.rcc" is the file to check for key-combination parsing. I'm still trying to find out a way to decode parts of it.
Bear in mind it may also be a magic key combination during startup that enables the menu in the UI - this was the case with the i7 .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 09:26:36 pm
Another thing. It would be really interesting (at least for me if not for others also) what would happen if you enable the UVC mode for USB. Does this result in a USB video stream of thermographic video (basically like webcam)? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 09:34:21 pm
Heh, that's good news Mike! Now if we only knew what needs to be changed to make it an E8 :)

Meanwhile I've spent some time trying to find out how to get in the Hidden Service Settings menu (to be able to enable USB RNDIS without opening the camera). I think "facet_Z3.rcc" is the file to check for key-combination parsing. I'm still trying to find out a way to decode parts of it.
Bear in mind it may also be a magic key combination during startup that enables the menu in the UI - this was the case with the i7 .

I would say it has to be in this file as all QMLs (including SettingsPage.qml) and menu navigation are generated from this .rcc file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:35:39 pm
Correction : FTP login flir / 3vlig does work, but not on all FTP clients - Windows command line FTP works, FTPsurfer doesn't

BTW flir/IRCAM doesn't work on web interface
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 09:37:06 pm
Another thing. It would be really interesting (at least for me if not for others also) what would happen if you enable the UVC mode for USB. Does this result in a USB video stream of thermographic video (basically like webcam)?
You can do that with the standard, unmodified product, as mentioned in the review.  Just plug in & it appears as a digital camera device & you can record video. Framerate is a bit messed up but it does work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 09:38:37 pm
Oops, my bad! I may have skipped parts of the review...  :-[
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 24, 2013, 10:20:56 pm
Hey Mike,

Just to let you know that your tear down video and investigation is being watched closely by comapnies in the TIC industry. Three separate technical officers have mentioned it to me recently  ;)   You are causing a bit of a stir  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 24, 2013, 10:26:12 pm
If you're going to void the warranty, you might as well go the whole nine yards. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 10:29:09 pm
OK Useful-ish Hack stage 1 is achieved.

UART console : usbfn RNDIS

Plug USB into PC (having loaded Flir device drivers from http://flir.custhelp.com/app/account/fl_download_software, (http://flir.custhelp.com/app/account/fl_download_software,) PC softare (Thermography) -> device drivers)

Web login to service menu (192.168.0.2) with user flir, PW 3vlig

Enable service mode - reboots camera into service mode (takes about 45 secs)

Some E8 functions now available -Auto hotspot, Auto coldspot, more colour pallettes

Oh, and.....
320x240 resolution

Boot text in service mode
Quote
FVD_Init: Downsampling setting: 0x00
FVD_Init: re-read the hardware information x: 320, y: 240

On next  power-up boot :

Quote
APPLAUNCHER: Starting usb charge App
ProgressApp expecting 301 events
FVD_Init: Downsampling setting: 320 240
Timeprint (3518)
POST 20131025 00:08:42 -      appcore.exe: Application started
....
POST 20131025 00:08:44 -      appcore.exe: TSFpa: 303.000000 K
FVD_Init: Downsampling setting: 0x00
FVD_Init: re-read the hardware information x: 80, y: 60


Unfortunately sleep/restore doesn't seem to work to keep it in service mode as long as battery connected  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 24, 2013, 10:33:19 pm
RESPECT  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 10:33:31 pm
Hey Mike,

Just to let you know that your tear down video and investigation is being watched closely by comapnies in the TIC industry. Three separate technical officers have mentioned it to me recently  ;)   You are causing a bit of a stir  :-+
I wouldn't expect any less  8)
Saves them paying for one of those expensive reports from people like Systemplus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 24, 2013, 10:41:13 pm
If you achieve your objective, I predict a very sharp increase in E4 sales ...... FLIR will have a major seller on their hands. I wonder how they will feel about that ?

I am aware that industry will continue to buy the full cost units due to calibration etc, but the E4 would become the cheapest 320x240 on the market and built by a top class manufacturer ! The Consumer TIC Holy Grail.

Very interesting times  :)

Oh and forget about the black helicopters.... it will be the white van snatch squad from FLIR that you need to worry about.  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 24, 2013, 10:44:20 pm
Well done!   :-+

So basically an old school IP-over-USB + use the telnet/web/whatever interface and you're in service mode? awesome!  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 10:45:39 pm
One minor issue is in RNDIS mode you can't get USB access to the drive, but you can get at the files via FTP in net mode - an advantage of this is you can take pics and pull files with USB connected - in normal mode the filesystem can only be mounted by the PC or the camera at any time.

but you can do
usbfn Mass_Storage_Class
via telnet, which reverts it to mass storage ( and dumps the net connection, obviously)

If you only have Telnet, be careful with spelling as any misspelling will dump the RNDIS link but not start MSD



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 10:52:18 pm
That was quick. Good job Mike!  ;D

Have you tried the RNDIS_UVC_MSD mode instead of RNDIS?

On another topic, I've made some good progress on Hidden Service Menu investigation, but I'm too tired to finalize this. If someone wants to give it a try - disassemble facet_ui_qml.dll and search for "hidden" string.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 24, 2013, 10:53:28 pm
Much respect Mike!

I'm still playing around with key combinations...nothing great yet, but while charging if you press "Left" and "Right" at the same time you get charge statistics under the charging icon.  But, this does verify the presence of hidden key sequences.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 10:53:52 pm
The only thing stopping this being done without opening the unit is finding the magic way to get to teh hidden menu to enable RNDIS.

..and of course potentially the next FLIR firmware update....

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:03:45 pm
That was quick. Good job Mike!  ;D

Have you tried the RNDIS_UVC_MSD mode instead of RNDIS?

On another topic, I've made some good progress on Hidden Service Menu investigation, but I'm too tired to finalize this. If someone wants to give it a try - disassemble facet_ui_qml.dll and search for "hidden" string.
doesn't seem to work - it won't let me copy or FTP off usbfn.exe to look for strings
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 24, 2013, 11:05:09 pm
OK, the E4 is seriously tempting me...

(http://leanneellington.com/wp-content/uploads/2012/03/youre-awesome.jpg)

I expect a hackable E4 would not lead to a significant reduction in E8 sales, but would lead to a large increase in E4 sales to the hobbyist/budget market.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 24, 2013, 11:05:45 pm
Deleted - Sorry, I wrote rubbish .....  its too late now: 1:10 am
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:12:09 pm
http://flir.custhelp.com/app/account/fl_downloads (http://flir.custhelp.com/app/account/fl_downloads)

Software -> PC Software (Thermography) -> FLIR Device drivers -> X86 or x64 as appropriate

You do need to register.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 24, 2013, 11:13:29 pm
Direct link to drivers: http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)
Both x86 and x64 seem to point to the same file - correct me if I'm wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 24, 2013, 11:16:12 pm
Quote
I expect a hackable E4 would not lead to a significant reduction in E8 sales, but would lead to a large increase in E4 sales to the hobbyist/budget market.

You bet! I already placed my order. Finally I can check my prototypes about hot spots and heat spreading. A resolution of 80x60 was nothing to write home about, but 320x240 for 1200 Euro (incl. VAT) is fair.... and as I side effect I can check my house for hidden problems.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:28:29 pm
Just tried a few permutations of sleep mode to see if test mode can be sustained longer term, but it seems to flake out - if plugged int USB it sticks at the battery logo when you wake, if not, it sort of wakes up then crashes.
I suspect cockup over conspiracy on this one....

Of course until we find the secret key or fully hack it, a little PIC/AVR on a flex plugged into the test connector to say "usbfn RNDIS" when it sees the command prompt would do the trick...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:34:00 pm
Little snippet from resources when in service mode
Quote
.caps.config: (3)
name            "app E4 1.0 + app prodconvconf_std 999.9KaKaOnly"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 24, 2013, 11:44:48 pm
Update - although manually turning off from service mode crashes it, it seems like if you let the auto-power off time out, it wakes back up in service mode (with  RNDIS still running).
 
Incidentally I think the image resolution is being limited to some extent by the lens. Hard to tell if the temperature data is still accurate.
Question for any TIC experts - would a bigger lens affect the calibration? (looks like you probably could recal via service mode though)

oh and for the web experts - by looking through the .asp files etc. can you deduce anything about what it actually does when you hit the 'enable service mode' button? Even a snippet of text that could be looked for in executables might be interesting. I have seen references to something like "oneshotservicemode"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 25, 2013, 12:05:34 am
I'm not sure if this helps, but I found these links to be quite interesting:

http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)
http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504) (copy and paste the URL if it doesn't work)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 12:12:22 am
Your second hyperlink is broken -- copying the URL and pasting it in works, however.
I think that's the same doc I linked to previously
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 01:14:18 am
It looks like the forum software eats $$$. Oh wait, I think I see what's happening. Some clever php monkey needs to take a course on input handling. At any rate, if you put a [url] tag around it yourself it leaves it alone: linkie (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)

Or you can change the $ to %24, and you can leave it our there without explicit tag: http://support.flir.com/DocDownload/Assets/75/English/T559504%24A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504%24A.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on October 25, 2013, 01:25:37 am
Quote
I expect a hackable E4 would not lead to a significant reduction in E8 sales, but would lead to a large increase in E4 sales to the hobbyist/budget market.

You bet! I already placed my order. Finally I can check my prototypes about hot spots and heat spreading. A resolution of 80x60 was nothing to write home about, but 320x240 for 1200 Euro (incl. VAT) is fair.... and as I side effect I can check my house for hidden problems.

Yah, I have no need or hardly need a ThermoCam, but now I am going to get one to check for shorted cap, shorted rails, etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 25, 2013, 02:49:33 am
Is the webcam output 320x240 when in service mode and is the framerate higher as well? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 25, 2013, 05:37:58 am
From the fvd.dll, it appears not long after FVD_Init starts, and after calling function that reads downsampling setting from I2C (not sure if EEPROM or sensor) it tries to open
Code: [Select]
\Temp\__higres.cnfand if it can, it just closes and deletes the file without trying to read anything from it... and writes
Code: [Select]
FVD_Init: Oneshot high resolution modethen write something into memory and continues... so one thing to make this persistent might be to create that file on the device and mark it read-only. (This is assuming the filesystem of WinCE is similar enough to a standard Windows one to have attributes and such.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 25, 2013, 08:07:51 am
Can someone post a copy of this file for those of us not brave enough to open our cameras for the serial port?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 08:19:00 am
Can someone post a copy of this file for those of us not brave enough to open our cameras for the serial port?
At the moment the only way in is via the serial port as it is the only known way to get a console prompt, to put the USB into RNDIS mode.
There does appear to be a hidden menu to enable RNDIS - until this is found you need to open it.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 08:45:16 am
Someone has a sense of humour!
In service mode :
Quote
\temp>type __highres.cnf
HandsOff
\temp>
Also in temp is a config.cnf file - this may explain why modding the config files in flashfs didn't appear to do anything -  maybe it's only looking at files copied into \temp 

Left unit in auto-poweroff sleep overnight and seems to wake up OK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 08:53:14 am
Looks like a normal startup deletes everything in temp - actually I think temp is a RAM volume as it's above the flash-x-FS directories

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 09:05:17 am
BTW updated connector pinout
Starting from end nearest to the unpopulated FFC connector

1 On/Off switch (to ground)
2 Power - Vbattery during run and charge - possibly via a FET switch as I didn't see continuity to bat terminal
3 Console TXD
4 Console RXD
5 Debug  TXD
6 Debug RXD
7 0V
8 /Reset
9  Output
10 Input
11 Output
12 Input
13 Input
14 I2C SDA
15 I2C SCL
16 0V

Pins 10-13 look like they may be build option resistors - two have 10K to +3.3v, two have 1K to ground.

the connector will take a standard 16 way 0.5mm jumper cable, e.g. Molex 0210200165 available from Digikey amongst others
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 25, 2013, 09:49:12 am
Just received the shipping note of my ordered E4. So I will definately get an E4 before Flir is able to roll out a new "improved" firmware to all cameras.  >:D
Can't wait to receive it.
:clap: Kudos to Mike and all other contributors! :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 09:51:00 am
Looks like a normal startup deletes everything in temp - actually I think temp is a RAM volume as it's above the flash-x-FS directories

taken from camera.cmd:

Code: [Select]
$SHOW "Combined firmware (1.18.7) is intended for FLIR Z3-Series"
# Clean from potential earlier install
rmdir \temp\OS
rmdir \temp\APP
rmdir \temp\PROD
...
#Here if OS is not 16.0.10, mark OS for update
md \temp\OS

Those check do seem to imply at least a certain level of persistence. Then again, it could be leftovers from development on a persistent fs + "doesn't hurt to leave those checks in". So in the end ...  :-//

But can't you check the \temp mount point to find out what type of FS it is?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 25, 2013, 09:59:20 am
prodapp.exe @ 19FB8:

Code: [Select]
LDR     R2, =aRestartingInHi ; "Restarting in high resolution mode/serv"...
LDR     R0, [R8,#0x54]
MOV     R1, #0
BL      sub_8F178
LDR     R1, =aW         ; "w"
LDR     R0, =aTemp__highres_ ; "\\Temp\\__highres.cnf"
BL      fopen
MOVS    R4, R0
BEQ     loc_19FF8
LDR     R0, =aHandsoff  ; "HandsOff"
MOV     R3, R4          ; FILE *
MOV     R2, #8          ; size_t
MOV     R1, #1          ; size_t
BL      fwrite
MOV     R0, R4          ; FILE *
BL      fclose
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:03:40 am
Useful Hack no. 2...
To start service mode without using the web interface, just the console....
In normal mode copy some files as shown below into the images dir (seem to be some restrictions on where you can write - was getting quota type messages).
You can find the files by getting into service mode and FTPing  from \temp - Only need to do this once.

Add this batch file as serv.bat
Quote
md \temp\appcore.d\
md \temp\appcore.d\config.d
md \temp\appcore.d\factory.d
copy __highres.cnf \temp
copy conf.cfg \temp\appcore.d\config.d\conf.cfg
copy bw.rsc \temp\appcore.d\factory.d\bw.rsc
copy rndis.rsc \temp\appcore.d\factory.d\rndis.rs

Once done, you can now get service mode from the console after a cold start :
cd \flashifs\<wherever you put the files> - note PC must be disconnected)
serv
stopapp
restartapp

You are now in service mode. USB mode is RNDIS. This appears to be specified in rndis.rsc so may be chnageable - stay tuned.

The latter commands are batch files in flashbfs - should be possible to combine everything into a single batch file.







Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 25, 2013, 10:17:51 am
Could those commands be placed in a sort-of autoexec.bat file (don't know if WinCE has a similar set up?) That way it enters service mode upon power up?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:25:21 am
BTW note when restarting, there is a delay when it appears the keypad has frozen - this is just the startup time, and because progressapp isn't running you don't see a progress bar

Is the webcam output 320x240 when in service mode and is the framerate higher as well?
By default, USB is in RNDIS mode, so no webcam. The video over NDIS protocol does not appear to be implemented.
However if you modify  the USB mode string in rndis.rsc to "UVC_MSD", you are in service mode with mass-storage and UVC working as normal. Note I did this by copying the file from usb.rsc in the FW update so the CRC is right - I don't know if it actually checks the CRC though


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:29:21 am
Could those commands be placed in a sort-of autoexec.bat file (don't know if WinCE has a similar set up?) That way it enters service mode upon power up?
There is a file called applaunch.dat
Quote
# Show intro bootlogo and start progress
progressapp -f \flashbfs\system\bootlogo.bmp -g flashbfs\system\bootlogo_legal.bmp -d
# Start command shell on the RS-232 port
cmd /R
# Register a default user
defaultusr
# Start appcore. Appcore starts other necessary processes
appcore

However this may be dangerous as if the cmd/R isn't run you could find yourself locked out of the console  - the only potential way back in would be the hidden menu to enable RNDIS for telnet or FTP  access
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 25, 2013, 10:34:27 am
So you could perhaps use a fork to launch a batch file - for example the "START" command on windows creates a second command interpreter and as long as the command interpreter can be found, the command should not fail.
But what I don't know is if this will open up a command window on top of the thermal image   :--
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 10:35:04 am
My guess is they only use CRC to check if the file transfer of new files (during a firmware upgrade) is succesful. During firmware upgrade it uses kitcrc for that.

Code: [Select]
kitcrc -c \FlashBFS\system\kits.d\appkit.rev
...
kitcrc -c \FlashBFS\system\kits.d\prodkit.rev

Based on kitcrc exit code it then says "Congrats" or "Screw you hippie!".

And you can probably add the RNDIS stuff to applaunch.dat by the looks of it. Probably want to make it create a file first time, then based on file existence do your extra stuff or not. That way you only execute your funky stuff first time around. In case of hang you reset and it will skip it.

What does cmd /? say btw? Apparently /R attaches it to rs232. Any other juicy options?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 10:37:34 am
However this may be dangerous as if the cmd/R isn't run you could find yourself locked out of the console  - the only potential way back in would be the hidden menu to enable RNDIS for telnet or FTP  access

Nah. just make a file existence based bit of logic in the bat file that either does A or B. Make it so that reset toggles between executing branch A and B. And /obviously/ you test this mechanism first with something harmless. ;) Been there, done that, reflashed it. @_@
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:50:04 am
Just tried adding the copy commands to applaunch.dat and no effect.
however commenting out appcore does stop the main app running.

Maybe applaunch.dat can only run executables

cmd /? :
CMD [/[C|K] command][/P][/Q][/T:bf]

  /C command  Runs the specified command and terminates.
  /K command  Runs the specified command and remains.
  /P          CMD becomes permanent and runs autoexec.bat
              (cannot be terminated).
  /T:bf       Sets the background/foreground color (see COLOR command).
\>Bad command or filename



maybe cmd /c copy.. might work - stay tuned...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on October 25, 2013, 10:52:49 am

However this may be dangerous as if the cmd/R isn't run you could find yourself locked out of the console  - the only potential way back in would be the hidden menu to enable RNDIS for telnet or FTP  access

Nah. just make a file existence based bit of logic in the bat file that either does A or B. Make it so that reset toggles between executing branch A and B. And /obviously/ you test this mechanism first with something harmless. ;) Been there, done that, reflashed it. @_@

When dealing with potential lockout situations (like fixing something remotely) I tend to start a timer of say 1 hour so if somehow whatever I did locks me out, when the timer runs out it either undoes it, reboots etc.

Useful when messing with network settings on a remote system.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:02:34 am
not quite... Looks like the delete happens too soon - I can copy the files in, but by the time appcore starts, __highres.cnf has been deleted.


oh hang on a min, something has also deleted the dir I put on flashBFS with the files - maybe need to copy from flashifs... 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:11:46 am
New applaunch.dat
Quote
# Show intro bootlogo and start progress
progressapp -f \flashbfs\system\bootlogo.bmp -g flashbfs\system\bocmd /c bootlogo_legal.bmp -d
# Start command shell on the RS-232 port
cmd /R
# Register a default user
defaultusr
cmd /C md \temp\appcore.d\
cmd /C md \temp\appcore.d\config.d
cmd /C md \temp\appcore.d\factory.d
cmd /C copy \flashifs\hack\__highres.cnf \temp
cmd /C copy \flashifs\hack\conf.cfg \temp\appcore.d\config.d\conf.cfg
cmd /C copy \flashifs\hack\bw.rsc \temp\appcore.d\factory.d\bw.rsc
cmd /C copy \flashifs\hack\rndis.rsc \temp\appcore.d\factory.d\rndis.rsc

# Start appcore. Appcore starts other necessary processes
appcore


Pwned.
Hang on, maybe not, but I did fiddle with a cfg file to try getting PIP.... stand by!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:28:42 am
Panic over, definitely pwned  :) :D ;D :-DD :-DD
Tried 3 restarts from power-off and all good.

Oh, and standby/restart seems to work OK as well.

Interestingly with this hacked startup.dat, the startup progress bar actually works properly.

Putting the files in flashifs means you can fiddle easily via MSD interface, and disable the hack if necessary by just moving the files off.

Hopefully PIP and any other E8 goodies can be enabled - no more time to hack now.
 
Just make sure it isn't plugged into the PC when starting as the flashifs filesystem won't be mountable - it starts in standard mode.




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 11:39:21 am
Even more RESPECT  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:45:14 am
In the meantime, somebody please try to find that magic menu...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 11:50:48 am
When dealing with potential lockout situations (like fixing something remotely) I tend to start a timer of say 1 hour so if somehow whatever I did locks me out, when the timer runs out it either undoes it, reboots etc.

More or less ditto for remote systems. For embedded like this I like the file existence approach so you can toggle execution branch.

But who cares about all that, I see Mike just undid it. Nice one!!  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 12:03:15 pm
Just tried adding the copy commands to applaunch.dat and no effect.
however commenting out appcore does stop the main app running.

Maybe applaunch.dat can only run executables

cmd /? :
CMD [/[C|K] command][/P][/Q][/T:bf]

  /C command  Runs the specified command and terminates.
  /K command  Runs the specified command and remains.
  /P          CMD becomes permanent and runs autoexec.bat
              (cannot be terminated).
  /T:bf       Sets the background/foreground color (see COLOR command).
\>Bad command or filename


hangonaminute! background processing in brain just finished. Note the absence of /R in that description. I bet someone grabbed the source of stock command, plonked in some code for serial console, handled /R argument, and didn't even update the help text. So for all you know the entire /A to /Z range is full of interesting functionality. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on October 25, 2013, 12:05:21 pm
Even more RESPECT  :-+

+1  :clap:

Another great moment of reverse engineering event documented live in this forum, thanks Mike.  :-+

Meanwhile, and again, when everytimes I watched great forum thread such like this one, just worry it might be locked or gone because of cease & desist .. love letter Dave received from lawyer.  :-//

Time to save or update an OFFLINE version of this thread.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 12:13:21 pm
Mike,

You asked about the Germanium lens and its effects on calibration etc.

Some thoughts on the matter.

1. If FLIR are combining pixels in the 80x60 modes, the whole FPA will be 'in play' and illuminated by the lens.
2. If only the centre 80x60 pixels of the FPA were being used, the lens would be designed to illluminate that area of the FPA only ?
3. You have produced a hi-res image at 320x240 with the whole FPA 'in play'. I saw no vigneting so I believe the lens is illuminating the whole FPA. A lens change is therefore not essential which is good as they are not a common item on their own.
4. The quality of the lens used on the 80x60 E4 may be inferior to that of the E8 but whether most users would notice even at 320x240 is questionable.
5. FLIR calibrate their TICs in rows of test jigs, facing black body sources. The FPA thermal response should have been captured across all pixels and mapped. The lens is part of that calibration routine so a change of lens would reduce accuracy. The deviation would depend upon the similarity of the replacement lens to the original. Materials used, len thickness, coating and quality etc. Again, I doubt the change would be noticed by many users for the tasks that they had in mind. Adding a close-up lens to my PM695 made very little difference to the temperature calibration (but it is a very large and expensive close-up lens).
6. I have read of a company that is producing a new range of synthetic thermal camera lenses that would cost much less than Germanium. It is possible that FLIR might be using such in their low end cameras and a Germanium in their higher resolution units. This would be similar to web cams....some use plastic lenses, others HQ glass. Changing from a synthetic lens to a Germanium would likely be a major calibration difference due to differences in matrial 'through' losses.
7. A final thought. Lens diameter is very important in LW microbolometer cameras. To get good sensitivity the largest lens possible should be used. From your tear down I was not impressed with the tiny lens used in the E4, but the FPA is obviously very sensitive when compared to my units from the late 1990's so a small lens gives acceptable specs. There appeared little option for a larger lens in the E8 unless several parts were changed to accomodate such. I just don't see FLIR doing this on such a 'budget' line. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 12:20:19 pm
Even more RESPECT  :-+

+1  :clap:
definitely  :clap: ++

Quote
Time to save or update an OFFLINE version of this thread.  ;)

What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection?  :o

Gotta be prepared for when the pointy haired CatOutOfBag denial posse orders a fix with the next firmware update, only to fail horribly. Too late. :P

@Aurora:
So your educated guess is that most likely the E4 and E8 will use the same lens? That would be even better news. If so, that would seem to indicate the difference in temperature resolution between models is purely a processing issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 12:31:03 pm
If lens diameter is fixed due to the mechanical constraints, the possibilities for differences in temperature resolution are

1. Different lens material
2. Different lens coating
3. Deliberate hobbling of lower spec E4 to encourage sales of higher spec units  ;)
4. Different FPA used in different models (there are two FPA models detailed in the OS)

I am suspecting FLIR may have gone for option 3 !

Mass production of a product like the E series is most cost effective if most mechanical and electronic parts are the same, with just firmware differences. The BoM is then kept as small as possible and the manufacturing line is simplified.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on October 25, 2013, 12:33:29 pm
What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection?  :o

That post meant for provoking a further mass generation of the off-line mirrors, silly.  :box:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 12:34:39 pm
There is a ton of stuff about lens calibration in the service menu.

The E series also seems to have this 'added noise' thing, disabled in service mode.
It could be that this makes the downsampled modes and the 60Hz-9Hz downsampling  work better with some added noise to reduce banding. Will do some playing if it will let me fiddle with the config files.
The 320x240 image looks fairly free of noise, but not tried setting a narrow band.
incidentally you can manually set the span and zero  by first locking the temp range and then using the 'level' and 'span' commands from the console.

I will be interested to see the E8 lens - there is potentially space for a bigger lens, but not hugely bigger.
At 9fps they can probably get away with the small lens as they have 6 frames to work with, so in principle 6x the SNR - the Ex0 range lenses look a lot bigger
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 12:42:52 pm
Mass production of a product like the E series is most cost effective if most mechanical and electronic parts are the same, with just firmware differences. The BoM is then kept as small as possible and the manufacturing line is simplified.

Yes, though screwing on a different lens when a unit is calibrated and configured to be a specific model wouldn't be a big deal.
I'm pretty sure the present lens moulding envelope could accommodate a bigger lens
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 12:46:53 pm
With regard to deletion of this thread....... would Dave do that ? He supports that Wiki Leaks chap doesn't he ? Freedom of speech and all that.

But seriously, the cat is well and tuly out of the bag, and FLIR know it. I suspect meetings have already taken place to decide what, if any, action will be taken  ;)  Sometimes less action is best in such cases, as it avoids negative publicity and FLIR will know that suppression of Mike's discoveries would be nigh on impossible. Sadly what is likely to happen is a change in firmware to block the 'hack' as that is cost effective and limits the damage to only the initial production batch.

The PR fallout for FLIR will revolve around the proven fact that they are using a 'full fat' 320x240 pixel FPA in their budget E4 camera. It will be apparent to all that the E8 is massively over priced as the hardware costs will be similar, if not the same. Historically I have had the view that the major cost in a TIC is the FPA and Gemanium lens. This E4 revelation tends to change that view as the 320x240 FPA and lens is obviously cheap enough to place in a lowly 80x60 spec camera.....if it were an expensive part due to resolution, such action would make no financial sense, and an 80x60 or 160x120 FPA would have been used instead.

The E4 in its 'hacked' state would make a very capable TIC for experimentation and consumer grade work. I do not see professionals in industry using hacked units though so the E8 will still sell to its target market. This is very much like the Rigol DSO hack, and I suspect it will play out in much the same way. One big diffrence with the Rigol was that it was using overclocked parts to achieve its spec, the FLIR is effectively using overspecified parts which is the inverse !

For me, as a TIC geek, this is a facinating develpment. I only wish I had the software skill-set that has been displayed here by Mike and the other members on ths 'Hack the E4' team. RESPECT to you all  :clap: 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on October 25, 2013, 12:51:49 pm
With regard to deletion of this thread....... would Dave do that ? He supports that Wiki Leaks chap doesn't he ? Freedom of speech and all that.

Personally I believe Dave won't do that, but what can I say if he suffered enough legal pressures that are too hard to bear for him personally ?  :-//

I think we should move this discussion at another newly created thread maybe at General section, enough OOT contaminations in here already, sorry Mike, won't talk about it further here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 25, 2013, 12:54:36 pm
  :clap:

Well done!!
BTW:
The word 3vlig (trevlig) is used in Swedish meaning nice! ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 12:57:23 pm
What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection?  :o
That post meant for provoking a further mass generation of the off-line mirrors, silly.  :box:

Recursive: see recursive. Mission accomplished!  ;)

You did provoke me to feed the wayback machine however. So that's up to date as of now. I wish them the best of luck getting that deleted as well as random dropbox locations that may or may not pop up.

And yes, cat's out of the bag. Best move IMO is just to accept it. Yup, it happened, lesson learned. Silly fixes in future firmware will not work. They might as well enjoy the significant rise in E4 sales, and be happy.  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 01:00:54 pm
So when's the video coming out? O0

BTW:
The word 3vlig (trevlig) is used in Swedish meaning nice! ;)

Interesting coincidence.
Or confirmation of my .rcc file induced suspicion that this was made by their Swedish software team. ;) That resource file is full of se.flir references.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 01:01:38 pm
I suspect a likely outcome is more sales of E4, Rigol style, not loss of E8 sales - The E8  looks overpriced for teh benefit it gives.
And it may also seriously piss off FLIR's competition. Neither of which would cause FLIR to lose much sleep. They can effectively gain sales and market share without openly price-slashing.
With the loosening of export controls on 320x240 cams I think we'll be seeing the price of this resolution falling a lot soon (notwithstanding hacks) - it's just a matter of which manufacturer jumps first, as 32x240 cams clearly have disproportionately  high margins at the moment.
 At this res, MSX type tech is much less of a bonus so manufacturers without it won't be at much of a disadvantage.

There are many ways they could have totally locked this down if they'd really wanted to. However big companies often don't give much consideration to it unless the're actively selling upgrades.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 01:08:15 pm
So when's the video coming out? O0

BTW:
The word 3vlig (trevlig) is used in Swedish meaning nice! ;)

Interesting coincidence.
Or confirmation of my .rcc file induced suspicion that this was made by their Swedish software team. ;) That resource file is full of se.flir references.

I think it actually says something like "designed by Flir Sweden" on the label.

As regards "action" - what could they do? maybe Dave won't get the review units, but after the Rigol experience they would be insane to try anything heavy due to the Striesand effect.
All that has been done is revealing of how to use existing functionality, with reference to published documents. Though there were some hints from disassemblies, these were not essential, and no copyright information has been re-published.

If Flir are pissed off with anyone, it should be with their own developers for lazily re-using code without taking out unnecessary functionality. Assuming of course it was unintentional.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 01:12:39 pm
Mike,

I may be totally wrong as you know more about the firmware than me, but I have not herad of this noise insertion technique in a TIC before. Bit padding, yes, but not noise insertion.

The Uncooled Microbolometer is a noisy beast and much time and money has been spent trying to tame it  in order to provide nice clean images with as little internally generated noise as possible. My 1st Generation FPA PM570 is pretty noisy when compared to the later 3rd Generation FPA PM695 on this front. FLIR have spent a lot of time developing the FPA and also the noise REDUCTION algorithms and capabilities. As you know, my PM695 has 3 modes for noise reduction.

1. Off - for fast moving targets like cars and animals etc.
2. Normal - Everyday observation, hand held, non fast moving targets.
3. High - Lowest noise mode for static targets only and tripod mounting of camera is essential.

Having used these modes, it appears the noise reduction works by comparing captured frames and deleting the random elements before display. The frame rate appears much slower as a result. The PM695 provides a very nice image in the 'Noise redcuction OFF' mode and you can pan the camera easily. With the mode set to 'High', any movement of the camera or target causes really impressive image smearing and pixelation.

I would be amazed if FLIR did not employ noise suppression in the E series. Is it not possible that the noise suppression is switched OFF in service mode to provide the raw, fastest update without interferance from the noise algorithms and processes. That is what I would do in a service mode. Keep it to raw basics, without any bells or whistles active to confuse the testing or CALIBRATION  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 01:26:45 pm
Mike,

I may be totally wrong as you know more about the firmware than me, but I have not herad of this noise insertion technique in a TIC before. Bit padding, yes, but not noise insertion.

The Uncooled Microbolometer is a noisy beast and much time and money has been spent trying to tame it  in order to provide nice clean images with as little internally generated noise as possible. My 1st Generation FPA PM570 is pretty noisy when compared to the later 3rd Generation FPA PM695 on this front. FLIR have spent a lot of time developing the FPA and also the noise REDUCTION algorithms and capabilities. As you know, my PM695 has 3 modes for noise reduction.

1. Off - for fast moving targets like cars and animals etc.
2. Normal - Everyday observation, hand held, non fast moving targets.
3. High - Lowest noise mode for static targets only and tripod mounting of camera is essential.

Having used these modes, it appears the noise reduction works by comparing captured frames and deleting the random elements before display. The frame rate appears much slower as a result. The PM695 provides a very nice image in the 'Noise redcuction OFF' mode and you can pan the camera easily. With the mode set to 'High', any movement of the camera or target causes really impressive image smearing and pixelation.

I would be amazed if FLIR did not employ noise suppression in the E series. Is it not possible that the noise suppression is switched OFF in service mode to provide the raw, fastest update without interferance from the noise algorithms and processes. That is what I would do in a service mode. Keep it to raw basics, without any bells or whistles active to confuse the testing or CALIBRATION  ;)
I've not played - the only reason I assumed it was noise addition was a comment/assumption from the guy whol emailed about the i series hack.
Quote
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
It could actually be noise reduction or shaping - maybe this is a threshold to decide when to apply noise reduction, i.e. adjust filter until noise is below the target value.  "Mk" - mask? Perhaps something like a hysteresis function?
Either way it would make sense to not do it in service/cal  mode.

Also don't forget that there may be other issues in service mode that haven't been spotted yet - need to compare some known reference images to check cal. I've left it running all day at home to see if there's any timeout etc. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 01:35:53 pm
I can't help feeling that, with the 320x240 resolution, MSX has just 'crashed and burned'   :-//

I still like the idea on low resolution TICs and when there is low thermal difference between objects in the field of view.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 01:50:09 pm
I can't help feeling that, with the 320x240 resolution, MSX has just 'crashed and burned'   :-//

I still like the idea on low resolution TICs and when there is low thermal difference between objects in the field of view.
Absolutely - MSX on the 80x60 makes it much more useful, and for many applications, is close to as useful as higher thermal resolution, so for low-budget users it's a viable alternative to higher res cams. Without it, even at £800 an 80x60 cam would be disappointing. Considering the minimal cost of a visible camera it's a no-brainer.
The only time it really fails is when light levels are low, but all you need is a torch. Higher-end models have illuminators.

One enhacemant that would be nice is automatic distance calibration - this could be done in 2 ways - point at an object with vertical edge in the thermal image and presss a button to make it look for teh best correlation with edges in the visual, or a second visible camera below the main lens - by correlating images from the two visible cameras it could continuously auto-scale the distance.   

Something I don't really feel any need for is higher framerate - even without any ITAR issues, the cost saving of being able to use a smaller lens to improve SNR is probably a pragmatic solution. I guess framerate becomes more important for night-vision type apps, or if you have autofocus. 
 It will be interesting to look at the raw 60FPs data though, but I won't have time for that for a while.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 02:21:29 pm
60fps is a must for high speed thermography of targets moving through the field of view. 9fps is fine for static objects.

I recall that someone saw an E5 camera running at 60 fps at a German exhibition ? I don't think I dreampt it. If so, the lens may not be such a limiting factor.

I remain surprised that the UI is so sluggish on this camera. From your investigations, it appears to use a powerful main processor. I wonder if the image processing hogs the MIPS ? FLIR need to fix that. Possibly verbose, inefficient programming combined with Win CE OS ?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 02:31:01 pm
Now heres a question for you all......

The E4 is fast giving up its secrets and the MSX capability is becoming mute.

There are a lot of FLIR i3's out there........Hmmmmm I wonder if they can be upgraded in a similar manner ? i3's should be being discounted soon, and cheaper on the used marketplace due to the E4's arrival. We know the i7 can be hacked.

FLIR would not be able to lock the firmware on those old i3 stocks, or units already sold   :)

Ask yourself whether the E4 offers ANYTHING better than an i3 when MSX is removed from the equation  >:D

Cheap 320x240 TIC anyone  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 25, 2013, 02:42:09 pm
If you want one, you might better hurry up to get one. I ordered my E4 this night which is (luckily) already on its way.
I just checked the supplier again: the E4 suddenly is out of stock at this supplier and also at another supplier - both had them on stock this night.
Either the E4 are now sold out quickly because of this thread or Flir is pulling the stock back for implementing a new firmware.




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 02:43:34 pm
60fps is a must for high speed thermography of targets moving through the field of view. 9fps is fine for static objects.

I recall that someone saw an E5 camera running at 60 fps at a German exhibition ? I don't think I deampt it. If so, the lens may not be such a limiting factor.

I remain surprised that the UI is so sluggish on this camera. From your investigations, it appears to use a powerful main processor. I wonder if the image processing hogs the MIPS ? FLIR need to fix that. Possibly verbose, inefficient programming combined with Win CE OS ?
Probably - when inside a fullscreen menu it shouldn't actually be doing anything else at all so no reason for it to be slow. I suspect the issue is there are many layers in the way of doing what is a simple task - another casualty of using a software framework designed for higher-end products.
I saw plenty of non-optimalities in the ARM code, but not sure to what extent this is due to the compiler itself or the API layers hiding things that the compiler could optimise if it knew about them.

Sluggishness in thefullscreen option menus isn't a major deal as you hardly ever need to go there, and the onscreen popups are just about acceptable
My biggest complaint by far is that you need to pull up the menus to select between simple functions, in particular image mode and target distance.
I was told that FLIR are working on improving this in a future release. 

It may be that it is being slowed by image processing, but this should be turned off when inside fullscreen menus.
My belief is that all the processing happens in the FPGA, and all the SoC does is overlay the menus.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 02:46:01 pm
Now heres a question for you all......
There are a lot of FLIR i3's out there........Hmmmmm I wonder if they can be upgraded in a similar manner ? i3's should be being discounted soon, and cheaper on the used marketplace due to the E4's arrival. We know the i7 can be hacked.
AFAIUI the i3 can be made into an i7, which was the subject of the lost email, but even the i7 is only 120x120
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 25, 2013, 02:57:07 pm
Oh Poo. That idea squashed then  :'(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 03:00:57 pm
If you want one, you might better hurry up to get one. I ordered my E4 this night which is (luckily) already on its way.
I just checked the supplier again: the E4 suddenly is out of stock at this supplier and also at another supplier - both had them on stock this night.
Either the E4 are now sold out quickly because of this thread or Flir is pulling the stock back for implementing a new firmware.
hard to tell as not many online dealers have any in-stock indication - tester/Pass are showing stock, but I couldn't see any product that wasn't, which is always suspect

There are currently two from dealers Buy It Now on Ebay UK.
shopflir.com ni US  are showing 2 ready to ship


Oddly the E series doesn't seem to have hit RS or Farnell yet, though Farnell have 8 i3s left to shift
ticameras have a big splash screen for the i3 on their home page - also probably trying to shift old stock. Showing E4 in stock

I doubt they would bother trying to pull stock - would probably cause them more hassle and reputation damage than any  loss through hacks.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewalker on October 25, 2013, 08:49:48 pm
A recap video for the hack would be awesome!

 :-+ :-+ :-+ :-+

Alexander.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 08:54:23 pm
It doesn't seem to like having the conf.cfg file edited, so may be checking the CRC, probably tricky to enable other features  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on October 25, 2013, 09:01:53 pm
Oddly the E series doesn't seem to have hit RS or Farnell yet, though Farnell have 8 i3s left to shift

Farnell have taken the decision to no longer supply FLIR equipment, they are concentrating on Fluke as their supplier of thermal imaging equipment.

The 8 i3s they have left are open to offers to clear them out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 09:11:29 pm
It doesn't seem to like having the conf.cfg file edited, so may be checking the CRC, probably tricky to enable other features  :(

Just add a comment with appropriately crafted text at the end of file, to end up with the same CRC as the original. Easy enough with that 16-bit CRC I'd think. ;)

Edit: the only real sport would be to make it an ascii art comment, and then still try to end up with the correct CRC. Regular comment would just be too easy.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 09:14:23 pm
Oddly the E series doesn't seem to have hit RS or Farnell yet, though Farnell have 8 i3s left to shift

Farnell have taken the decision to no longer supply FLIR equipment, they are concentrating on Fluke as their supplier of thermal imaging equipment.

The 8 i3s they have left are open to offers to clear them out.
I'll give 'em a Monkey for the lot.. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 25, 2013, 09:21:17 pm
I'll give 'em a Monkey for the lot.. ;)

You sure about that? Have you checked the pricing on those monkeys lately?  :o I mean, come on!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Monkeh on October 25, 2013, 09:22:41 pm
I'll give 'em a Monkey for the lot.. ;)

You sure about that? Have you checked the pricing on those monkeys lately?  :o I mean, come on!

We don't come cheap.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 09:26:28 pm
Correction to connector pinout :
BTW updated connector pinout
Starting from end nearest to the unpopulated FFC connector

1 Power - Vbattery during run and charge - possibly via a FET switch as I didn't see continuity to bat terminal
2 On/Off switch (to ground)
3 Console RXD
4 Console TXD
5 Debug  RXD
6 Debug TXD

7 /Reset
8 0V
9
10
11
12
14 I2C SDA
15 I2C SCL
16 0V

Pins 10-13 look like they may be build option resistors - two have 10K to +3.3v, two have 1K to ground.

the connector will take a standard 16 way 0.5mm jumper cable, e.g. Molex 0210200165 available from Digikey amongst others
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 09:27:42 pm
I'll give 'em a Monkey for the lot.. ;)

You sure about that? Have you checked the pricing on those monkeys lately?  :o I mean, come on!
You missed the Cockney accent - a Monkey is five 'undred quid guv'nor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Noize on October 25, 2013, 09:33:01 pm
I'll give 'em a Monkey for the lot.. ;)

You sure about that? Have you checked the pricing on those monkeys lately?  :o I mean, come on!


Cockney Slang
Tenner:
£10

Pony:
£25

Half a Ton:
£50

Ton:
£100

Monkey:
£500

Grand:
£1000
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nermash on October 25, 2013, 09:33:51 pm
Only if Monkey Harris is selling them :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on October 25, 2013, 09:38:16 pm
That's like a Funky Gibbon, right?

Mike (and others) thanks for the excellent work and great reading in this thread  :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 09:41:31 pm
I'll give 'em a Monkey for the lot.. ;)

You sure about that? Have you checked the pricing on those monkeys lately?  :o I mean, come on!


Cockney Slang
Tenner:
£10

Pony:
£25

Half a Ton:
£50

Ton:
£100

Monkey:
£500

Grand:
£1000
also : MGarrett £50 (from Hawaii 5-0), Score £20, Carpet £30, Archer £2000
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on October 25, 2013, 09:44:59 pm
What may limit the FLIR E-series attractiveness for certain applications are the lack of:
* manual Temperature Span
* manual Temperature Level

And, of course, the non manual focus...

But a possible 16x resolution (pixel count) is of course a killer asset

What is the big deal about this possible hack for hobbyist use?

(don't get me wrong; I love the hacking as such, but otherwise? I guess the only downside for FLIR is that their sales will boost bigtime, just like Rigol's sales did after the DS1052E-hack)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:01:19 pm
What may limit the FLIR E-series attractiveness for certain applications are the lack of:
* manual Temperature Span
* manual Temperature Level
You can lock to the current range, and if you're really keen you can set range and span via the console interface or over RNDIS
Quote
And, of course, the non manual focus...
The lens can be adjusted in-situ with the right tool - am investigating how to make one.
Quote

What is the big deal about this possible hack for hobbyist use?
A previously £4K+ camera for £800
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on October 25, 2013, 10:08:35 pm
What may limit the FLIR E-series attractiveness for certain applications are the lack of:
* manual Temperature Span
* manual Temperature Level
You can lock to the current range, and if you're really keen you can set range and span via the console interface or over RNDIS
Quote
And, of course, the non manual focus...
The lens can be adjusted in-situ with the right tool - am investigating how to make one.
Quote

What is the big deal about this possible hack for hobbyist use?
A previously £4K+ camera for £800
IR for the masses !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:37:31 pm
Dave, willing to do some tests on the E8 for us?  ;) I can see you watching.
Please - someone find the magic keypresses so Dave can dump the eeprom and config files without opening it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 10:59:50 pm
Is this useful for Electronics... you tell me...?
This is with the lens screwed out a couple of turns for close focus

The track is a 12.5mil carrying 1 amp.

The nice thing about looking at PCBs is there are plenty of shiny things to give contrast so you can see very clearly where you are, even when it isn't hot. Lack of MSX close-up is just not an issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:26:12 pm
TL;DR : Summary of Hack

Update 27/10 - some info in this post  is wrong - the conf.cfg file is specific to the serial number so the one (removed) in this zip won't work.  You need to get your own by entering service mode via RNDIS, and copying the \temp\appcore.d\config.d\conf.cfg file it generates into \flashifs\hack
(Note I have sometimes seen flashifs getting renamed during service mode so it may be flashifs2)

This hack puts the E4 permanently into service mode. This gives full 320x240 resolution, hotspot/coldspot measuring mode and some more palette options.
The hack can be removed or hidden as desired via the USB interface.
It has only been tested with Firmware V1.18.8 It seems likely that 1.18.7 may be also OK looking at the update files.
WARNING There is a risk of bricking if you do stupid things. It may be possible to recover via USB bootloader menu but it is not known if this works with standard firmware files or FLIR tools. 
In particular, if the applaunch.dat doesn't get to cmd /R, you may not be able to get back to a console prompt to fix any file problems, which would be bad, m'kay
Hack at your own risk.


Power up and plug USB into PC.

Copy all files from attatched zip to a new folder called hack in the root of the USB drive

Unplug USB.

Connect to serial console using Hyperterminal or similar  (38400 baud)
Press enter a few times - you should see the \> prompt
At prompt type :
cd \flashbfs\system
copy \flashifs\hack\applaunch.dat
  (Hit 'Y' at the confirmation prompt )
 type applaunch.dat ** to check this file looks correct as a bad copy could brick the unit!

Power down (remove battery), and restart
Enjoy!


Notes :

If hack folder or  files deleted or renamed, unit will start as normal E4. Will revert to hacked when folder replaced.

Make sure unit is not plugged into PC USB when cold booting
- PC prevents bootup accessing hack files - unit will start as normal E4. Will start as hacked next time cold-booted without USB plugged in.
Quick way to tell if hack active - hotspot/coldspot measurement modes available
--------------------------------------------------------------------
Optional :
copy rndis_rndis.rsc over rndis.rsc to make USB work as RNDIS instead of mass storage+USB Video
copy rndis_MSD_UVC.rsc over rndis.rsc to restore to mass storage+USB video
This allows console access via telnet, file transfer via FTP and web access to service functions

FTP and web username flir, password 3lvig
Default IP 192.168.0.2 ( check using ipconfig)
You can do this at any time, cold reboot afterwards.

--------------------------------------------------------------------------

Changing startup screen (cold boot only)
Replace \flashbfs\system\bootlogo_legal.bmp ( copy from USB filesystem as per other files)
Original is 8 bpp windows bitmap.
Beware of changing format, as if progressap crashes it may not run the console prompt

--------------------------------------------------------------------------

Pinout for serial console

FFC connector accessable under label on front of lens housing
Looking at lens side with handle down


<left edge> <pin 16>....<pin 1>
Contacts are on bottom side (towards handle)
Pin 3 RXD
Pin 4 TXD
Pin 7 ground

Use 3.3v TTL level interface, e.g. FTDI TTL-232-3v3 cable

TTL232 Pin 1 (0v) to ground
TTL232 Pin 4 (TXD) to RXD
TTL232 Pin 5 (RXD) to TXD

Suggested FFC jumper cable molex Molex 0210200165 or similar.
--------------------------------------------------------------
De-hacking
Removing the hack folder will make it start as per normal E4.
If desired you can replace the hacked applaunch.dat with a copy of the applaunch_original.dat
This should return it to full factory condition.

This hack will be overwritten by a firmware update, as applaunch.dat will be overwritten.

See pic for FFC for position to access with just the 2 front screws - you may need to push away some rubber padding to get to it, and will need to tape your FFC cable to some rigid PCB to push it in.

Next time I get some PCBs done I'll do some FFC breakouts - PM me if interested

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:30:51 pm
PS one thing I've not yet checked is whether battery charging works properly - this involves different bootup modes so could plausibly be issues - if there are issues, worst-case you may need to move hack files via USB when charging.
Need to let my battery run down a bit to check.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 25, 2013, 11:38:54 pm
Mike is awesome and making us spend money   :-DD


New phone + Oculus rift   or   a Flir E4
3rd world problems :(


I do agree with what someone said a while back. With the 320x240 hardware now costing $995 including the profits for Flir and the distributor it seems likely that they're only going to get cheaper.
There's an opportunity for a new company to start selling official 320x240 TIC for <$1000

The only possible exception to this is if the lens or sensor in the E4 was bin'ed as reject, which would otherwise be thrown away.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on October 25, 2013, 11:41:06 pm
Ok if we ever have a need for a real world A-Team. I'm calling dibs on Mike.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2013, 11:55:08 pm
Quote
There's an opportunity for a new company to start selling official 320x240 TIC for <$1000
Assuming they could buy sensors at the right price, which probably means high volumes.
Quote
The only possible exception to this is if the lens or sensor in the E4 was bin'ed as reject, which would otherwise be thrown away.
The service info on mine showed no dead pixels - it does appear to have the ability map out (mask) dead pixels.
Unless they have significant yield issues, it may well be more hassle than it's worth to to sort out useable rejects from non-useable ones.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IanB on October 26, 2013, 12:56:38 am
I may be totally wrong as you know more about the firmware than me, but I have not heard of this noise insertion technique in a TIC before. Bit padding, yes, but not noise insertion.

Maybe I'm preaching to the choir, but noise addition and oversampling is a standard technique for getting more resolution out of a low res sensor (by resolution, I mean more bits per pixel, not more pixels). Essentially you are oversampling the A/D converter. Instead of taking one sample, you take many samples and average them. By itself this may not help much due to sampling bias, but if you add random noise to the input signal and then take multiple samples you can get more bits per reading at the cost of longer time to obtain each reading. By averaging over many samples you not only can get higher resolution (e.g. 9-12 bits from an 8 bit sensor), but you also can reduce noise by averaging it out.

(The way this works is as follows: statistically speaking, an analog value of 37.4/255 on an 8 bit A/D is likely to produce a reading of 37 most of the time. But if you add some random noise and sample multiple times, you will get a reading of 37 about 60% of the time and a reading of 38 about 40% of the time. By averaging over several readings, you will obtain a better estimate of 37.4 rather than 37 or 38.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on October 26, 2013, 08:41:33 am
Dave, willing to do some tests on the E8 for us?  ;) I can see you watching.
Please - someone find the magic keypresses so Dave can dump the eeprom and config files without opening it!

Hello Mike
First post here, thought I'd say a huge thanks for your efforts on this. I happen to have an E4 also.

Curious, how many possible key presses do you think this could entail? If we include the power on button, there are 8 buttons. If flir chose to make this more difficult, could they have perhaps chosen 2 buttons  to be depressed at the same time?

I can work on this if it exists, how will I know if/when the dump has occurred?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 08:54:23 am
Dave, willing to do some tests on the E8 for us?  ;) I can see you watching.
Please - someone find the magic keypresses so Dave can dump the eeprom and config files without opening it!

Hello Mike
First post here, thought I'd say a huge thanks for your efforts on this. I happen to have an E4 also.

Curious, how many possible key presses do you think this could entail? If we include the power on button, there are 8 buttons. If flir chose to make this more difficult, could they have perhaps chosen 2 buttons  to be depressed at the same time?

I can work on this if it exists, how will I know if/when the dump has occurred?
It appears that the hidden menu is are "after" the info (model/ersion/serial no) in the settings->camera information menu ( all entries appear the same). Current best guess is that some key combination at startup (presses or keys held) will enable the additional menu, probably visible by a right-arrow or enter on these menu items.
The i series uses 2 keys pressed together at some point after startup, one of which was an arrow key. My guess would be this is detected after the bootloader - first FLIR screen before export message.
And probably only on a cold boot (battery insert)
Stay tuned to this thread for info - code is disassembled - I'm not working on it but others are.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on October 26, 2013, 09:18:50 am
Hi Mike
You're up late. Or early!
OK well I have some time on my hands so I will try all the key combos I can come up with and let you know.
Will it dump to its internal storage the data you are seeking?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 26, 2013, 09:22:12 am
The files he wants to dump on an E8 unit isnt an automatic thing. It requires enabling RNDIS and running some commands.

Finding the key combo to get the service menu means this data can be dumped out without taking the unit apart. (Since Dave doesn't want to do that to an E8 on loan.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on October 26, 2013, 09:29:56 am
Thanks
Is that on the camera side through the serial connection, enabling RNDIS?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 09:39:54 am
Just had this message  re. i7
The secret key combo for the i7 is to bring up the menu and hold down the gallery key for 5 seconds. The code for it is very visible in gui.exe as it uses a timer and is written in .Net (so it's super easy to disassemble). Perhaps if you disassembled your gui.exe it might be in there?

Also, no special boot conditions are required to enter the service menu. Nor does the key combo need to be pressed during startup.

I got into my i7 some time ago (I was also too nervous to release it ;) ), but I am yet to figure out the "CRC" algorithms on the config files. I think this is the key to modding it, and I think it seems to be based on some sort of RIPEMD160 and uses some sort of ID as a seed (perhaps camera serial number?). I know that the FLIR i7 definitely uses a 320x240 sensor and that they run factory calibration at 250x250 (the sensor is actually 336x252 or something funny like that).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 09:43:49 am
Thanks
Is that on the camera side through the serial connection, enabling RNDIS?
At the moment you need a serial connection, accessable after removing 2 screws to get the facia off. Once you have this you don't need RNDIS as you can copy files between the user file area. The only thing that can only be done via RNDIS is the service/cal functions.
If we can find the secret menu to enable RNDIS via the keypad, then it can be done without opening the case,via telnet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cartti on October 26, 2013, 10:41:06 am
Can someone share files that are not included in the fw update pack? (gui and cmd)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 26, 2013, 11:03:52 am
:clap:

It could be that those extra menus are triggered by the presence of a file (like the highres mode), which is put there at the factory and gets deleted afterwards - thus locking the functionality out and requiring physical access to restore.

...How long until homebrew firmware running on this, with a better non-laggy UI and more functionality? The hardware doesn't seem all that complex to work with.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 11:17:51 am
Can someone share files that are not included in the fw update pack? (gui and cmd)
I've not found a way to copy off .exe files - it doesn't let you copy to another drive or FTP - may try booting in safe mode to see if this helps. Would be good to know all the modes of usbfn as it would be handy to have RNDIS, MSD and UVC all working.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 26, 2013, 11:33:25 am
Quote
It has only been tested with Firmware V1.18.8 It seems likely that 1.18.7 may be also OK looking at the update files.
Just to let everybody know who is thinking about a purchase: the E4 I yesterday purchased online (and which just arrived) in Germany has Firmware 1.18.8. Hardware information says its "E4 1.0".
Unfortunately I cannot proceed now with the hack .... vacation time!
It has to wait now for a week..... can't wait to return to hack it.

But even in 80x60 mode I can say so far: due to MSX even this low res is quite useful, that was a clever idea from Flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 01:09:19 pm
It could be that those extra menus are triggered by the presence of a file (like the highres mode), which is put there at the factory and gets deleted afterwards - thus locking the functionality out and requiring physical access to restore.
Seems unlikely - at the factory they have a physical connection available so wouldn't need a way to configure via the keypad. I also doubt it would involve putting stuff on the user partition, as the settings could prevent access to this, though one possibility could be that it will only do it of it sees USB power.
Keeping it simple seems to me to be the most likely approach, not depending on anything that could be inaccessible under certain conditions
Quote
...How long until homebrew firmware running on this, with a better non-laggy UI and more functionality? The hardware doesn't seem all that complex to work with.
A possibility, but how much more functionality would there need to be to make it worth the effort? You'd also need to include their FPGA file, but if you left the factory filestructure in place, it would be in there anyway.
Assuming (as seems likely) the FPGA does most of the work and feeds a ready-to-display combined image into the camera interace it may not be a huge effort for someone who knows the processor. The main thing you'd need to figure out is how it talks to the FPGA and what data is passed  - likely to be an I2C or SPI interface.
A potential issue may be getting the bootloader to load foreign code.
There is also the issue of figuraing out how factory cal data is dealt with.

.so what other functionality might be useful...?
Higher framerate is the obvious one, though may need a bigger lens to be useful.
Higher temperature  resolution at lower framerate
Video recording, but memory capacity, and maybe CPU power for compression may be limiting.
Timelapse/ take pictured on motion detection (good for wildlife?)
Auto MSX distance detection ( may not have access to both datastreams though)
Some of these would be doable by plugging into PC/RasPi etc.

Not sure I can see it happenning.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 01:44:50 pm
I unpacked NK.bin and have a zip file available to anyone interested (174 files, 4.4Mb zipped)

https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip (https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 02:21:53 pm
Cool! has all the Windows files that it won't let me copy.
CMD.exe has some bitmaps inside, including an image of the command prompt - odd
autoloadcheck.exe has a FLIR logo - boot screen (startup or wake from sleep) perhaps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cartti on October 26, 2013, 03:04:52 pm
I unpacked NK.bin and have a zip file available to anyone interested (174 files, 4.4Mb zipped)

https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip (https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip)
Thank you. These are from different model (mips processor), so ppl do not even try using these in E4. :)

Edit: Still missing GUI.exe tho, grr..  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 03:35:53 pm
I unpacked NK.bin and have a zip file available to anyone interested (174 files, 4.4Mb zipped)

https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip (https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip)
Thank you. These are from different model (mips processor), so ppl do not even try using these in E4. :)

Edit: Still missing GUI.exe tho, grr..  |O
Are you sure - references to ASCO, and build date of September.
I don't have cam to hand to compare - will check later
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cartti on October 26, 2013, 03:56:47 pm
I unpacked NK.bin and have a zip file available to anyone interested (174 files, 4.4Mb zipped)

https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip (https://www.dropbox.com/s/g7ix9z3idp1zxsa/nk.zip)
Thank you. These are from different model (mips processor), so ppl do not even try using these in E4. :)

Edit: Still missing GUI.exe tho, grr..  |O
Are you sure - references to ASCO, and build date of September.
I don't have cam to hand to compare - will check later
# Format      : Portable executable for MIPS R4000 (PE)

Oh wait. Some of the files are for ARM and some for MIPS. CMD.exe and some .dll's were Mips that i looked through, but now after looking at some random other files they are for ARM.

Maybe fw installer just picks right files for right model or?...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 04:29:38 pm
Not sure, but these are from the Z3comb_v1.18.7 I downloaded from the Flir web site as the update for Ex.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 04:47:37 pm
Not sure, but these are from the Z3comb_v1.18.7 I downloaded from the Flir web site as the update for Ex.
I had an old ARM disassembler bork at E4 files complaining they weren't ARM - maybe  some confusion over processor ID headers somewhere.
What are you using to look at them & how old is it?
Will compare with installed files when I get home.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 05:27:19 pm
I looked at the cmd.exe COFF file header and yes, the machine type field (at offset 0xC4) says 0x166, that's MIPS for sure.
I checked a few others and they all have 0x166. I'm beginning to think that NK.bin has 2 sections and I unpacked the wrong section.

To be continued...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 26, 2013, 05:35:11 pm
I'm beginning to think that NK.bin has 2 sections and I unpacked the wrong section.

What did you use to extract from .bin?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 05:46:39 pm
What did you use to extract from .bin?

I used NKtools, that seems to be the way to go. I don't think there is another section in the NK.bin, since the size is almost exactly the size of the extracted files, and I don't think there is any compression.

From camera.cmd (the update tool):

Code: [Select]
$LABEL checkinstallOS
dir /B \temp
[*OS*][$GOTO os]
$GOTO checkinstallOSEnd
$LABEL os
# Install OS here
# $SHOW "Updating OS"
delete nk.bin
delete nk.crc
delete gethwtype.exe
delete osimg.rev

#
#
addfile /nk.bin
addfile /nk.crc
## 70
#
kitcrc -c \nk.crc
[*FAIL*][$FAIL "Bad checksum on transferred OS",3]
$TIMEOUT 360
flash -l -n nk.bin
#
$LABEL checkinstallOSEnd

So it looks like they just flash the bin file, I'm puzzled  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 06:10:13 pm
Ok, so kernel.dll has the 0x166 signature for MIPS, but also has the text "Windows CE Kernel for ARM (Thumb Enabled) Built on May  7 2012 at 12:47:43".  :wtf:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 06:33:10 pm
I changed the signature of cmd.exe from MIPS (0x166) to ARM (0x1C2) and IDA disassembles it perfecty as ARM. I'm beginning to think that someone somewhere has a weird sense of humor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on October 26, 2013, 06:35:48 pm
Security by ROT13....................
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 06:49:31 pm
Security by ROT13....................

...like renaming that .cab file as .fif.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 26, 2013, 07:16:52 pm
...like renaming that .cab file as .fif.....

That's just Flir Industries Firmware  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on October 26, 2013, 07:25:01 pm
On the i3 I was able to pull up the Service Menu (by pulling up the menu then holding Play/Gallery button).  Lots of version information is displayed and a menu with the options:
* Dump Info (creates a postlog.txt & versions.rsc file on the SD card with various information inside)
* USB Mode -> MSD, RNDIS
* Update Firmware

Unfortunately I don't see any way to modify anything else within this.  I can enable RNDIS for USB using this method and it shows up on the computer as a 10Mbps Network Interface but unfortunately I've only been able to ping its gateway IP. No success with telnet, http, and ftp to the Flir Network Device's gateway (192.168.1.1 in my case) nor its DHCP server (192.168.1.2).  I did discover that if I hold Menu + Up Arrow on boot-up it will display some bootup text beneath the status bar as it boots although it is severely cut off as the text is within a small black box.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 07:45:54 pm
On the i3 I was able to pull up the Service Menu (by pulling up the menu then holding Play/Gallery button).  Lots of version information is displayed and a menu with the options:
* Dump Info (creates a postlog.txt & versions.rsc file on the SD card with various information inside)
* USB Mode -> MSD, RNDIS
* Update Firmware

Unfortunately I don't see any way to modify anything else within this.  I can enable RNDIS for USB using this method and it shows up on the computer as a 10Mbps Network Interface but unfortunately I've only been able to ping its gateway IP. No success with telnet, http, and ftp to the Flir Network Device's gateway (192.168.1.1 in my case) nor its DHCP server (192.168.1.2).
Time to look for some serial ports then...
Quote
I did discover that if I hold Menu + Up Arrow on boot-up it will display some bootup text beneath the status bar as it boots although it is severely cut off as the text is within a small black box.
E4 does that if any key is pressed at startup - same text as you get from the debug port, but not very readable
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 10:27:09 pm
More i7 whispers :

The trick used to dump the i7 is via the visual studio remote debugging tools (you can copy files onto the device, right?). You *need* to be using visual studio 2008/2010. Once you have them installed, you can do a full file dump as well as other fun things like editing the registry.

http://msdn.microsoft.com/en-us/library/ms228708 (http://msdn.microsoft.com/en-us/library/ms228708)
http://msdn.microsoft.com/en-us/library/ms180714 (http://msdn.microsoft.com/en-us/library/ms180714)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 26, 2013, 11:09:51 pm
So, I've been off this for a while, working on other stuff or enjoying the weekend :), but I've been following the progress.

Now, late night I've done some work on the magic menu stuff. The function that gets called when the magic key trigger happens is found in facet_ui_qml (search "2hiddenMenuRequested()").

Reading about i3's gui.exe made me dig-up a bit and I've found this in "ui_remove_uicore_gui.rsc":

.appl entry
.appl.startup entry
.appl.startup.remove entry
.appl.startup.remove.0 index
.appl.startup.remove.0.name text "Gui.exe"
.appl.startup.remove.1 index
.appl.startup.remove.1.name text "uicore.exe"



I also know they are active running processes just by looking at "restartapp.bat":

set PATH=\windows;\FlashBFS\system\;
rset .watchdog.enable false
rset .services.log.active false
ps -k uicore
ps -k Gui
ps -k Prod
ps -k prod
ps -k MediaServer
ps -k appcore
ps -k AppServices
ps -k Resmon
ps -k Bit
ps -k syslog
ps -k Cam
ps -k cam
ps -k geni
ps -k dig
ps -k Dig
ps -k watch
ps -k Watch
ps -k RTP
ps -k fwa
ps -k progress
ps -k Med
delay 10
start appcore
delay 1
start prodapp


Sooo, it seems like someone learnt his lesson from i3 (at least partially :P) taking precautions against hacking E4 "i3 style";D. Now, if Mike or anybody elese having an Ex can retrieve those files from the camera (I'm not sure yet where they're hidden or how they're loaded) then simply dissasembling gui.exe will probably easily solve this! (I took a look at gui.exe from iX firmware - it's indeed a piece of cake to understand as IDA decompiles it completely)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 11:16:45 pm
More snippets :
If you are buying an FFC cable, get one at least 200mm long, as that is long enough to be able to fit it permanently and route it down to be accessible as required from the battery compartment. Just make sure the exposed ends can;t short on the metal base when folded away.

Re. the rndis.rsc file :
Seems like the default behaviour if this file is not present, or the CRC is wrong is UVC and MSD
It does check the CRC in the file, which is why setting it to  RNDIS_UVC_MSD didn't work.

While playing with the rndis version of the file, something interesting happened  when I plugged the USB in- I saw some 'configuring' messages appear on my Windows icon bar, and then a new icon appeared (presumably something the Flir drivers installed).
This creates a drive which can access the user disk area, so sort-of equivalent to MSD, apart from having to have the RNDIS driver installed on the PC. My guess is it's probably just a wrapper for an FTP client

It would be really handy if someone could figure out the CRC algorithm on the files - I think this is the true key to opening many other goodies

By playing with the rndis.rsc file, I have established that the CRC does apply to comments, blank lines etc. so looks like a binary check, however adding stuff on the line after after the CRC does not break it, so it's probably CRCing only up until it sees the #CRC32.
Adding stuff between the last digit of the CRC and the newline does break it

There are plenty of sample files in the firmware .cab



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2013, 11:23:08 pm
More from my anonymous i7 contact, who whishes to be known as Zorro  ;)

My i7 actually had the debug tools installed
already, but they were an older/crippled version? So I replaced them
and it worked fine. Also installing the IDA remote debugger for
windows CE helped me learn a lot about the system. For example: on the
i7, if you set .version.hw.det_board.article it looks like you can
enable 30 fps. But you need to do it at startup through the config
files, and I don't know how to fix the checksum on those yet.

Just remember that when you run conmanclient2.exe,
you need to use "start conmanclient2.exe", otherwise you will just
leave your terminal hanging.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nilock2222 on October 27, 2013, 12:06:07 am

It would be really handy if someone could figure out the CRC algorithm on the files - I think this is the true key to opening many other goodies


Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 12:17:28 am
Possibly important Update
 I now suspect the CRC in the config.cfg file may be specific to the unit serial number, so the serial-only hack method may not work on other people's units.
Zorro thinks that files with CRC01 are related to the serial number, possibly with a RIPEMD160 derivative  whereas ones with CRC32 are a generic CRC.

If this is the case, then instead of using my hack files as-is, you will need to generate your own version of config.cfg by entering service mode (RNDIS + web interface) , and pulling your own config.cnf out of \Temp\appcore.d and copying into the \flashifs\hack directory.

A quick look suggests CRC32 is used for standard files (e.g. in the FW update) and CRC01 for files installed/generated in a particular unit, These files also have a #ID line containing the serial number.

One interesting thing I notice is the config file in the "service" dir doesn't have a CRC, so I'm wondering if part of the "Enter service mode" function takes this file as a template and generates a config file from it. If this is the case then There could be some interesting possibilities by editing this template file.
In fact, the only difference I can see between the "template" and the version in temp is the addition of the ID and CRC, so maybe we have a built-in CRC generation mechanism....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 12:18:25 am

It would be really handy if someone could figure out the CRC algorithm on the files - I think this is the true key to opening many other goodies


Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc
Have you checked this with any of the files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nilock2222 on October 27, 2013, 12:26:52 am
Have you checked this with any of the files?

Yep, I tried it on several of the .rsc files. Just have to delete the existing CRC line before using.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 27, 2013, 12:32:53 am
Lol, beat me to it. Just now I was previewing the post  :-DD
Just make sure to also delete the CRLF after last data line and it works! I've used: http://www34.brinkster.com/dizzyk/download/CheckCRC.zip (http://www34.brinkster.com/dizzyk/download/CheckCRC.zip)



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 12:47:52 am
Too tired to experiment now, but if it turns out that service mode entry can be used as a way to put the unit-specific sum on a config file, there is likely to be much more fun to be had.... I have sat in console mode watching files appearing in \temp  as service mode chugs away...

BTW one other new feature I noticed in service mode, is the extra 2 palette options aren't just different colours but  "blue when colder" and "red when hotter" than a value which can be set using the  up/down arrows.

BTW is anyone else here actually playing with an E4, or is everyone waiting to see if I manage to brick mine..?

For some reason I keep getting this image in my mind of a bunch of Flir people watching this thread and feeling as if their child is being ripped to pieces by a pack of wolves... :'(

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 27, 2013, 12:49:47 am
Replacing ui_remove_uicore_gui.rsc with the attached one (modded + calc chksum) should have the effect of skipping the removing of gui.exe at start-up (maybe cold start is needed?). If so, the gui.exe could be retrieved for dissasembly and finding of magic key combination.

Mike, could you try?

I'm off to sleep now.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 12:51:40 am
Zorro says he hacked his i3 to an i7 in exactly the same way as  the E4 - rndis to do service mode, copy config files, modify applaunch.dat
Go for it!


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 01:22:29 am
something that I have been wondering about is the role of the eeprom. Especially seeing how the resolution bytes get changed when entering service mode, and how my earlier changes got mysteriously reverted.  Must do some I2C analysis traces to see what happens when service mode gets enabled.
I have a suspicion that it may be that it is only used as a simple way to communicate some configuration info between the main/service app and the bootloader, or maybe even read by the FPGA directly before the filesystem gets going.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 01:37:53 am


I also know they are active running processes just by looking at "restartapp.bat":

set PATH=\windows;\FlashBFS\system\;
rset .watchdog.enable false
rset .services.log.active false
ps -k uicore
ps -k Gui


I don't think the presence of those in restartapp.bat means much. Looking at what ps says when the main app is running, most of the ones listed are NOT running. ps displays a message when any task is terminated (e.g. using stopapp), and you only get a few showing this when you stop the app.
 I suspect these being in the batch files  are just  as a precautionary 'clean-up' left over from debugging or old versions. The fact that it has upper and lower case versions reinforces this. 
I'm not sure there is a gui.exe in the E4 - if there was, it would probably be in the firmware .cab
I think the GUI is mostly done by the stuff named "Facet" - I think someone has previously pointed this out.
Might be worth a look at an i3 firmware file if there is one to compare.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 09:29:05 am
This version of rndis.rsc enables all USB modes, however The Flir utility seems to get things in a knot - I think it tries to disable MSD to prevent clashes with its own drive letter, and things get into a bit of a mess, and ending up with the user file partition not getting mounted. To fix I had to close the Flir util, force it to unhacked mode by booting with USB in and swap the rndis file back. :phew:

 BTW the utility that gives the virtual drive is Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\syx86\t3mon.exe
Quote
#
# USB mode MSD
#
.system entry
.system.usbmode text "RNDIS_UVC_MSD"
# CRC32 A18F2E3B

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 10:19:07 am
My hunch was right - adding stuff to
\flashfs\system\service\appcore.d\config.d\conf.cfg
DOES get baked into the checksummed version created by service mode entry, so for example adding
Quote
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
to the end of the file makes PIP display mode work once you are in service mode, however you get an error message onscreen in hacked reboot - it still works but there's a menu in the way and the serial console doesn't work.
However MSD is still there so you can change it back.  :phew:
But replacing the previous conf.cnf in \hack still gives the error... hmmmm

Incidentally one advantage of using RNDIS and the FLIR virtual drive over MSD is you can take pics and upload them immediately - MSD locks out taking pics when connected to USB.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 11:16:41 am
Not sure what happenned there - could be it saw the backup copy I'd made of the conf template file in \service. Unfortunately I forgot to make a copy of the CRC'd PIP config file so have to start again, however I've found some more out about the whole config & resource thing...

.rsc files in factory.d folders have CRC32

It looks at any & all files in the folder - e.g. renaming the file to set USB to RNDIS mode seems to still work

.cfg files in config.d folders have CRC01 , and it also appears to look at any and all files are looked at.

Items in these files get copied into the resource tree, so if there are items that can do fun things, they can probably be done as additional files instead of editing existing ones.

The question is can you add things like PIP and other goodies using a CRC32'd .rsc file...

I've modified the applaunch.dat to make it easier to play, so it will copy anything in config and factory folders
Quote
progressapp -f \flashbfs\system\bootlogo.bmp -g flashbfs\system\bocmd /c otlogo_
legal.bmp -d
# Start command shell on the RS-232 port
cmd /R
# Register a default user
defaultusr
cmd /C md \temp\appcore.d\
cmd /C md \temp\appcore.d\config.d
cmd /C md \temp\appcore.d\factory.d
cmd /C copy \flashifs\hack\__highres.cnf \temp
cmd /C copy \flashifs\hack\config\*.cfg \temp\appcore.d\config.d
cmd /C copy \flashifs\hack\factory\*.rsc \temp\appcore.d\factory.d
# Start appcore. Appcore starts other necessary processes
appcore




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 12:46:59 pm
OK so it looks like service mode can be used as a CRC01 stamping tool ;D

1) Copy your modified .cfg files to be stamped (without any checksum) into \flashfs\system\service\appcore.d\config.d\
2) Start service mode via web interface
3) Using serial or telnet console ( no need to wait for service mode restart) ,
copy the files from  \temp\appcore.d\config.d\*.*   to your user flash \hack dir
4) Delete the files you put in \flashfs\system\service\appcore.d\config.d\
(not sure if these are what caused problems before, but better be safe as it was a fiddle to recover)
Make sure the original conf.cfg is stil there.

You now have some CRC'd .cfg files in \hack, which you can try putting in your hack\crc folder to see what they do on the next cold boot.
Note it is not beyond doubt that some resource hacks might cause crashyness if you create resources that bork anything that runs beore applaunch,dat and progressapp (dunno if there are) , however it should in principle be recoverable by starting in E4 mode by cold booting with USB plugged in. Probably. YYMV.

Using this method to create a CRC'd PIP .cfg file from this
Quote
#
# Generated at CONFIG_DATE CONFIG_TIME
#
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry

 the PIP display mode now works.  8)

I have tried putting a CRC32 on these files but it doesn;t work. CRC32 should for for .rsc files that go in the factory directory, but not sure if you can do anything useful other than change USB mode.
Detailed analysis of the resource attributes shown by rls -lll may give cluse about which reesources can be changed by which method.

now what else can we enable.....? Must read that Ex manual to see what other features the E8 adds...

Just to reiterate - cfg files with CRC01 are almost certainly  unit-specific, so need to be generated on the actual unit being hacked. 
As & when we find the hidden menu, this will all still be  possible without opening, over the RNDIS  connection. The only thing that the serial link is currently essential for is to enable USB RNDIS.

Incidentally, the first thing you should do before any other hacking, as soon as you have RNDIS running is make a copy of everything in \flashfs as this is all put on at the factory and not easily replaceable,

You can do this at the console by copying to the user partition but it's a pain as there are many directories.
I've not yet managed to get any FTP client other than Windows comamnd-line FTP to work ( have tried FTPsurfer and WinSCP)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Monkeh on October 27, 2013, 01:03:35 pm
Try Filezilla as an FTP client. Not a clue if it'll work, but nice client anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 27, 2013, 01:27:52 pm
Windows' FTP client uses active mode by default, whereas most others use passive - maybe their FTP server only works in active mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 27, 2013, 01:29:02 pm
Windows' FTP client uses active mode by default, whereas most others use passive - maybe their FTP server only works in active mode.

+1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 27, 2013, 01:33:28 pm
it wouldn't surprise me if they left passive mode code & commands out of a embedded development ftp server
It's not like you're ever going to have NAT between the TIC and the PC.

But i expect Mike probably tried passive/active already, it's really the first things you check whenever FTP doesn't work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 04:32:34 pm
it wouldn't surprise me if they left passive mode code & commands out of a embedded development ftp server
It's not like you're ever going to have NAT between the TIC and the PC.

But i expect Mike probably tried passive/active already, it's really the first things you check whenever FTP doesn't work.
Nope - don't know much about networky stuff, I do recall a few years ago needing to use passive mode for something.
Actually the Flir A310 Tech note document recommends filezilla - just tried it an seems to work fine ( and appears to be using passive mode).
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 05:00:15 pm
Looks like Marketing went through a few name changes...
Quote
# Default calib for Ex Camera a.k.a. Astra a.k.a. Z3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 27, 2013, 05:18:45 pm
Quote
BTW is anyone else here actually playing with an E4, or is everyone waiting to see if I manage to brick mine..?
.... as I am on vacation it will have to wait until next week - I will then hack mine, hopefully without bricking. But I know - I will check in here at least once a days to see any Progress.

Mike if you need any files or eeprom file from my E4 then (might be helpful for comparing, as you said some CRC might be serial # related), just send me a PM and I can send you this stuff together with my serial.
OK need to log out - wife is ranting about me sitting at the computer during vacation  ;D

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 27, 2013, 05:44:55 pm
Looks like Marketing went through a few name changes...
Quote
# Default calib for Ex Camera a.k.a. Astra a.k.a. Z3

I think they're the internal code names.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 27, 2013, 05:53:56 pm
I think they're the internal code names.

They of course have the problem of multiple products with the same hardware, so they can't call an E4 by it's name, and Ex just isn't nice enough.
In the software this model range is referred to as Z3, I'm not sure about Astra but there is a nice picture in the web folder called Z3_Astra:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 27, 2013, 07:04:39 pm
It could be the code name for the entire product line, kind of like how Haswell is the code name for Intel's latest generation of chips.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 07:54:33 pm
I've had a good look through the UI template files, and I'm fairly sure there isn't much more functionality to be had.
The manual shows 2 different box sizes for PiP, but the UI toolbar template only shows one.

There are resource keys apparently related to extra functions, but I strongly suspect these may not be implemented in the code and/or need buttons or hardware that aren't present.

As the FPGA will be specific to this model (I assume Ex0 series have significantly different hardware), I think it's reasonable to assume the 9Hz framerate is baked into the FPGA as there would be no reason for it not to be.

So I'm probably not going to spend much more time on this for the moment, and will wait until looking at doing a definitive file package and batch files to ease installation until someone else has confirmed it all works.

Things that still need looking at to make things easier :
1) Find how to get to the hidden menu
2) Figure out the CRC01 method - if we can do this it will simplify the hack process, as you should be able to just add a CRC for your serial number and replace one .cfg file to make it an E8 without needing to use service mode, and not have the minor issues of running in service mode. (Someone is already working on this with my files.)

I will do some FFC breakouts next time I get some PCBs done, which will be in the next couple of weeks - PM me if interested.

All the info is here, and anyone who's been following closely should be able to work it out - I've prepared a step-by-step guide and file set which I will test on my unit, but will wait for someone else to proofread and test it on another unit before publishing - please PM me.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 27, 2013, 09:25:48 pm
Maybe this is a bit far-fetched but could someone try the following key combinations and see if they have any effect (enabling service settings menu or other functionality?) - I really don't know at what point during program execution and for how long...:
- Option 1: Power Button + Image Archive Button  (pressed together and held?)
- Option 2: Image Archive Button + Cancel Button (pressed together and held?)
- Option 3: Left Joystick Button + Right Joystick Button (pressed together and held?)

I saw these combos defined in bt.exe (handles key press emulation) and I think there might be some functionality tied to them, otherwise I don't see the point of having them specifically defined.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 09:54:34 pm
Maybe this is a bit far-fetched but could someone try the following key combinations and see if they have any effect (enabling service settings menu or other functionality?) - I really don't know at what point during program execution and for how long...:
- Option 1: Power Button + Image Archive Button  (pressed together and held?)
- Option 2: Image Archive Button + Cancel Button (pressed together and held?)
- Option 3: Left Joystick Button + Right Joystick Button (pressed together and held?)

I saw these combos defined in bt.exe (handles key press emulation) and I think there might be some functionality tied to them, otherwise I don't see the point of having them specifically defined.
Bear in mind bt.exe probably has functionality for other models
left+right in charge mode shows charge stats.
power + any other buttons just does powerup/down as power button, at least a long press, is probably a hardware power-manager thing
No obvious effect from others
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 10:04:13 pm
OK just spent the last 2hrs testing my hack files and batchfiles & all OK.
Then I was sent some code to calculate the CRC01, which should make it a lot simpler. Too tired to play now  & work to get done so may be a day or two...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on October 27, 2013, 10:59:53 pm
I was finally able to get into the web interface on the i3.  I'm not completely sure but it seemed like plugging the unit into power jump-started things.  The battery was about dead so maybe it spins down those features when low on power / unplugged?

Activating service mode (with user / pass: flir / 3vlig ) did indeed increase resolution.  The larger field of view is absolutely wonderful too.  Much easier to use for short ranges.  Now to get it to stick past reboots... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 27, 2013, 11:21:22 pm
While i'm not in the market for any type of TIC, i just wanted to say kudos to Mike and others for spending time on hacking this thing. Great stuff going on here! Brings back some memories when i hacked some overpowered remote-control (Betty) that uses an LPC2220 ARM based chip. Went through all that stuff with IDA-Pro, etc. Too bad that i know absolutely nothing about WinCE internals (or any other Win internals, for that matter), so i guess i'm not of much help here anyways.

Keep up the good work. Hacking stuff is just fun!

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 11:25:54 pm
Too bad that i know absolutely nothing about WinCE internals (or any other Win internals, for that matter),
Neither did I before this.... !
Very impressed with what IDA can do - many years ago I spent a lot of time writing disassemblers for many different MCUs and doing manual tracing and cross-referencing with telephone-directory sized  disassembly printouts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on October 27, 2013, 11:26:10 pm
So what is the current state of the E4 --> E8 hack?

             Is it purely a software hack (no opening the case required)?
             Are all functions of the E8 available to the E4 (is the hardware between them identical like the DS1052/DS1102)?
             Does it stick on reboot?
             Any bugs or other info worth mentioning?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 27, 2013, 11:34:10 pm
So what is the current state of the E4 --> E8 hack?

             Is it purely a software hack (no opening the case required)?
             Are all functions of the E8 available to the E4 (is the hardware between them identical like the DS1052/DS1102)?
             Does it stick on reboot?
             Any bugs or other info worth mentioning?

You need to open the case, but only the first 2 screws and a lightly stuck fascia. No warranty seals on mine.
If someone finds the hidden menu, it will be doable without opening.
All E8 functionality and resolution as far as I can see (I think Ex manual doesn't quite reflect current firmware - only difference is 1 or 2 picture-in-picture sizes).
Only one very minor issue in that the USB must not be plugged in when you cold boot (battery  insert), otherwise it will revert to E4, but only until the next cold boot so not a problem.
 
We don't currently know if the E6/8 has a bigger lens - the spec on E6 and E8 lists a higher sensitivity, which may be explained by this.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 11:21:30 am
Dave has likely been watching developments. If I were FLIR I would have been doing the same. It may come to pass that FLIR advise the agent to not supply a 'sample' for review if such would aid the hacking of an E4 in any way, even without opening it. I can't say I blame them  ;)

Mike and the other Forum members working on this 'challenge' have done sterling work. I do not pretend to understand the detail of what they have done with Win CE, but it has been fascinating all the same.

I am left bemused that the manufacturer chose to leave so much plain text commented  information in the firmware, detailing what the function of the various segments was. Understandable during development but not needed for the final release. I suspect FLIR will have learnt some valuable lessons from this investigation as well. They are a mature company, yet they did not take protection of their firmware very seriously at all. They obviously did not count on Mike and others taking a close interest in their product. I suspect the relatively 'open' firmware writing style is replicated across many of their new products.

An excellent example of complacency on the part of the software development team.

This has been/is a most educational investigation for which I thank Mike and the others who are assisting him. It would be interesting to hear Dave's comments on the matter, as with the Rigol Hack.

Sadly, FLIR may learn from this, and when they release the improved firmware with more keypad functionality, the process may need to be repeated to avoid a hard 'reset' to E4 functionality. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 28, 2013, 12:27:09 pm
They obviously did not count on Mike and others taking a close interest in their product. I suspect the relatively 'open' firmware writing style is replicated across many of their new products.
They figure that there are going to be very, very few people willing to take apart and fiddle with such a device, not only because of its price, but because of warranty and their usual customer demographic (i.e. people who don't know anything about how embedded systems work, but are "experts" at using TICs).

They could lock down the firmware even more, but that would probably just stifle sales back to their old value (and at extra cost to them to implement these changes), or even lock down the sensor somehow (and probably at even more cost to them) -- in any case, using the raw sensor directly is likely not above Mike's capabilities... (http://www.electricstuff.co.uk/ektapro.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 01:08:00 pm
Indeed, very true.

I have used this technology for many years but would never tear down a $40K camera ! I would have lost my job.

Affordability has brought curiosity with it  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 01:21:00 pm
They obviously did not count on Mike and others taking a close interest in their product. I suspect the relatively 'open' firmware writing style is replicated across many of their new products.
They figure that there are going to be very, very few people willing to take apart and fiddle with such a device, not only because of its price, but because of warranty and their usual customer demographic (i.e. people who don't know anything about how embedded systems work, but are "experts" at using TICs).

They could lock down the firmware even more, but that would probably just stifle sales back to their old value (and at extra cost to them to implement these changes), or even lock down the sensor somehow (and probably at even more cost to them) -- in any case, using the raw sensor directly is likely not above Mike's capabilities... (http://www.electricstuff.co.uk/ektapro.html)
There are also a lot of other issues like their manufacturing process, QA, calibration etc. that come into it as well - the cost of making software changes increases sunstantially as a product moves  from development to production.

Although not many people would be willing to open up a £800 product, if it is possible without opening, that changes, and bear in mind with the current software, you could decide to not make any changes to the internal files and just run it in service mode when high-res is needed, as it will stay there until the battery is taken out or it goes very flat - just putting it in sleep mode keeps it in service mode. The only thing you don't get that way is PiP mode.

There is clearly some very heavy profiteering in the 320x240 market segment at the moment, and relatively few players (many others are badged Fluke/Flir products). It only takes one to jump before the others all follow, but any comapnies that can't match the lower price for high res will be dead in the water.
However in the meantime, the low-end TIC market has to be very appealing as the volumes are potentially much higher when products get  within reach for people who wouldn't normally consider buying a TIC, so if your product has a 'hidden' advantage over your competition then this has to be good for sales.
Of course there is also the fact that people love to get a bargain by subverting the system- the Rigol effect....
The question is whether Flir are sufficiently enligtened to realise it. Time will tell.

Something else I wonder about is whether suppliers of sensors maybe have some dodgy agreements in place to supply at reduced price conditional on the end products not being used at full res. 


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 28, 2013, 01:22:11 pm
Companies only bother to do anything if
- It's required by law
 or
- It makes more money, or prevents money from being lost

The hack will boost E4 sales but will have little to no effect on E5+ sales.
(It will be engineers/hackers/makers who add to E4 sales and these people wouldn't have bought a better model otherwise)
So from a money standpoint there's no reason for Flir to stop the hack in future firmware, it would make more money to leave it.

The legal aspect however is much more of an issue.
If people can buy and modify the E4 unit from something that can be exported into something that cannot (or is more tightly controlled like 60fps) then Flir will be worried about getting in trouble with the US government.
As such, this will be the driving factor for stopping the hack on future firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 01:24:22 pm
Pandoras box may have been opened  >:D   :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 01:24:54 pm
Quote
in any case, using the raw sensor directly is likely not above Mike's capabilities...
At some point I will definitely take a look at the raw output, if only out of curiosity about noise etc. Probably not for a while though - too busy!

If someone wanted to add a TIC to a quadcopter or RC aircraft, buying this, stripping out all the surplus weight and tapping the full-res output would be a pretty viable solution and relatively low-cost. 
Converting the 60FPS raw stream to composite video would be not very hard at all - a small FPGA and a DAC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 01:28:43 pm
Maybe, but everything I have read on TIC design indicates that a lot of correction related maths is needed to form a decent image. It appears that the FPA is quite a badly behaved sensor that needs taming before its data is truly usable ? No inside knowledge on this though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 01:28:54 pm
If people can buy and modify the E4 unit from something that can be exported into something that cannot (or is more tightly controlled like 60fps) then Flir will be worried about getting in trouble with the US government.
As such, this will be the driving factor for stopping the hack on future firmware.
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 28, 2013, 01:29:51 pm
If someone wanted to add a TIC to a quadcopter or RC aircraft, buying this, stripping out all the surplus weight and tapping the full-res output would be a pretty viable solution and relatively low-cost. 

RC drone with thermal camera could loosely be classed as using the camera as part of a weapon system.

It is however, an awesome idea :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 01:31:54 pm
Its already been done several times using a Tau camera core !

http://www.buzzflyer.co.uk/quadcopter-Flir-Thermal-Imaging-Camera.asp (http://www.buzzflyer.co.uk/quadcopter-Flir-Thermal-Imaging-Camera.asp)

http://bestquadcopter.com/flying-fpv-night-flir-infrared-camera/ (http://bestquadcopter.com/flying-fpv-night-flir-infrared-camera/)

Direct You Tube link

RFTC: Flying FPV at Night with a FLIR Thermal Imaging Camera (https://www.youtube.com/watch?v=wqlptPhFmk0#ws)

Thermal Imaging Camera with Quadcopter (https://www.youtube.com/watch?v=Ml6Ftqbwqso#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 01:35:02 pm
Maybe, but everything I have read on TIC design indicates that a lot of correction related maths is needed to form a decent image. It appears that the FPA is quite a badly behaved sensor that needs taming before its data is truly usable ? No inside knowledge on this though.
Probably - there are a couple of cal files that look like per-pixel data.
I'd expect at least a gain per pixel, perhaps linearitycurves, and maybe corrections for shutter-closed offsets over different temp ranges.
And bad pixel concealment.
Which is why I'm curious to look at the raw output. Bear in mind that a lot of apps don't need linearity/accuracy and high framerate at the same time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 28, 2013, 01:35:30 pm
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...

Yeah, i guess the issue is more about the raw 60hz data being available on a 9Hz unit, rather than the resolution hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 28, 2013, 01:47:06 pm
If someone wanted to add a TIC to a quadcopter or RC aircraft, buying this, stripping out all the surplus weight and tapping the full-res output would be a pretty viable solution and relatively low-cost. 

I found this page earlier.
http://diydrones.com/profiles/blogs/tiny-thermal-cameras-for-drones (http://diydrones.com/profiles/blogs/tiny-thermal-cameras-for-drones)
http://www.drsinfrared.com/ModulesDetectors/UncooledCameraModules.aspx (http://www.drsinfrared.com/ModulesDetectors/UncooledCameraModules.aspx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 02:29:29 pm
Of course there is another reason that a manufacturer may want to stop a hack - if someone was reselling hacked units, either with original  branding or rebranded (might be tricky to change the boot-up logos to rebrand though).

And no, it won't be me...!
Wouldn't surprise me to see the odd on ebay though, maybe more likely i3's
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on October 28, 2013, 03:13:11 pm
The question is whether Flir are sufficiently enligtened to realise it. Time will tell.

I wouldn't count on it, cooperate management types are by definition incompetent.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 03:14:21 pm
DRS makes nice equipment -- curious why it's not ITAR.
Anything over 9fps made in USA is covered by ITAR, and similar regs in other countries.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 28, 2013, 04:25:34 pm
I wonder how hard it would be to write our own custom firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IanB on October 28, 2013, 04:51:20 pm
If time averaged sampling is used to smooth out noise, then higher frame rates are going to be harder to achieve without upping the noise level.

One possibility is to have a bigger lens with a larger aperture. This would allow more radiation to reach the sensor in a given time, permitting a faster frame rate without compromising the S/N ratio on the sensor.

At some point performance increases will rely on physical design parameters and not simply on electronics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on October 28, 2013, 04:59:26 pm
Yeah, but nobody says you'd need to use the full 60Hz. When sample twice, three or four times to reduce the noise by averaging, you'd still come out with more than 9Hz.
Besides, you could implement a moving average filter even with 60Hz and trade in noise for motion blur.
Anyway, Mike seems to assume that the complete signal/image processing is done in the FPGA/ASIC, so this would make it much harder if not impossible to change the 9Hz anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 28, 2013, 07:30:33 pm
Too bad that i know absolutely nothing about WinCE internals (or any other Win internals, for that matter),
Neither did I before this.... !
Very impressed with what IDA can do - many years ago I spent a lot of time writing disassemblers for many different MCUs and doing manual tracing and cross-referencing with telephone-directory sized  disassembly printouts.

Indeed, IDA is a great tool. i guess you already found the button to give you a graphical "flow diagram" style view of the code, where the boxes contain the code fragments?

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on October 28, 2013, 07:33:47 pm
Quote
Anything over 9fps made in USA is covered by ITAR, and similar regs in other countries.

Perhaps I am wrong, but I was under the impression that ITAR only governs the export of government furnished technical data, and not technology itself; that is to say that if an engineer creates a thermal camera that operates at higher refresh rate than 9Hz, but does so without accessing ITAR schematics or white papers, then the device is itself not ITAR. Feel free to call BS on this one though
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 28, 2013, 07:35:46 pm
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...

Is the FPGA a flash/EEProm type, or does it use an external EEProm for the bitstream? Or is the bitsream uploaded from a file through the WinCE? If the latter, it may just be matter of getting the "right" bitstream file...

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 08:34:54 pm
Too bad that i know absolutely nothing about WinCE internals (or any other Win internals, for that matter),
Neither did I before this.... !
Very impressed with what IDA can do - many years ago I spent a lot of time writing disassemblers for many different MCUs and doing manual tracing and cross-referencing with telephone-directory sized  disassembly printouts.

Indeed, IDA is a great tool. i guess you already found the button to give you a graphical "flow diagram" style view of the code, where the boxes contain the code fragments?

Greetings,

Chris
I've not actually used it, just seen the listings for this and the x-ray. If I ever get something that needs some serious disassembly I'll probably buy it, as sometimes you need the flexibility to adjust options depending on what'd been found.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 08:36:38 pm
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...

Is the FPGA a flash/EEProm type, or does it use an external EEProm for the bitstream? Or is the bitsream uploaded from a file through the WinCE? If the latter, it may just be matter of getting the "right" bitstream file...

Greetings,

Chris
It's RAM, loaded from a file on the WinCE filesystem. However it would be a lot of work to create a new one, even after a lot of effort just to work out the pinout- you'd probably need to risk sacrificing a unit to do it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 28, 2013, 09:28:24 pm
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...

Is the FPGA a flash/EEProm type, or does it use an external EEProm for the bitstream? Or is the bitsream uploaded from a file through the WinCE? If the latter, it may just be matter of getting the "right" bitstream file...

Greetings,

Chris
It's RAM, loaded from a file on the WinCE filesystem. However it would be a lot of work to create a new one, even after a lot of effort just to work out the pinout- you'd probably need to risk sacrificing a unit to do it.

Well, the idea was not so much about reimplementing it, but getting hold of one for the better models (unless even the higher models, sold inside the US, have the same limitations). There is a good chance that the signal connections itself are the same, i.e. based on the same circuitry, and just the bitstream is a different one depending on capabilities. Of course that would require to get hold of one in the first place ....

Greetings,

Chris

Edit: That reminds me about something that i was wondering for quite some time: is there anything like a disassembler for FPGA bitstreams? Maybe not something as sophisticated as IDA, but still? Or is the IP about what goes on inside an FPGA such a "mystery" that there is simply no way to produce such a tool?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ataradov on October 28, 2013, 09:35:36 pm
Edit: That reminds me about something that i was wondering for quite some time: is there anything like a disassembler for FPGA bitstreams? Maybe not something as sophisticated as IDA, but still? Or is the IP about what goes on inside an FPGA such a "mystery" that there is simply no way to produce such a tool?
There were a couple projects trying to reverse-engineer bitstream format for Xilinx FPGAs. It was shut down by Xilinx lawyers almost immediately as it became public. It is still possible to find a PDF describing the effort, but referenced files are all gone from public view.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 09:39:41 pm
I have no reason to believe that >9fps is possible with a hack (though you may get a little more with overclocking) - As the downsampling appears to happen in the FPGA there is no reason not to bake the limit into the FPGA. Whether they have or not is an interesting question - not impossible that they use the same FPGA code across a wide range of models.
Of course what we don't know is how different the hardware is from the Ex0 series...

Is the FPGA a flash/EEProm type, or does it use an external EEProm for the bitstream? Or is the bitsream uploaded from a file through the WinCE? If the latter, it may just be matter of getting the "right" bitstream file...

Greetings,

Chris
It's RAM, loaded from a file on the WinCE filesystem. However it would be a lot of work to create a new one, even after a lot of effort just to work out the pinout- you'd probably need to risk sacrificing a unit to do it.

Well, the idea was not so much about reimplementing it, but getting hold of one for the better models (unless even the higher models, sold inside the US, have the same limitations). There is a good chance that the signal connections itself are the same, i.e. based on the same circuitry, and just the bitstream is a different one depending on capabilities. Of course that would require to get hold of one in the first place ....
]The problem is that (if they have any sense) the pinout will be adapted to suit the PCB of the product - even a single pin swap would mean a very different bitstream. Add to that this product has the visible camera stuff handled by the FPGA.

It would however be interesting to see what signals & voltages are used to drive the sensor. It's a bit tricky to get at though - would need to make a riser board.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 28, 2013, 09:41:05 pm
Code: [Select]
Ex  fpga.bin       FLIR....POLLUX......27-Jun-2013.............................,.......ASBB
Exx fpga_B2CO3.bin FLIR....MIRA........23-Aug-2013.............................8.......SLCO
Exx fpga_C4_55.bin FLIR....MIRA........26-Apr-2013.............................8.......SLCO


 :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 09:41:45 pm
Quote
Anything over 9fps made in USA is covered by ITAR, and similar regs in other countries.

Perhaps I am wrong, but I was under the impression that ITAR only governs the export of government furnished technical data, and not technology itself; that is to say that if an engineer creates a thermal camera that operates at higher refresh rate than 9Hz, but does so without accessing ITAR schematics or white papers, then the device is itself not ITAR. Feel free to call BS on this one though
It covers movement of technical information and items, regardless of who does it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 09:43:38 pm
Code: [Select]
Ex  fpga.bin       FLIR....POLLUX......27-Jun-2013.............................,.......ASBB
Exx fpga_B2CO3.bin FLIR....MIRA........23-Aug-2013.............................8.......SLCO
Exx fpga_C4_55.bin FLIR....MIRA........26-Apr-2013.............................8.......SLCO

:-//
..of course these files would be in firmware upgrade packages, but unless the PCB is identical they wouldn't be any use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 28, 2013, 09:46:13 pm
..of course these files would be in firmware upgrade packages, but unless the PCB is identical they wouldn't be any use.

Identical PCB, identical FPGA, Identical IR sensor... No chance I'd say
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 28, 2013, 09:48:34 pm
]The problem is that (if they have any sense) the pinout will be adapted to suit the PCB of the product - even a single pin swap would mean a very different bitstream. Add to that this product has the visible camera stuff handled by the FPGA.

It would however be interesting to see what signals & voltages are used to drive the sensor. It's a bit tricky to get at though - would need to make a riser board.

That's something i would not be so sure of. I have seen different products from the same manufacturer re-using circuit blocks. Sure, the actual layout was sometimes different, but the interconnections remained the same. of course none of that used FPGA's, but microcontrollers instead, but even those could have benefited from a slightly different pin usage depending on the layout. But instead they reused the same block, with the same interconnections. Of course i am just specualting here that FLIR does the same, so it may well be that i am completely wrong here.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on October 28, 2013, 09:49:17 pm
Edit: That reminds me about something that i was wondering for quite some time: is there anything like a disassembler for FPGA bitstreams? Maybe not something as sophisticated as IDA, but still? Or is the IP about what goes on inside an FPGA such a "mystery" that there is simply no way to produce such a tool?
There were a couple projects trying to reverse-engineer bitstream format for Xilinx FPGAs. It was shut down by Xilinx lawyers almost immediately as it became public. It is still possible to find a PDF describing the effort, but referenced files are all gone from public view.

Sadly, this doesn't surprise me in the least ;(

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 10:49:50 pm
I had a play with the TargetNoiseMk setting and it does appear to be added noise.
There is a small, but noticeable difference between default value of 135 and a low setting of 13
I can only assume it's to reduce banding and/or give an impression of sharpness
(These pics are with MSX, but low light so mostly thermal)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on October 28, 2013, 10:58:57 pm
thats an absolute joke. its almost clear on the low setting image what are we looking at. the high well mobile phone camera quality
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 11:18:18 pm
EEEEEEK!  :scared: Adding noise = YUK !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ataradov on October 28, 2013, 11:25:22 pm
Adding noise before decimation (reduction of resolution) is a common technique.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 28, 2013, 11:27:50 pm
I only work with the full unadulterated FPA resolution  :P

My cameras are an artificial noise free zone ! (I hope)

 :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tesla500 on October 28, 2013, 11:31:04 pm
Adding noise before decimation (reduction of resolution) is a common technique.

What does this accomplish?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on October 28, 2013, 11:40:56 pm
Adding noise before decimation (reduction of resolution) is a common technique.

What does this accomplish?
more sales in their higher software optioned models?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ataradov on October 28, 2013, 11:41:21 pm
Let's say you have signal with a maximum just a bit below your lowest resolution level. It will show as a plain color showing lowest possible level. Now add a bit of white noise. Pixels that were just below the threshold are now part time above the threshold, so you have two discrete levels. Pixels that were way below the threshold will stay there with higher probability.

Decimation filter will average the noise, so it won't show as much in the final result.

This technique is also used to "increase" resolution of ADCs.

PS: Proper name of this technique is dithering. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 28, 2013, 11:56:12 pm
I now have a much simpler hack method that does not involve service mode, and does not modify any existing files on the camera. PM me if you have a camera and want to try.

It is fairly likely this may work on the i3 as well - not sure how similar the i series is to the E
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on October 28, 2013, 11:57:02 pm
Also known as supersampling. I'd imagine that your typical FPA produces enough noise that adding more isn't a big deal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 29, 2013, 01:19:11 am
I wonder if similar hacks can be applied to Fluke cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on October 29, 2013, 01:56:56 am
I now have a much simpler hack method that does not involve service mode, and does not modify any existing files on the camera. PM me if you have a camera and want to try.

It is fairly likely this may work on the i3 as well - not sure how similar the i series is to the E

So much respect! I can't wait until my FFC cable gets here...I got the shipping confirmation from DigiKey today and they charged sales tax which means it should be shipping from inside the state.  Here's hoping it will be waiting for me tomorrow when I get home from work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 29, 2013, 02:48:18 am
There were a couple projects trying to reverse-engineer bitstream format for Xilinx FPGAs. It was shut down by Xilinx lawyers almost immediately as it became public. It is still possible to find a PDF describing the effort, but referenced files are all gone from public view.
I take it debit from Jean-Baptiste Note on http://www.ulogic.org/ (http://www.ulogic.org/) was one of those projects? Looks like his debit project has found a new home (http://code.google.com/p/debit/). From what I can find it looks to be the same codebase. Checking the source clones might also yield nice new resources.

git clone https://code.google.com/p/debit/

You know you want to...


edit: die stupid url tag, die!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ataradov on October 29, 2013, 03:05:56 am
I take it debit from Jean-Baptiste Note on http://www.ulogic.org/ (http://www.ulogic.org/) was one of those projects?
Yes, it was one of the projects. I found it when I was trying to do reverse-engineering myself. But seeing how lawyers are VERY active with cease and desist notices, I lost all interest. Completing and maintaining the project would be a lot of work, no reason to do it and know for sure that it will be shut down as soon as it gets any traction.

PS: Cloned it just in case :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 29, 2013, 03:22:02 am
i reckon the noise seting is just to make the image quallity lower than the better models.

Would need to check the value on a E8 to confirm
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 29, 2013, 03:28:50 am
I wouldn't be surprised if the noise setting is a bit of both. A lower (but non-zero) amount of noise might actually improve the image quality, as per the dithering remarks. And a higher amount of noise might be used to artificially make the sensor in lower end models appear crappier than it is. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on October 29, 2013, 05:41:12 am
I wouldn't be surprised if the noise setting is a bit of both. A lower (but non-zero) amount of noise might actually improve the image quality, as per the dithering remarks. And a higher amount of noise might be used to artificially make the sensor in lower end models appear crappier than it is. ;)
Noticing how high Mike could turn up the noise from the E4's default, maybe they were thinking of making an E1 ~ E3 at some point.

Quote
Yes, it was one of the projects. I found it when I was trying to do reverse-engineering myself. But seeing how lawyers are VERY active with cease and desist notices, I lost all interest. Completing and maintaining the project would be a lot of work, no reason to do it and know for sure that it will be shut down as soon as it gets any traction.
The limited (public*) efforts to RE FPGAs is as you said, largely due to political/legal instead of technical issues; due to how the devices are constructed their bitstreams have a very regular format so it's rather trivial to figure out. Now if only someone does it anonymously and releases like Wikileaks... ;)

*because no doubt the Chinese have done it out a long time ago, and have just not shared their results, at least on the English side of the web, maybe for these legal reasons.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 29, 2013, 09:12:08 am
I wouldn't be surprised if the noise setting is a bit of both. A lower (but non-zero) amount of noise might actually improve the image quality, as per the dithering remarks. And a higher amount of noise might be used to artificially make the sensor in lower end models appear crappier than it is. ;)
Noticing how high Mike could turn up the noise from the E4's default, maybe they were thinking of making an E1 ~ E3 at some point.

No - it's just a variable that can be set to stupid values.
Having used it some more, I think it's probably mainly to reduce visible banding on smooth gradients - this may be more noticeable at lower resolutions. Might be interesting to see if the E8 has a different setting.
I think a small amount of noise does give an illusion of more crispness - the noise-free version looks smooth but subjectively slightly less well focussed. I wonder if a factor is making a cheap lens look subjectively better.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 29, 2013, 12:19:37 pm
Mike,

Here is the link to the cheaper Thermal Camera lenses that I mentioned previously. Maybe FLIR are using these in the lower end cameras ? Note that these lenss were first detailed in May 2009 and not the date shown on the articles. As such they could easily be in production now. Performance appears inferior to Germanium but in a low end TIC maybe that would not be such an issue.

http://www.gizmag.com/cheap-infrared-lenses-fraunhofer/23659/ (http://www.gizmag.com/cheap-infrared-lenses-fraunhofer/23659/)

http://www.en.iwm.fraunhofer.de/news/details/id/591/ (http://www.en.iwm.fraunhofer.de/news/details/id/591/)

As an insight into the crazy world of thermal camera optics, I just procured an 18mm, 45 Degree Germanium lens for my PM695. Its a large, multi-element, beast with very large lumps of Germanium in it of approx 60mm diamter. The price from FLIR and its agents is ...... over $7500  :scared:  I have seen them cheaper on the used market though. The Germanium lenses still appear to be a very expensive component in the TIC.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 29, 2013, 01:26:44 pm
An interesting document on the new technolgy for cheap thermal camera lenses is to be found here:

http://www.lehigh.edu/~inimif/eciworkshop/25D_Zhang.pdf (http://www.lehigh.edu/~inimif/eciworkshop/25D_Zhang.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on October 29, 2013, 02:54:20 pm
When you say "cheap thermal camera lenses", do you mean the sensor as well, or just the lens? I'm assuming high-IR sensors aren't commonly found for cheap?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 29, 2013, 03:16:01 pm
Sadly not.

It would appear that FLIR have managed to reduce the manufacturing cost of the FPA (sensor), but we are uncertain as to whether the lens assembly has also been cost reduced in some way. I have presented a cheaper thermal camera lens that may have been used with the E4 FPA.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on October 29, 2013, 05:31:28 pm
Quote
It would appear that FLIR have managed to reduce the manufacturing cost of the FPA (sensor), but we are uncertain as to whether the lens assembly has also been cost reduced in some way. I have presented a cheaper thermal camera lens that may have been used with the E4 FPA.

Flir reduced the manufacturing cost compared to what? You mean it's confirmed that the E4 has a different lens/sensor than the E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 29, 2013, 05:39:19 pm
Hard to tell as the anti-reflection coatings mean you can't tell much about the material.  The lens is pretty small, and I think single element - it is a slightly unusual shape in that the front is concave. Small  ge lenses aren' t hugely expensive I found some prices for  Ge windows at £10 1-off  (http://www.crystran.co.uk/windows/germanium-windows), so volume prices for small lenses are likely to be in the low tens of pounds max. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 29, 2013, 05:42:05 pm
Quote
It would appear that FLIR have managed to reduce the manufacturing cost of the FPA (sensor), but we are uncertain as to whether the lens assembly has also been cost reduced in some way. I have presented a cheaper thermal camera lens that may have been used with the E4 FPA.

Flir reduced the manufacturing cost compared to what? You mean it's confirmed that the E4 has a different lens/sensor than the E8?
Compared to earlier devices. It is not currently known if the E8 has a bigger lens, but the better sensitivity spec suggests this may be the case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 29, 2013, 07:25:32 pm
My comparison of FPA cost was relative to the type of "full fat" FPA fitted in my industrial FLIR PM695 thermal cameras. As you will see from the pictures of the sensor in this post

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-review/30/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-review/30/)

my FPA is encased in a sturdy vacuum envelope and mounted on a rigid bearer. Lots of Gold plating as well. Its a significant size and a monster when compared to the newer 'cut down' design that FLIR have in the E4. Remember, my FLIR cost $40,000 and not $1,000 so manufacturing costs have likely been trimmed dramatically, even when compared to more recent FLIR designs.


Some care is needed when considering the cost of a Germanium lens. A Germanium lens is manufactured from a single crystal of Germanium which, in itself, is a very expensive material. The 'blank' is then cut with a diamond profiler to create the correct shape. The shaped blank is then polished into a lens. To perform well, the lens is then coated with expensive anti reflective coatings that directly effect the transmission performance of the finished lens. This process is far more expensive and complex than making a simple flat Germanium windows.  Such are not diamond cut and not coated unless specified. Saying all that, I have bought 20mm GaAs and ZnSe lenses from China for only $30  :-// I assume they need a similar production process to Ge but I am not certain and I know the coatings are not the same as they were designed for CO2 laser use which is relatively narrow band use.

Mike's referenced url states GBP150 for a 13mm ZnSe lens  :o  ZnSe is supposed to be the cheaper option !

http://www.crystran.co.uk/lenses/zinc-selenide-positive-lenses/130mm-x-280-mm-fl-pcx (http://www.crystran.co.uk/lenses/zinc-selenide-positive-lenses/130mm-x-280-mm-fl-pcx)

http://www.crystran.co.uk/lenses/zinc-selenide-positive-lenses (http://www.crystran.co.uk/lenses/zinc-selenide-positive-lenses)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on October 29, 2013, 09:37:13 pm
Mike (and anyone else with an E4):

How useful would you estimate this particular camera is for taking images of PCBs, in enough detail to identify which components are getting warm (with or without the benefit of your recent work)?

For example: last year I borrowed an E60, which has a manual focus lens, and not only was I able to pick out individual 0603 components, but I could also easily see which components were active at any particular time. It would have been a really useful tool for finding out how a board's power dissipation is distributed, or for tracking down failed components on a faulty card.

Shame it's about £6000, though, and there's no way I'd get value for money from it. But £800 for an E4 is far easier to justify.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 29, 2013, 09:48:25 pm
Mike (and anyone else with an E4):

How useful would you estimate this particular camera is for taking images of PCBs, in enough detail to identify which components are getting warm (with or without the benefit of your recent work)?

Yes -
See pics on this post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316866/#msg316866)

The only issue at the moment is adjusting the lens for close-up focus -the lens can be adjusted without opening as it's only locked by the friction of the surrounding rubber, but it's a bit hard to grab hold of. 
 I am working on a tool to do this, as well as looking at using cheap laser cutter lenses
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 30, 2013, 09:07:15 am
After finding the CRC01 algorithm, I had a look at the hidden menu, but so far I didn't really find where it can be enabled ... I'll probably look a bit more into it once I get the camera but if I don't get a break through soon, I'll leave it to someone else ... the serial method doesn't seem too inconvenient, you just need to remove the face plate and nothing else.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 30, 2013, 10:40:21 am
After finding the CRC01 algorithm, I had a look at the hidden menu, but so far I didn't really find where it can be enabled ... I'll probably look a bit more into it once I get the camera but if I don't get a break through soon, I'll leave it to someone else ... the serial method doesn't seem too inconvenient, you just need to remove the face plate and nothing else.

If you use IDA, search for "2hiddenMenuRequested" in "facet_ui_qml.dll". You'll see that at the start of the sub_10078468 there's a compare with 0x10003; if it matches it enables the secret menu, otherwise it simply returns - I have no idea what that 0x10003 is...

I haven't found how and from where this "sub_10078468" is called but I'm sure that doing remote debugging on the actual device could teach us some more about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 12:30:52 pm
After finding the CRC01 algorithm, I had a look at the hidden menu, but so far I didn't really find where it can be enabled ... I'll probably look a bit more into it once I get the camera but if I don't get a break through soon, I'll leave it to someone else ... the serial method doesn't seem too inconvenient, you just need to remove the face plate and nothing else.

If you use IDA, search for "2hiddenMenuRequested" in "facet_ui_qml.dll". You'll see that at the start of the sub_10078468 there's a compare with 0x10003; if it matches it enables the secret menu, otherwise it simply returns - I have no idea what that 0x10003 is...

I haven't found how and from where this "sub_10078468" is called but I'm sure that doing remote debugging on the actual device could teach us some more about it.

For this sort of thing it would be handy to have a utility that would search for a binary string in a whole folder of files to find cross-references between DLLs. .EXEs etc. - anyone know of a good one?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 30, 2013, 12:34:02 pm
For this sort of thing it would be handy to have a utility that would search for a binary string in a whole folder of files to find cross-references between DLLs. .EXEs etc. - anyone know of a good one?

grep?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on October 30, 2013, 12:35:48 pm
If I had designed the unit I would probably have made the service menu enable when you point the camera at a special service barcode/QRcode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 30, 2013, 12:36:01 pm
Looks to me like this function is used in a virtual table. If I had to guess I'd say the "KeyEvent" call back. R1 should be the QKeyEvent then and 0x10003 would be the key code ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 30, 2013, 01:46:12 pm
Looks to me like this function is used in a virtual table. If I had to guess I'd say the "KeyEvent" call back. R1 should be the QKeyEvent then and 0x10003 would be the key code ?

thought about that but found no reference about 0x10003 being a key - from bt.exe dissasembly I've seen that the keycodes have much lower hex values
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 30, 2013, 01:47:48 pm
thought about that but found no reference about 0x10003 being a key - from bt.exe dissasembly I've seen that the keycodes have much lower hex values

Interesting ... Because looking at the XML in ui.d, there is some keys and value associated to them and they are much higher values ... ( like 16777269 = 0x1000035 )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on October 30, 2013, 01:53:37 pm
Quote
Interesting ... Because looking at the XML in ui.d, there is some keys and value associated to them and they are much higher values ... ( like 16777269 = 0x1000035 )

hmm, haven't looked at those keys defined in "design_ui_z3.xml"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 30, 2013, 04:50:03 pm
Bullet has been bitten... E4 ordered.
Any Flir reps reading should forward Mike a sales commission  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 04:57:38 pm
Bullet has been bitten... E4 ordered.
Any Flir reps reading should forward Mike a sales commission  :)
From traffic here and PMs alone , the current count is about six units so far....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 30, 2013, 05:00:35 pm
I keep getting a feeling that this thread alone will soon have a major impact on the thermal imaging industry. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cosmos on October 30, 2013, 05:08:05 pm
E4count ++
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 05:22:28 pm
E4count ++
poll added :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on October 30, 2013, 05:46:54 pm
For this sort of thing it would be handy to have a utility that would search for a binary string in a whole folder of files to find cross-references between DLLs. .EXEs etc. - anyone know of a good one?

010Editor is a good one, but it's not free.  Though you can run it for 30 days in a free-trial mode, with full functionality.

http://www.sweetscape.com/010editor/ (http://www.sweetscape.com/010editor/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on October 30, 2013, 06:20:43 pm
I'm still waiting to see if the E4 can fully become an E8 or if it has a different lens etc.

I could certainly have some fun with a thermal camera :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MFX on October 30, 2013, 06:29:46 pm
Mike (and anyone else with an E4):

How useful would you estimate this particular camera is for taking images of PCBs, in enough detail to identify which components are getting warm (with or without the benefit of your recent work)?

Yes -
See pics on this post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316866/#msg316866)

The only issue at the moment is adjusting the lens for close-up focus -the lens can be adjusted without opening as it's only locked by the friction of the surrounding rubber, but it's a bit hard to grab hold of. 
 I am working on a tool to do this, as well as looking at using cheap laser cutter lenses

Looking at the moulding on the lens surround could you make a tool out of polymorph? Just soften it and push it against the lens surround.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 07:01:05 pm
Mike (and anyone else with an E4):

How useful would you estimate this particular camera is for taking images of PCBs, in enough detail to identify which components are getting warm (with or without the benefit of your recent work)?

Yes -
See pics on this post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316866/#msg316866)

The only issue at the moment is adjusting the lens for close-up focus -the lens can be adjusted without opening as it's only locked by the friction of the surrounding rubber, but it's a bit hard to grab hold of. 
 I am working on a tool to do this, as well as looking at using cheap laser cutter lenses

Looking at the moulding on the lens surround could you make a tool out of polymorph? Just soften it and push it against the lens surround.
Maybe - problem is it needs to be rigid enough to push against the outer ring, but hollow enough to not block too much field of view - currently looking at a PCB ring with pins.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on October 30, 2013, 07:07:18 pm
Could you perhaps make an adjustment tool out of some 'chemical metal' or similar:

- Wrap a layer of epoxy around a dowel of a suitable diameter
- (optionally) cover with cling film to prevent deposits from contaminating the lens
- press into the splined adjuster surrounding the lens and remove
- allow to harden
- trim to a convenient length

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 30, 2013, 08:12:32 pm
Mike,

You have mentioned the quality of the lens fitted in the E4. Can you explain a little more about why you believe it is not as good as that fitted in the E8. I know that the sensitivity specs differ a little but I am wondering if you have seen any other issues, such a distortion.

If the only issue is the sensitivity, I would not spend a lot of time replacing the lens as the E4 spec is respectable in that area.

I am fighting the urge to buy an E4 as I have the FLIR industrial units, but the design and lower weight of the E4 with 320x240 capability is very tempting. You have done some superb work on this camera and I am very pleased that you have potentially introduced many people to affordable thermal imaging at a decent resolution. You literally see the world differently when looking at it through a thermal camera. Your hack may actually create a demand for decent resolution at affordable prices that will encourage FLIR to consider whether selling a few for a lot of $ is as good as seller heaps for less $  :-//

The BBC are using thermal cameras in their wildlife programs these days and many watchers will be looking to do the same as it is far more convenient and effective than IR illumination and IR cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 10:49:16 pm
Could you perhaps make an adjustment tool out of some 'chemical metal' or similar:

- Wrap a layer of epoxy around a dowel of a suitable diameter
- (optionally) cover with cling film to prevent deposits from contaminating the lens
- press into the splined adjuster surrounding the lens and remove
- allow to harden
- trim to a convenient length
I thought of that but don't think you'd get a well enough defined edge
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 30, 2013, 10:54:33 pm
Mike,
You have mentioned the quality of the lens fitted in the E4. Can you explain a little more about why you believe it is not as good as that fitted in the E8. I know that the sensitivity specs differ a little but I am wondering if you have seen any other issues, such a distortion.

Simply that the E6 &8 have a better sensitivity spec,  I haven't seen anything that looks like it's related to sensitivity in the config file, and  that the nearly £4000 price difference might be at least in part down to better optics as opposed to cynical profiteering.
I don't know a great deal about optics but I think it's reasonable to assume that a lens that is 'just good enough' for 80x60 is cheaper than one that gets the best out of a 320x240 sensor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 30, 2013, 11:20:08 pm
I don't see any difference between the size of the E4 and the E8 lenses, maybe the coating is different??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on October 30, 2013, 11:21:40 pm
Mike,
You have mentioned the quality of the lens fitted in the E4. Can you explain a little more about why you believe it is not as good as that fitted in the E8. I know that the sensitivity specs differ a little but I am wondering if you have seen any other issues, such a distortion.

Simply that the E6 &8 have a better sensitivity spec,  I haven't seen anything that looks like it's related to sensitivity in the config file, and  that the nearly £4000 price difference might be at least in part down to better optics as opposed to cynical profiteering.
I don't know a great deal about optics but I think it's reasonable to assume that a lens that is 'just good enough' for 80x60 is cheaper than one that gets the best out of a 320x240 sensor.

I've got a spare 25mm diameter lens from a TIC if you think you could make use of it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 12:01:21 am
I don't see any difference between the size of the E4 and the E8 lenses, maybe the coating is different??
As the units look identical it is quite possible that online images of an E8 could actually be an E4. Or an E8 Or anything inbetween...
It is of course entirely possible that they are identical, or different, or have different coatings, or have a different shape inside

Here are some close-up pics - hard to see but the outer surface is concave.
X-ray indicates it is a single piece.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 12:51:05 am
Mike,
You have mentioned the quality of the lens fitted in the E4. Can you explain a little more about why you believe it is not as good as that fitted in the E8. I know that the sensitivity specs differ a little but I am wondering if you have seen any other issues, such a distortion.

Simply that the E6 &8 have a better sensitivity spec,  I haven't seen anything that looks like it's related to sensitivity in the config file, and  that the nearly £4000 price difference might be at least in part down to better optics as opposed to cynical profiteering.
I don't know a great deal about optics but I think it's reasonable to assume that a lens that is 'just good enough' for 80x60 is cheaper than one that gets the best out of a 320x240 sensor.

I've got a spare 25mm diameter lens from a TIC if you think you could make use of it?
I have a few assorted  germanium optics - no had time to play yet. That one looks like it may be a bit big to be useable.
For what I want, screwing out the lens to get close focus seems to work pretty well, or at lead will do once I get a decent tool to adjust it more easily.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on October 31, 2013, 01:00:36 am
Looks like you could make a focusing tool from a rubber stopper.  Or a piece of soft rubber/silicone tubing stretched over a short dowel leaving end of tubing extending past end of dowel.  Camera repair guys use these to disassemble lenses.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on October 31, 2013, 01:01:18 am
Bullet has been bitten... E4 ordered.
Any Flir reps reading should forward Mike a sales commission  :)
From traffic here and PMs alone , the current count is about six units so far....

Make that seven.

Decided to upgrade from my i7 to an E4. 

The photo/thermal merging ability, plus the 320x240 ability, plus the ability to focus close for PCB work made it a no-brainer.

Another commission check for Mike :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on October 31, 2013, 06:34:37 am
Local dealer here in TW just gave me a quote for NT$48,300(1641USD) after tax, greedy bastards. Although if this is the only way to get one I might have to accept it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on October 31, 2013, 07:23:28 am
Local dealer here in TW just gave me a quote for NT$48,300(1641USD) after tax, greedy bastards. Although if this is the only way to get one I might have to accept it.


You are lucky for that 1641 USD. I gave in Czech republic 1800 USD,  :wtf:.

For that price, I will not have regrets to hack it to E8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 31, 2013, 07:38:45 am
Well "official" price in europe is 995 EUR excl tax. So with taxes that's around 1650 USD.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on October 31, 2013, 07:49:14 am
Well "official" price in europe is 995 EUR excl tax. So with taxes that's around 1650 USD.



Sorry for inaccuracy, its 1740 USD,  I used bad(month old) exchange rate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on October 31, 2013, 07:50:01 am
Well "official" price in europe is 995 EUR excl tax. So with taxes that's around 1650 USD.
yeah cos here 1usd=1eur if you are a buisness
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 31, 2013, 07:57:19 am
Well "official" price in europe is 995 EUR excl tax. So with taxes that's around 1650 USD.
yeah cos here 1usd=1eur if you are a buisness

That, or what I also have seen: 1 usd = 1.5 Euro.. :(

BTW the Flir E4 is priced Eur 1200,- here in the Netherlands..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 31, 2013, 08:03:53 am
1200, or 1204? Because 995 ex btw is the cheapest I found...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 31, 2013, 08:18:10 am
for the Dutch guys: Conrad has them in stock and they have a 10% discount on everything going till monday, so that makes € 1.083,55 including tax.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on October 31, 2013, 08:29:10 am
Beside the possibility that the lower thermal sensitivity might only be on paper just to differentiate the more expensive E8 etc. from the cheap E4, can't it be, that the lower thermal sensitivity is due to the fact that the camera downsamples from 320x240 to 80x60? As it combines then 4x4 pixel to 1 pixel (and possibly adds some noise) it looses sensitivity of course. I doubt that Flir uses different lenses; it would probably cheaper to order/manufacture large amounts of the same lens (also used in I-series?) than having 3 or even more different lenses.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 09:15:07 am
Beside the possibility that the lower thermal sensitivity might only be on paper just to differentiate the more expensive E8 etc. from the cheap E4, can't it be, that the lower thermal sensitivity is due to the fact that the camera downsamples from 320x240 to 80x60? As it combines then 4x4 pixel to 1 pixel (and possibly adds some noise) it looses sensitivity of course. I doubt that Flir uses different lenses; it would probably cheaper to order/manufacture large amounts of the same lens (also used in I-series?) than having 3 or even more different lenses.
It would be the opposite - avaraging 16 pixels would reduce noise, so if all other factors are identical, a downsampled image should have more temperature resolution, not less.
I don't think manufacturing cost savings due to volume come into it - The only thing that matters is minimum cost on the E4. There is plenty of headroom in the price of the higher models to cover any increased cost of smaller volumes of bigger lenses. I doubt we'd be talking more than $100 in the sort of volumes FLIR buy lenses in.
In terms of manufacturing process - remember they already fit a different LCD window to each model as it has the model number printed  on it, as well as a different side sticker. Screwing in a different lens wouldn't be a big deal.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on October 31, 2013, 11:51:49 am
1200, or 1204? Because 995 ex btw is the cheapest I found...

1204, I rounded it to 1200.. ;)

Will conrad also give a discount on the Flir?
(I don't like Conrad. They always mess things up. Last time I ordered something from conrad I ended up waiting 3 months.. )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 31, 2013, 12:03:43 pm
Will conrad also give a discount on the Flir?

Yes they do, I ordered one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 31, 2013, 12:53:37 pm
for the Dutch guys: Conrad has them in stock and they have a 10% discount on everything going till monday, so that makes € 1.083,55 including tax.

Thanks for the tip!  :-+ I just ordered one.

And now let's hope Conrad doesn't fuck things up as per their usual modus operandi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on October 31, 2013, 03:28:26 pm
If anyone knows, where I can buy one of these bare sensors or sensor assemblies, please let me know.
If I can get hold of one or two (without buying the whole camera) I would fit some germanium lens to it and implement the image processing on an FPGA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 03:39:53 pm
If anyone knows, where I can buy one of these bare sensors or sensor assemblies, please let me know.
If I can get hold of one or two (without buying the whole camera) I would fit some germanium lens to it and implement the image processing on an FPGA.
Zero chance of that - manufactures won't talk to you unless you're doing volume. the only other route to cheap high-res is ex-vehicle night vision cams, but these tend to go on ebay for a similar price range to the E4.
e.g,
http://www.ebay.co.uk/itm/BMW-Night-Vision-Camera-/161126804979?hash=item2583e7edf3 (http://www.ebay.co.uk/itm/BMW-Night-Vision-Camera-/161126804979?hash=item2583e7edf3)
http://www.ebay.co.uk/itm/BMW-night-vision-camera-for-F-series-brand-new-original-in-original-packaging-/121122060732?pt=Motors_Car_Truck_Parts_Accessories&hash=item1c336ff9bc (http://www.ebay.co.uk/itm/BMW-night-vision-camera-for-F-series-brand-new-original-in-original-packaging-/121122060732?pt=Motors_Car_Truck_Parts_Accessories&hash=item1c336ff9bc)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 31, 2013, 04:00:42 pm
Anyone thinking of buying one of those BMW or Audi thermal cameras for use rather than parts salvage, should be aware that the output from the module is propriatary data over LVDS. they are designed to only work with their associated ECU. Many have found out only after buying one -= money wasted  :scared:

The much older Raytheon BST based Cadillac thermal camera is Composite video output but the cameras are very expensive on the used market considering their poor performance when compared to the E4. The car mounted cameras are also vulnerable to stone chip damage to the Germanium lens, even when a lens protector was fitted.

This is a route into TIC ownership that I considered, and quickly discounted. If you can pick up a working Cadillac TIC for less than $300 then that would be reasonable for playing with. Such a unit offers no (repeat no) ability to influence its image output.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 04:16:55 pm
Anyone thinking of buying one of those BMW or Audi thermal cameras for use rather than parts salvage, should be aware that the output from the module is propriatary data over LVDS. they are designed to only work with their associated ECU. Many have found out only after buying one -= money wasted  :scared:

The much older Raytheon BST based Cadillac thermal camera is Composite video output but the cameras are very expensive on the used market considering their poor performance when compared to the E4. The car mounted cameras are also vulnerable to stone chip damage to the Germanium lens, even when a lens protector was fitted.

This is a route into TIC ownership that I considered, and quickly discounted. If you can pick up a working Cadillac TIC for less than $300 then that would be reasonable for playing with. Such a unit offers no (repeat no) ability to influence its image output.
I wonder if that data format is the same as the info I found ( I think for the Tau) , which looks indentical to the one on the E4 (the latter just not being LVDS).  This would be easy to decode - the only question is how much processing is needed of the data - for vision as opposed to thermography it's probably a lot simpler. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on October 31, 2013, 04:40:53 pm
I see these are advertised on aliexpress for $312 (minimum of 10 units) with free delivery to Europe/US.  Anyone interested in taking a punt?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 05:38:01 pm
I see these are advertised on aliexpress for $312 (minimum of 10 units) with free delivery to Europe/US.  Anyone interested in taking a punt?
Link? I'd be in for a couple at that price. Could be a nice little earner making an interface box to convert to composite.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on October 31, 2013, 05:42:22 pm
http://www.aliexpress.com/item/FLIR-E4-Thermal-Imaging-Camera/1415663456.html (http://www.aliexpress.com/item/FLIR-E4-Thermal-Imaging-Camera/1415663456.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on October 31, 2013, 05:44:05 pm
I'd be in for one - anyone else?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daveshah on October 31, 2013, 05:49:12 pm
Seller has no feedback score. Personally, I think it's a bit suspicious (otherwise I'd be in to buy one!).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 31, 2013, 05:54:15 pm
For 312$ sure ... I'll take one.

But that indeeds looks very suspicious ... But aliexpress has buyer protection which works AFAIK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on October 31, 2013, 05:56:11 pm
Might well be a scam (although their buyer protection scheme has worked for me in the past).  I guess the question is are they really made in Estonia, or China?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 06:03:09 pm
Definite scam - thought the OP was referring to ex-BMW car ones, price maybe plausible for ones pulled from crashed cars
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cosmos on October 31, 2013, 06:05:07 pm
here is another one with lots of 35 for 248USD each,  FREE SHIPPING
http://www.aliexpress.com/item/Whoesale-FLIR-E4-Thermal-Imaging-Infrared-Camera/1434283893.html (http://www.aliexpress.com/item/Whoesale-FLIR-E4-Thermal-Imaging-Infrared-Camera/1434283893.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on October 31, 2013, 06:05:49 pm
So are they definitely made in Europe (obviously a scam if they are).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on October 31, 2013, 06:12:08 pm
Might well be a scam (although their buyer protection scheme has worked for me in the past).  I guess the question is are they really made in Estonia, or China?

My arrived today from Sweden, but Made in  Estonia.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on October 31, 2013, 07:34:28 pm
AliExpress  :palm:

http://www.resellerratings.com/store/AliExpress (http://www.resellerratings.com/store/AliExpress)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on October 31, 2013, 07:39:13 pm
wrt to the BMW camera, a friend of mine says that not only they use some proprietary crap, but it's also "protect". Attemptin to enable the camera too many times without properly authenticating seems to wipe the fw and brick it. And without auth, the sensor isn't even active (no clock, no nothing).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 08:44:33 pm
wrt to the BMW camera, a friend of mine says that not only they use some proprietary crap, but it's also "protect". Attemptin to enable the camera too many times without properly authenticating seems to wipe the fw and brick it. And without auth, the sensor isn't even active (no clock, no nothing).
I bet that's just an eeprom count in the camera.
I suppose it is plausible there is some sort of security mechanism to make it hard to re-use due to the ITAR crap. If they wanted to it could be tied to the car's VIN to track ownership etc.
I'd really like to get hold of a 'bricked' camera if your friend knows of any going cheap  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on October 31, 2013, 08:50:48 pm
The E4 probably costs more than $300 to manufacture -- there's absolutely no way that listing is legitimate.
unless its from a stolen shipment
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 31, 2013, 10:19:00 pm
Ref the BMW and Audi authentication....that must be what people were warning about in a thread I read on the difficulties of use outside the original car. My Audi contains many modules that are 'married' to the various primary computers fro Engine and interior systems. It is often done to prevent repair outside the Dealerships but that was fixed with VAGCOM  ;)  It is also used for to expensive in car entertainment modules as a theft deterrent. These defences have been getting more elaborate than the old eeprom but I am no expert in such. It could be that the expensive TIC is being protected from theft and resale ? If so, the protection could be pretty nasty as both BMW and Audi spend a lot on theft protection now.

As Mike says, a bricked unit may reveal its secrets. I have seen the modern BMW TIC units sell for almost $1000 though so little VFM when compared to the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on October 31, 2013, 10:32:15 pm
The Ali (baba/express) listings are either outright scams, or it could be counterfeit product shamelessly marked as the real thing.

More likely a scam, but I wouldn't be surprised to see some of the Chinese IR sensors showing up in counterfeit "FLIR" cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2013, 10:34:29 pm
As Mike says, a bricked unit may reveal its secrets. I have seen the modern BMW TIC units sell for almost $1000 though so little VFM when compared to the E4.
unless it's cheap because it's bricked. It could also be that the brickage is just in the processor box.

If they wanted to really go to town and be totally secure it could use a secure challenge-response handshake authentication thing between the processor box and the camera, but I have a feeling it probably doesn't.

I'm also curious about how they deal with the shutter cal on this unit - you wouldn't a night vision cam blinking at you...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on November 01, 2013, 09:48:05 am
As Mike says, a bricked unit may reveal its secrets. I have seen the modern BMW TIC units sell for almost $1000 though so little VFM when compared to the E4.
unless it's cheap because it's bricked. It could also be that the brickage is just in the processor box.

If they wanted to really go to town and be totally secure it could use a secure challenge-response handshake authentication thing between the processor box and the camera, but I have a feeling it probably doesn't.

I'm also curious about how they deal with the shutter cal on this unit - you wouldn't a night vision cam blinking at you...

Maybe they hold the last frame in the buffer while the shuttter flicks down or sort of buffer the video .5 or .25 seconds and give it some catch-up time while it calibrates.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 01, 2013, 09:54:49 am
The problem wouldn't so much be lack of frames, but lack of frame updates. No use staring at last minute's idilic frame buffer when at this very instant you are heading straight towards a big moose/cow/kangaroo/alien*.

* Adjust for local wildlife setting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonent on November 01, 2013, 09:57:04 am
The problem wouldn't so much be lack of frames, but lack of frame updates. No use staring at last minute's idilic frame buffer when at this very instant you are heading straight towards a big moose/cow/kangaroo/alien*.

* Adjust for local wildlife setting.
Just go ahead and mow down the alien. You'll want good evidence before the black helicopters and suits arrive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 01, 2013, 10:13:05 am
I had a play with the TargetNoiseMk setting and it does appear to be added noise.
There is a small, but noticeable difference between default value of 135 and a low setting of 13
I can only assume it's to reduce banding and/or give an impression of sharpness

Yes, it's for apparent sharpness, and makes images a bit more distinct.  I took your two 320x240 images, scaled each down to80x60 , then back up, and combined them.  Which side looks perceptually better now?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 10:15:38 am
The problem wouldn't so much be lack of frames, but lack of frame updates. No use staring at last minute's idilic frame buffer when at this very instant you are heading straight towards a big moose/cow/kangaroo/alien*.

* Adjust for local wildlife setting.
My guess is it's a fast shutter - if it's a 60fps imager, losing a few frames is probably tolerable. It could use avaraging over a few  shutter images to reduce noise in the reference image if necessary. Could also be a continuous wheel, and higher internal sample rate
It could also analyse the image for motion and only do a cal when there's not much action going on.
As it doesn't care much about actual temperature, Another option may be to analyse the incoming data for pixel-timescale variations and take a long-term avarage to estimate the variation between pixels. You may get occasional visual artifacts if the camera is looking at a stationary image for a while, but you don't really care about this for an automotive vision system as it's movement you're looking for.
Another alternative is they do a factory cal over a range of temps and store the nominal offsets for each pixel at each temperature.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 01, 2013, 11:11:14 am
The Ali (baba/express) listings are either outright scams, or it could be counterfeit product shamelessly marked as the real thing.

More likely a scam, but I wouldn't be surprised to see some of the Chinese IR sensors showing up in counterfeit "FLIR" cameras.
If I can get an actual working 320x240 or even 80x60 thermal imaging camera for $300, I don't care who or what made it... I'm betting more on "no product at all". Even the Chinese ones we found in the review thread were >$1000.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 11:23:13 am
This just arrived from Flir UK - do you think I should x-ray it before opening....?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 01, 2013, 11:29:11 am
Whoa ! Were you expecting it ?

May be they have sent you an E8 as a gift for increasing sales of their E4  :-//

That would certainly be a very nice gesture. They may wish to thank you for highlighting the vulnerabilities of their software build. Or it may be a new case as you slightly mangled yours opening it ?

You have me sat on the edge of my seat waiting to see what they have sent you  :)

I wish I got boxes from FLIR...... they usually contain very nice "goodies"

Good PR for FLIR if it is something nice, bad PR if it explodes on opening  :-DD

OPEN IT....OPEN IT NOW ! (Please  ;)  )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 11:29:55 am
OK stand down the bomb squad - just the soft case they'd promised - so at least  they're still talking to me (or haven't seen this thread yet...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 01, 2013, 11:33:14 am
OH ! .....disappointed  :'(

I thought we were going to witness an amazing act of generosity from the PR people at FLIR.

Too much to ask I suppose.

Thanks for opening it and posting so quickly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 01, 2013, 12:36:00 pm
As car thermal cameras have been mentioned. I attach a datasheet on AutoLiv as it contains specs etc. I believe this is the system fitted to Audi and BMW cars. It uses LVDS for the cameras video data and CAN Bus for the communication with the ECU. Sadly no mention of how the system copes with auto calibration events. As the ECU forms part of a pedestrian protection system with trajectory projection used for warnings, it may be that the short calibration period is not an issue as the ECU will have already spotted a target some distance away and may delay the calibration routine until the 'target' is passed. These systems appear to be a pedestrian and animal detection safety fitment and are not intended as a true night vision system for driving/piloting a vehicle, with it as the primary vision system (as used by military pilots).


Autoliv website:

http://www.autoliv.com/Pages/default.aspx (http://www.autoliv.com/Pages/default.aspx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 02:53:07 pm
May be they have sent you an E8 as a gift for increasing sales of their E4  :-//
Well they may have trouble selling them, so might as well give a few away...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on November 01, 2013, 05:17:30 pm
They use the nigtvision cams (three generations by now) for Audi and BMW premium cars. All from FLIR. Mercedes uses another technology which is basically adding a very strong IR Headlight which illuminates the street without dazzling other drivers (due to the invisibility of IR) and then just using a standard camera for near infrared. So no thermal on Mercedes.

Audi and BMW use standard shutters, no shutter wheel (see image) and probably try to make it as fast as possible (fraction of a second, a few frames) and maybe also combining several shutter sequences together.
The sensor seems the same with the on die ADC.

Unfortunately they use a proprietary interface called LIN which is a high speed differential link for automotive applications to transmit the signal an they also use a cryptographic handshake over CAN-Bus with a unique car identifier with some properitary challenge-response-system to ensure that cameras cannot be retrofitted to another car and only work with the one they are bought with. And of course due to the Dual use bla bla...
It looks like the cam also gets into some lock state, when one tries to send wrong messages to it and it bricks itself...

There is one car night vision camera which works without the cryptographic handshake with the cars main controller which is a Caddilac one (very hard to get here in germany). This camera just outputs NTSC when applied power, but has a reduced resolution of 320x120 which is interlaced to 320x240... So if you over there in 'merica can get your hands on one of these, i would not hesitate as long as the price is ok...

Since I am just interested in the bare sensor, i will try to score one of the Audi or BMW anyway. I don't care if it bricks itself, as long as it does not burn the sensor somehow :-) Cool tip with the car cams btw, mike, thanks for that!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on November 01, 2013, 05:19:08 pm
Huh, seems to have lost the second image of the shutter for Audi.. Here it is again...  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 05:36:12 pm
The sensor seems the same with the on die ADC.
That looks identical to the E4 one - not at all surprising.
At some point I will make a riser board to look at what signals go into the sensor - my guess is the lockout on the car ones is just a flag to tell the FPGA to not do anything. I have no doubt there is some way to reset this via CAN with the right tools. Must have a word with my mate who does dodgy stuff to cars...
Quote
Unfortunately they use a proprietary interface called LIN which is a high speed differential link for automotive applications to transmit the signal an they also use a cryptographic handshake over CAN-Bus with a unique car identifier with some properitary challenge-response-system to ensure that cameras cannot be retrofitted to another car and only work with the one they are bought with. And of course due to the Dual use bla bla...
It looks like the cam also gets into some lock state, when one tries to send wrong messages to it and it bricks itself...
LIN is a low-speed cheap serial bus, typically used between a CAN node and small devices, e.g. a door may have CAN into the door to a door controller, then LIN to the various switches etc. withn the door.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 01, 2013, 06:13:33 pm
Yep, LIN is the low end replacement for CAN - for sensors and actuators where you don't need CAN.
Not proprietary at all. In the end it's more or less an UART with a different transceiver and a bit of protocol on top.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on November 01, 2013, 06:43:09 pm
Sorry, i mixed it up...
I meant LVDS
The video interface is called LVDS
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 01, 2013, 09:29:54 pm
This just arrived from Flir UK - do you think I should x-ray it before opening....?

I thought it was going to be a box of legal documents!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 01, 2013, 10:12:23 pm
Any update on the hidden menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 01, 2013, 10:13:01 pm
Sorry, i mixed it up...
I meant LVDS
The video interface is called LVDS
LVDS just means low voltage differential signals. Probably it's flat panel display link (FPD) which uses LVDS and is therefore often (mistakenly) called LVDS.
At least this is common for notebooks and stuff like the Raspberry Pi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cyr on November 01, 2013, 10:27:58 pm
Or cameralink which is basically the same serial LVDS interface but for camera sensors...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 10:33:58 pm
This PDF documents the LVDS format used by Flir's Tau 2 cameras, which looks the same as the datastream from the E4 sensor, and possibly the automotive units
 http://storage.pardot.com/6132/83776/Tau2_Electrical_IDD.pdf (http://storage.pardot.com/6132/83776/Tau2_Electrical_IDD.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 01, 2013, 11:30:46 pm
Will a kind soul please post here a short summary with the status of the E4 hacking. I am trying to avoid reading all the 33 pages. ;-)

I do have a E4 and would love to increase its resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 01, 2013, 11:40:23 pm
Now tested by a couple of users, confirmed on FW 1.18.7 and 1.18.8
Files attatched.

Warning : take care not to break stuff!
This hack may be resilient to firmware updates. Maybe.
But may be best to remove prior to update and replace after, just in case.

Open E8.cfg in a PC text editor (not anything that will mangle linefeeds etc.!)

At the end of the file, replace xxxxxxxx with the 8-digit serial number of your camera

Save the file (Make sure there is exactly one CRLF at the end of the file)

At a PC command prompt, run

  CRC01 E8.cfg  (on the edited file)

This will display a line in the form
# CRC01 xxxxxxxx

Add this line to the end of the E8.cfg file, so it now looks like :

  # ID xxxxxxxx
  # CRC01 yyyyyyyy

where xxxxxxxx is your serial number and yyyyyyyy is the generated CRC
(should be exactly one CRLF after the CRC)

Save the file.

Plug the E4 into USB and open the file folder

Copy the new E8.cfg and copyhack.bat files to the root of the E4 file folder

Unplug USB (Important - otherwise filesystem won't be visible within E4 !)
Wait 5 seconds to ensure E4 has re-mounted the file system. If you get a "file not found" at the next step, wait 5 secs and retry.

Connect to serial console (38K4 baud 8N1)  using Hyperterminal or whatever. press enter until \> prompt appears

Type :
 \flashifs\copyhack

Remove battery, replace and restart. Unit will now start up like an E8.

The files can be removed from the camera's drive

Enjoy!

-----------------------------------------------------------------------
If the new file is wrong, the only symptom will be that the unit will behave like an E4.
Quickest way to tell is to look for the extra measure, display and palatte menu options

-----------------------------------------------------------------------------
Pinout for serial console

FFC connector accessable under label on front of lens housing
Looking at lens side with handle down
You may find it easier to further disassemble than get the label off without damage. Take care  not to lose the lens cover spring - see teardown video.

<left edge> <pin 16>....<pin 1>
Contacts are on bottom side (towards handle)
Pin 3 RXD
Pin 4 TXD
Pin 16 or 8 ground

Use 3.3v TTL level interface, e.g. FTDI TTL-232-3v3 cable

TTL232 Pin 1 (0v) to ground
TTL232 Pin 4 (TXD) to RXD
TTL232 Pin 5 (RXD) to TXD

Suggested FFC jumper cable molex Molex 0210200165 or similar.
If using a 5V serial adapter, use a 10K resistor in series with the adapter's TXD
--------------------------------------------------------------
De-hacking
Using serial console, delete \flashfs\system\appcore.d\config.d\e8.cfg
--------------------------------------------------------------------------

Changing startup screen (cold boot only)
Replace \flashbfs\system\bootlogo_legal.bmp ( copy from USB filesystem as per other files)
Original is 320x240 8 bpp windows bitmap.
Beware of changing format, as if progressapp crashes it may not run the console prompt




 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 02, 2013, 03:56:22 am
Thanks a lot mike!

A  questions:

1. How about adding this procedure to the bottom of the original post in this thread?  It will be easier to find it.

2. What will be the end result of this mod? A full E8 resolution and functionality?

3. "Wait 5 seconds to ensure E4 has re-mounted the file system"   - how do I verity the the file systems was re mounted?

4. Any chance of posting a picture of the serial connector with pin 1 annotation?

5. How do you connect the USB serial adapter to the Molex 0210200165? Can it be soldered? Using a matching connector.

Thanks again. This is an awesome hack!

Z.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 02, 2013, 07:09:03 am
Wow, great hack!! THANKS!! (do not own an e4 yet.. but that may change in the future)

Mike, I looked at the E8 config, and I wonder: what would happen if one would change the following, could one get extra functions?:

.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.enabled bool false

.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false

.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false

.caps.config.image.sysimg.measureFuncs.mline.enabled bool false

Or
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false


and this one:

.caps.config.image.zoom.enabled bool false

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 07:50:14 am
Now tested by a couple of users, confirmed on FW 1.18.7 and 1.18.8
Files attatched.
Great work, thanks!  :-+ I just got the tracking info for my E4 ... can't wait to start playing with it.

3. "Wait 5 seconds to ensure E4 has re-mounted the file system"   - how do I verity the the file systems was re mounted?

You verify this by NOT getting a "file not found" error in the next step. If you do get the error, simply wait a bit and try again. The 5 seconds is just an arbitrary "should be long enough" pause to give win ce some time to sort things out after the usb disconnect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 08:53:31 am
Now tested by a couple of users, confirmed on FW 1.18.7 and 1.18.8
Files attatched.
Great work, thanks!  :-+ I just got the tracking info for my E4 ... can't wait to start playing with it.

3. "Wait 5 seconds to ensure E4 has re-mounted the file system"   - how do I verity the the file systems was re mounted?

You verify this by NOT getting a "file not found" error in the next step. If you do get the error, simply wait a bit and try again. The 5 seconds is just an arbitrary "should be long enough" pause to give win ce some time to sort things out after the usb disconnect.
I haven't tried all of them but a lot of these got enabled by the earlier service mode hack (e.g. zoom) and didn't seem to do anything. I'm fairly sure a lot of these relate to features which are either not implemented in the E4 software and/or UI menu structure, or need buttons which aren't present. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 02, 2013, 09:56:35 am
Now tested by a couple of users, confirmed on FW 1.18.7 and 1.18.8


My E4 is 1.19.8. I hope that hack will be working on that firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 01:34:42 pm
Incidentally, you can find some win ce 6.0 resources for that MCIMX257 cpu that's in the E4 at this freescale link (http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=IMX25_SW). Docs + BSDL file don't require login, the WIN CE 6.0 source does.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on November 02, 2013, 01:50:07 pm
Well, I just finished wiring the local distributor the payment for my E4, so for this month, after accounting for income tax, rent, food etc I am left with less than $100 to put in the piggy bank. Damn you Mike, damn you!!!  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 02, 2013, 04:58:16 pm
My E4 is 1.19.8. I hope that hack will be working on that firmware.
Did you see any differences from the 1.18.8 firmware (see review video)? E.g. is the joystick in the middle connected with any action (without pressing the middle button before)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 02, 2013, 05:36:51 pm
My E4 is 1.19.8. I hope that hack will be working on that firmware.
Did you see any differences from the 1.18.8 firmware (see review video)? E.g. is the joystick in the middle connected with any action (without pressing the middle button before)?


No, any actions on joystick. I´am afraid of anti-hack firmware. Mike will sent me FFC breakout PCB, I will hack my E4 ASAP, and we will see.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 05:49:20 pm
Can you see any differences between files on your E4 and older firmware files?

At any rate, it will be interesting to see if this is a regularly scheduled boring update, or an OMG th3 h4X0rZ quick fix. Does anyone know how often Flir typically do their updates? And what is their policy in making these updates available for download. As in, there apparantly are devices with 1.19.8 firmware out there, but I can't find any mention of this firmware on the flir website.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 06:06:28 pm
Can you see any differences between files on your E4 and older firmware files?

At any rate, it will be interesting to see if this is a regularly scheduled boring update, or an OMG th3 h4X0rZ quick fix. Does anyone know how often Flir typically do their updates? And what is their policy in making these updates available for download. As in, there apparantly are devices with 1.19.8 firmware out there, but I can't find any mention of this firmware on the flir website.
1.18.8 isn't there either. Could be that the update is only for their internal functions - production test etc. or E8 features when are not currently enabled in the hack .cfg file.
I have it on good authority that they are planning something to improve the UI but no timescale.
the latest manual is also slightly out of step in that it shows multiple PiP sizes, but the current FW only supports one ( as seen in UI files).
I'd be interested to see the .cfg and UI files in the later firmware.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 02, 2013, 06:21:36 pm
I wonder if the serial port is fed to the pads on the board for a bluetooth module? then it will be simple to just get a BT serial module and populate the board pads for the module and you will have the serial terminal available without any cable needing to be inserted. Pair the module with a PC or phone with terminal software and you will have another comms method.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 02, 2013, 06:53:48 pm
Can you see any differences between files on your E4 and older firmware files?

At any rate, it will be interesting to see if this is a regularly scheduled boring update, or an OMG th3 h4X0rZ quick fix. Does anyone know how often Flir typically do their updates? And what is their policy in making these updates available for download. As in, there apparantly are devices with 1.19.8 firmware out there, but I can't find any mention of this firmware on the flir website.

I haven´t older firmware to compare, its shipped with 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 02, 2013, 06:57:01 pm
Almost there!

If you install the Flir tools there is a file in the bin map: FlirInstallNet.exe which opens a telnet and ftp connection over the standard USB connection !

Just run the program, click the [Get Versions] button and be surprised.
Oh yes, the [Get resource] button is nice too.

The communication stuff is in the Flir.Cronos.Net.CameraUpdate.FIFEngine.dll

It also creates a nice log file, viewable when clicking the [L] button:

Code: [Select]
<cut>
FIF::UVCCommandDispatcher::DispatchMessageA sending message:
FIF::UVCCommandDispatcher::DispatchMessageA sending message: start cmd
CMD started successfully.
FIF::FIFInstallerEngine::OnCommandDispatcherMessage
Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
<cut>

Now a little USB sniffing and we have a closed-box hack  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 07:05:31 pm
Sorry, why the USB sniffing? What's missing?
Once you have a console, you have the hack.... All you need to be able to do is copy one file from the user partition to flashfs
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 02, 2013, 07:21:53 pm
Sorry, why the USB sniffing? What's missing?

The console....
There is no text input.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madpuma13 on November 02, 2013, 07:23:05 pm
So I was in the process of purchasing (awaiting for it to ship an E6 unit) when I came across a review video from Mike for the e4. He seemed to be very thorough and so I looked at some of his other videos and came across this teardown thread.

I watched the video and was amazed at everything mike was doing (nearly all of it went over my head). In any case I notice the thread is quite long so I jump to the end and their is discussion of the E4 being modded to be an E8.

I saw Mikes most recent post and am curious as to what exactly this mod does to the E4. I know it is very common for manufactures to put the full capabilities into some electronic items and gimp the lower end models via software to lower production costs. However, they usually have it locked or encrypted.

So because i cant find anywhere that makes it clear, what is the end result of this mod? Does it turn into a fully functional (higher res thermal image, picture in picture, all other options) E8? Or what exactly does it do? Any help appreciated, maybe I have time to cancel my order.

I might also suggest making an entirely new thread or updating the first post of this one with this info to make it easier to locate. UNless of course you dont want it to be found that easily to make this mod possible for as long as possible before it gets eliminated via an update.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 07:40:22 pm

So because i cant find anywhere that makes it clear, what is the end result of this mod? Does it turn into a fully functional (higher res thermal image, picture in picture, all other options) E8?
Yes.
The only thing we don't currently know is if the E6 and/or 8 have a better lens.
Quote
I might also suggest making an entirely new thread or updating the first post of this one with this info to make it easier to locate. UNless of course you dont want it to be found that easily to make this mod possible for as long as possible before it gets eliminated via an update.

There is still some ongoing work to see if it can be done without opening the case. And isn't it worth some time spent reading to get this much added upgrade...? :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 08:11:28 pm
UNless of course you dont want it to be found that easily to make this mod possible for as long as possible before it gets eliminated via an update.

Nah, that's not it. He just want to give other people the chance as well to cultivate patience and persistence. :) Not that hard to through 30-ish pages. Besides, that's a useful skill too. Quickly getting the useful tidbits from long threads. ;)

No doubt when all is done there will be a summary, but if you want it now now then you can always read the thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 08:20:04 pm
Sorry, why the USB sniffing? What's missing?

The console....
There is no text input.

When it's sending those commands over USB, do you see any extra usb-serial devices? Probably not, but it's worth checking. It would be totally easy if you could get it to register itself as a usb-serial adapter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madpuma13 on November 02, 2013, 08:20:35 pm
Most definitely not hard to go through it all. I am doing so as we speak. The only reason I posted at all to find out exactly what the mod did instead of finding it myself was because of my current order for the E6. I wanted to cancel it as early as possible.

Thank you very much for answering promptly. You saved me the hassle of returning my unit (hopefully) and $1500.

I am a programmer by trade and like I said, most of what Mike did went over my head but I will be looking forward to donating toward this forum and some beer money for mike if he lets me know how  :)

Thanks again! and keep up the great work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 08:22:51 pm
Ok. Been lurking for a while...
Just chiming in with an idea:

So it seems that you can take:

camera.cmd
eFLIRinstall_MSD.dat
FLIRLaunch.dat

From the original .fif firmware file, modify them (camera.cmd to run Mike's hack command, FLIRLaunch.dat to not check for CRC?)

Pack them with no compression using 7zip together with Mike's e4hack folder, change .zip to .fif.
When opening this file in FLIRInstallNet.exe and pressing "CMD" the new commands from camera.cmd appears.

So pressing "Run FIF", run commands from camera.cmd? Could we make our own .fif hack file?
Maybe just start with activating RNDIS...

FIF test file below. Change .zip to .fif. Please do not run it :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 08:22:59 pm
Just had a thought... if you look at the contents of the installer .cab, there is a script file camera.cmd
If it is possible to create a new firmware .cab/.fif which can pass any required signing/CRC check, It should be possible to produce a new /cmd file whose sole purpose is to copy the one config file.

If course that is a big If....

Code: [Select]
## 10
# Combined fif installation for "ASCO Z3"
# Start by examining camera components. Use md to note state for later coming
# handlers.
# Note: This initial check code should not use "addfile" to ease/speed up
# execution with "eFLIRInstall" when camera is already updated
#
#old kit without gethwtype. Use os name for identify
type \windows\osimgkit.rev
[NAME ASCO*][$GOTO isOScorrect]
$FAIL "Update is intended for FLIR Z3-Series - not this camera - aborts install"
$GOTO end
#
$LABEL isOScorrect
## 12_header.spec

$SHOW "Combined firmware (1.18.7) is intended for FLIR Z3-Series"
# Clean from potential earlier install
rmdir \temp\OS
rmdir \temp\APP
rmdir \temp\PROD
#
#
## 20
#check OS - appcore independent check
type \windows\osimgkit.rev
[*1.0.0*}][$GOTO wrongOS]
[*16.0.10*][$GOTO checkOSEnd]
#Here if OS is not 16.0.10, mark OS for update
md \temp\OS
$GOTO checkOSEnd
#
#
$LABEL wrongOS
$SHOW "OSimage need to bigger than 1.0.0! Install OS-image manualy first",2
$GOTO end
$LABEL checkOSEnd
## 30
rls .version.kits.appkit.ver
[*1.0.13"*][$GOTO extendedCheckApp]
[*Bad command*][$GOTO appUnknown]
[*bad data*][$GOTO appUnknown]
[*failed*][$GOTO appUnknown]
$GOTO setAPPforupdate
$LABEL extendedCheckApp
kitcrc -c \FlashBFS\system\kits.d\appkit.rev
[*FAIL*][$GOTO setAPPforupdate]
$GOTO checkAppEnd
$LABEL appUnknown
#Not possible to check app - assume update
$FAIL "***Warning*** Unable to check camera! Press ignore to install anyway",2

$LABEL setAPPforupdate
md \temp\APP
$LABEL checkAppEnd
## 40
rls .version.kits.prodkit.ver
[*"1.0.0.7"*][$GOTO extendedCheckProd]
[*Bad command*][$GOTO prodUnknown]
[*bad data*][$GOTO prodUnknown]
[*failed*][$GOTO prodUnknown]
$GOTO setPRODforupdate
$LABEL extendedCheckProd
kitcrc -c \FlashBFS\system\kits.d\prodkit.rev
[*FAIL*][$GOTO setPRODforupdate]
$GOTO checkPRODEnd
$LABEL prodUnknown
#Not possible to check prod - assume update
$FAIL "***Warning*** Unable to check camera! Press ignore to install anyway",2
#
$LABEL setPRODforupdate
md \temp\PROD
#
#
#
$LABEL checkPRODEnd
## 50
$LABEL cont1
# Now we should have an analyse of needed updates noted as directories in \temp
dir /B \temp
[*OS*][$GOTO cont2]
[*APP*][$GOTO cont2]
[*PROD*][$GOTO cont2]
$FAIL "Camera is already updated",1
# If continued here, user wants to force an update
md \temp\OS
md \temp\APP
md \temp\PROD
#
$LABEL cont2
# Update decisions has been taken, stop app applications
$SHOW "Will now update OS/appkit/prodkit"
# Try to stop applications
rset .services.log.active false
rset .watchdog.enable false
ps -k facet
ps -k Facet
ps -k Fenix
ps -k fenix
ps -k uicore
ps -k Gui
ps -k Prod
ps -k prod

...snip


addfile flashbfs/system/web/service/focus/index.asp
addfile flashbfs/system/web/service/focus/laser.asp
addfile flashbfs/system/web/service/focus/lensdist.asp
addfile flashbfs/system/web/service/imgcorr/activatedigfilters.asp
addfile flashbfs/system/web/service/imgcorr/gainmap.asp
addfile flashbfs/system/web/service/imgcorr/gainmapcalc.asp
addfile flashbfs/system/web/service/imgcorr/gainmapcalcgf.asp
addfile flashbfs/system/web/service/imgcorr/gainmapcold.asp
addfile flashbfs/system/web/service/imgcorr/gainmapresult.asp
addfile flashbfs/system/web/service/imgcorr/gainmapselcase.asp
addfile flashbfs/system/web/service/imgcorr/gainmapwarm.asp
addfile flashbfs/system/web/service/imgcorr/imgcorrselcase.asp
addfile flashbfs/system/web/service/imgcorr/index.asp
addfile flashbfs/system/web/service/imgcorr/operability.asp
addfile flashbfs/system/web/service/imgcorr/operabilitylog.asp
addfile flashbfs/system/web/service/imgcorr/pixkill.asp
addfile flashbfs/system/web/service/imgcorr/shuttermap.asp
addfile flashbfs/system/web/service/imgcorr/staticmap.asp
addfile flashbfs/system/web/service/imgcorr/staticmapcalc.asp
addfile flashbfs/system/web/service/imgcorr/staticmapcold.asp
addfile flashbfs/system/web/service/imgcorr/staticmapprepare.asp
addfile flashbfs/system/web/service/imgcorr/staticmapresult.asp
addfile flashbfs/system/web/service/imgcorr/staticmapwarm.asp
addfile flashbfs/system/web/service/inc/accmeasprottempl.inc
addfile flashbfs/system/web/service/inc/calibprottempl.inc
addfile flashbfs/system/web/service/inc/eepromlock.inc
addfile flashbfs/system/web/service/inc/errorcodes.inc
addfile flashbfs/system/web/service/inc/servicemenu.inc
addfile flashbfs/system/web/service/inc/serviceutils.inc
addfile flashbfs/system/web/service/index.asp
addfile flashbfs/system/web/service/ppr.asp
addfile flashbfs/system/web/service/ppri.htm
addfile flashbfs/system/web/service/tdrift/curcomp.asp
addfile flashbfs/system/web/service/tdrift/index.asp
addfile flashbfs/system/web/service/tdrift/logging.asp
addfile flashbfs/system/web/service/tdrift/sensors.asp
addfile flashbfs/system/web/smallcam.asp
addfile flashbfs/system/web/styles/flirweb.css
addfile flashbfs/system/web/sysinfo.asp
addfile flashbfs/system/web/web-addon/a-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/a-web-addon/index_s.asp
addfile flashbfs/system/web/web-addon/a-web-addon/index_us.asp
addfile flashbfs/system/web/web-addon/a2-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/a2-web-addon/index_s.asp
addfile flashbfs/system/web/web-addon/a2-web-addon/index_us.asp
addfile flashbfs/system/web/web-addon/e-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/e2-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/e3-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/fx-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/g-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/p-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/prem-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
addfile flashbfs/system/web/web-addon/pt-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/x-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/x2-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/z-web-addon/inc/camtype.inc
addfile flashbfs/system/web/web-addon/z3-web-addon/inc/camtype.inc
addfile flashbfs/system/web/webcam.asp
addfile flashbfs/system/web/webpopup.asp
## 110
$LABEL checkinstallProdEnd
#
#
#

## 130

# EOF Post commands
#
#FIF Add a temporary config
# No need
#
$SHOW "Camera will now restart",7
restart
$DISCONNECT
$WAIT 40
$RECONNECT 5 
DEL /f /s /q \FlashBFS\system\xx*

#
rls .version.swcombination.ver
[*1.18.7"*][$GOTO successful1]
$FAIL "Failed update,wrong version after restart",4
$GOTO end

$LABEL successful1
# Check if crc have changed
kitcrc -c \FlashBFS\system\kits.d\appkit.rev
[*FAIL*][$GOTO failed2]
kitcrc -c \FlashBFS\system\kits.d\prodkit.rev
[*FAIL*][$GOTO failed2]

$LABEL showSuccess
$SHOW "Successfully updated combined firmware to version 1.18.7"
$GOTO end

$LABEL failed2
$FAIL "Failed update, file checksum error",3

$LABEL end
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 08:28:33 pm
I beat you by 8 seconds...  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 08:46:55 pm
The greyed-out CMD and Files buttons in FlirInstallNet.exe look interesting
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 08:48:20 pm
And we got RNDIS working via .fif ...

Thank you Mike and everybody else that have been working on this hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 09:02:00 pm
I beat you by 8 seconds...  ;D

I beat you by eons (internet time).

At any rate, camera.cmd is full of inspiration.

But if you managed to generate a working .fif that copies the RNDIS files, then good job.  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 09:06:08 pm
In that case all you need to do is put your CRC'd E8.cnf  in the .fif, and put
Quote
copy e8.cfg \flashfs\system\appcore.d\config.d\e8.cfg
in the .cmd file
Job Done.

I'm amazed it doesn't check the integirity of the .fif...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:06:31 pm
Ahhhh. Shoot...   ::)

Kudos.


I beat you by 8 seconds...  ;D

I beat you by eons (internet time).

At any rate, camera.cmd is full of inspiration.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:08:31 pm
I'm amazed it doesn't check the integirity of the .fif...

There is some CRC in FLIRLaunch.dat. I commented it out just to be sure  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 09:18:37 pm
Would be nice to be able to copy the cfg from the USB partition, but this won't be mounted when plugged in to USB.
I think we need to use addfile, and create the equivalent path in the install fif
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 09:23:22 pm
I think we need to use addfile, and create the equivalent path in the install fif

addfile would be the way to go yes. Same mechanism as camera.cmd uses to copy the new firmware files during an update.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:26:09 pm
So e8.cfg should be in \flashfs\system\appcore.d\config.d\e8.cfg in the .fif?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 09:28:04 pm
Yep - just tested and it works. Just trying again from a clean boot with no pre-existing hack file

..and of course you should be able to use the same method to install a custom boot screen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:28:37 pm
YAY!

Yep - just tested and it works. Just trying again from a clean boot with no pre-existing hack file
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:38:20 pm
Yep - just tested and it works. Just trying again from a clean boot with no pre-existing hack file

..and of course you should be able to use the same method to install a custom boot screen

Confirmed  :-+

Ahhh. The resolution  ;D

Now everbody be quiet as a mouse. Maybe FLIR will not find out about this. Maybe we should delete the last hour of posts?  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 09:38:43 pm
Yep - just tested and it works. Just trying again from a clean boot with no pre-existing hack file

Neat!  :-+ Now there really is nothing left to do for when I get my E4.  ;D Well, except set up a toolchain and make some small apps. Or did maybe someone beat me to that as well? That would be awesome, because I'd love to get some details on how to set up the toolchain for this device. XD

Edit: forgot to ask, how much space is left on the flash device?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 09:45:25 pm
Only needs the camera.cmd in the zip
Quote
addfile flashfs/system/appcore.d/config.d/e8.cfg
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 09:57:22 pm
Only needs the camera.cmd in the zip
Quote
addfile flashfs/system/appcore.d/config.d/e8.cfg

That is just too easy...

So when FLIR is uploading new firmware, we should basically be keeping our fingers off?
Or there's no way they can block this?  :box:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 10:00:49 pm
Edit: forgot to ask, how much space is left on the flash device?

173 MB...  :=\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 02, 2013, 10:03:42 pm
So when FLIR is uploading new firmware, we should basically be keeping our fingers off?
Or there's no way they can block this?  :box:

There is _plenty_ of ways they could block this ... too many to enumerate and I wouldn't want to give them ideas ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 10:09:43 pm
Updated 3rd Jan - enabled zoom in .cfg for Taucher's Beta3 menu hack zoom function.


OK, so this is it.....
Seems to not be bothered about 7zip - I just used Windows "send to compressed folder"

Open E8.cfg in a PC text editor (not anything that will mangle linefeeds etc.!)

At the end of the file, replace xxxxxxxx with the 8-digit serial number of your camera

Save the file (Make sure there is exactly one CRLF at the end of the file)

At a PC command prompt, run

  CRC01 E8.cfg  (on the edited file)

This will display a line in the form
# CRC01 xxxxxxxx

Add this line to the end of the E8.cfg file, so it now looks like :

  # ID xxxxxxxx
  # CRC01 yyyyyyyy

where xxxxxxxx is your serial number and yyyyyyyy is the generated CRC
(should be exactly one CRLF after the CRC)
"CRC" is case sensitive - must be upper case. "01" is zero one

Save the file as flashfs\system\appcore.d\config.d\e8.cfg

Create a zip file containing the flashfs folder tree and camera.cmd
Rename the file from .zip to .fif


Install FLIR tools
Go to the install folder\bin
Turn camera on and plug USB in
Run FLIRInstallNet
Browse to your .fif file

Click Run FIF

Unplug USB, remove battery and replace

Enjoy!


To remove hack :
Run FLIRInstallNet, choose the "Remove_hack" .fif file


USB RNDIS MODE
Do not mess with if you don't know what you're doing!
You can easily brick your camera with careless console commands
If you don't know why you may want to use RNDIS, YOU DON'T!

RNDIS allows FTP and Telnet access, and access to service mode via web interface

web/ftp/telnet 192.168.0.2 login flir, pw 3vlig

To set USB RNDIS mode temporarily - until next hard restart
Run FLIRInstallNet, run the "Set_RNDIS_Temporary" .fif file
You will get a timeout error as it dumps the USB connection.

.fif Scripts are also included to set RNDIS permanently, and also remove permanent RNDIS
These add/remove the appcore.d\factory.d\zrndis.rsc file

When RNDIS is active, USB Mass sotrage and video mode are NOT available.
Access to files is still possible via FTP or the the Flir T3Mon virtual drive util that comes with the RNDIS device drivers

Note FlirInstallNet WILL work over RNDIS.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 02, 2013, 10:11:06 pm
Only needs the camera.cmd in the zip
Quote
addfile flashfs/system/appcore.d/config.d/e8.cfg


LOOOOOOL! Seriously? That is just too easy.  ;D Almost too easy.  >:D

Edit: forgot to ask, how much space is left on the flash device?

173 MB...  :=\

From my notes I have:
Code: [Select]

FLASH:
Toshiba AX1682
TAIWAN 13159AE 3
TC58NVG1S3ETA00

SLC NAND FLASH, 256 MBytes
Used 83/256 Mb, that's pretty low usage. Which is a good thing. Plenty room for some extra experimentation. :) Not strange now that I think about it, since that flash will also have to store all the images. Right? I recall Mike mentioning only 1 flash chippie, and two seperate LPDDR's (fpga + cpu).

There is _plenty_ of ways they could block this ... too many to enumerate and I wouldn't want to give them ideas ...

Yup. And I almost hope they'll try some. Preferably one of the predictable ones, because that way the solution has already been done. History, repeat.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 10:14:18 pm
There is _plenty_ of ways they could block this ... too many to enumerate and I wouldn't want to give them ideas ...

I tried running this in a terminal :-/O
Code: [Select]
rm -rf https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardownDidn't work.




Ah just kidding  ^-^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 02, 2013, 10:20:19 pm
But I'd be more interested to find out how that .exe gets a shell in the first place and if we can make a software that does it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 10:22:06 pm
..and of course you should be able to use the same method to install a custom boot screen

My new boot screen:
(http://wanngineering.com/wp-content/uploads/2013/11/behind.png)

The seat keeps the heat from my behind.  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 10:31:28 pm
But I'd be more interested to find out how that .exe gets a shell in the first place and if we can make a software that does it.
Yeah, because it's soooo hard now.. - I suppose it would be nice to avoid needing the FLIR software. Nice of them to include all the tools you need ready in the box though!

If you could get the USB comms working standalone, you could in principle do something that reads out the serial no., merges and CRC's the file and copies in a single operation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 10:49:56 pm
I wonder if a similar method would work on the i series - not sure if files are in the same place
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 02, 2013, 10:51:01 pm
A while ago, there was talk of a hidden menu that could be activated by a certain sequence of key presses. Has anyone found it yet?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 02, 2013, 11:00:29 pm
Yeah, because it's soooo hard now.. - I suppose it would be nice to avoid needing the FLIR software. Nice of them to include all the tools you need ready in the box though!

Well not really for the hack itself, just to be able to play and experiment with the OS. I don't want to have to use a FIF to switch it to RNDIS (then switch it back) each time I want a console.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 11:07:03 pm
I'm fairly sure you can do it by putting the rndis.rsc file in \flashfs\system\appcore.d\factory.d
This file is in one of the early hack zips.

with rndis the only thing you can't do is webcam mode - you can pull your saved images via the Flir toolbar thing, or FTP
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 11:12:57 pm
Mike (and anyone else with an E4):

How useful would you estimate this particular camera is for taking images of PCBs, in enough detail to identify which components are getting warm (with or without the benefit of your recent work)?

Yes -
See pics on this post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316866/#msg316866)

The only issue at the moment is adjusting the lens for close-up focus -the lens can be adjusted without opening as it's only locked by the friction of the surrounding rubber, but it's a bit hard to grab hold of. 
 I am working on a tool to do this, as well as looking at using cheap laser cutter lenses

Looking at the moulding on the lens surround could you make a tool out of polymorph? Just soften it and push it against the lens surround.
Maybe - problem is it needs to be rigid enough to push against the outer ring, but hollow enough to not block too much field of view - currently looking at a PCB ring with pins.
Just did a quick test impression with polymorph and seems to be pretty good - just need to figure out what shape the rest needs to be to a useful tool that can be used 'blind' while looking at the screen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 11:17:27 pm
I'm fairly sure you can do it by putting the rndis.rsc file in \flashfs\system\appcore.d\factory.d
This file is in one of the early hack zips.

with rndis the only thing you can't do is webcam mode - you can pull your saved images via the Flir toolbar thing, or FTP

There is a
Code: [Select]
zlast_RNDIS.rsc in the firmware file for the FLIR iX series firmware. Could you just rename that file, or is the real RNDIS.rsc different?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 11:33:54 pm
I'm fairly sure you can do it by putting the rndis.rsc file in \flashfs\system\appcore.d\factory.d
This file is in one of the early hack zips.

with rndis the only thing you can't do is webcam mode - you can pull your saved images via the Flir toolbar thing, or FTP

There is a
Code: [Select]
zlast_RNDIS.rsc in the firmware file for the FLIR iX series firmware. Could you just rename that file, or is the real RNDIS.rsc different?

Attatched are .rsc files for normal and rndis.

I'm not sure what happens if you have both - my best guess is they are read alphabetically, so to do rndis without touching the existing usb.rsc you may need to rename it to something later alphabetically.

(This may explain the  zlast name above)

The files are CR32'd, so can't just be edited without re-CRCing (method a few pages earlier here)   
I did try making one that did all 3 protocols but it went a bit nuts..


BTW a reminder that the first thing you should probably to if playing is run RNDIS and use filezilla to ftp off a backup copy of the whole \flashfs structure, as this is all the data specific to your camera.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 02, 2013, 11:40:50 pm

Attatched are .rsc files for normal and rndis.

I'm not sure what happens if you have both - my best guess is they are read alphabetically, so to do rndis without touching the existing usb.rsc you may need to rename it to something later alphabetically.
The files are CR32'd, so can't just be edited without re-CRCing (method a few pages earlier here)   
I did try making one that did all 3 protocols but it went a bit nuts..

BTW a reminder that the first thing you should probably to if playing is run RNDIS and use filezilla to ftp off a backup copy of the whole \flashfs structure, as this is all the data specific to your camera.

So the zlast_RNDIS.rsc from the iX firmware file:
Code: [Select]
#
# USB mode MSD
#
.system entry
.system.usbmode text "RNDIS"
# CRC32 d51f0c78

and the rndis.rsc you zipped:
Code: [Select]
#
# Generated at 2000-01-08 21:43:17
# ID
#
.system entry
.system.usbmode text "UVC_MSD"
# CRC32 c37005c3

Hmm... That's the same as the usb.rsc you zipped...?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 02, 2013, 11:48:43 pm
Oops - just updated zip file in above post with correct version
Quote
#
# USB mode MSD
#
.system entry
.system.usbmode text "RNDIS"
# CRC32 d51f0c78
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 12:00:17 am
(This may explain the  zlast name above)

Ahh. That makes sense.
So does the CRC checks the filename, or is removing "zlast_" via camera.cmd a possibility  :-/O

I've never worked with CRC before :-BROKE
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 12:01:22 am
So does the CRC checks the filename, or is removing "zlast_" via camera.cmd a possibility  :-/O

Nooooo. It's the same CRC32 value for both  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 12:04:00 am
(This may explain the  zlast name above)

Ahh. That makes sense.
So does the CRC checks the filename, or is removing "zlast_" via camera.cmd a possibility  :-/O

I've never worked with CRC before :-BROKE
No - it reads all files in the config.d for .cfg and factory.d for .rsc files
Each file must have a valid CRC otherwise it is ignored.

I'm assuming, but not 100% confirmed, that it reads files in alphabetical order, and options in later files override any in earlier files.
.rsc files have CRC32 and are portable between units
.cfg files have CRC01 and include the unit serial number and so are specific to a particular camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 12:15:30 am
No - it reads all files in the config.d for .cfg and factory.d for .rsc files
Each file must have a valid CRC otherwise it is ignored.

I'm assuming, but not 100% confirmed, that it reads files in alphabetical order, and options in later files override any in earlier files.
.rsc files have CRC32 and are portable between units
.cfg files have CRC01 and include the unit serial number and so are specific to a particular camera.

So the rndis.rsc you showed has the CRC32:
Code: [Select]
# CRC32 d51f0c78
and the zlast_RNDIS.rsc from the iX firmware file:
Code: [Select]
# CRC32 d51f0c78
That must mean  :-/O on the filename  :-//

Any brave volunteer with an i3?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 12:20:24 am
Actually I vaguely recall that the  i3 already has a known way to do rndis from the keypad - take a look a few pages back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 12:23:54 am
Actually I vaguely recall that the  i3 already has a known way to do rndis from the keypad - take a look a few pages back.

Yes you're right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 03, 2013, 01:22:16 am
Can someone post a screenshot from the E4 (prior to applying the hack) and the same shot after the hack has been applied? I'd like to see the difference an increase in resolution makes.

Also, since I noticed that there's been a lot of talk about firmware and crc checks etc. has there been any new progress on this hack? I am under the impression that the E4 can now become an E8 without opening it up?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 02:08:06 am
Can someone post a screenshot from the E4 (prior to applying the hack) and the same shot after the hack has been applied? I'd like to see the difference an increase in resolution makes.

Maybe I can take some in the morning.

Also, since I noticed that there's been a lot of talk about firmware and crc checks etc. has there been any new progress on this hack? I am under the impression that the E4 can now become an E8 without opening it up?

See post #524  :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nova1200 on November 03, 2013, 02:36:39 am
It works!! Fantastic sleuthing everyone!
Here is a pair of images, not quite from the same perspective, but close. Before:
(http://i.imgur.com/xA3xgQG.jpg)
After:
(http://i.imgur.com/giQuGFn.jpg)

This was on a just-purchased E4 (another sales commission for Mike) with firmware 1.18.7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 03, 2013, 03:52:21 am
here is a link to the 1.18.7 firmware http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip)

can someone test if you can downgrade? (Only do if you have the later firmware of course) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 09:22:07 am
Earlier hack works 1.18.7 - latest hack uses same file - only difference is how the file gets there, so no reason to think it won't work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 03, 2013, 10:29:49 am


At a PC command prompt, run

  CRC01 E8.cfg (on the edited file)

This will display a line in the form
# CRC01 xxxxxxxx



I can´t make crc in cmd, how exactly i have to make this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 10:31:36 am
You'll have to run it from the folder containing e8.cfg and CRC01.exe.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 03, 2013, 10:41:59 am
You'll have to run it from the folder containing e8.cfg and CRC01.exe.

No, I need run it on win pc (unfortunately i haven´t), I have to go to my wife´s PC, a nd try it there.


Yes, it works on win.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 10:45:57 am
Another essential mod....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 03, 2013, 10:47:14 am
Another essential mod....


 :-DD :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 03, 2013, 10:48:21 am
Another essential mod....

 :-DD

Yeah. Definitely gonna fool FLIR on that one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 03, 2013, 11:02:08 am
Another essential mod....

I wonder if we can order the glass as a spare...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 11:17:22 am
Another essential mod....

I wonder if we can order the glass as a spare...
..well _if_ the E8 has a better lens, I would think spare lenses are a reasonable thing to be able to get as spares due to possible damage. Could look odd if they get more orders for E8 lenses than they've sold E8's They might want the unit's serial number though.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 03, 2013, 11:21:43 am
Now, finally its time for the mod.
I am just downloading the Flir tools and due to my slow internet connection it will take another 15 minutes.

In the meantime I have one last question because I do not want to mix anything up later:
1) If all the steps described in e4hack3.zip are done .... how can one set the system back (reset) to the original state (80x60)? Probably just replacing the original e8.cfg file, am I correct?

2) I recognised, that the pictures you uploaded are showing (in EXIF informations) the serial number and "E4" as the model number. Is it possible to change the 'E4' in the Exif information of the saved images to 'E8' by default? What about the serial?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 11:44:51 am
Now, finally its time for the mod.
I am just downloading the Flir tools and due to my slow internet connection it will take another 15 minutes.

In the meantime I have one last question because I do not want to mix anything up later:
1) If all the steps described in e4hack3.zip are done .... how can one set the system back (reset) to the original state (80x60)? Probably just replacing the original e8.cfg file, am I correct?
There is no original e8.cfg - this is an additional file which overrides the unit's default conf.cfg file.
To revert you need to delete e8.cfg - easiest way is to create another .fif containing a camera.cmd script that deletes it:
delfile flashfs/system/appcore.d/config.d/e8.cfg


Quote
2) I recognised, that the pictures you uploaded are showing (in EXIF informations) the serial number and "E4" as the model number. Is it possible to change the 'E4' in the Exif information of the saved images to 'E8' by default? What about the serial?
Don't know. E4 and serial number are in the eeprom so probably gets it from there. I've not investigated modding this but it could be done from the console (over serial or RNDIS) using the I2C command. It is checksummed but it's a simple 16 bit addition - details are earlier in this thread.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 03, 2013, 12:02:08 pm
Just attempting the mod now. I've created the CRC01 code and modified the E8.cfg file, I saved this file in the Flashfs folder, zipped the folder and renamed as Flashfs.fif.
However flirinstallnet.exe doesnt seem to recognise my *.fif file, The "Run Fif" box is shaded and theres a message (IDS_FILE_FORMAT_ERROR)

Output from the log :
2013-11-03 11:57:16,0917 005972 * ************************************************************************************************************************
2013-11-03 11:57:16,0917 005972 * ********************************************************* FIF **********************************************************
2013-11-03 11:57:16,0917 005972 * ************************************************************************************************************************
2013-11-03 11:57:16,0917 005972 * * SW build date: Aug 29 2013 11:18:40.
2013-11-03 11:57:16,0917 005972 * FIFInstallerEngine created
2013-11-03 11:57:16,0918 005972 * Command line arg 0 -> C:\Program Files (x86)\FLIR Systems\FLIR Tools\bin\FLIRInstallNet.exe
2013-11-03 11:57:16,0918 005972 * Running in batch mode: NO
2013-11-03 11:57:22,0345 005972 * Installation file is C:\Users\Laptop\Desktop\e4hack3\Flashfs.fif
2013-11-03 11:57:22,0349 005972 * START file list
2013-11-03 11:57:22,0350 005972 * Flashfs/system/appcore.d/config.d/E8.cfg
2013-11-03 11:57:22,0355 005972 * END file list
2013-11-03 11:57:22,0356 005972 * Missing camera macro file

Code: [Select]
#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool false
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63905206
# CRC01 1919a42b


Notes:
- One blank line at the bottom of E8.cfg
- I edited the cfg in notepad
- I'm running windows 7 professional 64bit


Any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 03, 2013, 12:06:43 pm
Just attempting the mod now. I've created the CRC01 code and modified the E8.cfg file, I saved this file in the Flashfs folder, zipped the folder and renamed as Flashfs.fif.
However flirinstallnet.exe doesnt seem to recognise my *.fif file, The "Run Fif" box is shaded and theres a message (IDS_FILE_FORMAT_ERROR)

Output from the log :
2013-11-03 11:57:16,0917 005972 * ************************************************************************************************************************
2013-11-03 11:57:16,0917 005972 * ********************************************************* FIF **********************************************************
2013-11-03 11:57:16,0917 005972 * ************************************************************************************************************************
2013-11-03 11:57:16,0917 005972 * * SW build date: Aug 29 2013 11:18:40.
2013-11-03 11:57:16,0917 005972 * FIFInstallerEngine created
2013-11-03 11:57:16,0918 005972 * Command line arg 0 -> C:\Program Files (x86)\FLIR Systems\FLIR Tools\bin\FLIRInstallNet.exe
2013-11-03 11:57:16,0918 005972 * Running in batch mode: NO
2013-11-03 11:57:22,0345 005972 * Installation file is C:\Users\Laptop\Desktop\e4hack3\Flashfs.fif
2013-11-03 11:57:22,0349 005972 * START file list
2013-11-03 11:57:22,0350 005972 * Flashfs/system/appcore.d/config.d/E8.cfg
2013-11-03 11:57:22,0355 005972 * END file list
2013-11-03 11:57:22,0356 005972 * Missing camera macro file

Code: [Select]
#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool false
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63905206
# CRC01 1919a42b


Notes:
- One blank line at the bottom of E8.cfg
- I edited the cfg in notepad
- I'm running windows 7 professional 64bit


Any ideas?

Did you add the camera.cmd file?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 12:11:22 pm
Quote
2013-11-03 11:57:22,0356 005972 * Missing camera macro file
Forgot to put the camera.cmd in the (root of the) zip..?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 03, 2013, 12:12:56 pm
Doh! Reading comprehension fail.
Does it matter what I call the file in this case?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 12:14:05 pm
Doh! Reading comprehension fail.
Does it matter what I call the file in this case?
Doesn't matter what the zip (fif) file is called - just browse to it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 03, 2013, 12:28:11 pm
There is no original e8.cfg - this is an additional file which overrides the unit's default conf.cfg file.
To revert you need to delete e8.cfg - easiest way is to create another .fif containing a camera.cmd script that deletes it:
delfile flashfs/system/appcore.d/config.d/e8.cfg
Works perfectly. Thanks
Attached is the corresponding .fif file which can be used by others (unzip and place in any folder).
Peter
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 03, 2013, 12:28:37 pm
Damn it guys. This forum will be my ruin.
Any plausible reasons why someone (who is not into power electronics or thermal insulation) would need a thermal camera ;) ?
I mean, for sure I want one at least since I saw Predator back in the eighties, but admittedly merely as a tech toy.
Indeed I recently began investigating in thermopile arrays to build my own cheap substitute, but with a 320x240 9Hz camera in reach, this doesn't seem so interesting any more.
So now, thanks to you, I'm struggling with myself whether to resist my geek desire to waste 1200€ for something I will be fascinated with for the first week and then put it in the shelf.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 03, 2013, 12:30:24 pm
I *think* I got the file updated but there appears to be no difference to the E4 after a bremoving battery and powering up.
Got the message


Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok




Not sure where Im going wrong here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 03, 2013, 12:36:31 pm
Damn it guys. This forum will be my ruin.

...

So now, thanks to you, I'm struggling with myself whether to resist my geek desire to waste 1200€ for something I will be fascinated with for the first week and then put it in the shelf.

Experiencing same feeling here, while fully aware that I DO NOT need it at all.  :palm:

This forum is evil.  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 12:52:02 pm
I *think* I got the file updated but there appears to be no difference to the E4 after a bremoving battery and powering up.
Got the message


Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok




Not sure where Im going wrong here.
Probably an error in creating the e8.cfg file  - wrong serial, wrong crc, "CRC" in lower case, spurious linefeeds etc. Or you copied the template one without the crc from the wrong place.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 03, 2013, 01:19:22 pm
Yep, I got myself into a muddle with various e8.cfg files, one of which was missing the blank bottom line. Unfortunately this was the one Command Prompt kept going to!  :palm:

Up and running now so off to have some fun, I'll upload some before/after pics tomorrow.
Thanks Mike & Co. !!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 03, 2013, 01:25:28 pm
I have to confirm that hack works on 1.19.8, so no worries about that firmware, it´s not anti-hack firmware. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 03, 2013, 02:21:18 pm
I have to confirm that hack works on 1.19.8, so no worries about that firmware, it´s not anti-hack firmware. :-+

Awww.  :-\

So have you or any of the 1.18.8 owners noticed any diffs when comparing files on your E4 to the files in the 1.18.7 zip?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 03, 2013, 02:23:48 pm
Any plausible reasons why someone (who is not into power electronics or thermal insulation) would need a thermal camera ;) ?
I mean, for sure I want one at least since I saw Predator back in the eighties, but admittedly merely as a tech toy.

Good question - hopefully putting a decent TIC into the hands of some people outside the traditional markets will result in some good ideas, and maybe an expansion of the market for TICs generally.

The same thing happened with digital storage scopes, after all... they weren't always a piece of equipment which an enthusiast could buy as a standard item along with a multimeter and soldering iron, but now even the most basic bench seems to have a Rigol 1052E on it. I'm sure it's no coincidence that this particular model was also easy to upgrade with a simple hack.

Obviously if you really needed a TIC, you'd have an application in mind already, but here's a few idle thoughts for stuff you could do...

Domestic stuff:

- check round your home for draughts, poor insulation, electrical items taking significant power

- check just how well your fridge, freezer, boiler and/or A/C are working. Are your radiators working effectively? Is the system well balanced, or are some being starved of hot water?

- home security - maybe you could reliably identify when someone is on your property, and use it to turn on the floodlights or wake the dog? There could be some interesting work to do with the real-time video feed that's available.

Electronics stuff:

- new board? Point the TIC at it when you power it up for the first time. If any components highlight themselves unexpectedly in the thermal image, switch off straight away before something gets fried.

- short circuit between power and ground? Could be anywhere, but the TIC can highlight the location of the short in moments.

- anything involving power supplies, heat sinks, fans and so on, obviously.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 03, 2013, 02:39:10 pm
I already unexpectedly found a small leak in my workshop roof with the pre-modded E4.
It's not even dripping water yet but its letting damp onto the purlin, easy fix next time im up instead of a nasty surprise.

I justified the purchase for EE/Repair work, there might even be a market locally for some sort of industrial Thermography. I'll have to look into the situation regarding qualifications and regulations though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madpuma13 on November 03, 2013, 02:46:40 pm
Around the house these can and are used to identify potential problems.

You can find water leaks in your walls or roof.

Poorly installed insulation or lack of insulation

Drafts in windows

Appliance checking

Identify termite infestations

Identify mold/rot problems

So many possibilities!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 03, 2013, 02:56:04 pm
The thermal camera opens up a world to us that is otherwise invisible. That alone makes them very cool pieces of equipment  8)

There are many uses for such a device and owners will discover many of them by experimentation or some research on the internet will give you some ideas. In its simplest form it is an accurate IR thermometer that may be used at a distance from the target.

These cameras are even finding uses in art.

At the risk of offending the more sensitive readership, as ladies bits are shown, take a look here :

a hot thermal morning with a woman, thermal art (https://www.youtube.com/watch?v=yv2Bq_EFg4c#ws)



With regard to using the E4 (E8) for any serious Thermography applications, be aware that it is limited in terms of manual configuration. It has no manual centre temperature and span capability which is an essential part of industrial thermography.  Also, using a hacked E4 would invalidate any claimed calibration on the survey.

I suggest owners enjoy their upgraded E4's for what they are....a bargain priced medium resolution thermal camera for consumer applications.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 03, 2013, 03:12:10 pm
What camera was used to make that video? Does the E4 have that capability (video recording)? I realize it would only be 320x240@9Hz if anything
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 03, 2013, 03:39:39 pm
I only know that it was a TESTO thermal camera. Resolution not known but refresh rate is decent so not a 9Hz model.

E series cameras capture video via a PC and would be challenged to produce a real time video such as shown.

My FLIR PM695 cannot do real time video either so I have to capture S-Video or composite video  from its video output port using a USB video capture unit or my Archos 505 media unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 03, 2013, 03:50:24 pm
Great videos, great thread, amazing hack!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 03, 2013, 04:54:32 pm
Was looking at the prices at RS and the base model Testo is the price of a reasonable used car here.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 03, 2013, 05:56:35 pm
Damn it guys. This forum will be my ruin.
Any plausible reasons why someone (who is not into power electronics or thermal insulation) would need a thermal camera ;) ?
I mean, for sure I want one at least since I saw Predator back in the eighties, but admittedly merely as a tech toy.

I can think of several situations in which a non-inspector would find a thermal imaging camera useful:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 03, 2013, 06:35:17 pm
I can think of several situations in which a non-inspector would find a thermal imaging camera useful:

Creating weird avatars?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 03, 2013, 06:43:45 pm
Damn it guys. This forum will be my ruin.
Any plausible reasons why someone (who is not into power electronics or thermal insulation) would need a thermal camera ;) ?
I mean, for sure I want one at least since I saw Predator back in the eighties, but admittedly merely as a tech toy.
Indeed I recently began investigating in thermopile arrays to build my own cheap substitute, but with a 320x240 9Hz camera in reach, this doesn't seem so interesting any more.
So now, thanks to you, I'm struggling with myself whether to resist my geek desire to waste 1200€ for something I will be fascinated with for the first week and then put it in the shelf.

Having bought a TIC about a year or so ago, I no longer think of it so much as a TIC or a tool for power electronics, I think of it more as a diagnostic tool like an O-scope.  An O-Scope lets you see changing signals over time that you would not otherwise see. A TIC lets you see temperature you would not otherwise see.

The TIC gets used a lot more than I thought it would.  It is one of the best diagnostic tools around.

Had a problem with one of the machines at work - got the TIC out and noticed an overheating relay.  Turned a multi-hour diagnostic chore into a 5 minute affair.

When reworking boards, I use the TIC before I even use the o-scope.  The TIC is a quick way to see obvious failures before delving into deeper diagnostics.

TIC is awesome for verifying designs.  Let's say you use a 1A linear regulator and your circuit averages 250mA but peaks at 500mA, and goes in a plastic enclosure.  Do you need a heat sink?  You could run calculations, you could use a thermocouple, but loading up your device in worst possible scenario and looking at it via the TIC tells you much more.

Intermittent failure on a circuit?  Use the TIC to find out what is going on, even after it already occured.  Easy to see things like a component on it's way to failure or a component temporarily running outside it's specified range.

I diagnosed a faulty wheel bearing on a car with the TIC.  It was really easy to see how much hotter it was than the other wheel bearings.  Caught it before it became a much more expensive repair.

Found a huge wasps nest in my brother in laws house that he didn't even know about.  The drywall was so thin they were almost in the home.  With a 1 year old kid in the house who would have easily pushed right through the soft spot in the wall, it was lucky we caught it in time.

There are also uses in other fields that are more specific.  I sold my i7 to a lady who uses the TIC for fitting horse saddles.  By analyzing the hot spots she can gauge fitment.

A veterinarian I know uses a TIC to check animals - easy to see things like ear and toot infections and other such stuff, when you have an animal that can't tell you what's wrong.

Then you have all the standard TIC uses... checking your home insulation, checking pipe insulation, checking doors/windows/garage, checking circuit breakers and wiring, using the TIC to find wall studs, etc. 

I say a TIC is getting to the point where it's almost a must-have tool for a serious electronics person.  For under $1,000 and 320x240 resolution and the ability to close-focus, it's a no-brainer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 03, 2013, 06:57:37 pm
What's the best deal on the E4 in the US these days?

(UPDATE: I found Tequipment.NET to be very responsive, and they beat the best price I found elsewhere.  Very nice deal.)

P.S. If it hasn't been mentioned before, FLIR has this freebie offer going... the borescope might be useful: http://www.distributoraccess.com/promotions/forms/FLIR-Q4a-2013-Redemption-Form.pdf (http://www.distributoraccess.com/promotions/forms/FLIR-Q4a-2013-Redemption-Form.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 03, 2013, 06:59:53 pm
If it was under $1000 I would not argue. But the cheapest price over here is ~1150€ including VAT.
Anyway, I'm more or less hooked ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 07:07:17 pm
When I was looking in the UK I didn't see anyone anywhere offering anything less than the "standard" price of £796 (+VAT) - I think Flir have fairly tight control over reseller prices, but it may be worth trying to haggle - sometimes dealers with pressure to not openly discount can be persuaded to throw in a case or free shipping etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: coconut on November 03, 2013, 07:20:44 pm
I bought my E4 last week from http://www.test-meter.co.uk/index.php/electricians-forums-discount (http://www.test-meter.co.uk/index.php/electricians-forums-discount), with the 5% discount it was just under £908.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on November 03, 2013, 07:23:07 pm
If it was under $1000 I would not argue. But the cheapest price over here is ~1150€ including VAT.
Anyway, I'm more or less hooked ;)

I just try to buy one
http://www.tester.co.uk/flir-e4-thermal-imaging-camera (http://www.tester.co.uk/flir-e4-thermal-imaging-camera)
and decided to buy it in US. For camera and case it was 1035 USD, which is reasonable.

Mike, thanks for your work!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 03, 2013, 07:30:16 pm
I thought there were export restriction. E.g. mouser doesn't sell it. Then again, export restrictions from the US to Europe for a product that comes from Europe is kinda weird, but still they seem to apply.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 03, 2013, 07:39:25 pm
What's the best deal on the E4 in the US these days?

P.S. If it hasn't been mentioned before, FLIR has this freebie offer going... the borescope might be useful: http://www.distributoraccess.com/promotions/forms/FLIR-Q4a-2013-Redemption-Form.pdf (http://www.distributoraccess.com/promotions/forms/FLIR-Q4a-2013-Redemption-Form.pdf)

USA places that have a "request a quote" after the $995 price generally will come off a $100 down to $895.  I'm sure $995 is a FLIR MAP policy (minimum advertised price).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 07:55:07 pm
.. and don't forget if you're on a tight budget, dealers will be desperate to offload any stock of i3's
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 03, 2013, 08:02:23 pm
The i3 is however not 100% confirmed to be hackable. Anway: what would be the maximum resolution a hacked i3 could offer on the display or in webcam mode? The i7 has 140x140 (or maybe 160x160 in the new model?), so I guess that's all we could expect even if the sensor might have a higher resolution, right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 08:10:23 pm
The i3 is however not 100% confirmed to be hackable. Anway: what would be the maximum resolution a hacked i3 could offer on the display or in webcam mode? The i7 has 140x140 (or maybe 160x160 in the new model?), so I guess that's all we could expect even if the sensor might have a higher resolution, right?
I think it is - to 120x120, the display being the limit AFAIR. Obviously not as good as the E4, but could be significantly cheaper if dealers are trying to clear them out, as even with no hacks they compare poorly to the E4.
Someone commented that Farnell was stopping carrying Flir products and was open to offers - they have 5 i3's left (was 8 last week)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 03, 2013, 08:23:36 pm
I'm certainly interested in this... :)

At work I have been using an Irisys 4010 TC for the last 5 years or so for thermal analysis of new and faulty PCB designs.
I think it has 160x120 resolution and manual focus and is pretty good for SMD stuff and can focus down to a few inches. It has proved to be a really useful tool with a large display. However, they were very expensive at the time. I've been looking to buy one used but this hack by Mike has changed my plan :)

I'm now very tempted to buy an E4 and I'm quite happy to pay full RRP so I just need to find someone with genuine stock for fast delivery. I am hopelessly impatient when I order things so I'd want to buy one ex stock on next day delivery. Any advice on a reliable retailer?

Also, can I ask if the camera can be hooked up to a notebook via USB to show the image in real time? I'm not sure I'd want to be using the inbuilt screen for long periods plus I would like to capture images easily this way.

Does it have a tripod thread?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 09:02:39 pm
I'm certainly interested in this... :)

At work I have been using an Irisys 4010 TC for the last 5 years or so for thermal analysis of new and faulty PCB designs.
I think it has 160x120 resolution and manual focus and is pretty good for SMD stuff and can focus down to a few inches. It has proved to be a really useful tool with a large display. However, they were very expensive at the time. I've been looking to buy one used but this hack by Mike has changed my plan :)

I'm now very tempted to buy an E4 and I'm quite happy to pay full RRP so I just need to find someone with genuine stock for fast delivery. I am hopelessly impatient when I order things so I'd want to buy one ex stock on next day delivery. Any advice on a reliable retailer?
I got mine from Pass/Tester & came from stock - not sure I believe their stock status on the website as I couldn't find anything not showing in stock
Quote
Also, can I ask if the camera can be hooked up to a notebook via USB to show the image in real time?
Yes - acts just like a webcam so can use any software that can display an image
Quote
Does it have a tripod thread?
No but I think there's enough room in the end of the battery to add one if you can find a threaded sleeve. it will just about stand on its own but obviously not very stable
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 03, 2013, 09:20:35 pm
Hi Mike thanks for the info :)
It's a shame about the tripod thread but I could probably rig something (hideous) that would let me mount or clamp it securely if needed.

It's good that the camera can relay images like a webcam too. I'll try phoning around for stock tomorrow.

Note: one annoying feature of the Irisys camera was the regular loud 'clunk' it made every minute or so. I appreciate that this is a necessary part of the camera operation but does the E4 make a regular loud clunk noise? The clunk from the Irisys TC was loud enough to annoy people several benches away at work if the lab was otherwise quiet :)

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 03, 2013, 09:30:41 pm
Note: one annoying feature of the Irisys camera was the regular loud 'clunk' it made every minute or so. I appreciate that this is a necessary part of the camera operation but does the E4 make a regular loud clunk noise? The clunk from the Irisys TC was loud enough to annoy people several benches away at work if the lab was otherwise quiet :)
You can barely hear it when the lens and case is on - definitely not loud enough to annoy anyone
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 03, 2013, 09:41:44 pm
OK thanks. The clunk from the Irisys sounds just like someone dropping a marble into a small metal box from about 1 foot above! After a few dozen clunks it can get very annoying for anyone in earshot. So that's another bonus point for the E4 :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 03, 2013, 11:13:27 pm
I bit the bullet and purchased an E4. Now I'm going to hate myself for spending money for something I didn't need... but it's just so cool!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 04, 2013, 02:51:31 am
Mike, Just performed your procedure and the image looks much crispier and without that snow. The setting screen stills shows E4. This is the expected result, right?

Procedure was very simple. Used notepad for editor (verified crlf requirement) and windows's Send To Compressed (zipped) Folder over flashfs directory to create the zip, then opened the zip in Windows explorer and added copy/pasted camera.cmd.

Flir has a much happier customer now.

Great job! and many thanks. If you will need a kidney one day just ask.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 04, 2013, 04:30:53 am
Like others, I also just placed an order for an E4. I didn't really need a TIC and had no plans to buy one. However, an 'enhanced' E4 is excellent value and too good to pass on.

Thanks Mike (and to the other contributors) for making this possible and for sharing! Really appreciate it. Impressive work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on November 04, 2013, 06:14:37 am
I know a few people have posted where they purchased their unit and the price. Can we start a list of Supplier names and prices?
I'm sure there are many more ready to hit the go button. Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 04, 2013, 06:45:47 am
Quote
Also, can I ask if the camera can be hooked up to a notebook via USB to show the image in real time?
Yes - acts just like a webcam so can use any software that can display an image
Here's another frivolous but "because I have one, why not" application: thermal video chat.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 04, 2013, 06:49:50 am
I'm ordering an E4 E8 from the US to Australia and it is on its way.

If anyone wants to know the details, you can PM me, nothing really secret but dealers and/or FLir might not like it (or they may not care less  :-//) and I wouldn't like others to have this pathway shutdown.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 04, 2013, 07:41:52 am
Hi Mike,
Are you going to upload a video on youtube with the results?
(and also [off topic]: have you been working on your high-res x-ray hack?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on November 04, 2013, 08:32:49 am
Hi Mike,
Are you going to upload a video on youtube with the results?
(and also [off topic]: have you been working on your high-res x-ray hack?)

I love a video, but hate to push FLIR into a corner and force them into the fighting mode with no choice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 04, 2013, 08:57:47 am

I love a video, but hate to push FLIR into a corner and force them into the fighting mode with no choice.

Since the cat is out of the bag I doubt it will take long until it's well known that the device is easily hackable.
(que post on hackaday in 3, 2, 1...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: garak on November 04, 2013, 09:30:02 am

I love a video, but hate to push FLIR into a corner and force them into the fighting mode with no choice.

Since the cat is out of the bag I doubt it will take long until it's well known that the device is easily hackable.
(que post on hackaday in 3, 2, 1...)

I dunno, FLIR might have retaliated by the time HAD find this. They're incredibly slow at posting news that isn't about generic crap. It's really Arduino-a-day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 09:45:05 am
Not planning a vid on hack - will be doing one on mods for close-up use & other oddments, and may accidentally include some very subtle clues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 04, 2013, 10:37:28 am
My guess is that Flir will quietly upgrade the firmware. Somewhere in Sweden some no-nothing CEOs are probably putting the pressure on the engineers.
Get the E4 while its hot I say.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grumpydoc on November 04, 2013, 10:47:45 am
It would be interesting to know what the exact effect on Flir's sales will be - although we will never know I expect that the result will be a few people who would have bought neither an E4 nor an E8 will now buy an E4 for the "cool hack" nature of Mike's discovery. Besides who can resist effectively buying a £5k+ device for £800

Will it mean any lost sales of E8's - TBH I would doubt it. If you're in the market for an E8 then the chances are you're in the market for a device which works as advertised out of the box, without hacks, and which will be supported by the manufacturer.

I can't see Flir patting Mike on the back and saying "good job" but their best strategy might just be to ignore it and enjoy the extra sales of the E4.

EDIT: I hadn't voted because there wasn't an "I wasn't going to buy one and still aren't but it's a cool hack" option, but did so (choosing the last option) so as to see how many people had gone for the "was going to buy an E8 but will now buy an E4) option - I see it's just 1 person and that's out of a group (eevblog forum members) who are self selected for willingness to hack hardware and/or firmware. That would tend to support the notion that Flir will gain more in E4 sales than they will loose in E8 sales - even at a 6:1 price ratio.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 04, 2013, 11:02:35 am
I think FLIR knew this was going to happen as soon as the teardown video was posted. It was just a matter of figuring out details after that. A video on the hack wouldn't be that interesting either, but maybe you could do a whole video recorded on the E4. I'd also like to see what the raw sensor data looks like.

At any rate, FLIR probably don't sell that many of either the E4 or E8, so even the ~3 dozen more from this forum that the poll indicates may be quite significant.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 04, 2013, 11:03:28 am
Regarding the lens size:
today I had the chance to get hold of an E6 for a minute and did checkout the lens. I couldn't really measure it but just by looking at it I am pretty sure: the lense is not larger than the one on my E4. I would bet that the different sensitivity values in the data sheet are just 'on paper' and not the real value when pimped to 320x240.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 11:26:04 am
Whatever Flir's attitude (If they even know yet) I highly doubt they'd ever say anything, publically or privately, due to political issues with shareholders etc.. You may get the odd snippet out of a chat with a dealer or someone at an exhibition ( simply looking at their non-verbal reaction when you mention it can often be enough to tell if it is generally known), but rumours like this aren't always reliable.
The timing and content of the next major firmware release (if any) will probably be the best indicator of their attitude. The 19.x release we've seen is probably too early to be a reaction (could be interesting to try thr first service mode hack on it though).

I've not really looked at features of the E8 compared to other units at a similar price, but £4700 seems a lot for a unit with no manual focus, manual temp range selection, wifi, touchscreen etc. even compared to the FLir Ex0 series. I can't see them selling many, and my guess is the long term plan is to cut the price of the higher end models as soon as any competitors reduce prices.

As regards sales volumes it might be interesting to compare serial numbers - maybe if everyone posted their serial no (with the last digit or two omitted if you're paranoid) some rough figures could be inferred from the maximum delta.

My guess is it's well into the thousands PA, maybe 10Ks - they are advertising quite a lot, and the E4, even in factory state, is probably the best unit under $1K in an increasing market.

It would be interesting to see if any of the big TIC dealers have seen any sudden shift in normal sales patterns, though the E series being pretty new and very good as-is  would make it hard to discern any causal effect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 04, 2013, 12:43:21 pm
I managed to eventually find someone with genuine stock of the E4 (last one!) and have just ordered it by phone.
I tried all the usual suppliers and they all said the same thing. Sold out of E4 but can offer a next day deal on an E5.
They also said it would be 4 to 7 working days to get any more E4s...

I tried phoning maybe 8 retailers before I found someone with one on the shelf. My E4 should arrive tomorrow and I'm already hopping up and down impatiently waiting for it to arrive :)

I got the last one in stock from from Contral

http://www.contral.co.uk/ (http://www.contral.co.uk/)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 04, 2013, 02:05:20 pm
I ordered one from tequipment yesterday and they have (or had at least) several in stock
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pmcouto on November 04, 2013, 02:58:26 pm
Today I had an “official” E8 in my hands and the lens is the same as E4 – At least, there’s no visible difference.
The MSX feature is very useful, even at 320x240.

P.S.
No, I was not shopping for a new E4  >:D
I already have an E50.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 04, 2013, 03:21:02 pm
Flir has a new market opened for it, TIC's for people that don't really need it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 04, 2013, 03:23:12 pm
Hello my friends. I am just waiting for my new E5. Will be possible to do "E8 hack" on this device too? Will be complicated to do for newbies as I am? Sorry for my not perfect english but I hope you will understand..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nova1200 on November 04, 2013, 03:31:21 pm
Also regarding the lens, FWIW, it seems both E4 and E8 list the lens model as "FOL7" in their image metadata, and least based on an early E8 image found on the web. I used exiftool to dump the info; very nice tool which can also extract the raw thermal and visible images from a FLIR jpg.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 04, 2013, 03:35:22 pm
The serial of my E4 is 639047xx (last two digits are replaced by 'x'). I assume 639 is set as model number; as Mikes serial is  639037xx. So a few thousands are in the market (if they started with 0).

I've not really looked at features of the E8 compared to other units at a similar price, but £4700 seems a lot for a unit with no manual focus, manual temp range selection, wifi, touchscreen etc. even compared to the FLir Ex0 series.
I think the E4 E8 is pretty usable now, the only feature I am really  missing is the manual temperature range selection. Wifi etc. would be nice but is not really important.
Mike: as I remember correctly, you mentioned a few days ago, that temp. range selection can be done through the UART interface. Will this be possible any time in the regular shooting mode? Then a small ATTiny solution could be possible: By using an incremental encoder with pushbutton function there would be only one external item as the user interface needed. The display would then show the selected temp. range anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 04, 2013, 03:37:58 pm
Also regarding the lens, FWIW, it seems both E4 and E8 list the lens model as "FOL7" in their image metadata, and least based on an early E8 image found on the web. I used exiftool to dump the info; very nice tool which can also extract the raw thermal and visible images from a FLIR jpg.
FOL is just the focal length. As the focal length is 6.5mm they are rounding up to FOL7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 04, 2013, 03:40:04 pm
Regarding buying a TIC that you don't really 'need'...... I am fighting the urge to buy an E4. I already own several thermal cameras, four of which outperform the E series. BUT I still like the E4 with its upgrade potential. I believe it is a psychological  thing....being able to buy a relatively cheap model and upgrade it to a more expensive specification. My heart wants one but my logical side is holding me back due to the lack of manual modes and less than simple adjustment of focus.
GBP960 is still a lot of money to your average Jo, and I am no different.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 03:54:56 pm
The serial of my E4 is 639047xx (last two digits are replaced by 'x'). I assume 639 is set as model number; as Mikes serial is  639037xx. So a few thousands are in the market (if they started with 0).

I've not really looked at features of the E8 compared to other units at a similar price, but £4700 seems a lot for a unit with no manual focus, manual temp range selection, wifi, touchscreen etc. even compared to the FLir Ex0 series.
I think the E4 E8 is pretty usable now, the only feature I am really  missing is the manual temperature range selection. Wifi etc. would be nice but is not really important.
Mike: as I remember correctly, you mentioned a few days ago, that temp. range selection can be done through the UART interface. Will this be possible any time in the regular shooting mode? Then a small ATTiny solution could be possible: By using an incremental encoder with pushbutton function there would be only one external item as the user interface needed. The display would then show the selected temp. range anyway.
Yes - it's just a couple of console commands (span and level I think). You need to be in locked temp mode - not sure if you can lock/unlock via the console but may be possible. I think the values are arbitary numbers, but the onscreen temp scale does update.

I suppose one option would be to do a board that sits inline with the keypad cable and connects to the serial FFC connector. And work out some magic key sequences to activate your functionality.
Another option may be to mod the battery base to add buttons.
or an accelerometer that recognises a 'magic shake'
or a hall sensor so you can use an external magnet to activate.

You may be able to read data via the console to infer enough info about the UI state to be able to activate & control a mod board - you can certainly read the current span and level, so if these freeze you an infer that the range has been locked.
there might be a way to read button states as well.
While you're at it another handy extra may be a freeze button to hold the current image, again easy to do with the console.   

I wonder if you could slip in a touchscreen, or some capsense buttons between the screen and the fascia?

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 03:56:02 pm
Regarding buying a TIC that you don't really 'need'...... I am fighting the urge to buy an E4. I already own several thermal cameras, four of which outperform the E series. BUT I still like the E4 with its upgrade potential. I believe it is a psychological  thing....being able to buy a relatively cheap model and upgrade it to a more expensive specification. My heart wants one but my logical side is holding me back due to the lack of manual modes and less than simple adjustment of focus.
GBP960 is still a lot of money to your average Jo, and I am no different.
well you could always sell one of the other ones.... (BTW was it you that picked up that Irisys people counter? - PM me if you want to sell it) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 04, 2013, 04:00:45 pm
Mike: as I remember correctly, you mentioned a few days ago, that temp. range selection can be done through the UART interface. Will this be possible any time in the regular shooting mode? Then a small ATTiny solution could be possible: By using an incremental encoder with pushbutton function there would be only one external item as the user interface needed. The display would then show the selected temp. range anyway.

That's also what I recall, the temp range being settable through UART. I was thinking of an msp430 + buttons (or capsense slider) + bluetooth module as possible battery slurping additions... Or maybe an accelerometer to give it the secret handshake. :P The usability would depend a bit on how fast the respons to a range set command is + any easy to operate locations for a button.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 04, 2013, 04:04:35 pm
I suppose one option would be to do a board that sits inline with the keypad cable and connects to the serial FFC connector. And work out some magic key sequences to activate your functionality.

Yeah, thought about the mcu-in-the-middle as well for the keypad. But then you'll have to keep track of the UI state, which can get annoying real fast.

And touchscreen would indeed be funky, but that only gets to be meaningful (IMO) when you can integrate that properly into the GUI. Otherwise it's just too much hassle for what you get in return.

Custom GUI anyone?  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 04, 2013, 04:10:41 pm
Hi Mike,

Sell one of my 'babies'  :scared:

I may sell a Talisman but the FLIR PM570's and 695's are ITAR liable so selling them is complicated  ;)

Yes I bought the IRISYS people counter.

The rear labelling says:

IRC 1004-3
CAN Master

I have not used it so would be willing to sell it on as I have other projects to get on with.

IRISYS told me that it can be easily accessed via the low voltage RS232 serial interface. I was also given the software to do so. Itsin very nice condition and has not been taken apart  :)

PM me what you think it is worth to you and I will provide a fast response.

I attach pictures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 04, 2013, 04:20:46 pm
I know a few people have posted where they purchased their unit and the price. Can we start a list of Supplier names and prices?
I'm sure there are many more ready to hit the go button. Thanks

http://www.valuetesters.com/flir-e4-thermal-imaging-camera-msx-enabled.html (http://www.valuetesters.com/flir-e4-thermal-imaging-camera-msx-enabled.html) Advertised price is $995, but $895 if you "request a quote via email".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 04:22:04 pm
And touchscreen would indeed be funky, but that only gets to be meaningful (IMO) when you can integrate that properly into the GUI. Otherwise it's just too much hassle for what you get in return.
Not necessarily - if you could just add maybe a strip at the bottom or side using a thin PCB, you could create some virtual buttons at fixed positions just outside the visible area - you don't really need much - just an up/down for span and level when you detect that locked mode has been entered.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cyr on November 04, 2013, 04:24:33 pm
Resistance was futile, another E4 sale thanks to Mike...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: termi on November 04, 2013, 04:28:22 pm
Another one sold ... couldn't resist for <USD880 shipped   ;D

Thanks Mike and eevblog community!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 04:38:48 pm
I know a few people have posted where they purchased their unit and the price. Can we start a list of Supplier names and prices?
I'm sure there are many more ready to hit the go button. Thanks

http://www.valuetesters.com/flir-e4-thermal-imaging-camera-msx-enabled.html (http://www.valuetesters.com/flir-e4-thermal-imaging-camera-msx-enabled.html) Advertised price is $995, but $895 if you "request a quote via email".

From their website :
Quote
Value Testers sells worldwide.  Our sales people have a great deal of experience with international markets, as we have sold to almost 150 countries worldwide.  We provide excellent customer service that is based on building relationships with our customers who become our friends.  Value Testers helps customers to select products that exactly match their needs and at the same time are the least expensive solution.  We also help customers to find the best and resonably priced shipping.  We work as a team to help our customers.
Quote
Amprobe and Fluke products can be shipped only within US, as per agreement between manufacturers and US distributors.  The same relates to Thermal Imagers frequency 33kHz or higher.
33kHz?

Has anyone tried ordering from outside US?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 04, 2013, 04:53:24 pm
Yeah, thought about the mcu-in-the-middle as well for the keypad. But then you'll have to keep track of the UI state, which can get annoying real fast.
Not neccessarily: At least with the current firmware, most buttons do not have any functionality when you are in regular shooting mode. So you might either check for combinations like
Back-button (upper right button) pressed together with up / down and left/right
or just using these buttons as they do not have any function anyway:

Some ideas:
Enable manual temperature mode: pressing 'back-button' for >1 second
up/down: setting upper temperature (each short click +/- 0.5°C for example; each longer click +/- 5°C)
left/right: setting lower temperature
disable edit mode:  pressing middle button

Also a remember function might be useful: entering the edit mode and then pressing the middle push button first, will set the values used last time and exits edit mode.

Well, the above will work if you are not in locked mode, but it will also do no harm.

Any other ideas which could be useful and which can be set by the UART interface?


As my camera is still closed (only removed the front yet to get access to the UART connector): does anybody know how many wires the FPC for the keyboard has? I assume 0.5mm spacing? The current functionality indicates that the E4 is not using a matrix but single lines for each button = then 9 wires would be needed as minimum.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 04, 2013, 04:59:54 pm
Not necessarily - if you could just add maybe a strip at the bottom or side using a thin PCB, you could create some virtual buttons at fixed positions just outside the visible area - you don't really need much - just an up/down for span and level when you detect that locked mode has been entered.

True, but for me that would be too much hassle for what you get in return. As in, if the only functionality I get is some fixed function virtual buttons, I think I would just go with some actual buttons. As for an actual touchscreen fully covering the LCD, do you think the case would accommodate that? I would expect so, but I haven't had an E4 in my hands yet.  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 05:04:37 pm
Yeah, thought about the mcu-in-the-middle as well for the keypad. But then you'll have to keep track of the UI state, which can get annoying real fast.
Not neccessarily: At least with the current firmware, most buttons do not have any functionality when you are in regular shooting mode.
Not strictly true once hacked - blue-below and red-above palette options use up/down.
and you need to reliably determine when you are in regular shooting mode.
Quote

 
Any other ideas which could be useful and which can be set by the UART interface?
Look through the PDF linked a while ago that documents a lot of the comamnd line stuff.

Quote
As my camera is still closed (only removed the front yet to get access to the UART connector): does anybody know how many wires the FPC for the keyboard has? I assume 0.5mm spacing? The current functionality indicates that the E4 is not using a matrix but single lines for each button = then 9 wires would be needed as minimum.
Not offhand but have a look in the teardown vid in case you can see it.
I think it may be 1mm pitch - will check.
If you can get something behind the display window for some touch buttons I think that would be the neatest option. You could maybe even do sliders..!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 04, 2013, 05:10:58 pm
The FFC for the keyboard looks to have 8 connections.

Edit: and looks to be 1mm pitch yeah.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 04, 2013, 05:23:36 pm
Does the original hack also enable picture-in-picture, or does that require additional steps?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 04, 2013, 05:32:50 pm
Quote
The FFC for the keyboard looks to have 8 connections.
mmmh- 4x4 matrix then. The same PCB might be used for other Flir cameras where they are using more buttons.

Quote
Not strictly true once hacked - blue-below and red-above palette options use up/down.
Thats correct; I forgot that.
Quote
and you need to reliably determine when you are in regular shooting mode.
Not really, because if I recognize the pressed keys in parallel (= µC is not inbetween); the worst thing which could happpen, would be an accidentely sent manual temperature set which only would be accepted when in lock mode. However I shall add a time function that the edit mode will exit anyway after 5 seconds without any pressed key.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 05:40:24 pm
Does the original hack also enable picture-in-picture, or does that require additional steps?
The only hack that doesn't do PIP is the very first one of simply running in service mode with no tweaked files. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 04, 2013, 06:20:35 pm
Hello friends,
nobody asnwered my question. Dear Mike, will your "hack" unlocked some functions from E8 on my E5?
Thank you for your answer.

Petr
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nova1200 on November 04, 2013, 06:28:17 pm
FOL is just the focal length. As the focal length is 6.5mm they are rounding up to FOL7.
Ah, thanks, thought it was somewhat odd looking for a model number.

For the survey, my E4's serial number is 639027xx.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 04, 2013, 06:29:35 pm
Quote
Hello friends,
nobody asnwered my question. Dear Mike, will your "hack" unlocked some functions from E8 on my E5?
Thank you for your answer.


Yes, this hack will upgrade your E5 to an E8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 04, 2013, 06:30:48 pm
Hello friends,
nobody asnwered my question. Dear Mike, will your "hack" unlocked some functions from E8 on my E5?
Thank you for your answer.

Petr

I don't see why not, it should enable the same functions as in the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 04, 2013, 06:43:16 pm
Hello friends,
nobody asnwered my question. Dear Mike, will your "hack" unlocked some functions from E8 on my E5?
Thank you for your answer.

Petr

I don't see why not, it should enable the same functions as in the E4.

Great news.. Thank you so much..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 06:58:15 pm
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 04, 2013, 07:07:14 pm
Does the E4/E8 need to be up close to the item you're viewing, or could I look out my apartment window with the thing and see the heat signitures of people walking 4 streets down?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 04, 2013, 07:08:22 pm
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).
For that application, a trigger output to activate a conventional camera with flash would be handy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 09:07:51 pm
Oops -seems like that keypad flex isn't up to lots of repeated openings and closing... 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 04, 2013, 09:13:55 pm
I have a similarly damaged flex I one of my TIC's.

Any thoughts on how you will repair this, or is the flex replaceable ?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: M. András on November 04, 2013, 09:14:04 pm
repair video is coming as i see :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 04, 2013, 09:26:42 pm
Does the E4/E8 need to be up close to the item you're viewing, or could I look out my apartment window with the thing and see the heat signitures of people walking 4 streets down?

I'm also curious about the effective range of thermal cameras. While I wouldn't expect one to be able to pick up the surface temperature of the Moon, there must be some distance up to which we can get an accurate measurement.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 04, 2013, 09:32:43 pm
Range depends very much upon the lens fitted. A 45 Degree lens has a shorter range than say a 5 degree telephoto lens. It is little different to an optical lens capability in this respect. Obviously sensitivity of eth micro-bolometer is also part of the equation. The E series have decent sensitivity across the model range.

I will dig out my specs on lens versus maximum distance for you. The target is usually a human for such specs as the usage is often security.

In case anyone is unaware....a TIC will NOT see through glass so you would have to open a window to see outside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 04, 2013, 09:40:33 pm
Fortunately there's plenty of spare length, and it's 1mm pitch.


Would have replaced it but the key PCB is sandwiched under the plastic fascia that looks like it's glued in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 04, 2013, 09:50:10 pm
Mike saves the day
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Monkeh on November 04, 2013, 09:51:06 pm
Oops -seems like that keypad flex isn't up to lots of repeated openings and closing...

When are they ever?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 04, 2013, 09:51:58 pm
FLIR have a decent document on maximum range of a TIC. I attach it for your information.

I have looked at the sky with my PM695 and on the -40 to +120 Degrees Celcius range, clear sky reads -34 Degrees Celcius. It is colder than -34 at high altitudes on the edge of space....around -50 Degrees IIRC. So the camera does not accurately read true 'space' temperatures but maybe 'sees' atmospheric temperatures up to its maximum range.
The moon may be seen as it is reflecting the suns rays towards Earth. I cannot recall what temperature it read but I very much doubt such would be anywhere near accurate. My 695 has a 24 Degree lens and X4 zoom, so the equivalent lens would be 6 Degrees at full zoom, but the moon still looked awful small in the viewfinder ! With a wide angle lens such as fitted on the E series, observation of the moon would be challenging.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 04, 2013, 09:55:49 pm
Mike saves the day

Just made Hack-a-day again as well!

http://hackaday.com/2013/11/04/manufacturer-crippled-flir-e4-thermal-camera-hacked-to-perform-as-high-end-model/ (http://hackaday.com/2013/11/04/manufacturer-crippled-flir-e4-thermal-camera-hacked-to-perform-as-high-end-model/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 04, 2013, 11:59:54 pm
Mike saves the day

Just made Hack-a-day again as well!

http://hackaday.com/2013/11/04/manufacturer-crippled-flir-e4-thermal-camera-hacked-to-perform-as-high-end-model/ (http://hackaday.com/2013/11/04/manufacturer-crippled-flir-e4-thermal-camera-hacked-to-perform-as-high-end-model/)

Almost 400 guests. Wow...

So FLIR Sweden is like  :rant: tomorrow?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on November 05, 2013, 01:29:37 am
Hack a Day is off their game, that it took this long was a damn Christmas miracle.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 05, 2013, 03:21:23 am
I've gotten into Service Mode on the i7, but the display is largely the same; there aren't enough pixels on the LCD to show 320x240! Although doug this on an i3 would probably show i7 resolution in Service Mode. The main obstacle to converting the i7 to i3 and back is the EEPROM password. Any ideas?

I'm in the same spot -- EEPROM is locked.  Do we have the password?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 05, 2013, 03:26:03 am
Now heres a question for you all......
There are a lot of FLIR i3's out there........Hmmmmm I wonder if they can be upgraded in a similar manner ? i3's should be being discounted soon, and cheaper on the used marketplace due to the E4's arrival. We know the i7 can be hacked.
AFAIUI the i3 can be made into an i7, which was the subject of the lost email, but even the i7 is only 120x120

Is this posted somewhere?   I am in service mode -- but it seems like the EEProm is locked to change the camera name from FLIR_i3 to FLIR_i7?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 05, 2013, 03:28:40 am
@hackaday:
It's not a wonder - no dedicated topic blogging about it but all info hidden deep in some comments to a teardown...

... btw - I can confirm that the E4 is priced at ~$896 (free UPS ground shipping within continental US) when requesting a quote from http://valuetesters.com (http://valuetesters.com) - unfortunately it seems there's not a human processing that request - the comments get ignored (intl. shipping).

According to my estimations that would equal to somewhere around 980€ EDIT2: 1008€ shipped & taxed to Germany - with roughly $180 for UPS expedited and paid via Paypal (5% exchance losses there)...
... still approx. 160€EDIT2: 130€ below the cheapest european source I could find. (EDIT: JFYI - I have my order running already - went for an EU source)

EDIT2: depends on which customs tariff code would be applied... this one is the safer guess

Currently I'm owning a chinese FLIR knockoff (older model) with 160x120 res. and some issues - so will join the E4 owners soon ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 05, 2013, 03:39:51 am
Mike, since you're the thread starter, I think its time to update the 1st post with summary and few notes, like the one you've done at post #524 -> HACK SUMMARY (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956), especially with the influx of new users here after the Hack a day announcement, otherwise this thread will be flooded with basic requests and questions about the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 05, 2013, 03:51:54 am
Actually I though Mike's post #524 was the latest and greatest? But yes, pinning it to the front of the thread is a good idea.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 05, 2013, 03:54:39 am
You're right, post updated with link to post #524.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 05, 2013, 05:17:11 am
In case anyone is unaware....a TIC will NOT see through glass so you would have to open a window to see outside.

unless you are muOptics!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 08:14:04 am
Long time listener first time caller. Just ordered my E4. So if I read all 45 pages of the thread its no longer considered an impulse buy, correct?   :-// Regardless. I assume many of us will be receiving our E4 shortly. Has anyone confirmed that they are shipping with a newer fw? I saw a post about 1.19.x being on the device. I doubt they would be able to patch it that quickly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 08:15:38 am
Re. the i3/7, if it is the same as the E4, then the EEPROM is not where you need to be looking.
On the E4, the  configuration comes from the conf.cfg file, which is protected by a CRC01 and having the serial number in the file to prevent copying between units.

There are at least a couple of people here with i3/i7 - maybe they could investigate further - I suspect the E4 hack method, or something very similar may well work on the i series
 

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 08:26:13 am
Tequipment's stock of E4's (http://www.tequipment.net/FLIRE4.html) has gone from 12 yesterday afternoon to 5 now...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 05, 2013, 08:49:45 am
Is there something special about this cable (http://www.tequipment.net/Flir1195128.html)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 05, 2013, 08:54:10 am
Is there something special about this cable (http://www.tequipment.net/Flir1195128.html)?

No, it´s normal USB-A - Micro-B USB cable
You can use standard micro USB charger for charging E4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 08:55:13 am
Is there something special about this cable (http://www.tequipment.net/Flir1195128.html)?
Only that it plugs into a $xxxx device - I wonder if anyone has ever bought one..?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 05, 2013, 09:01:26 am

Mike - you wrote once something about 336x252 (or similar) physical sensor resolution...
Did you try out what happens when setting the resolution to the sensor's phys max or even above (or E6 res for example)?
Like whether the full res. then gets saved to files/snapshots or is beeing presented over USB.

Currently I'd assume that the cam always outputs 320x240 on all channels as I didn't see saved images with just 80x60 pixel resolution yet.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on November 05, 2013, 09:07:04 am
Is there something special about this cable (http://www.tequipment.net/Flir1195128.html)?

lol, wow... 75$ for a 1$ cable.
my cell phone usb cable works just the same as the one included with the e4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 09:14:18 am

Mike - you wrote once something about 336x252 (or similar) physical sensor resolution...
Did you try out what happens when setting the resolution to the sensor's phys max or even above (or E6 res for example)?
Like whether the full res. then gets saved to files/snapshots or is beeing presented over USB.

Currently I'd assume that the cam always outputs 320x240 on all channels as I didn't see saved images with just 80x60 pixel resolution yet.
Not me - I don't recall seeing that resolution referenced anywhere. Sometimes visible image sensors have additional rows/columns for calibration purposes -e.g. masked to get a dark reference No idea if TIC sensors do similar things
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 05, 2013, 09:36:48 am
Not me - I don't recall seeing that resolution referenced anywhere. Sometimes visible image sensors have additional rows/columns for calibration purposes -e.g. masked to get a dark reference No idea if TIC sensors do similar things
Ah, sorry |O  didn't see the italics (print view) and overlooked the initial line in post #261 ... plus now I remembered that you did connect a probe to the sensor and that you said something about 320x240 x 60Hz as output. ...

...and before I forget: THX to all you guys who cooperated on this thread  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 05, 2013, 10:38:30 am
Is there something special about this cable (http://www.tequipment.net/Flir1195128.html)?
Only that it plugs into a $xxxx device - I wonder if anyone has ever bought one..?
I could imagine a management-level purchaser being convinced into buying one for each of the cameras in a large order, "because the video has less noise using our cables" :-DD

Also curious if there's something in the warranty statement about it being void when the unit is used with "third-party accessories"...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 05, 2013, 10:47:21 am
OT / @Cable: this reminds me of a 140 DM (yes, long long ago - nowadays it would be 140€) iLink(aka Firewire) cable (1,5m) ... specialty: was branded Sony and had a nice purple plastic instead of generic black ... of cause it was next to the camcorders ... approx 20m distance to the normally overpriced cables :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 11:43:23 am
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).
Good idea. I could not find the possible/allowed UART commands / parameter in this thread but I may have overseen them (due to the size of 46 pages I did just a quick scan). Can you please point me to the correct place or restate them? Thanks

Oh, and I am sorry for your cable! On long term it might be better to repair with another short FPC cable (add solder on one cable, then place contacts to contacts of old/new cable and heat from the top, that works pretty well).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 05, 2013, 11:51:03 am
The Audiophool industry has got there already with USB cables. Try a search for "oxygen free silver usb cable" and prepare to cry...  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 05, 2013, 12:46:22 pm
Quote
The Audiophool industry has got there already with USB cables. Try a search for "oxygen free silver usb cable" and prepare to cry... 

The cryro-treated, oxygen-free, OCC silver USB cable with gold injections really brings out a subtle sibilance and a rich, lushous, tonally neutral, punchy, forward soundstage.

I almost forgot, it also reduces aberrations due to the skin effect!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 12:47:11 pm
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).
Good idea. I could not find the possible/allowed UART commands / parameter in this thread but I may have overseen them (due to the size of 46 pages I did just a quick scan). Can you please point me to the correct place or restate them? Thanks

Oh, and I am sorry for your cable! On long term it might be better to repair with another short FPC cable (add solder on one cable, then place contacts to contacts of old/new cable and heat from the top, that works pretty well).
It's the T59504PDF linked here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 05, 2013, 12:51:17 pm
The Audiophool industry has got there already with USB cables. Try a search for "oxygen free silver usb cable" and prepare to cry...  :palm:

I cried when a audiophool "explained" that his "special" hDmi (where the D stands for DIGITAL!) cables enhanced the sound and image of his (encrypted!!) signal..

A phool born every minute..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 05, 2013, 01:19:16 pm
I just noticed that e4hack3.zip has been downloaded 129 times already. Undoubtably not all of those were from owners of an Ex camera, but it's nice to see that people are grabbing copies of the file before the thread gets deleted... you know, just in case :)

Predator vision is in transit!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 05, 2013, 01:38:27 pm
Talking of predator vision, even though a bit offtopic:
http://www.trotec24.com/en-de/measuring-instruments/temperature/infrared-cameras/ec060-v-infrared-camera.html (http://www.trotec24.com/en-de/measuring-instruments/temperature/infrared-cameras/ec060-v-infrared-camera.html)
Claims to have 50/60Hz frame rate. Features video output, 160x120 sensor resolution, PIP and manual focus.
The onscreen display looks a bit unprofessional though, also some people on Amazon complain about build quality (battery charger etc.).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 05, 2013, 01:45:04 pm
FWIW, if anyone is tracking, I just got an E4 with a serial# north of 5k, and firmware v1.19.8.

I'll definitely want to be able to focus it a bit closer, so looking forward to seeing any of Mike's experiments in making a tool to adjust that easily.

Have already spotted a possible irregularity with the office air-conditioning... it's not a toy, honest!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 05, 2013, 01:46:08 pm
Mike, can the E4 be hacked to provide 30/60 Hz refresh rate? I imagine the 9Hz operation is not limited by hardware but rather by export law.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 01:56:19 pm
FWIW, if anyone is tracking, I just got an E4 with a serial# north of 5k, and firmware v1.19.8.

I'll definitely want to be able to focus it a bit closer, so looking forward to seeing any of Mike's experiments in making a tool to adjust that easily.

Have already spotted a possible irregularity with the office air-conditioning... it's not a toy, honest!
One thing to check - the main obvious bug in the older FW is it doesn't show time/date in the file information - is this fixed in 1.19?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 01:57:00 pm
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).
Good idea. I could not find the possible/allowed UART commands / parameter in this thread but I may have overseen them (due to the size of 46 pages I did just a quick scan). Can you please point me to the correct place or restate them? Thanks

Oh, and I am sorry for your cable! On long term it might be better to repair with another short FPC cable (add solder on one cable, then place contacts to contacts of old/new cable and heat from the top, that works pretty well).
It's the T59504PDF linked here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284)

Thanks Mike.
I assume it is chapter 4.2.4.5 on page 59.
But how do I send the command?

Like this below if I want a span from 0°C to 100°C (=273 / 373 Kelvin)?

38400 Baud; ASCII through RS232 interface:
"rset .image.contadj.adjMode manual CR/LF"
"rset .image.sysimg.basicImgData.extraInfo.lowT 273 CR/LF"
"rset .image.sysimg.basicImgData.extraInfo.highT 373 CR/LF"


Thats all?
Is CR and LF correct or only CR?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 02:00:05 pm
By the way:
When looking at the JPG EXIF information of a picture, there is noted 'E4' as camera model and some more information like lens, distance etc.
You might rename E4 to E8 in an EXIF editor and you might think you did it, but ... in Flir Tools it is still showing "E4" and also the serial number of the camera is shown there. So there are some more information hidden somewhere.
Does anybody have an idea how to get rid of these informations (by not loosing the other informations Flir Tools are using e.g. digital camera picture, temperature span etc.)?


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 05, 2013, 02:05:51 pm
By the way:
When looking at the JPG EXIF information of a picture, there is noted 'E4' as camera model and some more information like lens, distance etc.
You might rename E4 to E8 in an EXIF editor and yiu might think it is OK, but ... in Flir Tools it is still showing "E4" and also the serial number of the camera is shown there.
Does anybody have an idea how to get rid of these informations (by not loosing the other informations Flir Tools are using e.g. digital camera picture, temperature span etc.)?
Assuming you use Window, freeware, get this -> http://freeweb.siol.net/hrastni3/foto/exif/exiftoolgui.htm (http://freeweb.siol.net/hrastni3/foto/exif/exiftoolgui.htm)

Use the Remove Metadata sub menu to clear any stickied attributes from a photo.

(http://freeweb.siol.net/hrastni3/foto/exif/etgui4.png)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 05, 2013, 02:18:51 pm
One thing to check - the main obvious bug in the older FW is it doesn't show time/date in the file information - is this fixed in 1.19?

No, it's not showing that on the device (you're right, this makes no sense from a UI perspective). It bakes it correctly into the file though, so it's OK when viewed elsewhere (though I have yet to work-out/RTFM how to view both the normal and thermal images when browsing files - it shows both on the camera, but the JPEG image appears only to contain the thermal image)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 05, 2013, 02:23:54 pm
BTW. Is there a way to remove the "flir" branding from the image?
It's nice when you are senile and need to be remembered which brand camera you have, but otherwise it's useless, takes up measurable space and quite frankly I think it's rather annoying..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 02:40:58 pm
Another possible feature for a MCU add-on - timelapse mode.
You could maybe also do auto shoot on detection for wildlife/security by looking for a rise in the temp scale (you can read this via level and span commands).
Good idea. I could not find the possible/allowed UART commands / parameter in this thread but I may have overseen them (due to the size of 46 pages I did just a quick scan). Can you please point me to the correct place or restate them? Thanks

Oh, and I am sorry for your cable! On long term it might be better to repair with another short FPC cable (add solder on one cable, then place contacts to contacts of old/new cable and heat from the top, that works pretty well).
It's the T59504PDF linked here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316284/?topicseen#msg316284)

Thanks Mike.
I assume it is chapter 4.2.4.5 on page 59.
But how do I send the command?

Like this below if I want a span from 0°C to 100°C (=273 / 373 Kelvin)?

38400 Baud; ASCII through RS232 interface:
"rset .image.contadj.adjMode manual CR/LF"
"rset .image.sysimg.basicImgData.extraInfo.lowT 273 CR/LF"
"rset .image.sysimg.basicImgData.extraInfo.highT 373 CR/LF"


Thats all?
Is CR and LF correct or only CR?
I don't know if you can do it with rset  -there are "level" and "span" commands which definitely work
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 02:50:09 pm
Assuming you use Window, freeware, get this -> http://freeweb.siol.net/hrastni3/foto/exif/exiftoolgui.htm (http://freeweb.siol.net/hrastni3/foto/exif/exiftoolgui.htm)
Use the Remove Metadata sub menu to clear any stickied attributes from a photo.
Thanks. I knew this program before, but not the GUI. That makes it a lot more comfortable!
But .... not working :-(
Of course it then removes everything ... but also all embedded information you might need in Flir tools.

I could see beside the sections JFIF, EXIF etc. there is a section called APP1 (see below)
Now the question is: how can I edit APP1 without deleting everything? It seems I do not have the chance to edit any single entry of this APP1 section with this tool.

---- APP1 ----
Emissivity                      : 0.95
ObjectDistance                  : 1.00 m
ReflectedApparentTemperature    : 20.0 C
AtmosphericTemperature          : 20.0 C
IRWindowTemperature             : 20.0 C
IRWindowTransmission            : 1.00
RelativeHumidity                : 50.0 %
PlanckR1                        : 14469.053
PlanckB                         : 1392.2
PlanckF                         : 2.5
CameraTemperatureRangeMax       : 250.0 C
CameraTemperatureRangeMin       : -20.0 C
CameraModel                     : FLIR E4
CameraPartNumber                : 63901-0101
CameraSerialNumber              : 639047xx
CameraSoftware                  : 22.0.0
LensModel                       : FOL7
LensPartNumber                  :
LensSerialNumber                :
FieldOfView                     : 45.0 deg
FilterModel                     :
FilterPartNumber                :
FilterSerialNumber              :
PlanckO                         : -7489
PlanckR2                        : 0.026838331
RawValueMedian                  : 12412
RawValueRange                   : 632
DateTimeOriginal                : 2013:10:26 13:06:58.710+00:00
FocusStepCount                  : 70
FocusDistance                   : 0.0 m
PaletteColors                   : 224
AboveColor                      : 170 128 128
BelowColor                      : 50 128 128
OverflowColor                   : 67 216 98
UnderflowColor                  : 41 110 240
Isotherm1Color                  : 100 128 128
Isotherm2Color                  : 100 110 240
PaletteMethod                   : 0
PaletteStretch                  : 2
PaletteFileName                 : \FlashBFS\system\iron.pal
PaletteName                     : Iron
Palette                         : (Binary data 672 bytes, use -b option to extract)
RawThermalImageWidth            : 80
RawThermalImageHeight           : 60
RawThermalImageType             : PNG
RawThermalImage                 : (Binary data 5779 bytes, use -b option to extract)
Real2IR                         : 1.33978033065796
OffsetX                         : -12
OffsetY                         : +0
PiPX1                           : 0
PiPX2                           : 80
PiPY1                           : 0
PiPY2                           : 60
EmbeddedImageWidth              : 640
EmbeddedImageHeight             : 480
EmbeddedImageType               : DAT
EmbeddedImage                   : (Binary data 25074 bytes, use -b option to extract)


P.S. If anybody wonders: the above has been copied on a picture of an unhacked E4 (thats why 80x60) but will be the same with a hacked one (beside the resolution, which will be shown correctly as 320x240 then).

EDIT: the string E4 and the serial number can be found and edited with a HEX editor. So there is just a tool needed which can show and edit App1 section.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 02:51:27 pm
BTW. Is there a way to remove the "flir" branding from the image?
It's nice when you are senile and need to be remembered which brand camera you have, but otherwise it's useless, takes up measurable space and quite frankly I think it's rather annoying..
If you remove all Metadata as explained above, the Flir logo is gone. But keep a copy as every other information of the file is gone then too.

EDIT: mmmh - I tried it again, now the logo stays. Probably I wrote crap. Just ignore the above.
Another solution: Open your file in Flir tools. Logo etc. are gone and you can adapt the picture as you like. Now make a screen copy of the picture-screen area and save as JPG. But your usual large temperature reference is also gone now - you may copy it with the narrower one of Flir tools. No other way as Flir does not allow a "save" of the plain picture here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 05, 2013, 02:52:22 pm
Is there anyway FLIR can patch this hack? I want to buy one but, unfortunately,  not this year...  :'(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 03:10:18 pm
Is there anyway FLIR can patch this hack? I want to buy one but, unfortunately,  not this year...  :'(

As mentionned earlier ... yes, plenty of ways. Especially for new camera. But even if you updated the fw on a old one there is plenty of things they could do.

Would it be un-hackable ? Doubtful, but they could make it really painful and then you'd need motivated people that don't already have an hacked one to get to work on it ... Actually now that I think on it, doing it only for new cam might be a good technique ... I'm sure several people (me for eg) wouldn't spend any time looking at bypassing a new protection scheme if the old bypass kept working on my camera ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on November 05, 2013, 03:11:51 pm
some basic i3 info from different posts in this thread collected together for newbies like me ;)

simple solution that changes i3 temporarily to i7 but doesn’t void warranty as there no modifications to camera at all
- turn on camera
- press left menu button once
- press gallery (play) button for 5 seconds

you should have ‘diagnostic’ screen open

- under left menu, change usb mode to RNDIS
- install flir drivers http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)
- connect camera to your pc

(at this point it should install as network card with dhcp active and camera should be accessible through www [port 80, there is also few more things active – check 3rd page of http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf) ] rtsp stream is obviously not available)

- open your browser and navigate to http://192.168.0.2 (http://192.168.0.2) then activate service mode – user:flir password:3vlig
- give it 30-40 seconds without pressing any keys, it will reboot and it will have i7 angles and resolution on the screen

those changes are reversed with every reboot so reset it with a switch or let it turn off when you are done with it

sample pictures from my i3 (http://img30.imageshack.us/img30/3989/30ht.jpg)

all informations quoted here were provided in this thread by various users, thanks lads

BTW, is there any way to reboot it without using hardware switch in battery compartment or waiting until it powers down by itself - long press on power button don't work for me at all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 03:24:42 pm
Get' em while you can -Tequipment stock went from 12 yesterday down to the last one in stock today!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 05, 2013, 03:38:28 pm
Ordered mine earlier today  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on November 05, 2013, 03:44:01 pm
Just sent in an order.  Remember to ask for the discount code.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 05, 2013, 03:53:00 pm
Forgot to at the time, but I just contacted them and they changed it down to $895
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 03:56:01 pm
Forgot to at the time, but I just contacted them and they changed it down to $895

Ordered mine last night. Do you think its too late for me to get discount? What did you say when you called? Thanks for any help you can provide
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 04:05:48 pm
What are some "to-dos" for the hack? Getting the E8 feature set has been done much thanks to Mike. What are other things people have requested? I have experience with REing embedded systems (although none with Windows CE) and am looking forward to modifying mine. One of the main reasons I decided to buy one IS because there is still functionality to add. Here is list of things that I gathered from the posts/video:

Again any insight or additions you can provide would be appreciated.
Some questions:
Is the refresh rate hardware restricted or software?
Regarding temperature adjustment, this is achieved via serial commands correct?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 05, 2013, 04:16:48 pm
Forgot to at the time, but I just contacted them and they changed it down to $895

Ordered mine last night. Do you think its too late for me to get discount? What did you say when you called? Thanks for any help you can provide

I don't think my order had been processed yet. I just used the live chat on the website and said that I'd been quoted it cheaper on another site, then asked if it was too late to take advantage of their price match guarantee.
They just wanted to know where I got the quote from and were happy update my order to match it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 05, 2013, 04:56:19 pm
Is there anyway FLIR can patch this hack? I want to buy one but, unfortunately,  not this year...  :'(

As mentionned earlier ... yes, plenty of ways. Especially for new camera. But even if you updated the fw on a old one there is plenty of things they could do.

Would it be un-hackable ? Doubtful, but they could make it really painful and then you'd need motivated people that don't already have an hacked one to get to work on it ... Actually now that I think on it, doing it only for new cam might be a good technique ... I'm sure several people (me for eg) wouldn't spend any time looking at bypassing a new protection scheme if the old bypass kept working on my camera ...

Too bad, I can't afford it right now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 05, 2013, 05:05:52 pm
My tequipment order is still listed as being "on hold". When I ordered there were 12 in stock; now there's only 1. I will be severely pissed if they didn't reserve one for me. Hulk Smash!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 05, 2013, 05:10:52 pm
OT / @Cable: this reminds me of a 140 DM (yes, long long ago - nowadays it would be 140€) iLink(aka Firewire) cable (1,5m) ... specialty: was branded Sony and had a nice purple plastic instead of generic black ... of cause it was next to the camcorders ... approx 20m distance to the normally overpriced cables :)

Kind of reminds me of the $1,000 Ethernet cable: http://www.amazon.com/Denon-AKDL1-Dedicated-Cable-Version/dp/B000I1X6PM (http://www.amazon.com/Denon-AKDL1-Dedicated-Cable-Version/dp/B000I1X6PM)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 05:27:08 pm
What are some "to-dos" for the hack? Getting the E8 feature set has been done much thanks to Mike. What are other things people have requested? I have experience with REing embedded systems (although none with Windows CE) and am looking forward to modifying mine. One of the main reasons I decided to buy one IS because there is still functionality to add. Here is list of things that I gathered from the posts/video:

  • Hot Swap Button (from thermal to live view)
  • Temperature Adjustment
  • Refresh rate unlock?
Again any insight or additions you can provide would be appreciated.
Some questions:
Is the refresh rate hardware restricted or software?
Regarding temperature adjustment, this is achieved via serial commands correct?
Not known if framerate is changeable but no reason for it to not be baked into the FPGA, especially due to the ITAR issues.
The only thing I've seen relating to framerate is the  "Allow_30Hz" or similar message in the bootup text, but this may just be a status readout from the FPGA.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 05, 2013, 05:39:31 pm
Get' em while you can -Tequipment stock went from 12 yesterday down to the last one in stock today!

If they really had only one left, then they have none now because I ordered one 2 minutes ago.
Cheers Mike! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 06:15:42 pm
FYI: If you are not from the US, don't bother Tequipment or Optimum Energy Products (shopflir.com) with a request for quote. They both do not ship the Flir E4 to non-US countries. But it can take a day or two until they answer your mails and during this waiting-time other available E4 might be gone.
Their answers for several requests were:

Flir don't want us selling into other dealers regions.
and
... Unfortunately, we are not allowed to supply FLIR products into your territory.
and
...as we do no send thermal cameras outside of the US as per federal law


In Europe there are enough available .... but +30% more expensive :-[
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 05, 2013, 06:23:48 pm
You could still have it shipped to a trusted U.S. resident and have them forward it to you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 06:32:52 pm
FYI: If you are not from the US, don't bother Tequipment or Optimum Energy Products (shopflir.com) with a request for quote. They both do not ship the Flir E4 to non-US countries. But it can take a day or two until they answer your mails and during this waiting-time other available E4 might be gone.
Their answers for several requests were:

Flir don't want us selling into other dealers regions.
and
... Unfortunately, we are not allowed to supply FLIR products into your territory.
and
...as we do no send thermal cameras outside of the US as per federal law


In Europe there are enough available .... but +30% more expensive :-[
valuetesters claim to ship internationally, and a couple of pages ago here someone mentioned a $100 discount for the asking
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on November 05, 2013, 06:45:31 pm
You could still have it shipped to a trusted U.S. resident and have them forward it to you.

there is plenty companies that do parcel forwarding i.e. http://www.viaddress.com/ (http://www.viaddress.com/) but there is a good chance that a brand new thermal cam with all accessories in unopened box together with receipts will attract enough attention of customs and one will be charged vat which makes whole operation a bit pointless

it still is worth a shot if price is main factor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 05, 2013, 06:58:28 pm
In that case, it might be an idea to have the forwarder ship the camera separately from the rest of the package.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 05, 2013, 07:02:56 pm
but there is a good chance that a brand new thermal cam with all accessories in unopened box together with receipts will attract enough attention of customs and one will be charged vat which makes whole operation a bit pointless

it still is worth a shot if price is main factor
the E4 is a huge package .... it will almost always be X-rayed and held in customs so you need (in Europe) to add 3.2% customs and your local VAT to your costs. If you are lucky no tax but only VAT will apply, but officially (see EU regulation 314/2011 from March 2011) infrared cameras are taric 90251920 and thus 3.2%.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 07:05:45 pm
Not known if framerate is changeable but no reason for it to not be baked into the FPGA, especially due to the ITAR issues.
The only thing I've seen relating to framerate is the  "Allow_30Hz" or similar message in the bootup text, but this may just be a status readout from the FPGA.

The "Is 30 Hz Allowed" message seems to be entirely driven by the "version.hw.det_board.article", "version.hw.mainboard.article" and "version.hw.mainboard.revision" keys. There seem to be several combinations that would result in a "Yes".

Of course it might be easier to just patch the binary to make it return "1" all the time ... becasue those values above could be used somewhere else to configure hw differently or something ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 08:23:37 pm
Interestingly, just after that function is called and if it returns one, 0x1E is written to a HW register with a DeviceIOControl ...

Anybody want to give it a shot ? (I lent mine to a friend for a couple of days ...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 08:27:13 pm
Not known if framerate is changeable but no reason for it to not be baked into the FPGA, especially due to the ITAR issues.
The only thing I've seen relating to framerate is the  "Allow_30Hz" or similar message in the bootup text, but this may just be a status readout from the FPGA.

The "Is 30 Hz Allowed" message seems to be entirely driven by the "version.hw.det_board.article", "version.hw.mainboard.article" and "version.hw.mainboard.revision" keys. There seem to be several combinations that would result in a "Yes".

Of course it might be easier to just patch the binary to make it return "1" all the time ... becasue those values above could be used somewhere else to configure hw differently or something ...
I still think that is about hardware reporting to the software what it can do, rather than controlling anything.
May be interesting to look at differences in teh Ex0 firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 08:36:30 pm
Mmm, as I mentionned above, the config seems to trigger an explicit HW/FPGA register write. Of course, that doesn't mean the hw could actually handle it, but at least it's not just doing a print. The result does really trigger a hw action.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 08:37:39 pm
Ok going through the video more thoroughly. Where is the FPGA data stored? Is it stored in the same flash chip?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 05, 2013, 08:40:19 pm
Assuming that FLIR is on to us, how long do you suspect it would take them to patch the hardware such that it can no longer (easily) be hacked? I mean could the next batch be immune? Or does this kind of hardware/software fix take months to finish and re-test etc?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 08:43:03 pm
Assuming that FLIR is on to us, how long do you suspect it would take them to patch the hardware such that it can no longer (easily) be hacked? I mean could the next batch be immune? Or does this kind of hardware/software fix take months to finish and re-test etc?

Adding hw security would take a while.

But patching the fw for the most obvious holes could probably be done fairly quickly (i.e a couple of weeks would be more than enough) if they put the resources to do it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 05, 2013, 08:43:14 pm
General Tools offers a 160 x 120 camera with a 30 Hz refresh rate for less than $2,000: http://www.generaltools.com/GTI10--predator-Series-Thermal-Imaging-Camera_p_1856.html (http://www.generaltools.com/GTI10--predator-Series-Thermal-Imaging-Camera_p_1856.html)

They also have two other 160 x 120 cameras that are more expensive but have more features, as well as a 384 x 288 unit for less than $5,500. This might be something to look into if you're seeking a higher frame rate. I wouldn't be surprised if the GTi10 could be hacked in a similar fashion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 05, 2013, 09:03:08 pm
The "Is 30 Hz Allowed" message seems to be entirely driven by the "version.hw.det_board.article", "version.hw.mainboard.article" and "version.hw.mainboard.revision" keys. There seem to be several combinations that would result in a "Yes".

I can't get a value for "version.hw.det_board.article", is that just me?

"version.hw.mainboard.article" returns T198283, "version.hw.mainboard.revision" returns 10 (probably 1.0)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 09:10:21 pm
I can't get a value for "version.hw.det_board.article", is that just me?

"version.hw.mainboard.article" returns T198283, "version.hw.mainboard.revision" returns 10 (probably 1.0)

Looking at the code, you probably only get either mainboard or det_board depending on the model ...

You could try setting version.hw.mainboard.article to 1196597  and the revision to 2  (and I mean 2 not 20).
But as I said it might be better to patch the function to return 1 because changing those config could have other effect at other places ...

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 09:40:23 pm
Someone correct me if I'm wrong:

I would venture that the bootloader needs to be investigated. Their might be a argument loaded into the kernel that gives it its identity. Can someone please post a text dump of the output mike got in the video. I tried pausing but I couldn't identify the bootloader.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 05, 2013, 09:48:42 pm
* AFAIK, not easy to check the FPGA -> CPU path because it's all BGA. The sensor output happen to be exported to a test connector.
* The downsampling could be in the FPGA and still be configurable by software.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 09:57:59 pm
Hmm. Have you tried killing appcore.exe? When mike put it in "service mode" did the sample rate increase?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 10:09:58 pm
Odd. Maybe some sort of watch dog. Its weird because appcore isnt running when the device boots up. Im not home now but will investigate further upon arrival.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 10:16:08 pm
Killing appcore doesn't crash, just stops the main app running.
There are stopapp and restartapp batch files to start & stop - they are slightly misleading as they include lines to kill  a bunch of stuff than never runs - presumably leftovers from debugging.
Appcore spawns a number of other processes - FVD is run early but not sure if before or after appcore is launched by applaunch.dat

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 05, 2013, 10:17:51 pm
Is there anyway FLIR can patch this hack? I want to buy one but, unfortunately,  not this year...  :'(

As mentionned earlier ... yes, plenty of ways. Especially for new camera. But even if you updated the fw on a old one there is plenty of things they could do.

Would it be un-hackable ? Doubtful, but they could make it really painful and then you'd need motivated people that don't already have an hacked one to get to work on it ... Actually now that I think on it, doing it only for new cam might be a good technique ... I'm sure several people (me for eg) wouldn't spend any time looking at bypassing a new protection scheme if the old bypass kept working on my camera ...

Too bad, I can't afford it right now.


 :palm:  :palm: Never mind... I just ordered one  :palm:  :palm:


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 05, 2013, 10:29:08 pm
Mike quick question for further reference.
What methodology did you use to determine whether pin was input or output using pullup/pulldown resistors?

I understand the concept but how did you choose the value (strong vs weak?) or what if it was a GPIO (software configured, can be driven, pulled, high z?)
Just trying to get some insight for future targets  :) Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 10:46:30 pm
Mike quick question for further reference.
What methodology did you use to determine whether pin was input or output using pullup/pulldown resistors?

I understand the concept but how did you choose the value (strong vs weak?) or what if it was a GPIO (software configured, can be driven, pulled, high z?)
Just trying to get some insight for future targets  :) Thank you.
First stab is typically to look at how the pin voltage changes when pulled up or down with a 1K resistor - an output won't change much, an input will.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 10:49:05 pm
If it remains the same 100% of the time, it's either an input, a voltage supply, or a ground.
Or an output that you've not yet discovered the purpose of, or missed a brief pulse on, or only chnages under circumstances you've yet to discover. Easy enough to see how it reacts to a pullup/pulldown to be more sure.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 05, 2013, 10:51:15 pm
If it remains the same 100% of the time, it's either an input, a voltage supply, or a ground.
Or an output that you've not yet discovered the purpose of, or missed a brief pulse on, or only chnages under circumstances you've yet to discover. Easy enough to see how it reacts to a pullup/pulldown to be more sure.
First step is usually to find all grounds using continuity tests with power off. If only to eliminate pins.
Then look for continuity to any obvious power supplies, again to narrow down search for interesting stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: manu on November 05, 2013, 11:49:25 pm
Thank you for the trick!
But, how do you manage to dare opening quite costly optics stuff without being feared of failing?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on November 06, 2013, 12:05:31 am
But, how do you manage to dare opening quite costly stuff without being feared of failing?

Feel the fear and do it anyway  :)

My first thought every afternoon when I wake up lol
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: manu on November 06, 2013, 12:26:51 am
But, how do you manage to dare opening quite costly stuff without being feared of failing?

Feel the fear and do it anyway  :)

My first thought every afternoon when I wake up lol
;D
The true question is: "where do you get these equipments for tearing down?". I got one of these cameras as a loan, but I would not tear it down regarding the caution the distributor was asking.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 06, 2013, 03:06:31 am
http://www.filedropper.com/flire4 (http://www.filedropper.com/flire4)

Here's an archive of all the FLIR Ex information I could find. May be useful having it all in one location.

It has firmware v1.18.7 as well, so perhaps you can downgrade if FLIR does ship your camera with firmware that blocks the hack
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 06, 2013, 03:31:45 am
Quote
http://www.filedropper.com/flire4

Here's an archive of all the FLIR Ex information I could find. May be useful having it all in one location.

It has firmware v1.18.7 as well, so perhaps you can downgrade if FLIR does ship your camera with firmware that blocks the hack


In edlens.asp, could these values tell you the part number and serial of the lens to see if the E4 and E8 are different?

   
Quote
         restreeLens.setResourceValue( "version", Request.Form( "lensversion" ) );
                restreeLens.setResourceValue( "SN", Request.Form( "lensserial" ) );
                restreeLens.setResourceValue( "PN", Request.Form( "lenspart" ) );
                restreeLens.setResourceValue( "focLen", Request.Form( "lensfoclen" ) );
                restreeLens.setResourceValue( "fNumber", Request.Form( "lensfnumber" ) );
                restreeLens.setResourceValue( "clearanceDistance", Request.Form( "lenscleardist" ) );
                restreeLens.setResourceValue( "rotMirr", Request.Form( "lensrotmirr" ) );
                restreeLens.setResourceValue( "opticalMinMeasRadius", Request.Form( "lensminmeasrad" ) );
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 08:32:10 am

In edlens.asp, could these values tell you the part number and serial of the lens to see if the E4 and E8 are different?

   
Quote
         restreeLens.setResourceValue( "version", Request.Form( "lensversion" ) );
                restreeLens.setResourceValue( "SN", Request.Form( "lensserial" ) );
                restreeLens.setResourceValue( "PN", Request.Form( "lenspart" ) );
                restreeLens.setResourceValue( "focLen", Request.Form( "lensfoclen" ) );
                restreeLens.setResourceValue( "fNumber", Request.Form( "lensfnumber" ) );
                restreeLens.setResourceValue( "clearanceDistance", Request.Form( "lenscleardist" ) );
                restreeLens.setResourceValue( "rotMirr", Request.Form( "lensrotmirr" ) );
                restreeLens.setResourceValue( "opticalMinMeasRadius", Request.Form( "lensminmeasrad" ) );
I would guess this is as the software is beeing used for several Flir models, even the ones with exchangable lenses.
I looks like the lenses of E4 / E8 are identical. At least the size is identical but the material might differ. Need to do the same shot at the same time with both cameras and then a comparison of the two pictures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 08:36:31 am
Need to do the same shot at the same time with both cameras and then a comparison of the two pictures.
And then swap out the lenses and do another comparison. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 08:40:57 am
Need to do the same shot at the same time with both cameras and then a comparison of the two pictures.
And then swap out the lenses and do another comparison. ;)
If there are differences seen - yes, then a lens swap should be made.... no need to change them back >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 08:45:32 am
Thank you for the trick!
But, how do you manage to dare opening quite costly optics stuff without being feared of failing?
I am sure Mike, as most of us, did open new devices every since he can remember. Probably has something to do with genes. Thats why we are here on EEVblog and not here: http://www.pinterest.com/julia/mens-fashion/ (http://www.pinterest.com/julia/mens-fashion/)  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 08:46:27 am
If there are no differences seen, then yes a swap should be made. :P It just depends on how systematic you want to test. But hey, you're the lucky bastard with both an E4 and an E8, so you get to decide the test method.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 08:49:57 am
I am sure Mike, as most of us, did open new devices every since he can remember. Probably has something to do with genes. Thats why we are here on EEVblog and not here: http://www.pinterest.com/julia/mens-fashion/ (http://www.pinterest.com/julia/mens-fashion/)  :)
That website sucks. It doesn't include a "doesn't require ironing" score, so how on earth are you supposed to make an informed decision?  :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 08:56:21 am
Some Ex0 model would be nice to check what's beeing used as WLAN / BT ;)
I wouldn't be surpised if the double-digit series cameras would be built around the same core design - display and sensor specs look identical to me. :-/O
(in my imagination it's even a similar/same/"differently bonded" core as used in the Quark products - but note 17µ(640x) vs. 25µ(320x) difference in tech-spec)

It's horribly expensive to produce a chip just for one small batch of products - the more sold units can use the same components, the better... just look at the date of the sensor-die... clearly a modern design just fabricated for the E-series ... I'm dead sure that applies to the default lens as well!

Where the E8 model really differs: you get an additional battery and a nice charger for the couple extra grands.... ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 09:15:53 am
Some Ex0 model would be nice to check what's beeing used as WLAN / BT ;)
I wouldn't be surpised if the double-digit series cameras would be built around the same core design - display and sensor specs look identical to me. :-/O

Wouldn't surprise me either. With a bit of luck they use it as bluetooth uart with bspserial. If so, then even if you couldn't get the exact same module you would probably still be able to rig up something decent. That said, it would be really nice if someone could check what bluetooth module is being used in the higher end models.

Quote
Where the E8 model really differs: you get an additional battery and a nice charger for the couple extra grands.... ;)
Does it include one of those oxygen free usb cables?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 10:07:10 am
If there are no differences seen, then yes a swap should be made. :P It just depends on how systematic you want to test. But hey, you're the lucky bastard with both an E4 and an E8, so you get to decide the test method.  ;D
No, I do not have an E8. I thought, at a company I know, they would have an E8 but I learned on Monday it is only an E6. I tried to lend it for a day, but they did not want to give it away  :-[
Maybe my contact just had a bad day. I will try this again in a week or so.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 10:09:04 am
Just some notes regarding "Exportable framerates" (taken from simlar specsheet):
7.5 Hz (NTSC 30/60Hz) = factor 60Hz div 8
8.3 Hz (PAL 25/50Hz) = factor 50Hz div 6

EDIT: Measured update rate@display: 9 Hz

... and my E4 has just arrived!
Code: [Select]
.version.swcombination.fullver text "os16.0.10_appkit1.0.13_prodkit1.0.0.7"
.version.swcombination.ver text "1.18.7"

@64bit drivers: they auto-add windows-firewall-rules to allow inbound connections to flir processes

Update: mod successful
@Comparison.png: images blown out of scale by my software :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: solarbot on November 06, 2013, 11:04:24 am
TOTALLY AWESOME - thanks Mike.

Worked on my E4.10 with Firmware 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 06, 2013, 12:08:41 pm
Just ordered a brand new E4:
total amount (taxes+s/h included) = 978 Euros.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 12:16:17 pm
Regarding differences between the E4 and E8. They may use the same microbolometer and lens, but Mike has highlighted the presently unexplained doubling of thermal differential resolution in the E8. I recall that during Mike's OS investigations he saw two microbolometer modules listed. It is possible that the higher specification units do have a different, higher spec, Micro-bolometer fitted.

I must say that the 0.06 degrees Celcius E8 specification is impressive for a relatively cheap unit with an uncooled Micro-bolometer detector, as opposed to a cryo cooled semiconductor type. My best (megabux) FLIR uncooled industrial camera is spec'd at 0.08 Degrees C  thermal differential resolution. I may be wrong here, but IMHO lens size sets the sensitivity of the camera system, but would not influence the differential Temp detection capability of the detector.

Either FLIR hobble the E4 and E5 units to lower temperature resolution or a different detector is used in the E6 and E8 units.

At the end of the day, 0.15 Degrees Celcius temperature resolution is very respectable in a sub $1000 unit, and is the same as my Circa 1997-2000 $40k FLIR PM570. The PM570 is not considered insensitive to temperature differential in industry and has served well over the years. More modern cameras from FLIR acieve far greater thermal resolution (~30mK) but at significant retail cost.

For info:

FLIR PM570 - 1st Generation uncooled micro-bolometer - Differential temerature resolution = 0.15 Degrees.
FLIR PM695 - 3rd Generation uncooled micro-bolometer - Differential temperature resolution= 0.08 Degrees.
FLIR P65- 3rd Generation uncooled micro-bolometer - Differential temperature resolution= 0.08 Degrees.
FLIR E40-  ? Generation uncooled micro-bolometer - Differential temperature resolution= 0.07 Degrees.
FLIR E60- ? Generation uncooled micro-bolometer - Differential temperature resolution= 0.05 Degrees.

The lenses of the E40 ans E60 are far smaller than the large aperture lenses fitted on the PM and P series cameras yet they produce better thermal resolution figures. I think anyone looking for better thermal resolution in the E4 should remove the lens from their equation, unless they also desire greater overall system thermal sensitivity, for greater range (distance) operation.




 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 12:30:07 pm
Regarding differences between the E4 and E8. They may use the same microbolometer and lens, but Mike has highlighted the presently unexplained doubling of thermal differential resolution in the E8.

IMHO it's probably much simpler: marketing guy + add noise function for lower end models
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on November 06, 2013, 12:53:16 pm
Just ordered a brand new E4:
total amount (taxes+s/h included) = 978 Euros.

Hello, did you buy it in Italy?

Fabio.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 01:09:40 pm
I must say that the 0.06 degrees Celcius E8 specification is impressive for a relatively cheap unit with an uncooled Micro-bolometer detector, as opposed to a cryo cooled semiconductor type. My best (megabux) FLIR uncooled industrial camera is spec'd at 0.08 Degrees C  thermal differential resolution. I may be wrong here, but IMHO lens size sets the sensitivity of the camera system, but would not influence the differential Temp detection capability of the detector.

I am a total thermal imaging n00b, but the bit of reading I did gave me the impression that ... well, what you said! XD Very nice temperature resolution for this type of sensor. That was another reason I could tell myself I really had to buy this nice bit of gear. ;)

Do you know if for uncooled microbolometers there are any improvements to be had by making sure the sensor has very uniform temperature. Or maybe by cooling the sensor below ambient.

Another way of putting this: do you have any links to reading material so I can RTFM on this type of sensor?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 06, 2013, 01:16:43 pm
Yes and no.
I bought it from a VERY respectable vendor: the Italian branch of Omega (http://it.omega.com/) (but the shipping will be made from UK).
Strangely you can not find the E4 directly, but using the code (found on the German Omega site) OSXL-E4 you can make the order.
The price paid was (shipping from the UK, so VAT was 20%):
800.00 Euros - Flir E4
15.00 Euros - S/H
163.00 Euros - VAT (20%)
------------
978.00 Euros - total amount

The transaction went OK and I have already received the order confirmation*.
Shipping should be done on 2013-11-13 (1 week as defined in the order page)

To my knowledge, here in Italy the default E4 price is 995 Euros (VAT excluded)

*) hoping to not receive a call stating the order is void...  ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 01:34:54 pm

OT: ... meanwhile Dave is getting robbed by FedEx for the FLIR review he did ... https://twitter.com/eevblog/status/397976002711658496  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on November 06, 2013, 01:35:28 pm
Wow..... thanks Eliocor!! I just bought one for 665 GBP plus 9 GBP shipping. And I'm in England, no idea where it's shipping from!

Description           Quantity   Item Value   Item Tax   Item Total   Line Total
OSXL-E4 - FLIR E4   1           665.00           0.00           665.00           665.00
Carriage Charge                                                                   9.00
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 06, 2013, 01:38:58 pm
Whaaaat??
Did you order from outside the EU? I suspect there may still be VAT to add to that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on November 06, 2013, 01:40:41 pm
Whaaaat??
Did you order from outside the EU? I suspect there may still be VAT to add to that.

I quoted my VAT registration number during the order process, no VAT to pay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 01:41:50 pm
Mr fibble,

I can assit on your question.

Micro-bolometers are often temperature stabilised using an integrated peltier module. Some newer micro=bolometers have dispensed with the Peltier based temperature stabilisation. I am not sure whether the E series FPA has a Peltier module but I suspect that it has.

There is no advantage in adding additional cooling to the sensor as you will confuse the temperature stabilisation loop. The built in peltier module would try to counteract your external cooling and would draw heaps of current ! Unlike some semiconductor based detectors, there is no need to super cool the micro-bolometer. IIRC from a conversation many years ago with FLIR, teh FPA is stabilised at +30 Degrees Celcius. This may be why the specs often state the thermal resolution at +30 Degrees C.

Take a look at this thread that I produced:

https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927 (https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 06, 2013, 02:20:39 pm
Does anyone have the time and equipment to actually measure the sensitivity of the E4 (converted to an E8)?

Here's how FLIR does it: http://flir.custhelp.com/app/answers/detail/a_id/128 (http://flir.custhelp.com/app/answers/detail/a_id/128)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 06, 2013, 02:35:35 pm
Whaaaat??
Did you order from outside the EU? I suspect there may still be VAT to add to that.

I quoted my VAT registration number during the order process, no VAT to pay.

Ahhhh, still a good price :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 02:45:02 pm
Fairly sure the sensor has no cooling - if it is, it's on the die.
The unit does run quite warm after a while, so not inconcievable it's warmed a little, but as the temp sensor is on the frame, this may cause thermal gradients.
However the rubber mountings, as well as providing shock protection could also provide thermal isolation from the case.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 03:08:17 pm
Mike,

Please see the link I provided, above. repeated here:

https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927 (https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927)

The conventional MO for temperature stabilisation of the detector is to bond the die directly to the peltier module so they become one unit with excellent thermal transfer efficiency. The die temperature is monitored by two (2) thermocouples positioned on opposite sides of the die. The chassis temperature monitoing that you found is normally the 'lens temperature' that the system uses to establish the ambient temperature. This is used in the image processing algorithms along with emissivity settings.

There are definitely micro-bolometers that do not have the peltier temperature stabilisation,l but if they are more expensive to impliment, I wouldl expect the peltier type to be fitted to a 'budget' camera. Saying that, my link includes a link to an Indigo article circa 2006 detailing a non stabilised micro-bolometer.  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 03:18:34 pm
I suppose a quick test would be to look for a change in current draw with temperature. The only place a cooler could possibly be is on the lower die.
I suppose I could look at the die with my other TIC (or even an humble IR thermometer).
Some heating or coolling may explain the ~ in front of the displayed temp figure at startup.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 06, 2013, 03:25:05 pm
Flir Ex is always described to use an uncooled microbolometer as detector.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 03:30:29 pm
Flir Ex is always described to use an uncooled microbolometer as detector.
Quite a common term but may be used more to distinguish from stuff that needs more serious cryo-cooling.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 06, 2013, 04:06:43 pm
Micro-bolometers are often temperature stabilised using an integrated peltier module. Some newer micro=bolometers have dispensed with the Peltier based temperature stabilisation. I am not sure whether the E series FPA has a Peltier module but I suspect that it has.
 ...

Take a look at this thread that I produced:

https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927 (https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg322927/#msg322927)

Thanks for the info!

As pointed out by others, the Ex series is listed as an uncooled microbolometer in the specs. So based on that I was more or less under the impression that there would be no Peltier. Unless it is one of those jargon thingies, where in the domain of TICs "uncooled" really means "cooled, but not insanely cooled". As in, yeah usually we use liquid helium, but today we'll make do with a simple peltier so puny mortals can actually afford this device.

Another reason I was guessing the E4 doesn't have a peltier ... in Mike's video I didn't see any obvious wires for the supply. Unless of course it's a really wimpy peltier integrated right under the die and only using 0.00001 mA or so. ;)

But if it does have active temperature control, it would be a bad idea to mess with the control loop, agreed. It was more like, suppose there is no active temperature control, is there anything that can be done to improve temperature uniformity across the die and by that hopefully being able to get some more resolution. That is of course assuming that the ADC has enough resolution to make use of this. If not ==> forgeddaboutit.

Anyways, probably not practical, but just thinking aloud.

As for the 60 fps matter, it's a bit of a toss-up. It depends entirely how they re-used their IP for the fpga. There's a chance that you can simply set the downsampling, and there's a chance the 9 fps downsampling rate is fixed in this particular .bit files for the fpga. I did take a look at the various .bit files for the Ex and Exx series, and well, see previous. The low end of the Exx series actually has a slightly smaller bit file. Which I translate to: has similar or slightly lower complexity logic. As in, they do the 60 fps in a slightly smaller (or exactly the same) device, so no reason for it not to include 60 fps there. And when you think about it, to average/decimate frames from 60 to 9 fps you need more logic, not less.

So IFF they used the same IP for the Ex and Exx series, there's a pretty good chance that the bitstream for E4 is capable of doing 60 Hz. It really depends on the whims of your local friendly Flir developers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Misco Jones on November 06, 2013, 04:19:40 pm
I bought a E4 last week and I seen the hack to convert it to E8 but I have fear that it may stop working.

Is there any way to make a backup before or returning the firmware to the original version once applied the patch.

Thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 04:28:32 pm
I bought a E4 last week and I seen the hack to convert it to E8 but I have fear that it may stop working.

Is there any way to make a backup before or returning the firmware to the original version once applied the patch.

Thanks in advance.
No reports of any issues from many successful hacks so far.
You can backup files if you want using USB RNDIS and FTP using Filezilla
The hack does not alter any file on the device, it just adds a single file which overrides the default configuration- removing this file reverts it to normal E4 mode.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 04:53:22 pm
To be clear on the terms used.... A cryo cooled TIC cools the detector to an insane approx. -200 Degrees Celcius. It does this with a Stirling engine cooler charged with Helium. Many have asked the question whether such a mechanical cooler could be replaced with a Peltier stack. Sadly the answer is no. The losses and physics of the Peltier stack preclude such a temperature differential at normal ambient levels on earth. I used to use Liquid Nitrogen in cameras so the Stirling cooler is a great step forwards compared to that. The maintenance cost and noise generated by the cooler are the two big drawbacks to cryo cooling, not to mention the high power consumption.

The 'uncooled' detector is called such because it does not need to be cooled to cryogenic temperature levels in order to produce useful data. The Cryo cooled detectors produce nothing useful at ambient temperatures due to their internal heating and noise. The cryogenic temperatures reduce such to levels where by the output is actually lower noise than a micro-bolometer. For scientific work Cryo-cooling is often the way to go.

The large down side to micro-bolometers is that they are basically an array of thermistors. As many will know, thermistors are used as temperature sensors as they change value with temperature. The problem is, the temperature inside a TIC changes and the die of the micro-bolometer also includes electronics that produce heat. This all adds up to a micro-bolometer that has pixel outputs straying all over the place without an image presented to them. To 'tame' the micro-bolometer, it is actually HEATED to 30 degrees Celcius and held at that temperature by a Peltier module. If the die gets too hot, it is cooled, if it gets too cool, it is heated. It is not, however considered to be a 'cooled' detector, just temperature stabilised.

Not all semiconductor based thermal imaging arrays need to be Cryo cooled. The BST detector array is such a device. These predate the Micro-bolometer and some may say they are superior. They fell behind in development when the US Govt pulled the funding. Micro-bolometers were the 'new tech' and the US Govt put the funding into that, and developed it into what you are using today. It must be remembered that this technology originally had two major uses....an aid to fire fighters rescuing people in dense smoke, and an aid to killing your enemies on the battlefield ! It is an odd world we live in but warfare and Military matters often lead to investment in technology and its rapid advancement which hopefully benefits many.

I hope this helps to explain the situation a little clearer.

The current needed to control the die temperature is not as much as you might think. The die's thermal mass is low. The Peltier module wires on my Microbolometer are actually quite thin. I will add a photo. They are the white ptfe insulated wires in the image. The PM695 draws around 1A when operating and she is an old girl in comparison to the E series, full of power hungry discrete IC's and motors ! The Peltier module normally only has to compensate for die self heating and small changes in ambient and at 30 Degrees is only around 10 degrees or so above comfort level for humans. I you take it to the Arctic or somewhere else cold, it is a different matter  ;D it will have to work harder so battery life may be reduced.


Please look at the attached Patent document that shows the construction of micro-bolometers.

Also, please take a look at the document that is found here: (Chapter 4)

http://archives.njit.edu/vol01/etd/1990s/1997/njit-etd1997-027/njit-etd1997-027.pdf (http://archives.njit.edu/vol01/etd/1990s/1997/njit-etd1997-027/njit-etd1997-027.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 04:58:02 pm
Mine arrived OK and has the 1.18.8 firmware. The camera is surprisingly useful in 80x60 mode already especially with the MSX enabled.

What is the latest procedure for the mod? Do I still pm Mike for this?

I've been using the Irisys camera today at work so it will be interesting to see how the modded E4 compares. At the moment the E4 looks very noisy and snowy in 80x60 but I'm hoping it will be a different story in 320x240...

Thanks :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 05:58:42 pm
To 'tame' the micro-bolometer, it is actually HEATED to 30 degrees Celcius and held at that temperature by a Peltier module. If the die gets too hot, it is cooled, if it gets too cool, it is heated. It is not, however considered to be a 'cooled' detector, just temperature stabilised.

In pratice at everyday temps you could probably save cost and just use a heater, maybe to slightly over 30 deg.

This may explain whey I could see a 'hot' when the E4 looks at the lens of my FireFLIR
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 05:59:47 pm
Mine arrived OK and has the 1.18.8 firmware. The camera is surprisingly useful in 80x60 mode already especially with the MSX enabled.

What is the latest procedure for the mod? Do I still pm Mike for this?

I put a link to the most recent hack in the first post of this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 06, 2013, 06:06:50 pm
Mike, are you (or anyone else) still working on a 30/60Hz hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Misco Jones on November 06, 2013, 06:11:37 pm
Mike, thank you !!!!!

I don't think to return to E4 anymore !!

There is a "little difference" before the hack.

Regards.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 06:13:12 pm
Mike, are you (or anyone else) still working on a 30/60Hz hack?
Nope, but at some point I will be hooking up the raw sensor feed to a monitor - probably not for a while though as too busy with work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 06, 2013, 06:28:36 pm
Mike, are you (or anyone else) still working on a 30/60Hz hack?

I posted a hack to try out a couple pages ago, but I don't think anyone gave it a shot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 06, 2013, 07:08:00 pm
Add one more sold to the list.
Purchased one just now and should have it by Friday.
Thanks to Mike and everyone for the outstanding work done here.
Look forward to hacking my unit and enjoying great resolution at a great price.

Also look forward to seeing if anyone can figure out how to get 30/60hz. 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 06, 2013, 07:10:20 pm
Note that the last version of FLIR Tools is  FLIR Tools+ 4.0 (4.0.13284.1003)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 07:19:25 pm
Also look forward to seeing if anyone can figure out how to get 30/60hz. 8)
Well, is this really important? For me it is quick enough, but maybe there are application-areas where this is needed.

At least for me, it would be much more important to get bluetooth or WIFI. As the Flir E4 boots up including the bluetooth code (you can see this in the debug-windows which pops up if you press middle joystick button during cold start), it might be only a matter of soldering a connector to the unpopulated areas on the PCB (and then getting hand on such a module for connecting it of course). I wonder if the E40 has such extra modules installed.

Anybody with an Exx want to join in with a teardown? ...... just a second: didn't Dave had an E60?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 08:35:36 pm
I just did the mod on mine. It gave a scary error message on bootup but seems to be in the higher resolution mode.

With the 320x240 enabled it's a lot better than it was :)

However, it doesn't perform as good as the Irisys 4010 for closeup stuff. eg looking at SMD stuff on PCBs because the image looks very fuzzy and soft.

Is there an easy way to adjust the focus for closeup work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 08:38:05 pm
Is there an easy way to adjust the focus for closeup work?
Just screw out the lens - check the video Mike did - it is not difficult, but if you do not want to remove the front cover you need to build yourself a tool to be able to turn the lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 06, 2013, 09:06:46 pm
I just did the mod on mine. It gave a scary error message on bootup but seems to be in the higher resolution mode.

What was the message?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 06, 2013, 09:22:28 pm
Quote
What was the message?

It said, "All your base are belong to us!"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 09:31:20 pm
Unfortunately my finger was hovering on the buttons and the message was only brief.

It came up as a messagebox saying there was a fatal error. But it then went away.

It could be that I followed the instructions too literally because I didn't turn off the camera before removing the battery. Was this wrong?

Could this have caused the error?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 06, 2013, 09:45:41 pm
Mike, I think it might be a good idea to include the steps to undo the hack in the instructions just in case someone needs to send in their camera for repairs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 09:49:48 pm
I've got a question regarding Hack#3 via FW-Update in conjunction with RNDIS:

It's still a bit unclear to me whether the FW-Update will work after adding a file to switch USB into RNDIS mode... is there a way back without need for the serial console?

I'd love to poke around the camera's inner workings (telnet etc) without bricking it :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 09:58:41 pm
I guess I should have filmed it during the reboot.

It seems to be working OK but I was quite alarmed when it gave that message with 'fatal error' included.
This message was on the camera screen and not the PC.

Maybe the next person to do this should film the reboot sequence in case it happens to someone else too.

No Flir tools came with the camera and I downloaded these from Flir and installed them. Was this correct?
I also zipped the flashfs folder tree with the camera.cmd file included outside the folder. Was this correct?

I put the CRC in exactly as per the screen. i.e. the letters displayed in the check were lower case and I entered them as per the instructions with CRC in uppercase but I used lower case for the actual letters inside the CRC because this is how it appeared on the PC screen. Was this correct?

I think the mod instructions need a fair bit of work if this mod goes mainstream because some people will get confused (more than me?).  A video 'howto' would be the best method to show how to do it or failing this a decent word doc with screenshots of every stage :)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 06, 2013, 10:20:51 pm
Excellent hacking job by all concerned and especially Mike.

Funny thing: I've been keeping an eye out for an inexpensive (but good) TIC for some time... obviously without luck :)

Then I saw the E4 on some sites and did some research and then found Mike's vid & tear down vid. Was pretty convinced that the E4 would be 'ok' for my needs. I design LED driver boards and felt it would be a great tool for verifying component temps and thermal paths versus the spot IR fluke I have or thermocouple measurements.

Then just two days google search found this thread while still trying to convince myself to purchase the E4. This thread of course was an instant sell and I'll be receiving my new E4 tomorrow (staying home to make sure I'm there to sign for it).

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 06, 2013, 10:36:38 pm
-snip-
I think the mod instructions need a fair bit of work if this mod goes mainstream because some people will get confused (more than me?).  A video 'howto' would be the best method to show how to do it or failing this a decent word doc with screenshots of every stage :)

Sounds all fine - esp. if you have the E8 featues now - just don't worry.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 10:58:49 pm
-snip-
I think the mod instructions need a fair bit of work if this mod goes mainstream because some people will get confused (more than me?).  A video 'howto' would be the best method to show how to do it or failing this a decent word doc with screenshots of every stage :)

Sounds all fine - esp. if you have the E8 featues now - just don't worry.

Yes it's a decent TC now. I guess if anyone else sees the same fatal error message they don't need to panic too much :)

I'm getting better results from it now for PCB stuff because I've used the 'lock' feature on the temperature scale. i.e. I hold a soldering iron set to 100degC  just out of shot and use it to set the upper range before locking the range. This makes a PCB look less bloomy if there is a small hotspot.

In terms of using it casually to wander around and look at 'stuff' it is miles ahead of the older 160x120 Irisys 4010 camera because the Irisys needs constant manual focussing and this can be a real chore.

The screen update rate seems quicker on the E4 too. Also it is very quiet. The 4010 makes a really loud noise when gating. it really is as if the camera is hollow inside and a marble drops from the top of the camera to the bottom of the handle. Clonk! Clonk! and you can feel the clonk as if it is a falling marble too. The Flir E4 is very quiet by comparison. It looks and feels good too.

The 4010 camera is very big boxy by comparison and not as well balanced either. It looks a bit odd as well.

I just need to sort the closeup stuff on the E4. I think I can make a tool on my T-Tech 7000S CNC machine for this.
It is normally used for PCB milling but it can also make tools from flat materials.

http://t-techtools.com/store/ (http://t-techtools.com/store/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 11:06:09 pm
Is there an easy way to adjust the focus for closeup work?
Just screw out the lens - check the video Mike did - it is not difficult, but if you do not want to remove the front cover you need to build yourself a tool to be able to turn the lens.
I will do a vid on this at some point. One option is to screw out the lens, but needs a tool to do it as it's hard to physically get hold of. The lens is lightly held by the rubber surround, so it can be turned but will stay where it's put.
Another option is to use a cheap CO2 laser cutter lens in front - a 20mm dia 50mm FL lens works pretty well - again I will show this in a vid - I mounted the lens in a plastic disc, retained with a wire clip
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 11:09:18 pm
I've got a question regarding Hack#3 via FW-Update in conjunction with RNDIS:

It's still a bit unclear to me whether the FW-Update will work after adding a file to switch USB into RNDIS mode... is there a way back without need for the serial console?

I'd love to poke around the camera's inner workings (telnet etc) without bricking it :)
Yes. You can add USBMODE RNDIS to the camera.cmd file, and it will enable it but only til a restart.
For permanently enabling RNDIS you can add the rndis.rsc config file to the appcore.d\factory.d folder, but probably need to prefix the filename with a z (=zrndis.rsc) to make it override the default setting.
You can remove the hack and/or permanent RNDIS with a camera.cmd using the delfile command - this is shown earlier in the thread - I'll add some .fif  files to do these when I get a chance.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 11:14:48 pm
I guess I should have filmed it during the reboot.
If you press any key during startup you do see a small scroling window showing bootup messages as wmall white text on a black background. I've never seen any fatal messages though.
Quote
No Flir tools came with the camera and I downloaded these from Flir and installed them. Was this correct?
I also zipped the flashfs folder tree with the camera.cmd file included outside the folder. Was this correct?
yes.
BTW may be worth keeping an eye on the Flir tools version in case Flir slip a "fix" in . Flirinstallnet.exe I have is 29/08/2013, length 237,888.
Quote
I put the CRC in exactly as per the screen. i.e. the letters displayed in the check were lower case and I entered them as per the instructions with CRC in uppercase but I used lower case for the actual letters inside the CRC because this is how it appeared on the PC screen. Was this correct?
Yes.
Quote
I think the mod instructions need a fair bit of work if this mod goes mainstream because some people will get confused (more than me?).  A video 'howto' would be the best method to show how to do it or failing this a decent word doc with screenshots of every stage :)
Go for it. I'm too busy to write baby steps instructions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 11:19:38 pm
One other quick question:
Was I correct to unplug the battery directly rather than switch off the camera first? It did seem a bit odd to pull the battery but I did what the instructions said in case turning it off caused it to cancel the process.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 11:25:22 pm
One other quick question:
Was I correct to unplug the battery directly rather than switch off the camera first? It did seem a bit odd to pull the battery but I did what the instructions said in case turning it off caused it to cancel the process.
I do this all the time (to be the first who find out how to get to the secret menu - without any success yet). No problem at all until now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 06, 2013, 11:30:06 pm
Another option is to use a cheap CO2 laser cutter lens in front - a 20mm dia 50mm FL lens works pretty well - again I will show this in a vid - I mounted the lens in a plastic disc, retained with a wire clip
Cool idea!!!! You mean something like Ebay item #230838327998 (50mm FL then) would be what we need?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: csshih on November 06, 2013, 11:34:47 pm

Excellent hacking job by all concerned and especially Mike.

Funny thing: I've been keeping an eye out for an inexpensive (but good) TIC for some time... obviously without luck :)

Then I saw the E4 on some sites and did some research and then found Mike's vid & tear down vid. Was pretty convinced that the E4 would be 'ok' for my needs. I design LED driver boards and felt it would be a great tool for verifying component temps and thermal paths versus the spot IR fluke I have or thermocouple measurements.

Then just two days google search found this thread while still trying to convince myself to purchase the E4. This thread of course was an instant sell and I'll be receiving my new E4 tomorrow (staying home to make sure I'm there to sign for it).

cheers,
george.
Thought your name was familiar. I signed up (about time!) just to say "+1"! I'll be using mine for thermal analysis on LED drivers too :)

Excellent job, Mike!

Craig
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 11:35:26 pm
Mike,

Nice work with mounting the ZnSe CO2 laser lens  :)

You state you used a 20mm x 50mm FL lens....wow that is close-up to the action ! The ones I bought were 100mm FL as I wanted a bit of distance between me and the target in case close up access was not possible, like when looking inside an equipment chassis. I will be very interested to see the images that your lenses produce as they are far better matched to the lens of the E4 than any of my TIC's. My primary lenses are all 30mm or greater diameter.

I think I will buy some 50mm FL lenses as well. I bought a GaAs lens to play with as well. It came from the same supplier and cost a little more. On the down side it's bandwidth is lower and its transmission is a lot lower than the ZnSe lenses. On the plus side it is a far harder material so less easily scratched. These lenses are pretty good value at $30 though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2013, 11:42:48 pm
PeterK13,

I bought my CO2 laser lenses from here:

http://www.ebay.co.uk/itm/ZnSe-GaAs-Focal-Lens-for-10-6um-Co2-Laser-Engraver-Cutting-Machine-12-25mm-1-4-/321078811086?pt=LH_DefaultDomain_0&var=&hash=item4ac1c9d9ce (http://www.ebay.co.uk/itm/ZnSe-GaAs-Focal-Lens-for-10-6um-Co2-Laser-Engraver-Cutting-Machine-12-25mm-1-4-/321078811086?pt=LH_DefaultDomain_0&var=&hash=item4ac1c9d9ce)

The bi-convex lens acts much like a jewellers Loupe for the camera. The FL sets the distance that the target should be placed in front of the lens. The image is then in focus at that distance and passed to the cameras primary lens without the need for additional optics. very simple and effective. My Inframetrics close-up lens is a positive meniscus type so that must have advantages but the bi-convex works OK as well. 

I bought 19mm ZnSe lenses that fit into old camera filter holders. These lenses work well and I hope Mike will get good pictures with his. I am impressed with Mikes clever filter holder to fit his E4.  :-+

As I have stated in my last message, I bought 19mm x 100mm FL lenses as that gave me a nice 4" stand-off from the PCB and decent field of view.

My Inframetrics professional close-up lens has a 6" FL which is favoured for general close-up work. I couldn't find a cheap ZnSe lens with that FL as they are designed for use in Laser cutters, and that is usually done at relatively close range.

As a side note. The thermal camera manufacturers normally use Germanium close up lenses and charge many thousands of dollars for them. Owning both I can confirm that , for hobby use, the ZnSe lenses are more than up to the task.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 11:51:02 pm
From some very quick tests I found 50mm was a good compromise
The figures I got were :
Lens FL / focus distance from front of rubber housing  / width of field of view
100mm  / 80mm / 60mm
50mm / 40mm / 35mm
25mm / 25mm / 20mm

As FOV is nominally about 60 deg, the focus distance and field of view is roughly the same as the lens focal length

An improvement on the plastic disc would be a disc of 1.6mm PCB, slightly oversized with some long slots machined to form a couple of springy arms to hold it in place, plus a couple of screws/studs to allow fingers to grip to squeeze to release tension.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 06, 2013, 11:53:10 pm
Also look forward to seeing if anyone can figure out how to get 30/60hz. 8)
Well, is this really important? For me it is quick enough, but maybe there are application-areas where this is needed.

At least for me, it would be much more important to get bluetooth or WIFI. As the Flir E4 boots up including the bluetooth code (you can see this in the debug-windows which pops up if you press middle joystick button during cold start), it might be only a matter of soldering a connector to the unpopulated areas on the PCB (and then getting hand on such a module for connecting it of course). I wonder if the E40 has such extra modules installed.

Anybody with an Exx want to join in with a teardown? ...... just a second: didn't Dave had an E60?

9hz is not bad but I have spent some time behind 30 and 60hz units and it's more functional for panning.  For stationary objects the 9hz is just fine.  This will be more for a hobby/fun unit and higher frame rate would be awesome.

I am wondering where wifi or bluetooth would be helpful.  Maybe file transfers for pictures through the unit?

Has anyone tried using this for things at a distance?

Mine gets here Friday!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2013, 11:57:17 pm
I've updated the Hack details post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) with a new zip that includes scripts to unhack, and also install/remove permamnt RNDIS and enable temporary RNDIS.

BTW the FLIR install tool works fine over RNDIS - it auto-detects. You probably need the RNDIS driver there though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 06, 2013, 11:59:29 pm
I'd be very interested to see the results using the lenses as I'd much rather use a lens than fiddle with the mechanics of the existing lens.

I mainly want this camera for PCB work as I often have to make sure that components don't get too hot in circuit.

I do RF design for a living so a typical use for me will be looking at the performance of high power PIN diode switch designs when driven with high power into a poor load or for looking at the RF power handling of RF filter designs or even just looking at individual components. eg to see how hot a DC blocking cap gets when passing high power at maybe 4GHz. I need to be able to see SMD components really clearly.

The old Irisys 4010 was just about adequate for this but I'm really hoping the E4 will be better.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 12:03:49 am
Yes. You can add USBMODE RNDIS to the camera.cmd file, and it will enable it but only til a restart.
For permanently enabling RNDIS you can add the rndis.rsc config file to the appcore.d\factory.d folder, but probably need to prefix the filename with a z (=zrndis.rsc) to make it override the default setting.
You can remove the hack and/or permanent RNDIS with a camera.cmd using the delfile command - this is shown earlier in the thread - I'll add some .fif  files to do these when I get a chance.   

ok, managed to create a FIF file wich temporarily puts the cam into RNDIS mode (not USBMODE but usbfn)
Beware: the driver installation resets all standing TCP connections due to the installation of the new interface.

Had to add at least a file to make the .fif beeing accepted by the transfer tool.

The attachment needs to be renamed in order to be useable (forum extention filter)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 12:05:37 am
I've updated the Hack details post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) with a new zip that includes scripts to unhack, and also install/remove permamnt RNDIS and enable temporary RNDIS.

thanks - overlapping work/posts :)

Web-Interface link: http://flir:3vlig@192.168.0.2/service/index.asp (http://flir:3vlig@192.168.0.2/service/index.asp)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 07, 2013, 12:07:34 am
With regard to auxiliary close up lens mounting. I have been considering using a suitable diameter clip on lens cap. The type with two sprung buttons. Some have a nice large central area that can be cut to take the lens mount. My camera is somewhat different to the E4 though and I am not sure how well a lens cap would clip into the E4 lens orifice. 

Mike, My PM570's and PM695's have 24 Degree FOV primary lenses. That explains why I have settled on the 100mm FL auxiliary lens compared to your 50mm for the E4's wider FOV of 45 degrees.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 12:10:57 am
I suppose a quick test would be to look for a change in current draw with temperature. The only place a cooler could possibly be is on the lower die.
I suppose I could look at the die with my other TIC (or even an humble IR thermometer).
Some heating or coolling may explain the ~ in front of the displayed temp figure at startup.

A very crude test with a cheap IR thermometer suggests the sensor is heated to somewhere between 30 to 35 deg.C, after which time the "~" disappears from the display

What I really need is another calibrated TIC to check... My FireFLir always autoranges so no use for measurements  (I wonder if there is a serial console in there...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 12:19:52 am
A very crude test with a cheap IR thermometer suggests the sensor is heated to somewhere between 30 to 35 deg.C, after which time the "~" disappears from the display
What I really need is another calibrated TIC to check... My FireFLir always autoranges so no use for measurements  (I wonder if there is a serial console in there...)

How about checking the inbuilt sensors?
http://192.168.0.2/service/TDRIFT/Sensors.asp (http://192.168.0.2/service/TDRIFT/Sensors.asp)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 07, 2013, 12:26:11 am
My very crude 'lash-up' for testing the usability of the ZnSe lenses for close-up work may be found here:

https://www.eevblog.com/forum/crowd-funded-projects/m-thermal-imager-real-or-fake/msg302859/#msg302859 (https://www.eevblog.com/forum/crowd-funded-projects/m-thermal-imager-real-or-fake/msg302859/#msg302859)

I believe the performance will likely be better on the E series as my PM695 Primary lens is almost 60mm diameter and it is looking through a19mm auxiliary lens ! Not really a good match  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 12:32:57 am
A very crude test with a cheap IR thermometer suggests the sensor is heated to somewhere between 30 to 35 deg.C, after which time the "~" disappears from the display
What I really need is another calibrated TIC to check... My FireFLir always autoranges so no use for measurements  (I wonder if there is a serial console in there...)

How about checking the inbuilt sensors?
http://192.168.0.2/service/TDRIFT/Sensors.asp (http://192.168.0.2/service/TDRIFT/Sensors.asp)
I've not really played much with service mode...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 12:36:17 am
I've not really played much with service mode...
It's even cooler - there's a button to enable service mode - by default it warns that the cam is not in service mode - but one can access all the live sensor data - it even auto-updates.

btw - I had a strange happening when going to noise cal ... the whole screen went noise-cluttered (IR only) - a cold boot removed that :) .. not sure what happened (I didn't start any cal process btw)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 01:11:44 am
I've not really played much with service mode...
It's even cooler - there's a button to enable service mode - by default it warns that the cam is not in service mode - but one can access all the live sensor data - it even auto-updates.

btw - I had a strange happening when going to noise cal ... the whole screen went noise-cluttered (IR only) - a cold boot removed that :) .. not sure what happened (I didn't start any cal process btw)

Had that happen when fooling around with the i7's internal serial ports -- had to unplug it from everything and reboot.
I've seen a screen full of very coarse noise a couple of times when the sensor board got partially unmplugged.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 01:22:24 am
INFO: \\192.168.0.2 (CIFS) works in IP-mode - access to images without FTP :)
Also: \\192.168.0.2\root$ and \\192.168.0.2\windows$

EDIT: MUST READ:
http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)
Chapter 1.3.3 (following pages are also - contains valueable info on commands etc.)
Note: the PDF is for another camera, but most information applies to the Ex series in IP mode as well!

Open Ports:
Code: [Select]
TCP TABLE
            Loc Addr   Loc Port
             0.0.0.0         21
             0.0.0.0         23
             0.0.0.0         80
             0.0.0.0        139
             0.0.0.0        443
             0.0.0.0      22136
             0.0.0.0      22176
             0.0.0.0      22177
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on November 07, 2013, 02:07:47 am
I keep feeling beady lawyers eyes staring at me every time I read this thread ... is there a way to save the whole thread?
... Just in case  :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 02:09:10 am
I keep feeling beady lawyers eyes staring at me every time I read this thread ... is there a way to save the whole thread?
... Just in case  :-)
Print button helps a lot, then you just need to fetch yourself the missing attachments + linked documents :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 02:19:43 am
collateral password finding: "www.flir.com" has been used in some former models via a hidden menu (strg-shift-a) - chance of it beeing reused? :)

EDIT:
Note on the sensor-naming ( ISC0901B0 ):
I'm pretty sure the first two numbers (09) are the sensor's generation year - deduced from some documents found online where that # went form 98 to 00 to 05 and 09 now... ;) the next pair of numbers beeing the resolution/model and then followed by special features.
Unfortunately "our" ROIC isn't listed here: http://www.flir.com/cvs/cores/view/?id=51948 (http://www.flir.com/cvs/cores/view/?id=51948)

EDIT2: root:3vlig is a working login (verified for ftp)

EDIT3: .system.webpasswd text "IRCAM" ... another possible password
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 07, 2013, 04:26:49 am
Proactively downloaded flir tools just now.
It's a 581MB file, version shows last updated October 15, 2013.
flirinstall.exe is still showing 8/29/2013 with 233kb size.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 06:48:13 am
Good news everyone:
Quick notification in advance:
The camera HAS a working manual temperature mode *verified*!  ;D ;D ;D

ALPHA AND SEVERELY CRASHING - the attached file is NOT perfect - it should be tried only by advanced users !!!
replace \FlashBFS\system\ui.d\toolbar-config_Z3.xml with the modded one (rename) over FTP and perform a cold cam-reboot - you'll have several additional features (didn't have time to test all the menus - for example "measurement" has some issues and will crash when selecting a cerain menu item)!

EDIT: BE WARNED: the attached config will cause crash of appcore on bootup once "stuck"

Updated attachment, adds palettes, manual mode and some trash - only for advanced users - install via FTP


If you'd like to experiment yourself then take a look at the strings of those files:
\FlashBFS\system\ui.d\languages\<file>
\FlashBFS\system\facet_ui_qml.dll

Maybe there's a way to restart facet without cold restart... I also did some documenting on the shell calls - but not ready for release yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 07, 2013, 07:13:58 am
Next Monday, I will test hacked E4 on calibrated black body. Only to know, that hack doesn´t affect calibration. (Due to calibration was made for E4)


There is no reason for decalibration. But for sure!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 07, 2013, 07:39:23 am
Good news everyone:
Quick notification in advance:
The camera HAS a working manual temperature mode *verified*!  ;D ;D ;D

ALPHA AND SEVERELY CRASHING - the attached file is NOT perfect - it should be tried only by advanced users !!!
replace \FlashBFS\system\ui.d\toolbar-config_Z3.xml with the modded one (rename) over FTP and perform a cold cam-reboot - you'll have several additional features (didn't have time to test all the menus - for example "measurement" has some issues and will crash when selecting a cerain menu item)!

BE WARNED: the attached config will cause crash of appcore on bootup once "stuck"

If you'd like to experiment yourself then take a look at the strings of those files:
\FlashBFS\system\ui.d\languages\<file>
\FlashBFS\system\facet_ui_qml.dll

Maybe there's a way to restart facet without cold restart... I also did some documenting on the shell calls - but not ready for release yet.

Could it be that it crashes because you have to activate the measurement first/instead?
Because some are disabled in the E8.cfg file.. ( I already mentioned it a few pages back (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321493/#msg321493) )
I noticed some of the config strings are disabled, and these are (I have sorted them, they are not in the same spot in the E8.cfg file):

.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.enabled bool false

.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false

.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false

.caps.config.image.sysimg.measureFuncs.mline.enabled bool false

.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 07:43:14 am
Could it be that it crashes because you have to activate the measurement first/instead?
Because some are disabled in the E8.cfg file: I already mentioned it a few pages back (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321493/#msg321493)
I noticed some of the config strings are disabled, and these are (I have sorted them, they are not in the same spot in the config file):

Nah, I did enable them btw...

Right now I'm struggling to get the appcore noncrashing again - seems to be persistance of last mode used that bites my ass...
... just hope they didn't store that in the sqllite DB :)
But disabling the options might also help... *I'll give it a try* ;)



this helped: rset .image.sysimgInstances.main.measureFuncs.diff.1.active false
(I had dumped the whole config in case I need a known good state to compare to) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 07, 2013, 08:06:48 am
[...]
Nah, I did enable them btw...

Right now I'm struggling to get the appcore noncrashing again - seems to be persistance of last mode used that bites my ass...
... just hope they didn't store that in the sqllite DB :)
But disabling the options might also help... *I'll give it a try* ;)



this helped: rset .image.sysimgInstances.main.measureFuncs.diff.1.active false
(I had dumped the whole config in case I need a known good state to compare to) :)

Cool! I am curious how much extra functions this beast has, and whether we are able to add them.
Would be awesome to be able to update a stock from E4 to an E8++ with more functions than the pricy stock E8 has.. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 08:14:14 am
Cool! I am curious how much extra functions this beast has, and whether we are able to add them.
Would be awesome to be able to update a stock from E4 to an E8++ with more functions than the pricy stock E8 has.. :P
basically it's a mix of the binaries and the ressource files - my first attempt was just using the strings from the menu config - but then I remembered and took a look at one of the more advanced camera firmwares... structure is similar...  :)

those two are present in our E4 binary, but definately causing the crash:
      <ToolBar name="measure_delta_s"/>
      <ToolBar name="measure_delta_t"/>

some other menus seem to depend on hardware buttons ... but some functions can be simply remapped I think.... work in progress :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 08:33:13 am
I bought 19mm ZnSe lenses that fit into old camera filter holders. These lenses work well and I hope Mike will get good pictures with his. I am impressed with Mikes clever filter holder to fit his E4.  :-+
Aurora: could you please make a photo of such a filter holder please (or post a link to one)? I tried to find such a thing but was not successful.
Thanks
Edit: I made the mistake to search for 19mm and lens, but obviously you need to search for 19mm and filter. I assume an item like Ebay 231080131443 would be the correct one? Or better something like Ebay 151124311796?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 09:19:58 am
I bought 19mm ZnSe lenses that fit into old camera filter holders. These lenses work well and I hope Mike will get good pictures with his. I am impressed with Mikes clever filter holder to fit his E4.  :-+
Aurora: could you please make a photo of such a filter holder please (or post a link to one)? I tried to find such a thing but was not successful.
Thanks
Edit: I made the mistake to search for 19mm and lens, but obviously you need to search for 19mm and filter. I assume an item like Ebay 231080131443 would be the correct one? Or better something like Ebay 151124311796?

Ebay search for co2 lens will find plenty of options around £20

Mostly ZnSe but also some GaAs - not sure which would be better but ZnSe generally cheaper
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 09:32:25 am
I bought 19mm ZnSe lenses that fit into old camera filter holders. These lenses work well and I hope Mike will get good pictures with his. I am impressed with Mikes clever filter holder to fit his E4.  :-+
Aurora: could you please make a photo of such a filter holder please (or post a link to one)? I tried to find such a thing but was not successful.
Thanks
Edit: I made the mistake to search for 19mm and lens, but obviously you need to search for 19mm and filter. I assume an item like Ebay 231080131443 would be the correct one? Or better something like Ebay 151124311796?

Ebay search for co2 lens will find plenty of options around £20

Mostly ZnSe but also some GaAs - not sure which would be better but ZnSe generally cheaper
Yes, it is easy to find those - but I am looking for this 19mm filter holder Aurora is mentioning which allows to integrate the sensible ZnSe lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 10:14:41 am

This is working now:

not working yet: video mode, rainbow-high-contrast, annotations, zoom
several symbols are missing, but text is shown when selecting them

See my initial posting for the updated zip:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg324950/#msg324950 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg324950/#msg324950)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mjl on November 07, 2013, 11:03:51 am
Another E4 sales commission for Mike :)

For those keeping score: serial 63905xxx, firmware version 1.18.8, calibration cert says FLIR Estonia, Oct 28 2013. Ordered last week (conrad.nl).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 11:59:39 am

This is working now:
  • PIP in two sizes (small size is new)
  • Color:
    • Greyscale inverted
    • Humidity mode
    • Insulation mode
    • Interval mode
    • Arctic
    • Lava
  • Manual temperature scale setting

not working yet: video mode, rainbow-high-contrast, annotations, zoom
several symbols are missing, but text is shown when selecting them

See my initial posting for the updated zip:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg324950/#msg324950 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg324950/#msg324950)
Is this still crashy or does it work reliably?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 07, 2013, 12:34:16 pm
I suppose a quick test would be to look for a change in current draw with temperature. The only place a cooler could possibly be is on the lower die.
I suppose I could look at the die with my other TIC (or even an humble IR thermometer).
Some heating or coolling may explain the ~ in front of the displayed temp figure at startup.

A very crude test with a cheap IR thermometer suggests the sensor is heated to somewhere between 30 to 35 deg.C, after which time the "~" disappears from the display

What I really need is another calibrated TIC to check... My FireFLir always autoranges so no use for measurements  (I wonder if there is a serial console in there...)
So the opposite of an "uncooled microbolometer" is a "heated microbolometer"...

Are there mirrors that reflect IR? Maybe you could have it look at itself?

Quote
not working yet: video mode
Although it's only 320x240 the flash in the E4 isn't that big - the size was mentioned a few pages back - so it probably can't record for very long.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 12:35:50 pm
Is this still crashy or does it work reliably?

mild problems at max - worst I had was that I had to hold power 2x in a row for >5s
-> happened in mode color_iso_insulation ... possibly some hickup with initial parameters

when setting "rset .ui.userSettings.advancedMeasureMenu true" then the measurement menu looks different, but little use.
I had some tests and got even delta measurements to work - but not much fun.

Regarding the hidden menu: I found some traces for it:
Code: [Select]
  <ui_model type="HiddenServiceSettingsModel" name="hiddenServiceSettingsModel">
    <ui_model_item type="SettingItem" ID="USB_MODE" label="ID_SETUP_USB_MODE" nextModel="usbModeSettingsModel" nextQML="SettingsPage.qml" settingType="entry" />
    <ui_model_item type="SettingItem" ID="EXPORT_INFO" label="ID_SETUP_EXPORT_INFO" />
    <ui_model_item type="SettingItem" ID="VERSION_INFO" label="ID_SETUP_VERSION_INFO" nextModel="versionSettingsModel" nextQML="SettingsPage.qml" settingType="entry" />
  </ui_model>

  <ui_model type="USBModeSettingsModel" name="usbModeSettingsModel">
    <ui_model_item type="SettingItem" ID="MSD" label="MSD" radio="true"/>
    <ui_model_item type="SettingItem" ID="UVC" label="UVC" radio="true"/>
    <ui_model_item type="SettingItem" ID="RNDIS" label="RNDIS" radio="true" />
    <ui_model_item type="SettingItem" ID="RNDIS_UVC" label="RNDIS and UVC" radio="true"/>
    <ui_model_item type="SettingItem" ID="RNDIS_MSD" label="RNDIS and MSD" radio="true"/>
    <ui_model_item type="SettingItem" ID="UVC_MSD" label="UVC and MSD" radio="true" />
    <ui_model_item type="SettingItem" ID="RNDIS_UVC_MSD" label="RNDIS, UVC and MSD" radio="true"/>
  </ui_model>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 01:07:30 pm
Thanks Aurora !
Do they have an extra screwed ring to hold the lens inside the holder? Edit: this is probably what you mean with "front ring"?

Another option is to use a cheap CO2 laser cutter lens in front - a 20mm dia 50mm FL lens works pretty well - again I will show this in a vid - I mounted the lens in a plastic disc, retained with a wire clip
Mike, you call this clamping thing "wire clip". I think this is a clever idea to use! It is reliable, cheap and easy to install and to remove.
I have seen this kind of clamp before of course, but cannot find it now to order somewhere. Sometimes you just do not know what to search for. Any idea what the "official" name is or where to get this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 01:17:44 pm
Is this still crashy or does it work reliably?

for Mike: the attached .zip contains a special "settings" menu where the hidden menu is added visibly as 5th element top the options menu
the menu label and symbols are dupe as the ressource seems to be lacking matching texts/icons.

originally the hidden menu is set to be only reached as "next" item from the camera information subpage ... but no idea what triggers the menuflip!

Please note: the zip contains a .bmp without backup (yet) ... it will change the bootup screen a small bit (special edition)

ah - and btw - the hidden menu contains an USB settings menu :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 01:22:47 pm

Quote
not working yet: video mode
Although it's only 320x240 the flash in the E4 isn't that big - the size was mentioned a few pages back - so it probably can't record for very long.
..and the CPU may not have the power to compress in realtime
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 01:41:47 pm
Ok Peopes........ I am sorely tempted to add an E4 to my collection of TICs. I am not a business, so sadly will have to Pay VAT no matter where I buy it. Are there any fellow Brits who have a recommendtion for the best/cheapest place to buy from in the UK ? I know stocks are in short supply (thanks to Mike  ;D ) but any tip woudld be apprecited as I am  looking fo a good deal if one exists.

Fraser
Seems nobody advertises anything below RRP so probably need to ask around for best price/stock. I think the issue ATM is finding any stock, let alone price. I notice tequipment in US sold not only 12 E4s but also a couple of E5's in the 24hrs after the hackaday post
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on November 07, 2013, 01:47:30 pm
Ok Peopes........ I am sorely tempted to add an E4 to my collection of TICs. I am not a business, so sadly will have to Pay VAT no matter where I buy it. Are there any fellow Brits who have a recommendation for the best/cheapest place to buy from. I know stocks are in short supply (thanks to Mike  ;D ) but any tips would be apprecited as I am  looking fo a good deal if one exists.

I bought one yesterday from www.omega.co.uk (http://www.omega.co.uk), it was listed online for £665+VAT.

Today it's £795+VAT...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 01:58:14 pm
Ok Peopes........ I am sorely tempted to add an E4 to my collection of TICs. I am not a business, so sadly will have to Pay VAT no matter where I buy it. Are there any fellow Brits who have a recommendation for the best/cheapest place to buy from. I know stocks are in short supply (thanks to Mike  ;D ) but any tips would be apprecited as I am  looking fo a good deal if one exists.

I bought one yesterday from www.omega.co.uk (http://www.omega.co.uk), it was listed online for £665+VAT.

Today it's £795+VAT...
Yeah, I just wanted to propse Omega to Aurora too but checked the price before. I then thought I remembered wrong. But obviously not. Thats the law of supply and demand.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 02:02:14 pm
Ok Peopes........ I am sorely tempted to add an E4 to my collection of TICs. I am not a business, so sadly will have to Pay VAT no matter where I buy it. Are there any fellow Brits who have a recommendation for the best/cheapest place to buy from. I know stocks are in short supply (thanks to Mike  ;D ) but any tips would be apprecited as I am  looking fo a good deal if one exists.

I bought one yesterday from www.omega.co.uk (http://www.omega.co.uk), it was listed online for £665+VAT.

Today it's £795+VAT...
Yeah, I just wanted to propse Omega to Aurora too but checked the price before. I then thought I remembered wrong. But obviously not. Thats the law of supply and demand.
So I'm not the only one who thought I saw a lower price there..
Probably worth calling them though
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 07, 2013, 02:22:50 pm
I think I was lucky: 800€ instead of 955€!!!
It is just curiosity, but other than TopLoser and me, have anyone else bought an E4 from Omega?
Maybe the surge of requests triggered some list price alarms!!! ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 07, 2013, 02:29:13 pm
So I am a tad confused about all this talk about different lenses and service menus et cetera. I was under the impression that seperate lenses couldn't be attached to the E4, or is this a mod?

Is there any reason to go into the service menu (or whatever it's called); does it unlock any new features of the camera that the hack doesn't do?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 07, 2013, 02:37:48 pm
I shall have to be patient  :)

... sometimes that will be rewarded with a prize ... errr... comes with a price ...  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 02:42:10 pm
So I am a tad confused about all this talk about different lenses and service menus et cetera. I was under the impression that seperate lenses couldn't be attached to the E4, or is this a mod?
A simple mod - like adding spectacles 8)
Quote
Is there any reason to go into the service menu (or whatever it's called); does it unlock any new features of the camera that the hack doesn't do?
Not as far as we know, unless you want to modify break the calibration of your unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 07, 2013, 02:45:25 pm
Some pictures with ZnSe lenses of different focus lengths would be welcome. I understand 0.5m is the minimum focus distance with the standard lens.
Yet 50mm (2") focus length seems very small. I wonder if  63.5mm (2.5"), 76.2mm (3") or even 100mm (4") wouldn't work better.
Besides: some dealers on eBay sell "HQ"  ZnSe lenses for roughly twice the price of the normal ZnSe lenses. They seem to have lower transmission losses.
I wonder if that makes much of a difference for thermal imaging purposes...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 02:47:11 pm
@Taucher and any other Windows CE experts.

May I note a minor request? Maybe it is pretty easy to do.

The E4 is a fixed focus camera, beeing able to show sharp pictures from 30cm to inifinity.
But the internal real picture camera can show sharp pictures up to 10cm or even closer (I tried). It is the infrared sensor (and lens) which is limited to 30cm.

For distances between 3m and 30 cm the parallaxis between the sensor picture and the camera picture is being corrected by shifting pixels in the vertical axis. This is selected in the distance menu.

Now, by rotating the lens or by adding an additional CO2 laser lens (ZnSn) it would be possible to check anything closer than 30cm. A PCB check with 10cm distance for example would be possible now which gives us a much higher resolution.

Unfortunately the pixels of the internal camera will not be shifted enough with the lowest (30cm) option, as the settings are limited to 0.3m / 0,6m / 1m .... >3m. Thus the usage of MSX is not possible.

Now the question: Do you think there is any way to add another option to that list: "0,1m"?
The current list should be stored somewhere including a table with the amount of pixels to be shifted. For 10cm another 35 pixels need to be added (rough guess now).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 07, 2013, 02:47:56 pm
Quote
A simple mod - like adding spectacles

Yes, I know it would be simple; just adding some double-sided adhesive tape and sticking another lens on there would probably work; however, do you take the old lens out first, or do you add one over top of the other (like sunglasses on top of your prescription glasses)? Thermal polarizer anyone? har de har har

 
Quote
Not as far as we know, unless you want to modify break the calibration of your unit.

My unit hasn't even shipped yet, but I will not be opening it. I was just curious to see what has been found in all these secret menus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 02:49:28 pm
Just spoke to Omega. No Dice. They are sticking to their GBP795 price. From the reaction of the nice lady on the phone, me thinks a pricing error occurrred !
Or Flir insisted that they keep to RRP or they would not receive new E4s.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 07, 2013, 02:54:57 pm
okay - for those who need ... I have gone through and gotten my freight forwarder in the US to "approve" the Ex cameras <= 9Hz for export based on Flir Export documentation and ECCN numbers. My FF is VERY hard on export control - so now it is vetted and should be "in the system" at the Freight Forwarder as allowed for export.

Due to the sensitive nature :) I'll only give the details to people who PM and have EEVBlog history - and please don't disclose to outside parties for the next week (until MY camera has shipped at least - don't want corporate big guns aiming at my Freight Forwarder *G*) - and If you will let me I can even earn $10 shipping credit by referring you :)

And a little trick... If you have a US Amazon account :) and a Freight Forwarder in the US - "sub sellers" can't verify your CC details. Amazon takes payment and they are a bit more liberal with where CC comes from. You might pay a little extra buying through Amazon (As in closer to RRP) - but you can usually buy from people who would not touch a non-US CC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on November 07, 2013, 03:18:26 pm
It looks like they come in 35mm and 50mm diameters.

bit harder to install and remove but plenty of sizes available

www.ebay.ie/sch/i.html?_odkw=c+clip&_osacat=0&_nkw=internal+c+clip&_sacat=0 (http://www.ebay.ie/sch/i.html?_odkw=c+clip&_osacat=0&_nkw=internal+c+clip&_sacat=0)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 07, 2013, 03:22:03 pm
Quote
My FF is VERY hard on export control

Your profile says you are from the United Arab Emirates; that's pretty close to Iran and some other embargoes nations. I imagine shipping thermal images from there would be a bloody nightmare. Glad to hear you figured out a way though :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 03:29:57 pm
@Taucher and any other Windows CE experts.

May I note a minor request? Maybe it is pretty easy to do.

The E4 is a fixed focus camera, beeing able to show sharp pictures from 30cm to inifinity.
But the internal real picture camera can show sharp pictures up to 10cm or even closer (I tried). It is the infrared sensor (and lens) which is limited to 30cm.

For distances between 3m and 30 cm the parallaxis between the sensor picture and the camera picture is being corrected by shifting pixels in the vertical axis. This is selected in the distance menu.

Now, by rotating the lens or by adding an additional CO2 laser lens (ZnSn) it would be possible to check anything closer than 30cm. A PCB check with 10cm distance for example would be possible now which gives us a much higher resolution.

Unfortunately the pixels of the internal camera will not be shifted enough with the lowest (30cm) option, as the settings are limited to 0.3m / 0,6m / 1m .... >3m. Thus the usage of MSX is not possible.

Now the question: Do you think there is any way to add another option to that list: "0,1m"?
The current list should be stored somewhere including a table with the amount of pixels to be shifted. For 10cm another 35 pixels need to be added (rough guess now).
The problem is that at close distances it just isn't going to work - the geometric errors across the image will be too high - as you get closer, the cameras are not just at different distances, but looking from very different angles, so registration will vary across the field of view in both axes. For close-up work, even if it did work, MSX wouldn't be a huge benefit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 07, 2013, 03:30:37 pm
Quote
My FF is VERY hard on export control

Your profile says you are from the United Arab Emirates; that's pretty close to Iran and some other embargoes nations. I imagine shipping thermal images from there would be a bloody nightmare. Glad to hear you figured out a way though :)

UAE is not under any embargo. As the UAE has almost 10% of the worlds oil reserves the US is very nice here.... But I would not touch any kind of export to neighbour countries. Exporting restricted items here to embargo countries are punished with jail or worse.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 03:32:45 pm
I just joined the E4 Club  :)

I had a chat with a very friendly chap at PASS as I have dealt with them before. I explained that some companies in the USA are discounting when asked for such, and would he offer me any form of deal on an E4 ?

It would appear that UK sellers are in a tighter spot than US ones. I was told that discounts on the higher models were definitely a possibility but the margins on the low end E4 were so tight for them that they could do very little, if anything, for me on their GBP796+VAT price. PASS are discounting the E5 at the moment so they obviously do discount. It looks more and more like OMEGA made a pricing error. I pushed a little harder for a discount and exceptionally secured one based on my past good custom etc etc. I know this may all be just sales talk, but the chap did seem very friendly and genuine. He also advised that the set they sell is the complete kit including hard case for storage and full warrantly etc. I am very happy with my deal but it looks like discounts will be hard to find in the UK at the moment.

The camera is sent using a special secure delivery service to ensure that it does not go walkies in transit  :)

PASS sold two E4's today and mine is the third. They restock daily and have a batch of five arriving tomorrow. One of which will be mine. Sales are obviously going well ! FLIR must be a tad surprised at the figures ?

PASS web site:

http://www.tester.co.uk/flir-e4-thermal-imaging-camera (http://www.tester.co.uk/flir-e4-thermal-imaging-camera)

Looking forward to hacking my E4
Any comment from him re. recent E4 sales volumes and reasons for such...?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 07, 2013, 03:41:21 pm
I seriously hope FLIR is not onto us yet; I don't want to be getting a revision of this camera that is immune to hacking
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 07, 2013, 04:14:27 pm
I seriously hope FLIR is not onto us yet; I don't want to be getting a revision of this camera that is immune to hacking

I can assure you that they track this thread from day one. Some as part of their duty and others for curiosity and fun.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 04:58:31 pm
@Taucher and any other Windows CE experts.
-snip-
Now the question: Do you think there is any way to add another option to that list: "0,1m"?
The current list should be stored somewhere including a table with the amount of pixels to be shifted. For 10cm another 35 pixels need to be added (rough guess now).
The problem is that at close distances it just isn't going to work - the geometric errors across the image will be too high - as you get closer, the cameras are not just at different distances, but looking from very different angles, so registration will vary across the field of view in both axes. For close-up work, even if it did work, MSX wouldn't be a huge benefit.
May I add: there are exactly 6 pre defined fields and all are somehow linked/used inside the binaries... so: no chance - use a mirror or prism to fix alignment :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 05:21:30 pm
A question for those who already own an E4 and have used FLIR Tools.....

Can you change the centre temperature and span when viewing the image ? I know the E4 embeds meta data in the jpg file but wondered if it is similar to the old img file meta data

My camera produces the img files and these area read in Explorer99 and FLIR Tools. The metadata contains ALL the raw thermographic data that the camera collected so you can manipulate the image in any way you like as though it was a live image on the camera,. i.e. you can change palette, span spot temperature point etc. Does FLIR Tools provide any image data manipulation options when using the FLIR jpg files ?
Yes, you can manipulate it as you like in Flir Tools
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 05:23:23 pm
A question for those who already own an E4 and have used FLIR Tools.....

Can you change the centre temperature and span when viewing the image ? I know the E4 embeds meta data in the jpg file but wondered if it is similar to the old img file meta data

My camera produces the img files and these area read in Explorer99 and FLIR Tools. The metadata contains ALL the raw thermographic data that the camera collected so you can manipulate the image in any way you like as though it was a live image on the camera,. i.e. you can change palette, span spot temperature point etc. Does FLIR Tools provide any image data manipulation options when using the FLIR jpg files ?
Not looked in detail but I think you have to save a raw file - have seen references to this but not sure if this is supported (YET?) on the E4 and/or (the free version of) FLIR Tools
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 07, 2013, 05:25:07 pm
Just spoke to Omega. No Dice. They are sticking to their GBP795 price. From the reaction of the nice lady on the phone, me thinks a pricing error occurrred !
Or Flir insisted that they keep to RRP or they would not receive new E4s.

In that case, it might be worth a try to ask for a rebate as opposed to a discount. That way, the distributor can technically say they sold it at the price FLIR demanded. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 05:33:55 pm
Yes, you can manipulate it as you like in Flir Tools
Addendum: Just download Flir Tools and try it out - its free.
Attached is a sample file from my E4 for you to try out - try to guess what it shows (without looking to the picture of the digital camera) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 07, 2013, 05:39:21 pm
A sink?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 07, 2013, 05:40:53 pm
...and you've had the hot tap running for a little while.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 07, 2013, 05:44:17 pm
...and you've had the hot tap running for a little while.
That was too easy. Yes, a sink (thanks to MSX you was able to guess it quickly).
Nice to see the reflections of the vertical sides of the sink.

Oh, and by the way: you can export the file as a CSV file from Flir Tools (I attached the pic above as a CSV export in case you are interested)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 07, 2013, 06:04:02 pm
Until this thread I had no desire to own a TIC, damn you Mike!     :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 06:09:21 pm
By the way Mike, what do you think of the FLIR soft case that they sent to you ? Did you have to buy it or did FLIR respond to a complaint regarding the large carry case ?
They sent it to me after I sent a link to the review & bounced a few emails back & forth re. things I raised in the review.
It's a much better option than the hard case - very well made, and noy excessively padded - doesn't need it due to the internal shock protection. Apparently both cases cost them about the same, so they said they would look again at case options.
I'm a little surprised the lowest end model even includes a case at all - I doubt many people would have complained if a case was only included in E5 & up. Just a pity they included the wrong one!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 06:17:48 pm
Interesting Mike.

One web site listed the 'Hard case' at GBP127 +VAT and the soft case at GBP17 +VAT  :-//

I will invest in a soft case  :)
Just check the version - I think the Ex0 and Ex may have a different case. ISTR it being more than that for the Ex one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 06:29:42 pm
-snip @Case -
 Just a pity they included the wrong one!

I prefer the peli(like)case by all odds!
It would be a shame to deliver such a nice product and leave the customer alone how to store it (incl. all extra bits) once unpacked.
I'd guess everbody has a different preference on this - so if at all, then Flir could decide to offer an alternative default case option :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 06:32:52 pm
status update regarding menu-tweaking: rainbow-high-contrast working now
advance measurement options are a bit of a headache
... I have all .caps enabled - but maybe some are still missing.
to reload the config one can use the "restartapp" batch command - just give it the same time as a cold restart - plus: doesn't kill telnet :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 07, 2013, 06:34:34 pm
Not looked in detail but I think you have to save a raw file - have seen references to this but not sure if this is supported (YET?) on the E4 and/or (the free version of) FLIR Tools

The jpg file contains a massive metadata section, containing both the webcam image as another jpg, and what I assume is the raw data as 16 bit png. I've not tried parsing it yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 07, 2013, 06:35:11 pm
Considering that so many members are ordering E4's, has anyone considered ordering a group buy?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 07, 2013, 06:39:43 pm
The exiftools ( http://www.sno.phy.queensu.ca/~phil/exiftool/ (http://www.sno.phy.queensu.ca/~phil/exiftool/) ) have support for the FLIR specific meta data and you can extract them as well. As a result you get a PNG with 16 bits data in it ... except they screwed up the byte ordering and so you can't view that PNG with normal PNG viewers ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 07, 2013, 06:57:56 pm
Not looked in detail but I think you have to save a raw file - have seen references to this but not sure if this is supported (YET?) on the E4 and/or (the free version of) FLIR Tools

The jpg file contains a massive metadata section, containing both the webcam image as another jpg, and what I assume is the raw data as 16 bit png. I've not tried parsing it yet.

Yup, lots of metadata + 320x240 16-bit png + 640x480 from small camera + 320x240 thermal image.

Oh and ExifTool (http://www.sno.phy.queensu.ca/~phil/exiftool/) + ImageMagick (http://www.imagemagick.org/) == profit!

Also note this section:
http://www.sno.phy.queensu.ca/~phil/exiftool/TagNames/FLIR.html (http://www.sno.phy.queensu.ca/~phil/exiftool/TagNames/FLIR.html)

I got my E4. Shiney tooooy!  ;D For those keeping score: serial 63903xxx, and firmware 1.18.7

Oh yeah, in case anyone running linux is interested ... I made a little script that automates things a bit. You can attach your E4, run script, and then it will grab the serial number, generate E8 config file + do the CRC etc. Short version: it generates an E8_hack.fif for your specific camera. Currently you still have to use Flir Tools to run the FIF. :P

I tested it on my E4 and it worked in one go. :)


Before:
<who_cares/>

After (woohoo! 320x240):
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madpuma13 on November 07, 2013, 07:18:54 pm
status update regarding menu-tweaking: rainbow-high-contrast working now
advance measurement options are a bit of a headache
... I have all .caps enabled - but maybe some are still missing.
to reload the config one can use the "restartapp" batch command - just give it the same time as a cold restart - plus: doesn't kill telnet :)

Im very interested to see if you get this working along with your other menu/options youve worked out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 07, 2013, 07:24:34 pm
The exiftools ( http://www.sno.phy.queensu.ca/~phil/exiftool/ (http://www.sno.phy.queensu.ca/~phil/exiftool/) ) have support for the FLIR specific meta data and you can extract them as well. As a result you get a PNG with 16 bits data in it ... except they screwed up the byte ordering and so you can't view that PNG with normal PNG viewers ...

Doh, didn't notice you mentioned exiftools as well. Oh well, now it's double true! exiftool is darn handy. I noticed the byte order swap in the raw png. Just checking the code for it right now, and they do try to handle byte order. Lemme see if it is user error, or a bug.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 07, 2013, 07:35:27 pm
I think they handle the byte swap only when the data is raw and not PNG. When it's PNG, it just extracts the PNG data but you can't fix it without decompressing the PNG, fixing the byte order and re-compress ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 07, 2013, 07:48:33 pm
Correctemundo.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 08:07:37 pm
My sincere thanks to all who have answered my questions and who worked to create this wonderfully simple to apply hack. I know it was a time consuming task to create. Mike, I am very grateful for your videos and for sharing your knowledge. My wife may not be so happy when she see's another thermal camera arrive at the front door....I can already hear her words in my head....."haven't you already got several of those ?" and "why do you need another"  :scared:
Maybe you should point out a similar issue with shoes, handbags, etc.... ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 07, 2013, 08:12:28 pm
I think they handle the byte swap only when the data is raw and not PNG. When it's PNG, it just extracts the PNG data but you can't fix it without decompressing the PNG, fixing the byte order and re-compress ...

Right, ImageMagick to the rescue:

Code: [Select]
exiftool FLIR012345.jpg -RawThermalImage -b | convert - -interlace none -depth 16 r:- | convert -size 320x240 -interlace none -depth 16 -endian msb gray:-  problem_solved.png

Edit: and to normalize the above result for easy viewing by a human (as opposed to further processing the 16-bit result):
Code: [Select]
convert problem_solved.png -normalize -depth 8 raw_image_relative.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 07, 2013, 08:53:34 pm
Edit: and to normalize the above result for easy viewing by a human (as opposed to further processing the 16-bit result):
Code: [Select]
convert problem_solved.png -normalize -depth 8 raw_image_relative.png

Oh very nice. I had found the -endian option to fix the image but didn't think of using normalize to get something usable without further processing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 07, 2013, 09:50:26 pm
Maybe you should point out a similar issue with shoes, handbags, etc.... ;D

How many shows and handbags does he have?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 10:58:44 pm
Re. ui fiddling for extra functions - it could be that some things are implemented but the keys aren't there to operate them
This is the help from the bt console command to simulate keys.  I haven't found anything yet that does anything other than normal keys though.
Quote
usage: bt <key>
usage: bt [flank] <named key>
bt -a <Key> <Alt>+<key>
bt -u       Joystick up    button
bt -d          -"-   down  button
bt -l          -"-   left  button
bt -r          -"-   right button
bt -e  <Enter>     key
bt -t  <Tab>       key
bt -c  <Esc>       key
bt -b  <Backspace> key
bt -    Minus
bt f1 - Left  function button
bt f2 - Right function button
bt -g - Laser    button
bt -s - Snapshot button
bt -o - Open (recall) image button
bt -p - Power on/off button
bt u1 - User button 1
bt u2 - User button 2
bt -m - Mode button
bt -f - Freeze button
bt -v - View mode button (IR/DC/Fusion)
bt -k - Toggle button (Viewfinder/LCD)
bt -A - Manual|Auto button
bt --   Adjust left key
bt -+   Adjust right key
bt -*   Adjust press key
bt -P  <named key> Press flank
bt -R  <named key> Release flank
bt af - Auto focus button
bt ai - focus in button
bt ao - focus out button
bt zn - Zoom near button
bt zf - Zoom far button
Character and number keys used as they are
Just bt will send a <Space>
 ------             ------
 | f1 |    -----    | f2 |
 ------    |-u |    ------
           -----
      -----     -----
      |-l |     |-r |
      -----     -----
           -----
  -----    |-d |    -----
  |-o |    -----    |-p |
  -----    -----    -----
           |-g |  (Laser)
           -----
           -----
           |-s | (Snapshot)
           -----

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 07, 2013, 11:16:20 pm
Re. ui fiddling for extra functions - it could be that some things are implemented but the keys aren't there to operate them
This is the help from the bt console command to simulate keys.  I haven't found anything yet that does anything other than normal keys though.

@buttons - yes, even documented in T559504$A.pdf - chapter 2.4.2.1 - most features are pretty useless

Currently I'm on deciphering what starts what... as far as I got it seems that appcore spawns approx. 34 threads - at least one of them is facet, which builds up the menu according to a set of binary and xml data files... I'd love to add the missing icons somehow... but didn't even find where the icons reside... $%&/! compiled in ressources...

and while I'm writing: the rset/rdump tools are obviously made to ignore the "caps" tree - except one adresses an element directly :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 11:25:01 pm
Re. ui fiddling for extra functions - it could be that some things are implemented but the keys aren't there to operate them
This is the help from the bt console command to simulate keys.  I haven't found anything yet that does anything other than normal keys though.

@buttons - yes, even documented in T559504$A.pdf - chapter 2.4.2.1 - most features are pretty useless

Currently I'm on deciphering what starts what... as far as I got it seems that appcore spawns approx. 34 threads - at least one of them is facet, which builds up the menu according to a set of binary and xml data files... I'd love to add the missing icons somehow... but didn't even find where the icons reside... $%&/! compiled in ressources...

and while I'm writing: the rset/rdump tools are obviously made to ignore the "caps" tree - except one adresses an element directly :)
I think rdump will display caps.
BTW rls has a -lll option that shows permissions etc. which may be handy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kotaKat on November 07, 2013, 11:35:03 pm
Well, I was talking to a coworker about the mod and apparently on a whim it prompted him to buy it -- and me to do the hack! ;D

Just to note, the e4hack3a.zip file doesn't have the camera.cmd file -- I had to pull it from my "backup" copy of e4hack3.zip.

I couldn't get the subject matter I had to stay still, so here's two shots to add to the before/after pool.
My lovely dog in 80x60+MSX:
(http://flupl.be/1113eqBz.jpg)
The heating and (sadly empty) beer and soda fridge in 320x240+MSX:
(http://flupl.be/1113tzGd.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 07, 2013, 11:47:29 pm
Just to note, the e4hack3a.zip file doesn't have the camera.cmd file -- I had to pull it from my "backup" copy of e4hack3.zip.
Oops - fixed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 07, 2013, 11:48:20 pm
I wonder if I will be able to use my, hopefully soon to arrive, E4->E8 to see if women are "in heat"! I'll bring all new meaning to FLIRting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 08, 2013, 12:08:12 am
Well, it's not rocket science ... I'd guess that any area that it pressed tighter against the clothes are going to transmit more heat them more and show up brighter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 08, 2013, 12:15:16 am
Maybe the good bits emit more heat in the first place :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 12:24:12 am
I wonder if I will be able to use my, hopefully soon to arrive, E4->E8 to see if women are "in heat"! I'll bring all new meaning to FLIRting.

Haha, good one!

Whilst demonstrating an early Agema 880 TIC, I was under strict instructions to not point the camera at ladies. They apparently tend to glow in embarrassing places !

Now you're really giving us ideas (http://tvtropes.org/pmwiki/pmwiki.php/Main/DoNotDoThisCoolThing). ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 08, 2013, 12:48:11 am
Maybe the good bits emit more heat in the first place :)

For her sake, I hope not.

Apparently increased temperature in the breasts means increased blood flow / abnormal vascular pattern which can indicate cancer. It's actually used as a diagnostic test less invasive than mammograms.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 08, 2013, 12:53:52 am
So despite already owning a Ti10, ordered an E4 from Pass last night. Got a call today though saying they were out of stock until Monday. Let's see what happens!

Kudos to Mike and others for the excellent bit of reverse engineering. Send your invoices to Flir - you've earned the commission.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 08, 2013, 01:15:04 am
Does anybody with experience in this kind of products.

Assuming that FLIR has already a firmware fix, how many time do other people have to buy one? Do you think that sellers that are out of stock are getting non-hackable units soon?
Most of the sites referred here are getting units in 10 days, they said...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on November 08, 2013, 01:45:15 am
http://www.tequipment.net/ (http://www.tequipment.net/) changed the shippng estimation for my Flir E4  few hours ago
from
To Be Shipped On 11/20/2013 (Old Estimate: 11/7/2013)
To
Shipped On 12/4/2013 (Old Estimate: 11/20/2013)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 08, 2013, 01:51:25 am
My tequipment.net order got updated this evening from "Estimated Ship Date: 11/06/2013" to "Estimated Ship Date: 11/07/2013". I honestly don't get why they would keep updating the estimated ship date to the current day if they had no plans on shipping it then. Evening if it was to ship today, just wait until it has shipped and then update the status to "shipped"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 08, 2013, 03:03:10 am
It would appear that UK sellers are in a tighter spot than US ones. I was told that discounts on the higher models were definitely a possibility but the margins on the low end E4 were so tight for them that they could do very little, if anything, for me on their GBP796+VAT price. PASS are discounting the E5 at the moment so they obviously do discount. It looks more and more like OMEGA made a pricing error. I pushed a little harder for a discount and exceptionally secured one based on my past good custom

I have a bridge to sell you.

(http://www.findingbetteragencies.com/wp-content/uploads/picture-of-a-shifty-used-car-salesman.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 08, 2013, 03:13:02 am
 Post 524 says:

"e4hack3b.zip (102.46 kB - downloaded 2 times.)"

What's up with that?  I've downloaded it more than 2 times myself.  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 08, 2013, 03:16:29 am
Post 524 says:

e4hack3b.zip (102.46 kB - downloaded 2 times.)

What's up with that?  I've downloaded it more than 2 times myself.  :-DD

Check post #913
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 08, 2013, 03:32:04 am
Post 524 says:

e4hack3b.zip (102.46 kB - downloaded 2 times.)

What's up with that?  I've downloaded it more than 2 times myself.  :-DD

Check post #913

Yeah, that's why I downloaded it a 3rd time.  I didn't notice the rev. "b".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 08, 2013, 03:41:30 am
Does anyone else think it would be nice to get that FLIR logo of of the lower left corner of the image?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 08, 2013, 03:51:33 am
http://www.tequipment.net/ (http://www.tequipment.net/) changed the shippng estimation for my Flir E4  few hours ago
from
To Be Shipped On 11/20/2013 (Old Estimate: 11/7/2013)
To
Shipped On 12/4/2013 (Old Estimate: 11/20/2013)

That sucks.
Mine still says "On Hold" :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 03:56:42 am
Does anybody with experience in this kind of products.

Assuming that FLIR has already a firmware fix, how many time do other people have to buy one? Do you think that sellers that are out of stock are getting non-hackable units soon?
Most of the sites referred here are getting units in 10 days, they said...

Maybe it's wishful thinking, but FLIR doesn't have much to gain by "fixing" this as most professional users of thermal cameras probably aren't going to use hacked devices. If anything, this has greatly boosted FLIR's E4 sales.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 08, 2013, 03:59:22 am
Does anybody with experience in this kind of products.

Assuming that FLIR has already a firmware fix, how many time do other people have to buy one? Do you think that sellers that are out of stock are getting non-hackable units soon?
Most of the sites referred here are getting units in 10 days, they said...

Maybe it's wishful thinking, but FLIR doesn't have much to gain by "fixing" this as most professional users of thermal cameras probably aren't going to use hacked devices. If anything, this has greatly boosted FLIR's E4 sales.

I count on this, mine is on hold too  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madshaman on November 08, 2013, 05:58:45 am
I ordered from flir-direct.com, they claimed to have a unit in stock in Montreal.  I've never dealt with these people; hopefully I won't have the hassle of having to get my credit card company to reverse the transaction.

Anyone else do the same?  Apologies if this site has been mentioned, I'm still reading the thread and did do a forum search for them.  Honestly, I jumped right on the first non-completely-sketchy site that claimed to have stock.

(I'm also still cobbled by my bandwidth (in outskirts of Dar es Salaam).  My SO has an interview in a few days where we'll be moving to a hotel in the city centre with a decent connection, I'll have to catch up on everything then ^^')
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 07:59:09 am
I ordered from flir-direct.com, they claimed to have a unit in stock in Montreal.  I've never dealt with these people; hopefully I won't have the hassle of having to get my credit card company to reverse the transaction.
Don't worry. I ordered another 2 units there too and according to the tracking they are already in customs. Of course flir-direct.com does not mean that here Flir sells directly. As you said, it is a Canadian dealer (also owning fluke-direct.com and many other ....-direct websites).
Hint: Check out their value added package called E4-Kit= same price but you will get more for your money. By this they avoid to lower the price below RRP but give some useful extra devices for humidity, dew-point calculation etc. worth another $70..... and they give quantity discount.

Oh - and they do ship internationally without bullsh*-excuses such as "Flir does not allow" or "it is against the law".
Edit: btw: they do intl. shipping by TNT by an unbeatable price (2 E4 KIT packages for $130).

Hint 2: The more you put in you cart (starting at quantitiy of 2) the lower the price gets.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 08:14:43 am
Like I said earlier, we really need a group buy!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 08:18:14 am
Like I said earlier, we really need a group buy!
I assume: anybody interested in an E4 buys one by themselves immediately before they are out of stock everywhere and being replaced by an E4 with an "improved" firmware. It often just takes too long to settle a group buy and gather all the money. What you may do: buy 5 and sell them for +$50 each. By this you have your group buy and you are lowering the price for your own unit at the same time by $200.
Edit: you may also buy 5 now, wait a month or two (until they are not hackable anymore) and then sell then for +$500 each >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 09:37:03 am
Short status update:
found the place where the icons are stored  :palm: .. rcc file in ui.d (sleeping helps a lot)
facet_z3.rcc is beeing detected by ui_control.rsc
Code: [Select]
.ui.setup.control.qml_rcc text "\FlashBFS\system\ui.d\facet_*.rcc"Flir uses a QT based frontend (Nokia QT4 libs) ... a quick binwalk (see attachment) shows locations of all used icons/graphics and "strings -e b <file>" gave some metainformation on included filenames.

If anybody has more experience in QT and resource editing: please feel free to contribute some help :)

EDIT1: http://harmattan-dev.nokia.com/docs/library/html/qt4/resources.html (http://harmattan-dev.nokia.com/docs/library/html/qt4/resources.html)
EDIT2: This looks like right direction ... use QT to load and store resources ... http://www.progtown.com/post24427765.html#p24427765 (http://www.progtown.com/post24427765.html#p24427765)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tealsuki on November 08, 2013, 09:38:24 am
If I had more than $5 to my name (I blame Jeri Ellsworth), I'd certainly consider investing in an E4. Regardless, I'm always happy to read 63 page threads where secrets are unearthed, hacking ensues, and just a general discussion on how to make good products even better occurs.

Thanks to Mike and all the other folks in this thread!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 10:13:40 am
Short status update:
found the place where the icons are stored  :palm: .. rcc file in ui.d (sleeping helps a lot)
facet_z3.rcc is beeing detected by ui_control.rsc
Code: [Select]
.ui.setup.control.qml_rcc text "\FlashBFS\system\ui.d\facet_*.rcc"Flir uses a QT based frontend (Nokia QT4 libs) ... a quick binwalk (see attachment) shows locations of all used icons/graphics and "strings -e b <file>" gave some metainformation on included filenames.

If anybody has more experience in QT and resource editing: please feel free to contribute some help :)

EDIT1: http://harmattan-dev.nokia.com/docs/library/html/qt4/resources.html (http://harmattan-dev.nokia.com/docs/library/html/qt4/resources.html)
EDIT2: This looks like right direction ... use QT to load and store resources ... http://www.progtown.com/post24427765.html#p24427765 (http://www.progtown.com/post24427765.html#p24427765)
While I cannot help you guys with the Windows CE internals, I might be able to provide nice icons if needed. Just tell me what size you need and for what function you need it. I then can provide them if you are able to include them so CE uses them. I would also need to know if you need two icons (selected / not selected) or if CE does this automatically.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 08, 2013, 10:23:03 am
Does anyone else think it would be nice to get that FLIR logo of of the lower left corner of the image?

Absolutely! (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323764/#msg323764)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 10:34:16 am
Does anyone else think it would be nice to get that FLIR logo of of the lower left corner of the image?

Absolutely! (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323764/#msg323764)
Folks... that's already on the ToDo list - and at least a binary patch should be possible without any trouble - right now I'm working on a program to unpack the .rcc files incl. the internal structure
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 11:07:40 am
And there was me thinking that the hacking of the E4 had probably reached the limits of what could be achieved. I am fascinated to read of the continued 'reverse engineering' of the OS. Most is well beyond my understanding but very interesting all the same  :)

This E4 investigation could provide much valuable insight into theses devices that was previously unavailable. It is the first such 'public domain' reverse engineering of a TIC that I have seen. KUDOS to Mike for starting this ball rolling, and for attracting other Win CE professionals to the party !

Good work guys and thank you for all your efforts
Given that most of the hard stuff is handled by the OS and the FPGA, I wonder how hard it would be to just replace their main user app completely instead of tweaking the existing one.
Title: Flir E4 Thermal imaging camera teardown
Post by: madshaman on November 08, 2013, 11:28:46 am

I ordered from flir-direct.com, they claimed to have a unit in stock in Montreal.  I've never dealt with these people; hopefully I won't have the hassle of having to get my credit card company to reverse the transaction.
Don't worry. I ordered another 2 units there too and according to the tracking they are already in customs. Of course flir-direct.com does not mean that here Flir sells directly. As you said, it is a Canadian dealer (also owning fluke-direct.com and many other ....-direct websites).
Hint: Check out their value added package called E4-Kit= same price but you will get more for your money. By this they avoid to lower the price below RRP but give some useful extra devices for humidity, dew-point calculation etc. worth another $70..... and they give quantity discount.

Oh - and they do ship internationally without bullsh*-excuses such as "Flir does not allow" or "it is against the law".
Edit: btw: they do intl. shipping by TNT by an unbeatable price (2 E4 KIT packages for $130).

Hint 2: The more you put in you cart (starting at quantitiy of 2) the lower the price gets.

Thanks man, feel better.  I did of course buy the "E4 Kit".  Had to ship it to my friend back home; hope that doesn't confuse things.

How did you get your tracking info, did they email it to you?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 08, 2013, 11:48:46 am
And there was me thinking that the hacking of the E4 had probably reached the limits of what could be achieved. I am fascinated to read of the continued 'reverse engineering' of the OS. Most is well beyond my understanding but very interesting all the same  :)

This E4 investigation could provide much valuable insight into theses devices that was previously unavailable. It is the first such 'public domain' reverse engineering of a TIC that I have seen. KUDOS to Mike for starting this ball rolling, and for attracting other Win CE professionals to the party !

Good work guys and thank you for all your efforts
Given that most of the hard stuff is handled by the OS and the FPGA, I wonder how hard it would be to just replace their main user app completely instead of tweaking the existing one.
One with a better, non-laggy UI? Might not be as hard as it sounds if it's just making API calls into the existing infrastructure. I'm quite familiar with win32 API and CE looks similar, but at the same time it's also quite different. (Bypassing all of Qt could also be a solution to eliminating the lag.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 12:01:19 pm
Thanks man, feel better.  I did of course buy the "E4 Kit".  Had to ship it to my friend back home; hope that doesn't confuse things.
How did you get your tracking info, did they email it to you?
I had to ask them and then got it by mail. They sent it out on Tuesday and it arrived in Belgium yesterday (TNT hub); the package has already passed customs (I provided TNT the "correct" Taric number, hoping that they are using it) and left Belgium towards Germany. Due to the tracking I shall reveive it Tuesday but with luck it might be Monday.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 12:03:45 pm
Given that most of the hard stuff is handled by the OS and the FPGA, I wonder how hard it would be to just replace their main user app completely instead of tweaking the existing one.
One with a better, non-laggy UI? Might not be as hard as it sounds if it's just making API calls into the existing infrastructure. I'm quite familiar with win32 API and CE looks similar, but at the same time it's also quite different. (Bypassing all of Qt could also be a solution to eliminating the lag.)

Forget that guys... it would be an insanely tedious job to accomplish - for example just appcore.exe contains (really) thousands of methods... if you still want to try a complete reverse+rewrite from scratch: feel free to go ahead ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 08, 2013, 12:40:09 pm
Forget that guys... it would be an insanely tedious job to accomplish - for example just appcore.exe contains (really) thousands of methods... if you still want to try a complete reverse+rewrite from scratch: feel free to go ahead ;)
Isn't that because it is linked with Qt (which adds tons of bloat)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on November 08, 2013, 12:41:20 pm
Does anyone else think it would be nice to get that FLIR logo of of the lower left corner of the image?

Absolutely! (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323764/#msg323764)
Folks... that's already on the ToDo list - and at least a binary patch should be possible without any trouble - right now I'm working on a program to unpack the .rcc files incl. the internal structure

Flir logo is probably a .png or .gif file somewhere in the file system. Raplace that file with completely transparent png/gif and that should do it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 12:41:32 pm
From using a fully fledged thermal camera, I am expecting the most annoying aspect of the E4(E8) to be the lack of centre temperature and span.
-snip-
The good news is that FLIR TOOLS allows you to change the CT and SPAN to extrat the detail. But that needs a PC and cannot be done (at the moment) on teh E4(E8)

The default firmware already contains a manual mode that works - but is just inaccessible.
If operating the camera on USB(RNDIS) or over a console then you can already use the commands "level" and "span" to set exactly what you wanted (but not in °C ... rather in binary from 0...65k)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 12:43:17 pm
Flir logo is probably a .png or .gif file somewhere in the file system. Raplace that file with completely transparent png/gif and that should do it...

See https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325817/#msg325817 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325817/#msg325817)
:)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on November 08, 2013, 12:48:53 pm
I see... It could be this one: Sc_Logo_FlirHardEdges.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 12:51:42 pm
From having used a fully fledged thermographic camera, I am expecting the most annoying aspect of the E4(E8) to be the lack of centre temperature and span buttons or menus.
Taucher's hack enables a manual scale function - left/right keys select hi/lo/both, up/down adjust values. No direct span adjust but you can achieve the same thing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 01:33:42 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on November 08, 2013, 01:43:26 pm

Fr the home DIY brigade, a TIC gives an excellent insight into your homes construction. No more using awful stud finders. Use the TIC to see the wood or metal studs. The screws are very visible too. Heating and hot water piped glow through the walls.

Part of the reason I bought mine!
Having used mine for a couple weeks now I think the most aggravating thing about the E4 is still the pause and auto-calibrating.
Had suspected the additional palettes in flirtools were in the camera, glad to see those have been uncovered as well. Insulation palette is lovely. A 60hz "upgrade" would be the ultimate hack if it can be done for video purposes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on November 08, 2013, 01:45:19 pm
>That sucks.
Mine still says "On Hold" :(

I asked after I was onhold for 1 day and was told as a 1st time overseas billing address buyer shipping  to a US addr, they need me to send them a copy of the credit card and a bill showing my card address.  I thought I got the last ex-stock piece at tequipment, but no more I think.  I am in the process of getting from Sam of valuetesters that ship international, but after a day or 2, I am still waiting for a link to pay by paypal.  If it works, they may be the one to go with.   Tequipment is not ready for the international crowd of EEVBLOG. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 08, 2013, 01:46:21 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Very nice.

Now we know that to enter the secret menu, you just need to press the "Right" key for 10 second when in the device info menu :)
From there you can change the USB modes more easily.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on November 08, 2013, 01:50:42 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

In the attachment is blank transparent logo file and a backup. If someone wants to try it out...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 01:54:24 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Very nice.

Now we know that to enter the secret menu, you just need to press the "Right" key for 10 second when in the device info menu :)
From there you can change the USB modes more easily.

Sharp eyes :) qml/SettingsPage.qml
Code: [Select]
Timer {
        id: hiddenServiceMenuTimer
        interval: 10000
        onTriggered: {
            pageLoader.source = "SettingsPage.qml"
            greenbox.system.showHiddenMenu()    // Load any data in the menus. Somewhat hacky, but it is a special case (i.e. don't copy this idea!)
        }
    }

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 08, 2013, 02:00:21 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Thanks. Also, typo in instructions. That should be qmake -project && qmake && make (not -profile).

Quote
Now we know that to enter the secret menu, you just need to press the "Right" key for 10 second when in the device info menu
From there you can change the USB modes more easily.

Nice one!  :-+ Just tested, and seems to be working. I put it on the "Camera information" page, and then right button for about 10 seconds ==> USB mode menu. Those easy access USB modes will definitely come in handy. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 02:03:25 pm
OT but hopefully useful.

When my E4 arrives I will be looking for a bracket to hold it on a desk or tripod. My initial thought is to modify a commonly available hand held bar code scanner  desk stand. I will keep you informed of progress, if any !

IDEA: replacement-footplate (the thing around the battery) - shouldn't be too hard to create CNC/CAM files for a copy where a nose (for a tripod screwpoint) extends to the front
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 08, 2013, 02:04:51 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Wow, the QML is nicely documented, love that there are comments that explain why certain code is added. ;)

[edit]
And someone found a way to hide the flir logo. :) Nice
And someone found the way to the secret menu. :)  Cool. :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 02:06:31 pm
Thanks. Also, typo in instructions. That should be qmake -project && qmake && make (not -profile).
ut 10 seconds ==> USB mode menu. Those easy access USB modes will definitely come in handy. :)
That's the usual anti-script-kiddie trap (just joking) *G* Thx 4 reporting it :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 02:34:25 pm
Repackaging seems to be simpler...  (script tested, resulting file not yet)

and btw.. please somebody be nice to Dave so he removes that braindead filetype-filter!
Quote
You cannot upload that type of file. The only allowed extensions are doc,gif,jpg,pdf,png,txt,zip,tar,c,h,hex,bas,xls,odt,asm,wav,aiff,wma,mp3,flac

Edit: for a Windows version see: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg369037/#msg369037 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg369037/#msg369037)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 02:35:04 pm
Taucher,

I agree, a threaded socket in the battery base is a good option. Mike said the same. I wonder why FLIR overlooked such an obvious need when such a suitable location existed ? They don't even offer an optional tripod mount or stand.
I just bought some 1/4" to 3/8" thread adaptors, which I think will glue into a cavity in the battery endcap. This endcap is part of the battery, so can be left off if you need to do a warranty return.
Will be playing over the weekend.
Battery clip probably not the most stable fixing but should be adequate.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 08, 2013, 02:35:31 pm
Just to be clear ... in menu go to "Camera information". Press right button for 10 seconds. USB mode menu now available.

The USB ID's for the various modes:

Code: [Select]
MSD                  : 09cb:ffff
UVC                  : 09cb:1004
RNDIS                : 09cb:1002
RNDIS and UVC        : 09cb:1005
RNDIS and MSD        : 09cb:1006
UVC and MSD (default): 09cb:1007
RNDIS, UVC and MSD   : 09cb:1005
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 02:39:34 pm

@Thread:
Just as clarification: I ment not modding the battery (flimsy plastic stuff) but to machine a replacement counterweight with overize on the front so there's place to add a thread into the metal part - but I'm not totally sure on the stability of the holding posts inside the grip.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 02:44:55 pm
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Wow, the QML is nicely documented, love that there are comments that explain why certain code is added. ;)

..well if all that stuff is interpreted at runtime, no wonder it's so sluggish, but considering the hackability benefits, I can live with legacy code from other models running on a bloated OS..!

Presumably we now know enough to implement image mode toggle on the back button..?

At this rate someone's going to find the HDL for the FPGA hiding in there...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 08, 2013, 02:50:31 pm
>That sucks.
Mine still says "On Hold" :(

I asked after I was onhold for 1 day and was told as a 1st time overseas billing address buyer shipping  to a US addr, they need me to send them a copy of the credit card and a bill showing my card address.  I thought I got the last ex-stock piece at tequipment, but no more I think.  I am in the process of getting from Sam of valuetesters that ship international, but after a day or 2, I am still waiting for a link to pay by paypal.  If it works, they may be the one to go with.   Tequipment is not ready for the international crowd of EEVBLOG.

I send them all that a couple of days ago, but I haven't heard anything since.
I ordered back when they still had 12 of them in stock, but I doubt they reserved one or anything :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 02:51:46 pm

@Thread:
Just as clarification: I ment not modding the battery (flimsy plastic stuff) but to machine a replacement counterweight with overize on the front so there's place to add a thread into the metal part - but I'm not totally sure on the stability of the holding posts inside the grip.
Don't have it to hand but ISTR the plate has a slot that the case moulding sits inside all the way round, so as long as any adaptor avoided any major leverage it would probably be OK. It is a fairly complicated shap though - suppose you could make a casting from it. The scres are seltappers though so would need to be careful.

Another option may be a dummy/alternate battery - as it sits quite a way inside it should be stable and you could add an external power-in socket while you're at it.
It should certainly be feasible to 3D print a dummy battery plug for a crude tripod+power mount.
When it's tethered to USB I don't think it pulls enough current to keep it running indefinitley, so you probably need external power for timelapse recording.
 
And at some point we may see cheap Chinese clone batteries appearing, which would be a source for moulded parts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 08, 2013, 02:53:32 pm
Addressing Mike's annoyance that several keys are not mapped when using the device: :

In the desktop.qml there is the handling of the buttons.
I guess you could add your functions here..
Quote
There is this eg...
[..]
  // Touch and keyboard handling
    MouseArea {
        anchors.fill: parent
        onPressed: {
            if (!menus.menuOpen)
                longTapTimer.start()
        }

        onReleased: {
            // this is slighly tricky, the longTapTimer opens the menu, quickly followed by
            // the onReleased being called when the user releases the mouse. We have to avoid
            // closing it immediately after opening.
            if (menus.activeMenu === Menus.ZoomPopupMenu)
            {
                // but later, if the user clicks again, we have to close the zoom popup again
                // on single click.
                if (!longTapTimer.running)
                    menus.closeMenu();
            }
            else
               menus.toggleMenu(); // open the main menu
            longTapTimer.stop()
        }
    }

[..]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 03:15:43 pm

The repackaging script works perfectly ...
Flir logo: gone
Missing Icons: they all show up now (extra images came from the Exx series firmware) :)

I'll do some alpha tests, then release all changes as one package

Note: do not blindly merge/overwrite with Exx-QML files - I did some diffing, the code has relevant differences and will not work out of the box.

Attachment: use only if you know what you're doing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 03:25:40 pm
A tool is certainly useful - the lens position complicates it as to have a tool that lets you turn while looking at the screen, without your fingers obscuring the view, it will need to be a sort of funnel shape. As the only thing the tool can grab is the curved notches in the lens, I'm pretty sure a plastic 3D print wouldn't have the edge definition - maybe a stereolithoraphed tool but not sure if it would be strong enough.
You probably want the end to be plastic to avoid damage to the lens housing.
I'm exploring some solutions - best I have so far is a cut-down PL259 plug sleeve and a polymorph moulded end.
I think something may be viable with a disc of PCB material and 2mm acrylic rod, but that doesn't solve the taper requirement to make it adjustable without fingers in view. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 03:36:12 pm
A tool is certainly useful - the lens position complicates it as to have a tool that lets you turn while looking at the screen, without your fingers obscuring the view, it will need to be a sort of funnel shape. As the only thing the tool can grab is the curved notches in the lens, I'm pretty sure a plastic 3D print wouldn't have the edge definition - maybe a stereolithoraphed tool but not sure if it would be strong enough.
You probably want the end to be plastic to avoid damage to the lens housing.
I'm exploring some solutions - best I have so far is a cut-down PL259 plug sleeve and a polymorph moulded end.
I think something may be viable with a disc of PCB material and 2mm acrylic rod, but that doesn't solve the taper requirement to make it adjustable without fingers in view.
Mike as you tried it already: how many 360° turns (approx.) does the lens need to focus down to lets say 10cm (4")? Just one or two or rather ten?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 04:00:33 pm
Hmmm, I have been doing some research on FLIR's past response to hacking by the general public.

It isn't looking good so potential purchasers should think about buying an E4 sooner rather than later.

The FLIR SCOUT PSxx handheld series comes in different versions with a significant price difference associated with more features. One such extra feature is composite video output. Users discovered that there were four gold contacts on the bottom of the unit. Two are the power supply input and the other two turned out to be composite video on all models including those that supposedly did not have the option fitted. Many users built simple contact plates that fitted to the nits base and tapped off the video feed.

http://www.predatormastersforums.com/forums/ubbthreads.php?ubb=showflat&Number=2418562&page=all (http://www.predatormastersforums.com/forums/ubbthreads.php?ubb=showflat&Number=2418562&page=all)

http://www.ar15.com/forums/t_6_18/400168_.html (http://www.ar15.com/forums/t_6_18/400168_.html)

FLIR's response..... they removed the composite video contacts on the lower end models and so forced users t open the unit to hack it internally.

..but they left the feed available internally.

Any way to get 320x240 from an E4 without soldering to it, even via serial console or service mode is a major win - everything else is icing.
The E4 target market is probably somewhat different to nigh-vision so attitude may be different in either direction.
ATAR issues on night vision scopes may also affect policy - I wonder if external video has any affect on export classification.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 04:01:58 pm
Menu mod - Beta 3 - see attachment if you're an advanced user

EDIT: ATTENTION - NOT FOR 2.x or higher firmware - there do exist other solutions for recent cameras!

EDIT: Beta3 added - digital zoom, MSX fine-tuning, condensation (rel. hum) values can be changed
If you want the newest and brightest then you just need Beta3!

EDIT: Beta2 added with patched color palettes (thanks Peter) - see https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg331132/#msg331132 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg331132/#msg331132)
That patch fixes crashes in Lava and Arctic palettes (an BETA1 issue)
Beta1/2 screenshots: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326292/#msg326292 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326292/#msg326292)

Notice to MAC users only: Flir Tools seem to ignore your camera if you don't switch back your USB mode after applying the hack.

If you need additional instructions how to install the patch, then take a look here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426)

EDIT: Removed outdated downloads:
* ADDMENU-BETA1.zip (473.5 kB - downloaded 102 times.)
* ADDMENU-BETA2.zip (473.58 kB - downloaded 87 times.)


DOWNLOAD BELOW
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 08, 2013, 04:08:38 pm
Just got an update from Tequipment. Estimated Ship Date: 12/04/2013.
So much for ordering it when they still had stock  :-\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 04:10:46 pm
why don't you cancel and order somewhere else where they have stock?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 04:23:05 pm
Re. caps settings - I tried your last version last night with my standard e8.cfg and didn't notice anything obviously not there - will recheck later.
I assume you just do an 'enable everythng' in the .cfg to make sure.

You made a comment re. issue with advanced measurements & pallettes maybe having issues - one potential clash is fixed temp mode and user-settable palette thresholds, both potentially use the up/down buttons - One would hope that this works with the left/right buttons just selecting between all 4 functions instead of 3 in fixed mode - something worth checking!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 04:30:04 pm
At least with the new UI hacks there now isn't really any reason to ever update firmware on current units - I can't think of anything they could add that would make it really worth the risk.
As regards new units - it's just a case of wait & see. It does seem like the distribution pipeline is pretty short judging by cal dates we've seen, but any software change would go through their internal QA process.
May be interesting to look at file dates  on 1.19.x firmware as that is the latest release seen.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 08, 2013, 04:34:12 pm
why don't you cancel and order somewhere else where they have stock?

That sounds like a good idea. If I can find somewhere that still has stock.
Might have to phone around.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 04:52:40 pm
why don't you cancel and order somewhere else where they have stock?

That sounds like a good idea. If I can find somewhere that still has stock.
Might have to phone around.
You can still order somewhere else where it is on stock. Just wait to cancel the other order until you received your unit. With the current ship date you've been told you have plenty of time. But even Flir-direct who had stock until today is now out of stock for the next 2-3 weeks and as far as I can see, all stock in Germany is also gone by now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 08, 2013, 04:57:15 pm
why don't you cancel and order somewhere else where they have stock?

That sounds like a good idea. If I can find somewhere that still has stock.
Might have to phone around.
You can still order somewhere else where it is on stock. Just wait to cancel the other order until you received your unit. With the current ship date you've been told you have plenty of time.

Just got off the phone with Ivy Tools. They had one in stock that they'd put aside for me, and said if I ordered now they'd ship it first thing on Monday.
Ended up being a little more expensive, but in the end I'd call it a win  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 08, 2013, 05:01:23 pm
shopflir.com claims to have 2 in stock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 05:11:59 pm
How hard would it be hard to write custom firmware for a thermal camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 05:16:34 pm
Ended up being a little more expensive, but in the end I'd call it a win  :)
Good decision!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 08, 2013, 06:53:14 pm
My unit arrived yesterday afternoon (test equipment depot), ordered Tues.

Played with it for a few minutes in its 'e4' resolution and was underwhelmed. Performed the mikehack and it certainly makes it a tool versus a toy (imho). Resolution of course much improved as well as the overall image quality.

I've ordered a ZnSe lens on ebay, so hopefully in a couple of weeks I'll me able to use it for close up work on small PCB's. Right now at 0.5m it is 'ok' but not particularly great. A monocle is definitely needed for my application.

I haven't tried to fiddle with the built in lens - since I assume it wouldn't allow for close up work even if 'adjusted'. I'm looking to be able to get focus from 3 - 4" range. Am I right in assuming the ZnSe monocle is the right choice?


WRT FLIR E4 sales, yeah, I figure it is hurting their competition a lot more than it is FLIR...

A finally, I'm really really impressed with the hacking ability (and persistence) of a bunch of folk in this thread, kudos to all!

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 07:01:53 pm
Fluke is offering huge rebates on their VT02 and VT04 units as part of their recent promo: http://www.testequity.com/documents/pdf/VT02-VT04-rebate.pdf (http://www.testequity.com/documents/pdf/VT02-VT04-rebate.pdf)

I wonder if this thread had anything to do with it. 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on November 08, 2013, 07:11:58 pm
Just a few quick questions regarding the E4 after mucho hacking success:

Is it possible - with the most recent hack - to manually select Temperature Level in camera?

Is it possible to select - in camera - Temperature Span? And, if so, what is the minimum span? 2.5 degrees C or less is good.

If I didn't already own a Fluke TiR, I would probably buy this E4 thing, solely due to Mike and the Mechanic's hack. I am pretty happy with the TiR's manual focus, level control and -span.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 07:18:00 pm
Post 1000
That is all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 07:20:58 pm
Just a few quick questions regarding the E4 after mucho hacking success:

Is it possible - with the most recent hack - to manually select Temperature Level in camera?

Is it possible to select - in camera - Temperature Span? And, if so, what is the minimum span? 2.5 degrees C or less is good.
With Taucher's hack, yes, but it's still in beta test.
You can't exactly set span around a centre value, but you can set the high and low ends of the scale seperately, and also together to set the centre while keeping the same span.
From memory minimum span is not as low as 2.5 - don't have it to hand but I think somewhere between 5 and 10
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 08, 2013, 07:29:40 pm
Post 1000
That is all.

Some threads are just long, this one is also extremely useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 08, 2013, 07:36:05 pm
And I actually read each and every one of them. :O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 08, 2013, 07:42:16 pm
It's the velocity of this thread that's quite amazing! Still waiting for the Tequipment order to arrive at the "agent" in the US. Well, I guess it had to go from one side of the US to the other on free shipping.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on November 08, 2013, 07:55:06 pm
Is the Thermal Sensitivity (or Minimum Detectable Temperature Difference (MDTD)) affected by the M&M hack? If we are talking <0.06°C, like the E6 and E8, it would be pretty impressive.

This is of course of no importance to electronics troubleshooting.

Flir E-series specs source: http://www.flir.com/thermography/americas/us/view/?id=61194&collectionid=830&col=61196 (http://www.flir.com/thermography/americas/us/view/?id=61194&collectionid=830&col=61196) )

Enclosed is a picture of my Yanmar 1GM10 sea water cooled engine as I did the winter conservation procedure in late October.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 08, 2013, 08:23:40 pm
Add me to the list of E4 buyers due to this thread. Now the question is how many toys do I need to sell to break even on this purchase? Hope it ships today or Tue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 08:50:15 pm
At least with the new UI hacks there now isn't really any reason to ever update firmware on current units - I can't think of anything they could add that would make it really worth the risk.

Full ack  ;D

This also reminds me to do a diff in order to check what got touched between the FW releases  >:D

EDIT: Btw. - the .rcc format supports both: embedded and... that won't work - mixed up .rcc with .qrc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 09:32:07 pm
Is it possible to select - in camera - Temperature Span? And, if so, what is the minimum span?
With Taucher's hack, yes, but it's still in beta test.
You can't exactly set span around a centre value, but you can set the high and low ends of the scale seperately, and also together to set the centre while keeping the same span.
From memory minimum span is not as low as 2.5 - don't have it to hand but I think somewhere between 5 and 10

It's 4°C minimum span between Min and Max
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on November 08, 2013, 09:40:25 pm
if anyone is still afraid to permanently hack his\her i3\i5 here is simple step by step guide

read post #524 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

1. power on camera

2. press menu button once

3. press play (gallery) button for 5 seconds

4. switch to RNDIS usb mode

5. install flir drivers on your pc

6. connect camera to pc, give it a minute to install and start

7. connect to camera's ftp server at 192.168.0.2 user:flir password:3vlig with ftp client capable of passive mode i.e. total commander

8. make full backup of filesystem to a secure location

9. download mike's crc01 tool from this https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) post

10. install some proper text editor i.e. notepad++ (and enable showing all characters in view \ show symbols)

11. open backup\FlashFS\system\appcore.d\config.d\conf.cfg

12. remove last line that says
Code: [Select]
# CRC01 ????????

13. replace number at the end of   ||.caps.config.image.settings.resIR int32 X||   with value from   ||.caps.config.image.settings.fpgaResolution.resIR int32 X||*

14. save changes as new file

15. use crc01 to calculate checksum of this file

16. open backup\FlashFS\system\appcore.d\config.d\conf.cfg file again, do the same resolution modification and replace checksum with calculated one

17. save changes as new file that you will upload to camera (in extra step i have changed attributes and date & time of new file to be the same as old one, but this is most likely unnecesary)

18. connect to ftp again, and upload created file overwriting one that sits in \FlashFS\system\appcore.d\config.d\conf.cfg (or check mike's post just under this one and let us know)

19. unmount & disconnect camera, use reset button in battery compartment to reboot it

it worked for me, i don't take any responsibility for anything but merely sharing what i did described as good as i could, do it at your own risk


*
Code: [Select]
* Z-cam has a detector with 80x80, 120x120 or 144x144 pixels.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 08, 2013, 09:53:49 pm
Are the FLIR drivers/software (as in everything necessary for the hack) provided on disk with the camera? If not, better get downloading soon before they have a chance to change them online.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 09:54:59 pm
18. connect to ftp again, and upload created file overwriting one that sits in \FlashFS\system\appcore.d\config.d\conf.cfg
If it's like the E4, you don't need to overwrite the old file, just give it a name that's higher alphabetically - the later file will override the normal one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 08, 2013, 09:57:21 pm
Just installed Beta2 Hack.
THIS IS AWESOME. THANK YOU to all!!!!!!!
I am grinning  ;D all the time!


I created a new edited startup logo. As the E4 now became a E8 but with even more features I thought, I should call it E8+ which now appears in the logo. Just replace if you like. Of course it will violate the Flir CI/CD rules, but who cares. At least their logo is still present. Their logo should stay as they own respect for what they are offering for such a low price including all the open doors for hacking. If you read this Flir-managers: I thank you. At least from my side you just made extra revenue and you did not loose any money, as I would not have purchased a 80x60 IR camera for $1000 and neither a 320x240 for $5000. But 320x240 for $1000 was reasonable for me. With the extended features I am totally happy now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 10:08:46 pm
Just did the diff what changed during the last firmware update:

FlashBFS\system\web\inc\camtype.inc
-   
Code: [Select]
var CamType   = "Z3";
var CamFamily = "FLIR Astra";
var CamImage  = "Z3_Astra.jpg";
Code: [Select]
var CamType   = "P";
var CamFamily = "ThermaCAM";
var CamImage  = "flirtrans.gif";

FlashBFS\system\web\service\ppr.asp
-
Code: [Select]
<body id="PPRLog">+  (did they really add a bug/typo?!)
Code: [Select]
<body id="PPRLog"">
-
Code: [Select]
2013-09-19 14:20:51 Production problem report started 
2013-09-19 14:20:51 Information Torrent: End of operations, program complete  <a href="PPRI.htm#999">more info</a>
+
Code: [Select]
No problems reported here( yet ), maybe you can find some info in file "/FlashFS/tmp/prod.log"   

 :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 10:12:04 pm
Just did the diff what changed during the last firmware update:
By latest do you mean 1.19.8 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 10:21:26 pm
Just did the diff what changed during the last firmware update:
By latest do you mean 1.19.8 ?
good point - I compared my camera which @menu reports 1.18.7 to the contents of
flir_ex_pn639_v1.18.7_update_pack / Z3comb_v1.18.7.fif
Didn't see any 1.19.8 links/packs online yet.

the above file leaves the kits untouched:
appkit.rev - VERSION 1.0.13 DATE 14-Aug-2013
prodkit.rev - VERSION 1.0.0.7 DATE 20-Aug-2013

PS: couldn't compare NK files/contents yet - just FlashBFS
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2013, 10:51:34 pm
Yes there is space in the battery base for a tripod mount - this is s 3/8" adapter ground down to 8mm and epoxied into a hole drilled in the base.
One minor issue is that as the lens is angled, to get a horizontal view you need to tilt the tripod head.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 08, 2013, 11:04:12 pm
The USB ID's for the various modes:

Code: [Select]
RNDIS and UVC        : 09cb:1005
...
RNDIS, UVC and MSD   : 09cb:1005

So, how does that work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 11:20:09 pm
I did some screenshots (VLC -> direct show capture) showing the camera's BETA1 menu/features - examples how it looks here (might vary depending on your caps settings) .. there are some minor issues like when selecting hot/cold spot then the palette gets set to gray (might be related to order of menu items).
I've also noticed that my cam loses lang-settings when cold starting... but no deal-breakers :)

ATTENTION: AVOID FIRMWARE 1.21.0 or higher!

Attachment: zips contain everything (following postings due to size limits)
Images: peek preview/examples for the zip contents

Follow this link to get the current menu-hack:
>>>click-here>>> Additional menu-items / ADDMENU-BETA 3 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)


EZCRC01 - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)

How to extract RCC (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934)
How to repack RCC (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 11:26:07 pm
Attachment 1/4
Attachment 2/4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 11:30:29 pm
Attachment 3/4
Attachment 4/4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 08, 2013, 11:34:11 pm
The USB ID's for the various modes:

Code: [Select]
RNDIS and UVC        : 09cb:1005
...
RNDIS, UVC and MSD   : 09cb:1005
So, how does that work?

That are just USB ID's in case somebody wants to investigate into the USB stack
UVC will add a windows direct show imaging device (Video Capture)
MSD will add a Mass Storage Device - like a USB stick
RNDIS will provide a Network interface

Combinations of those modes will provide a combined device with subdevices

Note: the mode where all three are together does NOT work reliably - known limitation/failure
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SPRX on November 08, 2013, 11:56:12 pm
Thanks to Mike and all the others folks in this Awesome thread !!!!

Has anyone ordered/bought Flir E4 from Australia ? or any ausi source?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 12:15:45 am
Note: the mode where all three are together does NOT work reliably - known limitation/failure
I wonder if this may be a problem with  T3Mon - the util that gets installed with the Flir RNDIS drivers to provide a virtual drive over RNDIS. ISTR a bit of a punch-up going on when it is running and MSD is enabled.

However if you do have T3Mon there is no need for MSD as it provides the same functionality. Just means you can't plug into a PC without RNDIS driver.
But now we know how to get to the secret menu it's no big deal
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 12:22:30 am
Just installed Beta2 Hack.
THIS IS AWESOME. THANK YOU to all!!!!!!!
I am grinning  ;D all the time!

I created a new edited startup logo. As the E4 now became a E8 but with even more features I thought, I should call it E8+ which now appears in the logo. Just replace if you like. Of course it will violate the Flir CI/CD rules, but who cares. At least their logo is still present. Their logo should stay as they own respect for what they are offering for such a low price including all the open doors for hacking. If you read this Flir-managers: I thank you. At least from my side you just made extra revenue and you did not loose any money, as I would not have purchased a 80x60 IR camera for $1000 and neither a 320x240 for $5000. But 320x240 for $1000 was reasonable for me. With the extended features I am totally happy now.

Don't know where you got a Beta2 (it's still 1)  ;D ... but you're welcome :)

I totally agree that Flir most likely hasn't lost any revenue due to the E4-E8 hack - it's understandable that someone in their marketing department developed some ingenious idea how to milk the market by artificially spoiling the product (obviously they did not learn from Steve Jobs - make ONE product (per segment), but make it really really great).

Milking schemes have one negative issue: every customer ends up thinking "ouch, that really hurt ... bloody bastards ripping me/us off".
Even the E4 isn't a cheap product - but I can guarantee that nobody here was going to buy an E8 ... and from what I count there were already 50+ E4 sold...

Lesson learnt: if you milk the market, ensure that the cow is happy with it!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 12:26:48 am
Note: the mode where all three are together does NOT work reliably - known limitation/failure
I wonder if this may be a problem with  T3Mon - the util that gets installed with the Flir RNDIS drivers to provide a virtual drive over RNDIS. ISTR a bit of a punch-up going on when it is running and MSD is enabled.

However if you do have T3Mon there is no need for MSD as it provides the same functionality. Just means you can't plug into a PC without RNDIS driver.
But now we know how to get to the secret menu it's no big deal

Not to forget that RNDIS itselt already provides a SMB share that's kind of to MSD ... with the improvement that one can take snapshots while the drive is mounted over USB :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 12:27:23 am
Just a thought on the mystery of the higher temperature resolution spec for the E6/8 - I wonder if they just reduce the amount of noise they add - anyone have access to one to dump the conf.cfg file?
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 12:39:28 am
Just a thought on the mystery of the higher temperature resolution spec for the E6/8 - I wonder if they just reduce the amount of noise they add - anyone have access to one to dump the conf.cfg file?
That's my assumption all along... spec sheet ... :bullshit:

Btw - while playing with the menu I've read some fragments that contained "time lapse" ... if somebody wants to dive into that...
... and I'll probably declare the menu Beta1 an useable state and leave it at beta1 - at least for some time now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 09, 2013, 12:49:47 am
I just spoke to someone at tequipment.net. They will (supposedly) be getting 75 new E4 cameras in next week. One of those will be mine :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 09, 2013, 01:01:27 am
And another E4 sale based purely on Mikes original teardown before the hack.  I was impressed with the edge detection overlay, but the full resolution hack is very tempting to apply when it arrives.

Hopefully Flir will know that when the technical geeks get affordable test equipment they tend to stick with that brand due to familiarity.  It certainly didn't do Microchip any harm when they made microcontroller development tools affordable for the masses.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 09, 2013, 01:07:41 am
I just spoke to someone at tequipment.net. They will (supposedly) be getting 75 new E4 cameras in next week. One of those will be mine :)

 :palm:

I just ordered another one from TEquipment.  My brother in law loved my i7 and an E4 will make a great present. 

FLIR is going to bankrupt me  :-DD

For what it's worth to the FLIR people reading, I would have not bought EITHER of my E4's if it was not for the hack, nor would I have bought any camera from you.  I was fine with my i7, but the hack made it too good to pass up, so I've bought two.

Please consider the popularity of this camera due to the hackability, as well as the fact that none of us would have bought an E8 (most of us would not have bought an E4 either), if it were not for this hack.  You are not losing money, you are gaining a shitload of sales!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 09, 2013, 01:31:04 am
Quote
For what it's worth to the FLIR people reading, I would have not bought EITHER of my E4's if it was not for the hack, nor would I have bought any camera from you.  I was fine with my i7, but the hack made it too good to pass up, so I've bought two.

Please consider the popularity of this camera due to the hackability, as well as the fact that none of us would have bought an E8 (most of us would not have bought an E4 either), if it were not for this hack.  You are not losing money, you are gaining a shitload of sales!

I'll second that; I had no intention on purchasing a thermal imager prior to reading about this hack.

FLIR, what you really should consider, is that the type of people who were going to purchase an E8, still will purchase the E8. These are people who are spending other people's money to buy it! Big corporations that have inspection requirements; they will not risk breaking the law over a few thousand dollars, nor do they care about charging the company more money for the legitimate product. Don't officially encourage this hack, but don't actively counteract it either. Just enjoy your E4 sales... every retailer is out of stock -- this publicity is working in your favour!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 09, 2013, 02:08:39 am
Here's a special logo image you might want to use ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 02:28:31 am
Huh. Windows 7 doesn't have a CRC01 function built in.

Code: [Select]
'CRC01' is not recognized as an internal or external command, operable program or batch file.
take a closer look inside e4hack3b.zip 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 09, 2013, 03:46:52 am
Has anyone ordered/bought Flir E4 from Australia ? or any ausi source?

I bought mine from www.instrumentcatalog.com.au (http://www.instrumentcatalog.com.au) for about $1350+gst. They also have a lowest price guarantee, if you find it cheaper after purchasing.

They had them in stock; bought on Wednesday and received it on Friday (Adelaide to Sydney). Haven't had time to upgrade mine yet but will do so early next week.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 05:28:27 am
Well.

... did you find crc01.exe inside the archive?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 09, 2013, 08:40:15 am
Don't know where you got a Beta2 (it's still 1)  ;D ... but you're welcome :)
Well, you are hacking the E4 ..... I hacked your computer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 09, 2013, 08:40:54 am
noooooo - just kiddin' :phew:
It was just a typo
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 08:52:49 am
... and I'll probably declare the menu Beta1 an useable state and leave it at beta1 - at least for some time now.
I've added a link form the start of the thread - once a few people have had a chance to test I'll do an install/uninstall script for easy installation.
BTW everything seems to work with no mods to my e8.cfg file.
I must get round to looking at the startup boot text to see if anything useful is saying "not adding item due to caps"

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 11:00:10 am
Some minor issues with menu hack

when menu opened, SD card and wireless icons appear alongside battery  neither is useful

Is Temp scale->unlock useful? seems the same functionality can be had by switching to auto or manual modes

Rainbow high contrast palette seems to be same as white hot

I've had it lock up a couple of times while scrolling around palette menu  - after to cold restart by long button press I got an "application error" popup window onscreen during boot. Removing battery seems to fix.

Could this be a missing pallette file  or menu error for Rainbow High contrast?

What I currently have on the E4 is arctic,iron,lava,rainbow and rainHC,.

Also noticed that if I select RainbowHC and exit (when it doesn't hang), on re-entry to colour menu it shows palette as Interval, so I think something may be wrong with the RainbowHC option

I think your latest zip also omits the rainHC.pal file - I have it on my E4 but wasn't on the original files I backed up a while ago so not sure where it came from - maybe an earlier version of the menu hack zip?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 11:12:27 am
I note the comments directed at FLIR company readers.

There may be a sting the tail of this story though.

No inside information, but has anyone considered that FLIR may actually be making a LOSS on each sale of an E4 ? It may sound crazy but it is a valid business plan if you have other products offsetting the predicted loss, and you gain market dominance through the loss making product.  Other products (not FLIR) have also been deliberately sold at a loss to squeeze out the competition.

If this is the case, the E4 sales will have been a major success but would also potentially have caused a deviation in the monthly predicted loss figure for the model against which not enough of the products making a profit will have been sold to offset the loss.

I am no accountant, but I know they wield a lot of power in companies. Lets hope they are happy with the situation.
I can't really see it being the case here - it's not like someone buying an E4 is in any way locked in and likely to produce future sales. Obviously the margin is a lot lower on the E4, and your chat with PASS indicates that dealer margins are also tight, but considering that TICs around this price and resolution (with higher res sensors) have been around a while, the price isn't so low as to be anywhere near implausible.
The detector is clearly a shared development from automotive applications, and probably also night-vision/consumer gun sights where size and weight are important.
We've seen that they have clearly leveraged a large proportion of the dev costs from earlier models, so most of the unique dev costs on the E series are PCB etc. and case mouldings.
..and if their aim is to gain market share by undercutting the competition, they've clearly succeeded way more (or at least faster) than they could have hoped for. The Fluke visible thermometer products looked pretty poor value when they came out, and are now just dead ducks until they slash the price substantially.
Quote
Probably a poor example but British Leyland lost money on every Mini they sold !
I think that one was down to cockup rather than conspiricy.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 09, 2013, 11:42:16 am
heh, i arrive back in NZ after doing xray machine repairs in Australia for a week and get all nice and comfy on the sofa in front of projector, ready to catch up on TV shows i missed.
But instead i spend 2+ hours reading the 20+ of extra pages in this thread.
Sigh.

I'm still yoyo'ing between being ready to order an E4 vs putting the money towards saving for a house.
Part of me thinks the thermal camera market will be getting cheaper in the next 5 years and i'd be better waiting. It really would be a awesome toy/tool, but like others have said it would sit on the shelf most of the time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 11:52:34 am
I found the issue with the rainbow high-contrast - I noticed  a comment in the XML about lower case - my file was named rainHC.pal - renaming to rainhc.pal has fixed it.
I think either I didn't re-copy the palette files for the latest version, or my FTP client didn't distinguish case.

However I have again managed to repeat the crash by moving around the palette menu - as the menu is quite sluggish it could be something silly like an input queue overflow.

A new feature I did notice - now that the colour menu is so long it's a bit tedious clicking through it, but if you press & hold the left/right, it goes direct to the first/last item
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 09, 2013, 11:56:02 am
Buy the E4 and then you can inspect the prospective houses and be more informed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 09, 2013, 11:57:13 am
Buy the E4 and then you can inspect the prospective houses and be more informed.

chicken and egg

I also quite like the cold, so finding where heat is escaping isn't a compelling reason :)

Actually, i should elaborate. I like being warm in the cold :)  nice warm bed with cold air all around.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on November 09, 2013, 11:58:21 am
Quote from: Psi
I'm still yoyo'ing between being ready to order an E4 vs putting the money towards saving for a house.   
OR you can take your FLIR with you when looking for houses to reveal faulty insulation / wiring / heating / cooling systems
AND POTENTIALLY  save you 10s of 1000s of $$  Looks good now doesn't it?
Quote from: Psi
Part of me thinks the thermal camera market will be getting cheaper in the next 5 years and i'd be better waiting. It really would be a awesome toy/tool, but like others have said it would sit on the shelf most of the time. 
I can't see them dropping much as the "professional" market will always be far larger than the piddly numbers happening here,
plus there's a risk that all future models will be hack-proof !!!! eeep
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 12:03:53 pm
Quote from: Psi
Part of me thinks the thermal camera market will be getting cheaper in the next 5 years and i'd be better waiting. It really would be a awesome toy/tool, but like others have said it would sit on the shelf most of the time. 
I can't see them dropping much as the "professional" market will always be far larger than the piddly numbers happening here,
plus there's a risk that all future models will be hack-proof !!!! eeep
It is inevitable that the price of 320x240 cams will drop significantly at some point as lower-res cams have been using 320x240 sensors for a while - just a case of who jumps first - as there is at least one Chinese manufacturer of sensors I'm surprised it hasn't happened already. Flir is heavily targetting new low-end markets in electrical and building with teh E series, so it's only a matter of time before others realise there's volume to be had here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 09, 2013, 12:05:12 pm
I can't see them dropping much as the "professional" market will always be far larger than the piddly numbers happening here,
plus there's a risk that all future models will be hack-proof !!!! eeep

I very much doubt Flir will bring out a ~$400  ~320x240 TIC,  but we might see china ones.

I'm sure they will update the firmware to try and stop the hack eventually, probably for legal reasons more than anything else, but my guess is we probably wont see those units in the wild for a few months, maybe longer.

I suspect their attitude is more... "hehe, we're going to have to fix that"  rather than a blind panic to get a new firmware out
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 12:19:42 pm
Something interesting in Rainbow High contrast mode - you can see a few pixels gradually drifting which then disappear when it calibrates. These can be seen quite easily by setting manual temp span to minimum and slowly panning around an out of focus scene - you see them at the transitions, and to a lesser extent as a fixed pattern over the image.You can also see them with the lens cap shut.

This gradually increases towards the end of the cal period - incidentally I think it adjusts the cal interval based on rate of change of ambient, as it definitely slows down a few mins after powerup.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 09, 2013, 12:55:54 pm
The USB ID's for the various modes:

Code: [Select]
RNDIS and UVC        : 09cb:1005
...
RNDIS, UVC and MSD   : 09cb:1005
So, how does that work?

That are just USB ID's in case somebody wants to investigate into the USB stack
UVC will add a windows direct show imaging device (Video Capture)
MSD will add a Mass Storage Device - like a USB stick
RNDIS will provide a Network interface

Combinations of those modes will provide a combined device with subdevices

Note: the mode where all three are together does NOT work reliably - known limitation/failure

Thanks, Taucher.  I was aware of the abbreviations, but I'm sure that will be helpful for others. 

The point I was trying to make (evidently too obliquely :)) was that the PIDs on those 2 USB IDS are the same, though the protocols enabled are different.  I wasn't sure if one was a typo or what.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 09, 2013, 01:06:23 pm
Even the E4 isn't a cheap product - but I can guarantee that nobody here was going to buy an E8 ... and from what I count there were already 50+ E4 sold...

That's true.  However, I would not be at all surprised to find that there's someone in Sales over at Flir telling management that "Those guys over in that hacking forum just cost us over a quarter-Million USD in profits in the last 2 weeks alone".  :( 

The fact that that is completely false doesn't change the situation that different folks see things in different ways, and for some, that will be their perception.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 09, 2013, 01:13:28 pm
I would not be at all surprised to find that there's someone in Sales over at Flir telling management that "Those guys over in that hacking forum just cost us over a quarter-Million USD in profits in the last 2 weeks alone".  :( 

hehe, yeah
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 09, 2013, 01:19:51 pm
Buy the E4 and then you can inspect the prospective houses and be more informed.

No kidding!  You can spend $400 for a home inspection, and still not have them spot hidden, internal things like pest infestations, or water intrusion, etc.  A walkthrough with an E4 could net you $thousands$ in pricing accommodations, OR tell you it's time to walk away.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 01:22:43 pm
Mike,

The drift in pixels is normal and my PM695's do exactly the same. It is the downside of the micro-bolometer technology, and always has been. That is why cryo cooled cameras are so nice to use.....clean images, no pixel drift to be seen. The calibration routine should become less frequent as the detectors temperature stabilises, but this can take a while as there is hysteresis in the system and some initial over/undershoot on the Peltier module.

The comment on TICs becoming cheaper is interesting. One area that is buying into thermal camera technology is the car industry. Its use is safety of pedestrians/animals and predictive braking systems. We could see a large increase in TIC deployment in cars over the coming years. It may follow the model of other safety systems such as air bags and lane dicipline cameras. That can only be good news for TIC fans as more production into a larger market should bring innovative technology and lower prices ? In the UK we did not have 'expensive' air conditioning as standard in our cars. These days it comes as standard on many models sold in the UK and is not the expensive option that it was. It is also more refined, in the form of climate control  :)

I read of a new 80x80 mini TIC called the Atom80 that has just been released. It is designed for the less demanding TIC needs of the marketplace. No idea of cost though. Sofradir is a big player in TICs. It looks like a 'camera on a chip' type solution  :)  Could be fun to play with, but I doubt its cheap at the moment.

http://www.sofradir-ec.com/landing_atom80.asp (http://www.sofradir-ec.com/landing_atom80.asp)


UPDATE:  To save you registering on the site, I attach the ATOM80 datasheet here.
Info on the sensor, from their subsidiary ULIS
http://www.ulis-ir.com/index.php?infrared-detector=MICRO80P-044 (http://www.ulis-ir.com/index.php?infrared-detector=MICRO80P-044)
Bizarre statement in the brochure claiming 2 years on 2xAA cells, and on the same page <25mW  - clearly some cockup there...
Wouldn't surprise me if we see TICs based on this soon.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 09, 2013, 01:24:30 pm
No kidding!  You can spend $400 for a home inspection, and still not have them spot hidden, internal things like pest infestations, or water intrusion, etc.  A walkthrough with an E4 could net you $thousands$ in pricing accommodations, OR tell you it's time to walk away.

Likely the average home owner would just think your trying to scam them out of money, if doing it yourself.

But yes, would make you a more informed buyer at minimum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 09, 2013, 01:29:16 pm
A manufacturer wants its customer base to 'trust' it, and its products. This thread kind of introduced an element of doubt that FLIR will not wish to see extended into its more expensive products. I would not wish to be the salesman visiting a factory to demo a TIC and getting bombarded with questions about hobbling and hacking of firmware  :scared:

Why would being hackable lose any customer trust?  99.999% of customers will never even know and 1/2 of the people reading this thread only bought one cause they could hack it, IMO they've lost nothing and only benefited by selling a few extra E4s.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 09, 2013, 01:35:23 pm
A manufacturer wants its customer base to 'trust' it, and its products. This thread kind of introduced an element of doubt that FLIR will not wish to see extended into its more expensive products. I would not wish to be the salesman visiting a factory to demo a TIC and getting bombarded with questions about hobbling and hacking of firmware  :scared:

Why would being hackable lose any customer trust?  99.999% of customers will never even know and 1/2 of the people reading this thread only bought one cause they could hack it, IMO they've lost nothing and only benefited by selling a few extra E4s.

Software crippled hardware rubs people the wrong way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 09, 2013, 01:38:39 pm
Software crippled hardware rubs people the wrong way.

Perhaps, ignorance is proliferating, at least in the US.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 09, 2013, 01:40:06 pm
Even the E4 isn't a cheap product - but I can guarantee that nobody here was going to buy an E8 ... and from what I count there were already 50+ E4 sold...

That's true.  However, I would not be at all surprised to find that there's someone in Sales over at Flir telling management that "Those guys over in that hacking forum just cost us over a quarter-Million USD in profits in the last 2 weeks alone".  :( 

The fact that that is completely false doesn't change the situation that different folks see things in different ways, and for some, that will be their perception.

And if the sales results/numbers for non E4 units ended up so bad that it deviates huge amount from the annual 2013 sales ... target performance of the whole "Sales & Marketing Dept.", someone up there at FLIR will be so pissed off, that he/she will likely bring the blame on the Tech & Design Dept.  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 09, 2013, 01:45:35 pm
dr-diesel

I have 'interviewed' FLIR salespersons on several occasions when they have been hawking a new product. To date I have had no reason to think that they hobbled units in firmware. The word is well and truly 'out' in the circles in which I move....industrial & Government techs are not dumb. We will ask FLIR for the best deal, and now be aware that they have employed hobbling to differentiate between models that intrinsically cost the same to produce. I have not seen such publicly proven before. Would you 'trust' a salesman who now stated that the E8 is an intrinsically higher spec product than the E4........before this hack, he/she could have done so without question. Doubt breeds awkward questions  ;)

I fully understand the economics of software crippling, almost everyone does it, it's nothing to be ashamed of.  From Scopes, to computer processors, to TICs, to you name it.

When I buy equipment for customers I buy based on their requirements and never suggest hacks, of any kind.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 01:53:35 pm
Looking at the pricing and features, compared to the Ex0 range and the competition I can't see how they ever expected to sell any E8's.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 09, 2013, 02:01:18 pm
I did some screenshots (VLC -> direct show capture) showing the camera's BETA1 menu/features - examples how it looks here (might vary depending on your caps settings) .. there are some minor issues like when selecting hot/cold spot then the palette gets set to gray (might be related to order of menu items).
I've also noticed that my cam loses lang-settings when cold starting... but no deal-breakers :)

Attachment: zips contain everything (following postings due to size limits)
Images: peek preview/examples for the zip contents

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (ADDMENU-BETA1.zip)

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934) (extracting RCC)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975) (repacking RCC)

Will be possible to add some parts of this BETA to Mick hack / new colors pal., condensation, isulation mode /?
Or could you help us - how to add this  to present system??

I like this BETA / watching on downloaded pictures - dont know how to add /

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 02:18:45 pm
I did some screenshots (VLC -> direct show capture) showing the camera's BETA1 menu/features - examples how it looks here (might vary depending on your caps settings) .. there are some minor issues like when selecting hot/cold spot then the palette gets set to gray (might be related to order of menu items).
I've also noticed that my cam loses lang-settings when cold starting... but no deal-breakers :)

Attachment: zips contain everything (following postings due to size limits)
Images: peek preview/examples for the zip contents

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (ADDMENU-BETA1.zip)

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934) (extracting RCC)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975) (repacking RCC)

Will be possible to add some parts of this BETA to Mick hack / new colors pal., condensation, isulation mode /?
Or could you help us - how to add this  to present system??

I like this BETA / watching on downloaded pictures - dont know how to add /

Thank you
At some point I was going to do a seperate  add/remove script for this, but wanted to wait a little first to see if there are any issues - I can make it lock up fairly consistently by flicking between palette options, but haven't seen any issue sin more sensible operation.
All you need to do is create a .zip (renamed to .fif)  with the file tree and a camera.cmd to add the files, and another to replace with the originals to un-hack.
A potential issue is that this hack may be more sensitive to different firmware versions than the E8 one.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr.diesel on November 09, 2013, 02:31:11 pm
I'm sure some people see it that way, it's unfortunate.  What I see if a manufacture that lowered overall costs (or maybe raised stock holder profits and screwed us.  ha ha) by intelligent engineering/manufacturing/integration.

In the end though, I bet your correct and they see it as an attack on their profits, even if it sold more E4s than lost E8s, in terms of actual income.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on November 09, 2013, 02:35:43 pm
Mike,

The drift in pixels is normal and my PM695's do exactly the same. It is the downside of the micro-bolometer technology, and always has been. That is why cryo cooled cameras are so nice to use.....clean images, no pixel drift to be seen. The calibration routine should become less frequent as the detectors temperature stabilises, but this can take a while as there is hysteresis in the system and some initial over/undershoot on the Peltier module.

The comment on TICs becoming cheaper is interesting. One area that is buying into thermal camera technology is the car industry. Its use is safety of pedestrians/animals and predictive braking systems. We could see a large increase in TIC deployment in cars over the coming years. It may follow the model of other safety systems such as air bags and lane dicipline cameras. That can only be good news for TIC fans as more production into a larger market should bring innovative technology and lower prices ? In the UK we did not have 'expensive' air conditioning as standard in our cars. These days it comes as standard on many models sold in the UK and is not the expensive option that it was. It is also more refined, in the form of climate control  :)

I read of a new 80x80 mini TIC called the Atom80 that has just been released. It is designed for the less demanding TIC needs of the marketplace. No idea of cost though. Sofradir is a big player in TICs. It looks like a 'camera on a chip' type solution  :)  Could be fun to play with, but I doubt its cheap at the moment.

http://www.sofradir-ec.com/landing_atom80.asp (http://www.sofradir-ec.com/landing_atom80.asp)


UPDATE:  To save you registering on the site, I attach the ATOM80 datasheet here.

Could you, or any other that's also interested in the price of Atom80 try make an inquiry at sofradir-ec? I've sent one a few weeks ago and still got no answer...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on November 09, 2013, 02:48:48 pm
Yeah, I've noticed that. Anyway, they should be able to provide at least a price range if not an actual price estimation. Though, I'll be surprised if it would be under 1K...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 09, 2013, 03:07:24 pm
Note that AFAIK there is no evidence that :
 - Lenses and sensors are not "binned" depending on their quality
 - The more expensive models could be going through more extensive testing / calibration to ensure their tighter specs
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 09, 2013, 04:43:03 pm
Making a piece of hardware, especially a test tool, is very costly and time consuming. There's not only the R&D to design the bloody thing, but there is also prototype testing, release candidate testing, compliance and requirement testing, safety approvals, EMC evaluations... It probably took them a few years to just design the one Ex camera. If they had to design an E4, E5, E6, and E8 camera all separately, with all different hardware, then it just wouldn't be feasible.

The big kicker for FLIR (or any company for that matter) is that they want to squeeze the most out of every buyer. They don't want to sell there camera to a person for $1k if you could of sold it to them at $6k. However, they also don't want to not sell a product at all that they could have sold for $1k. This is self evident, but the only way to bring prices down and get CEO's off their fat asses, is to force them to sell for less in order to stay competitive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 09, 2013, 05:06:26 pm
Interesting read that implies that people will be upset paying more for un-crippled hardware (e8 versus e4 pricing).

Yet it is very common in the software industry.

You download a large application, you pay a certain license fee and get an unlock code. You want more features, you pay a higher license fee, get a different unlock code and that opens more functionality. It's the same software. People live with this business model (ever priced some of the Synopsys tools??).  Just like you have to pay for FLIR Tools+ features.

Would people be happier thinking the E4, E5.. E8 hardware is free? What you are paying for is the software license fee and it costs more to get the higher resolution.

cheers,
george.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 05:14:16 pm
when menu opened, SD card and wireless icons appear alongside battery  neither is useful
yes, they suprized me as well - seems like as soon as the .rcc file contains the images, they will be shown
I didn't bother (yet) removing them as it might come handy for a further hack ;)
Is Temp scale->unlock useful? seems the same functionality can be had by switching to auto or manual modes
It does the same as the auto mode, true - but it's accessible with one click less
That item would be useful if one of the more advanced modes would work - like setting lower or upper limit and letting the system scale.
Rainbow high contrast palette seems to be same as white hot
rainHC.pal uppercase bug (in Exx series it's UC, in Ex it works just if lowercase hc) - you already found it :)
I've had it lock up a couple of times while scrolling around palette menu  - after to cold restart by long button press I got an "application error" popup window onscreen during boot. Removing battery seems to fix.
Could this be a missing pallette file  or menu error for Rainbow High contrast?
What I currently have on the E4 is arctic,iron,lava,rainbow and rainHC,.
Also noticed that if I select RainbowHC and exit (when it doesn't hang), on re-entry to colour menu it shows palette as Interval, so I think something may be wrong with the RainbowHC option
dito - it needs it's palette file in lowercase
another specialty seems to be related to delta measurements - seems like those two modes create files according to the stored presets (which didn't exist in Ex but Exx)
I think your latest zip also omits the rainHC.pal file - I have it on my E4 but wasn't on the original files I backed up a while ago so not sure where it came from - maybe an earlier version of the menu hack zip?
just checked the zip - rainhc.pal in lowercase included in Beta1 while Alpha up to 3 did include an uppercase version... wasn't windowsCE supposed to be case insensitive? :) (I suppose some Java Script inside the menu files isn't)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lukas on November 09, 2013, 05:19:03 pm
Any recommendations where to buy the E4 in Germany? Many resellers have it for 995€+VAT, whereas it's 995$ (=745€) in the US :( Does Tequipment ship to Germany?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 09, 2013, 05:31:00 pm
Any recommendations where to buy the E4 in Germany? Many resellers have it for 995€+VAT, whereas it's 995$ (=745€) in the US :( Does Tequipment ship to Germany?

I don't think they do. However, you could probably ask a trusted U.S. forum member to buy one for you, and then given them the money and cover the shipping costs. You can also ask them to ship the camera separately from the rest of the package if you're worried about nosy customs officials.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 05:36:02 pm
I did some screenshots (VLC -> direct show capture) showing the camera's BETA1 menu/features - examples how it looks here (might vary depending on your caps settings) .. there are some minor issues like when selecting hot/cold spot then the palette gets set to gray (might be related to order of menu items).
I've also noticed that my cam loses lang-settings when cold starting... but no deal-breakers :)

Attachment: zips contain everything (following postings due to size limits)
Images: peek preview/examples for the zip contents

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (ADDMENU-BETA1.zip)

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325934/#msg325934) (extracting RCC)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325975/#msg325975) (repacking RCC)
Will be possible to add some parts of this BETA to Mick hack / new colors pal., condensation, isulation mode /?
Or could you help us - how to add this  to present system??
I like this BETA / watching on downloaded pictures - dont know how to add /
Thank you
the insulation/condensation modes seem to be a bit pointless gimmicky to me (but nice colors) as really useful modes would take into account room humidity, relative temperature etc... in principle every owner with a "below" mode can already perform the same thing - just color anything thats either colder than 9,3°C(condensation) or colder than 18°C (insulation)

open the ADDMENU-BETA1.zip from the referenced posting - there's a short readme :)
Quote
BETA
-------------------------------------------------------------------
Disclaimer:
   Only for educational purposes,
   Use on own risk,
   Know what you're doing :)
   ... keep backups
-------------------------------------------------------------------

This archive contains a mashup of published Ex and Exx
files which perform the following changes, compared to a
regular Ex series cam:

- Change Bootup logo (9Hz version is not export restricted)
- Make hidden menu accessible (menu: Device Settings)
- Make FLIR logo in lower left corner 100% transparent
- Add quick-access to USB-Mode menu (also Device Settings)
- Enable PIP in two sizes
- Add extra options at the measurement-menu:
  - Center/Hot/Cold combined mode
  - Delta center-hotspot
  - Delta center-user defined temperature
  Note: not tested with advanced measurements enabled (tends to be crashy)
- Add extra palettes
  - Rainbow high contrast
  - White hot (=gray)
  - Black hot (=gray inverted)
  - Arctic
  - Lava
  - Condensation (color anything below 9,3°)
  - Insulation (color anything below 18°C)
  - Interval (user defined range - use cursors to set)
- Add "manual" range to temperature scale options
  - has 3 submodes: Min, Max, Both (use cursors)

Installation:
You need to have the Ex camera in FTP-accessible mode,
then simply overwrite the corresponding filestructure.
(Filezilla suggested).

Then cold boot your camera or use restartapp via telnet.


Troubleshooting:
Some features can require .caps modifications
(not documented here)

ok, maybe the installation part needs a readup across this thread

- apply mike hack
- put camera into IP mode (RNDIS) (hold "right" button on version screen for >10s = hidden menu)
- access camera over IP (default gateway IP of "infrared" interface = camera - usually 192.168.0.2 ... but had seen own_ip+1 scheme too)
- use filezilla to backup anything readable - esp. the FlashBFS folder
- overwrite the FlashBFS folder with the attached one, do not remove the old one as the new zip just adds or overwrites certain stuff
- turn off camera, remove battery, repower

have fun, report back :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 05:52:53 pm
Mike,

I saw the ULIS site...very interesting stuff there, Note that the micro-bolometer does not need a Thermo-Electric Cooler so they have managed to get rid of the Peltier module and maintain temperature stability ?
maybe they secretly replaced the bolometers with miniature thermopiles? *who knows* :)

A thermopile would be happy to deliver either positive or negative voltage - always in relation to it's own temperature vs. the incident temperature (IR is the predominant way of heat-exchange - so a lack of inbound IR means that the sensor radiates heat away... )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 05:54:16 pm
Has anyone worked out how the 'manual' focus operates yet?

I made a tool to rotate the lens surround yesterday but I'm uncertain which way to turn it to get closer focus. I'm nervous that something will come loose or run off a thread etc.

Also, does the lens move relative to the bit that rotates? i.e. does the little lens 'poke/protrude' and the surround stay in the same place (if that makes sense)

Or does the whole assy move in and out together?

I'm concerned about the lens poking forwards and hitting the tool because this first one isn't hollow and there isn't much clearance.
The good news is that the tool fits really snugly and it's easy to rotate it smoothly. But I've only moved it maybe a quarter turn each way.

Someone already asked how many turns are needed and nobody replied. So can I ask the same question? How many turns will I need to turn the lens for maybe 6 inch focus? ... and which way do I turn it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 09, 2013, 06:14:34 pm
What I am saying is that this hack does create doubt in customers minds as to whether they are seeing value for money from FLIR.

...but I wouldn't expect them to welcome the news that they firmware hobble their high end products to create low end versions. It just sits poorly with the customer base. No one likes to think they have been overcharged. Nothing more than that.  ...

I am just an end user, so maybe I am wrong about all this ?

I don't think you're wrong about end-user perceptions, that may be held by some customers.  In fact, I'm certain you're correct.  There's a group of folks who think that anyone engaging in such practices is ripping off their customers, plain and simple.  In their view, since it's physically possible to create the hardware for an economy model E4, that's substantially (if not completely) the same as the E8, there should be NO model variations.  Just an E8, for $995.

Of course, the fact that such a thing would be impossible is of no concern to them.  They want what they want.  The thing is that the ability to sell one level of the product at a higher price, helps recoup substantial R&D costs.  And being able to sell another variation, with fewer capabilities enabled, let's them sell at higher volumes, which brings down manufacturing costs.  But please, don't bother them with realities of the development/manufacturing process.  Or offering customers different options, at different price points.  That's just "devious".

Quote
It did not sit well with the customer base and is still quoted to this day as an example of devious sales tactics and the potential consequences.

In my opinion, Flir (and other companies exercising similar practices) are doing nothing devious at all.  The same thing is going on in many area of tech development.  You need look no farther than other topics in the EEVblog Forums, for oscilloscopes sold for ranges of 5:1, that are essentially the same device.

The fact is that if Flir could sell only a single model of their E series, it would cost nowhere near $995.  Nor would it be 6-grand.  The price would likely (just a WAG) be in the $3-4k neighborhood.   I guess everybody would like that better.  That would be much more "fair".   ::)  After all, everyone's needs are the same, and people who don't need the higher performance or special capabilities should be forced to pay for it anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 06:16:32 pm
Has anyone worked out how the 'manual' focus operates yet?

I made a tool to rotate the lens surround yesterday but I'm uncertain which way to turn it to get closer focus. I'm nervous that something will come loose or run off a thread etc.

Also, does the lens move relative to the bit that rotates? i.e. does the little lens 'poke/protrude' and the surround stay in the same place (if that makes sense)
Or does the whole assy move in and out together?
The lens is embedded in a bit of plastic. the whole thing turns. Screw it all the way out to take a look if you're curious. or watch the teardown.

Quote
Someone already asked how many turns are needed and nobody replied. So can I ask the same question? How many turns will I need to turn the lens for maybe 6 inch focus? ... and which way do I turn it?

Screw out for closer. Adjustment is fairly coarse - about 1 turn of useable range. Factory position on mine is about half a turn from fully in. To reset, focus on a distant object (roof edges are good)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 09, 2013, 06:19:36 pm
Interesting read that implies that people will be upset paying more for un-crippled hardware (e8 versus e4 pricing).

Yet it is very common in the software industry.

For some reason it's feels different when it is a hardware product hardware.  With software you buy a license, with hardware you buy real stuff.

Software crippled hardware typically involved actual hardware differences.  For example, when Porsche sells a software option for a more aggressive sport mode, it also comes with a clock  ;-)

http://www.porsche.com/usa/models/cayman/cayman/chassis/sport-chrono-package/ (http://www.porsche.com/usa/models/cayman/cayman/chassis/sport-chrono-package/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 06:29:30 pm
Quote
Screw out for closer. Adjustment is fairly coarse - about 1 turn of useable range. Factory position on mine is about half a turn from fully in. To reset, focus on a distant object (roof edges are good)

Thanks!

I just tried turning it anticlockwise and it only needs to be turned a little bit as you say :)

See the image below for the first attempt at a tool. I made this on the T-Tech PCB router I have here. The next version will have a larger hole where the screw is and I'll make up a cone out of thin (tinned) brass sheet and solder it to the tool.

So hopefully it will be able to 'see' through the cone and allow focus and view at the same time :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 09:00:23 pm
Here's an image of the second milled shape.

This one is the same as the first but with a much larger aperture. The idea is to solder a cone to it to act as a means to hold the shape/tool and also rotate it and see through at the same time.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 09:08:42 pm
 ;D   Ray Winstone:  Where's your tool?   


I'm now busy practising a bit of origami so I can make an accurate paper template to curl into the perfect cone shape :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 09:17:43 pm
I'm now wondering if I could simply glue the top section of a stiff plastic bottle to the shape. This would give a cone shape for free and could actually look quite good if sprayed black.

Anyone got any suggestions of a suitable bottle or container?

Otherwise I've just got to find one in the house that fits (and drink/use the contents)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 09, 2013, 09:21:31 pm
seems like the lens-shape determines the keyform ;)
attached an yet UNTESTED .stl for a mini-key
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 10:14:11 pm
Whatever tool is used it has to be a perfect snug fit because I think the lens key holes will quickly wear out otherwise.

I managed to get it spot on and mine has no wiggle at all and also the round bits fit flush all round. See the image below.

What I would not recommend is anyone to try and move it with anything that is not a flush fit. I think I might look at using a different PCB material to FR4 to make it. Maybe FR4 will be too abrasive unless somehow polished smooth.

In the image below you can see I have already scratched the key area due to a few early attempts to move it with something unsuitable.

I've got some ceramic substrates here that are used up at many GHz because I normally use the PCB milling machine to mill exotic RF filters up in the microwave bands (for research)

I think I'll try making one tomorrow.

Can these lenses with the key body be completely removed and replaced? Mike's earlier post implied this was possible but I don't know if this needs a teardown to achieve.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 10:19:19 pm
yes, you can easily unscrew the lens right out.
As regards wear, I think plastic pins are probably the way to go, so tool wears before lens
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 10:32:08 pm
Yes, I think caution needs to be exercised here.  Even a ceramic substrate may prove to be unsuitable. I have some old school GIL GML1000 PCB material somewhere that is (was) a very forgiving PCB material. It was brilliant for milling because it gave the tools a very long life.

Sadly it isn't made anymore but I think I've got a few sheets of it left somewhere.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 09, 2013, 10:48:47 pm
The GIL GML PCB material is similar to PTFE but you can also get copper clad PTFE to use as a PCB material (and solder to it rather than glue to it). It's a bit like making a PCB out of a bendy cheese slice because the PTFE material is so soft and bendy.

I can mill these out in a few seconds each but I need to get the material correct because I fear the 10 little key slots will wear very quickly if the user started fitting/removing this lots of times to permit focussing the camera on a daily basis.

I think the ultimate solution will be something that fits in there permanently and 'another' device is fabricated that keys into it as a focus ring. So the 10 key slots will see far less wear that would otherwise occur from any clumsy removal/refitting.

Regards
Jeremy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 11:01:22 pm
It ought to be available as a spare part, as it is potentially subject to damage, whether it is or not is another matter...

I don't think the thread or lens format is anything standard.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2013, 11:02:48 pm
Quick follow-up vid - close-up options and tripod mount
Flir E4 Thermal imaging camera follow-up (https://www.youtube.com/watch?v=Lie771fzBaw#ws)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 09, 2013, 11:04:23 pm
If the lenses were available at reasonable cost, I would buy a spare to modify with a permanent focus ring assembly but I suspect the lens is unavailable, or available only at high cost. I will write to FLIR and ask  :)

don't forget to ask if E8 display covers are available too.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 09, 2013, 11:29:23 pm
Thanks for the new video Mike. Very interesting. If FLIR have no answer to my tripod question I will modify one of the batteries as per your method. Thanks for testing the lenses. I agree that the lenses that I use (100mm FL) will be no good for the E4 field of view. I shall buy a 50mm FL from China.

Cheers

F.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on November 09, 2013, 11:46:51 pm
Great video Mike. Somehow I always end up with my jaw open by the end of the vid.
Love the new bootlogo  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 12:14:42 am
A very good video :) However, I was a bit worried about the bit in the video that said the cal 'might' be adversely affected at close focus so I did a very quick and dirty test on my E4.

I have a programmable hotplate here that can be set and regulated with a little microcontroller inside. It goes up to >300degC but I set it to 60degC and taped a tiny thermocouple to it using some matt black tape to sandwich it between two bits of tape. I had this connected to a pretty accurate Digitron thermometer that I check against an ice bath now and again.

I tried the E4 at 1m and also really close up with the focus wound out and it's close enough for me at both settings. I could get typically +/- 1.5degC difference between the Digitron and the E4 and both the E4 and Digitron typically said around 62degC. This wasn't a very well controlled experiment but it has made me feel a bit better about the impact on the calibration.

It's nearly bedtime  and I'll repeat it tomorrow with a clearer head :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 01:07:49 am
Note that AFAIK there is no evidence that :
 - Lenses and sensors are not "binned" depending on their quality
 - The more expensive models could be going through more extensive testing / calibration to ensure their tighter specs

Regarding binning of sensors: would be interesting to get the bad pixel count for E4 vs E8.
The sensor on my E4 looks to have 62 bad pixels, with quite a few near the edges.

What's also interesting to see is the circular pattern in the calibration picture, since no doubt the black body they used is aaaalmost uniform but not quite.

Below are the calibration pic + extracted bad pixels. Notice the banding in the calibration pic. I normalized and truncated to 8-bits, but the banding is also there in the raw 16-bit.
There's also what looks like the correction factor per pixel, all with values between 0x1c and 0x29.

You can find the raw files in /FlashFS/system/maps/ . Those are all FFF type Flir files with raw data. The .gan and .crs is what I used for the bad pixel count etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 03:01:33 am
That calibration picture looks AWFUL! Is that supposed to be uniform black? Does the circular banding mean that the thermal photo quality/accuracy is awful everywhere but the center?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 03:27:42 am
That calibration picture looks AWFUL! Is that supposed to be uniform black? Does the circular banding mean that the thermal photo quality/accuracy is awful everywhere but the center?

No. No. No. In that order. ;) For a perfect calibration target it's supposed to be uniform gray.

Attached is the original cal picture before I normalized it. A nice uniform and uninforming picture. :P

The AWFUL cal pic is magnifying the grayscale as it were. Without it all you see is fairly uniform drab grey (see below), aka uniform temperature. But by exaggerating the differences you can see the circular shape, no doubt due to the non-ideal black body used during calibration.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 10, 2013, 03:40:19 am
I think the map compensates for the lens vignetting (http://en.wikipedia.org/wiki/Vignetting), not for the supposed non-uniform black body...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 10, 2013, 05:12:57 am
Another successful hack! 
Thanks to Mike and everyone here who did all the hard work for us noobs!

I thought I had it done right but noticed no real change.  Went back through the .cfg file and noticed I forgot to put in the serial number after running  crc01.   |O

Updated the file and did Mike's simple install and it's amazing now!  Huge difference.

If someone figures out a 30hz mod this would be perfect.

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 10, 2013, 05:36:48 am
If someone figures out a 30hz mod this would be perfect.

Actually that one would be a real nasty problem as it would turn the camera to a "dual use" item that can be treated just like "arms/weapons" - so it would fall under trade restrictions and mean that any applicable government would have to take special care about the camera... guess how good that would be...  :--

Matter of fact: If you buy one of the higher spec'ed 30/60Hz cameras, then you'll be politely asked to explain(fill out a form) the security measurements against theft etc. - thus preventing some foreign intelligence person from easily stealing the camera, shipping/smuggling it to some "axis of evil" and turning the sensor into a missile guidence system, unwanted airborne defense or hell knows what else (yeah, what horrible threat such a thermal camera must be  :palm: ).
Well, this of cause assumes that a whole "enemy" country (usually that's one that didn't attack somebody else yet) will stay offline, dumb and will fail to produce any high-tech on it's own... but I guess the intention is to make it for them as difficult as possible (for a while)...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 10, 2013, 07:05:49 am
I am going to have a shot at making a lens adjustment tool maybe this week or next if I get a chance.  I'm planning to machine a cone out of aluminum and then have a UHMW (Delrin) base that mates with the lens... the delrin should be a reasonable mix between stiff but pliable that it doesn't harm the lens but is able to have small features machined in it.  I'll post results if they are halfway acceptable.
Title: NUC / Non Uniformity Correction and some NK.bin links
Post by: Taucher on November 10, 2013, 07:21:50 am
Just some random notes on recent insights:

Hacking NK.bin (Windows CE base components - mostly uninteresting):
http://www.t-hack.com/wiki/index.php/NK.BIN_toolset (http://www.t-hack.com/wiki/index.php/NK.BIN_toolset)
http://msdn.microsoft.com/en-us/library/aa449985.aspx (http://msdn.microsoft.com/en-us/library/aa449985.aspx) (bintool.exe documentation)


Not documented in T559504$A but in http://support.flir.com/DocDownload/Assets/21/English/1557845$a40.pdf (http://support.flir.com/DocDownload/Assets/21/English/1557845$a40.pdf) (tested+verified)
camera console: nuc.exe supports -n switch for calibration without triggering the shutter! - one can also pass a number (0...7) in order to specify the intregration interval. The number (n) is then converted to 2^n frames. Default is n=5 - resulting in averaging over 32 frames


EDIT:
http://qt-project.org/doc/qt-4.8/statemachine-api.html (http://qt-project.org/doc/qt-4.8/statemachine-api.html) .. link regarding the MENU state machine

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 10, 2013, 08:01:39 am
With these instructions I successfully updated my i3 from 80x80 to 144x144 resolution. This sticks and survives rebooting unlike the temporary service mode. Awesome! :) Note that I did not update the file modified timestamp yet and it still survived reboots. One thing to also be careful with is to keep the CRLF characters at the end of the CRC line. I don't know if it's sensitive to that but it's worth noting.

if anyone is still afraid to permanently hack his\her i3\i5 here is simple step by step guide

read post #524 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

1. power on camera

2. press menu button once

3. press play (gallery) button for 5 seconds

4. switch to RNDIS usb mode

5. install flir drivers on your pc

6. connect camera to pc, give it a minute to install and start

7. connect to camera's ftp server at 192.168.0.2 user:flir password:3vlig with ftp client capable of passive mode i.e. total commander

8. make full backup of filesystem to a secure location

9. download mike's crc01 tool from this https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) post

10. install some proper text editor i.e. notepad++ (and enable showing all characters in view \ show symbols)

11. open backup\FlashFS\system\appcore.d\config.d\conf.cfg

12. remove last line that says
Code: [Select]
# CRC01 ????????

13. replace number at the end of   ||.caps.config.image.settings.resIR int32 X||   with value from   ||.caps.config.image.settings.fpgaResolution.resIR int32 X||*

14. save changes as new file

15. use crc01 to calculate checksum of this file

16. open backup\FlashFS\system\appcore.d\config.d\conf.cfg file again, do the same resolution modification and replace checksum with calculated one

17. save changes as new file that you will upload to camera (in extra step i have changed attributes and date & time of new file to be the same as old one, but this is most likely unnecesary)

18. connect to ftp again, and upload created file overwriting one that sits in \FlashFS\system\appcore.d\config.d\conf.cfg (or check mike's post just under this one and let us know)

19. unmount & disconnect camera, use reset button in battery compartment to reboot it

it worked for me, i don't take any responsibility for anything but merely sharing what i did described as good as i could, do it at your own risk


*
Code: [Select]
* Z-cam has a detector with 80x80, 120x120 or 144x144 pixels.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 10, 2013, 10:43:01 am
If somebody wants tech-specs for the factory lens... seems as they were nicely documented inside the cam :)
Code: [Select]
.calib.lens.leExFOL7: (23)
C1                       0.00982
C2                        0.0424
clearanceDistance           0.04
descr                     "FOL7"
fNumber                      1.5
focLen                      6.57
isMeasured                 false
refTTransmission            0.94
theta                 0.33983691

... fixFusionDistance              3 (m)
Title: Setting MSX distance from console
Post by: Taucher on November 10, 2013, 10:56:00 am
Query MSX distance from console:
rls .image.fusion.userDistance

>Set MSX distance from console
(0.1 to 3 are sensible values, the algorithm even supports floating point values, Distance seems to be in meters)

rset .image.fusion.userDistance 0.1
rset .image.fusion.userDistance 0.15
rset .image.fusion.userDistance 0.16
rset .image.fusion.userDistance 0.17
rset .image.fusion.userDistance 0.15
...
rset .image.fusion.userDistance 0.190
rset .image.fusion.userDistance 0.191
...
rset .image.fusion.userDistance 3
rset .image.fusion.userDistance 4
rset .image.fusion.userDistance 5
...
rset .image.fusion.userDistance 10
...
rset .image.fusion.userDistance 100

EDIT - Adjusting MSX once somebody played too much with the camera: ;)
fist backup all old values
-> rls .image.fusion
-> write them down, pipe them to file, back them up etc...!
then measure the distance between your camera and some testpattern in cm - set that as MSX distance value
check congruency for the image center AND check if the corners align as well, if not
then adjust xpanVal until the error (if any) is symmetric (keep distance fixed)

zoomFactor and ypanVal should only be touched if you realy understand what you're doing and have to touch them :)
Never touch the Alpha value, you'll need to powercycle the cam to restore MSX as the value will be auto-zeroed if changed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 12:14:46 pm
I repeated the initial 60degC tests with the hotplate this morning but I used thin masking tape this time and I left the plate for an hour to stabilise at 60degC. This gave better uniformity in the reading.

The results were very good indeed. At 10cm focus the Digitron + thermocouple and the E4 were within a fraction of a degree of each other at about 60degC. It's hard to believe (i.e. unlikely) the instrument is this accurate but I'll try a higher temperature later. I'm bound to burn myself at some point through careless enthusiasm... ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 12:32:20 pm
Initial tests at 100degC are very encouraging...

The only downside is the meter loses its decimal point at 100degC. The Digitron shows to 0.1degC but the E4 only resolves 1degC above 100degC. But they are within about 1 degree of each other, certainly less than 2 degree error (at 10cm)

I can also see the regulation window of the hotplate. What would be ideal here would be a tripod mount on the E4 (gotta do the tripod mod really SOON) and also some way of datalogging the camera via USB.

I've been too lazy to look up if this is already possible but what I really want to do now is datalog both the Digitron and the E4 with my trusty little notebook PC that lives on my bench. I can do this easily with the Digitron but not the E4. Any ideas? I think both would show the hotplate regulation window quite well but it's a shame the E4 can't hold onto that decimal place a bit longer...

I'll also try 150degC and 200degC and 250degC assuming the masking tape doesn't emit a nasty smell at some point...

Just tried going to 150degC and waiting a few minutes for the plate to properly settle... One thing I can see is that the E4 tends to drift high by maybe 3 or 4 degrees (at 150degC) but then is flashes up 'calibrating' and it then gets much closer to the Digitron. At 150degC it's difficult to get repeatable readings within 2degC and I think I need the tripod to improve consistency.

But this camera is exceeding my expectations. It is much better than the old Irisys 4010 we have at work in so many ways.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 10, 2013, 12:38:27 pm
If someone figures out a 30hz mod this would be perfect.

Actually that one would be a real nasty problem as it would turn the camera to a "dual use" item that can be treated just like "arms/weapons" - so it would fall under trade restrictions and mean that any applicable government would have to take special care about the camera... guess how good that would be...  :--

Matter of fact: If you buy one of the higher spec'ed 30/60Hz cameras, then you'll be politely asked to explain(fill out a form) the security measurements against theft etc. - thus preventing some foreign intelligence person from easily stealing the camera, shipping/smuggling it to some "axis of evil" and turning the sensor into a missile guidence system, unwanted airborne defense or hell knows what else (yeah, what horrible threat such a thermal camera must be  :palm: ).
Well, this of cause assumes that a whole "enemy" country (usually that's one that didn't attack somebody else yet) will stay offline, dumb and will fail to produce any high-tech on it's own... but I guess the intention is to make it for them as difficult as possible (for a while)...
If I remember correctly a few (or many) pages back in this thread it was determined that those restrictions apply to sensors over a certain number of pixels and framerate. Wise to check this again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 12:53:47 pm
One bit of information to add to the world of science is that masking tape turns brown somewhere between 150degC and 200degC.

I'm getting a bit bored with this now because the results are potentially so good but my test setup (lack of tripod and datalogging) is making me want to stop and try this again when both these issues are resolved.

But at 200degC both the Digitron and E4 were within two or three degrees of each other if I try my best to hold the camera at the same point just above the tape above the tiny thermocouple head. For best accuracy you do have to wait for the moment where it finishes its internal calibration.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 10, 2013, 01:04:32 pm
For best accuracy you do have to wait for the moment where it finishes its internal calibration.

I found that you can initiate the calibration by pressing the play button for 5 seconds.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 01:14:28 pm
Yes, the results were very encouraging :)

I'd like to see if I can improve the test setup but I also need to produce some form of idiotproof safety cage for the hotplate. A small upturned shopping basket would make a crude cage but I want something with larger gaps in the metal. I suppose I could cut bigger gaps in a shopping basket though.

The hotplate can get as hot as a soldering iron bit so I'm quite scared of its ability to cause serious injury...

Quote
I found that you can initiate the calibration by pressing the play button for 5 seconds
.

Thanks! That's useful info :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 01:14:57 pm
If someone figures out a 30hz mod this would be perfect.

Actually that one would be a real nasty problem as it would turn the camera to a "dual use" item that can be treated just like "arms/weapons" - so it would fall under trade restrictions and mean that any applicable government would have to take special care about the camera... guess how good that would be...  :--

Matter of fact: If you buy one of the higher spec'ed 30/60Hz cameras, then you'll be politely asked to explain(fill out a form) the security measurements against theft etc. - thus preventing some foreign intelligence person from easily stealing the camera, shipping/smuggling it to some "axis of evil" and turning the sensor into a missile guidence system, unwanted airborne defense or hell knows what else (yeah, what horrible threat such a thermal camera must be  :palm: ).
Well, this of cause assumes that a whole "enemy" country (usually that's one that didn't attack somebody else yet) will stay offline, dumb and will fail to produce any high-tech on it's own... but I guess the intention is to make it for them as difficult as possible (for a while)...
If I remember correctly a few (or many) pages back in this thread it was determined that those restrictions apply to sensors over a certain number of pixels and framerate. Wise to check this again.
I don't think this is the case - ISTR that the lower resolution for >9fps is something silly like 32 pixels. There was a recent (2009) change to regs for cams with <111,000 pixels but I didn't read far enough to figure out exactly what changed - I don't recall seeing any framerate references. There is a link to some relevant docs either somewhere in this thread or the "buying E4 in Australia" thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 01:15:51 pm
I think the map compensates for the lens vignetting (http://en.wikipedia.org/wiki/Vignetting), not for the supposed non-uniform black body...
You know, after a good night's sleep I think you are right. ;)

I have used a model of modern military cryo' cooled thermal camera that had a manual dead pixel detection and correction mode. I was surprised when I used that mode as I could see all the dead pixels in the 320x240 detector array. The image looked just like that of the E4.
Good to know that this is typical for a 320x240 sensor. So no particular reason to assume binning there then. Or maybe the E8's have even less dead pixels. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 01:16:47 pm
Only path loss changes. No reason for any calibration issues with re-focussing lens

1. Lens is same
2. Detector is same
3. Illumination of detector by lens is same
4. Path loss changes but not mentioned by FLIR as a calibration issue for this camera

Adding an auxiliary lens does introduce more path loss as the ZnSe does not have 100% transmission and over illuminates the primary lens area (not matched to primary lens). Effect is minor in the real world and easily measured for compensation factor table.
Doesn't angle of view come into it somehow?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 01:36:15 pm
Since heat radiates, what would be the approximate theoretical max resolution before any further increase in resolution is meaningless? I doubt it would make much sense for a 32 megapixel 35mm sensor at this FOV.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 02:42:05 pm
Out of curiosity, is the minimum selectable temperature span of the hacked E4 (I believe someone mentioned that it was 4 degrees Celsius) lower than with the original (non-hacked) E4? This might explain the temperature sensitivity differences in the spec sheet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 10, 2013, 02:47:29 pm
The non hacked E4 did not offer a manual span mode. The auto mode did have a span of approx. 8°C as minimum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 03:08:06 pm
Quote
The non hacked E4 did not offer a manual span mode. The auto mode did have a span of approx. 8°C as minimum.

That's the answer then! 8°C vs 4°C as a minimum temperature span equates to doubled the temperature difference required on the display to discern the difference... that means hacking the E4 allows a thermal sensitivity of 1/2 the original E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 10, 2013, 03:27:42 pm
If someone figures out a 30hz mod this would be perfect.

Actually that one would be a real nasty problem as it would turn the camera to a "dual use" item that can be treated just like "arms/weapons" - so it would fall under trade restrictions and mean that any applicable government would have to take special care about the camera... guess how good that would be...  :--

Matter of fact: If you buy one of the higher spec'ed 30/60Hz cameras, then you'll be politely asked to explain(fill out a form) the security measurements against theft etc. - thus preventing some foreign intelligence person from easily stealing the camera, shipping/smuggling it to some "axis of evil" and turning the sensor into a missile guidence system, unwanted airborne defense or hell knows what else (yeah, what horrible threat such a thermal camera must be  :palm: ).
Well, this of cause assumes that a whole "enemy" country (usually that's one that didn't attack somebody else yet) will stay offline, dumb and will fail to produce any high-tech on it's own... but I guess the intention is to make it for them as difficult as possible (for a while)...
If I remember correctly a few (or many) pages back in this thread it was determined that those restrictions apply to sensors over a certain number of pixels and framerate. Wise to check this again.
I don't think this is the case - ISTR that the lower resolution for >9fps is something silly like 32 pixels. There was a recent (2009) change to regs for cams with <111,000 pixels but I didn't read far enough to figure out exactly what changed - I don't recall seeing any framerate references. There is a link to some relevant docs either somewhere in this thread or the "buying E4 in Australia" thread

Being in the USA there is no restriction on owning 30/60fps or 640X480 units here, just can't be shipped without the associated issues described.
I can order the high fps/res units and have them shipped directly to me without any hoops to jump through, they are just ridiculously expensive.
This hack to get 320X240 at such a low cost is phenomenal!  I have used 30 and 60fps systems and they add that extra level of utility.  Would be awesome to have that capability with this same low cost unit. 
Don't hate me for wanting it!  Now if I can just find a low cost short/medium wave IR system hack for a some other inexpensive tool. 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tecman on November 10, 2013, 04:01:14 pm
I bought a refurbished E30 from flir about a year ago. My decision was based on the ability to focus the lens which was not available on the lower priced units.

Anybody looking into an E30 upgrade ?  I am sure that the higher end models, like the E60 are just firmware settings as well.

Anybody looking ??

Paul
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 10, 2013, 04:11:39 pm
I bought a refurbished E30 from flir about a year ago. My decision was based on the ability to focus the lens which was not available on the lower priced units.
Anybody looking into an E30 upgrade ?  I am sure that the higher end models, like the E60 are just firmware settings as well.
Anybody looking ??
Paul
Well - it should be pretty much the same method as with the Ex series cameras:
- put cam into RNDIS mode (use 10 second right key inside camera information page to enter USB menu)
- install drivers
- connect to camera over telnet and ftp
- back up anything readable
...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 10, 2013, 04:18:35 pm
The non hacked E4 did not offer a manual span mode. The auto mode did have a span of approx. 8°C as minimum.
That's the answer then! 8°C vs 4°C as a minimum temperature span equates to doubled the temperature difference required on the display to discern the difference... that means hacking the E4 allows a thermal sensitivity of 1/2 the original E4.

.image.contadj.autoAdj.TSpanMin 4
.image.contadj.autoAdj.TSpanMinAuto 8

seems to match - and one can be set to 1 as minimum (accepts even 0, but keeps 1,5°-2°C span) - the 4°C manual span seems to apply even when set to something different.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 04:50:19 pm
2 Degrees span is very useful. If it can be enabled then I recommend it.
You can get sub-1 deg span using the level/span console commands, but things do start getting quite noisy and drifty below 2 deg- you probably need to let it warm up and stabilise before it's useable.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 04:56:55 pm
Just noticed in the standard e8 hack .cfg file
Quote
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
Yet it's limiting to 4 Maybe it's +/-2?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 05:12:57 pm
Quote
Just noticed in the standard e8 hack .cfg file
Quote

    .caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
    .caps.config.image.contadj.minSpanFactor.factorManual double 2.0

Yet it's limiting to 4 Maybe it's +/-2?

Do you select the center temperature somewhere, or does it auto-determine this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 10, 2013, 05:52:19 pm
The General Tools GTi10 (http://www.generaltools.com/GTI10--predator-Series-Thermal-Imaging-Camera_p_1856.html) has a 160 x 120 IR resolution and 30 Hz refresh rate, and doesn't cost too much. I wonder if it's possible to hack it into the high-end GTi50 (http://www.generaltools.com/GTI50--predator-Series-Thermalvisual-Imaging-Camera-With-Picture-in-picture-Streaming-Video-And-Voice-Annotation_p_1944.html) with 320 x 240 IR resolution?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ovnr on November 10, 2013, 06:19:12 pm
Well, to be honest I stopped keeping up around page 60. On the other hand, I'm now a convert from the "This is neat, I'm hoping for a closed-box hack, at which point I'll consider it" to the "Yay, I'm going to order it tomorrow" camp. ;)

Thanks, guys. My wallet really needed this. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 10, 2013, 06:23:18 pm
Thanks, guys. My wallet really needed this. :P

Mr Wallet will love the fact everywhere are sold out :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ovnr on November 10, 2013, 06:31:33 pm
Thanks, guys. My wallet really needed this. :P

Mr Wallet will love the fact everywhere are sold out :)

Still in stock a couple places here in Norway. But then I end up paying $1600 for it with VAT. :/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 10, 2013, 07:39:56 pm
The General Tools GTi10 (http://www.generaltools.com/GTI10--predator-Series-Thermal-Imaging-Camera_p_1856.html) has a 160 x 120 IR resolution and 30 Hz refresh rate, and doesn't cost too much. I wonder if it's possible to hack it into the high-end GTi50 (http://www.generaltools.com/GTI50--predator-Series-Thermalvisual-Imaging-Camera-With-Picture-in-picture-Streaming-Video-And-Voice-Annotation_p_1944.html) with 320 x 240 IR resolution?

Any idea who makes this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 07:46:59 pm
If you want to have a quick look at the dead pixels on yooooouuuur E4, do the following:

Code: [Select]
# check for yourself that I'm not making stuff up. :P
rls .image.flow.maps.combGainDeadMap.pixReplace

# show dead pixels
rset .image.flow.maps.combGainDeadMap.pixReplace false

# hide dead pixels again (default)
rset .image.flow.maps.combGainDeadMap.pixReplace true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 10, 2013, 07:57:07 pm
The General Tools GTi10 (http://www.generaltools.com/GTI10--predator-Series-Thermal-Imaging-Camera_p_1856.html) has a 160 x 120 IR resolution and 30 Hz refresh rate, and doesn't cost too much. I wonder if it's possible to hack it into the high-end GTi50 (http://www.generaltools.com/GTI50--predator-Series-Thermalvisual-Imaging-Camera-With-Picture-in-picture-Streaming-Video-And-Voice-Annotation_p_1944.html) with 320 x 240 IR resolution?

Any idea who makes this?

Um, General Tools?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 07:58:22 pm
If you want to have a quick look at the dead pixels on yooooouuuur E4, do the following:

Code: [Select]
# check for yourself that I'm not making stuff up. :P
rls .image.flow.maps.combGainDeadMap.pixReplace

# show dead pixels
rset .image.flow.maps.combGainDeadMap.pixReplace false

# hide dead pixels again (default)
rset .image.flow.maps.combGainDeadMap.pixReplace true
Quite a lot....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: XOIIO on November 10, 2013, 08:05:04 pm
Saw this on hackaday and am watching mikes videos, man this is awesome.

How long do you think it will take for them to fix it? I've always wanted a thermal imaging camera but I'm in a bit of a financial squeeze right now (19, unemployed, hard to find work) so I probably couldn't but one to hack for some time.

Also has anyone "bricked" theirs trying this? It seems unlikely but you never know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 10, 2013, 08:13:49 pm
Not too bad actually.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 08:16:40 pm
That is not a nice image  :scared:

If all of those dots are dead pixels, that is a lot worse than Mrfibble's image.

That is indeed a crapload of dead pixels. On my E4 that setting does show precisely the same bad pixels as what I extracted earlier on from the calibration picture. Translation: I'm pretty sure that setting shows the dead pixels as is.

I suddenly feel a lot better about my 99.919% operating pixels.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 08:18:15 pm
Have you been exposing your unit to lots of X-Ray or very high intensity heat sources by any chance?

That shouldn't matter, as this setting shows the dead pixels as determined at the time of calibration. AKA: before Mike had a chance to stuff it in the X-ray to find where those pesky screws are.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 10, 2013, 08:29:55 pm
So it seems a lot of the units get the less than stellar detector arrays, while the good ones tend to be used for the high end, unless they have a batch that is spectacularly good yield wise and then they just rebin the lower end for the cheap ones.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 10, 2013, 08:33:31 pm
Exactly!  I spent a full day running around looking through mine at 80X40 and at 320X240 it's amazing!  No worries about any dead pixels for me.

As to the "bricking", I took the advice of Mike and others and just did the simple file upload and have stayed away from other advanced options.
It's so much more functional with that hack I just can't see tinkering around with anything else as of right now.
I have not heard of a single person "bricking" theirs to date.

One other thing of note, there has been occasional talk of the possibility of hacking this to 30hz or even 60hz.
With 60hz systems the battery life is significantly diminished.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 08:45:38 pm
I think I'll give the pixel checker a miss as I can't see it gaining me anything but varying degrees of woe over the quantity of duds...

Note:
I'm not sure if I'm missing something or doing something wrong but my saved images appear to show some lossy compression artefacts which is a bit of a shame. Is there a way to save the image in raw format or to reduce the amount of compression?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 09:08:35 pm
missing something or doing something wrong but my saved images appear to show some lossy compression artefacts which is a bit of a shame. Is there a way to save the image in raw format or to reduce the amount of compression?

Use exiftools.

http://www.sno.phy.queensu.ca/~phil/exiftool/ (http://www.sno.phy.queensu.ca/~phil/exiftool/)

There's also a gui for it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 10, 2013, 09:13:55 pm
Saw this on hackaday and am watching mikes videos, man this is awesome.

How long do you think it will take for them to fix it? I've always wanted a thermal imaging camera but I'm in a bit of a financial squeeze right now (19, unemployed, hard to find work) so I probably couldn't but one to hack for some time.

Also has anyone "bricked" theirs trying this? It seems unlikely but you never know.
Aside from the novelty there isn't really much use for one unless you're doing serious inspection work or building PCBs...

Not much use for one, are you joking ??? Once you have one you can't understand how you lived without one......
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 10, 2013, 09:20:04 pm
*for an unemployed student   :o

LOL - Even more time to play....... it would bring a whole new meaning to 'hot or not' !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 10, 2013, 09:21:37 pm
If you open it in FLIR Tools the artifacts go away, but you have to screenshot to save.
Wow thanks!
I've now started playing with the Flir tools and I didn't realise you could examine the saved images in such detail.
The image below was taken using my latest focus tool to let me zoom in really close to a PCB.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 10, 2013, 09:53:55 pm
Have you been exposing your unit to lots of X-Ray or very high intensity heat sources by any chance?

That shouldn't matter, as this setting shows the dead pixels as determined at the time of calibration. AKA: before Mike had a chance to stuff it in the X-ray to find where those pesky screws are.

Does the camera generate dead pixels map every time it calibrates? I dont think so, I think its factory calibrated = Mike couldnt make new ones, as they would show up.

Not to mention customs Xrays everything anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 09:57:37 pm
The dead pixels shown are those found during calibration by the Elbonian tech.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 10, 2013, 10:13:13 pm
Hi!

I found your awesome forum after seeing Mike's post over at Hack a Day and, after a few hours of reading, I ordered the E4 from Tequipment. Impressive work you guys do!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 10:19:58 pm
I suppose bad pixels can be ID'd by simply looking at the offsets required for shutter cal - if above a certain threshold, then mask the pixel.
This may miss the odd one that happens to be stuck at the same value as the shutter temp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 10, 2013, 11:20:19 pm
Please take a look at the two pictures of dead pixels that I attach here.....notice anything different ? except the obvious pixels of course !

Take a look at the thermal span on the right hand side. There is something not right in Mikes picture. The span goes way too wide and to -40 degrees Celcius  :scared: I wonder if this is the reason for his very ugly image ? No idea how the span is set but -40 Degrees seems unusual to say the least ! Has anyone else checked their E4 ? If so, please advise of span used by the camera. A detector tested over a smaller range of temperatures would presumably have less 'out of tolerance' pixels than one tested over a massive range that includes an out of spec -40 degrees  :-// I smell something fishy here.

Mike, with all the experimentation on your unit (for our benefit) maybe you have corrupted something ? The -40 degree temp could have been caused by such ? She's only spec'd to -20 !

That happened when Mike blasted the temp sensor with "freezer"?

Watch it happen @ 38:01:
 https://www.youtube.com/watch?feature=player_detailpage&v=NtqUE67BUDI#t=2281 (https://www.youtube.com/watch?feature=player_detailpage&v=NtqUE67BUDI#t=2281)

(embed code won't respect the youtube seek of "t=2281" so you have to manually seek to 38:01 -- bummer)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 11:30:28 pm
Quote
The span goes way too wide and to -40 degrees Celcius  :scared: I wonder if this is the reason for his very ugly image ? No idea how the span is set but -40 Degrees seems unusual to say the least ! Has anyone else checked their E4 ? If so, please advise of span used by the camera. A detector tested over a smaller range of temperatures would presumably have less 'out of tolerance' pixels than one tested over a massive range that includes an out of spec -40 degrees  :-// I smell something fishy here.
I assume it's simply that the bad pixels are making it think there are some -40 deg spots in the image, so it's setting that as the minimum temp when the bad pixel masking is disabled. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 10, 2013, 11:39:11 pm
Obviously we can only know whether that is the case when there are more maps known.
Both hypothesis are plausible on first inspection.

If there are other maps that are "as bad" as Mike's and have the same temperature span, then it's not unlikely that the pixels are causing the temperature. But if on the other hand there are other maps out there that show no correlation between a large number of bad pixels and the temperature, then you at least have falsified one hypothesis..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 11:40:16 pm
Also notice my pic is in the high contrast palette so slightly bad pixels may be a lot more noticeable than with the standard one.
I can't see how freezing the temp sensor could have anything to do with it, as bad pixel mapping would all be done before any correction for ambient - I didn't freeze the image sensor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 10, 2013, 11:46:04 pm
Here (.image.flow.maps.combGainDeadMap.pixReplace) images for my cam - directly captured ;)

Captured them in different modes as everyone seems to prefer another palette ;)

Don't see anything that worries me there :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 11:47:46 pm
Mike, with all the experimentation on your unit (for our benefit) maybe you have corrupted something ? The -40 degree temp could have been caused by such ? She's only spec'd to -20 !

I doubt it. It looks like he was just mucking about with the range since -40 happens to be the lowest you can get is by setting the level directly. And just for the fun of it I put mine on a span of -379.9 to 620 , and the dead pixels are in the exact same boring spot, as expected.

Dead pixels on/off does have an effect on the auto ranging of temp scale. The defective pixels on mine all have an loooooow value (corresponding to low temp). And if you have it show the dead pixels then the lower end of the range drops (when auto ranging the temp scale). But I doubt it is anywhere near enough to go from room temperature to -40 that way.  Just tested it and the lower end of the range went from 23.8 (no dead pixels) to 22.7 (show dead pixels).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on November 10, 2013, 11:49:55 pm
ok, maybe the installation part needs a readup across this thread

- apply mike hack
- put camera into IP mode (RNDIS) (hold "right" button on version screen for >10s = hidden menu)
- access camera over IP (default gateway IP of "infrared" interface = camera - usually 192.168.0.2 ... but had seen own_ip+1 scheme too)
- use filezilla to backup anything readable - esp. the FlashBFS folder
- overwrite the FlashBFS folder with the attached one, do not remove the old one as the new zip just adds or overwrites certain stuff
- turn off camera, remove battery, repower

have fun, report back :)

Installed...works pretty well for a Beta.  Thanks for your hard work and keep it up!  :-+

I haven't looked into it yet, but I wonder if there's a way to change the default temp for the Insulation Alarm mode...we keep our house between 66 and 68, so most of the outside walls test as "bad" since they'd only have to be 2-4 degrees colder to be below the 64.4 threshold.  I know I could also just do "Blue Below" and set my own but it's the principle.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 10, 2013, 11:52:09 pm
All this talk about dead pixels; this is undoubtedly a stupid question, but is this referring to dead pixels on the screen, or dead pixels on the sensor? I'm assuming the latter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 11:55:51 pm
All this talk about dead pixels; this is undoubtedly a stupid question, but is this referring to dead pixels on the screen, or dead pixels on the sensor? I'm assuming the latter.
The sensor, obviously - how would it mask dead pixels on the screen...?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 10, 2013, 11:58:35 pm

Dead pixels on/off does have an effect on the auto ranging of temp scale. The defective pixels on mine all have an loooooow value (corresponding to low temp). And if you have it show the dead pixels then the lower end of the range drops (when auto ranging the temp scale). But I doubt it is anywhere near enough to go from room temperature to -40 that way.  Just tested it and the lower end of the range went from 23.8 (no dead pixels) to 22.7 (show dead pixels).

It will be using a histogram+threshold function to do the autoranging, so as the number of very cold pixels increases, it's plausible that it could suddenly jump to the cold pixel value if it finds more than a certain number of them
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 10, 2013, 11:58:41 pm
On the sensor. The bad pixels in the calibration pic all had a value that was more than 4 standard deviations below the average. I picked that factor of 4 stdevs fairly arbitrarily after eyeballing the distribution. At any rate, the sensor readout for dead pixels all have a way lower value than the rest of the image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 12:04:08 am
It will be using a histogram+threshold function to do the autoranging, so as the number of very cold pixels increases, it's plausible that it could suddenly jump to the cold pixel value if it finds more than a certain number of them

Good point. I found the -40 a bit too much of a coincidence. But then again the same limit might be applied for autoranging as it is for manual input of level value. And -40 (or lower) might very correspond with the loooow value on dead pixels. So if it does things (histogram+threshold) as you describe, that might cause it.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 12:11:24 am
-snip (MENU hack)

Installed...works pretty well for a Beta.  Thanks for your hard work and keep it up!  :-+

I haven't looked into it yet, but I wonder if there's a way to change the default temp for the Insulation Alarm mode...we keep our house between 66 and 68, so most of the outside walls test as "bad" since they'd only have to be 2-4 degrees colder to be below the 64.4 threshold.  I know I could also just do "Blue Below" and set my own but it's the principle.  ;)

In fact I'm investigating into that already - humidity/condensation/mold mode seems to have additional features where one can set humidity and tempterature and the camera seems to calculate the condensation point then.

If somebody could obtain a FTP dump (FlashBFS) from a T440 / T600 camera model, that could significantly help (or any other with that mode - the T4xx/T6xx seem to have time lapse, so I'd really like to take a look at that code ;)

Code: [Select]
rls .image.sysimg.alarms.humidity.1
active                      true
atmTemp                293.14999
audioBeep                  false
dewpoint               282.41962
duration                       0
hysteresis                     1
isoCoverageActive          false
isoCoverageMBoxId              1
isoCoverageThreshold         0.5
isoIndicationActive         true
isoIndicatorId                 1
label                        "1"
relAirHumidity               0.5
relAirHumidityLevel            1
thresholdTemp          282.41962
trig                       false
type                     "BELOW"
visualBeep                  true

.image.sysimg.alarms.humidity.1.relAirHumidityLevel  <- this one can be changed, but marking color changes to reddish - while image gets still colored in green (see attachment)

dewpoint or humidity won't change as they seem to be auto-set by the camera

rset .image.sysimg.alarms.humidity.1.isoCoverageActive true <- will enable a Tmax pointer-cross (useless)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 11, 2013, 12:13:00 am
Here (.image.flow.maps.combGainDeadMap.pixReplace) images for my cam - directly captured ;)

Captured them in different modes as everyone seems to prefer another palette ;)

Don't see anything that worries me there :)

The dead pixels look quite big to me for a 320x220 image. The dead pixels suggest the screen is 160 pixels wide. But there are some pixels that look smaller. Can someone explain the image format to me?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 11, 2013, 12:20:44 am
The image looks like it is 320 pixels wide but I'm confused as to why the dead pixels are often in a neat block of 4 making the dead ones look like they are on a 160pixel wide screen.

Why are they in such neat blocks?

Quote
It probably magnifies them to 4x the actual size for convenience.


Maybe, but not every case is a neat block of 4. Some are smaller.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 12:21:55 am
If somebody could obtain a FTP dump (FlashBFS) from a T440 / T600 camera model, that could significantly help (or any other with that mode - the T4xx/T6xx seem to have time lapse, so I'd really like to take a look at that code ;)

You could take a look at the firmware updates for these models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 12:22:28 am
I'd guess lens correction algo - we're not looking at the unprocessed image
Just turned off ONE step :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 12:23:35 am
If somebody could obtain a FTP dump (FlashBFS) from a T440 / T600 camera model, that could significantly help (or any other with that mode - the T4xx/T6xx seem to have time lapse, so I'd really like to take a look at that code ;)

You could take a look at the firmware updates for these models.

been there already.. unfortunately incomplete filesets - nothing (EDIT: useable) regarding any menu buildup whatsoever
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 11, 2013, 12:28:46 am
I don't think dead pixels are too much to worry about; Mike's camera seems to work quite well and he has quite a few dead pixels. Especially when dealing with heat, adjacent pixels will be similar. Take the pixel to the right and the one to the left, and the one between is probably going to be 50% in between the two
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 12:32:09 am
The pixels look much bigger in the captured images than onscreen due to JPEG compression artifacts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 12:41:53 am
I have seen Tauchers commands but do not have any idea how you deliver them to the camera. I am a self confessed IT programming/hacking newbie.
Enable RNDIS and enter them at the console prompt using Telnet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 11, 2013, 12:49:01 am
No matter about the dead pixels though.....anything would be better than 80x60   :-+

In 80x60 mode, the E4 has 320*240-80*60=72,000 dead pixels  ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 11, 2013, 12:50:00 am
Any recommendations for a Telnet client ? ....PuTTY ?

I haven't used Telnet much, but PuTTY was my client of choice whenever I worked with Telnet at my previous job.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IanB on November 11, 2013, 02:18:57 am
Any recommendations for a Telnet client ?

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66731;image)

Well, bugger. What is the world coming to?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 11, 2013, 02:50:09 am
 Install PuTTY (http://www.chiark.greenend.org.uk/~sgtatham/putty)....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on November 11, 2013, 03:54:38 am
Any recommendations for a Telnet client ?

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66731;image)

Well, bugger. What is the world coming to?

Putty works or if you like the old school cmd line you need TCC/LE 64 bit if you're running Windows 7 64 bit.
http://jpsoft.com/tccle-cmd-replacement.html (http://jpsoft.com/tccle-cmd-replacement.html)
Once installed you can either run TCC LE x64 13.0 or cmd.exe, then telnet.exe works fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 11, 2013, 04:24:34 am
Any recommendations for a Telnet client ?

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66731;image)

Well, bugger. What is the world coming to?

telnet client IS there - it is just not installed by default... http://elmajdal.net/Win7/Enabling_Telnet_Client_in_Windows_7.aspx (http://elmajdal.net/Win7/Enabling_Telnet_Client_in_Windows_7.aspx)
Title: Flir E4 Thermal imaging camera teardown
Post by: madshaman on November 11, 2013, 04:58:41 am
A bit off-topic, but running VMWare workstation hosting VM running netbsd has greatly reduced my irritation with the Windows' shell and its default assortment of cmd-line programs.

You can do the same thing with your favourite linux if that's what you prefer.

Putty is pretty good as a comms terminal though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 11, 2013, 06:03:08 am
Use vmware player, its free.

Hate to reduce the S/N ratio in the thread but...
Thanks Taucher for all the WinCE hacking!
Appreciate everything you can unlock in the FW!
Hopefully the T600 series FW holds some secrets yet :)

And thanks mike for testing some ZnSe lenses for us!
That looks like by FAR the easier way to handle focusing at short focal lengths!
What was the diameter of the lenses you purchased?
It looks like the field of view is catching the edge of the lens?
Can you confirm?
Title: Flir E4 Thermal imaging camera teardown
Post by: madshaman on November 11, 2013, 06:22:54 am

Use vmware player, its free.

Obvious option if you don't already have a workstation license.  Point is, unix on a windows box with access to hardware resources is useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IanB on November 11, 2013, 07:46:55 am
telnet client IS there - it is just not installed by default... http://elmajdal.net/Win7/Enabling_Telnet_Client_in_Windows_7.aspx (http://elmajdal.net/Win7/Enabling_Telnet_Client_in_Windows_7.aspx)

Cool. Thanks for that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 08:17:37 am
Use vmware player, its free.

Hate to reduce the S/N ratio in the thread but...
Thanks Taucher for all the WinCE hacking!
Appreciate everything you can unlock in the FW!
Hopefully the T600 series FW holds some secrets yet :)

@VMs:
I found Oracle Virtualbox (also completely free) beeing my VM of choice - I can run the same VMs from Windows and from Linux, it doesn't cost me anything, has really nice installers and support, headless mode where I can let a server run VMs and just use network/RDP...

If one then needs a quick Linux console, then a Knoppix live DVD image will do just as good as an Ubuntu installation ;)



@T600: I did a third look into the firmware and inside UI.d found some TML folder with %TMS files ...  the only thing readable seems to be a TMS file header - the rest is either encrypted or compressed (or both) as it's 100% "random garbage" but uicore (user interface core) tries to load it... so this will cause some headache (that's crying for IDA and way too much time) - but anyway .. probably not worth spending the time there

I'm pretty confident that the T600 camera has already all functions required for it's everyday use - at best it would be another hidden menu with some unimportant settings.

I hoped that the Ex models share some roots with the higher end models - where one can use condensation, insulation detection, time-lapse etc. by default (that would save fiddling-time).


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 11, 2013, 08:55:42 am
I count approximately 200 dead pixels on Mike's camera which means approximately 99.74% of them are OK. But if you apply the 99.9% criteria to downsampled 80x60 and only count a dead pixel as e.g. more than half of any 4x4 "subpixel" dead, then a sensor that would be unusable for 320x240 may be perfectly fine in the E4.

I doubt it's just dust, as it was mentioned earlier that the sensor is heated so any particles on the sensor will have the same temperature and emit their own IR, not be at 40 below. Those appear to be truly dead pixels, but to be sure you could look at the internal dead pixel map.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 09:42:13 am
Any recommendations for a Telnet client ? ....PuTTY ?

I have Win 7 X32 and X64 versions running on desktops. I also have XP on a laptop if easier.
Windows (at least up to XP) has a command-line telnet built in - just do start->run Telnet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 09:45:43 am
MIKE

Just about to go to bed and suddenly thought ....DUST !

This may be totally wrong, but did you clean the micro-bolometer very carefully before reassembly ? I ask because I have had issues with black dots on CCTV cameras that turned out to be dust and dirt on the CCD faceplate casting a shadow on the pixel below.

If the bad pixel map is dynamic (a big IF as unknown at this time) then could it be that you have contamination of the micro-bolometer face plate or rear of the lens ?
There is some dust, but this is always bigger than one pixel - the Jpeg compression expands single pixels but you can clearly see the difference onscreen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 11, 2013, 09:46:26 am
Any recommendations for a Telnet client ? ....PuTTY ?

I have Win 7 X32 and X64 versions running on desktops. I also have XP on a laptop if easier.
Windows (at least up to XP) has a command-line telnet built in - just do start->run Telnet
At least in Win7 you need to activate it: enter programs and functions through START - control panel and then go to "activate windows functions". There activate "Telnet Client".
Remark: as I do not have an English Windows on my computer, the above mentioned menu items might be called slightly different on an English Windows system.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 10:44:39 am
Any recommendations for a Telnet client ? ....PuTTY ?

I have Win 7 X32 and X64 versions running on desktops. I also have XP on a laptop if easier.
Windows (at least up to XP) has a command-line telnet built in - just do start->run Telnet
At least in Win7 you need to activate it: enter programs and functions through START - control panel and then go to "activate windows functions". There activate "Telnet Client".

At least putty is a telnet client that doesn't suck. ;) And while we're at it, winscp in ftp mode is pretty handy for copying all your favorite files to/from your E4.

Virtualbox is indeed damn handy. Probably right up to the point where Oracle thinks it is just too useful, and decides to drop it. :P At any rate, windoze 7 in a VM on a linux host ==> flir tools etc work fine. RNDIS also works, but is a bit finnicky. Then again, RNDIS is a bit finnicky on native win7 as well. The DHCP implementation on the Win CE side could have been better. Hell, the entire rndis could have been done without, but such is life. :P

Anyone gotten rndis working on linux or *bsd yet? I tried, but noticed they just had to use some non-standard stuff. As in, I get RNDIS going but the WinCE side is not responding to dhcp requests. I think the flir driver does a secret handshake before the RNDIS setup, but ths requires some investigation.For now I dropped it, but maybe someone else had more success? If not, next up is check if there are some recent kernel patches with more rndis workarounds. Or maybe the *bsd implementation of rndis will have some useful workarounds...

That, and has anyone compiled their own binary yet for the E4?

Edit: forgot to mention re: rndis ... I am pretty sure it is a usb driver issue, because I can see the outgoing URBs (from host to E4) related to DHCP, but the E4 just doesn't respond. Which either means it's the wrong kind of request in the E4's book, or it's not in the right state yet. Which is kinda curious, because it /does/ setup properly up to that stage ... getting the proper MAC and all that. Mmmh, just thought of something. Maybe I can tweak the WinCE side so next time an rndis link is setup it will do static ip + static arp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 11, 2013, 03:07:57 pm
UK SUPPLIER RECOMMENDATION

UPDATE @ 26 November. I have spoken with David today. They have stock at the moment. Please contact David direct for more information.


I have just spoken to David Atkins at PASS, who are supplying my E4. I was just checking on the latest delivery of these cameras and have been advised that 30 are due in today or tomorrow  :) Good news for all those waiting. PASS appear to have a very well stocked and reliable supply chain.

I was also advised that if members of the EEVBlog wish to contact David directly, he is a Level 1 Thermographer and will be happy to discuss providing the same discount as provided to me on my E4 purchase. Speak with David if you have any questions. His direct telephone number is : 01642 626142 

PASS have dealt with me in a very efficient and professional manner so if you are in the UK and thinking of buying an E4 ,I can certainly recommend them.

From PASS's point of view this increase in sales does them no harm and they are keen to help anyone who wishes to become the proud owner of an E4 without long delivery times !

I do not work for PASS or have any association with them, I am just a very content customer.
I am providing David's Details here as he is the best point of contact if you wish to discuss an E4 purchase and any discounts that he can offer you as an EEVBlog member ;)  Just tell him you are a member of EEVBlog and can you have the same discount as Fraser.

Contact details for PASS:

-----------------------
Fraser

Should you require any more information, please do not hesitate to contact me. Tel: 01642 626142 (Direct)

Many thanks

David Atkins – Senior Account Manager
Certified Level 1 Infrared Thermographer

 
Test Equipment & Thermal Camera Sales
Tel: 01642 626142 (Direct Line)
Fax: 0870 143 1869
Mobile: 07792 742265

Email: dave@tester.co.uk

Please take a second to see what other services PASS can offer and remember we aim to beat any like for like quote:

www.pass.co.uk (http://www.pass.co.uk)

Pass Ltd, 1 Alberto Street, Stockton-on-Tees TS18 2BQ
Registered Company in England and Wales - Reg No 4457106
VAT Registration Number 779714081

----------------------------
 
I hope this information is useful. When companies wish to offer special rates to EEVBlog members I believe in supporting them.

Note: PASS are an authorised Distributor for FLIR products and may be found on the FLIR official distributor list under their full name of : Portable Appliance Safety Services (PASS) Ltd.  here:

http://projects.flircs.com/distributors/?app=Building (http://projects.flircs.com/distributors/?app=Building)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Calimero on November 11, 2013, 03:27:04 pm

Hello to all.

I have one question. I have chance buying FLiR E5 and when I readed this forum  - one question need to be answered. Is it E5 better in some way? Better sensitivity / thermal / or better chip or processor then E4?

Or better is go with E4 and make " E8 upgrade " ?

All sellers says - that each camera is different inside / different lenses, better thermal sensitivity, better quaiity at all / I don´t believe in this words but want ask you, my friends.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 11, 2013, 03:35:19 pm
They are all different inside.... but only if you look at the software  :)

(all evidence we have at the moment* says that the hardware is the same)


* disclaimer
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 11, 2013, 03:37:08 pm

Hello to all.

I have one question. I have chance buying FLiR E5 and when I readed this forum  - one question need to be answered. Is it E5 better in some way? Better sensitivity / thermal / or better chip or processor then E4?

Or better is go with E4 and make " E8 upgrade " ?

All sellers says - that each camera is different inside / different lenses, better thermal sensitivity, better quaiity at all / I don´t believe in this words but want ask you, my friends.

It seems they are basically all an identical build. Some components like the sensor could be from a better selection from a batch (fewer dead pixels to satisfy the specification of higher resolution models). Most of the features seem to be software enabled though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 03:41:55 pm
I have one question. I have chance buying FLiR E5 and when I readed this forum  - one question need to be answered. Is it E5 better in some way? Better sensitivity / thermal / or better chip or processor then E4?

As far as we can tell it's the same hardware. The jury is still out regarding binning of the sensor. With our current small amount of samples it could go either way. It might be that the more expensive models get a better binned sensor, and the E4 gets whatever is left over. Not sure.  :-// If the E4 gets the lower bins then it would depend a bit on the luck of the draw. But as shown you can get a nicely working 320x240 TIC with ~ 200 dead pixels just fine.

But since we need more data, I vote you and a lot of other people get an E5 / E8.   ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 03:58:26 pm
Hmmmm, I just received a resonse from FLIR regarding the possibility of buying a spare lens and the availability of a tripod mount adapter....

Here it is in all its glory.......

----------
Dear Mr. xxxxxxxxxx,
Please revert back to your supplying Distributor, they will be able to assist you.
PASS 01642 631685

Kind Regards,
-----------

Not quite what I expected.
Thy could at least have given you a part number...
Title: Flir E4 Thermal imaging camera teardown for Dummies?
Post by: dhenryp on November 11, 2013, 05:23:56 pm
I was on the verge of buying the E4 even before this hack was announced because I thought the 80X60 resolution was OK for my uses (checking for heating system leaks and general DIY audio amplifier thermal testing). I'm going to order one this afternoon even if I just use it in 80X60 mode.
My question is; what is the likelyhood of simplified hacking instructions getting documented that would get me the 320X240 resolution and would have very low probability of bricking the unit? I've read the instructions in previous posts but I have just about zero hacking experience (e.g. I've done very little at a PC command line and I've never used telnet). Please no flames ::) but let me know if I shouldn't be trying this as my first real hack.

Thanks,
Denis
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: toforgive on November 11, 2013, 05:25:27 pm
Flir B335 converted to B425
Functions added: panorama, video recording, program mode, thermal fusion!

All credits goes to Mike! many many many many thanks!  :clap:

- in camera settings set usb mode to network disk
- ftp to /FlashFS/system/gui.d/config.d/ (user: flir pwd: 3vlig)
- edit gui.cfg and replace all "false" with "true"
- put the correct CRC in the file and overwrite it in the camera
- shut down camera, remove battery, restart

Greetings from Italy

 :-+
Title: Re: Flir E4 Thermal imaging camera teardown for Dummies?
Post by: mikeselectricstuff on November 11, 2013, 05:57:22 pm
I was on the verge of buying the E4 even before this hack was announced because I thought the 80X60 resolution was OK for my uses (checking for heating system leaks and general DIY audio amplifier thermal testing). I'm going to order one this afternoon even if I just use it in 80X60 mode.
My question is; what is the likelyhood of simplified hacking instructions getting documented that would get me the 320X240 resolution and would have very low probability of bricking the unit? I've read the instructions in previous posts but I have just about zero hacking experience (e.g. I've done very little at a PC command line and I've never used telnet). Please no flames ::) but let me know if I shouldn't be trying this as my first real hack.

Thanks,
Denis
It really isn't that hard, and with the standard hack the worst that will happen if you get it wrong is it will stay in E4 mode as it doesn't disturb any of the existing files. Only the menu hacks are a bit more invasive so stay away from those if you're nervous.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 11, 2013, 06:06:30 pm
Anything what I can do to copy a 1.18.8 firmware (hackable) from one E4 and write it to another with 1.18.7?
By just copying all directories files with Filezilla, many files are skipped (probably being used by Windows) and I am afraid of just writing those back to another camera.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 06:17:39 pm
Anything what I can do to copy a 1.18.8 firmware (hackable) from one E4 and write it to another with 1.18.7?
By just copying all directories files with Filezilla, many files are skipped (probably being used by Windows) and I am afraid of just writing those back to another camera.
I wouldn't risk it - I don't think anyone has noticed any issues with earlier FW so best to leave as-is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 06:48:11 pm
Well we have now heard of a B series model being released from its 'chains'. I wonder how many other models will now be given the 'Mike' treatment and upgraded via just firmware switches ?  :)

I have an RS232 maintenance port on my PM series cameras just begging to be investigated  :)

Maybe after I have learnt a bit more about such 'hacking' processes.
I'd be surprised if the Ex0 series weren't very similar - all donations welcome (subject to export regs of course!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 11, 2013, 07:01:28 pm
I have just spoken to David Atkins at PASS

Placed an order with Pass first thing this morning but that was before i read Aurora's post, d'oh!

Was put through to their Thermography guy (that was David) and yes everything seemed well organised - will let you know how i get on.

I was seriously thinking of getting an E4 after Mike's review (the MSX feature looks superb) but this thread pushed me over the edge to commit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tealsuki on November 11, 2013, 07:36:18 pm
Any recommendations for a Telnet client ?

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66731;image)

Well, bugger. What is the world coming to?
Telnet is activatable through the "install optional features" menu in the add/remove programs page, iirc.

Edit: d'oh, should have read the next three pages before I commented.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 11, 2013, 08:01:45 pm
They are all different inside.... but only if you look at the software  :)

(all evidence we have at the moment* says that the hardware is the same)


* disclaimer


I am in same situation. Already contacted Mike for little help / Thank you / Aurora and others. I think I know right now - how to do " hack " but still waiting for my camera. I ordered E5 10 days ago and my seller said - you must wait minimum 7 more days because too many people making orders. But this seller offers me E4 - in stock and for collection ready in 24 hours.  I am from Czech Republic.

Is really E5 much better than E4 ? What do you think MIKE, AURORA and other members? Is it worth it to buy E5 instead E4??

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on November 11, 2013, 08:20:32 pm
I am in same situation. Already contacted Mike for little help / Thank you / Aurora and others. I think I know right now - how to do " hack " but still waiting for my camera. I ordered E5 10 days ago and my seller said - you must wait minimum 7 more days because too many people making orders. But this seller offers me E4 - in stock and for collection ready in 24 hours.  I am from Czech Republic.

Is really E5 much better than E4 ? What do you think MIKE, AURORA and other members? Is it worth it to buy E5 instead E4??

By the specs, the E5 is probably a worthwhile improvement over the E4 if you don't plan on hacking it.  It offers 2.25 times the thermal pixel count for a 50% increase in price.  If you're going to hack it, they're all an E8 inside anyway so you'd be better served to save some money and get an E4.

The flip side to that is that you will have a ~$1,495 (US) camera that will do everything the ~$5,995 (US) camera will do and more with the instructions posted here in this thread.

So, you could either say that you overpaid by ~$500 (US) or that you will still save yourself ~$4,500 (US)...depends on whether you want to look at the bright side or not.

If it was me, I'd cancel the order for the E5, buy the E4 that's already in stock, and follow closely the instructions in this thread to unlock all the software goodies...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 11, 2013, 08:42:28 pm
I have to sniggle when people say 'grey importers' I used to use that exact phrase to put people off buying the same product from cheaper sources when I worked in the industry................... we used to source from the cheapest places we could find and because we were a dealer we could rubber stamp it as UK sourced...............

Its a global environment we live in now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 08:48:03 pm
There appears the possibility of a 2 Degree span as well  :)

2 degree span is for wimps. Automated 0.4 degree span with spot measurement assisted level is where it's at today.  And you even can specify what coordinates you want to take the spot measurement from. Other measurements obviously work as well, but I found spot measurement to be convenient.

The coordinates bit I hacked in there because during playing around I got one of those popups. Right in front of usual spot measurement location. And since I didn't want to reboot just yet ... sooooo move the spot measurement somewhere above that silly WARNING dialog box and continue mucking about. ;D

I've been playing around some more today, but I have to say this is one cool bit of gear! Lots of untapped potential still to be had.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 11, 2013, 08:55:46 pm
For professional or business critical use a hacked unit is a concern as the calibration is void, even if no calibration error has actually been introduced. This is because you are operating the equipment outside of the manufacturers specification for the model.

If having a calibrated / certified piece of equipment is important, surely there's nothing stopping you from sending any camera you like to an independent, accredited calibration lab for independent verification? There's no reason why a cal lab shouldn't be able to provide a certificate showing the error and uncertainty.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 11, 2013, 09:12:59 pm
ISO based calibration only needs to meet the specification you have documented in your operating policies, so if you have a multimeter, you could effectively only have it calibrated for volts DC - saving money. You could even state you use in house calibration equipment.

For instance we used to calibrate all our field multimeter's that were about 0.5% with 2 externally calibrated 0.01% meters.

A Calibration specialist will calibrate the meters against the manufacturer's specification, if they meet this then it gets passed, they would not even look a firmware version; unless of course the manufacturers specification states a minimum Ver. which I have never seen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on November 11, 2013, 09:13:42 pm
Hi Mike,
cool video about that Audi camera.
I scored on on Ebay here in Germany myself today too. Seems to be identical.
Have you yet found anything that might help to get a picture out of it or any other useful information?
There must be some enable Line or missing voltage or something...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AndyC_772 on November 11, 2013, 09:16:27 pm
If it's going to cause paperwork problems, then don't go there. I completely agree.

But here's a thought experiment. Suppose you buy a multimeter, and after a few years in service, the voltage reference fails. The original part is unobtainable, so you replace it with a newer part that has a similar (or better) specification, and then send the repaired unit off to be calibrated.

It comes back reading bang-on, of course, with a certificate showing tiny percentage errors on all ranges. It's fixed, it's been tested, it works perfectly well, yet technically it's not quite the same as when it left the factory.

Is it OK to use? Valid scientific measurement of the unit at the cal lab would suggest 'yes', but there will always be a note in the equipment's log which states it was modified.

The question is, for what purpose is the meter now unsuitable, and why?

Could *any* testing restore adequate levels of confidence, for all purposes, in the meter?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 09:17:46 pm
Andy C 772,

Not sure that works as you would think.

If you go to a calibration house and ask them to test a piece of hacked equipment, I am sure they will happily test it for you and charge the required sum. BUT would they include a Caveat that the equipment is being operated outside its manufacturers specifications and as such the ongoing calibration is not considered reliable. There will be a very real element of doubt introduced for which the CAL house will protect itself. Also ....would you wish to show someone a CAL cert that says you use hacked equipment ? I wouldn't.

Maybe the professional members of this Forum know more about this as I only have standard equipment calibrated. It may be best to ask the question of a CAL house before buying and hacking a unit,
Calibration does not need to be against a manufacturer's spec. It can be to any spec, so if you tell them 'here's a 320x240 camera, here's our spec' They will test it against that spec.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 11, 2013, 09:21:36 pm
Postage is expensive to the USA these days. Many warranties are RTB.

I understand some will want to err on the side of caution with a high value item, but from the US these are £640 + £36 shipping ($56) if I need to send the same weight back and covered with insurance it will cost me £53 - worth the gamble to me; especially knowing how super reliable this FLIR kit is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 11, 2013, 09:28:46 pm
Bold statement on FLIR's website:

"As the global leader in infrared cameras and thermography equipment, FLIR ensures that your support begins, not ends, at the time of purchase. With over 60 sales and service offices worldwide, you are never far from a FLIR support representative."

The end bit would suggest you can use your new E4 as a tourist :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 11, 2013, 09:34:21 pm
GBP640 ?

GBP794 with VAT & Duty  ;)

Are you a tax man ? if so yes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 11, 2013, 10:37:23 pm
Thank you so much ! I think - E4 will be good call. One more time - big thank you!!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Calimero on November 11, 2013, 10:38:53 pm
And right now - find hack for FLIR TOOLS+ or Flir Reporter  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 11, 2013, 10:47:21 pm
GBP640 ?

GBP794 with VAT & Duty  ;)

If you negotiate with the UK retailers, at least with PASS, a discount can be secured. My deal was very reasonable even when compared to US prices, low risk and UK centric  :)

I paid full retail price as advertised on their website - that's the problem with having a bottle of whisky in front of you when you're on the internet at 1am. That's also why it's an extremely good idea for any merchant to have an online shop!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bean_dip on November 11, 2013, 10:56:15 pm
I paid full retail price as advertised on their website - that's the problem with having a bottle of whisky in front of you when you're on the internet at 1am. That's also why it's an extremely good idea for any merchant to have an online shop!

Don't feel bad. I bought mine off of Amazon for $995, but after hacking it and seeing the features I've gained for that price (and renting it to my employer for $50 a day for a few days) I honestly am not bothered at all by the price I paid.

I'm half-considering buying one of the questionable $312/ea los of ten from Aliexpress and hacking them into thermal IP cameras using some hardware I've got laying around...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 11:08:36 pm
a) The lens is not an accessory
b) The tripod mount does not appear to exist yet.

@Lens: no wonder - it's not intended to be user-replacable (see shutter, correction settings, calibration values inside camera etc)
@Tripod mount: deliberate strategy of removing features ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 11, 2013, 11:10:43 pm
a) The lens is not an accessory
b) The tripod mount does not appear to exist yet.

@Lens: no wonder - it's not intended to be user-replacable (see shutter, correction settings, calibration values inside camera etc)
..but is reasonable to have it available as a spare part. Even better if it comes with an adjustment tool..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 11:11:24 pm
With regard to hacking software....Hmmm that is a little different to me than what Mick has done with the E4. My moral compass thinks hacking a software product that you do not already own is theft. At least we bought our E4's and modified them. I am no goody 2 shoes but part of my job is anti-malware and anti-hacking !

While certainly a fun moral brainteaser, I take the view that whatever device they sell me at price $xyz is whatever device I receive after paying $xyz. What I do with it after that is my business. 100% disregarding clever bullshit legal boxes they might try to tack on. You sell me the device at whatever price you deem fit. And after that I get to use it as you think I should use it (making the bean counters and/or legal droids happy), or I use it as I deem fit.

While you may argue "but but, I (the seller) did not intend you to use it that way". That is just too bad. You put a physical device with certain characteristics on the market for a certain price. We agreed upon a price. I bought it. The End.

I could continue with A Tretease Concerning the Principles of Launching Lawyers and Politicians Into the Sun, but I shall refrain.

Arbitrary made up legal bullshit aside, and concentrating on the reality of physical devices in your filthy monkey paws ... this E4 is damn nifty. I really love how they (FLIR) exposed all sorts of functionality in a standardized way through this resource tree.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 11:20:05 pm
FLIR TOOLS+ is appallingly expensive considering the additional functionality that it provides over FLIR TOOLS standard that comes free with the camera.  TOOLS+ is 50% of the E4's cost  :scared:

What would you consider the top 3 awesome features in Flir Tools+ ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 11:28:06 pm
a) The lens is not an accessory
b) The tripod mount does not appear to exist yet.

@Lens: no wonder - it's not intended to be user-replacable (see shutter, correction settings, calibration values inside camera etc)
..but is reasonable to have it available as a spare part. Even better if it comes with an adjustment tool..
I guess the whole concept is to offer "service" to the customer, no need for the customer to take apart things... just send it to Flir, say "fix please" and pay a premium :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 11:38:32 pm
Taucher....My issue is that I askedFLIR customer support for a spare parts quote and got referred to my dealer when I know that such a part is not a common dealer item ! Less than impressed with the standard "go to your dealer" response.
Sure, but what else shall be expected form a company that is used to governments and other highly financed institutions as customers...

My point here: let them live - we're hacking the item out of spec - so don't expect their service policy to change just because we would like it to provide us with even better options... the only thing that one can expect is that the original item works as described by the manufacturer.

If my wishes would come true, then there would be a cheap frontface-replacement which adds a tripod mount there, has a quickchange system for lenses etc...
... but I guess then I'd better have bought an Exx series at first place ;)

My E428+ is a bargain when comparing the image quality to the initial price - and I'm very happy with it - not perfect, but mine! :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 11, 2013, 11:42:30 pm
With regard to hacking software....Hmmm that is a little different to me than what Mick has done with the E4. My moral compass thinks hacking a software product that you do not already own is theft. At least we bought our E4's and modified them. I am no goody 2 shoes but part of my job is anti-malware and anti-hacking !

While certainly a fun moral brainteaser, I take the view that whatever device they sell me at price $xyz is whatever device I receive after paying $xyz. What I do with it after that is my business. 100% disregarding clever bullshit legal boxes they might try to tack on. You sell me the device at whatever price you deem fit. And after that I get to use it as you think I should use it (making the bean counters and/or legal droids happy), or I use it as I deem fit.

While you may argue "but but, I (the seller) did not intend you to use it that way". That is just too bad. You put a physical device with certain characteristics on the market for a certain price. We agreed upon a price. I bought it. The End.

I could continue with A Tretease Concerning the Principles of Launching Lawyers and Politicians Into the Sun, but I shall refrain.

Arbitrary made up legal bullshit aside, and concentrating on the reality of physical devices in your filthy monkey paws ... this E4 is damn nifty. I really love how they (FLIR) exposed all sorts of functionality in a standardized way through this resource tree.

I agree with both points. The hardware you buy is legally yours, so you are free to do what you please with it. However, the user does not own the software he or she buys; they are only licensed to use it. So yeah, modifying the software could open a can of legal worms.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 11, 2013, 11:45:51 pm
For a lens adjustment tool, we have a 3d printer at work (makerbot). I've drawn up what I think is a tool that fits the 10 notches in the E4 lens. I will attempt to print it tomorrow and see if it fits based on some less than stellar measurements I took with a pair of calipers.

If it doesn't fit I'll refine it. Once I get it working I'll post up the sketchup/stl file for anyone that want's to make one or modify to suit their needs.

Unless someone beats me to it...

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 11, 2013, 11:47:49 pm
Before I forget to mention it...

The "Mike Hack" does NOT constitute 1 configuration. In fact, it is 2 configurations which combine into 1. I forget the exact term right now, but it's in the boot logs. :P

What happens is that the all configs are read from the .d dirs and then combined into 1. So while currently things are working out just fine, be aware that all the configs are being read, and then either "first come, first serve" or "last encountered" rules apply.

And while we are on the topic of legalities. I can take The Product into E8 mode without "hacking" any files. All I need to do is use the Flir sanctioned resource tree, and problem solved. So you gimme a stock E4, I press some buttons, type some stuff in a telnet prompt and I'm good to go.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 11, 2013, 11:51:10 pm
For a lens adjustment tool, we have a 3d printer at work (makerbot). I've drawn up what I think is a tool that fits the 10 notches in the E4 lens. I will attempt to print it tomorrow and see if it fits based on some less than stellar measurements I took with a pair of calipers.

If it doesn't fit I'll refine it. Once I get it working I'll post up the sketchup/stl file for anyone that want's to make one or modify to suit their needs.

Unless someone beats me to it...

cheers,
george.
My posting #1094 here could interest you - it contains a .stl file that might also work - I even took the lens out to do the measurements - but had no time to fabricate it yet - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 12, 2013, 12:24:48 am
For a lens adjustment tool, we have a 3d printer at work (makerbot). I've drawn up what I think is a tool that fits the 10 notches in the E4 lens. I will attempt to print it tomorrow and see if it fits based on some less than stellar measurements I took with a pair of calipers.

If it doesn't fit I'll refine it. Once I get it working I'll post up the sketchup/stl file for anyone that want's to make one or modify to suit their needs.

Unless someone beats me to it...

cheers,
george.
My posting #1094 here could interest you - it contains a .stl file that might also work - I even took the lens out to do the measurements - but had no time to fabricate it yet - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820)

Funny, I didn't even notice that post (this thread is soooo long now). Anyhow, my 'version' looks identical to yours so we'll see if it does indeed work.

If so, then I'll add some cone shape to the outside top to provide better finger grip for adjusting.

I'll download your file to look at it. But, from my measurements I think it is 12mm outside diameter and the 10 spokes (spaced equally at 36 deg) are a 2mm diameter semicircle sitting on the 12mm OD. Anyhow, that's from my rough measurements.

I'll find out tomorrow if it fits...

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 12, 2013, 12:45:22 am
My posting #1094 here could interest you - it contains a .stl file that might also work - I even took the lens out to do the measurements - but had no time to fabricate it yet - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326820/#msg326820)
If so, then I'll add some cone shape to the outside top to provide better finger grip for adjusting.

I'll download your file to look at it. But, from my measurements I think it is 12mm outside diameter and the 10 spokes (spaced equally at 36 deg) are a 2mm diameter semicircle sitting on the 12mm OD. Anyhow, that's from my rough measurements.
I made the model to:
11,867mm diameter,
0,99mm radius on the 10 spokes

Attached the original version which could be cool to 3D print where I had added a grip

EDIT: link first feedback:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330321/#msg330321 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330321/#msg330321)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 12, 2013, 12:53:24 am
Ok, we'll see if 12mm is too big :)

I have a cone inside mine to allow the lens to 'see' more when adjusting. Yeah, the finger grip area is what I was planning to add if the tool keys correctly - figure I'll keep the initial print simple and test dimensions first.

I'll know tomorrow what refinements if any are needed and can likely get that done and a mark II made if needed while at work.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 01:11:31 am
Considering the added complexity of a tool that's easy to adjust while looking atthe screen, I'm wondering how necessary "view while focus" actually is for selecting occasional close-up work.  You can probably just mark the factory/infinity position, and then estimate a few standard fractions of a turn for close-ups - fine adjust is simply moving the camera closer & further to get in focus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 12, 2013, 01:18:40 am
Considering the added complexity of a tool that's easy to adjust while looking atthe screen, I'm wondering how necessary "view while focus" actually is for selecting occasional close-up work.  You can probably just mark the factory/infinity position, and then estimate a few standard fractions of a turn for close-ups - fine adjust is simply moving the camera closer & further to get in focus.

True. I watched your video and it seems a few fixed rotation points are all that is needed and a small holder/tripod to look down on a PCB from a fixed height (that would be my primary use).

Making the tool have a handy grip to hold it to turn is just a case of "easy enough to add in sketchup and to print so why not" :)

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 12, 2013, 01:19:10 am
Considering the added complexity of a tool that's easy to adjust while looking atthe screen, I'm wondering how necessary "view while focus" actually is for selecting occasional close-up work.  You can probably just mark the factory/infinity position, and then estimate a few standard fractions of a turn for close-ups - fine adjust is simply moving the camera closer & further to get in focus.
I've seen that you have marked the lens - but actually I'm struggling a bit to get the optimum sharpness/ infinity sharpness set correctly as the field of depth would ideally be just touching infinity, while providing maximum sharpness towards the camera - thereby covering most of the useable range with optimum sharpness.
Getting that setting without a hole to peek through while turning is &%$&/$§!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 12, 2013, 03:31:56 am
Does anyone have an i7 config file? Updating the i3's existing configuration lines for mbox and isotherm's enabled and maxCount settings does not seem to be enough to get these features enabled (still no Measurement menu).  Modifying this service mode config file which says it enables the functions for use as the main config doesn't unlock these features either. I expected that this would get that all working. I have full resolution by modifying this so I know the config file itself is properly loading...

Config minus header comments & last two lines:
Code: [Select]
#
.caps entry
.caps.config entry
.caps.config.name text "i3_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 6
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 12, 2013, 04:56:11 am
Get it from the update pack?

The ix update pack doesn't seem to include any of the configuration files. It's pretty sparse actually other than web interface file updates...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 12, 2013, 09:02:10 am
Considering the added complexity of a tool that's easy to adjust while looking atthe screen, I'm wondering how necessary "view while focus" actually is for selecting occasional close-up work.  You can probably just mark the factory/infinity position, and then estimate a few standard fractions of a turn for close-ups - fine adjust is simply moving the camera closer & further to get in focus.

Totally agree with this.

If anyone does manage to make a suitable focus tool I'd be happy to buy/donate/kickstart or whatever for one :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 09:36:01 am
Get it from the update pack?

The ix update pack doesn't seem to include any of the configuration files. It's pretty sparse actually other than web interface file updates...
The config files are written during factory cal and are not in the FW update. The E8 hack config was created by enabling all the options that were there - I have  a feeling that I also merged options from a ui.cfg file for the pip modes. I'm fairly sure someone here has a real i7, so should be able to ftp off the cfg files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 12, 2013, 12:10:26 pm
I ordered at the weekend from David at PASS as mentioned above.
He's a thoroughly nice guy and did me a great deal. It's well worth giving him a call if you intend buying one of these units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rolli on November 12, 2013, 12:29:19 pm
Uhh uh - very bad news!!!!!

until now I was silently reading here. But now I need to post: I just got the feedback from a friend. He purchased an E5 in early October but as his display was showing two vertical stripes at the left and right side of the screen, his unit was sent back for repair.

He got it back yesterday afternoon ...... with installed firmware 1.20.3
He tried until now: hack is NOT working anymore!!!   :scared: :scared:

No secret menu anymore, installation of E8.cfg is not enhancing resolution, serial interface (the one behind the front cover) also not working.

He had to leave now as he is travelling but will post details by himself at the weekend for seeking any advice.

Aaargh  :wtf: - I already ordered mine a week ago but my supplier had no stock and waits for delivery. If all new units now are having a new fw too, I will need at least two bottles of scotch at once and another one each time when I see my E4 with crappy 80x60 pixel. Oh Lord, why didn't I buy it earlier, why why why? Fu**

Any advise? Is there any supplier who still got stock now? I better should cancel my order then and purchase there quickly.
Anybody want to sell a used one? Please PM me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 12, 2013, 12:35:10 pm
Not really surprising ... the hack was pretty easy to fix. I'm sure it's still very possible to hack it, but I will sure as hell not risk upgrading mine to try it. So I guess you're on your own (well, with all the people in the same situation as you).

Did he try just using the installer to flash the old firmware on it ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 12, 2013, 12:46:03 pm
"supplier had no stock and waits for delivery"  This is more likely delivery from their supplier.

Flir would get a pretty large number manufactured all at once and then restock the suppliers from a main stock warehouse as they ordered them.

So there's a pretty good chance you'll still get the normal firmware.

Firmware 1.20.3 will be Flirs latest firmware which will be used for their next manufacturing run.
There's no way to know if this has already happened or if they have a pallet of 10,000  V1.18 E4's still waiting to sell.

Considering what we now know about how the E4 works i imagine hacking 1.20.3 would still be quite possible but may require unsoldering the flash chip and doing some out of circuit changes to the config files stored in there. Can anyone remember if the flash is BGA or not?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 12:53:15 pm
Dammit!!! I am in the same boat as Rolli; I have one backordered from tequipment. I will be so angry if they ship me a unit that can't be hacked -- that's the only reason I bought the damn thing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on November 12, 2013, 01:06:32 pm
Shit, mine is on back order too.

that's the only reason I bought the damn thing

Damn right!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 12, 2013, 01:22:28 pm
No obvious FW info on my camera or packing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tinhead on November 12, 2013, 01:25:36 pm
Can anyone remember if the flash is BGA or not?

no, it is TSOP. But even if it would be BGA, there is still JTAG to i.MX, so not a real problem to burn old firmware dump.
For sure there are config files, so well if there is no way to connect over USB build your own firmware which will backup config files, get dump from ppl who have older firmware, flash it over JTAG and restore your config files - easy as pie (it didn't looks like FLIR made any effort, in current hardware, to prevent their hardware/firmware with security features in i.MX. However, there is still chance that they will, or even change PCB/components. This will eventually happens if they got presure from gov's about potential export/blah/risk what so ever thing).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 12, 2013, 01:29:47 pm
Easiest way of seeing FW info is from the screen menu
Settings > Device Settings > Camera Information
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 01:30:57 pm
Before anyone starts panicking remember there will almost certainly still be a way to update firmware.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on November 12, 2013, 02:08:47 pm
DON'T PANIC ! (Hitch-hikers guide). Now they have an u/dated version, I'd possibly be wary of their Tools, has anyone done
a firmware update on-line?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 12, 2013, 02:46:08 pm
Don't panic! Don't panic Captain Mainwaring!

We're dooooomed......
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 12, 2013, 02:49:48 pm
I guess they might be busy on both the i3/i5 and the e40/e50/e60 series as well :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 03:08:31 pm
I guess they might be busy on both the i3/i5 and the e40/e50/e60 series as well :)
i series is to all intents and purposes obsolete - doubt there will be any new production.

Obviously the first thing to see is if the firmware update mechanism is still there, to either downgrade to 1.18.7, or reverse-engineer the packet protocol.

There may also be a way in via the boot menu on the debug port - if we can find what format of file it's looking for and create that from the 1.18.7 package that may also be a way in.

And of course there's still the zero-day option - FPGA on the raw datastream...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 03:19:20 pm
Even assuming the didn't remove the ISP/JTAG headers, is an old .hex file (or however it manifests itself) available? Would a TL866 universal programmer be capable of programming this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 03:24:21 pm
So in other words I should cancel my order now
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 03:25:28 pm
Can anyone remember if the flash is BGA or not?

no, it is TSOP. But even if it would be BGA, there is still JTAG to i.MX, so not a real problem to burn old firmware dump.
For sure there are config files, so well if there is no way to connect over USB build your own firmware which will backup config files, get dump from ppl who have older firmware, flash it over JTAG and restore your config files - easy as pie (it didn't looks like FLIR made any effort, in current hardware, to prevent their hardware/firmware with security features in i.MX. However, there is still chance that they will, or even change PCB/components. This will eventually happens if they got presure from gov's about potential export/blah/risk what so ever thing).
Reprogramming the flash is not so simple due to the issue of bad-block mapping and ECC - a straight image from one unit would almost certaonly not work on another. It would need to be read & parsed with the knowledge of how WinCE manages the flash, and then reconstructed. Easiest way would probably be to connect it up & mount on another WinCE system.

BTW I've not ID'd a JTAG connector but I think there are enough unidentified pins on the FFC , and tehre is also that unpopulated FFC con to investigate.

and don't forget that even in it's unhacked form, it's still a good tool!

Bear in mind that the one unconfirmed report from a new user relates to a unit that was sent back for repair, so we don't know what is in the current supply chain (though we know the chain is short from the recent cal dates).

I did think that it might have been worth sitting on the CRC01 stuff for a while.... Oh well let's just wait & see.  I won't be looking into it too hard as I have an Audi automotive unit to play with, and a new 400,000 LED installation to start designing  ;D
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 12, 2013, 03:34:06 pm
So in other words I should cancel my order now

I would think that firmware updates have not reached the production line yet. And we only have 1 confirmation so far that the new firmware blocks the update. The person who tried might have made a mistake in trying to update.  So I would still get the camera :)

[Edit: And remember the report is from a new 1 post user - might be a HackADay referral - and his report is 2nd hand. He also mentions that the E5 owner could not get the front panel serial to work any longer - which would imply that the E5 user/owner is quite technical - so why have we not heard from the owner here? So it might be FUD released from Flir - or it might be genuine... but...]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 03:34:40 pm
So in other words I should cancel my order now
Up to you, but hard to say.
Any new orders should probably be made conditional on FW version though till we know more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 12, 2013, 03:37:45 pm
So in other words I should cancel my order now

If you are into hearsay, yes. One more old stock item left for the more daring.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 03:55:47 pm

[Edit: And remember the report is from a new 1 post user - might be a HackADay referral - and his report is 2nd hand. He also mentions that the E5 owner could not get the front panel serial to work any longer - which would imply that the E5 user/owner is quite technical - so why have we not heard from the owner here? So it might be FUD released from Flir - or it might be genuine... but...]
If it's FUD, Flir would be the last people to propagate it as the only effect would be to kill E4 sales. If anything it would be more likely Fluke :-DD
However I very much doubt FUD (unless just trolling) as anyone reading this thread knows there are plenty of units on their way to users here so it wont be more than a day or two before we know more, at least as regards units in the distribution chain now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ovnr on November 12, 2013, 03:58:06 pm
Well, mine was just shipped. *crosses fingers*
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 12, 2013, 04:01:43 pm
First post and new to eevblog. But not to hacking various electronics.

Add me to the list of new E4 owners/modders.
After fiddling with Windoze for far too long yesterday I finally got the e3.cfg installed and working, Wow what a difference.

Heartfelt thanks to Mike and all the others who made this possible.

Don't forget to apply for your freebies from FLIR,
http://www.flir.com/thermography/americas/us/view/?id=62227 (http://www.flir.com/thermography/americas/us/view/?id=62227)

I see that there is some talk of FLIR "upgrading" repair cameras to newer non-hackable firmware.
FWIW FLIR's download page   http://flir.custhelp.com/app/account/fl_download_software (http://flir.custhelp.com/app/account/fl_download_software)  still lists 1.18.7 update pack as the most recent for the Ex series. (just checked again, but YMMV) (you probably need to be registered & logged in to get to the downloads pages)
Given the talent here I'm sure that 1.20.?? is not the end of the story.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 04:07:20 pm
Quote
Bear in mind that the one unconfirmed report from a new user relates to a unit that was sent back for repair, so we don't know what is in the current supply chain (though we know the chain is short from the recent cal dates).


How are away are the calibration dates from the sipping dates?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 12, 2013, 04:12:44 pm
My calibration date was Oct 2, 2013 ship date (to me) was Nov 6, 2013,

S/N: 639037xx
Site: FLIR Systems OU, Estonia
Firmware: 1.18.7
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 12, 2013, 04:35:22 pm
Bold statement on FLIR's website:

"As the global leader in infrared cameras and thermography equipment, FLIR ensures that your support begins, not ends, at the time of purchase. With over 60 sales and service offices worldwide, you are never far from a FLIR support representative."

The end bit would suggest you can use your new E4 as a tourist :)

Plus all E-series are 9hz indicating global use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 12, 2013, 04:37:25 pm
First post and new to eevblog. But not to hacking various electronics.

Add me to the list of new E4 owners/modders.
After fiddling with Windoze for far too long yesterday I finally got the e3.cfg installed and working, Wow what a difference.

Heartfelt thanks to Mike and all the others who made this possible.

Don't forget to apply for your freebies from FLIR,
http://www.flir.com/thermography/americas/us/view/?id=62227 (http://www.flir.com/thermography/americas/us/view/?id=62227)

I see that there is some talk of FLIR "upgrading" repair cameras to newer non-hackable firmware.
FWIW FLIR's download page   http://flir.custhelp.com/app/account/fl_download_software (http://flir.custhelp.com/app/account/fl_download_software)  still lists 1.18.7 update pack as the most recent for the Ex series. (just checked again, but YMMV) (you probably need to be registered & logged in to get to the downloads pages)
Given the talent here I'm sure that 1.20.?? is not the end of the story.

Confirmed (see screenshot), last firmware update was October 17th, version 1.18.7. There might have been some 'emergency' firmware quickly installed on the previous poster's friend's E4 to counteract this hack, but it seems the most current 'official' version is still hackable. I should be receiving my camera tomorrow, will report back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 04:38:10 pm
Quote
so it is plausible that Version 20 is the new hack countermeasure.
Or just a routine scheduled production tidy-up to remove debug features now they've shipped enough to be confident that there aren't any major bugs.
Will be interesting to see if they've actually fixed the 2 actual 'bugs' in the older version - bootup messages onscreen if button rpessed during startup, and lack of time/date in the file info screen. Or maybe even addressd issues I raised in the review, though we know some of the apparently unused keys are actually used for some functions in higher models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 04:40:39 pm
Unfortunately, the official website is an invalid indication of current firmware. There have already been E4's shipped with firmware newer than 1.18.7
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on November 12, 2013, 05:01:31 pm
Unfortunately, the official website is an invalid indication of current firmware. There have already been E4's shipped with firmware newer than 1.18.7

Where are you located, and did you buy the camera online? If you are in the EU, and bought it online, you should be able to check it out and then return it within 14 days if you don't like it, and then get the money and all expenses back, under EU customer protection laws for sales done online. And since the price is above 40 Euros, you don't have to pay for the return shipment either.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 05:10:27 pm
Confirmed (see screenshot), last firmware update was October 17th, version 1.18.7. There might have been some 'emergency' firmware quickly installed on the previous poster's friend's E4 to counteract this hack, but it seems the most current 'official' version is still hackable. I should be receiving my camera tomorrow, will report back.

And let's not discount the possibility of user error. This is only one report, and not first hand, right? Anyways, we'll find out soon enough when more people get their E4. Especially the ones currently on backorder.

Should the newer firmwares really be fixed for the current hack, there's still loads of options. If this really is a "fix the hack" update, then the obvious choice is just downgrade to a known to work version. Either through the standard FlirInstallNet, or absolute worst case it's jtag time.

Incidentally, I was reversing the usb protocol used by FlirInstallNet ... but I got a bit sidetracked.  ;D Currently busy with a python script for unlocking some features + generic data logging.

At any rate, if the 1.20.3 firmware really is a Flir fix in response to the E4 hack then it would be useful if we could get the versions + build dates. And obviously a dump of the new firmware. ;) Did I understand correctly that the USB mode menu is no longer working on 1.20.3? Or maybe they just bound it to a new key combo.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 05:15:32 pm
Firmware News update

I have just spoken with David at PASS.

My E4 was despatched today. All signs are that it is an old firmware  :)
What signs - did they say if they'd checked FW version of their current stock?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 05:15:54 pm
Many suppliers advertise money back guarantees but the only issue I have met is with digital cameras and software. Once a digital camera has had a picture taken, some suppliers consider it 'Used' and as such non-resalable. I suggest you do not take any thermal pictures with the camera before confirming its firmware status.

For those in the EU, if you bought it through a webshop you should have a 2 week period to decide "No sir, didn't like it" and send it back (oh, and get a refund XD).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 05:26:18 pm
What I heard from David did not sound promising  :( I don't want to misquote him, but I thought there was mention of delaying shipment's and new firmware, but please confirm this if buying an E4 as I may have misheard what was said.

I wouldn't be at all surprised if the new firmware "fixes" things. But we really need more info, so for now I guess it's business as usual until we get some more data.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 12, 2013, 05:29:11 pm
Mine was shipped by PASS this morning! Fingers crossed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 05:41:00 pm
PASS also appear to have a communications channel to FLIR HQ ?
As a distributor I would rather hope so....  When they called me after my review  they mentioned they were the biggest FLIR UK distributor.
Maybe they'd like to feed back that most of the recent rush of purchases are from people that wouldn't have bought any TIC if the hack hadn't happenned 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on November 12, 2013, 05:44:29 pm
Many suppliers advertise money back guarantees but the only issue I have met is with digital cameras and software. Once a digital camera has had a picture taken, some suppliers consider it 'Used' and as such non-resalable. I suggest you do not take any thermal pictures with the camera before confirming its firmware status.

That's exactly the kind of thing why that customer protection legislation was put in place, as far as "off premise" sales are concerned. It is meant to give the customer a chance to check out the goods, in some attempt to "emulate" an on-premise sale where you could actually try out the stuff beforehand. Since that is not possible with distance and off-premise sales, the 14 day period was put into place.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on November 12, 2013, 05:49:35 pm
It is probably some knee jerk reaction from the bean counters without considering the long term implications.

That would be my guess as well. After all, those bean counters concern themselves only with stuff happening in a quarter year, until the next report is due.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 12, 2013, 05:49:39 pm
It might be a good idea to preemptively look for a new way to hack the device before the new firmware (if it really exists) becomes standard.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 06:03:25 pm
It might be a good idea to preemptively look for a new way to hack the device before the new firmware (if it really exists) becomes standard.

Heh, I suspect you and I are not the only ones that thought of that one. ;) The main preemptive task was just to grab all the online resources you can find before they go *poof*. And check out the possibility to do some vague non-descript stuff. After that, it's just wait and see what they did.

I have high hopes that we can work around it, especially if it is a pointy haired knee jerk reaction. Those kind of fixes tend to suck, due to lack of thinking time. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 12, 2013, 06:09:15 pm
It might be a good idea to preemptively look for a new way to hack the device before the new firmware (if it really exists) becomes standard.

I disagree, we need the new firmware to look at (other) ways to hack the device. I would be very surprised if it was not hackable anymore, and with the knowledge we have now I bet that it is going to take less time this time, whatever they have done. It's clear that it is just software, the hardware will still be the same, and the new firmware has been put together in a hurry (assuming that it has been created to stop the current hack).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 06:22:59 pm
Greedy bastards! Instead of thinking, "look at all these E4 sales, thanks to this hack we are making a fortune", they are thinking, "look at all these E4 sales, no thanks to this hack we are losing a fortune"!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mardaso on November 12, 2013, 06:36:22 pm
I must have one with the last `hackable` firmware:

S/N: 63905xxx
Site: FLIR Systems OU, Estonia
Firmware: 1.19.8
Date: 28 october 2013

Arrived 8 november.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 06:44:45 pm
I must have one with the last `hackable` firmware:

S/N: 63905xxx
Site: FLIR Systems OU, Estonia
Firmware: 1.19.8
Date: 28 october 2013

Arrived 8 november.

Could you or anyone with that firmware version do the following on the telnet interface:

Code: [Select]
version
rls -r .version

Be aware of serial numbers in the first 5 lines and then every line containing the string "serial".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 12, 2013, 06:58:15 pm
Greedy bastards! Instead of thinking, "look at all these E4 sales, thanks to this hack we are making a fortune", they are thinking, "look at all these E4 sales, no thanks to this hack we are losing a fortune"!

I get your unsubstantiated disappointment but your feelings are getting in the way of your logic.

Your E4 will be great and most probably worth an E8 considering the skills and motivation of the people working on this. Worst case it will be a great E4, highly recommended by your first or second favorite teardown master.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: H.O on November 12, 2013, 07:00:29 pm
FWIW I placed my order with PASS last Friday after having them confirm that they actually had units IN stock. After sending them the money I've heard absolutely nothing.
I sent them an email this morning asking for a status update, no response what so ever. I'm not impressed...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 12, 2013, 07:07:12 pm
The supply chain appears very short with these cameras less than 2 weeks old arriving with customers.

It looks like the supply chain has been short for a while, the calibration of Mike's one was not long before he recieved it and that was before all this kicked off. By all accounts (hack or not) they have been selling very well since launch - and no wonder, with MSX it's a great product.

The way i look at it, with a such a new product there would always be a future situation where a bug fix or compelling new feature or return (for service/calibration situation) which closed the door on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 07:21:13 pm
Is it possible the 1.20 firmware is just on the E5 cameras by default?

Doubtful since firmware appears to be unified across an entire product family. Not just for the Ex, but also for <collect_the_entire_set/>. But if you want to be 100% sure, who knows?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 12, 2013, 07:24:42 pm
I think the most important factor is whether the firmware could be downgraded. If so, someone might want to upload the 1.19.* firmware to a mirror just in case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 12, 2013, 07:26:35 pm

FWIW I placed my order with PASS last Friday after having them confirm that they actually had units IN stock. After sending them the money I've heard absolutely nothing.
I sent them an email this morning asking for a status update, no response what so ever. I'm not impressed...

Same here, not terribly surprised or bothered though - i'm used to this sort of behaviour with online retail.

Confirmed in stock and ordered on Monday 9am. At the end of the day i wondered why i hadn't got any notification, order number etc. Called back and was told (by someone in fulfilment) they were expecting some "maybe late this week". Fair enough, they are in demand. Hack or not, i am not spending that sort of money buying one from anywhere other than an authorised channel.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 12, 2013, 07:29:16 pm
Ah, this will end just I feared it would. I canceled my 1st order because the first seller lied about availability, ordered at a more reliable shop for 15€ more but assured availability. Then some hours after I ordered, availability changed to 14th and nothing was sent yet. Damn it, I already received the soft case for it I ordered days later and lucky as I am, I will get an E4 with non-hackable firmware and have to send it back. Refund of the 1st order is stuck in PayPal's greedy throat btw.  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 12, 2013, 07:38:56 pm
There isn't going any such thing as a "unhackable" firmware. phone vendors and console vendors have been trying for more than a decade and still aren't there yet, so FLIR isn't going to achieve that in 2 weeks.

The question is more : Who among the people that would get a newer firmware will have the skill to achieve a new hack and the willingness to risk bricking his camera while attempting so.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 12, 2013, 07:44:43 pm
Quote
There isn't going any such thing as a "unhackable" firmware. phone vendors and console vendors have been trying for more than a decade and still aren't there yet, so FLIR isn't going to achieve that in 2 weeks.

The question is more : Who among the people that would get a newer firmware will have the skill to achieve a new hack and the willingness to risk bricking his camera while attempting so.

Noone! So yup... it's unhackable!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mardaso on November 12, 2013, 07:45:22 pm
I must have one with the last `hackable` firmware:

S/N: 63905xxx
Site: FLIR Systems OU, Estonia
Firmware: 1.19.8
Date: 28 october 2013

Arrived 8 november.

Could you or anyone with that firmware version do the following on the telnet interface:

Code: [Select]
version
rls -r .version

Be aware of serial numbers in the first 5 lines and then every line containing the string "serial".

Attached the telnet output.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: H.O on November 12, 2013, 07:46:57 pm
Aurora,
No, not David. This was before you posted his details.
I registered at their website, within one hour I recieved no less than two emails from a guy there, they seemed keen to sell....
I emailed him asking for a quote and actual stock status last Wednesday. He promptly replied with a quote but it took 3(!) more emails back and forth before he actually answered my question on whether or not they had units in stock (as the web-shop claimed) - which they didn't. He said units was due in stock that Friday. I told him I'm not going to send any money before he has a TIC to send me.

Friday came, I asked and he promptly confirmed (again via email) that units now was in stock and ready to ship  (which I suspect was not actually the case), I sent them my money and that's it.

I'm not in the UK but I'll probably give them a call in the morning.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 12, 2013, 07:52:08 pm
Focus adjust tool - the emergency version (for UK folks):

If you don't have anything better to hand, and want to adjust the focus on your E4, I found that a UK 5p coin (used carefully!) works ok...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 07:57:23 pm
Code: [Select]
version
rls -r .version

Be aware of serial numbers in the first 5 lines and then every line containing the string "serial".

Attached the telnet output.

Thanks!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 12, 2013, 08:16:54 pm
As stated before PANIC SLOWLY


From a purely statistical analysis of firmware as I dont have unit in hand, any short term mitigation by FLIR will be futile. Why?
1. Almost unrestricted access to HW via programming interface.
2. The use of a well documented application processor (iMX257 series) that doesn't have many security features enabled/available.
3. Haven't seen any mention of FLIR restricting downgrades.

Im looking forward to to the 1.20.x FW and will gladly sacrifice my TIC  ;)

After taking a deeper look at the FW and Mikes videos here are some notes for others (or maybe need corrections by others with actual camera to test)



For anyone interested. Freescale has really good documentation on setting up a development environment. At this point I wont post specifics (to stunt any patching attempts) but from a high level overview. The FPGA is manipulated by the WinCE host. The WinCE host plays "interface manager" for the FPGA device. Adjusting characteristics such as view, zoom, etc. How these functions are mapped is what Im currently working on. Very interesting thing to do if someone wants to be daring. Put the fpga.bin from the Exx series into the fw of the Ex series. I highly doubt the function mappings would be consistent but its worth a shot. If we can RE how the WinCE host manipulates the FPGA maybe we could develop our own host OS (Linux). Just a thought. Dont know how feasible this is until I have actual unit to test.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 08:37:35 pm
As stated before PANIC SLOWLY


From a purely statistical analysis of firmware as I dont have unit in hand, any short term mitigation by FLIR will be futile. Why?
1. Almost unrestricted access to HW via programming interface.
We don't know for sure if any hardware proramming interface exists. It;s not uncommon for flash chips to be preprogrammed before assembly.
Quote
2. The use of a well documented application processor (iMX257 series) that doesn't have many security features enabled/available.
Any processor-level hack could require a lot of work. I've not looked but would bet even the full data is >1k pages
Quote
3. Haven't seen any mention of FLIR restricting downgrades.
We haven't seen any mention of anything.
Quote
  • Mike's hack works on the premise of enabling certain features "post personality check" (see next point) such as the increased resolution. I think somewhere it was mentioned of finding other strings to put in the .cfg file but would need the .cfg from an E8 to be sure. While this hack is awesome to begin with I still think there is a better hack to be found/developed
  • Keeping in mind that one FW pack (1.18.7) is used across all Ex models. That means your using a vanilla install (run-time image + rootfs) that is combined with something else (onboard not in FW update) that produces the final FW that contains the cfg we modify. This "something else" is the personality check I'm referring to. Where is this? Given the clues I have (i2c calls early in boot and exposed taps on the connector) I believe its on the smaller of the two non-volatile storages (EEPROM in the video). It would make sense to store the personality here as its small and can be configured easily. The larger flash device more than likely contains your rootfs and run-time image. Has anyone performed a protocol analysis at boot (better yet, while doing a stock fw upgrade)?

I am fairly sure that the config file is written at the factory, the eeprom has the serial number, which is baked into the config file by the CRC and cross-checked at startup. The serial number is the only thing unique to the unit - my guess is it gets written via I2C by the test system, and so is independent of any flash content.
I also think the resolution data found in the eeprom is just for backwards communication either to the bootloader or the FPGA

Bear in mind that 1.20 could just be some tidying up of debug interfaces and the one second-hand report of non-hackability could just be user error doing the CRC0. Or a troll.  I've had a few PMs from people who got the CRC01 wrong

Until we actually know something I don't see any point in endless speculation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 08:39:32 pm
I actually overheard the conversation between David and a lady in the office on Monday when she stated that 30 were due in Monday afternoon or Tuesday. I suspect PASS has several customers waiting for units out of that 30 batch. If FLIR have stopped the delivery (and it is an IF), then there is little they can do. They should contact the customers though.
..and it could just be that Flir have been taken by surprise by the demand and have decided to allocate stock differently.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 12, 2013, 08:49:53 pm
Greetings from Sweden.
I just received my E4 which i ordered last week.
There was a slight delay with my order, which had me a little bit nervous.
However the received E4 has firmware version 1.19.8 so i doubt there'll be any problems applying the hack.
I have been looking to get a TIC for a while, and this finally tipped the scales.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 12, 2013, 09:25:06 pm
3. Haven't seen any mention of FLIR restricting downgrades.
We haven't seen any mention of anything.
Actually there is a "restriction", right in the .FIF. But nothing that cannot be handled.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 12, 2013, 10:18:18 pm
Hack applied just fine.
However just below center in the thermal image i have a bright spot. It was there in 80x60 and it looks exactly the same in 320x240.
Anyone seen anything like it? Seems a bit too obvious to have passed QC..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 10:21:51 pm
Looks a lot like dust on the sensor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 12, 2013, 10:33:51 pm
I tried some mild shock therapy to see if i could make it move, but no effect.
I guess i have three options
1. Send it in and risk a firmware update
2. Take it apart to clean sensor and void warranty (and possibly not fix it anyway)
3. Live with it

The auto hotspot feature was quite nice, but that dot screws it up pretty badly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 12, 2013, 10:35:20 pm
Im looking forward to to the 1.20.x FW and will gladly sacrifice my TIC  ;)

If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 12, 2013, 10:42:04 pm
All this speculation over a single 2nd hand report of patched firmware on a REPAIRED unit?
Jesus people, calm the f*ck down.

0) The report of patched firmware has NO details
I suspect user error

1) There is no evidence the units in the supply chain are patched. PERIOD.
People claiming they feel like they are or other such nonsense are silly.

2) It is most likely Flir only quickly removed the easy hack method.
They have not had time to do a full patch to try and secure the entire system.
I'm surprised they even have firmware out. Software validation usually takes a while.

3) Having now dissected a previous firmware version finding another way in should not be so difficult

4) People pissed at flir are retarded
Of course they are going to patch the security. It is going to wreak havoc on the TIC market and drive their margins down.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 12, 2013, 11:00:39 pm
Unless you've unboxed one in the supply chain that has v20 I dont see your point


EDIT**

Aurora has gone and deleted his posts from this thread as they made him look like an idiot.
This in turn has taken this and the post above out of contect.

Aurora "had a feeling" that the next batch of 30 E4 cameras due into PASS in the UK were going to be updated to a un-exploitable firmware.
The post above point 1) was in response to this 'feeling' he had.
I felt it was unfounded.

Between the previous post and this one he posted calling me a troll, that he has been PM'ing people back and forth and knows more than I and that people who do not know anything shouldn't post.

I believe instead of standing by his posts he deleted them so he didn't look stupid in a few days when those 30 E4's show up with exploitable firmware.

If I'm wrong I will stand by my posts and be wrong and admit I'm wrong.
Too bad he can't and has ALREADY abandoned this thread to save his ego
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 12, 2013, 11:01:40 pm
I tried some mild shock therapy to see if i could make it move, but no effect.
I guess i have three options
1. Send it in and risk a firmware update
2. Take it apart to clean sensor and void warranty (and possibly not fix it anyway)
3. Live with it

The auto hotspot feature was quite nice, but that dot screws it up pretty badly.
You could try unscrewing the lens if you can make a tool.
Taking apart is not hard and I didn't encounter any warranty seals.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on November 12, 2013, 11:02:37 pm
Just been advised of my VAT/Duty charges for importing an E4 to the UK ($980 including shipping) - £238!!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 12, 2013, 11:14:16 pm
Just been advised of my VAT/Duty charges for importing an E4 to the UK ($980 including shipping) - £238!!

That is exactly the reason why Mike doesn't review stuff without the shipper agreeing to pay the VAT/Duty charges.. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 12, 2013, 11:17:16 pm
Jesus people, calm the f*ck down.

Wise words.

Allow me to add.

Jesus people, don't tell your supplier that you are ordering because there is a hack out in the wild and post it here that you did tell them. That is not going to help anyone and might put an unexpected pressure on the supplier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 12, 2013, 11:35:26 pm
Looks a lot like dust on the sensor.

Bit out of my depth here because I probably know a lot less about TICs than most people on here but could this be proved by flicking the lens cover to closed  and letting the sensor reach equilibrium?

Would the spot then disappear? (or at least fade a bit?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 12, 2013, 11:39:43 pm
I received my E4 last Friday however only got around to installing the hack just now (firmware 1.18.7). I stopped work and did the hack after reading that someone tried to install Flir Tools and that they implied that it had been updated to prevent hacking! :scared: Obviously they were mistaken as I had no issues with Flir Tools or doing the hack. :phew:

What an improvement in performance! I wasn’t expecting the improvement to be so significant. I’ll definitely be trying Taucher’s menu hacks next. Thanks again to Mike and all the others who made this hack possible.  :-+

Oh, and on a slightly off topic rant... Does anyone else find it annoying how people delete and/or heavily edit their posts after posting? :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 12, 2013, 11:40:33 pm
Jesus people, don't tell your supplier that you are ordering because there is a hack out in the wild and post it here that you did tell them. That is not going to help anyone and might put an unexpected pressure on the supplier.

Yeah, i agree. You never know how they are going to react. PASS seem to be fine about it but that could change if we get a 30/60fps hack working.

If a FPS hack is eventually discovered the supplier may decide shipping units able to be hacked to 30+fps under 9fps export rules is too risky.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 13, 2013, 02:27:21 am
Hmm huge drop in post count? Someones cleaning up maybe?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 13, 2013, 02:41:28 am


Yeah, weren't we at 93 pages or so a few hours ago? ??? :scared:


From when I started counting...we had 1379 posts. Thats a lot by one user. I guess we missed the memo?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 13, 2013, 03:16:17 am
Now it's at 88. This is damn weird.

1308 posts at the time of this edit -- it was 1314 a few minutes ago. Whoever is deleting these posts -- who are you?

It appears as though Aurora is deleting his posts for some reason. Perhaps he received some negative feedback from his more recent posts and decided to pull the plug.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 03:36:45 am
there is no NDA, you didnt sign shit, there is only some sales dude feeding you nice stories
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 03:41:20 am
Breached NDA....going silent
:blah: Protecting sourcecs  :blah: NDA

I am very sceptical that he was under any NDA.
The only sensitive information I saw him hint at was the possibility that the next batch of TICs have updated firmware.
His discussions have included contacting a Flir distributor and contacting Flir while waiting for answers from both. This would imply that he is not directly associated with either. Therefor who could he possibly be under NDA with that would have been violated by the content of this thread?  ???
If he actually HAS violated an NDA it was incredibly strict and he violated it over a week ago and shouldn't have been posting here in the first place.

There was no NDA
He has no real information
He has no source to protect besides his ego

He has now chosen the nuclear option and made this thread disjointed in the process. THANK YOU AURORA!

##EDIT
What I think happened for those that missed the last page before it was deleted
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329268/#msg329268 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329268/#msg329268)

##EDIT
edited his post
NDA....going silent. Sorry can't say more.

My Posts on thermal camera related stuff had to go.

##EDIT
Post is now gone
Just keeping this for history. Apparently with all his edits/deletions we have to document his posts
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 04:01:38 am
Whatever dude ..... tell it to someone who actually cares !

There is more than one sort of NDA  ;) but you are too dumb to know that obviously.

nah, I just can spot bs, and you scream easy mark (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325643/#msg325643 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325643/#msg325643)) from the distance, you ate everything this sales guy told you starting with 'we barely make any money' and 'special discount but remember I wont feed my kids today thats how much I value you as a customer" :)

and no, there are no special over the phone NDAs. You either sign something, or you dont. Verbal contracts are null and void without any witnesses or recordings.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 13, 2013, 04:06:04 am
nah, I just can spot bs, and you scream easy mark (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325643/#msg325643 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325643/#msg325643)) from the distance, you ate everything this sales guy told you starting with 'we barely make any money' and 'special discount but remember I wont feed my kids today thats how much I value you as a customer" :)

and no, there are no special over the phone NDAs. You either sign something, or you dont. Verbal contracts are null and void without any witnesses or recordings.

I dunno what NDA Aurora is under, but it strikes me as you guys attacking his posts because of a personality conflict - but it's indisputable that he had a lot of detailed info on this thread and is clearly not just some hack.

Also, the bolded part you wrote above is completely untrue.  Verbal contracts *are* binding.  The "without witnesses or recordings" part leads me to believe you are saying that a person can just deny they made the verbal contract and nobody can prove otherwise.  That may be true if you have no morals or ethics, and in that case, a bright future in the used car sales industry awaits.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 04:25:27 am
Also, the bolded part you wrote above is completely untrue.  Verbal contracts *are* binding.  The "without witnesses or recordings" part leads me to believe you are saying that a person can just deny they made the verbal contract and nobody can prove otherwise.  That may be true if you have no morals or ethics, and in that case, a bright future in the used car sales industry awaits.

My first job was helping out and later selling used Trucks on family owned lot :)
This is why I spot gullible people buying into salesman pitch from mile away. I have nothing against Aurora personally, I just dont like childish naivety.
Have no doubt, there are no morals in business. "Dont tell anyone" is not an NDA, and is as enforceable as "I promise to ship it first thing in the morning".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 13, 2013, 04:35:17 am
Also, the bolded part you wrote above is completely untrue.  Verbal contracts *are* binding.  The "without witnesses or recordings" part leads me to believe you are saying that a person can just deny they made the verbal contract and nobody can prove otherwise.  That may be true if you have no morals or ethics, and in that case, a bright future in the used car sales industry awaits.

My first job was helping out and later selling used Trucks on family owned lot :)
This is why I spot gullible people buying into salesman pitch from mile away. I have nothing against Aurora personally, I just dont like childish naivety.
Have no doubt, there are no morals in business. "Dont tell anyone" is not an NDA, and is as enforceable as "I promise to ship it first thing in the morning".

I was keeping up with the thread several times a day - maybe there were some posts I missed, but I don't think so - and from what I saw, you guys are assuming the "NDA" was something between him and the salesman.  But he never said that - it's an assumption on you guys' part, right?

From my reading of all his posts, it's pretty clear he is "in the biz" somehow.  For all we know, he works for a company that buys alot of FLIR sensors, and is under NDA at work.  Who knows - but one thing is for sure, none of us know what specific NDA exists, and honestly, it's not really our place to guess at it, and it's not fair to guess and then bash the guy based on our guesses. 

At the end of the day, if he feels he wants to pull back, how is that worthy of ridicule?  It's not like if he got in trouble for it, you and the rest of the posters are the ones to suffer the ramifications. 

Since he has voluntarily excused himself from the thread, it's poor manners to shit on the guy based on what people guess was his reasons for doing so.

As for the contract thing, "there are no morals in business" is not only complete bullshit, it's also untrue, especially in the context of what you wrote.  If you have no problem committing fraud to earn a buck, that's your problem - I feel sorry for anyone who suffers that particular character flaw.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 04:36:32 am
 :wtf: You silly people. Oh well.

I think I still have most of it. Unfortunately not all of it. DOH! There was still some good material by Aurora between last mirror and the starting point of you guys' pissing contest. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 04:49:32 am
Some random scripted measurements. Alarms work as well, which is nice. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 04:54:05 am
Aurora made himself look like a fool and then nuked the thread

Self-nuke complete! Recover what you wish, I don't particularly care  O0

Just did it for fun.

The guy edits his posts all the time so as to not look stupid.
He uses multiple accounts and plays them against each other (those posts are deleted too)
Also he treats people who question his vague assertions as trolls.
I followed the thread and most of his posts were simply discussions regarding PASS in the UK, E4 availability or speculation.
I can't recall seeing any original work on this hack by him?

People who dedicate so much time to a forums like this generally have to partake in every thread they possibly can and they will protect their standing on the forum even if it means deleting posts. 

Admins should restore the threads deleted posts IMO. Let him stand by what he said

Taucher and Mike are the real contributors in this thread. The vast majority of the rest of us are testers and noise (including me)
All hail Taucher and Mike! Thank you! Lets get back on topic!

##EDIT
I was wrong thinking Aurora and StevenWhitney were the same person
Ignore me. Sorry everyone
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 04:56:47 am
At the end of the day, if he feels he wants to pull back, how is that worthy of ridicule?  It's not like if he got in trouble for it, you and the rest of the posters are the ones to suffer the ramifications.

Deleting own posts is fine by me, claiming NDA is what irked me. Either he was under one whole time and didnt think for a second (highly unlikely and very stupid), or got convinced post facto it would be 'better' to remove oneself from this discussion (for good or wrong reasons).
I guess you are right, whatever, not my problem.

As for the contract thing, "there are no morals in business" is not only complete bullshit, it's also untrue, especially in the context of what you wrote.  If you have no problem committing fraud to earn a buck, that's your problem - I feel sorry for anyone who suffers that particular character flaw.

I have no problem spotting it. I dont work in sales anymore.
I feel sorry for anyone who still believes in morals and ethics when money are on the line. Next thing you will try to convince me Politicians just want our good :)

Not to make it entirely off topic look at FLIR, is it moral to sell same hardware at four different price points? How do you feel reading Datasheet that claims E8 has better sensitivity? To put it bluntly this datasheed is a manufactured lie.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 05:00:49 am
If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p

Could you summarize it for me please?  ;D I did check your older posts, but no things clicked in terms of a workable idea. So I am probably missing something. Besides sleep.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 13, 2013, 05:03:16 am
If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p

Could you summarize it for me please?  ;D I did check your older posts, but no things clicked in terms of a workable idea. So I am probably missing something. Besides sleep.  ;D


Second this notion...something tells me my e4 will arrive tomorrow then its time for some  :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 13, 2013, 05:11:26 am
Deleting own posts is fine by me, claiming NDA is what irked me. Either he was under one whole time and didnt think for a second (highly unlikely and very stupid), or got convinced post facto it would be 'better' to remove oneself from this discussion (for good or wrong reasons).
I guess you are right, whatever, not my problem.

Could be - but I am sure we have all made mistakes where we got overly enthusiastic and regretted it later, or were guilty of thinking something was more private than it really was.  Ultimately, we aren't the ones to suffer the consequences, so it seems unfair to bash the guy for watching out for himself.

I have no problem spotting it. I dont work in sales anymore.
I feel sorry for anyone who still believes in morals and ethics when money are on the line. Next thing you will try to convince me Politicians just want our good :)

I think the "no morals in business" thing is a mischaracterization.  I've dealt with some snakes, and when I find out they are snakes, I don't do business with them anymore.  I had a delivery driver once ask me what was in a package he was delivering (it was 10 reels of some Cree LED's).  The shipment value was around $10k, and there were special procedures in place for the delivery.  He took me aside and told me those procedures were in place up to $5,000... and suggested I order just under $5,000 worth of the LED's, and he would give them to me without scanning the package, and I would claim they were never delivered and pay him $1,000.  I get $5k of LED's cheap, and he gets $1,000.  Of course it would be illegal and unethical, and I would never do such a thing.  But making a verbal contract then lying and saying it never happened is also fraud.  It may be hard to prove, but fraud is fraud.  I don't see a lot of that stuff in business, or even much unethical stuff.  Unethical companies and businesses usually don't last long.

Quote
Not to make it entirely off topic look at FLIR, is it moral to sell same hardware at four different price points? How do you feel reading Datasheet that claims E8 has better sensitivity? To put it bluntly this datasheed is a manufactured lie.

I think it is moral.. nobody is being tricked into buying anything.  The E4/E5/E6/E8 specs are clearly listed and people can buy or not buy the product.  I think most of us agree that if someone is selling thermography work, then buying an E4 and hacking it is bad business - and fraud if one claims their hardware performs at E8 levels when it's a hacked E4.  Many people won't see the value in the added cost of an E8, but I don't fault FLIR for offering the product to willing buyers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 05:13:55 am
If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p

Could you summarize it for me please?  ;D I did check your older posts, but no things clicked in terms of a workable idea. So I am probably missing something. Besides sleep.  ;D

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323991/#msg323991 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323991/#msg323991)

##EDIT added quote
...

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 05:26:00 am

Excuse me, I am not the user known as Aurora. It's pretty clear to everyone else on this thread (including Aurora) that we are not the same person, so please don't make such accusations. And for the record, I have not made "multiple accounts" on here. Ever.

I have contributed heavily since the inception of the thread, posting logs, confirming hacks, and sharing internal photos of a TI I have available.

I did elect to "self nuke" my own account, for personal reasons and also to determine how long evacuating a forum would take. Not because of any NDA etc.

:-DD :blah:

##EDIT
Apologies you are correct!
Sorry everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 05:29:26 am
:-DD :blah:

FWIW: StevenWhitney != Aurora. Just saying. :P

Edit: too slow. :P I see you already sorted things out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 05:35:40 am
The simultaneity of the two posts is uncanny. hmmm

Perhaps StevenWhitney, mrflibble, and Aurora are all the same person?
Maybe mikeselectricstuff is in on it too?

 :-DD

I'm out. It's been great, everybody. :-+

Bwahaah, I was just thinking the very same thing. XD Me backing you up, and you finding my username amusing and awesome and such.  ;D Maybe you are a figment of my sleep deprived imagination?  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 05:36:08 am
I really do apologize  :-\
Your 172 other posts were deleted and the selfnuke thing didnt twig my brain

again sorry. and sorry to see you go!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 13, 2013, 05:36:19 am
Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 13, 2013, 05:46:51 am
Another great moment of reverse engineering event documented live in this forum, thanks Mike.  :-+

Meanwhile, and again, when everytimes I watched great forum thread such like this one, just worry it might be locked or gone because of cease & desist .. love letter Dave received from lawyer.  :-//

Time to save or update an OFFLINE version of this thread.  ;)
What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection?  :o

That post meant for provoking a further mass generation of the off-line mirrors, silly.  :box:

 >:D  >:D  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 13, 2013, 05:51:46 am
Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.

Sorry for going off-topic, but I think there should be some sort of indicator that a post has been deleted. Something like "This post has been deleted by (the user|a moderator)" would do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 05:56:56 am
What? You mean you didn't mirror this thread and the entire Flir firmware exe/zip/iso/pdf collection?  :o

That post meant for provoking a further mass generation of the off-line mirrors, silly.  :box:

...

 >:D  >:D  >:D

RAWRRRRRR!!! You just had to remind me. :P

I have it to page 65 or so before the big delete. After that I got sloppy and/or too preoccupied with mucking about with my E4. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 06:02:56 am
Admins should restore the threads deleted posts IMO. Let him stand by what he said

That is:
a) Not possible. SMF does not keep deleted posts. Once you delete them, they are gone. Technically I could get them from the site daily backup and hack the database and exact and it would take hours or days to do. In the next 5 days they will be gone completely.

b) Not what I want. I have deliberately left the option to delete your own posts turned on since the introduction of this forum. Because I think that if you really want to delete your own posts, you should be able to.

Everyone here has the right to delete their own posts, and criticising someone for exercising their right to do so is poor form.

Fair enough. I disagree that being able to delete posts is a good idea but its not my forum  ;D
Considering that this is one of the finest forums on the 'net I have to sit back and consider that I'm likely wrong as well.
Thank you for spending your time running this forum. I personally appreciate it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 13, 2013, 06:09:13 am
Please consider the self post deletion feature only available through request by mod/admin, cause this loophole can be used as an escape goat or worst running out from responsibilities from the damaged made by the poster him/her self.

Hence, this is also the reason why I love to quote using the complete headers with dated and link from the original post. ;)  ...hint...hint..

My 2 carbon resistors worth.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 06:20:30 am
Please consider the self post deletion feature only available through request by mod/admin, cause this loophole can be used as an escape goat or worst running out from responsibilities from the damaged made by the poster him/her self.

Hence, this is also the reason why I love to quote using the complete headers with dated and link from the original post. ;)  ...hint...hint..

My 2 carbon resistors worth.

the delete button is in the upper right hand corner of your post
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 13, 2013, 07:03:03 am
If you're so eager, I posted a possible 30 Hz hack some pages ago that nobody tried on real hw yet :p

Could you summarize it for me please?  ;D I did check your older posts, but no things clicked in terms of a workable idea. So I am probably missing something. Besides sleep.  ;D

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323991/#msg323991 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg323991/#msg323991)

##EDIT added quote
...

in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Yup preciely. Note that it's for the binary in 1.18.7.  If you have a newer version you can send me the binary and I can find the new patch location.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 07:05:58 am
This was a milestone:
Post 1000
That is all.
now « Reply #925 on: 08 November 2013, 22:18:00 »

Whoever decides to remove postings, I'm perfectly fine with that - it's their right - but
please stop whining like we're in kindergarden - please behave like an adult - enjoy the
hacks and try to contribute something positive!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 13, 2013, 08:23:16 am
Just some notes regarding "Exportable framerates" (taken from simlar specsheet):
7.5 Hz (NTSC 30/60Hz) = factor 60Hz div 8
8.3 Hz (PAL 25/50Hz) = factor 50Hz div 6

EDIT: Measured update rate@display: 9 Hz

... and my E4 has just arrived!
Code: [Select]
.version.swcombination.fullver text "os16.0.10_appkit1.0.13_prodkit1.0.0.7"
.version.swcombination.ver text "1.18.7"

@64bit drivers: they auto-add windows-firewall-rules to allow inbound connections to flir processes

Update: mod successful
@Comparison.png: images blown out of scale by my software :)

Doing some perusing and stumbled on this...How did you test the frame rate? (Is there some way to get notified when edits occur or when thread gets updated?)

EDIT:
Coincidentally last person to post is who I quoted lol  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 09:04:48 am
in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Hm, I don't see (yet) how you got to that loc - but I can take a guess where you started looking :)
The function cascade starting at sub_111ED4 would be my best guess as it branches to a debugprint at loc_11227C:
Code: [Select]
LDR     R0, =aIs30hzallowedA ; "is30HzAllowed - ArtNo:%s Rev:%d Allowed"...
MOV     R3, R4
BL      NKDbgPrintfW
... that beeing just a debug YES/NO output function

Attachment: just for educational purposes :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 09:08:38 am
Doing some perusing and stumbled on this...How did you test the frame rate? (Is there some way to get notified when edits occur or when thread gets updated?)
High-framerate recording (200fps) of the screen while moving the camera in front of a high contrast object, then computing timestamp-differences between changing frames for some 2 seconds of video - lastly applying median on table and a crosscheck on whole time vs. framecount ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 13, 2013, 09:13:13 am
are the hot/cold spot measurements now quicker with 30Hz? I noticed that they are pretty slow in regular mode and also the reaction of the camera inside the menus (e.g. Color selection) is pretty slow.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 09:17:55 am
are the hot/cold spot measurements now quicker with 30Hz? I noticed that they are pretty slow in regular mode and also the reaction of the camera inside the menus (e.g. Color selection) is pretty slow.
First: Nothing changed to 30Hz yet
Second: The measurement interval can be customized and is deliberately set to 3Hz by default

Code: [Select]
# speed frequency of measuring temperatures (0.1 ... 100) in Hz
rset .image.measure.frequency 9
rset .image.measure.realFrequency 9

Plase note: Hz range just denomintates the technically possible value-range (maybe %?), not necessarily something sane :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 13, 2013, 09:25:05 am
Fair enough. I disagree that being able to delete posts is a good idea but its not my forum  ;D

It's not my forum either really, it's our forum.
I will go with majority. Feel free to set up a poll, and if a big majority want to remove the ability to delete your own posts, then I'll disable it.
Note: I don't think this forum has a timed edit feature, i.e. the ability to edit your posts for a set time, then you can't any more.
That means that the edit feature remains on, and instead of deleting, people can just edit their post to remove all info anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 13, 2013, 09:36:19 am
in appcore.exe, modify the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3"

Hm, I don't see (yet) how you got to that loc - but I can take a guess where you started looking :)
The function cascade starting at sub_111ED4 would be my best guess as it branches to a debugprint at loc_11227C:
Code: [Select]
LDR     R0, =aIs30hzallowedA ; "is30HzAllowed - ArtNo:%s Rev:%d Allowed"...
MOV     R3, R4
BL      NKDbgPrintfW
... that beeing just a debug YES/NO output function

If you look closer you will see that this function returns a value 1/0 depending on the printed value.

Then go look where that function is called and you will notice that depending on that value, it will write either 9 or 30 to a variable, which is then used to trigger a write to a FPGA register.

The patch just makes the function return a constant rather that the real result.

Cheers,

    Sylvain
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 13, 2013, 09:37:09 am
My E4 arrived (from PASS in the UK) a few mins ago.

I wont have a chance to check the firmware ver till later today but will post as soon as I do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 09:37:43 am
Aurora apparently had issues with his employer. This is not an uncommon issue...
None of Aurora's posts had any directly useful hack info so nothing significant has been lost.   
I think it is essential that people can edit and delete posts. I frequently edit my posts to correct errors & typos.
For long threads like this which may be skimmed by people looking for info, it is essential  that stuff can be edited to eliminate information that was speculative at the time and subsequently found to be incorrect or potentially harmful.
If people know they can't delete stuff they may be discouraged to post in the first place.
Can we get back on topic now please
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 13, 2013, 09:39:10 am
I received my E4 last Friday however only got around to installing the hack just now (firmware 1.18.7). I stopped work and did the hack after reading that someone tried to install Flir Tools and that they implied that it had been updated to prevent hacking! :scared: Obviously they were mistaken as I had no issues with Flir Tools or doing the hack. :phew:
That was me. I was missing an obvious step in the instructions (including camera.cmd in the zip)

Quote
What an improvement in performance! I wasn’t expecting the improvement to be so significant. I’ll definitely be trying Taucher’s menu hacks next. Thanks again to Mike and all the others who made this hack possible.  :-+

Oh, and on a slightly off topic rant... Does anyone else find it annoying how people delete and/or heavily edit their posts after posting? :rant:
My apologies, but i felt that my post didn't contribute anything, and i was pretty quick about deleting it, and there had been no replies to the thread.
It seems it has been overshadowed by Auroras stunt now though.. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 09:48:14 am

Doing some perusing and stumbled on this...How did you test the frame rate?
One way to measure would be to view a vane on a variable speed motor and see at what RPM you get a stroboscopic "freeze"
Or maybe even a sig-gen driving a thin wire or small resistor to create a fluctuating heat source
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 13, 2013, 10:25:38 am
The difference between 9fps and 30fps should be easily visible. Some people have issues telling the difference between 30fps and 60fps, but once you start dropping below 15fps it ought to be pretty obvious.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 10:35:32 am
and fraud if one claims their hardware performs at E8 levels when it's a hacked E4

Wait what? :o


Doing some perusing and stumbled on this...How did you test the frame rate?
One way to measure would be to view a vane on a variable speed motor and see at what RPM you get a stroboscopic "freeze"
Or maybe even a sig-gen driving a thin wire or small resistor to create a fluctuating heat source

You said in the teardown that fpga stream is 50(or 60 dont remember) Hz. That can only mean throttling happens inside the app on the SoC.
I assume flir was smart about it and uses adhering to 9Hz limit as a pretext/excuse to bump sensitivity with frame averaging.
I dont know Windows ce at all, is there something like Device manager there to look up if standard windows DirectShow capture API is exposed? List loaded drivers to see if some camera/capture driver is loaded?
Google says M$ has
 Wince600\private\test\multimedia\directx\dshow\camera\cameraapp
for testing capture under wince, not that this program will be very useful (needs a mouse to operate)
One way might be killing main flir app and loading something that would capture using windows api.

Would it be smart for flir to include an option for disabling 9hz limit at all in the software? One would imagine their lawyers made it clear to developers to never ever do it, just like patent lawyers hamper development by prohibiting designers from looking up solutions in existing patents. Too much liability.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 10:44:27 am
and fraud if one claims their hardware performs at E8 levels when it's a hacked E4

Wait what? :o


Doing some perusing and stumbled on this...How did you test the frame rate?
One way to measure would be to view a vane on a variable speed motor and see at what RPM you get a stroboscopic "freeze"
Or maybe even a sig-gen driving a thin wire or small resistor to create a fluctuating heat source

You said in the teardown that fpga stream is 50(or 60 dont remember) Hz. That can only mean throttling happens inside the app on the SoC.
No - it is most likely done in the FPGA. There may or may not be a way to control the downsampling rate. We don't know.
Quote
I assume flir was smart about it and uses adhering to 9Hz limit as a pretext/excuse to bump sensitivity with frame averaging.
9Hz is all about ITAR & other export regs. However I think it's highly likely they use multiple frame averaging to increase signal-to-noise ratio to allow use of a smaller lens. The lenses on the 60fps Ex0 range look significantly bigger
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 13, 2013, 10:49:23 am
You said in the teardown that fpga stream is 50(or 60 dont remember) Hz. That can only mean throttling happens inside the app on the SoC.

The fpga gets a 60 Hz stream with ADC readings from the sensor. The fpga then does funky stuff such as image processing, and if it feels like it decimating frames. The frames then go over a totally different interface (camera interface) from fpga to the i.MX257.

So the fpga is fully capable of throttling things well before the application in Win CE gets even close to the data. Unfortunately.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 13, 2013, 10:59:50 am
No - it is most likely done in the FPGA. There may or may not be a way to control the downsampling rate. We don't know.

sorry, bad memory + to lazy to rewatch :(
ok i think i remember now, you couldnt find exposed fpga-soc connection (multi layer board).

that leaves checking out wince standard capture api on the table
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 11:30:44 am
If you look closer you will see that this function returns a value 1/0 depending on the printed value.
Then go look where that function is called and you will notice that depending on that value, it will write either 9 or 30 to a variable, which is then used to trigger a write to a FPGA register. The patch just makes the function return a constant rather that the real result.
Cheers, Sylvain

nice once *kudos*

Just did another 240FPS slomo-measurement: clearly some 100ms between frame updates
I think it could be fun to take a look at rset .image.contadj.frequency  ... which will reject anything >10 ... second check?
Well... at least .image.framegrab.swburst.frequency looks nicely with that hex

It's interesting how many times one will find 0x1E and its doubled value 0x3C in direct neighbourhood... 00111E34, 00117264 ...
... heh, I really need to get into ASM again... my guess is your ASM beats mine by far ;)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 13, 2013, 11:41:42 am
Would it be smart for flir to include an option for disabling 9hz limit at all in the software? One would imagine their lawyers made it clear to developers to never ever do it, just like patent lawyers hamper development by prohibiting designers from looking up solutions in existing patents. Too much liability.
I'm not familiar with what ITAR says but it's possible that there has to be a level of difficulty to it, i.e. changing the framerate is not a documented easily accessible user option.
Even Flir has some interesting wording on their website about it (from http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=326&view=35781 (http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=326&view=35781) ) :
Quote
Is an export license required for Tau and Quark thermal imaging cameras?
Note:  This answer also applies to the legacy Photon cameras produced by FLIR.
Yes, except if the video frame rate is factory set to be less than 9 frames per second. We refer to this configuration as "slow video".
To me, that almost sounds like "we set it to 9fps just so you can export them without license", ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 13, 2013, 11:52:01 am
If you look closer you will see that this function returns a value 1/0 depending on the printed value.
Then go look where that function is called and you will notice that depending on that value, it will write either 9 or 30 to a variable, which is then used to trigger a write to a FPGA register. The patch just makes the function return a constant rather that the real result.
Cheers, Sylvain

nice once *kudos*

Just did another 240FPS slomo-measurement: clearly some 100ms between frame updates
I think it could be fun to take a look at rset .image.contadj.frequency  ... which will reject anything >10 ... second check?
Well... at least .image.framegrab.swburst.frequency looks nicely with that hex

It's interesting how many times one will find 0x1E and its doubled value 0x3C in direct neighbourhood... 00111E34, 00117264 ...
... heh, I really need to get into ASM again... my guess is your ASM beats mine by far ;)
Maybe it is a language thing, but I am confused right now:
I thought, modifing the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3" will enable 30Hz but in your posting above you say 100ms between each frame = ~9 Hz. Did I miss something or did I understood something wrong? So no 30Hz by changing appcore.exe?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 12:10:07 pm
Quote
Quote
Is an export license required for Tau and Quark thermal imaging cameras?
Note:  This answer also applies to the legacy Photon cameras produced by FLIR.
Yes, except if the video frame rate is factory set to be less than 9 frames per second. We refer to this configuration as "slow video".
To me, that almost sounds like "we set it to 9fps just so you can export them without license", ;)
Yes, exactly.
Export licenses are expensive and time-consuming, so the need for one significantly adds to end-user cost.

E2V developed a product specifically around non-US parts (http://www.e2v.com/news/itar-free-range-of-argus--thermal-imaging-cameras-launched-by-e2v/) to make it outside the scope of ITAR regs
Quote
e2v has launched a new range of Argus® Thermal Imaging Cameras, designed specifically for security and defence markets. The cameras feature the latest thermal imaging technology and are manufactured using European sourced components, making them available to the wider export market and not subject to the USA International Traffic in Arms Regulations (ITAR) controls (UK export controls applies).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 12:11:11 pm
Maybe it is a language thing, but I am confused right now:
I thought, modifing the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3" will enable 30Hz but in your posting above you say 100ms between each frame = ~9 Hz. Did I miss something or did I understood something wrong? So no 30Hz by changing appcore.exe?
That hex will enable something and rls will report 30 for some values that were formerly at 9. but nontheless the effective framerate will stay under 10Hz.
Anyway the Ex is quick enough so one does not have to wait too long for a new image ... I don't have a big urge to investigate that further :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tinhead on November 13, 2013, 12:13:11 pm
Reprogramming the flash is not so simple due to the issue of bad-block mapping and ECC - a straight image from one unit would almost certaonly not work on another. It would need to be read & parsed with the knowledge of how WinCE manages the flash, and then reconstructed.
this is why dump with OOB bloks must be made, you can always restore such dump (as long your flash have no bad blocks, if there any you have to enable relocation).

Easiest way would probably be to connect it up & mount on another WinCE system.
oh well, this is always an option
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 12:39:18 pm
Reprogramming the flash is not so simple due to the issue of bad-block mapping and ECC - a straight image from one unit would almost certaonly not work on another. It would need to be read & parsed with the knowledge of how WinCE manages the flash, and then reconstructed.
this is why dump with OOB bloks must be made, you can always restore such dump (as long your flash have no bad blocks, if there any you have to enable relocation).

In my limited experience of driving NAND flash at low level, there are always some bad blocks.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ViciousPest on November 13, 2013, 01:14:54 pm
Reprogramming the flash is not so simple due to the issue of bad-block mapping and ECC - a straight image from one unit would almost certaonly not work on another. It would need to be read & parsed with the knowledge of how WinCE manages the flash, and then reconstructed.
this is why dump with OOB bloks must be made, you can always restore such dump (as long your flash have no bad blocks, if there any you have to enable relocation).

In my limited experience of driving NAND flash at low level, there are always some bad blocks.

Might be a irrelevant. Does anybody know if this is managed or unmanaged NAND? Datasheet link?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 13, 2013, 01:42:42 pm
Looks a lot like dust on the sensor.

Bit out of my depth here because I probably know a lot less about TICs than most people on here but could this be proved by flicking the lens cover to closed  and letting the sensor reach equilibrium?

Would the spot then disappear? (or at least fade a bit?)

Yep, this kind of worked. At least well enough to convince me to take it apart and clean the sensor.
Spot is now completely gone. I marked the lens in an inconspicious spot to be able to get infinity focus back easily, but it really wasn't that simple despite the effort. It seems moving the mark by less then a millimeter has a pretty significant impact on focus, it took me a couple of rounds before i was satisfied. The close focus capability was really neat though, i will definitely have to make a focus adjustment tool.

Anyway, thanks to you and mike for the aid in diagnosis. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 13, 2013, 02:05:53 pm
Anyway the Ex is quick enough so one does not have to wait too long for a new image ... I don't have a big urge to investigate that further :)
That's true - I am not complaining about the frame rate. Moving through the menus could be a bit faster if you ask me (though I have the feeling it is slower now after the menu-hack), thats why I was asking.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on November 13, 2013, 02:15:46 pm
Anyway the Ex is quick enough so one does not have to wait too long for a new image ... I don't have a big urge to investigate that further :)
That's true - I am not complaining about the frame rate. Moving through the menus could be a bit faster if you ask me (though I have the feeling it is slower now after the menu-hack), thats why I was asking.

Just a random thought: Could it be possible that there is some kind of "global framerate" thing going on, which makes the UI slower as well in the 9fps units? Does anyone know if it is that sluggish on a 30fps unit as well?

The few embedded QT things that i know are fairly responsive, that's why i'm wondering why it is so slow on these units. Something like a throttle in the QT message/event loop maybe.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 02:21:58 pm
Anyway the Ex is quick enough so one does not have to wait too long for a new image ... I don't have a big urge to investigate that further :)
That's true - I am not complaining about the frame rate. Moving through the menus could be a bit faster if you ask me (though I have the feeling it is slower now after the menu-hack), thats why I was asking.
That can actually depend on active measurement options - especially the delta modes appear to me to be implemented a bit below optimum performance ;) - if the measurement frequency was increased by rset, then that aspect will also reduce responsiveness... I'm pretty happy with 5fps there.

All I did was re-add/enable some entries for the functions that were already compiled into the application :)

EDIT/PS: of cause there's always the option to revert back to original state and compare by measurement :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 13, 2013, 02:42:46 pm
Just a random thought: Could it be possible that there is some kind of "global framerate" thing going on, which makes the UI slower as well in the 9fps units? Does anyone know if it is that sluggish on a 30fps unit as well?

The few embedded QT things that i know are fairly responsive, that's why i'm wondering why it is so slow on these units. Something like a throttle in the QT message/event loop maybe.

It's a bit more complicated...
Here a rough estimation how that thing works: the sensor delivers raw data to the FPGA, which pre-processes it according to it's .bin programming file - the raw image data is beeing corrected for all sorts of distortions, errors, calibration etc... if required re-scaled and noised ... and then copied into an overlay memory-segment where the display can present it (either directly or via CPU). In addition there are some other features getting overlayed - like the OSD, temperatures etc.

So to get the optimum performance, all components in the chain have to work perfectly:
- sensor(s): capture at high rate [check]
- fpga: churn out (composit) images at hight rate [unknown]
- cpu: process images at high rate [maybe/uknown]
- display: refresh often enough not to skip frames and not to be faster than own optical reaction time

I somehow doubt that every image is beeing piped through QT - I think that's used just for the UI and the sluggishs, scripted menu overlays - hence my bet would be on that fpga.bin :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 03:04:10 pm
Just a random thought: Could it be possible that there is some kind of "global framerate" thing going on, which makes the UI slower as well in the 9fps units? Does anyone know if it is that sluggish on a 30fps unit as well?

The few embedded QT things that i know are fairly responsive, that's why i'm wondering why it is so slow on these units. Something like a throttle in the QT message/event loop maybe.

It's a bit more complicated...
Here a rough estimation how that thing works: the sensor delivers raw data to the FPGA, which pre-processes it according to it's .bin programming file - the raw image data is beeing corrected for all sorts of distortions, errors, calibration etc... if required re-scaled and noised ... and then copied into an overlay memory-segment where the display can present it (either directly or via CPU). In addition there are some other features getting overlayed - like the OSD, temperatures etc.

So to get the optimum performance, all components in the chain have to work perfectly:
- sensor(s): capture at high rate [check]
- fpga: churn out (composit) images at hight rate [unknown]
- cpu: process images at high rate [maybe/uknown]
- display: refresh often enough not to skip frames and not to be faster than own optical reaction time

I somehow doubt that every image is beeing piped through QT - I think that's used just for the UI and the sluggishs, scripted menu overlays - hence my bet would be on that fpga.bin :)
The image is clearly not being processed at all by the UI as it appears before winCE has booted. There may be somelow-level  code handling image data but I'd expect most of this to be done by DMA hardware. bear in mind a SoC with a camera interface will be designed to handle much higher rates than 320x240x9fps, so it is reasonable to assume it can deal with most of it entirely in hardware.
 I would expect the palette data is sent by the application code to the FPGA to do the colour mapping. I think the FPGA probably also handles the merging of the visible camera as the cam is connected to the FPGA
All the UI will be doing is overlying the onscreen menus and icons. ISTR seeing that the Soc chip has some hardware support for overlays.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 13, 2013, 03:11:31 pm
An Apology.

I would like to apologise to the members of this thread who were upset or inconvenienced by the bulk deletion of my posts. Sometimes you have to do as you are told and this was such an occasion.
I now know where my 'line' is drawn so, no future deletions should occur.
P.S I regularly edit my postings as I am a bad speller  ;D

I am not able to post anything technical in this specific thread but then, as some said, I added nothing to the mix anyway  ;D

I can advise that I did not delete the UK supplier recommendation as that would have been unkind.
My PASS order arrived this morning with 1.19.8. and a free soft case.

UPDATE: S/N 6390 65xx

Life goes on, and I live to fight another day.



Now back to your regular programming.........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 13, 2013, 03:15:47 pm
No need to apologise.
From anything I read you were only being helpful, we all know how it can be when employers etc. don't want certain things discussed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on November 13, 2013, 03:25:32 pm
Sorry, i didn't express myself clearly, i think.

No, i'm not talking about the image processing or somesuch done through QT, or the thermal image being piped through it. What i meant was some kind of callback that will update the display, and which then would also call the QT sheduler to process the UI elements, causing the UI to become sluggish since it would be updated at the same framerate then, instead of being free-running.

Like some display/UI process that sleeps for 100ms, then transfers the thermal image into the display buffer, and then calls the UI, having it overlay the result, repeating that over and over again. QT allows the app to be run in it's own event loop, or to call the event handling manually in your own loop.

I'm simply wondering why it is so sluggish. Even though it builds UI stuff dynamically, it shouldn't be that friggin slow. Unless it is very badly written/implemented, that is. But then, my experiencee is on embedded Linux platforms only, maybe WinCE has some (negative) influence there as well.

Hope this is clearer now. And of course this is all speculation.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Frost on November 13, 2013, 03:27:31 pm
Today I have received my cam, it was on backorder for a week now.
If I noticed the calibration Date 08.11.2013 (last friday),
on the included calibration letter, it was a shock.

The supply chain must be extreamly short at the moment, so it seems
the cam was sent out direct from the production facility in estonia.

But the firmware version is 1.19.8, so I prepared a patch file
installed the tool software and tried the to upload the file into the cam.
It worked like a charm :-+ the picture quality is superb now.

So many thanks to all the people who made this possible,
especially to Mike and Taucher.

I am really happy to own such a great tool (for men :-DD) now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gotvolts on November 13, 2013, 03:35:02 pm
TL;DR :
12 Nov 2013 - There is a single second-hand report of a new firmware update 1.20.x that prevents the hack. This has not been confirmed either way and we do not know if this version is in the distribution chain, as it was reporteldy found on a unit returned after being sent for repair. If you're considering ordering, you may want to either do it soon having confirmed with the supplier that firmware version is 1.19.8 or earlier, or hang on a few days, as several pepple here have units on order  so things should become clearer soon. One user has received a camera showing as calibrated on Nov 9th with 1.19.8, and there have yet to be any more indications of a later version in the wild.

Do you know if it is possible to update your firmware to an earlier version if you have purchased a unit with the updated firmware?  If thats the case, then is the earlier firmware even available or can be downloaded from a working unit?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 03:43:39 pm
TL;DR :
12 Nov 2013 - There is a single second-hand report of a new firmware update 1.20.x that prevents the hack. This has not been confirmed either way and we do not know if this version is in the distribution chain, as it was reporteldy found on a unit returned after being sent for repair. If you're considering ordering, you may want to either do it soon having confirmed with the supplier that firmware version is 1.19.8 or earlier, or hang on a few days, as several pepple here have units on order  so things should become clearer soon. One user has received a camera showing as calibrated on Nov 9th with 1.19.8, and there have yet to be any more indications of a later version in the wild.

Do you know if it is possible to update your firmware to an earlier version if you have purchased a unit with the updated firmware?  If thats the case, then is the earlier firmware even available or can be downloaded from a working unit?
The only firmware which is "available" as a proper upgrade package is 1.18.7 It is not known whether there are any issues downgrading. It may be possible to build a 1.19.8 upgrade package from a unit with this version, but I'd consider it risky and not worth doing as we are not aware of any benefit of this version. Remember that if something happens that crashes the boot process before applauch.dat, this could easily lock out all currently known routes back in to fix things. 
There is a potential fall-back mechanism via the WinCE bootloader, but it is not known whether or not we have sufficient information to be able to recover a unit via this path. Any comments form WinCE experts would be welcome on this subject.
 (BTW has anyone checked if they fixed the no time/date on file information issue in 1.19.8?) 
If a later version appears and if it resists other current lines of attack, then atttempting to downgrade would be worth a try. However if the purpose of an update is to prevent hacking, it is highly likely they would have made a change to the FW update process at the camera end to prevent this. As the FW update process appears to use an unusual/nonstandard route through the USB system, it would be relatively easy for them to change without causing them other problems in production etc.. They would probably also need to change the PC update tool, but they'd only need to release this if & when they released a further update significant enough that users would want/need to do a field update to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 13, 2013, 03:50:35 pm
No time or date on my 1.19.8 unit.
Only Emissivity, Reflected temperature, Thermal resolution, Digital resolution, and lens field of view.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 04:18:36 pm
No time or date on my 1.19.8 unit.
Only Emissivity, Reflected temperature, Thermal resolution, Digital resolution, and lens field of view.
ISTR there is a file in the root of the USB drive that has lots of prodution info - not absolutely sure if this is there by default or appeared as a result of service mode.
I think the "version" comamnd in the PC update util shows some version info - don't recall if it includes cal date. Creation date of the DCIM folder may also give a clue
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 13, 2013, 04:23:24 pm
Received today:

Serial 639027xx
firmware 1.17.7   <---
cal  Sept 20   

ordered Nov 5 from Tequipment

I installed the modified fif file but no obvious change.  Maybe need to install fw 1.18.7 and have another go at it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 13, 2013, 04:28:40 pm
Received today:

Serial 639027xx
firmware 1.17.7
cal  Sept 20   

ordered Nov 5 from Tequipment

I installed the fif file but no obvious change.  Maybe need to install fw 1.18.7 and have another go at it.
Blimey that's an old one - don't think we've seen anything before 1.18.7
Bear in mind that getting the CRC wrong can also appear to have no effect, but as we know 1.18.7 is safe seems no reason not to update to that version. Especially as menu hacks may be more sensitive to version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 13, 2013, 04:30:19 pm
Received today:

Serial 639027xx
firmware 1.17.7
cal  Sept 20   

ordered Nov 5 from Tequipment

I installed the fif file but no obvious change.  Maybe need to install fw 1.18.7 and have another go at it.
Blimey that's an old one - don't think we've seen anything before 1.18.7
Bear in mind that getting the CRC wrong can also appear to have no effect, but as we know 1.18.7 is safe seems no reason not to update to that version. Especially as menu hacks may be more sensitive to version.

Yeah, must be NOS
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 13, 2013, 04:42:35 pm
No time or date on my 1.19.8 unit.
Only Emissivity, Reflected temperature, Thermal resolution, Digital resolution, and lens field of view.
ISTR there is a file in the root of the USB drive that has lots of prodution info - not absolutely sure if this is there by default or appeared as a result of service mode.
I think the "version" comamnd in the PC update util shows some version info - don't recall if it includes cal date. Creation date of the DCIM folder may also give a clue
I haven't had it in service mode, and that file is present (FLIRVers.rsc).
But what i was referring to is that 1.19.8 does not fix the missing date and time in the file information screen issue/bug.
In fact i can't see any UI changes from 1.18, either content or responsiveness.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 13, 2013, 05:32:16 pm
An Apology.

I would like to apologise to the members of this thread who were upset or inconvenienced by the bulk deletion of my posts. Sometimes you have to do as you are told and this was such an occasion.
I now know where my 'line' is drawn so, no future deletions should occur.

So it was someone else that asked you to delete the posts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 13, 2013, 05:38:18 pm
FW 1.18.7
Calibrated Sept 13

Thats odd the older firmware made it through the cracks on a later calibration.
Perhaps the two processes are unrelated time wise
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 13, 2013, 05:39:05 pm
First
If Flir sells the same at four different rates :) hmmmm This is to say that cheating client :) Especially to what buy E8 :)  |O
Agilet Rigol etc.... :)

Flir soon change locks lock via the internal EEPROM, etc. ... and changes in software do not give.
Of course, if it comes down to it the link, you can write software that will bypass but it becomes difficult :) (but what satisfaction)
(example Rigol)

But would not it be better to sell the FLIR 1000 pieces camera after $ 999
than 10pieces sell for 999$ and 8p for 1999$ and 5p for 399$9 and two for 5999 $?
After all, these cameras E4 (up to 320x240) after $ 999 or 999Euro sold immediately?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 13, 2013, 05:42:54 pm
As one who clears? .... NSA :) :) No Such Agency
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 13, 2013, 05:47:30 pm
On web site FLIR actual firmware is 1.18.7 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 13, 2013, 06:43:19 pm
Dunno how many people have tried to update to 1.18.7 but it takes a LONG time.
On that note - I got mine today from shopflir.com. Came with 1.17.7 and I updated to 1.18.7 and applied the hack.
Works great! (but did crash once right after applying the hack)
Time to have some fun!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cyr on November 13, 2013, 07:01:17 pm
Another success report, finally.

Tip: If you are trying to use a virtual windows installation inside VirtualBox, make sure you have the optional USB2.0 support installed. Without it some of the USB devices exported by the E4 won't work, and you can't install the hack.

Serial: 639055xx
Software: 1.19.8
Cal date: 30th oct.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 13, 2013, 08:59:41 pm
After battling with horrible customer service from tequipment.net (first bad experience in their defense) and realizing that the shipment to arrive from FLIR in a few weeks will be with a revision I likely cannot hack, I decided to cancel my order. However, I managed to find one last E4 in stock from flir-direct Canada (my homeland) to I ordered there (which works out better anyways since I get a free gift and no customs charges).

I'm not sure if anyone else is still carrying the old E4's anymore, but it looks like our fun is quickly coming to an end. I may even be the last to enjoy the hack  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 13, 2013, 09:01:33 pm
That's assuming nobody finds another hack, which I doubt will be the case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 13, 2013, 09:22:15 pm
I would like to apologise to the members of this thread who were upset or inconvenienced by the bulk deletion of my posts. Sometimes you have to do as you are told and this was such an occasion.
I now know where my 'line' is drawn so, no future deletions should occur.

1. We should respect that. I presume you had a good reason to do it.

2. If such an urgent need will happen in the future, you should be able to delete it just the same.  No point of getting forum members harmed in any way.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on November 13, 2013, 09:35:49 pm
Picked my new E4 up earlier today, serial is 63906xxx and it has fw ver 1.19.8.
Phew, I was a bit worried about the firmware revision, but it all went better than expected :)

Only thing left missing is the "free time" (is that really a thing?) to mess around with my new toy...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on November 13, 2013, 10:09:58 pm
Please let me know what or who "NDA" is. Is the correct acronym given below?

* NDA National Dance Agency (UK) 
* NDA National Dance Association 
* NDA National Dart Association 
* NDA National Day of Action 
* NDA National Deaf Academy 
* NDA National Dealers Association 
* NDA National Defence Academy (military training school in India) 
* NDA National Defence Act (Canada) 
* NDA National Defense Academy (Japan) 
* NDA National Defense Act (USA) 
* NDA National Defense Area  
* NDA National Democratic Alliance (group of political parties in India) 
* NDA National Dental Association 
* NDA National Department of Agriculture (South Africa) 
* NDA National Diploma of Agriculture (UK) 
* NDA National Directory Assistance (Sprint) 
* NDA National Disability Authority (Ireland) 
* NDA National Distribution Authority 
* NDA National Drilling Association 
* NDA Natural Death Act (Washington) 
* NDA Natural Disaster Assistance 
* NDA Nebraska Dietetic Association 
* NDA Nebraska Dressage Association 
* NDA Nederlandse Dealer Associatie (Dutch) 
* NDA Nepal Dental Association (Lalitpur, Nepal) 
* NDA Network Data Anonymization 
* NDA Network Design Activity 
* NDA Nevada Department of Agriculture (est. 1915) 
* NDA Nevada Development Authority 
* NDA Never Die Alone  
* NDA New Defence Agenda (Brussels, Belgium) 
* NDA New Dimensional Applications (SAP) 
* NDA New Drug Application (US FDA) 
* NDA Next Day Air 
* NDA Niagara Divers' Association 
* NDA Nigerian Defence Academy (est. 1964) 
* NDA Night Duty Allowance (on overtime forms) 
* NDA Nissan Design America (La Jolla, CA) 
* NDA No Data Available 
* NDA No Detectable Activity 
* NDA Non-Data-Aided 
* NDA Non-Destructive Analysis  
* NDA Non-Destructive Assay 
* NDA Non-Disclosure Agreement 
* NDA Non-Disturbance Agreement 
* NDA Nonprescription Drug Advisory (US FDA) 
* NDA Normal Daily Activity 
* NDA Northern Domestic Airspace 
* NDA Not Diagnosed with Anything 
* NDA Notre Dame Academy 
* NDA Nuclear Decommissioning Authority (UK) 
* NDA Nuffield Department of Anaesthetics (University of Oxford; UK)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 13, 2013, 10:18:33 pm
In the context discussed

* NDA Non-Disclosure Agreement 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 13, 2013, 10:19:03 pm
Finally got 'educated' on using the 3d printer at work and 'printed' a lens adjustment tool today.

I have to test it for fit when I get home and then make any tweaks as needed. Crossing my fingers that it's perfect first go (yeah, right...). Pictures attached.

When I get it "right" I'll upload the sketchup/stl files.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: csshih on November 13, 2013, 10:44:23 pm
just got mine.

1.18.7, sep 26 calibration.  :)

Haven't checked the other one, but I suspect it to be similar.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 13, 2013, 11:45:16 pm
Finally got 'educated' on using the 3d printer at work and 'printed' a lens adjustment tool today.

I have to test it for fit when I get home and then make any tweaks as needed. Crossing my fingers that it's perfect first go (yeah, right...). Pictures attached.

When I get it "right" I'll upload the sketchup/stl files.

cheers,
george.
Hi George
That looks pretty good :)

I had a go at making a funnel version using two PCBs that were connected by tinned copper wires. So it looked like a 'cage' funnel. It allowed both cameras to operate because both could still see forwards.

But  my advice to you is to only use your prototype a few times because it may scratch the soft plastic around the lens body unless the material is soft and smooth.

Mine is quite scratched now and I'm going to make a tool from plastic or PTFE next. The other thing I'll add is that the 'look thru' type of tool is great but unless you can hold it firmly into the lens then it will keep slipping out as you use it and this is a sure way to scratch the lens body. I've gone back to using a basic 'key' tool like the early versions below because this is easier (and far less likely to slip and scratch) than fiddling with the 'look thru' version. The key tools below are optimised in form and fit to provide the most accurate rotary action and best feel (for me at least)

I just need to find a suitable material for the end pieces that is non abrasive. eg PTFE.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 13, 2013, 11:48:55 pm
The tool I printed is made of PLA - it is not a particular 'hard' plastic, so should be quite safe to use.

I'll find out soon enough  ;D

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 13, 2013, 11:59:46 pm
In case anyone is looking for E4's, I just bought one from ShopFlir.com.  They do not have any stock in the USA, but they do have stock in Canada (11 at the time I talked to Grant over there).

They were able to price match my quote from Valuetesters, although I had to pay $50 for shipping to the USA.

If it's true that FLIR is making a firmware fix to try to prevent future hacks, it would be wise to get one from stock while still possible.


What's interesting is that a few people I have talked to (at distributors/sellers) have said they usually get parts from FLIR weekly or so, but all of them are saying 3-4 weeks until delivery.  Which makes me think FLIR is holding back on shipments while they implement a fix to prevent hacking.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: epistememe on November 14, 2013, 12:01:09 am
Oct 2 Calibration
1.18.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 14, 2013, 12:14:42 am
In case anyone is looking for E4's, I just bought one from ShopFlir.com.  They do not have any stock in the USA, but they do have stock in Canada (11 at the time I talked to Grant over there).

Anyone know if flirshop Canada can ship the E4 direct international?
One would think being in Canada they're not exporting through US customs?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 14, 2013, 12:21:11 am
The tool I printed is made of PLA - it is not a particular 'hard' plastic, so should be quite safe to use.

I'll find out soon enough  ;D

cheers,
george.

That should be OK then :)

I have a question: Will you be able to see the alignment of the tool into the keyholes with your tool? You may find you have to fit it by feel.

I've kind of given up on the look thru focus tool after having played with the one I made here. It was simply too much hassle to rotate 'and' keep it in the key holes. I initially assumed this would be easy to do but having tried it I've changed my mind. The tendency is to fish for a refit once it pops out and this is what scratched my lens holder very quickly. I only used it a few times before giving up.

I think the best solution will be something metal that fits in permanently and can somehow allow a focus wheel to click into it. I'm hoping someone, somewhere designs something like this for the Ex cameras because I won't be able to do it and this camera really does need a decent manual focus capability.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 12:30:54 am
In case anyone is looking for E4's, I just bought one from ShopFlir.com.  They do not have any stock in the USA, but they do have stock in Canada (11 at the time I talked to Grant over there).

Anyone know if flirshop Canada can ship the E4 direct international?
One would think being in Canada they're not exporting through US customs?

Thats not how customs works.
They ship it direct and clear it on your behalf while in customs.
Customs does not get shipped the package then reship it to you

There may be import duties due when it arrives though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 14, 2013, 12:31:53 am
In case anyone is looking for E4's, I just bought one from ShopFlir.com.  They do not have any stock in the USA, but they do have stock in Canada (11 at the time I talked to Grant over there).

Anyone know if flirshop Canada can ship the E4 direct?
One would think being in Canada they're not exporting through US customs?


I had emailed back and forth with a guy named Grant, his email is grantm - at - optimumenergy - dot - com if anyone wants to find out. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 12:32:42 am

That should be OK then :)


Have you guys watched mike's second video?

The ZnSe lense worked very well.
I think I'll just get a 50mm one and make a small spring loaded jig like he did.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 14, 2013, 12:32:54 am

Thats not how customs works.
They ship it direct and clear it on your behalf while in customs.
Customs does not get shipped the package then reship it to you

There may be import duties due when it arrives though.

I think he's talking about whether customers in other countries (like Oz) would be shipping out of Canada or out of the USA.

I presume Canada, if they sell outside North America.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 12:38:55 am
I purchased from Chris there. He was very helpful!
I believe they have warehouses in both countries
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 14, 2013, 12:42:06 am
Have you guys watched mike's second video?

Yes, I watched it and it does look to be a good option. But when I was using the look thru focus tool I could see the advantage of being able to manually focus at various closeup distances because that way you can make the best use of the limited resolution of the camera. eg I want to be able to accurately focus at 5cm thru 50cm in order to look at a whole large PCB or just look at a few SMD components in detail.

But I agree that a simple compromise of fixed (factory) focus and a $20 lens that allows focus at 150mm is probably going to be a good option for a lot of users.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 12:50:50 am
After playing with this for a couple hours it would be nice to move temp lock/unlock to the dpad
might give it a whirl a bit later
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 14, 2013, 01:14:29 am
Thats not how customs works.
They ship it direct and clear it on your behalf while in customs.
Nope, Flir have a warehouse in Canada and ship some items from there.

I purchased from Chris there. He was very helpful!
I believe they have warehouses in both countries

Yep, their Canada warehouse has E4 stock.
If they shipped a E4 from Canada to NZ/AUS it wouldn't pass through USA customs at all.

But.. being a US company, Flir may still not allow that as part of their company policy.

That's what i was wondering about.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 14, 2013, 01:44:14 am
In case anyone is looking for E4's, I just bought one from ShopFlir.com.  They do not have any stock in the USA, but they do have stock in Canada (11 at the time I talked to Grant over there).

Anyone know if flirshop Canada can ship the E4 direct international?
One would think being in Canada they're not exporting through US customs?

The answer is right on their website:
Quote
Note that not all of the products we sell are available for Export Sale. The products NOT available for export include:
    All Fluke Electronics products
    All Thermography (Infrared camera) products
    Other products as designated by our Suppliers or Optimum Energy Products Ltd.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 14, 2013, 02:18:04 am
If you lived in Canada like me you wouldn't have that problem
Title: Re:
Post by: Loafdude on November 14, 2013, 02:19:33 am
I am willing to forward with no fee
I know I dont have much of a rep here tho

I can DHL international it to whoever wants one
my shipping time from their warehouse in montreal is ~4 - 5 days
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 14, 2013, 02:20:19 am
If you lived in Canada like me you wouldn't have that problem
I would have other problems, like moose attacks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 14, 2013, 02:22:40 am
Quote
    If you lived in Canada like me you wouldn't have that problem

I would have other problems, like moose attacks

Don't play on racial stereotypes! I've only been attacked by a moose once, and it wasn't even a large one :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 14, 2013, 02:39:35 am
Don't play on racial stereotypes! I've only been attacked by a moose once

lol
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 14, 2013, 03:05:47 am

@TNT  - Any ideas on this:?
rls .image.flow.framebuffer.frameSum
frameSum          9.2842221e+008

rset: not supported




Some generally nice places to look at:

Set LCD Backlight 0=off, 1...100%:
rset .power.settings.trueBacklight 10

Default filename scheme for stored images:
.services.store.template                   Default: "DCF"
["SEQ" "SEQ_INC" "DIR+SEQ" "DATE+SEQ" "PREFIX_SEQ" "DCF"]

What gets stored when saving an image:
.image.services.store.format
Default: JPEG_fusion+JPG
Allowed: FFF, FFF+PNG, FFF+JLS, FFF_no_pixels, FFF_seq, FFF_append, FFF_visual, FFF_visual+PNG, JPEG, JPEG+PNG, JPEG_no_IR, JPEG_no_pixels, JPEG_visual, JPEG_visual_small, JPEG_fusion, JPEG_fusion+PNG, JPEG_fusion+JPG, JPEG_fusion_large, IR+visual_combo, fusion+visual_combo, fusion+large_combo, PNG_no_IR, AFF

Jpeg compression level:
.image.services.store.quality                       85

Time/Date settings
.system.time.day   [1, 31]
.system.time.hour  [0, 23]
.system.time.min   [0, 59]
.system.time.month [1, 12]
.system.time.sec   [0, 59]
.system.time.tz    [-12, 13]
.system.time.year  [2000, 2099]

Something for menu debugging:
rset .ui.settings.debugQML 1
rset .ui.settings.fontAntialiasing 0
rset .ui.settings.qmlReloadOnF8 true

Check battery voltage in mV:
rls .power.values.voltage
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 14, 2013, 03:09:45 am
Out of curiosity, is the E4/E8 work well for night vision?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 14, 2013, 03:10:09 am
why don't you cancel and order somewhere else where they have stock?

That sounds like a good idea. If I can find somewhere that still has stock.
Might have to phone around.
You can still order somewhere else where it is on stock. Just wait to cancel the other order until you received your unit. With the current ship date you've been told you have plenty of time.

Just got off the phone with Ivy Tools. They had one in stock that they'd put aside for me, and said if I ordered now they'd ship it first thing on Monday.
Ended up being a little more expensive, but in the end I'd call it a win  :)

So it turns out that Ivy Tools don't actually have any stock, even after telling me they did. ETA 22/11/13
Tried placing an order at shopFLIR who claimed to have 2 in stock, got an email saying they won't have any until the 22nd either.

I'm just about ready to give up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 14, 2013, 03:23:29 am
Out of curiosity, is the E4/E8 work well for night vision?
short: yes
long: depends on what type of night vision you require - actually it's "all time vision" in the spectral region around 10µm wavelength - with all limitations and benefits of that infrared region.

Hint: get yourself some educational material - like Dave's review EEVblog #402 - Flir E60 IR Thermal Camera (https://www.youtube.com/watch?v=8Oxky0qyOuw#ws) (he walked around his garden with the camera at night) or one of the other numerous videos online. Even the Flir manual will give you great information on the whole subject of blackbody radiation, imaging etc... and if you don't know what blackbody radiation is - even on that :)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kjk24 on November 14, 2013, 04:43:35 am
Hello,

thank you , the lenstool fits perfect onto the lens.
all the best
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 14, 2013, 04:50:42 am
Hello,

thank you , the lenstool fits perfect onto the lens.
all the best

Thanks - glad to hear that :)
Backlink to STL:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328518/#msg328518 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328518/#msg328518)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 14, 2013, 04:57:17 am
So it turns out that Ivy Tools don't actually have any stock, even after telling me they did. ETA 22/11/13
Tried placing an order at shopFLIR who claimed to have 2 in stock, got an email saying they won't have any until the 22nd either.

I'm just about ready to give up.

Check out my previous post - ShopFlir will ship from their Canada warehouse for $50, but will also price match.  I had been quoted $895 from Valuetesters, so even with the extra $50 for shipping, it was still less than MSRP, and it is shipping in the morning.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 14, 2013, 06:17:42 am
So it turns out that Ivy Tools don't actually have any stock, even after telling me they did. ETA 22/11/13
Tried placing an order at shopFLIR who claimed to have 2 in stock, got an email saying they won't have any until the 22nd either.

I'm just about ready to give up.

Check out my previous post - ShopFlir will ship from their Canada warehouse for $50, but will also price match.  I had been quoted $895 from Valuetesters, so even with the extra $50 for shipping, it was still less than MSRP, and it is shipping in the morning.

I've sent them an email asking why the delay and letting them know that I'd rather not wait around. Hopefully they'll give me that option.
I wasn't aware of the price matching. Though I'd still pay the $50 just to get from current stock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 14, 2013, 07:12:23 am
So it turns out that Ivy Tools don't actually have any stock, even after telling me they did. ETA 22/11/13
Tried placing an order at shopFLIR who claimed to have 2 in stock, got an email saying they won't have any until the 22nd either.

I'm just about ready to give up.

Check out my previous post - ShopFlir will ship from their Canada warehouse for $50, but will also price match.  I had been quoted $895 from Valuetesters, so even with the extra $50 for shipping, it was still less than MSRP, and it is shipping in the morning.

I've sent them an email asking why the delay and letting them know that I'd rather not wait around. Hopefully they'll give me that option.
I wasn't aware of the price matching. Though I'd still pay the $50 just to get from current stock.

The problem with waiting is that it's rumored there is a new version of the firmware being loaded onto new E4's that will render them unhackable (by the current method at a minimum). 

I talked to a few suppliers who all mentioned they generally get shipments weekly - but nobody is getting any more shipments for 3 weeks... which makes it sound to me like FLIR stopped shipping E4's to their dealers.  And I would guess it's because they are rolling out an updated firmware.

I might be wrong on that, and even if they do roll out a new FW, it may end up being hackable as well, but I didn't want to take the chance, certainly not over $50.  The price match was just an added plus.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 14, 2013, 07:32:45 am
Gentlemen, it is best to make a list of stores with the date of purchase and software versions
Then it will be all clear
That I'll start:
EU (Europe)
Elfa (Sweden) - Delivery planned - 19-NOV-2013 ver soft?
Farnell - product not available
RS Components  - product not available
USA
Mouser - No stock Delivery planned 3 weeks ?
DigiKey - product not available




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JSJFIN on November 14, 2013, 08:43:02 am
Ordered 5 November 2013 from tester.co.uk received today.

Calibration 9 November 2013
Firmware 1.19.8

Hacking worked like a charm, thanks all who participated in the hack development! Now lets test menu hack..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 09:23:11 am
@TNT  - Any ideas on this:?
rls .image.flow.framebuffer.frameSum
frameSum          9.2842221e+008

AFAIK that is just the sum of all the sensor pixels. Been mucking about there too. ;)

So in this case the average pixel value is 9.2842221e+008/(320*240) == 12089, which looks perfectly reasonable to me.

Edit: just to be clear, this is the sensor pixel as it is in the framebuffer, so NOT a raw sensor pixel value. There has been some processing done at that point already.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 14, 2013, 09:28:08 am
I talked to a few suppliers who all mentioned they generally get shipments weekly - but nobody is getting any more shipments for 3 weeks... which makes it sound to me like FLIR stopped shipping E4's to their dealers.  And I would guess it's because they are rolling out an updated firmware.
Or more mundanely, they could just be running out of stock due to the sudden demand and waiting for production to catch up... as of this post, a search for "flir e4" returns the Hackaday page as the 3rd result so they might be getting a lot more sales than we thought.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 14, 2013, 09:45:26 am
For i3 owners out there, this is a config from an i7 which someone kindly sent.
Someone mentioned a lack of measurement functions on a hacked i3 - these appear to be in gui.d\config.d - The e4 has a similar file that enables PiP, which I merged into the single e8.cfg file
flashfs\system\appcore.d\config.d :
Quote
# i7 Radiometric - Measurement active + 1 spot + 1 isotherm + 1 mbox
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 140
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
.caps.config.image.sysimg entry
# ID xxxxxxxx
# CRC01 xxxxxxxx
\flashfs\system\gui.d\config.d :
Quote
#
# gui.cfg - i7
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.measurementMenuActive bool true
.caps.config.menu.measureAreaSubmenuActive bool false
# ID xxxx
# CRC01 xxxxxxxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 14, 2013, 09:54:59 am
Rushing through a new hack-blocking E4 firmware is only going to..
1- Result in weak/rushed code which is easy to bypass again
2- Annoy people who purchased an E4 to hack but can't, which will promote more hacking on the new firmware since engineers love a challenge and to hack 'on principle'
3- Give everyone many opportunities to study the E4 and how it all works and how to bypass new firmwares. All this info will make it easier and easier to hack future firmware.

If they were smart they would get to work on a well designed anti-hack firmware fix but not roll it out until the E4 sales die back down to normal level and they are pretty sure their new fix is as secure as possible. (A few months at least).

An arms race between many hobby engineers all of the world and the engineers at Flir isn't going to end well for Flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 14, 2013, 10:29:35 am
Rushing through a new hack-blocking E4 firmware is only going to..
1- Result in weak/rushed code which is easy to bypass again
2- Annoy people who purchased an E4 to hack but can't, which will promote more hacking on the new firmware since engineers love a challenge and to hack 'on principle'
3- Give everyone many opportunities to study the E4 and how it all works and how to bypass new firmwares. All this info will make it easier and easier to hack future firmware.

If they were smart they would get to work on a well designed anti-hack firmware fix but not roll it out until the E4 sales die back down to normal level and they are pretty sure they're new fix is as secure as possible.

The current hacks could be fixed in a simple and low-risk way - if the info we've seen so far is correct, they've disabled the serial console and USB menu keypress, and possibly something else (It could be that the reported user just did the CRC01 wrong).
If Flir have any sense they probably don't care enough about the current hack to put major effort into stopping it, but probably want to be seen as at least doing _something_ if only to appease people like shareholders who don't understand the subtleties.

However the thing they really, really don't want is a framerate hack, as that would get them in all sorts of trouble due to export regs. If they have done their job properly, they have locked this down in the FPGA and won't be worried. If not, they should be be crapping themselves about now, but reacting by completely locking out a resolution hack is probably the most dangerous thing they could do as it would only intensify hacking efforts.
With the current situation, the hacked E4 is way good enough for most people, so hack efforts have already diminished, and will continue to do so.

If they were to lock out a resolution hack completely, the only route around it would be the "Zero day" method of adding a board to tap off the raw signal and process it with an FPGA or powerful ARM etc. This would not be especially hard or expensive (BTW No I'm not planning it as I already have all the thermal imaging I need). OK it would be a lot of work to get accurate thermometry this way but useable night vision would be pretty straightforward.
Locking out a firmware hack completely would only hasten this happening. The RC modelling community is gagging for a small, light, cheap, high framerate TIC so I have no doubt someone will do it eventually, either using an E4 or an automotive unit using the i or e series sensor.
Fixing that would need an expensive board revision and may have knock-on effects on their production/test processes.

I agree with Psi that a quiet rollout after the fuss has died down is the most likely outcome. Will be interesting to see if this has a different FPGA file (assuming we can find a way in to check).

Quote
An arms race between many hobby engineers all of the world and the engineers at Flir isn't going to end well for Flir.
..except in sales of the E4...
The problem with security is there will always be more people trying to break it than secure it. The only barrier is the cost of the hardware and perceived risk of bricking.



 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 10:49:30 am
Since I notice some mention of images earlier on...

Code: [Select]
# set to where it should store things. Any location goes, but maybe somewhere on \FlashIFS\ is a good idea ;)
rset .image.services.store.filename <wherever>

# take a pic from your favorite script
rset .image.services.store.commit true

Regarding triggering stuff with a commit: Triggering a NUC can be either through the resource tree, or by executing "nuc.exe" on command line. Code snippets I use for some triggers.

Code: [Select]
   def triggerNuc(self):
        self.setResource(".image.services.nuc.commit", True);
        return;
   
    def triggerPhoto(self):
        self.setResource(".image.services.store.commit", True);
        return;

Incidentally, the pics I posted some time ago were done using this.

What's also fun is you can open/close the internal shutter. Handy if you want to:
- close shutter
- do some measurements + calculations
- open shutter

During that you can obviously also disable auto-nuc.

*** TODO: paste code ***

Also amusing ... you can check the entire image flow:
Code: [Select]
\>rls -ll .image.flow.order
rw--rw--rw---- 0 root   root   <a> order           "snoopRev;object;lens;shutter;baffle;TSens;detector;maps;globalCorr;digitalFilter;histogramHW;framebuffer;histogramSW;zoom;visualZoom;snoopFwd;"

As you can see in the above .image.flow.order is marked rw, but I couldn't get anything to write to that. I tried a few reorders just for the fun of it, but no dice.

You can however enable/disable things in the flow. For example:

Code: [Select]
# disable lens correction
rset .image.flow.lens.partOfImgFlow false

# enable lens correction
rset .image.flow.lens.partOfImgFlow true

Same goes for all the other items in the list. The lens correction is pretty subtle, but you can see it.
Dunno if it was mentioned or not, but you can zoom + set zoom point. Maybe Taucher's mod enables zooming as well? Don't know since I haven't used it yet. Too many other fun things to explore first. :)

Zooming:
Code: [Select]
    cli.setResource(".image.flow.zoom.factor", 2)

As for snoopRev and snoopFwd, haven't checked them out yet. Current guess is some sort of palette snooping, since there's also a spectral compont to it (currently set to NEUTRAL).

And seeing the .caps dump by Mike just now. I have said it, but since there's been no reaction to that I will say it again...

Be adviced the current hack is not one config file. It is TWO config files, that are combined into ONE running config.

This fact is also shown somewhere in the logs. Too lazy to dig it up the exact message right now, but no need since you can check for yourself:

Code: [Select]

\>rls .caps.config.name
name            "app E4 1.0 + app E8 1.0"

Which incidentally is precisely what you get when you combine the original E4 config with our E8_hack config.

The reason I mention it a bit more bold this time, is that you may want to keep in mind that the rather arbitrary "lets give it this filename" method used currently may very well affect the hack working or not working. As in, suppose the old firmware reads files in one order, and the new firmware in another order. Then 100% depending on how they implement combining resources you get either something working, or something that is not quite what you wanted. Hell, if they don't do any specific alphabetic or whatever ordering, it could even depend on how it's stored on your filesystem. (Oh this inode looks shiney! Lets do that first!)

I am guesing (haven't tested it yet, because stuff works right now  ;D) that you can change the order by changing filenames. And as sanity check you can then check the value of .caps.config.name. I am guessing that the following will happen:

Currently working config:
name            "app E4 1.0 + app E8 1.0"

Maybe working, oooooor maybe not working config:
name            "app E8 1.0 + app E4 1.0"

What I think happens is our E8 config is applied to the resource tree last. So any boring old E4 stuff is overwritten with the values we would like to see.

So should you get a situation where "the hack doesn't work", best check that first. Not even telnet required, just use the FlirInstallNet from Flir Tools to show resource .caps.config.name.  If that shows E8 first and E4 later, then the order is swapped for whatever reason. And if it shows just "app E4 1.0" then either you're doing it wrong (CRC01) or something else is going on.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 14, 2013, 10:59:04 am
Quote
I am guesing (haven't tested it yet, because stuff works right now  ;D) that you can change the order by changing filenames. And as sanity check you can then check the value of .caps.config.name. I am guessing that the following will happen:
I did confirm that it looks in alphabetical order with the .fif installer for USB modes, which is why the RNDIS is called zrndis.rsc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 11:16:55 am
I did confirm that it looks in alphabetical order with the .fif installer for USB modes, which is why the RNDIS is called zrndis.rsc

Great. :)

In which case I will just post the executive summary for people with a non-working hack:

- Start FlirInstallNet
- Do "Get resource" for .caps.config.name
- "app E4 1.0": hack didn't apply. Recheck your CRC01. Still a problem ==>  :-//
- "app E4 1.0 + app E8 1.0": hack did apply, so things should work.  :)
- "app E8 1.0 + app E4 1.0": hack did apply, wrong order. Check the filename for your config. It should alphabetically come after the original config file name.

Oh and pr0-tip. When you do that, be sure that appcore is actually running at that point in time. I just did the above just to check if the method was working. Huh! Why don't I get a resource result??   :o DOH!  I wasn't running appcore at that time. Yeah, not many resources to be listed then.  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 14, 2013, 11:40:40 am
I've noticed there's a few posts along the lines of "Flir should've had better security" and that along with some other recent events made me want to ask this: if you were Flir management that would probably be a natural thought, but is that really something you want to say as a user/consumer? The reason is that if you're saying that as a user, you're implying that you want your products locked down and "secured" against you. Is that what you want, for the corporations control everything about what you buy and you unable to resist? I've been seeing a lot of "security" being added to products lately, ostensibly because it's better for the user but actually it's diminishing user freedom and control. The reasoning they use seem to be along the lines of "do you want a more secure product? you'd be crazy not to!" without saying truly what they mean by "more secure". To me, security is good up to a point - i.e. until it goes against the will of user.

</rant>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ovnr on November 14, 2013, 12:30:15 pm
Got mine today, calibrated 7th November. Version 1.19.8.

Hack works like a charm, thanks everyone (but especially Mike)!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tim_h on November 14, 2013, 01:47:22 pm
Ordered mine today from our local test gear company http://www.alpha-electronics.com/ (http://www.alpha-electronics.com/). Looking at a week delivery as they don't hold stock and I assume it's coming from Flir.
Going to have take my chances on it being a new firmware model.

Salesman told me Flir said a price increase was imminent but could sell at the current price, not sure if this bullshit?
We have an trade account with them and he gave me a discounted price of £695 + VAT.

Thanks for your hard work on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 14, 2013, 03:47:01 pm
Salesman told me Flir said a price increase was imminent but could sell at the current price, not sure if this bullshit?
Maybe an adjustment based on the higher ratio of sales of E4 to other models they're seeing... however a lot of their publicity has been based around the "Sub$1000" price tag
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 14, 2013, 03:53:47 pm
Quote
Maybe an adjustment based on the higher ratio of sales of E4 to other models they're seeing... however a lot of their publicity has been based around the "Sub$1000" price tag

I aggree with Mike, the sub-$1k aspect of the E4 has been advertised quite a few times, and I doubt they would chenge that now. If they're going to try to cut costs they will more likely stop including the travel case with it.

I wonder if it would be cheaper for them to harden the FPGA logic into an ASIC? I'm not sure what is being doen by that device, but I doubt for something manufactured in such numbers as this it would be cheaper to go for a Cyclone IV.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 14, 2013, 04:21:25 pm
Quote
Maybe an adjustment based on the higher ratio of sales of E4 to other models they're seeing... however a lot of their publicity has been based around the "Sub$1000" price tag

I aggree with Mike, the sub-$1k aspect of the E4 has been advertised quite a few times, and I doubt they would chenge that now. If they're going to try to cut costs they will more likely stop including the travel case with it.

I wonder if it would be cheaper for them to harden the FPGA logic into an ASIC? I'm not sure what is being doen by that device, but I doubt for something manufactured in such numbers as this it would be cheaper to go for a Cyclone IV.
I suppose that depends on the numbers - I have no idea what volumes would be on something like this. Another aspect is that the sensor is quite new, so I'm sure they'd want to keep their options open while they characterise it through production, so hardening the FPGA could be a bit of a risk.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 05:07:28 pm
I made the model to:
11,867mm diameter,
0,99mm radius on the 10 spokes

Attached the original version which could be cool to 3D print where I had added a grip

EDIT: link first feedback:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330321/#msg330321 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330321/#msg330321)

Thank you for this file Taucher!

For Canadians, Draft Print 3D was able to print and ship this piece for me in ABS for $12.00 + Tax
http://www.draftprint3d.com/ (http://www.draftprint3d.com/) (In Toronto, shipped to Vancouver)

# Scratch that, apparently they misquoted and need to add freight. 12$ part cost only
Ended up being 13.56! Fair deal!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gotvolts on November 14, 2013, 05:10:42 pm
Okay, just got mine today with firmware code 1.17.1.  Will give it a shot to see if the hack works and report back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 05:30:28 pm
Okay, just got mine today with firmware code 1.17.1.  Will give it a shot to see if the hack works and report back.

1.17.1? That's the lowest version I've seen so far. AFAIK most are 1.18.7 or higher. Will be interesting to see if it works there as well. Probably will. :) If it really is 1.17.1 (aka not a type) then you may have a relatively low serial number...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Loafdude on November 14, 2013, 05:51:56 pm
One other guy had 1.17.1 calibrated sept 20 while mine which is 1.18.x calibrated sept 16 has newer FW
It seems calibration sequence is not done in the same order as production.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 14, 2013, 06:18:07 pm
Jpeg compression level:
.image.services.store.quality                       85

How would one go permanently changing this to 100? (I am never going to have 500 images on this thing so they may as well look as good as they can)

Also has anyone else noticed that after charging for a while when off that the battery symbol seems to burn in a bit on the LCD? (persistence)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 14, 2013, 06:26:22 pm
Jpeg compression level:
.image.services.store.quality                       85

How would one go permanently changing this to 100? (I am never going to have 500 images on this thing so they may as well look as good as they can)


Remember this is really just for the preview image (basically a screen grab), the actual thermal image is stored non-lossy compressed in the same file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 06:35:19 pm
Jpeg compression level:
.image.services.store.quality                       85

How would one go permanently changing this to 100? (I am never going to have 500 images on this thing so they may as well look as good as they can)

Enable RNDIS and telnet to it (192.168.0.2). Then do:
Code: [Select]
rset .image.services.store.quality 100
Although you are probably better of using png if you're concerned about picture quality.

Quote
Also has anyone else noticed that after charging for a while when off that the battery symbol seems to burn in a bit on the LCD? (persistence)

I haven't really notice any persistence on the lcd, but you could try:
Code: [Select]
rset .power.settings.screenSaverEnable true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 14, 2013, 06:56:28 pm
Remember this is really just for the preview image (basically a screen grab), the actual thermal image is stored non-lossy compressed in the same file.

If that's the case then it's not really that big of a deal then.

Enable RNDIS and telnet to it (192.168.0.2). Then do:
Code: [Select]
rset .image.services.store.quality 100
Although you are probably better of using png if you're concerned about picture quality.

I haven't really notice any persistence on the lcd, but you could try:
Code: [Select]
rset .power.settings.screenSaverEnable true


I noticed it after having it on the charger for a few hours then going into a dark room with the brightness on low and the color set to grey - I could see the outline of the battery and the bars. It did go away after a bit but it cant be good for the LCD in the long run. If you look closely you can see the screen back-light go off while it's charging but the LCD is still displaying the battery image witch is likely contributing to the persistence. I have had this issue before on a iPad2 and it got quite pronounced after a while but was able to repair it by running an app that flickered black and while colors over the whole screen and it would clear it away.

Thank you to you both for the quick info!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 06:56:49 pm
Just when I am testing some powersaving settings my battery is empty. Classic!  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: epistememe on November 14, 2013, 07:00:20 pm
Ok, I am having difficulty with the hack.  First off, I am a Mac user and have rarely used Windows in the last five years.  I am also not very knowledgeable in the command line interface.  I have access to a windows 8 laptop and tried to follow the directions Mike posted bellow but was not able to get CRC01 to run.  I assume that all I have to do is enter "CRC01" and then hit return, if this is not the correct procedure what is the correct procedure (so about being so daft).  I also tried just running the expanded file on the desktop CRC01 but that did not work either.  I did a quick search on google for procedures but have not really found what I am doing wrong. :palm:

HELP!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 07:06:51 pm
I noticed it after having it on the charger for a few hours then going into a dark room with the brightness on low and the color set to grey - I could see the outline of the battery and the bars. It did go away after a bit but it cant be good for the LCD in the long run. If you look closely you can see the screen back-light go off while it's charging but the LCD is still displaying the battery image witch is likely contributing to the persistence.

Now that you mention it... It's charging right now, and when you shine a bright led into the display you can indeed see the battery symbol is still being displayed. That's a bit silly of them.

Hey Flir people reading this thread, while you are fixing firmware please fix that one as well. ;)

You can of course get rid of that by making the bmp file or whatever it is all black. But that would have as drawback that you never get to see that charging display. Not even when it would be useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 14, 2013, 07:12:01 pm
Quote
Ok, I am having difficulty with the hack.  First off, I am a Mac user and have rarely used Windows in the last five years.  I am also not very knowledgeable in the command line interface.  I have access to a windows 8 laptop and tried to follow the directions Mike posted bellow but was not able to get CRC01 to run.  I assume that all I have to do is enter "CRC01" and then hit return, if this is not the correct procedure what is the correct procedure (so about being so daft).  I also tried just running the expanded file on the desktop CRC01 but that did not work either.  I did a quick search on google for procedures but have not really found what I am doing wrong. :palm:

First, extract all the files (including CRC01.exe) from e4hack3b.zip to the folder C:/  Then when you run the command prompt, you may type 'cd C:' and hit return/enter to bring your terminal to the working directory that contains these files. Simply follow the bundled instructions from here. Typing ''crc01' will run the program now
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 07:12:10 pm
Ok, I am having difficulty with the hack.  First off, I am a Mac user and have rarely used Windows in the last five years.  I am also not very knowledgeable in the command line interface.  I have access to a windows 8 laptop and tried to follow the directions Mike posted bellow but was not able to get CRC01 to run.  I assume that all I have to do is enter "CRC01" and then hit return, if this is not the correct procedure what is the correct procedure (so about being so daft).

1 - make a new E8 config file with your serial etc, as outlined in the instructions
2 - get command line prompt, then do
3 - CRC01 <filename_you_just_made>

So not just CRC01 as you say you tried, but CRC01 followed by a filename.

Instructions etc are linked to in Mike's first post: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg309194/#msg309194 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg309194/#msg309194)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 14, 2013, 07:16:38 pm
Okay, seems like the screensaver thing actually is working. Because now while it is charging the battery symbol cannot be seen any more. Have to retest to see if this is indeed different from default behavior though. First time I'm looking for it. More later.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 14, 2013, 07:17:15 pm
Ok, I am having difficulty with the hack.  First off, I am a Mac user and have rarely used Windows in the last five years.  I am also not very knowledgeable in the command line interface.  I have access to a windows 8 laptop and tried to follow the directions Mike posted bellow but was not able to get CRC01 to run.  I assume that all I have to do is enter "CRC01" and then hit return, if this is not the correct procedure what is the correct procedure (so about being so daft).  I also tried just running the expanded file on the desktop CRC01 but that did not work either.  I did a quick search on google for procedures but have not really found what I am doing wrong. :palm:

HELP!

- open explorer (win+e)
- navigate to the folder where the uncompressed hack resides (if zip still compress, decompress it by using the right click menu)
- SHIFT-right click on the folder, you'll have additional options available - one is to open a command window in this folder - do so
- you see a new window with black background -> that's the command line interface, ensure that the shown path contains crc01.exe (issue a "dir" command)
- use notepad++ if mistrusting notepad.exe - follow the regular hack instructions

if crc01.exe is not in the "path", then that command will fail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 14, 2013, 07:21:00 pm
@TNT  - Any ideas on this:?
rls .image.flow.framebuffer.frameSum
frameSum          9.2842221e+008

AFAIK that is just the sum of all the sensor pixels. Been mucking about there too. ;)

So in this case the average pixel value is 9.2842221e+008/(320*240) == 12089, which looks perfectly reasonable to me.

Edit: just to be clear, this is the sensor pixel as it is in the framebuffer, so NOT a raw sensor pixel value. There has been some processing done at that point already.

hm, yes, could be something like the average current temperature
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 14, 2013, 07:24:05 pm
Just when I am testing some powersaving settings my battery is empty. Classic!  :-DD

Well, that's about as much saving as you can possibly get  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: epistememe on November 14, 2013, 08:17:50 pm
 I am really appreciating the help but I am still having difficulty.

here is what I have done:

I have decompressed/extracted the hack folder.

 I have changed the E8.cfg file by erasing the XXXXXX and replacing them with my serial number and then hitting the "enter" key.  I then have saved this modified file.

I think in the command prompt I am now in the same directory as the files that have been extracted.

I entered crc01 e8.cfr and hit enter and multiple windows popped up warning me about proceeding.  I proceeded and it appeared that I was successful in running crc01 EXCEPT that I thought I was suppose to have this displayed
# CRC01 xxxxxxxx

and it did not display anything except a blank command prompt.  So I don't think it actually did run?
Here is a capture of the command prompt.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 14, 2013, 08:25:28 pm
Ok, here's the finished and perfectly fitting/working lens adjustment tool I 3d printed this morning. Mark II model for better finger grip. Just looks weird in the pics since it was printed with the plastic that was loaded (clear).

Also attached is a zip with sketchup file, STL file and Makerbot Replicator 2 print file.

Enjoy and feel free to tweak the sketchup file for your own fingers :)

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cyr on November 14, 2013, 08:31:36 pm
Has anyone else played around with the targetnoise value, and/or know what the setting is on a real E8?

Subjectively I've found that a value around 30 is the best compromise, 5 (the hack default) seems to give that smeared look you get with overdone noise reduction along with a lot of banding and possibly some lost detail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 14, 2013, 10:12:03 pm
Another member of FLIR E4 family  :-+

S/N: 639048XX
Calibration: 25 October
FW: 1.18.8

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 14, 2013, 11:57:36 pm
So it turns out that Ivy Tools don't actually have any stock, even after telling me they did. ETA 22/11/13
Tried placing an order at shopFLIR who claimed to have 2 in stock, got an email saying they won't have any until the 22nd either.

I'm just about ready to give up.

Check out my previous post - ShopFlir will ship from their Canada warehouse for $50, but will also price match.  I had been quoted $895 from Valuetesters, so even with the extra $50 for shipping, it was still less than MSRP, and it is shipping in the morning.

I've sent them an email asking why the delay and letting them know that I'd rather not wait around. Hopefully they'll give me that option.
I wasn't aware of the price matching. Though I'd still pay the $50 just to get from current stock.

Well I spoke with Grant from ShopFLIR, who said that he believed they still had stock in Canada, and would organize my order to be shipped from there.
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.

I think it's time to give up on trying to find an old-stock unit, and just wait and see what happens regarding the new firmware.
I just know there are now 4 test equipment sites that are very unlikely to see any future business from me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 15, 2013, 12:06:38 am
Quote
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.

This happened to me as well, but I just changes the shipping address to be the same as the billing address. When purchasing expensive items like this, they often verify with your credit card issuer to see that the address you gave was the same that was used when applying for the credit card. Shipping only to this address minimizes the chances of a stolen card being used to make the purchase  (why would the perp have an item shipped to the house of the person he stole the card from?)

So I will be visiting my parents again in the near future to pick up my mail :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 15, 2013, 12:13:34 am
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.
I just know there are now 4 test equipment sites that are very unlikely to see any future business from me.

wrong, this is a sign of a good merchant, as poster above me said already they do this in order to minimize chances of being paid with a stolen card (and later receiving a chargeback)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: whatchitfoool on November 15, 2013, 12:18:02 am
After being told stock was available, and then having my order canceled because it wasn't (with 4 different places) - I just got a shipping notice on a NOS e4. :-+  $895.96 shipped.
I had them open the box, said the cal date was sept. 7th.  I think that's the lowest i've seen in the thread so far.

Enabling 60 FPS would be icing on the cake to all of this. Is anyone pursuing means to get it higher?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 15, 2013, 12:28:21 am
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.
I just know there are now 4 test equipment sites that are very unlikely to see any future business from me.

wrong, this is a sign of a good merchant, as poster above me said already they do this in order to minimize chances of being paid with a stolen card (and later receiving a chargeback)

Well I paid with Paypal, but I don't know what difference that makes.
I would have been happy to send them a copy of my ID to verify the billing address, like I've done with other sites, but they didn't give me the option. Just refunded my money and canceled the order.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 12:42:58 am
Enabling 60 FPS would be icing on the cake to all of this. Is anyone pursuing means to get it higher?
Even if possible, which is doubtful as there would be no reason for the FPGA to support it,  chances are it would not be very useable as the signal-noise ratio would probably be rather poor with the small lens - the downsampling to 9fps allows a 6:1 frame avaraging to reduce noise. The construction would make it rather difficult to add a bigger lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on November 15, 2013, 12:55:50 am
Does anyone know what the correct HS code for an E4 would be? (9027500000?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 15, 2013, 12:56:11 am
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.
I just know there are now 4 test equipment sites that are very unlikely to see any future business from me.

wrong, this is a sign of a good merchant, as poster above me said already they do this in order to minimize chances of being paid with a stolen card (and later receiving a chargeback)

Well I paid with Paypal, but I don't know what difference that makes.
I would have been happy to send them a copy of my ID to verify the billing address, like I've done with other sites, but they didn't give me the option. Just refunded my money and canceled the order.

PayPal fraud protection only works when you ship to a verified address and/or the billing address of the card.  It could likely be that the merchant gets an email telling them "here's the shipping address - and if you ship there, there is no fraud protection".  They might just be set up to cancel those orders.

Just call Grant and do the order by phone... my company Amex card bills to my home but I gave them my work as the shipping address - so they can definitely do it, maybe just got canceled because of the PayPal fraud protection thing.

Better safe than sorry, IMO....

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: csshih on November 15, 2013, 01:08:40 am
Then I get an email saying that my order was canceled because of something to do with my Billing address being different to the shipping address.
I just know there are now 4 test equipment sites that are very unlikely to see any future business from me.

wrong, this is a sign of a good merchant, as poster above me said already they do this in order to minimize chances of being paid with a stolen card (and later receiving a chargeback)

Well I paid with Paypal, but I don't know what difference that makes.
I would have been happy to send them a copy of my ID to verify the billing address, like I've done with other sites, but they didn't give me the option. Just refunded my money and canceled the order.

PayPal fraud protection only works when you ship to a verified address and/or the billing address of the card.  It could likely be that the merchant gets an email telling them "here's the shipping address - and if you ship there, there is no fraud protection".  They might just be set up to cancel those orders.

Just call Grant and do the order by phone... my company Amex card bills to my home but I gave them my work as the shipping address - so they can definitely do it, maybe just got canceled because of the PayPal fraud protection thing.

Better safe than sorry, IMO....

As a merchant, that's exactly I would do on a transaction of this relative size.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 15, 2013, 01:16:40 am
For i3 owners out there, this is a config from an i7 which someone kindly sent.
Someone mentioned a lack of measurement functions on a hacked i3 - these appear to be in gui.d\config.d - The e4 has a similar file that enables PiP, which I merged into the single e8.cfg file
flashfs\system\appcore.d\config.d :
Quote
# i7 Radiometric - Measurement active + 1 spot + 1 isotherm + 1 mbox
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 140
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
.caps.config.image.sysimg entry
# ID xxxxxxxx
# CRC01 xxxxxxxx
\flashfs\system\gui.d\config.d :
Quote
#
# gui.cfg - i7
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.measurementMenuActive bool true
.caps.config.menu.measureAreaSubmenuActive bool false
# ID xxxx
# CRC01 xxxxxxxx

The gui.d directory did not exist on the i3.  Creating the path and adding in the gui.cfg with those contents file unlocked the measurement menu on the i3.   It now has all i7 functionality.

Additional non-i7 features such as alarms and multiple spot measures still aren't available although enabled as in the service config so I guess there's something elsewhere still missing. I'll do some more playing around to see if I can enable those bonus features on the i3 too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: whatchitfoool on November 15, 2013, 01:20:31 am
Enabling 60 FPS would be icing on the cake to all of this. Is anyone pursuing means to get it higher?
Even if possible, which is doubtful as there would be no reason for the FPGA to support it,  chances are it would not be very useable as the signal-noise ratio would probably be rather poor with the small lens - the downsampling to 9fps allows a 6:1 frame avaraging to reduce noise. The construction would make it rather difficult to add a bigger lens.

I more or less meant the general ability to manipulate the rate to anything above 9fps. "Higher" referred to 9fps, not 60.
I didn't consider the small diameter of the lens.
Frame averaging's effectiveness would be inversely related to the amount of induced or captured motion (ignoring all other variables). For a night vision type deal, taking it from 9 to 15 or 20 would make a huge difference. If they are using a buffer of stored frames averaged to reduce noise, taking it from a factor of ~6:1 (9FPS) to 3:1 (20FPS) would be a reasonable change. 
This is all, of course, dependent on the FPGA having the required logic for the change.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 01:29:08 am
Additional non-i7 features such as alarms and multiple spot measures still aren't available although enabled as in the service config so I guess there's something elsewhere still missing. I'll do some more playing around to see if I can enable those bonus features on the i3 too.
Did you try adding the lines from the gui.cfg to the conf.cfg (and re-doing the CRC obviously) ?

If it's the same as the E4, the service mode config comes from a template in the flashfs\service dir. The other options are probably in there.
Here's a copy of the i7 service mode template :
Quote
#
# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012_service"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 6
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 15, 2013, 02:08:36 am
As another option this guy on ebay is selling Milwaukee 2260.  60hz, but only 160x120.  $1600 usd or "make offer".  A friend made an offer of $1300 and it was accepted.  Interestingly he's offering worldwide shipping.  Interesting because of the 60hz.

http://www.ebay.com/itm/Milwaukee-thermal-Imager-/221316682869?pt=LH_DefaultDomain_0&hash=item3387809475 (http://www.ebay.com/itm/Milwaukee-thermal-Imager-/221316682869?pt=LH_DefaultDomain_0&hash=item3387809475)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 15, 2013, 03:11:36 am
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CzokNorris on November 15, 2013, 03:14:52 am
Hi Mike,
may I ask, how much you paid for the Audi automotive cam?
Thanks, Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 15, 2013, 03:20:00 am
Honestly, how noticeable of a difference is there between 9Hz and 60Hz? I mean does 9Hz refresh rate really look all that choppy?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: firewire on November 15, 2013, 03:26:11 am
Honestly, how noticeable of a difference is there between 9Hz and 60Hz? I mean does 9Hz refresh rate really look all that choppy?

I think 30 frames per second is normal video, so there should be a significant difference.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 15, 2013, 03:31:23 am
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.

Heh, that was one of the first things I fixed. Damn annoying to have it perform a nuc (calibration) juuuust when you're doing a measurement.

Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false

# turn on auto-nuc
rset .tcomp.services.autoNuc.active true

# trigger nuc
rset .image.services.nuc.commit true

The idea is to turn off auto-nuc, and then trigger a nuc when you think it's useful. I.e between measurements. Or not at all.  ;D

Happy uninterrupted video streaming!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 15, 2013, 03:42:27 am
Yes 9 fps is quite noticeable and laggy when viewing anything moving fast.
Video isn't fluid until you get to around 18 fps
It really isn't a problem for a consumer thermal camera as 90% of the time your looking at something static anyway.
High FPS thermal video is used for weapon, like heat seeking missiles and target surveillance, which is why they have the export restrictions on high FPS TICs.

The difference between 25fps and 48fps is also quite noticeable. If you saw The Hobbit movie, that was screened at 48FPS in most areas.
People have described the 48-60FPS range as very "soap opera" like and have argued both for and against it.
(IMHO people who say 48/60FPS looks bad are just having the typical reaction of... "it's not what i'm used to so it looks wrong")
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 15, 2013, 04:14:34 am
9fps is like claymation film compared to 30fps.  To me going from 30fps to 60fps is a non-issue.
The huge benefit of 30fps and up is panning across a room or outside wall without having to stop to get the true detail of a spot.
Its a time saver and makes it a more useful tool.(not just for missles) 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 15, 2013, 04:37:42 am
For Canadians, Draft Print 3D was able to print and ship this piece for me in ABS for $12.00 + Tax
http://www.draftprint3d.com/ (http://www.draftprint3d.com/) (In Toronto, shipped to Vancouver)

# Scratch that, apparently they misquoted and need to add freight. 12$ part cost only
Ended up being 13.56! Fair deal!

I am trying to order from here http://i.materialise.com/3dprintlab/instance/5c484212-4460-4c82-bfdf-b189a518ddbc (http://i.materialise.com/3dprintlab/instance/5c484212-4460-4c82-bfdf-b189a518ddbc)  and it asks me if the design is in inches or mm. What is the right answer?

Edit: what is a good 3D service to use in the US?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 15, 2013, 04:55:52 am
I was under the impression that 24 FPS was the threshold. I guess some human eyes are more sensitive than others.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 15, 2013, 05:04:59 am
On LSD-25, ALL thermal imagers operate at 9Hz
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 15, 2013, 05:07:59 am
For Canadians, Draft Print 3D was able to print and ship this piece for me in ABS for $12.00 + Tax
http://www.draftprint3d.com/ (http://www.draftprint3d.com/) (In Toronto, shipped to Vancouver)

# Scratch that, apparently they misquoted and need to add freight. 12$ part cost only
Ended up being 13.56! Fair deal!

I am trying to order from here http://i.materialise.com/3dprintlab/instance/5c484212-4460-4c82-bfdf-b189a518ddbc (http://i.materialise.com/3dprintlab/instance/5c484212-4460-4c82-bfdf-b189a518ddbc)  and it asks me if the design is in inches or mm. What is the right answer?

Edit: what is a good 3D service to use in the US?

Mine is designed in mm, not sure about Taucher's (I "presume" mm as well, since that's what he quoted his spoke sizes etc).

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 15, 2013, 05:10:03 am
Did you try adding the lines from the gui.cfg to the conf.cfg (and re-doing the CRC obviously) ?

If it's the same as the E4, the service mode config comes from a template in the flashfs\service dir. The other options are probably in there.
Here's a copy of the i7 service mode template :

I have all i7 functionality unlocked on the i3.  I'm still not able to fully unlock all service mode options such as multiple spots, alarms, etc.  I'm thinking my gui.cfg needs some additional options added to unlock the neccesary menu items/gui capabilities to access these features even though they are enabled in the main config.

To get the Measurement menu unlocked required creating a \flashfs\system\gui.d\config.d\gui.cfg file with the i7 contents you provided.  Putting these options in the main config conf.cfg seemed to have no effect -- tried at the bottom & near the top. Creating this gui.cfg file though worked to unlock the Measurement menu with the options: Spot, Area Max, Area min, Above, Below.  For my main config I'm using the service template in the flashfs\service directory which is identical to the i7 service template you provided, aside from the configuration name with i7 vs i3.  The service template + gui.cfg effectively unlocks all advertised i7 functionality on the i3.

It would be nice to unlock the extra capabilities not even bundled with the i7 to go beyond 1 spot, add alarms, etc. The top of the service config notes "# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm" but it still lacks those although most everything else from the config is working.

I wonder if the other options need to be unlocked via gui.cfg.  Since these are not i7 features either (although the service template for the i3/i7 talks about them) I'm thinking some necessary configuration never made it into the i3 nor i7's gui.cfg (or possibly some other file).  Does the e4 have other options in its gui.cfg?  I at least didn't see the ".caps.config.menu.measurementMenuActive bool true" entry from gui.cfg in the e8.cfg so maybe other entries weren't copied into it either?

Here are the config files to get full advertised i7 functionality on the i3. This does not unlock the 'extra' features from the service mode template so something is still missing somewhere to get those additional things enabled:

FlashFS/system/appcore.d/config.d/conf.cfg:
Code: [Select]
#
# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i3_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 6
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID xxx
# CRC01 xxx

FlashFS/system/gui.d/config.d/gui.cfg
Code: [Select]
#
# gui.cfg - i7
#
.caps entry
.caps.config entry
.caps.config.name text "i3_2012"
.caps.config.revision text "1.0"
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.measurementMenuActive bool true
.caps.config.menu.measureAreaSubmenuActive bool true
# ID xxx
# CRC01 xxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 07:21:08 am
With these mods can you guys find a way to toggle the annoying calibration popup on and off?
I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.
Heh, that was one of the first things I fixed. Damn annoying to have it perform a nuc (calibration) juuuust when you're doing a measurement.
Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false
# turn on auto-nuc
rset .tcomp.services.autoNuc.active true
# trigger nuc
rset .image.services.nuc.commit true
The idea is to turn off auto-nuc, and then trigger a nuc when you think it's useful. I.e between measurements. Or not at all.  ;D
Happy uninterrupted video streaming!

My first Idea on this would be to take some unused language file and replace it with your preferred, hacked one, where that calibration text is simply "". By selecting the camera language one could switch between "show" and "hide" then.
The message text can be edited in the language-files, if the message-background does not scale down to "", then that would probably require a hack in the ressource files (unpack, hack, repack) - I guess one could make it very/totally transparent or something similar.

Turning off NUC will probably be bad for the time-lapse as the camera will drift away - but using the manual nuc command has one big advantage: one can select the framecount, thus shorten it a bit
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 15, 2013, 08:31:18 am
15-11-2013 updated availability:
EU (Europe)
Elfa (Sweden) - Delivery planned - 19-NOV-2013 - crap after logging and add to cart shows the date the end of November, ver soft?
Farnell - product not available
RS Components  - product not available
Conrad.de - product not available 20-Nov and maybe yes maybe no  (as seen from a call tel)
USA
Mouser - No stock Delivery planned 3 weeks ?
DigiKey - product not available

the overall situation
After circling a single unit stores
Flir did not foresee that the sudden sale :) increase by 1000% :)
Title: Crashes
Post by: Pinkus on November 15, 2013, 08:38:24 am
By the way: did anybody find a way to avoid the frequent crashes with the enhanced gui on the E4 (code from Taucher)?

I nailed it down a bit:
A crahs usually (I never had a crash in the regular spot mode) appears during moving through the color selections and almost (90%?) the color mode "Artic" is involved. Selecting other color modes before and after did not show a problem. Anything wrong with arctic.pal, or maybe selection #9?

Problem: as a color mode such as "Artic" is already be used by the software at the moment when you move the cursor on the selection (=without pressing OK), there is no way to avoid Arctic when you want to select the mode "Condensation" and the others.

Idea: would it possible to move Artic to the end of the list to avoid selecting during moving the cursor to the more important selections condensation / insulation / interval?  By having it at the end of the list you just need to select it when you really need it. Then crashes are gone and we know there is a risk when selecting Artic.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 08:51:16 am
Just regonized in arctic.pal a Tab where the other palettes does have a space. I will change this and try it out.
Title: Re: Crashes
Post by: Taucher on November 15, 2013, 08:51:40 am
By the way: did anybody find a way to avoid the frequent crashes with the enhanced gui on the E4 (code from Taucher)?
I nailed it down a bit:
A crahs usually (I never had a crash in the regular spot mode) appears during moving through the color selections and almost (90%?) the color mode "Artic" is involved. Selecting other color modes before and after did not show a problem. Anything wrong with arctic.pal, or maybe selection #9?

Hm, weird, maybe something with your E8 conf?
I have "advanced measurements" disabled, anything else: enabled
Arctic works just fine for me...

Please add "crash conditions" like "selecting delta measurement, then zapping to arctic while on manual color scale"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 09:33:08 am
Just regonized in arctic.pal a Tab where the other palettes does have a space. I will change this and try it out.
I've done some systematic tests now - seems that it's related to auto-switching of the measurement modes.
Example: select "Hotspot" (not delta), then zap to Arctic - pay attention to screen - it will show delta temp. and freeze either instantly or after a while.

Similar weird things happen when selecting no measurement and then switching between gray-based and .pal based schemes - when opening the measurement menu then it's not uncommon that spot measurement will be pre-selected
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 09:33:22 am
First I did change the [tab] to a [space] in arctic.pal and tried it out - no difference_ crashed quickly.

Crash conditions and how to reproduce is:
· normal spot mode
· open color selection
· move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.

I then moved Arctic to the end of the list..... the same problem now happens with "Lava" and "Black hot". Then I moved also "Lava" towards the end - no problem anymore (if not selecting lava or arctic). Maybe the .pal files are in format the E4 does not like.
Just tested it: I jumped 40x back and forth between the first 11 color settings - no problem. Then moved to the end and jumped 2-3x between Lava and Arctic: crash

Attached is the changed file - just exchange and you are set.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 09:41:13 am
First I did change the [tab] to a [space] in arctic.pal and tried it out - no difference_ crashed quickly.

Crash conditions and how to reproduce is:
· normal spot mode
· open color selection
· move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.

I then moved Arctic to the end of the list..... the same problem now happens with "Lava" and "Black hot". Then I moved also "Lava" towards the end - no problem anymore (if not selecting lava or arctic). Maybe the .pal files are in format the E4 does not like.
Just tested it: I jumped 40x back and forth between the first 11 color settings - no problem. Then moved to the end and jumped 2-3x between Lava and Arctic: crash

Attached is the changed file - just exchange and you are set.

I've also noticed some messages like this - except the deltaspot.rsc files most of the added files were not required for the modes to operate... could be they are negative overhead:
Code: [Select]
\>Reading \FlashBFS\system\ui.d\presets.d\preset_deltaSpot.rsc [CRC OK]
Building nodes in .ui.scratchPad.deltaSpot
Time 0.028000 s
Reading \FlashBFS\system\ui.d\presets.d\preset_centerHotColdSpot.rsc [CRC OK]
Building nodes in .ui.scratchPad.centerHotColdSpot
Time 0.314000 s
Reading \FlashBFS\system\ui.d\presets.d\preset_coldSpot.rsc [CRC OK]
Building nodes in .ui.scratchPad.coldSpot
Time 0.018000 s
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: whatchitfoool on November 15, 2013, 09:47:31 am
I was under the impression that 24 FPS was the threshold. I guess some human eyes are more sensitive than others.
The human eye responds differently to color (via the cones) and light levels[Black and while] (via the rods). 
Not getting into it too much:
The rods have a limit higher "FPS" than the cones. Your eye focuses in the center, with the outlining visual field blurred.  This is in contrast to say a picture, which generally can have the entire thing in focus at once. light coming in around the outermost diameter of the eye (Peripheral vision) will tend to only hit rods, because most of the cones are in the most center. Cones are also responsible for defining shape / sharpness. This is why you can see certain fluorescent lights flicker when its just coming in the corner of your eye, but when you look right at the light it goes solid.
Around 24 FPS is the minimum to construct the illusion of fluid motion.  even if we say your eye "sees" at precisely 24 fps, displaying some to an eye at 24fps would probably still look off.  The two systems most likely wouldn't be synced, and the eye could sample at a time when the display isnt 100% ready because its transitioning.
Phisicaly, a human eye samples at around 30-35 hertz. But this when observing more or less static things( so in essence a display of infinitesimally large FPS / infinitesimally small transitions).
When you start making the fps smaller, the transition get larger -  with more likelihood of them being sampled by the eye. If you are only caring about sharp things in color, the eye at 24hz (42ms) is an alright compromised minimum.  so you want a display of at least an order of magnitude larger = 240FPS (4.2ms)minimum.That's why monitors usually have a minium "response time" of 5ms.  Doubling 240 takes it down another 1/10th of as much chance to see the transition, so at 480 (2ms) are you  unlikely to notice the FPS not being infinitesimally large. That is why high end monitors clam at least a 2ms response time.

My eyes are one of the 5 tools I'm literally using all the time.  It pays to know how your tools work, so you know what you can and cannot do / measure with them. Everyone that has the time should spend some reading on how their eyes (and other senses tools) perform and operation.

But don't take my word* for it, Go read about it at the library! 8)

* My apologies if anything isnt 100% accurate above.  Its very late, I should be in bed, and I didnt brush up before typing this
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 15, 2013, 09:49:13 am
First I did change the [tab] to a [space] in arctic.pal and tried it out - no difference_ crashed quickly.

Crash conditions and how to reproduce is:
· normal spot mode
· open color selection
· move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.

I then moved Arctic to the end of the list..... the same problem now happens with "Lava" and "Black hot". Then I moved also "Lava" towards the end - no problem anymore (if not selecting lava or arctic). Maybe the .pal files are in format the E4 does not like.
Just tested it: I jumped 40x back and forth between the first 11 color settings - no problem. Then moved to the end and jumped 2-3x between Lava and Arctic: crash

Attached is the changed file - just exchange and you are set.

I have not tried this hack out, nor looked particularly closely at any of the files, but one think I do notice is that the two palettes which crash for you have no line-feed/carriage-return at the end of the file, but the high-contrast rainbow palette (which presumably works for you?) does (indeed, it has two, as there is a blank line).

There could be a bug with end-of-file parsing, causing an intermittent crash, though I'm kind of sceptical.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 15, 2013, 09:49:36 am
What are you in the infrared refresh 25 or 50 Hz ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 09:54:45 am
First I did change the [tab] to a [space] in arctic.pal and tried it out - no difference_ crashed quickly.

Crash conditions and how to reproduce is:
· normal spot mode
· open color selection
· move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.

I then moved Arctic to the end of the list..... the same problem now happens with "Lava" and "Black hot". Then I moved also "Lava" towards the end - no problem anymore (if not selecting lava or arctic). Maybe the .pal files are in format the E4 does not like.
Just tested it: I jumped 40x back and forth between the first 11 color settings - no problem. Then moved to the end and jumped 2-3x between Lava and Arctic: crash

Attached is the changed file - just exchange and you are set.

I have not tried this hack out, nor looked particularly closely at any of the files, but one think I do notice is that the two palettes which crash for you have no line-feed/carriage-return at the end of the file, but the high-contrast rainbow palette (which presumably works for you?) does (indeed, it has two, as there is a blank line).

There could be a bug with end-of-file parsing, causing an intermittent crash, though I'm kind of sceptical.
I spotted this too and already changed the .pal files (attached), so they are using the same format as the default .pal files (iron/rainbow/rainhc) (no spaces between the commas and a CR at the end). But it seems to make no difference.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Sin on November 15, 2013, 09:58:28 am
I spotted this too and already changed the .pal files (attached), so they are using the same format as the default .pal files (iron/rainbow/rainhc) (no spaces between the commas and a CR at the end). But it seems to make no difference.

They are still different - no blank line, just a single CR/LF (a long shot, but perhaps worth trying!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 10:05:48 am
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.
The  problem is that it doesn't take long for some pixels to drift - I think it does slow the cal interval down as it warms up and temp stabilises, but if you set the minimum manual temp range and rainbow high-contrast pallette, you can clearly see drifty pixels starting to emerge towards the  end of the cal period
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 10:08:10 am
Hi Mike,
may I ask, how much you paid for the Audi automotive cam?
Thanks, Thomas
I think 550 Euro. There are loads of them on Ebay.de - just look for
(bmw,audi) night vision
and sort by price descending
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 10:09:30 am
...the high-contrast rainbow palette (which presumably works for you?)
Hint: lowercase the "HC" in your filename
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 10:17:10 am
First I did change the [tab] to a [space] in arctic.pal and tried it out - no difference_ crashed quickly.

Crash conditions and how to reproduce is:
· normal spot mode
· open color selection
· move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.

I then moved Arctic to the end of the list..... the same problem now happens with "Lava" and "Black hot". Then I moved also "Lava" towards the end - no problem anymore (if not selecting lava or arctic). Maybe the .pal files are in format the E4 does not like.
Just tested it: I jumped 40x back and forth between the first 11 color settings - no problem. Then moved to the end and jumped 2-3x between Lava and Arctic: crash

Attached is the changed file - just exchange and you are set.

I have not tried this hack out, nor looked particularly closely at any of the files, but one think I do notice is that the two palettes which crash for you have no line-feed/carriage-return at the end of the file, but the high-contrast rainbow palette (which presumably works for you?) does (indeed, it has two, as there is a blank line).

There could be a bug with end-of-file parsing, causing an intermittent crash, though I'm kind of sceptical.
I spotted this too and already changed the .pal files (attached), so they are using the same format as the default .pal files (iron/rainbow/rainhc) (no spaces between the commas and a CR at the end). But it seems to make no difference.
It would be easy to tell if it was something to do with  the file content just by copying a "known working" pallette with the name of a suspect one
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 10:42:41 am
It would be easy to tell if it was something to do with  the file content just by copying a "known working" pallette with the name of a suspect one
then arctic and lava are working. So the problem it is definately the .pal file

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tnt on November 15, 2013, 10:56:00 am
All the default palettes have exactly 224 colors in them.
artic and lava have 240 for one and 120 for the other ... Maybe just putting exactly 224 colors would fix things. (just generate a new net of color by interpolation)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 11:27:36 am
All the default palettes have exactly 224 colors in them.
artic and lava have 240 for one and 120 for the other ... Maybe just putting exactly 224 colors would fix things. (just generate a new net of color by interpolation)
Thats it.
Please find attached the new .pal files: working without a flaw. You may skip the change of "toolbar-config_Z3" now (see some postings above).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 11:37:53 am
Yes - seems to have fixed it- I can't get it to crash now.
Has anyone seen any other issues with the menu hack apart from crashing in palette select/arctic/lava mode? Can we call it stable now?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 11:39:53 am
All the default palettes have exactly 224 colors in them.
artic and lava have 240 for one and 120 for the other ... Maybe just putting exactly 224 colors would fix things. (just generate a new net of color by interpolation)
Thats it.
Please find attached the new .pal files: working without a flaw. You may skip the change of "toolbar-config_Z3" now (see some postings above).

Great finding - *confirmed*!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 11:44:34 am
All the default palettes have exactly 224 colors in them.
artic and lava have 240 for one and 120 for the other ... Maybe just putting exactly 224 colors would fix things. (just generate a new net of color by interpolation)
Thats it.
Please find attached the new .pal files: working without a flaw. You may skip the change of "toolbar-config_Z3" now (see some postings above).

Great finding - *confirmed*!
Assuming the original files came from a Flir distribution, should we send them a bug report? ;D

.and how about a challenge to make the most interesting/psycadelic/horrible new palette?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 11:46:37 am
Yes - seems to have fixed it- I can't get it to crash now.
Has anyone seen any other issues with the menu hack apart from crashing in palette select/arctic/lava mode? Can we call it stable now?

condensation mode still gets lost while zapping some of the measurement modes... I'd also really like to check if there's a menu to be added so one can set the humidity level for that mode - otherwise it's pretty pointless
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 11:50:09 am
Assuming the original files came from a Flir distribution, should we send them a bug report? ;D
.and how about a challenge to make the most interesting/psycadelic/horrible new palette?
my ideas:
- hybrid palette with blue for "below scale", red for "above scale" and gray or lava between
- zebra palette instead of rainbow-hc - just two alternating colors per isothermal step ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 11:51:29 am
Yes - seems to have fixed it- I can't get it to crash now.
Has anyone seen any other issues with the menu hack apart from crashing in palette select/arctic/lava mode? Can we call it stable now?

condensation mode still gets lost while zapping some of the measurement modes... I'd also really like to check if there's a menu to be added so one can set the humidity level for that mode - otherwise it's pretty pointless
Seems to me the condensation and humidity are just special cases of above/below modes so are they doing anything other than just clogging up the already long menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 15, 2013, 11:52:39 am
Quote
move cursor a few times between "Arctic" and its neighbor "Lava": crash. Also happens with "Arctic" and "Black hot". You might need jump 20x back an forth between the color modes, sometimes just 1x or 2x.
Based on the intermittent nature of the issue I'm guessing it's something to do with uninitialised memory - notice that Arctic is the one with far fewer colours than the others.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 15, 2013, 11:52:50 am
- zebra palette instead of rainbow-hc - just two alternating colors per isothermal step ;)
Otherwise known as "drifty pixel spotter"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 11:55:43 am
I've updated the menu package  - now at Beta 2
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 15, 2013, 12:17:16 pm
Matter of fact: a "heat detection" palette already exists:

replacing palettes on the fly works nicely - just switch the palette once when ftp complete.

I've tested the attached file to work with Ex series.
Telnet: \FlashBFS\System>palette heat_det.pal
... or just rename it to the name of your least loved palette and overwrite it ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kjk24 on November 15, 2013, 04:03:00 pm
Hello,

i follow the thread a while now Respect !
tryed to install the E4 hack & beta2 Menu but i have some problems, the resolution is changed but i have no camera anymore.
no temperature left top (no icons LTop), hotspot is not changing, no mixed cam icon in the menu, Hotspot Menu right icon not useable (cant select it)
is there anything else what i have to do or just adding the .cfg file ? and copy the MENU staff.

please let me know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2013, 04:39:26 pm
Hello,

i follow the thread a while now Respect !
tryed to install the E4 hack & beta2 Menu but i have some problems, the resolution is changed but i have no camera anymore.
no temperature left top (no icons LTop), hotspot is not changing, no mixed cam icon in the menu, Hotspot Menu right icon not useable (cant select it)
is there anything else what i have to do or just adding the .cfg file ? and copy the MENU staff.

please let me know.
Mmmh - normally thats all: .cfg and copying the menu stuff. I hope you made a backup before, try copying back everything before you continue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cosmos on November 15, 2013, 04:57:43 pm
Hello,

i follow the thread a while now Respect !
tryed to install the E4 hack & beta2 Menu but i have some problems, the resolution is changed but i have no camera anymore.
no temperature left top (no icons LTop), hotspot is not changing, no mixed cam icon in the menu, Hotspot Menu right icon not useable (cant select it)
is there anything else what i have to do or just adding the .cfg file ? and copy the MENU staff.

please let me know.

That sounds a bit like the one hang I have seen, several functions stopped working but I could still move around,  IR picture was still there and I could turn it off with the button.
I have only applied the E8.cfg and have 1.19.8.
In the process I removed the battery, so I am not sure if that was part of clearing it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gotvolts on November 15, 2013, 05:22:19 pm
Just a follow-up.
My firmware for my e4 was 1.17.1.

Took me about 5 minutes to follow the hack instructions and perform the upgrade.
Works like a charm!

Thanks to Mike for everything and the great write-up!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy_silicon on November 15, 2013, 06:00:49 pm
Just received E4
Version 1.19.8
Calibrated 13th November

It's great fun - already seen a fox in the garden !
And I now know where the central heating pipes go - and that an RCD I have gets warm!

But the reason for buying - confirming the cold corners in the kitchen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on November 16, 2013, 12:02:57 am
Just received E4
Version 1.19.8
Calibrated 13th November

Does the recent cal date here mean we can probably call BS on a hack-killing FW update? (at least for the immediate future)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 16, 2013, 12:22:29 am
Just received E4
Version 1.19.8
Calibrated 13th November

Does the recent cal date here mean we can probably call BS on a hack-killing FW update? (at least for the immediate future)
We don't know. All we know is nobody has yet seen it on a new unit, and that the distribution chain is very short. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 16, 2013, 12:24:24 am
I'm a happy owner. My primary reason for purchasing a TIC was for fault finding and evaluating my LED drivers' thermal paths.

Received 250 buck/boost LED drivers from my assembly house today (nominal 70W output capability from 10 - 30V DC input) and was testing them prior to shipping to one of my customers. Found one that was restarting due to over current limit trip.

Did a quick measure with a meter and found the output impedance was MUCH lower than it should be (60 ohms versus megaohms). Figured it was likely a faulty output cap (there's 4 in parallel).

So, took a thermal image with the board unpowered and then another after a couple of seconds. Very obvious which cap was at fault, removed it and replaced with a new one and fault gone. The removed cap shows about 60 ohms on the meter...

I did adjust the lens with my lens tool about 2/3 a turn CCW.

Attached pics: off.gif the driver quiescent and no power, on.gif after a couple of seconds powered up. The jpg shows the 'visible' view of the board for orientation purposes.

Great tool - especially as a M8 (Mike E8 :) or 'mate' )

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 16, 2013, 07:26:45 am
if you bought which is part of the can with his grace to Post whence comes this camera ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schalli on November 16, 2013, 08:18:19 am
Hello
Is someone here from germany who has made the hack with de e4?
I speak only german and it is very hard to made the hack without german "support".
Daniel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 16, 2013, 09:13:40 am
Hello
Is someone here from germany who has made the hack with de e4?
I speak only german and it is very hard to made the hack without german "support".
Daniel

Ausnahmsweise eine deutsche Kurzanleitung:
Mike-Hack - e4hack3a.zip (Kameraauflösung, Netzwerkmodi):
- Zip laden
- E8 Vorlage-Datei editieren, dort den text XXXXXX am ende durch die Seriennummer der eigenen Kamera ersetzen
- CRC01.exe auf die bearbeitete Vorlagedatei anwenden
- Checksumme ans Ende der Datei eintragen
-> Keine Änderungen an Zeilenumbrüchen vornehmen!

Folgendes in eine ZIP-Datei zusammenpacken:
Code: [Select]
.\Flashfs\system\appcore.d\config.d\E8.cfg   (dort hinverschieben)
.\camera.cmd
Die Dateiendung von .zip in .fif umbenennen (ggf. Explorer Ansichtsoptionen umstellen dass Dateiendungen angezeigt werden)

Flir Tools installieren, die Kamera anschließen und "C:\Program Files (x86)\FLIR Systems\FLIR Tools\bin\FLIRInstallNet.exe" im Explorer suchen + starten
dort dann die erzeugte Zip(.fif) in die Kamera laden

Wenn alles geklappt hat, Kamera-Akku raus und wieder rein...
Auflösung sollte nun passen.


Menü-Hack
Die Menü-Pachtes sind Beta und vermutlich für dich nicht geeignet - die Installation geht aber so:
- RNDIS Treiber für Flir installieren (device_drivers)
- Kamera entweder mit Netinstall oder übers geheime Menü (10 Sek. "rechts" auf der Kamera-Infoseite in den Einstellungen drücken) in den USB-RNDIS Modus versetzen
- Im eingeschalteten Zustand anstecken - Windows sollte ein neues Netzwerkgerät erkannt haben - die Kamera-IP entspricht dessen default Gateway
- Filezilla nehmen und sich an diese IP verbinden - root und 3lvig
- Addmenu-Beta2 zip nehmen, Inhalt des darin enthaltenen FlashBFS Verzeichnisses über das bestehende in der Kamera "bügeln" (vorher: Sicherung machen)
- Batterie-raus/rein
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 16, 2013, 09:58:39 am
Sorry for newbieitus. After putting in ser#, I am lost. 1.18.7 software here, any help greatly appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 16, 2013, 10:45:21 pm
I was told these is no chain, they is the stock out there at the dealers and then stock coming from the manufacturing, currently there is a 4 week wait on that.

We found another 1 in stock in the US an brought it, just in case the new stock is fixed for now, and at £650 its crazy cheap.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 16, 2013, 11:26:08 pm
Received my E4 today, was shipped on the 13th directly from Flir Estonia to the dealer according to the papers stuck on on the box.
Firmware 1.19.8, patch worked fine :)

Honestly with the default resolution, I was not really impressed at all. With the full E8 resolution, it's a most fascinating toy & tool.
Thanks to Mike and all the other guys involved. This is just so great...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 17, 2013, 03:55:30 am
Sorry for newbieitus. After putting in ser#, I am lost. 1.18.7 software here, any help greatly appreciated.
... and now babysitting



Remember the give a man a fish or teach a man to fish story? :-//
I am sure after I seen how to do this, I would realize how ez it is to implement. Either way, kudos to the mastermind Mike, your knowledge is amazing to me. I have been on the fence about purchasing a tic for years, the price and hack sent me over the fence.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 05:37:36 am
Sorry for newbieitus. After putting in ser#, I am lost. 1.18.7 software here, any help greatly appreciated.

All steps are documented in the .txt/readme files and in this forum.
You don't need to read all pages (but it could help) - check out the main pointers placed in the first posting.

Explaining how to hold a mouse, how to click, how to turn on power to the computer, how to log on, how to start explorer, how to edit a text-file etc. would be an endless process - my experience is: it just takes a bit longer for newbies to figure out how to do something... so RTFM - if necessary: again and again :)

If unsure about RTFM, then google that acronym  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 17, 2013, 05:49:39 am
Well thank you, I did rtfm and have read this post from ftb and then some more. I will head your advice and read the pointers in the first posting. I will figure this one out as I have others before. Thank you for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 06:00:24 am
Question: Is it possible to use left/right/up/down keys in main screen to lock/unlock and adjust temperature scale (without going into menu)?

Once you're in manual temperature scale mode the left/right cursors will cycle submodes while up/down will change values.
Submodes are: move scale (move min and max together), move upper limit, move lower limit - noticeable by white or gray scale labels.

@XML - thank you very much! - such findings are greatly appreciated :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 06:05:56 am
Well thank you, I did rtfm and have read this post from ftb and then some more. I will head your advice and read the pointers in the first posting. I will figure this one out as I have others before. Thank you for your help.
Well, most other folks had little trouble following the instructions - my guess is you're stuck at opening a command line window and navigating to the correct directory where your hack files reside - but it's just a guess as your description does not detail your situation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 17, 2013, 06:28:18 am
That is correct, I have learned the command prompt in windows 7 now. I have dragged and drop, then enter in the dos box. Still to no avail tho. Excuse my ignorance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 06:35:45 am
That is correct, I have learned the command prompt in windows 7 now. I have dragged and drop, then enter in the dos box. Still to no avail tho. Excuse my ignorance.
try this:
open explorer, navigate to unzipped hack3a folder (containing crc01.exe) - hold down shift key while right-clicking on the folder - there should be a "command prompt" entry - use that one (else: type "cd /?" in the command window top learn something) ...
next you can type crc01 e8.cfg inside the command prompt and continue with the instructions
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 17, 2013, 07:22:42 am
I am probably doing something wrong, when holding shift key down in unzipped e4hack3b, cant find 3a, on CRC01, a small dos window temporarily opens up, then immediately disappears. Now trying command prompt and path to file. I am trying...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 17, 2013, 08:51:24 am
I am probably doing something wrong, when holding shift key down in unzipped e4hack3b, cant find 3a, on CRC01, a small dos window temporarily opens up, then immediately disappears. Now trying command prompt and path to file. I am trying...

I don't mean to be disrespectful but if you are not sure how to unzip a file or use the command prompt, it would be much better to call a relative who is good with computers, or perhaps pay someone locally to help out... it's really basic stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 17, 2013, 09:17:34 am
I am probably doing something wrong, when holding shift key down in unzipped e4hack3b, cant find 3a, on CRC01, a small dos window temporarily opens up, then immediately disappears. Now trying command prompt and path to file. I am trying...

The command prompt entry in explorer is an extension you most probably have not installed. It is not installed by default.

Just start with a command prompt.

Start->Run->"cmd.exe"
>cd %userprofile%\Downloads\e4hack3b (change directory to your extracted zip folder)
>notepad E8.cfg

At the end of the file, replace xxxxxxxx with the 8-digit serial number of your camera and save the file. Make sure there is exactly one CRLF at the end of the file.

Go back to the command line window.
>CRC01 E8.cfg

This will display a line in the form
# CRC01 xxxxxxxx
Add this line to the end of the E8.cfg

>notepad E8.cfg

...


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 17, 2013, 09:46:51 am
No disrespect taken Corporate666, I am just trying to learn. I know zip file and extractions, now with Sipo75 (cmd.exe) suggestion, I might figure something out. I understand how aggravating it is dealing with someone learning remedial stuff. I thank you all for your efforts!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 17, 2013, 10:45:43 am
@Taucher:
I`ve found 2 faults in "toolbar-config_Z3.xml" in your "ADDMENU-BETA2.zip". When I open this file in my IE7 an error shown at line 43 and 44.
It`s quite marginal, but who knows, better bug free! (attached corrected file)
You also deleted the lines 4 and 5, especially the line ".caps.config.ui.archive.export.enabled <- set true".
This looks like a comment anyway, I just wonder if we're supposed to enable this capability via telnet or put it in some cfg file...
I must have overlooked this topic somewhere.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 01:00:42 pm
You also deleted the lines 4 and 5, especially the line ".caps.config.ui.archive.export.enabled <- set true".
This looks like a comment anyway, I just wonder if we're supposed to enable this capability via telnet or put it in some cfg file...
I must have overlooked this topic somewhere.

I put in some pointers to the caps in case somebody wants to take further investigations and as a reference for myself - of cause the caps commands are comments and won't do anything in the config files. but you can use them over telnet and in .cfg files if you like.

the config file is performing evolutionary steps - for example that export function didn't work so I decided to strip it away again - same applies to zoom buttons, voice annotation etc.

plase also note that my time budget for hacking around in the menu stuff is a bit limited ... the menu hack is still
a bit away from stable and perfect.

... and lock/unlock without menu? I want to get an automatic prescale and then lock und fine tune. Ex. left to lock/unlock, right to cycle submodes, u/d to change
Or do you think it`s not possible?

You're free to try your luck hacking the ressources to remap the keys.
I was busy investigating how to cross compile .exe files that will run on the camera - with success (using windows mobile 6.0 SDK and VS 2005) ... but just "hello world" on gui+console.

If we could map a shellcall to one button (like back in main menu), then that would allow a completely custom submenu - without relying on the built-in stuff from ui-core.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 17, 2013, 02:42:34 pm
fw 1.19.8 successfully hacked. Thanks to Mike and everyone else who has worked on this!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 17, 2013, 03:09:51 pm
I saw in a previous post (Reply #1314) that Tequipment might get an "unhackable" batch of E4's from FLIR. Any info on this would be appreciated!
My order: Estimated Ship Date: 12/06/2013. I'm ordering from Norway.
Should I cancel my order? Maybe someone from Tequipment is reading this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 17, 2013, 03:16:27 pm
Quote
I saw in a previous post (Reply #1314) that Tequipment might get an "unhackable" batch of E4's from FLIR. Any info on this would be appreciated!

That was my post. I have no information to specifically say that tequipment will be receiving a "bad" batch of E4's; what I was going for there is that there has been a report made that FLIR has already designed firmware for this camera that prevents the hack, and since the shipment from tequipment is in the distant future, it seems likely that by this time, the cameras shipped by FLIR will all have this crapware pre-installed.

It is possible that if you order from them you will still get a hackable E4, but to play it safe, I would highly recommend you look elsewhere first for "in stock" E4's. It will be sold out in most, if not all, authorized distributors, but perhaps some unauthorized sellers still have them. Just make sure the place is reputable.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 17, 2013, 03:20:22 pm
Sometimes it seems to me that this is a deliberate hack FLIR :)
Sales go like never before.
A company and so they buy Exx or Ex
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 17, 2013, 03:30:16 pm
As I posted yesterday: according to the papers on the box, my E4 was shipped on the 13th directly from Flir Estonia to my dealer (who then just put it into another box and sent it to me). So obviously Flir Estonia currently delivers fresh E4s with firmware 1.19.8 to the dealers.

Honestly, it would be rather uncommon for a commercial product to change the SW in such a short time. Usually it takes weeks from an internal SW release until it can be used in production (validation processes and so on).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 17, 2013, 03:34:45 pm
Thanks Olsenn! I see that Amazon has a few in stock. Local VAT and customs makes this a fairly expensive gamble so you're right -better safe than sorry.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on November 17, 2013, 04:03:36 pm
Another successful hack, FW 1.19.8.

Bit different from Mike's instructions though, FLIRInstallNet would not detect the camera. I had to put the camera in RNDIS mode after installing RNDIS drivers on PC. Then FLIRInstallNet detected the camera with its default IP address and appeared to apply the hack via Telnet. Curiously, Flir Tools would detect the camera, but FLIRInstallNet would not.

This might have something to do with the fact that while I was downloading 500-odd MB of Flir tools, I was buggering about with the camera in RNDIS mode and FTP, and playing with all the different combinations of modes. Couple of PC hard resets and a few camera battery removals later, worked like a dream.

Thanks Mike! This camera, with its MSX, pisses all over my Ti10 for distances >1m.
Title: EzCRC01
Post by: Taucher on November 17, 2013, 04:38:44 pm
EzCRC01
I took the liberty and made a simplified version of CRC01 - called EzCRC01
Just extract the attached zip archive, doubleclick EzCRC01.exe and follow the on screen instructions
edit3: To complete the process your e8.conf (lowercase "e" important) needs to be placed on the camera (via .FIF or RNDIS+FTP) - then cold boot your cam (battery removal)

It's intended as supplement to Mikes files and as a codebase for an in-place-crc01-updater.

EDIT2: Replaced with static version (64 bit)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 17, 2013, 04:52:46 pm
I've successfully applied Mikes hack and now have hi-rez and the e8 menus but I only see a choice of 'auto' or 'locked' temp range.
I would like to be able to manually set the temp range on the fly? Do I need to edit the config file from Mikes hack or something more complicated?

thanks guys.
Title: Re: EzCRC01
Post by: lewis on November 17, 2013, 05:13:01 pm
EzCRC01
I took the liberty and made a simplified version of CRC01 - called EzCRC01
Just extract the attached zip archive, doubleclick EzCRC01.exe and follow the on screen instructions

It's intended as supplement to Mikes files.

PS: the source is somehow a mess - first I wanted to write a simple perlscript but realized that the CRC funtion is quite a f****up and uses the nonstandard init-vectors #1 (found nowhere else as far as google can be trusted)

Doesn't work for me: "The program can't start because MSVCP110.dll is missing from your computer...". Win7 Home Premium x64.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 05:13:46 pm
I've successfully applied Mikes hack and now have hi-rez and the e8 menus but I only see a choice of 'auto' or 'locked' temp range.
I would like to be able to manually set the temp range on the fly? Do I need to edit the config file from Mikes hack or something more complicated?
probably your menu hack went somewhere wrong - directory miscopied or no battery in/out?
Title: Re: EzCRC01
Post by: Taucher on November 17, 2013, 05:17:31 pm
"The program can't start because MSVCP110.dll is missing from your computer...".
F**** dependencies...  :rant: ... will try another setup ....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 17, 2013, 05:24:13 pm
I've successfully applied Mikes hack and now have hi-rez and the e8 menus but I only see a choice of 'auto' or 'locked' temp range.
I would like to be able to manually set the temp range on the fly? Do I need to edit the config file from Mikes hack or something more complicated?
probably your menu hack went somewhere wrong - directory miscopied or no battery in/out?

I'm confused! I've only done one hack, Mike's 'add the serial number and CRC' hack and I'm seeing additional menu options such as PIP and additional colour pallets. Do I need to do another menu hack to get the manual temp option?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 05:27:47 pm
Do I need to do another menu hack to get the manual temp option?
yes - the menu hack... see my footer for pointers where to fetch it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 17, 2013, 05:41:50 pm
Do I need to do another menu hack to get the manual temp option?
yes - the menu hack... see my footer for pointers where to fetch it.

Thanks. I've downloaded it and extracted it but I'm unsure how to install it so I best stay away as I don't want to kill my camera!
I guess there is no simple way I can add the manual temp range function? I mean simple for a 55 year old simpleton like me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 17, 2013, 05:45:44 pm
I guess there is no simple way I can add the manual temp range function? I mean simple for a 55 year old simpleton like me.
Then read up on the thread - no reports of killed/bricked cameras yet - and take a look into the README file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 17, 2013, 05:51:55 pm
I guess there is no simple way I can add the manual temp range function? I mean simple for a 55 year old simpleton like me.
Then read up on the thread - no reports of killed/bricked cameras yet - and take a look into the README file.

I have done and thank you for your efforts but I don't understand how to get into 'FTP-accessible mode' or 'overwrite the corresponding file structure'

let alone 'Some features can require .caps modifications (not documented here)'

A man has to know his limitations!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 17, 2013, 06:18:54 pm
I've played a bit with a 20mm ZnSe lens that arrived yesterday via Ebay. Seems to work very nicely. I've just 3d printed out a lens holder for it, picture below.

I've made a tweak to the sketchup file and am re-printing it.

When refined I'll zip up the sketchup/stl/makerbot files and post them up to this thread.

cheers,
george.
Title: Re: EzCRC01
Post by: mikeselectricstuff on November 17, 2013, 07:11:15 pm
EzCRC01
I took the liberty and made a simplified version of CRC01 - called EzCRC01
Just extract the attached zip archive, doubleclick EzCRC01.exe and follow the on screen instructions

It's intended as supplement to Mikes files.

PS: the source is somehow a mess - first I wanted to write a simple perlscript but realized that the CRC funtion is quite a f****up and uses the nonstandard init-vectors #1 (found nowhere else as far as google can be trusted)

EDIT: MSVCP110.dll required - stand by if you don't have the runtime libs
Downloadable here: http://www.microsoft.com/en-us/download/details.aspx?id=30679 (http://www.microsoft.com/en-us/download/details.aspx?id=30679)
I compiled the original CRC01 using Visual C++ Express 2008 - there was a compile option to make it statically link everything it needed - don't recall the detail but found it by googling the slightly obscure error message it gave when it couldn't find teh DLL it wanted. May have been Config properties > C/C++ > code-generation > Multi-threaded
 
Title: Re: EzCRC01
Post by: Taucher on November 17, 2013, 07:57:28 pm
I compiled the original CRC01 using Visual C++ Express 2008 - there was a compile option to make it statically link everything it needed - don't recall the detail but found it by googling the slightly obscure error message it gave when it couldn't find teh DLL it wanted. May have been Config properties > C/C++ > code-generation > Multi-threaded
thanks - have been looking at linker level instead of compiler level ...
vs->project properties->c/c++->code generation->runtime library->multi-threaded (/MT) ... (without "DLL") solved it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 17, 2013, 08:59:35 pm
Got the ZnSe 20mm lens holder to fit perfectly. Nice snug fit into the inside edge of the E4 rubber housing and the lens sits above the shutter (no risk of damage etc). Cone is a large enough angle to not obscure the image.

The ZnSe lens is also a snug fit, but it's easy enough to melt back the plastic a little to hold the lens down in the 'pocket' that it sits in.

I've attached some pics and also a zip with the sketchup file, STL file and a makerbot PLA build file.

Also a picture of the setup in place and the E4 imaging a 1" x 0.5" board and showing two current limit 0603 sized resistors dissipating heat.

Next job is a holder setup to keep the camera positioned over a PCB that needs to be imaged versus hand holding it.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 17, 2013, 09:15:53 pm
I've attached some pics and also a zip with the sketchup file, STL file and a makerbot PLA build file.

Nice job!  :-+ Thanks for sharing.

Incidentally, what's the focal length?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 17, 2013, 09:19:53 pm
3" focal length ZnSe lens from Ebay.

For grins I just rotated the E4 lens a full turn anticlockwise AND put the ZnSe lens in front. Talk about closeup.

Here's a pic I just took of the same board and fired up the Red/Green (bicolour LEDs) (so 4 total current limit resistors in play).

All I can say is wow - this is REAL useful for my applications, though I probably don't need this much zoom in :)

EDIT: Add 'visible' picture of board for reference to thermal image.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Doug on November 17, 2013, 09:28:30 pm
Hi all -
Just found this forum & thread after buying, trying, and being thoroughly disappointed by a Fluke VT02 Visual IR Thermometer.  My goal was to evaluate the thermal uniformity of a small (5/8" diameter) polyimide heater circuit that I designed for use on a chemical sensor.  Mistakenly thought that the IR image resolution of the VT02 was 104x104 pixels (that is the optical resolution) and later found out that the actual IR image resolution is 15x15 pixels.  Fluke isn't exactly up front in providing information about the thermal image resolution and I now know why.  They are rightfully embarrassed by it.  Only unsuspecting rubes like me will buy it.  I'll be shipping the VT02 back on Monday for credit and hopefully exchanging for an E4 + $300.  Really hope an E4 is in stock at the same shop.

Thanks to Dave and other contributors for all of the excellent information on the Flir E4.  Really - very impressive to watch the review, tear-down and other related videos and technical posts.  Bravo!

Assuming my E4 arrives with the older, hackable firmware version, I'll be applying Dave's patch and unscrewing the lens to about 50 mm focal length and having a look at my little heater circuit.   Will post results when I have them.

Doug
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 17, 2013, 09:31:40 pm
3" focal length ZnSe lens from Ebay.

For grins I just rotated the E4 lens a full turn anticlockwise AND put the ZnSe lens in front. Talk about closeup.

Here's a pic I just took of the same board and fired up the Red/Green (bicolour LEDs) (so 4 total current limit resistors in play).

All I can say is wow - this is REAL useful for my applications, though I probably don't need this much zoom in :)

cheers,
george.

Do you prefer the FL of 3" (76.2) vs the 2" (50.8mm)?  Looking to purchase a lens from ebay and not sure which one I should get.
Title: Re: EzCRC01
Post by: tnt on November 17, 2013, 09:48:07 pm
PS: the source is somehow a mess - first I wanted to write a simple perlscript but realized that the CRC funtion is quite a f****up and uses the nonstandard init-vectors #1 (found nowhere else as far as google can be trusted)

I'm the one that reverse engineered the CRC01 function and wrote CRC01.

They took at classic RIPE MD160 hash and they modified a few things :
 - Non standard init vector. There is 3 possible modes with mode 0 being the classic RIPE MD160. Then there is mode 1 and 2. CRC00 is mode 0, CRC01 is mode 1 and CRC02 is mode 2 ...
 - Non standard padding for the last block
Title: Re: EzCRC01
Post by: Taucher on November 17, 2013, 10:07:32 pm
PS: the source is somehow a mess - first I wanted to write a simple perlscript but realized that the CRC funtion is quite a f****up and uses the nonstandard init-vectors #1 (found nowhere else as far as google can be trusted)

I'm the one that reverse engineered the CRC01 function and wrote CRC01.

They took at classic RIPE MD160 hash and they modified a few things :
 - Non standard init vector. There is 3 possible modes with mode 0 being the classic RIPE MD160. Then there is mode 1 and 2. CRC00 is mode 0, CRC01 is mode 1 and CRC02 is mode 2 ...
 - Non standard padding for the last block

Just for clarification: I ment my changes to the main.cpp are a mess. @MD160 - yes, got that detail and decided not to port the special algo to perl :) ... the init vectors for mode 00 are found online in many sha1 and md5 examples - those for modes 01 and 02 nowhere - I guessed they are pretty unique to Flir. I wonder if one could use crc00 instead of crc01 - would that fail (mode01 mandatory) or would it just take the other crc algo .... ;)

btw - did I ever mention that handling char arrays and strings in C(++) feels like having to use flintstones to make a fire... contrasted by a piezo-started-gas-BBQ-grill (Perl char/string handling *G*)

EDIT: posting #1500 ... yay :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 17, 2013, 10:09:36 pm

Do you prefer the FL of 3" (76.2) vs the 2" (50.8mm)?  Looking to purchase a lens from ebay and not sure which one I should get.

To be honest I wasn't sure what I wasn't going to like, so went with the 3" (nominal). In retrospect 2" would have been a better choice for what I need it to do. Most of my LED driver boards are less than 2" in size.

Of course since I can easily unscrew the builtin lens with my handy dandy 3d printed tool I have many options at this point :) The last picture I took with the combined 1 CCW rotated lens + 3" ZnSe gives real close up detail (I'm maybe 1" or so away from the PCB I was measuring... The PCB is 1" wide and it can't fit in the field of view of the 320 x 240 sensor :)

I'll need to use the the E4 a lot more to decide what is the best option in terms of focal distance for my use. Likely I'll use a combo of the 3" focal length ZnSe and adjustment of the built in lens.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 17, 2013, 11:19:24 pm
I love that lens holder you made there George. Once you get the fit perfect, please update the 3d source files for us. Also, how hard would it be to make a zoom lens for it by moving the lens forward or backwards? Without unscrewing the lens that the E4 comes with
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 17, 2013, 11:33:07 pm
I love that lens holder you made there George. Once you get the fit perfect, please update the 3d source files for us. Also, how hard would it be to make a zoom lens for it by moving the lens forward or backwards? Without unscrewing the lens that the E4 comes with

Thanks. Post 1494 in this thread has the zip file with all the needed files to make your own. I'm happy with the fit, been playing with it this afternoon and there's nothing I'd change at this time.

Yeah, zoom would be a bit more challenging and my lecturers would say long ago "an exercise left for the reader" :)

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 17, 2013, 11:37:43 pm

Do you prefer the FL of 3" (76.2) vs the 2" (50.8mm)?  Looking to purchase a lens from ebay and not sure which one I should get.

To be honest I wasn't sure what I wasn't going to like, so went with the 3" (nominal). In retrospect 2" would have been a better choice for what I need it to do. Most of my LED driver boards are less than 2" in size.

Of course since I can easily unscrew the builtin lens with my handy dandy 3d printed tool I have many options at this point :) The last picture I took with the combined 1 CCW rotated lens + 3" ZnSe gives real close up detail (I'm maybe 1" or so away from the PCB I was measuring... The PCB is 1" wide and it can't fit in the field of view of the 320 x 240 sensor :)

I'll need to use the the E4 a lot more to decide what is the best option in terms of focal distance for my use. Likely I'll use a combo of the 3" focal length ZnSe and adjustment of the built in lens.

cheers,
george.

I split the difference and ordered a FL: 2.5" -- I'll print a holder and let you know how it works.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 17, 2013, 11:39:33 pm
Do you prefer the FL of 3" (76.2) vs the 2" (50.8mm)?  Looking to purchase a lens from ebay and not sure which one I should get.

Obvious three step plan:
1 - buy both focal lengths
2 - do a few comparison tests
3 - post your findings :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 17, 2013, 11:47:33 pm
Here's a pic I just took of the same board and fired up the Red/Green (bicolour LEDs) (so 4 total current limit resistors in play).

Those hotspots are the 0603's you mentioned earlier? If so, the level of detail is damn nice! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on November 18, 2013, 12:17:19 am
Thanks to those whom spoon fed us that are in the cheese line, appreciate your work! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 18, 2013, 12:54:13 am
Here's a pic I just took of the same board and fired up the Red/Green (bicolour LEDs) (so 4 total current limit resistors in play).

Those hotspots are the 0603's you mentioned earlier? If so, the level of detail is damn nice! :)

Yep, 0603 sized resistors - VERY impressive detail!

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 18, 2013, 01:09:46 am
Hi all -
Just found this forum & thread after buying, trying, and being thoroughly disappointed by a Fluke VT02 Visual IR Thermometer.  My goal was to evaluate the thermal uniformity of a small (5/8" diameter) polyimide heater circuit that I designed for use on a chemical sensor.  Mistakenly thought that the IR image resolution of the VT02 was 104x104 pixels (that is the optical resolution) and later found out that the actual IR image resolution is 15x15 pixels.  Fluke isn't exactly up front in providing information about the thermal image resolution and I now know why.  They are rightfully embarrassed by it.  Only unsuspecting rubes like me will buy it.  I'll be shipping the VT02 back on Monday for credit and hopefully exchanging for an E4 + $300.  Really hope an E4 is in stock at the same shop.

Thanks to Dave and other contributors for all of the excellent information on the Flir E4.  Really - very impressive to watch the review, tear-down and other related videos and technical posts.  Bravo!

Assuming my E4 arrives with the older, hackable firmware version, I'll be applying Dave's patch and unscrewing the lens to about 50 mm focal length and having a look at my little heater circuit.   Will post results when I have them.

Doug

Actually it was Mike that did the hack (with a bit of help from others on the forum).  :)

I notice that our local Fluke dealer is offering 'deals' on the VT02, and they are trying to promote it as a real TI camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 18, 2013, 04:59:28 am
@georges80: I wonder if it's possible to combine the holder for the ZnSe lens with the hand adapter to turn the internal lens. I do not know much about 3D-Printing but this would be very handy.
What are the specs of the lens you bought on ebay? I have ordered a E4 cam too and would like to use it to analyze PCBs and power supplies.
With the data of the lens I can order the same one and ask someone with a 3D printer to fab the adapter for me.

Maybe you could clarify a bit how the optics work, I know the basics back from physics classes but I wonder how the focal length and lens diameter work together to have a focus on n cm/inch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 18, 2013, 05:11:09 am
I'm looking for the opposite.  Something that I can place in front and get some distance viewing, maybe a 2x or 3x.
I have access to a CNC machine shop just don't know what lens would work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 18, 2013, 05:31:22 am
@georges80: I wonder if it's possible to combine the holder for the ZnSe lens with the hand adapter to turn the internal lens. I do not know much about 3D-Printing but this would be very handy.
What are the specs of the lens you bought on ebay? I have ordered a E4 cam too and would like to use it to analyze PCBs and power supplies.
With the data of the lens I can order the same one and ask someone with a 3D printer to fab the adapter for me.

Maybe you could clarify a bit how the optics work, I know the basics back from physics classes but I wonder how the focal length and lens diameter work together to have a focus on n cm/inch.

Rotating the E4 lens isn't too hard, but requires pressure against the 10 lens slots with a tool. Maintaining that pressure is a little tricky AND having a ZnSe secondary optic. There's also the danger of trying to use the lens cover with the tool in place...

For PCB work, I think it's easier to just pick a couple of lens rotation locations (just paint a mark on the lens default position). Adding the ZnSe lens gives more options.

The lens I bought was 20mm diameter, 3" focal length, ZnSe.  I just picked a vendor (direct from China). The specific vendor/link I used:

http://www.ebay.com/itm/ZnSe-GaAs-Focal-Lens-10-6um-Co2-Laser-Engraver-Cutting-Machine-12-25mm-1-4-/321078811086?pt=LH_DefaultDomain_0&var=&hash=item76c47eb730 (http://www.ebay.com/itm/ZnSe-GaAs-Focal-Lens-10-6um-Co2-Laser-Engraver-Cutting-Machine-12-25mm-1-4-/321078811086?pt=LH_DefaultDomain_0&var=&hash=item76c47eb730)

You just want a lens that has a diameter larger than the viewing diameter of the E4 lens at the distance the secondary lens is placed. 20mm diameter is more than adequate. Focal length is just a matter of buying the one you want.

With the two lenses close together I think you can approximate the focal length as 1/f = 1/f1 + 1/f2 (where f1 is the focal length of say the ZnSe lens and f2 is the focal length of the  E4 lens) unless I'm completely mistaken (which is possible :) ).

I did some quick temp comparisons with/without the ZnSe lens and with the E4 at various focal lengths (rotating the lens) and didn't see any appreciable differences that would affect my use.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zoltan von Negrow on November 18, 2013, 07:32:10 am
Yes - seems to have fixed it- I can't get it to crash now.
Has anyone seen any other issues with the menu hack apart from crashing in palette select/arctic/lava mode? Can we call it stable now?

condensation mode still gets lost while zapping some of the measurement modes... I'd also really like to check if there's a menu to be added so one can set the humidity level for that mode - otherwise it's pretty pointless

Humidity is measured externaly, by another tool, that can be connected wirelessly to higher models from flir, like Ebx series.
It will be very hard to set humidity manualy.

Extech Moisture meter MO297 [T910973]
Can be connected to the thermal imaging camera through MeterLink™
Title: Re: EzCRC01
Post by: amyk on November 18, 2013, 08:15:46 am
"The program can't start because MSVCP110.dll is missing from your computer...".
F**** dependencies...  :rant: ... will try another setup ....
You can configure it to link against MSVCRT.dll which is present on every system since Win95 or so. Makes a tiny self-contained executable that works everywhere. Funnily enough MS discourages this but this is what they do for the programs they ship with the OS ::)

Info here:
http://kobyk.wordpress.com/2007/07/20/dynamically-linking-with-msvcrtdll-using-visual-c-2005/ (http://kobyk.wordpress.com/2007/07/20/dynamically-linking-with-msvcrtdll-using-visual-c-2005/)
http://www.masmforum.com/board/index.php?topic=9803.0 (http://www.masmforum.com/board/index.php?topic=9803.0)
tl;dr: find a MSVCRT.lib that links for MSVCRT.dll and link with that.
Title: Re: EzCRC01
Post by: Taucher on November 18, 2013, 08:36:55 am
You can configure it to link against MSVCRT.dll which is present on every system since Win95 or so. Makes a tiny self-contained executable that works everywhere. Funnily enough MS discourages this but this is what they do for the programs they ship with the OS ::)

Info here:
http://kobyk.wordpress.com/2007/07/20/dynamically-linking-with-msvcrtdll-using-visual-c-2005/ (http://kobyk.wordpress.com/2007/07/20/dynamically-linking-with-msvcrtdll-using-visual-c-2005/)
http://www.masmforum.com/board/index.php?topic=9803.0 (http://www.masmforum.com/board/index.php?topic=9803.0)
tl;dr: find a MSVCRT.lib that links for MSVCRT.dll and link with that.

Yeah, that gotcha got me ... new PC, all new Soft (I hate what MS has done to formerly good products) have been used to my good old VS05 and Eclipse/Java ... C/C++ quite rusty ...

Did you check the statically linked EzCRC01 exe? - according to my depends.exe it should only require kernel.dll now :)

Before I forget: the source can be easily modified to create an in-place-CRC01-updater.
That step would just require writing "result" back to the original file instead of writing it to the hardcoded path.
The code is built so it will discard and ignore any bytes starting with "# CRC01" - then re-add the computed CRC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 18, 2013, 02:08:38 pm
Ordered 1  two for  :D 1200 euro   :( will be delivered within 3 to 6 days.   :-+
Until then, I'm playing with a SC655 with a max of 200hz

Besides 9 Hz is fast enough for normal use. (30hz is obviously better).
> 30hz  is good for measuring inrush currents or explosions etz.
I use the SC655 mostly @12.5hz.

By the way the I.mx257 has a USB host port!
Maybe one of the pins of the connector is equipped with USB
Or maybe is on the not assembled connector on the PCB.

(some sample pic's from the sc655)




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 18, 2013, 02:14:42 pm
Those are some very nice thermal images. Now how many thousands did that camera cost, dare I ask?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 18, 2013, 02:26:25 pm
€20K  :wtf:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 18, 2013, 02:28:59 pm
Quote
€20K 

Soon enough, they will be sold at Wal-Mart for pocket change
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 18, 2013, 02:30:38 pm
Watch the short video, "Ora", on YouTube. It was filmed with an experimentsl, HD cyro-cooled TIC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 18, 2013, 02:42:08 pm

By the way the I.mx257 has a USB host port!
Maybe one of the pins of the connector is equipped with USB
Or maybe is on the not assembled connector on the PCB.
I did try plugging in a USB Micro host cable with a USB memory stick but nothing happenned
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 03:00:49 pm
I did try plugging in a USB Micro host cable with a USB memory stick but nothing happenned

Presumably because you need a USB OTG driver. I read that Platform Builder 6.0 started including USB OTG support, but they (Flir) would still need to have included it in the kernel/firmware. That, or provide your own USB OTG solution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 18, 2013, 03:16:48 pm
I did try plugging in a USB Micro host cable with a USB memory stick but nothing happenned

Presumably because you need a USB OTG driver. I read that Platform Builder 6.0 started including USB OTG support, but they (Flir) would still need to have included it in the kernel/firmware. That, or provide your own USB OTG solution.
.,.and also provide 5V power on the connector - didn't actually test for this but didn't see any LED activity on the USB stick
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 04:02:01 pm
.,.and also prodice 5V power on the connector - didn't actually test for this but didn't see any LED activity on the USB stick

Although that is not a strict requirement. If the usb port says screw you hippie in the power department you can still use usb otg through a powered hub.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 18, 2013, 05:15:06 pm
Got an E4 today from a local supplier today, version 1.18.8. I followed the instructions in post #1 and all I can say is; WOW! and thank you!
I did a quick tour around the house in 60x80 pixel-mode and it was great -with this mod it is just awesome!

Should one be worried that the FLIR Tools software could somehow automatically "update" the E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 05:33:33 pm
Should one be worried that the FLIR Tools software could somehow automatically "update" the E4?

Not that I'm aware of. Besides that, it would be extremely not done to do an update without notification. If only for the very simple reason that you could decide to power off the device at any time. That, and possibly several random legal reasons. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 18, 2013, 05:46:28 pm
I called PASS in the UK today, which is where I got my E4, to place an order for some Fluke gear.
The salesman got chatting about the E4 and the hack and said "you were lucky, the next lot are going to be hack proof"  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 18, 2013, 05:49:55 pm
I called PASS in the UK today, which is where I got my E4, to place an order for some Fluke gear.
The salesman got chatting about the E4 and the hack and said "you were lucky, the next lot are going to be hack proof"  :-DD
..to which the answer would be "well good luck with selling those then..."
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 18, 2013, 05:51:38 pm
I called PASS in the UK today, which is where I got my E4, to place an order for some Fluke gear.
The salesman got chatting about the E4 and the hack and said "you were lucky, the next lot are going to be hack proof"  :-DD
..to which the answer would be "well good luck with selling those then..."

Yes I was very tempted!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 18, 2013, 05:53:35 pm
Got an E4 today from a local supplier today, version 1.18.8. I followed the instructions in post #1 and all I can say is; WOW! and thank you!
I did a quick tour around the house in 60x80 pixel-mode and it was great -with this mod it is just awesome!

Should one be worried that the FLIR Tools software could somehow automatically "update" the E4?
The worst they could do in a newer version is refuse to talk to a modded unit. Anything else would probably be iilegal under hacking legislation - making unauthorised changes or possibly even criminal damage.
Probably worth a read of T&Cs for any nasty small print, but they'd be really stupid to pull something like that.
But Flir tools doesn't seem to be very useful for anything so not a big deal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 18, 2013, 05:55:47 pm
I called PASS in the UK today, which is where I got my E4, to place an order for some Fluke gear.
The salesman got chatting about the E4 and the hack and said "you were lucky, the next lot are going to be hack proof"  :-DD
..to which the answer would be "well good luck with selling those then..."

Yes I was very tempted!

Would be interesting if dealers started getting loads of orders specifying that the order is contingent on the earlier firmware version...

Certainly anyone ordering now should make it clear that only FW1.19.8 or earlier is acceptable as a condition of order.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 06:00:30 pm
The salesman got chatting about the E4 and the hack and said "you were lucky, the next lot are going to be hack proof"  :-DD

He probably meant to say "we were lucky the current lot is not hack proof". An easy mistake to make, especially when you're still feeling a bit giddy after reading the recent sales report.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 18, 2013, 07:16:12 pm

Btw - did anybody have success in taking a look into an Exx series model yet?
I'd really love to know what wlan/bt hardware is beeing used there - and where it is connected :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 18, 2013, 08:03:50 pm
I hope the guy was only joking about the newer E4's being hack-proof.

Ah well, even if FLIR does make the E4 "hack-proof," I'm sure there will be other ways to hack it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 18, 2013, 08:05:20 pm

Btw - did anybody have success in taking a look into an Exx series model yet?
I'd really love to know what wlan/bt hardware is beeing used there - and where it is connected :)

I can probably help with an E8 but it all hinges on the E4 i've got on order being co-operative or not.

Has anyone looked further into the role the I2C EEPROM is playing? Mike's earlier comments on it were interesting. It looks like one of you guys with an already co-operative E4 could explore the bus with i2c.exe.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pmcouto on November 18, 2013, 08:40:42 pm

Btw - did anybody have success in taking a look into an Exx series model yet?
I'd really love to know what wlan/bt hardware is beeing used there - and where it is connected :)

Hi Taucher,

When FLIR launched Ex series, they also launched a new version of Exx series, with new features (ex. MSX), new firmware and a slightly different “look”.
I heard some rumors about this new Exx version hardware: Same base hardware as Ex plus WiFi/BT module and digitizer (touch screen) interface (this may be the unpopulated connector on the PCB, seen in Mike’s teardown).
Please note this is only a rumor – I didn’t have the opportunity to see the new Exx “guts” yet…

If the rumor is true, it may be possible to add some interesting features to Ex series.  >:D

Exx series are 60 Hz TICs.
However, the lens is significantly larger than Ex, so probably Ex will not have an acceptable performance at 60 Hz, if (or should I say when?  :-DD) a hack becomes available…

Regards,
Pedro   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on November 18, 2013, 08:53:22 pm
Quote
But Flir tools doesn't seem to be very useful for anything so not a big deal.


Flir tools does have an annoying user interface (to me) but I do find it fairly useful. You can post process the images to do things like change the size of the HOT/COLD search area. Also it looks like it upscales the images to a higher pixel count making them look a bit more pleasing when blown up.

But I did wonder if Flir Tools could auto update itself via the web and then do a sneaky patch over USB to put the camera back to 80x60.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 18, 2013, 09:00:57 pm
Ah well, even if FLIR does make the E4 "hack-proof," I'm sure there will be other ways to hack it.

Unsoldering the flash chip and mounting it under a WinCE install, (as talked about a while back), should be fairly simple and allow the new firmware to be hacked.
Just wont be able to hack it without opening the case and some technical skill.

Assuming someone doesn't figure out a new usb based hack of course
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 18, 2013, 09:09:22 pm
since there will still be a way to update the firmware the easiest thing would be to have the 1.18 firmware look like 1.22 and 'update' the camera with that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 18, 2013, 09:12:40 pm
since there will still be a way to update the firmware the easiest thing would be to have the 1.18 firmware look like 1.22 and 'update' the camera with that.

Shhhhhh  :'(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 09:29:10 pm

Btw - did anybody have success in taking a look into an Exx series model yet?
I'd really love to know what wlan/bt hardware is beeing used there - and where it is connected :)

I can probably help with an E8 but it all hinges on the E4 i've got on order being co-operative or not.

Has anyone looked further into the role the I2C EEPROM is playing? Mike's earlier comments on it were interesting. It looks like one of you guys with an already co-operative E4 could explore the bus with i2c.exe.

Already tried that. i2c.exe doesn't get you too all that much interesting info (lots of 0xff). First passive snooping on the bus during startup and when required some active reading/writing might get more results.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 18, 2013, 09:41:46 pm

If the rumor is true, it may be possible to add some interesting features to Ex series.  >:D

I would raise that from rumor to very likely, but perhaps a different FPGA? Take a look at the Exx series firmware for proof and have a dig around in the .fif files.

The Exx firmware also has additional FPGA .bin files fpga_c4_55.bin & fpga_c55.bin. Looks like it went through a hardware change too, as those seperate files relate to different revisions of the Exx camera. Also, c4_55 and c_55 look like they might relate to some of Altera's own part codes (i'm not an FPGA guy)?

Many of the error strings in the Ex firmware reference features that are only available on the Exx.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 18, 2013, 10:37:06 pm
I noticed that after charging, a ghost image of the battery symbol that's shown during loading is still visible when the camera is active.
Does this happen only for me?
I tried stuff like switching to digital camera mode and watching a white wall hoping the "burnt in" image would go away, but no success so far.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 10:39:08 pm

If the rumor is true, it may be possible to add some interesting features to Ex series.  >:D

I would raise that from rumor to very likely, but perhaps a different FPGA? Take a look at the Exx series firmware for proof and have a dig around in the .fif files.

The Exx firmware also has additional FPGA .bin files fpga_c4_55.bin & fpga_c55.bin. Looks like it went through a hardware change too, as those seperate files relate to different revisions of the Exx camera. Also, c4_55 and c_55 look like they might relate to some of Altera's own part codes (i'm not an FPGA guy)?

Many of the error strings in the Ex firmware reference features that are only available on the Exx.

Been there done that. ;) fpga.bin sizes suggest similar complexity, if not downright the exact same fpga device. IIRC at least one of the bit files for Exx is slightly smaller than for the Ex. As in just might be that at least one Exx board revision uses the same fpga device as for Ex.

*checks*
./flir_ex_pn639_v1.18.7/Z3comb_v1.18.7/FlashBFS/system/fpga.bin 626970 bytes
./flir_exx_pn490_v2.23.14/E2comb_v2.23.14/FlashFS/system/fpga.bin 592029 bytes

I'd be real interested in 1) knowing the fpga device on the Exx, and 2) some macro shots of the pcb.

Hell, while we are speculating ... the first Exx series + the date on that sensor die in Mike's vid. Similarities anyone? Form factor of Exx vs Ex? It looks pretty damn likely that the Ex is an evolution of the Exx design. Downgrade here and there, and introduce it in a lower price bracket.

And as pointed out, appcore.exe similarities are also all over the place. As for several of the other .exe files (gethwtype.exe unsurprisingly).

So time for someone to pop open an Exx and take a vid or some pics.  ;D

The Exx firmware also has additional FPGA .bin files fpga_c4_55.bin & fpga_c55.bin. Looks like it went through a hardware change too, as those seperate files relate to different revisions of the Exx camera. Also, c4_55 and c_55 look like they might relate to some of Altera's own part codes (i'm not an FPGA guy)?

Yup, that looks to be the case. If only because if you check the flir support docs, there are 3 versions of the Exx listed. And there are 3 fpga*.bin files.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 18, 2013, 10:41:10 pm
I noticed that after charging, a ghost image of the battery symbol that's shown during loading is still visible when the camera is active.
Does this happen only for me?
I tried stuff like switching to digital camera mode and watching a white wall hoping the "burnt in" image would go away, but no success so far.

Nope, you're not the only one. It was reported earlier on, and I confirmed it as well.

After that I think I made a fix for that. I still have to properly test it. Too much other stuff. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 18, 2013, 11:24:01 pm
Is there a way to change the written EXIF information in the firmware? I would like the camera to leave/change the serial number which is otherwise written to with each picture and also to change the written E4 to E8 at the EXIF camera model place.
Maybe somebody already stumbled on it.

P.S. Of course it can be changed later with some tools but best would be to let the camera write the wanted information right away thus eliminating any later file procession.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 18, 2013, 11:39:01 pm
I just created a makefile to compile the crc01 tool on OSX and Linux with gcc (g++)
I am thinking about extending the source code in order to append serial number (ID) and checksum (CRC01) automatically to a raw settings file.
The file will then be correct with CRLF etc.. and few risk to make something wrong.
This would ease the process a lot as I have seen many questions about formatting the file.

Pls let me know you opinions :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 12:05:33 am
Didn't Taucher already make a patch like that for windoze? And in linux country I've got a bash script lying around for ages now to do things automatically.. But I figured it was a bit pointless what with rndis, chickens, eggs, and relative linux/windows clue distributions.

But if you are about to flush time into it, might as well save you some time at least for the *nix side of things

Make sure you have the todos/fromdos tools. You want to have those anyways.
Code: [Select]
apt-get install tofrodos

Make sure the E4 is attached as mass storage device and mounted somewhere. See the attached tgz, and run autohack.sh. Well, almost autohack anyways, since I didn't manage to get rndis working at that time. It spits out a .fif ready to be used with your serial.

I'm pretty sure it works, since I used this to hack mine. :P


PS: It's a tgz, so just unpack with tar xvzf e4_autohack.tgz.zip. Silly forum limitations on attachment filenames...
PPS: It tries to automatically find the right mountpoint. If you don't like a script running a find like that, you're opinionated enough to provide the right filename by hand. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 19, 2013, 12:12:25 am
Call me stupid, but while in can connect to FTP in RNDIS mode, the ftp server refuses to accept "3lvig" as password for the user "root" or "flir".
I tried FileZilla, SmartFTP and the command line FTP client.
The weird thing is that I managed once to login with the command line FTP client, then tried SmartFTP and since then, it doesn't work anymore at all.
I rebooted my PC serveral times, switched off the E4, removed the battery, switched USB modes etc.
The outcome is now always the same: root/3lvig or flir/3lvig are refused for FTP and also for the web frontend.
What the heck is the trick there???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 12:16:08 am
The trick is obviously to use winscp as ftp client because winscp doesn't suck, but mostly ..... use flir/3vlig (aka not what you used).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 19, 2013, 12:16:18 am

Btw - did anybody have success in taking a look into an Exx series model yet?
I'd really love to know what wlan/bt hardware is beeing used there - and where it is connected :)

I can probably help with an E8 but it all hinges on the E4 i've got on order being co-operative or not.

Has anyone looked further into the role the I2C EEPROM is playing? Mike's earlier comments on it were interesting. It looks like one of you guys with an already co-operative E4 could explore the bus with i2c.exe.

I do have some dumps of I2C traffic but stopped looking once I realised that the config doesn't appear to come from there, and that if you change the resolution figure it gets changed back.
My best guess is the eeprom contains the serial number, so it isn't lost of the flash ever gets reinitialised,  and is also used temporarily as a way to communicate the resolution setting back from the application environment to either an early part of the boot process,  or the FPGA.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 19, 2013, 12:19:48 am
The trick is obviously to use winscp as ftp client because winscp doesn't suck, but mostly ..... use flir/3vlig (aka not what you used).
Damn it, "3lvig" is given several times in this thread. So obviously the the one time it worked I misspelled it and by chance got the correct "3vlig" spelling this way.
Thanks, I was about to get crazy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 19, 2013, 12:20:51 am
My E4 arrived today. For those of you who are keeping track, here's my unit information:

                                Serial: 63905XXX
               Calibration Date: 10/23/2013
                          Firmware: 1.18.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 12:27:04 am
Damn it, "3lvig" is given several times in this thread. So obviously the the one time it worked I misspelled it and by chance got the correct "3vlig" spelling this way.
Thanks, I was about to get crazy.

Easy enough to remember, since the software dudes are Swedish, and trevlig is swedish for positive things. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 19, 2013, 12:37:15 am
For those who don't speak Swedish though, 3vlig and 3lvig both sound plausible ;)
Anyway, I exhanged the battery_frame.bmp and flash_graybackground.bmp with much darker versions now. Hope this helps.
At least the ghost image of the battery symbol has nearly disappeared now...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bozi on November 19, 2013, 02:07:09 am
See the attached tgz,....
Thnx for your *nix aware hack but your attachment (e4_autohack.tgz.zip) is empty (0 byte)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 03:29:55 am
See the attached tgz,....
Thnx for your *nix aware hack but your attachment (e4_autohack.tgz.zip) is empty (0 byte)

Doh.  :palm: Fixed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 19, 2013, 03:50:41 am
Quote
# check for yourself that I'm not making stuff up. :P
rls .image.flow.maps.combGainDeadMap.pixReplace

# show dead pixels
rset .image.flow.maps.combGainDeadMap.pixReplace false

# hide dead pixels again (default)
rset .image.flow.maps.combGainDeadMap.pixReplace true

How do I run these commands? I am trying to figure out how many dead pixels are in my E4, but I haven't figured out the debug stuff yet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 05:19:51 am
Quote
# check for yourself that I'm not making stuff up. :P
rls .image.flow.maps.combGainDeadMap.pixReplace

# show dead pixels
rset .image.flow.maps.combGainDeadMap.pixReplace false

# hide dead pixels again (default)
rset .image.flow.maps.combGainDeadMap.pixReplace true

How do I run these commands? I am trying to figure out how many dead pixels are in my E4, but I haven't figured out the debug stuff yet

Enable RNDIS as per usual instructions
Make telnet connection to 192.168.0.2
Enter commands at prompt
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 05:32:34 am
Okay, quickly made 2 fif's that you can apply in the same way as the E8 hack (through FlirInstallNet). Unzip the attachment once to get the fif's.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 19, 2013, 11:21:56 am
My E4 arrived today: already upgraded to E8+!!!  ;)

Serial: 639063XX
Calibration Date: 2013-11-07
Firmware: 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 19, 2013, 11:58:04 am
hello,
what about the sensors calibration? is it lost with the E8 upgrade?
thanks to all with the flir thing :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 19, 2013, 12:10:05 pm
I just called my supplier.
Last Friday they ordered my camera directly from Flir. |O
I hope this is still easy hackable.
Is there evidence that the cameras are downgradable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mjl on November 19, 2013, 01:15:43 pm
I just called my supplier.
Last Friday they ordered my camera directly from Flir. |O
I hope this is still easy hackable.
Is there evidence that the cameras are downgradable?
So far there is no evidence (only second-hand hearsay) of new firmware that is "unhackable", so worrying about downgradable firmware seems premature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 19, 2013, 02:35:16 pm
Hello,

Do you know how to change center spot size ( for example in HOT/COLD/AVR mode ). Will be possible to have this mode on full screen or little bit bigger size?
Thank you for your help.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 19, 2013, 04:40:35 pm
Thanks mrfibble, works great!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on November 19, 2013, 04:46:26 pm
Uhh uh - very bad news!!!!!

until now I was silently reading here. But now I need to post: I just got the feedback from a friend. He purchased an E5 in early October but as his display was showing two vertical stripes at the left and right side of the screen, his unit was sent back for repair.

He got it back yesterday afternoon ...... with installed firmware 1.20.3
He tried until now: hack is NOT working anymore!!!   :scared: :scared:

No secret menu anymore, installation of E8.cfg is not enhancing resolution, serial interface (the one behind the front cover) also not working.

He had to leave now as he is travelling but will post details by himself at the weekend for seeking any advice.

Aaargh  :wtf: - I already ordered mine a week ago but my supplier had no stock and waits for delivery. If all new units now are having a new fw too, I will need at least two bottles of scotch at once and another one each time when I see my E4 with crappy 80x60 pixel. Oh Lord, why didn't I buy it earlier, why why why? Fu**

Any advise? Is there any supplier who still got stock now? I better should cancel my order then and purchase there quickly.
Anybody want to sell a used one? Please PM me.

With one post, a week ago, and a quick edit of who knows what, we're left to assume this was Flir trying to dissuade folks from buying an E4/8. Instead, this one post did more to promote sales of E4 than any advertising could have. Would be curious if the IP of this poster resolves to Sweden.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 19, 2013, 04:56:53 pm
Anyway, I exhanged the battery_frame.bmp and flash_graybackground.bmp with much darker versions now. Hope this helps.
At least the ghost image of the battery symbol has nearly disappeared now...

Please post your modified files?

I tried the "rset .power.settings.screenSaverEnable true" setting and it had no effect.

I found that if you power off the unit, take out the battery so it's really off, then plug in the battery and connect the charger without powering it on - that it wont show the charging screen - but I don't know if it's actually charging then.

Also found something that I don't know if anyone else has figured out - if you power it off and it's on the charging screen - if you press left and right at the same time you get a some charging stats:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 19, 2013, 05:08:26 pm
Please post your modified files?
I attached them, but it's not rocket science and only a first go. At first look it seems dark enough though to avoid that burn in effect.
To remove the burn in effect faster, it would be probably better to invert the image and use it for some time.

Also found something that I don't know if anyone else has figured out - if you power it off and it's on the charging screen - if you press left and right at the same time you get a some charging stats:
Interesting. At least I didn't know. Thanks for the info.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 19, 2013, 05:45:27 pm
Please post your modified files?
I attached them, but it's not rocket science and only a first go. At first look it seems dark enough though to avoid that burn in effect.
To remove the burn in effect faster, it would be probably better to invert the image and use it for some time.

Are you worried about the LCD being damaged, or do you just not like seeing the image?  LCDs don't really have burn-in, so I think what's happening is that the backlight eventually goes off, and you see the dim charging image by reflected light.  Completely harmless.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 19, 2013, 05:51:33 pm
Quote
Are you worried about the LCD being damaged, or do you just not like seeing the image?  LCDs don't really have burn-in, so I think what's happening is that the backlight eventually goes off, and you see the dim charging image by reflected light.  Completely harmless.

That's my opinion also. It doesn't make sense to drain the battery with a backlight if you are trying to charge the thing. The light turns off after a few minutes, but the device stays on as to remain reactive. I for one like being abo to hit a button at any time to quickly turn the light back on and see how much its charged.

I'd love to get an external battery charger for it instead of using that frighteningly fragile micro usb connector; however, those greedy bastards at FLIR set a MSP of $125 on the damn thing. I guess it's fortunate that I won't be needing to charge it too often
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 19, 2013, 06:07:13 pm
First of all possible matrices that contain E4 with more BAD Pixel
The better models are going to E5 ... E8 (quality)
How do they send me E4 unsupportable software hack, no problem in Poland is the law that the goods purchased via the Internet, you can return to the supplier :) and so no problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 19, 2013, 06:09:42 pm
It will get people from the FLIR camera calibration of this week and last week, please report what is the version of the software.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on November 19, 2013, 06:24:51 pm
Are you worried about the LCD being damaged, or do you just not like seeing the image?  LCDs don't really have burn-in, so I think what's happening is that the backlight eventually goes off, and you see the dim charging image by reflected light.  Completely harmless.
This is not only wrong but also shows that you didn't read my posts. LCDs do suffer from burn-in (http://en.wikipedia.org/wiki/Screen_burn-in), although this effect varies a lot for different types and models. Unfortunately, the (or at least my) E4's display is very, very prone to  burn-in, so as described in my post, a single load cycle of a few hours led to an inverted version of the battery symbol being clearly visible all the time during normal operation. This ghost image was visible for hours after just a single load cycle. So I don't really want to risk a permanent burn-in just because of a stupid color/contrast choice for the loading symbol.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Doug on November 19, 2013, 07:06:22 pm
Received my E4 from Omega USA today.  Supposedly the last one in stock as of yesterday according to the Omega sales guy, but I checked their site today and it still lists one in stock.  The box had been opened and re-sealed by Omega, so this must have been an RMA return.  Wonder why...
Paid $995
Firmware version is 1.18.8  :-+
Serial number 63903xxx
Calibration site Estonia
Oct 1, 2013

Won't have a chance to try the resolution upgrade until later today.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zapta on November 19, 2013, 07:45:50 pm
Apparantly we have at work a hackerspace with 3D printer and the likes so I took the opportunity and printed the lens.stl focus tool posted here (thanks!). It works as advertised and I could focus for a distance of 2-3 inches. More than enough to inspect PCBs.

When I re-focus it to the 'normal' operation (e.g. factory setting), what object distance should I use? I would think that shorter than infinity will provide better range.


(http://i.imgur.com/4yspWX3.jpg)
The tool inserted into the camera.

(http://i.imgur.com/dmF7nsW.jpg)
The tool upside down on top the the camera. You can see the portion that engaged the lens holder.

(http://i.imgur.com/8XXjmQw.jpg)
A close up of the tip. When tried to upload the stl file to an online 3D service I got an error message. As you can see there are gaps and irregularities in the printed part. Am not sure why. Might be a discontinuity in the 3D model.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 19, 2013, 08:28:33 pm
Are you worried about the LCD being damaged, or do you just not like seeing the image?  LCDs don't really have burn-in, so I think what's happening is that the backlight eventually goes off, and you see the dim charging image by reflected light.  Completely harmless.
This is not only wrong but also shows that you didn't read my posts. LCDs do suffer from burn-in (http://en.wikipedia.org/wiki/Screen_burn-in), although this effect varies a lot for different types and models. Unfortunately, the (or at least my) E4's display is very, very prone to  burn-in, so as described in my post, a single load cycle of a few hours led to an inverted version of the battery symbol being clearly visible all the time during normal operation. This ghost image was visible for hours after just a single load cycle. So I don't really want to risk a permanent burn-in just because of a stupid color/contrast choice for the loading symbol.

Oops, I think I did read them, but forgot the details.  Anyway, I don't see this behavior at all on my unit, so maybe you have a bad LCD?  (Or I have an extra good one.)  Has anyone else seen this persistent ghost?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 19, 2013, 08:56:56 pm
US buyers: which free gift (http://www.shopflir.com/index.php?page=flir-buy-more-get-more-promo.html) did you pick?  I was thinking of the borescope, but the reviews aren't so great.

Also, don't forget to register for the extended warranty:

Quote
PRODUCT REGISTRATION. To qualify for FLIR’s 2-5-10 Limited
Warranty, Purchaser must fully register the Qualifying Product
directly with FLIR at www.flir.com (http://www.flir.com) WITHIN SIXTY (60) DAYS
of the date the Qualifying Product was purchased by the first
retail customer (the “Purchase Date”). QUALIFYING PRODUCTS
THAT ARE NOT REGISTERED ON-LINE WITHIN SIXTY (60) DAYS
OF THE PURCHASE DATE WILL HAVE A LIMITED ONE (1) YEAR
WARRANTY FROM THE ORIGINAL DATE OF PURCHASE.
(I don't think they can enforce that in most states, but who needs the hassle.)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 19, 2013, 08:58:07 pm
Are you worried about the LCD being damaged, or do you just not like seeing the image?  LCDs don't really have burn-in, so I think what's happening is that the backlight eventually goes off, and you see the dim charging image by reflected light.  Completely harmless.
This is not only wrong but also shows that you didn't read my posts. LCDs do suffer from burn-in (http://en.wikipedia.org/wiki/Screen_burn-in), although this effect varies a lot for different types and models. Unfortunately, the (or at least my) E4's display is very, very prone to  burn-in, so as described in my post, a single load cycle of a few hours led to an inverted version of the battery symbol being clearly visible all the time during normal operation. This ghost image was visible for hours after just a single load cycle. So I don't really want to risk a permanent burn-in just because of a stupid color/contrast choice for the loading symbol.

Oops, I think I did read them, but forgot the details.  Anyway, I don't see this behavior at all on my unit, so maybe you have a bad LCD?  (Or I have an extra good one.)  Has anyone else seen this persistent ghost?
This effect may be temparature dependant
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 19, 2013, 09:01:26 pm
(I don't think they can enforce that in most states, but who needs the hassle.)

To which the natural response is:
1 - marketing departments that try certain ploys to get customer information need to fucking die
2 - I'd like to see them try (to refuse warranty outside of the law)

PS: That said, consumer protection in the EU is less crap compared to the US.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 19, 2013, 09:11:20 pm
Apparantly we have at work a hackerspace with 3D printer and the likes so I took the opportunity and printed the lens.stl focus tool posted here (thanks!). It works as advertised and I could focus for a distance of 2-3 inches. More than enough to inspect PCBs.

...

A close up of the tip. When tried to upload the stl file to an online 3D service I got an error message. As you can see there are gaps and irregularities in the printed part. Am not sure why. Might be a discontinuity in the 3D model.

Attached is a screen capture of the STL file. Looks good to me :)

3D printers can have 'issues' working reliably and consistently so I would imagine if you print another tool it will look a little different...

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on November 19, 2013, 09:25:45 pm
Uploaded the lens adjustment tool .stl to shapeways and their website didn't seem to have any problems with the model. Will see the final product sometime later, as it is on its way to me via dhl. If it turns out fine, then the next 3d print that I'll be ordering is the ZnSe-lens holder...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 19, 2013, 09:47:10 pm
US buyers: which free gift (http://www.shopflir.com/index.php?page=flir-buy-more-get-more-promo.html) did you pick?  I was thinking of the borescope, but the reviews aren't so great.

I had to have a FLIR bag :D so went with that option :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on November 19, 2013, 10:11:18 pm
[I had to have a FLIR bag :D so went with that option :)

Three letters here 'O' 'C' 'D'  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Anders Olsson on November 19, 2013, 10:45:48 pm
I revived my E4 yesterday. It was ordered from proffsmagasinet.se and then it was in stock. Now it says 1-3 days, so apparently they are out of it now.
It has serial 63903XXX, calibrated in Estonia 30 September and the hack worked perfectly!  :)

......................................
EDIT, more detailed camera specs:
Model: E4 1.0
Serial number: 639035xx
Software: 1.18.7
Calibration date: 30 September
.......................................

Anyway, I visited a job fair 7:th of November here in Sweden and FLIR was there.
I tried out the E8 (before I decided to order the E4) and for some reason I could not resist mentioning that someone hacked the E4 :P
The lady from FLIR looked a bit uncomfortable, maybe I was not the first one to mention it since the place was packed with students and scientists.
According to her FLIR are well aware of the hack and their programmers are working hard to block it.

I don't know if one can trust this information, but I would not be too surprised if "unhackable" E4:s start showing up soon.
Luckily my "E8" is safe with me at home and I will not let FLIR near it again :)
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 19, 2013, 11:23:08 pm

Anyway, I visited a job fair 7:th of November here in Sweden and FLIR was there.
I tried out the E8 (before I decided to order the E4) and for some reason I could not resist mentioning that someone hacked the E4 :P
The lady from FLIR looked a bit uncomfortable, maybe I was not the first one to mention it since the place was packed with students and scientists.
According to her FLIR are well aware of the hack and their programmers are working hard to block it.

I don't know if one can trust this information, but I would not be too surprised if "unhackable" E4:s start showing up soon.
Luckily my "E8" is safe with me at home and I will not let FLIR near it again :)

Just have to quote this before it gets deleted. So you rubbed it in their (FLIR) faces for what reason exactly? To embarrass them? And then you show some healthy egoism posting that you have secured yours.

I don't mind the egoism but boasting about it like you did someone a favor I do.

Enjoy your new gadget and show us some interesting thermal images instead. For the sake of the people who have not yet received their E4 and have to read this ego and/or paranoia posts.
Like me.

Sent from my Nexus 7 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 19, 2013, 11:45:11 pm
Goading company reps at trade shows can sometimes be an entertaining sport, although I usually reserve it for companies who have previously pissed me off, or whose sales people are so full of it they need taking down a peg or two... ;D

I must admit I wouldn't be above a little sport in asking a Flir dealer "Well why would I buy an E8 when I can 'upgrade' an E4 and get more features than an E8... ?"
It can be very interesting watching people's reaction (both stand staff and onlookers) to awkward questions...

I know, I should get out more....
 
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Doug on November 20, 2013, 12:07:46 am
Here is a before / after photo of the microscope in our lab with a hot soldering iron laying on the bench under the microscope.  I tried to get about the same distance and perspective in the two shots.  I turned off the microscope lamp between photos and I wasn't careful about waiting the same length of time after switching it on before snapping the pics.  That might account for the difference in min / max temperatures in the frame. 

All I can say about the improvement is, Wow! Thank you Mike and other contributors.  You are awesome and this E4/E8 is awesome now too.  Super respect for your talents and for taking the time and expending the effort to share.

I'll fiddle with the focal distance next.  Again, I'll be benefiting big time from the posts of others showing the lens tool and lens holder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 20, 2013, 12:29:46 am
It can be very interesting watching people's reaction (both stand staff and onlookers) to awkward questions...

That is indeed the main bit of interest for me as well. As long as you don't do it in a confronting manner you can sometimes get some fun inside information. Of course if the company and/or sales people pisses you off you can be a bit more confrontational. :P Generally I'm medium nice, since those at trade shows are also just doing their jobs and are hopefully trying to provide you with useful information about product XYZ.

Quote
I know, I should get out more....

What is this "get out more" concept of which you speak?

PS: speaking of needing to getting out more often ... porting MD160 to python is such fun! @_@ little-endian diediediiiieeeeeeee!!!!!
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: Anders Olsson on November 20, 2013, 12:35:21 am
Just have to quote this before it gets deleted. So you rubbed it in their (FLIR) faces for what reason exactly?

I was too curious whether their reply would be something like "yes, the production is on hold now" or "we are aware of that" or "what hack?"
It told me the likelihood that I could still hack the E4 if I bought one. I might have been a bit evil, but I had to..  :P
We discussed the E8 for quite some time and I gave them a lot of complements about the upgrades compared to the i-series, so the hack was not the main topic so to say.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 20, 2013, 12:45:33 am
I'm about to get my E8
Are these lens adjuster and lens adapter 3D models going to be uploaded onto Thingiverse or similar? (can upload on my account if I get permission from the creators)
Also, do you simply screw the lens back all the way in to it's tight and that's the "factory" position, or does it seem to have a factory tweaked position one should mark off before adjusting?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 20, 2013, 12:53:05 am
Just ordered my E4 from tequipment verified FW version, I think they have a few in stock :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on November 20, 2013, 01:00:42 am
Just ordered my E4 from tequipment verified FW version, I think they have a few in stock :)

Hmm, I bought mine from them, but it shipped from Ingram Micro, so they would have had no way to check the firmware version (which was 1.18.7).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 20, 2013, 01:05:02 am
Dave, I thought you had an E60? Why do you need an E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 20, 2013, 01:06:18 am
I'm about to get my E8
Are these lens adjuster and lens adapter 3D models going to be uploaded onto Thingiverse or similar? (can upload on my account if I get permission from the creators)
Also, do you simply screw the lens back all the way in to it's tight and that's the "factory" position, or does it seem to have a factory tweaked position one should mark off before adjusting?

You need to mark original lens position.  Looking forward to your review.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bandrik on November 20, 2013, 01:18:36 am
Hello world! First post here. I wanted to thank Mike and everyone else here for both the hack and the discussion about it.

I also wanted to share that I ordered an E4 last week and it came in today (November 19). Here's the info:

Model: E4 1.0
Serial: 63902xxx
Part #: 63901-0101
Software: 1.18.7  ;D
Calibration: Estonia
Date: Sept 20, 2013
My location: USA



For USA dwellers that are interested, I ordered it on Amazon.com here (http://www.amazon.com/gp/product/B00GJYURD6/ref=oh_details_o01_s00_i00?ie=UTF8&psc=1) from the seller "Test Equipment Depot" for $995, free shipping. It's now out of stock from that seller.

There are a few other options (http://www.amazon.com/gp/offer-listing/B00FKD9DSW/ref=dp_olp_new?ie=UTF8&condition=new) at Amazon.com, one of which is this one (http://www.amazon.com/gp/product/B00FN6TBXI/ref=ox_sc_act_title_1?ie=UTF8&psc=1&smid=AFAGM2K2OIRAD). It's sold by seller "Sale Store" (4.9/5.0 star seller) for $995, free shipping, and 7 in stock ready to ship as of this writing.

Another tidbit: I found this listing on eBay (http://www.ebay.com/itm/Flir-E4-63901-0101-Thermal-Imaging-Infrared-Camera-80x60-with-MSX-Enhancement-/291014252831?ssPageName=ADME:X:RTQ:US:1123) and inquired to what firmware it is. The seller replied with the following today (November 19):

Quote
Thank you for your inquiry.
Below please see the manufacturer's response to your questions:

"The FLIR Tools would be the latest as they have to download it (4.0xx). The firmware for the camera is 1.18.7 which can also be upgraded by the customer if a new version is released."

Please be advised that the camera will be available for shipping mid December due to delays in production.

Feel free to contact us if you have any questions.

Regards,
Den
So, Flir officially stated that E4's shipped mid-December should carry firmware 1.18.7. Interpret that however you wish, but it seems that anyone buying their E4 in the next week or two will most likely get one that's still hackable (1.19.x or lower). Hopefully this will help anyone still vying to get an E4. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 20, 2013, 01:21:50 am
Just ordered my E4 from tequipment verified FW version, I think they have a few in stock :)

Hmm, I bought mine from them, but it shipped from Ingram Micro, so they would have had no way to check the firmware version (which was 1.18.7).

Did you get the eevblog discount? I thought there should be a place for it during checkout but there was none.

I emailed them about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 20, 2013, 01:24:33 am
Anybody know what differences there are from firmware 1.18.x to 1.19.y?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 20, 2013, 01:33:55 am
Anybody know what differences there are from firmware 1.18.x to 1.19.y?

Not until someone dumps a zip with some 1.19.y files. The only publicly available info is 1.18.7 firmware from flir:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip)

Ideally we'd have the downloaded files from a few firmware versions so we can run some diffs. (Obviously AFTER removing the files specific to your camera).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 20, 2013, 02:25:34 am
I'm about to get my E8
Are these lens adjuster and lens adapter 3D models going to be uploaded onto Thingiverse or similar? (can upload on my account if I get permission from the creators)
Also, do you simply screw the lens back all the way in to it's tight and that's the "factory" position, or does it seem to have a factory tweaked position one should mark off before adjusting?

Feel free to upload my 3D models of the lens adjuster and the ZnSe lens adapter to wherever you think it'll do most good. It's the least I could do to give back for the amazing E4->E8 morph hack.

I'm working on a holder/adapter to hold the E4 nicely (parallel to the work surface in my case for PCB imaging). I did a first trial print today but have some tweaks to make it hold the barrel better. The shape of the barrel is a little 'interesting', so guesstimating the shape is taking some iterations. My plan is for a small hole where I can 'melt/screw' in a 1/4-20 nut that will mate with a short tripod.

Anyhow, will likely take a few days to get it to the point I'm happy. I'll post a picture up of mark I later tonight (US west coast time).

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 20, 2013, 02:54:13 am
Is there a .fif file to add that beta2 menu hack in a similar way to the E4-->E8 hack and dead-pixel shower/hider?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 20, 2013, 03:04:55 am
Feel free to upload my 3D models of the lens adjuster and the ZnSe lens adapter to wherever you think it'll do most good.

Thanks, done:
http://www.thingiverse.com/thing:187162 (http://www.thingiverse.com/thing:187162)
http://www.thingiverse.com/thing:187166 (http://www.thingiverse.com/thing:187166)
I had to chose a license so chose creative commons public domain?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 20, 2013, 03:48:31 am
The FLIR representative at the job fair was probably just a recruiter. Chances are that she doesn't know much about the hack and had only heard about it in passing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 20, 2013, 03:50:30 am
If Flir disable a hack, flir the more harm
get mass returns, and it will be them.
I would have waited for the market place for 2 -3 months, is saturated, and then can block the hack
Cam E8 and so few people will buy, and as I wrote E4 sells like no other before
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 20, 2013, 03:56:30 am
Imo, the potential problem is if majority of FLIR big distributors are fully aware of this hack while still have mountain high of stackpiled of unsold non E4 models, they will be shouting at FLIR to fix it asap "every day" if necessary.

Imagine you're the FLIR distributor relationship officer/manager that is facing those angry mobs everyday.  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on November 20, 2013, 04:24:17 am
The FLIR representative at the job fair was probably just a recruiter. Chances are that she doesn't know much about the hack and had only heard about it in passing.

I'd be willing to bet she'd only heard about it from other people at the fair / in a general sense from someone else at the company & was just saying that they were working hard on a fix because, well, in that position wouldn't you say that too?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 20, 2013, 06:14:06 am
Imo, the potential problem is if majority of FLIR big distributors are fully aware of this hack while still have mountain high of stackpiled of unsold non E4 models, they will be shouting at FLIR to fix it asap "every day" if necessary.

Imagine you're the FLIR distributor relationship officer/manager that is facing those angry mobs everyday.  >:D

I think you're making the assumption here that most E4s sold are being converted to E8 by the hack. It wouldn't surprise me that a lot of the Ex sales are for businesses that aren't interested in hacking and/or have the know how. They're just building inspectors or pest controllers or technical services or ... that want a product that does xyz.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 20, 2013, 06:34:03 am
Imo, the potential problem is if majority of FLIR big distributors are fully aware of this hack while still have mountain high of stackpiled of unsold non E4 models, they will be shouting at FLIR to fix it asap "every day" if necessary.

Imagine you're the FLIR distributor relationship officer/manager that is facing those angry mobs everyday.  >:D

I dunno... I've talked to a few authorized FLIR sellers, and they have all said that sales of the E4 are hot, but sales of other units aren't down.  I don't think the distributors really carry much stock, so I doubt there will be stacks of unsold higher end models, plus the people buying the higher-end units are probably the businesses and people who need the features and would need to pay for 'official' access to those features.  I'd wager it's just the hobbyists hacking these things for the most part, or at least, people who would not have otherwise bought a higher end unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BravoV on November 20, 2013, 06:42:52 am
Ah ... maybe I worded it wrongly, what I mean is, if I was a distributor with the sales burden target and quota "set and agreed" with the principal (FLIR in this case), then I will do what ever necessary to justify my whining  >:D that I can't just fulfill the sales target quota, even it sounds silly. Hope you get it.

As a big distributor (read: not reseller), "usually" you do not have the luxury of being picky on what you want to sell. Like only selling certain items/models that sold like hot cakes while rejecting others. Principal and distributor usually have an agreed sales quota (annually) spreaded across different products/models from principal.

Say for an example all E4 are already sold and still have tons of back order, while those E5,E6 and E8 are still untouched for months, and then based of the info and already proven about the hackability of E4.

Now, the "real" business part. Its not about this hackable or not hackable, or even quota related.

It is all about business politics or tactics, isn't this moment a good opportunity to whine to FLIR that its really hard to reach the agreed sales target as an excuse and use this issue as an escape goat ? Even they're just minority in the sales volume.  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 20, 2013, 07:40:59 am
I doubt FLIR have had such a continuous stream of buyers before; thermal cameras are hardly a "consumer product" (and tend to last a long time) so their business probably consisted of periodically spaced, large orders with some more smaller ones sprinkled in between. Now they're getting a ton of E4 orders so relatively speaking the other models have decreased in demand.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 20, 2013, 07:43:46 am
regular user will not buy anything after for E4 (price)
A company can afford to buy more expensive models and will not deal with the hack models E4.
And so, mainly infrared cameras are buy practical only a company, the retail market is known to be more smaller.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 20, 2013, 08:28:05 am
Yes, let's see, to hack the E4, you come to this thread. Maybe half the visitors then click on the survey at the top of the page, what does that make it - maybe 300. I wonder what the world market is for the E series? ... And only four in the survey are buying an E4 over its stable mates due to the hack.

Looks like a lowish percentage to me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 20, 2013, 08:49:20 am
I've been keeping a  casual eye on Tequipment's stock levels, and they are shifting quite a few E6's and the odd E5.
E8's seem to be sitting there but I think it's way overpriced, as you can get an  E50 for the same price, with  only slightly less resolution but a  big, focussable lens and 60fps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 20, 2013, 08:51:25 am
Also, do you simply screw the lens back all the way in to it's tight and that's the "factory" position, or does it seem to have a factory tweaked position one should mark off before adjusting?
Factory position on mine is about half a turn from fully in so useful to mark it - not very hard to re-focus but nice not to have to.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 20, 2013, 09:06:52 am
Feel free to upload my 3D models of the lens adjuster and the ZnSe lens adapter to wherever you think it'll do most good.

Thanks, done:
http://www.thingiverse.com/thing:187162 (http://www.thingiverse.com/thing:187162)
http://www.thingiverse.com/thing:187166 (http://www.thingiverse.com/thing:187166)
I had to chose a license so chose creative commons public domain?
At least the lens tool for turning the lens does need some improvement. I am not a CAD specialist so I better not work on that, but you can easily see that the STL file and the printed tool are not perfect. I recognized that by uploading the file to a 3D printing company - it was rejected with the error message that the survace is not OK and contains errors and thus cannot be printed.
Maybe some more work on the CAD file is needed here?
I thought I mention this before too much people invest money into ordering a 3D printed model which is not 100% finished yet.
See attached picture.
Btw: I am also wondering why the top is not as shiny and smooth as the cone below. Is there any technical reason or is this due to the not-yet-perfect STL file?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SPRX on November 20, 2013, 09:39:46 am

If you consider the manufacturing cost (of hardware and software development cost etc), have they under-priced E4 and over priced E8 ? 
They are pretty much seems manufactured in the similar production line, and I think they have priced the E4 correctly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 20, 2013, 02:23:12 pm

If you consider the manufacturing cost (of hardware and software development cost etc), have they under-priced E4 and over priced E8 ? 
They are pretty much seems manufactured in the similar production line, and I think they have priced the E4 correctly.
Obviously they're making a lot more per E8, but there is no way they are selling the E4 without some profit as they'd always sell many more E4's than higher end units even without a hack. - we've heard that dealer margins are tighter on the E4, not surprisingly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 20, 2013, 04:01:38 pm
If you think Flir might be fine that E4 sales are going up, you are wrong.
Of course they will have an effect on the sales of E5/6/8.
I did quick guess on costs - see attached screen shot.

I did two calculations, the second table boosts the E4 sales from 1000 to 5000 units, while the E5/6/8 sales are dropping by 75% (which they would, as the word of hackability would spread quickly).
Result: Flir is selling now >5000 cameras instead of 2000 cameras, but is still making less money....
Do you think they will tolerate this? I don't.

It is a similar calculation as any reseller should do.
Example: Assume you are selling some electronics with a 15% margin. You want to give a christmas discount of 5% on everything because this will to boost you sales by 30%. Sounds like a good idea? Wrong: you need to sell at least >50% more than before. Any sales boost below 50% will cost you real money at the end.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 20, 2013, 04:05:42 pm
The consensus at least amongst this thread seems to be that the E4 hack has resulted in new sales that otherwise wouldn't have happenned at all, rather than lost/down-converted sales of higher models.
The E8 is so overpriced for its feature set that I don't think it merits incusion in any serious comparison. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 20, 2013, 04:14:07 pm
I don't think you can consider profit made on the cost of a hardware unit, FLIR are a very well run company who have been in the game from the beginning and have been ruining complex government based contracts worldwide; from that you can summarise that when designing a product they will be extremely good at working out how they can sell the product to cover their development costs in the quickest time possible, including the hardware crippling of a product for it to appeal to a wider audience. We see this everywhere in manufacturing. In all reality its probably not the E8 owners getting ripped off, from what's on offer on the release date they probably got a well priced piece of equipment that covered all the capabilities they needed. Indeed the E4 is very well priced but without the hack, probably is price marked right and although the dealer margin may not be as big the volume probably makes up from that especially with accessories and future trade ups.

Mike's hack shifts the field of play slightly, how much and for how long is only known to FLIR and to a degree is in their control.

One thing is for sure, its done their business no damage, with the product thrown under the spotlight by a lot of very clever guys; not once have I seen a criticism of the company or its product. I for one would not hesitate to recommend the procurement of products from them in the future.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 20, 2013, 04:17:15 pm
The consensus at least amongst this thread seems to be that the E4 hack has resulted in new sales that otherwise wouldn't have happenned at all

Agreed here, I am in conversation with six new camera owners and only one of them previously have a TIC and it was a very old s/h unit.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on November 21, 2013, 02:59:05 am
One thing is for sure, its done their business no damage, with the product thrown under the spotlight by a lot of very clever guys; not once have I seen a criticism of the company or its product. I for one would not hesitate to recommend the procurement of products from them in the future.

Fragile usb charging socket and tripod mount have been raised. Also the bloated/slow menu was mentioned by Mike in original video.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 21, 2013, 03:36:04 am
So did Flir try and shutdown the forum?  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 21, 2013, 04:01:57 am
One thing is for sure, its done their business no damage, with the product thrown under the spotlight by a lot of very clever guys; not once have I seen a criticism of the company or its product.

well, the UI is all kinds of SHIT. Its not critical to the working of the unit, but makes using it somewhat painful. They got all the technology right, but didnt bother to hire any usability experts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corporate666 on November 21, 2013, 04:08:05 am
If you think Flir might be fine that E4 sales are going up, you are wrong.
Of course they will have an effect on the sales of E5/6/8.
I did quick guess on costs - see attached screen shot.

I did two calculations, the second table boosts the E4 sales from 1000 to 5000 units, while the E5/6/8 sales are dropping by 75% (which they would, as the word of hackability would spread quickly).
Result: Flir is selling now >5000 cameras instead of 2000 cameras, but is still making less money....
Do you think they will tolerate this? I don't.

It is a similar calculation as any reseller should do.
Example: Assume you are selling some electronics with a 15% margin. You want to give a christmas discount of 5% on everything because this will to boost you sales by 30%. Sounds like a good idea? Wrong: you need to sell at least >50% more than before. Any sales boost below 50% will cost you real money at the end.

There are way too many assumptions in the chart to make the conclusions relevant, I think.

I seriously doubt 75% of E8 buyers elect for an E4 instead.  FLIR obviously knows their customers and what they are willing to pay.  I would say that anyone willing to pay the E8 price has a reason to pay that much... and it's not simply the resolution increase.  And those people willing to pay the E8 price (or E5/E6) are not likely to buy an E4 and hack it... partly for calibration/gurantee reasons, also warranty, accountability and more.  I doubt many companies would sanction use of a hacked E4 for important measurements - especially not where a chain of accountability is necessary.  And how many hobbyists are buying E8's?  I'd venture to guess almost none.

Not to mention I would think a majority of people who would buy an E8 likely don't know about the hack. 

I think the hack leads to many more E4 sales from people who would not otherwise buy - not cannibalization of E5-E8 sales.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scibit on November 21, 2013, 04:08:32 am
Just had mine delivered to a friend in the US who's going to forward it on.
Had them check it out and apparently it's running firmware version 1.17.7, which was a bit of a surprise.
I'm guessing that there's no harm in upgrading it to 1.18.7?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bandrik on November 21, 2013, 04:09:10 am
While the forum was down, I went ahead and applied Mike's hack. It worked like a charm! I now have a working E4/E8.

Thanks again, Mike!   8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 21, 2013, 04:10:44 am
Feel free to upload my 3D models of the lens adjuster and the ZnSe lens adapter to wherever you think it'll do most good.

Thanks, done:
http://www.thingiverse.com/thing:187162 (http://www.thingiverse.com/thing:187162)
http://www.thingiverse.com/thing:187166 (http://www.thingiverse.com/thing:187166)
I had to chose a license so chose creative commons public domain?
At least the lens tool for turning the lens does need some improvement. I am not a CAD specialist so I better not work on that, but you can easily see that the STL file and the printed tool are not perfect. I recognized that by uploading the file to a 3D printing company - it was rejected with the error message that the survace is not OK and contains errors and thus cannot be printed.
Maybe some more work on the CAD file is needed here?
I thought I mention this before too much people invest money into ordering a 3D printed model which is not 100% finished yet.
See attached picture.
Btw: I am also wondering why the top is not as shiny and smooth as the cone below. Is there any technical reason or is this due to the not-yet-perfect STL file?

The 'finish' will never be perfect since the 'home quality' 3d printers are not Star Trek replicators :)

Areas with a lot of detail are difficult for these plastic extruding printers to provide a great finish. In the case of the lens tool I printed a few out while refining the diameter etc and each has a different finished quality. I had some in clear PLA and some in white PLA. White PLA looks nicer since you can't see 'into it'.

The key is that the 10 spokes engage the lens correctly and makes it very easy to adjust. The picture of my adjuster is in clear PLA and printed in medium resolution since I was told by a co-worker that fine resolution if finicky on the makerbot replicator 2.

There are 2 'artifact' slivers on the side that don't affect printing (at least on the makerbot 2). I'll look to 'clean' them up, but I have no issue printing even with them in place. They don't in any way affect the usability of the tool and the makerbot software doesn't complain.

If you read the last posts you'll see someone has printed the tool at his place of work and the tools works fine. His had some different plastic extrusion finished look - which again shows that different 'home quality' 3d printers will provide different finish quality.

Anyhow, the STL file will generate a working tool. I've printed a couple (needed a spare) on the makerbot replicator 2 at work and its software had no issues. Maybe the 3d service you tried to use is more 'fussy' about what it can print. I can't verify the STL with various services since it works with the equipment I have available to me. If someone wants to take the Sketchup files that I provided and made them more universal to other 3d printing services I have no issue with that.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 21, 2013, 04:29:53 am
I don't think FLIR is worries about a loss in E8 sales since the intended audience of that product is businesses with enough money that they don't care, and also wouldn't risk legal repercussions.

However, I think what FLIR is most worried about is the loss in E6 sales. This is the minimum spec product to comply with the RESNET standard. This is used by building inspectors, and many of these tradesmen work for small companies whose owner is just a normal bloke like us who isn't afraid of saving money getting the E4 and hacking it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 21, 2013, 04:38:58 am
Just had mine delivered to a friend in the US who's going to forward it on.
Had them check it out and apparently it's running firmware version 1.17.7, which was a bit of a surprise.
I'm guessing that there's no harm in upgrading it to 1.18.7?

I also had 1.17.7 .  Updated to 1.18.7 and applied hack -- no problem. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 21, 2013, 05:07:40 am
So, spent some time to designing a holder for the E4 so I can use it to image my PCBs.

3D printed a first attempt yesterday and based on that design I made some tweaks/changes. The new version fits nicely and I created a slot to allow a velcro strap to fit through.

I used a 1/4-20 nutsert used for woodworking. I designed a hole into the base and then heated the nutsert in boiling water for a little to help it melt/thread into the PLA plastic (low glass transition temp of around 60C).

Some pics below. If there's any interest I'll post up the Sketchup and STL files.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 21, 2013, 05:32:14 am
I don't think FLIR is worries about a loss in E8 sales since the intended audience of that product is businesses with enough money that they don't care, and also wouldn't risk legal repercussions.

However, I think what FLIR is most worried about is the loss in E6 sales. This is the minimum spec product to comply with the RESNET standard. This is used by building inspectors, and many of these tradesmen work for small companies whose owner is just a normal bloke like us who isn't afraid of saving money getting the E4 and hacking it.

Actually, after hacking, the E4 doesn't 'officially' comply with any standards at all. If you want an E6 or higher for what it does and you need that standard for your business then its no good showing an E4 and saying "but it's hacked to run like an E8", your reports using the device will be worthless?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 21, 2013, 06:36:00 am
If you think Flir might be fine that E4 sales are going up, you are wrong.
Of course they will have an effect on the sales of E5/6/8.

You can say "of course", but that doesn't make your statement true.

Quote
I did two calculations, the second table boosts the E4 sales from 1000 to 5000 units, while the E5/6/8 sales are dropping by 75% (which they would, as the word of hackability would spread quickly).
Result: Flir is selling now >5000 cameras instead of 2000 cameras, but is still making less money....
Do you think they will tolerate this? I don't.

That's one opinion.  Another opinion is that your table is complete nonsense, because it's based on a set of very flawed assumptions.  If so, then your conclusions carry the same weight... which is none at all.

In my opinion, Flir is experiencing a temporary burst of a few hundred extra sales of E4 units, to folks who would never have bought any of their units at any price.  With a very small handful (single digits) of lost sales of E5 and up units, due to a substitution.  Nothing at all like the scenario you described, where higher-end sales were gutted by 75%.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 21, 2013, 06:48:08 am
Some pics below. If there's any interest I'll post up the Sketchup and STL files.

Yes please. I can also post these to Thingiverse, which is a better easily found repository than buried in this forum thread.
Finally got my E8 today!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ch on November 21, 2013, 07:15:44 am
I did the e4hackb on my FLIR E4.

That went perfectly find.

But it was doing the RNIDS thing all the time and I wanted the previous, simpler mode.

So i ran Remove_RNDIS_permanent.FIF, thinking it would revert to the previous mode.

Now I can't see the camera but for video.  I can't get to it for programming and I can't trasmit files.  (In fact it complains about a lack of SD card when I try to take a picture.)

Any clues would be helpful.

Thanks,
-ch


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 21, 2013, 07:39:07 am
Some pics below. If there's any interest I'll post up the Sketchup and STL files.

Yes please. I can also post these to Thingiverse, which is a better easily found repository than buried in this forum thread.
Finally got my E8 today!

*starts chanting*

Teardown! Teardown! Teardown!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 07:46:00 am
Is there a .fif file to add that beta2 menu hack in a similar way to the E4-->E8 hack and dead-pixel shower/hider?

Nope - that's the reason why it's "advanced users only" (yet) - probably it would be no big deal to make a .fif yourself.
Anyway it's more fun to enable telnet and rndis (that can be done even without hacking the cam) - and one needs a
cable connection while performing the hack anyway ... plus that mode will allow a recovery in case something goes
terribly wrong with the frontend.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 07:49:18 am
I did the e4hackb on my FLIR E4.
That went perfectly find.
But it was doing the RNIDS thing all the time and I wanted the previous, simpler mode.
So i ran Remove_RNDIS_permanent.FIF, thinking it would revert to the previous mode.
Now I can't see the camera but for video.  I can't get to it for programming and I can't trasmit files.  (In fact it complains about a lack of SD card when I try to take a picture.)
Any clues would be helpful.
Thanks,
-ch

please contribute date of calibration, firmware-infos, screenshots/video-URLs (clearly) showing the error message etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 07:54:13 am
Finally got my E8 today!

Dave, that's great - at least now we have somebody who has one of those astro-priced cams to check the dead pixel map for comparison!
This way we can find out if the E4's just get the worst "dead pixel count sensors" ... or not :)  :-/O

I'm also interested in the default config files of that cam - just for a small "diff" :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 08:01:25 am
So, spent some time to designing a holder for the E4 so I can use it to image my PCBs.
3D printed a first attempt yesterday and based on that design I made some tweaks/changes. The new version fits nicely and I created a slot to allow a velcro strap to fit through.

Sure, please post the files - who knows when they might come handy :)
But right now I'm more interested in details about the 3D-printer you're using - the resulting quality seems to be really good.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 21, 2013, 08:24:04 am
Perhaps if sales increased significantly E4 models, FLIR move more matrices of the models >E5 to E4 model.
Which may result in a lower quality bad pixel cameras E4.
Can you report what are the versions of the software in the last deliveries of cameras (2-3week)? (plus the date of calibration)
Does anyone has a soft 1.19.8 (a file for upload) ??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ffej on November 21, 2013, 08:52:16 am
Hey Everyone,

Received my camera today from a distributor in Sydney, supposedly this is from FLIR Australia's latest shipment which arrived in the country on 19/11/13. 

Calibration date is 9/11/2013, software version is 1.19.8 - Hack working well :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 21, 2013, 09:12:40 am
Quote
Now I can't see the camera but for video.  I can't get to it for programming and I can't trasmit files.  (In fact it complains about a lack of SD card when I try to take a picture.)

"No SD card" happens if you try taking a pic within a few secs of unplugging USB as it takes a short while to mount the internal filing system.

Remember you can always set USB mode via the secret menu - hold <right> down for 10 secs in the Camera Information menu
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 21, 2013, 09:46:39 am
Thanks, ffej,
maybe I'll get a camera tomorrow
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on November 21, 2013, 09:52:55 am
Got mine from proffsmagasinet.se a few days ago,
Estonia 30 sept
Serial 63903XXX
1.18.8

Thanks to Mike and others for a great job!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 21, 2013, 11:38:55 am
Hello,
is it possible change size of " center area " in hot/cold/avg measurement ? If yes, how? Thank you for your help..

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 21, 2013, 12:28:56 pm
I installed Taucher's menu hack (ADDMENU-BETA2) this morning. Wow, great work! I am impressed by all the additional features. This menu hack is almost as good an upgrade as the hack from an E4 to E8.   ;D

However, I did have an issue with the UI crashing, or locking-up, intermittently when switching between measurement modes. Did anyone else encounter this issue?

Couldn't find the exact cause but I found some errors in the file "design_ui_z3.xml", which I corrected. I also cleaned it up a little for (my) legibility. The added menu "Formerly hidden menu" didn't work correctly and seemed kind of redundant, so I removed it and added an instruction at the bottom of the screen in the "Camera Information" screen on how to enter the hidden menu. I removed the USB option from the hidden menu as it was redundant having the USB option in two places.

I have been playing around with the measurement modes and so far it hasn't crashed on me. So perhaps the intermittent issue was due to the minor errors in the XML? Time will tell I guess...

Attached is Taucher's original ADDMENU-BETA2 package with the updated "design_ui_z3.xml" file. I renamed the package to "ADDMENU-BETA2a.zip"

There is the potential to add other options and tweaks to the UI and I will be taking another look over the weekend.

Thanks again to Taucher for all his time and effort in making this great menu hack!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 21, 2013, 12:33:31 pm
Should have added this to my previous post...

I checked the dead pixels on my camera and it seems to be similar to the others that were posted. It will be interesting to see how Dave's E8 compares.


(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=67973)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 21, 2013, 12:44:46 pm
I've done the resolution hack but even after reading the thread from beginning to end, can't quite build up the confidence to do the menu hack.

If any of you guys have the time could you please post up a brief step by step guide. I don't quite need a 'baby walk' but a step by step on setting up the modes / connectivity prior to copying the files across with filezilla would really help in my case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 21, 2013, 01:18:06 pm
I've done the resolution hack but even after reading the thread from beginning to end, can't quite build up the confidence to do the menu hack.

If any of you guys have the time could you please post up a brief step by step guide. I don't quite need a 'baby walk' but a step by step on setting up the modes / connectivity prior to copying the files across with filezilla would really help in my case.
Install FLIR RNDIS driver
Select USB RNDIS mode via keypad
Use Filezilla to FTP to 192.168.0.2, login flir, password 3vlig
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 21, 2013, 01:23:57 pm
I've done the resolution hack but even after reading the thread from beginning to end, can't quite build up the confidence to do the menu hack.

If any of you guys have the time could you please post up a brief step by step guide. I don't quite need a 'baby walk' but a step by step on setting up the modes / connectivity prior to copying the files across with filezilla would really help in my case.

*Warning* Don't mess about with the files on your camera if you don't understand what you are doing.

Otherwise, if you just want to install Taucher's menu hack...

1. Install the RNDIS drivers on your PC. (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe))
2. Turn on RNDIS on the camera via the hidden menu (Settings>Device Settings>Camera Information - Press <right> for 10 seconds, select "USB Mode" then select "RNDIS")
3. Connect camera to PC via USB.
4. FTP to camera (eg. with FileZilla): Normal logon type, Host "192.168.0.2", user name "flir", password "3vlig"
5. Make a back-up of the files on your camera (copy files from camera to your computer into a back-up directory of your choice)
6. Copy the ADDMENU-Beta files over the files in the camera (eg. unzip the files to your computer then copy the folder "FlashBFS" from your computer over the folder "FlashBFS" in the camera - overwrite files)
7. Power-down the camera, remove battery and USB cable.
8. Re-insert battery and turn on.
9. Enjoy!  :D
 
If you don't completely understand the above instructions then it would be best to not attempt the menu hack. Better to have basic functions than :-BROKE
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: orbit500 on November 21, 2013, 01:27:34 pm
Got my E4 2 weeks ago and was unaware of this hack. So maybe we need an option on the poll "I had bought an E4 before becoming aware of the hack so this gravy!"
v1.19.8 and hacked perfectly. Blue below especially usefull for insulation checking.
I've got a background in physics and instrumentation so I guess I'll be skipping the Thermographer lvl1 course unless they have some special sauce I didn't know of ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 21, 2013, 01:39:56 pm
Mike and Uup, thank you both, very clear.

I'll report back once I get in and can try it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 21, 2013, 03:03:29 pm
So, spent some time to designing a holder for the E4 so I can use it to image my PCBs.
3D printed a first attempt yesterday and based on that design I made some tweaks/changes. The new version fits nicely and I created a slot to allow a velcro strap to fit through.

Sure, please post the files - who knows when they might come handy :)
But right now I'm more interested in details about the 3D-printer you're using - the resulting quality seems to be really good.

Ok, Sketchup/STL files attached. The only potentially tricky part is to find a hardware store that sells the 1/4-20 nutsert. I had a few from a bunch of years ago laying around - amazing I could remember where they were.

The 3d printer is a makerbot replicator 2. It does manage to work reasonably well most of the time (phase of the moon, goat blood etc). My initial problems were to get the print to stay 'stuck' down to the work surface. We have 2 glass sheets 1/4" thick to print on. A decent coating with cheap hair spray seems to be the 'magic' to make the initial layers stick down, if they don't, the model warps or comes off completely during the print. The other issue is that sometimes the extruder stops extruding the molten plastic - I assume the extruding tip gunks up or something - certainly the filament roll is free to rotate.

These 'home' quality printers have quite a ways to go before I would consider purchasing one. Once some 'real' companies get into the act then the quality should increase enormously. I look at current 'home' 3d printing equipment as the equivalent of the early days of inkjet printers - either super expensive high end units or consumer level stuff that had clogged inkjets 2 out of 3 times you tried to use them.

Once companies like HP, Epson, Canon, Lexmark etc get into the home 3D printing then we'll see equipment that works reliably and produces quality with durable plastics. It just requires the mainstream companies to determine whether the size of the 3d printing market is large enough to justify the R&D to provide the products - bit of a chicken & egg though.

Most printers right now use PLA which is a great plastic to 'print' with, but can be awful in terms of real world use. PLA has a glass transition point of 60C (great for printing) which means if you print something and leave it in a hot car on a summer's day it WILL deform... ABS is the other common plastic (approx 100C glass transition point), but it can be more problematic to print with and requires a heated work surface to prevent peeling/warpage. The higher end printers use various other plastics/resins and better extruders or lasers for curing/printing.

Anyhow, the 3D printing is fun and the tool flow is pretty easy. Sketchup is free and after a bit of a learning curve is pretty easy to get a model drawn up. A free plugin for Sketchup allows an STL to be created and then you have a standard file format that can be fed into the 3D printer software to slice it for printing. Hopefully in another year or two or... we'll have better consumer level AND sub $1k 3D printers available and improved higher temp plastics to choose from.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 21, 2013, 03:59:26 pm
I just noticed from the photos posted here of Taucher's menu hack, that a wifi strength bar and some other icons that possibly don't relate to the Ex cameras appear with the mod installed. Are these files from a different camera model? The menus of the Exx cameras are completely different, so I can't see it being that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 21, 2013, 04:23:31 pm
I just noticed from the photos posted here of Taucher's menu hack, that a wifi strength bar and some other icons that possibly don't relate to the Ex cameras appear with the mod installed. Are these files from a different camera model? The menus of the Exx cameras are completely different, so I can't see it being that.
Yes - there's a wifi and SD card icon, but they, along with the battery icon only appear when there is a menu onscreen so not a big deal - I'm sure they could be removed in the same way the Flir logo was.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 21, 2013, 04:45:06 pm
I've done the resolution hack but even after reading the thread from beginning to end, can't quite build up the confidence to do the menu hack.

If any of you guys have the time could you please post up a brief step by step guide. I don't quite need a 'baby walk' but a step by step on setting up the modes / connectivity prior to copying the files across with filezilla would really help in my case.

*Warning* Don't mess about with the files on your camera if you don't understand what you are doing.

Otherwise, if you just want to install Taucher's menu hack...

1. Install the RNDIS drivers on your PC. (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe))
2. Turn on RNDIS on the camera via the hidden menu (Settings>Device Settings>Camera Information - Press <right> for 10 seconds, select "USB Mode" then select "RNDIS")
3. Connect camera to PC via USB.
4. FTP to camera (eg. with FileZilla): Normal logon type, Host "192.168.0.2", user name "flir", password "3vlig"
5. Make a back-up of the files on your camera (copy files from camera to your computer into a back-up directory of your choice)
6. Copy the ADDMENU-Beta files over the files in the camera (eg. unzip the files to your computer then copy the folder "FlashBFS" from your computer over the folder "FlashBFS" in the camera - overwrite files)
7. Power-down the camera, remove battery and USB cable.
8. Re-insert battery and turn on.
9. Enjoy!  :D
 
If you don't completely understand the above instructions then it would be best to not attempt the menu hack. Better to have basic functions than :-BROKE

Thank you very much. Your step by step gave me the required confidence and the jobs done, I have new menus  :)
Thanks to every one else who has contributed as well. Hope I can repay here one day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 21, 2013, 07:09:12 pm
I'm really hoping this upcoming batch of E4s is still hackable. I purchased an i3 just before they announced the E4 and was already regretting it.  This hack improved my i3 a ton but I'd still like to purchase an E4 then try to sell off my i3 to someone I know.  I waited a bit too late before deciding to do that and shop around for an e4 though -- oops.  I tried ordering from 3 different places that assured me they had some in stock only to be later notified that they had made a mistake and already sold them all.  Very annoying... There could be a new poll option "I already had an i3 but decided I want to buy another TIC I don't need so I can make it even better"... :)  The free gift promo makes it even sweeter.  If they severely lock down after things get back in stock I'm going to be sad.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 21, 2013, 07:59:25 pm
Well I got my new toy yesterday.  20/11/13.

Calibration date 13th Nov 2013

Serial 63906XXX

Software 1.19.8

And here's the really interesting bit.  When I powered it up for the first time it came up with an error message:-

Application appcore.exe encountered a serious error and must shut down.

I had to remove the battery and then restart it to get it going.  And this was new from the factory without any hack being done.

So perhaps the report of an error message after the hack was actually just a pre-existing bug occuring.

Now I just have to get past that "new expensive toy" stage before I even consider doing the hack.  Although right now it's impressive enough as it is.  Based on Mikes original teardown I was going to be buying one anyway, even without the "boost".

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 21, 2013, 09:01:00 pm
Well I got my new toy yesterday.  20/11/13.
Congrats on obtaining your shiney new toy. :)

And here's the really interesting bit.  When I powered it up for the first time it came up with an error message:-

Application appcore.exe encountered a serious error and must shut down.  :)

I had to remove the battery and then restart it to get it going.  And this was new from the factory without any hack being done.

I got the same thing first time. I just discounted it as the Elbonian tech not doing the last step in the procedure before shipping. Combined with this being a windoze ce device, I just went  :-// and did a reboot. Worked fine after that.

Quote
Now I just have to get past that "new expensive toy" stage before I even consider doing the hack.  Although right now it's impressive enough as it is.  Based on Mikes original teardown I was going to be buying one anyway, even without the "boost".

Be sure to take extra long operating it in 80x60 condition. After that 320x240 will look awesome!  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 21, 2013, 10:01:05 pm
Holder added to thingiverse, thanks George.
Any updates to these, best to just email me direct because I don't follow this thread, so could miss them.
http://www.thingiverse.com/thing:188312 (http://www.thingiverse.com/thing:188312)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 21, 2013, 10:26:25 pm
Holder added to thingiverse, thanks George.
Any updates to these, best to just email me direct because I don't follow this thread, so could miss them.
http://www.thingiverse.com/thing:188312 (http://www.thingiverse.com/thing:188312)

Will do.
cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 21, 2013, 10:27:59 pm
I checked the dead pixels on my camera and it seems to be similar to the others that were posted. It will be interesting to see how Dave's E8 compares.

How do I do that? Sorry, I don't follow this huge thread closely.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 21, 2013, 10:33:37 pm
How do I do that? Sorry, I don't follow this huge thread closely.

See my post here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333207/#msg333207 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333207/#msg333207)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 21, 2013, 10:33:51 pm
Will anyone be making and selling those tripod mounts?

I don't have access to a printer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 10:37:58 pm
How do I do that? Sorry, I don't follow this huge thread closely.
See my post here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333207/#msg333207 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333207/#msg333207)
Also don't forget to read that post one above that linked one ( https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333205/#msg333205 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333205/#msg333205) ) - it's more fun to do it over telnet :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 21, 2013, 10:40:07 pm
I don't have access to a printer.

Same here. I'm thinking of using the ghetto style 3d printer. Also known as scrap wood + some clay. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 21, 2013, 10:50:18 pm
... it's more fun to do it over telnet :)
Heh, agreed. I use it almost exclusively through scripted telnet connection. Which is why by now the location of the usb connection is getting to be really annoying. :rant: Really, that was the best location they could come up with?  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 21, 2013, 10:56:49 pm
... it's more fun to do it over telnet :)
Heh, agreed. I use it almost exclusively through scripted telnet connection. Which is why by now the location of the usb connection is getting to be really annoying. :rant: Really, that was the best location they could come up with?  :palm:
it could be much worse... but probably it's intended as incentive generator for the wireless Exx series ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on November 21, 2013, 11:32:57 pm
does anyone know where to look to improve picture quality on i3?
jpeg compression seems to be set very high and this results in plenty of compression artifacts around menu items i.e.

(http://img834.imageshack.us/img834/9941/2le9.jpg)

this is sample picture from i3 (sensor 144x144, original jpeg is 240x240, this picture is up-scaled to 960x960 to show problematic areas - especially cross-hair as it usually is most important piece of picture)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 22, 2013, 12:03:56 am
Quote
does anyone know where to look to improve picture quality on i3?
load into Flir Tools. Then the non compressed pictures are used. If you then want a high quality picture, you need to do a screen shot or use a screen copy tool to cut out the area of interest. Of course, this is a copy from the Flir Tools screen, it will not show the icons etc. like the camera does.
See attached sample.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 12:13:36 am
Quote
does anyone know where to look to improve picture quality on i3?
If you want then a high quality picture you need to do a screen shot or use a screen copy tool.
Or the ever popular alternative, just use a decent tool:
http://www.sno.phy.queensu.ca/~phil/exiftool/ (http://www.sno.phy.queensu.ca/~phil/exiftool/)
http://u88.n24.queensu.ca/~bogdan/ (http://u88.n24.queensu.ca/~bogdan/)
http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=2750.0 (http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=2750.0)

Never tested the gui, but the original command line version is damn handy. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 22, 2013, 12:16:51 am
Please correct me if I am wrong, but I think Exif tools does not have access to the raw data stream from Flir (uncompressed sensor picture and 640x480 digicam picture). Afaik there is currently no way around to make a screen shot to have access to the non compressed data.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 12:36:04 am
Please correct me if I am wrong, but I think Exif tools does not have access to the raw data stream from Flir (uncompressed sensor picture and 640x480 digicam picture). Afaik there is currently no way around to make a screen shot to have access to the non compressed data.

Exiftool does have access to the raw data, and all sorts of meta-data. I use precisely that to extract raw image + embedded digicam pic. Think I even posted some of those waaaay back...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 12:41:21 am
Too lazy to go hunt for the old post. Instead here's a random shot with pictures extracted by exiftool.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uup on November 22, 2013, 12:41:52 am
Please correct me if I am wrong, but I think Exif tools does not have access to the raw data stream from Flir (uncompressed sensor picture and 640x480 digicam picture). Afaik there is currently no way around to make a screen shot to have access to the non compressed data.

There is a way to access the separate images. The thermal image saved by the camera is actually two embedded images in the one jpg file. The first image in the file is the processed image as seen in the LCD (with UI inclusions such as measurements, cursors, logo, etc) and the other is the unprocessed thermal image. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 22, 2013, 01:09:43 am
I installed the driver and put my camera into the suggested mode from the hidden menu, but when I try to connect to 192.168.0.2 from filezilla it fails to connect. Any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 01:39:08 am
I installed the driver and put my camera into the suggested mode from the hidden menu, but when I try to connect to 192.168.0.2 from filezilla it fails to connect. Any ideas?

I noticed that sometimes the network setup didn't go properly. In my case there was a 100% correspondence between "rndis no workey" and "that crap flir tool in the system tray (lower right area) is still running". I think it's called IRCAM somethingsomething. I always nuke that first, and then connect the camera.

I also noticed that when the camera is in a "doesn't work" state, the easiest way is just to reboot the sucker. This because sometimes when it's tried a few times and failed, you cannot be all that sure of what kind of network setup you'll get. But after a reboot + IRCAM tool out of the way you get 192.168.0.2 (camera) and 192.168.0.1 (PC) consistently.

I am of course assuming that you didn't make a booboo, and that you actually are in RNDIS mode. ;) Anyways, you can always check the network settings to see if the network adapter for your flir connection is setup properly.

The mode I found to be most useful / least problematic is RNDIS + UVC. That way you get networking and have the UVC video stream. Mass storage ... who needs it when you have ftp et al.

Hope that helps...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 22, 2013, 02:32:24 am
Excellent, I found the problem; the IP address was not 192.168.0.2 for me... it was 192.168.1.2

Now I need to play with these new settings. What known bugs are there so far?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 02:40:42 am
Excellent, I found the problem; the IP address was not 192.168.0.2 for me... it was 192.168.1.2

Out of general interest, was that after a reboot on both sides? If yes, what was the OS on the PC? Oh wait, maybe you just already have a 192.168.0.0 network, if so never mind. :P

Quote
Now I need to play with these new settings. What known bugs are there so far?

Dunno about any bugs. Mostly it seems that things are a little sluggish if you have 432439324 menu entries. Any crashiness I heard about seems to have been due to palette files which has been fixed AFAIK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 22, 2013, 08:08:30 am
Exiftool does have access to the raw data, and all sorts of meta-data. I use precisely that to extract raw image + embedded digicam pic. Think I even posted some of those waaaay back...
Thank you. I did not know that it could extract these data too.  :-+
Here is a site showing the usable commands for Flir: http://www.sno.phy.queensu.ca/~phil/exiftool/TagNames/FLIR.html (http://www.sno.phy.queensu.ca/~phil/exiftool/TagNames/FLIR.html)

I do have a question to Mrflibble. If you use the command line interface: can you please give us the flags needed to output a coloured thermal picture?
I tried out
exiftool test.jpg -rawthermalimage -b >thermal.png
exiftool test.jpg -EmbeddedImage -b >digicam.png

First line gives a black and white thermal image, second gives the digicam pic.
Probably for the coloured thermal pic some usage of the palette is needed - but what parameter are needed here? If you have them ready, you may save us some time for trying out. Thanks

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 22, 2013, 10:25:56 pm
I spoke to a Flir Agent today, all out of stock until Tuesday.
The word is Flir have fixed the "bug" in the existing firmware with a 2.0 revision on new stock   :--
I'll be in contact with them on Tuesday to see if they will check the incoming stock firmware version.

In the meantime if anyone knows of a seller with old firmware E4 in stock please let me know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 22, 2013, 11:01:18 pm
Probably for the coloured thermal pic some usage of the palette is needed - but what parameter are needed here? If you have them ready, you may save us some time for trying out. Thanks
Haven't needed it so far. If I have some time later on I'll take a look at it. Any solution I might come up with will probably involve using ImageMagick (http://www.imagemagick.org/), so if you don't have that already you may want to take a look at it. If only because it is a pretty damn awesome image processing tool.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on November 22, 2013, 11:43:58 pm
Quote
In the meantime if anyone knows of a seller with old firmware E4 in stock please let me know.

Here in Czech Republic lots of E4 in stock with 1.18 - 1.19 version firmware
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 22, 2013, 11:53:49 pm
Here's my story from the UK.

Ordered an E4 from PASS 11th Nov - was supposed to be in stock and with me next day...

Last update from PASS was on the 20th. I was told Flir keeps knocking them back on delivery dates. It was supposed to be 15th, 18th, then 19th and on 20th admitted that they don't really know what's happening - not heard anything since. Discussion in the background suggested their back order is rather large so perhaps smaller resellers ordering 1-2 at a time are getting fulfilled quicker?

Felt uneasy with PASS so decided to try elsewhere. Called 10+ companies end of last week and stumbled across a small supplier on the 14th and managed to find one in stock - result. Called back 15 mins later to do the deal and it had gone! However, they already had one on order to replenish a sale earlier in the week. Placed my order on the 15th and it arrived yesterday.

Calibration  19th Nov
Arrival        21st Nov
Model         E4 1.0
Firmware    1.19.8

I am very impressed, now looking at the world in a totally new way. Have already found lots of interesting things around the house - heat leaking all over the place and missing insulation. Superb build quality, feels great to use and the Pelican case is bomb-proof. MSX is a killer feature and apparently patented too.

By the way, Rapid Electronics in the UK appear to have some available though their website shows 1-2 weeks. I called anyway and according to the girl on the phone they get them from Conrad Electronics warehouse in Germany so take 4-5 days to the UK. Never dealt with Conrad direct but their Facebook feedback is a horror show so be careful! You should be safe with Rapid, have dealt with them for many years. Conrad's website was showing some stock on Thursday and Rapid they confimed they could see this stock available to them, but it would be 4-5 days shipping to the UK. Obviously you should double check this yourself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 23, 2013, 12:07:44 am
By the way, Rapid Electronics in the UK appear to have some available though their website shows 1-2 weeks. I called anyway and according to the girl on the phone they get them from Conrad Electronics warehouse in Germany so take 4-5 days to the UK. Never dealt with Conrad direct but their Facebook feedback is a horror show so be careful! You should be safe with Rapid, have dealt with them for many years. Conrad's website was showing some stock on Thursday and Rapid they confimed they could see this stock available to them, but it would be 4-5 days shipping to the UK. Obviously you should double check this yourself.

Word of caution re: Conrad. I bought mine there, but only because at the time they had a 10% discount + I was on time. Normally I don't buy there because 1) overpriced and 2) after-sales sucks!!(!) And you can be sure that given the current stock situation they will list it as "oh sure, we have stock", but in reality they might very well not have any actual stock. It just looks like that in the upstream supplier webservice. As far as I could trace it the warehouse in Germany gets their fill fresh out of Estonia, and the supply line is short.

I think you will have better luck with smaller outfits that are definitely NOT Conrad. I suspect with conrad what will happen is .. they tell you "yes, we have stock", followed by you paying your money followed by an agonizingly long wait because oh lookey, no stock. Or just take your chances.  :-// You'll eventually get one anyways.  ;D

So if you have a reputable seller ensuring you they will have stock because they have good info, go for it! If the information is from some random conrad phone person I would take that information with a large formation of rock salt.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 23, 2013, 12:25:02 am
I think you will have better luck with smaller outfits

Yep, the smaller guys were helpful and company i got mine from didn't even want payment until they shipped it out! Does not happen often these days.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on November 23, 2013, 03:13:20 am
I ordered one today, apparently it will be one from a recent batch from the factory, made sometime last week.  Hopefully it's still a good one, will keep in touch.  What is the possibility of downgrading a firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 23, 2013, 03:37:21 am
Quote
I ordered one today, apparently it will be one from a recent batch from the factory, made sometime last week.  Hopefully it's still a good one, will keep in touch.  What is the possibility of downgrading a firmware?

Slim I imagine. If the sole purpose of this new firmware is to eliminate hacking, I think the engineers at FLIR would block downgrading to a lower firmware -- that would be all too easy. Unlike Rigol, FLIR doesn't seem to me like an incompetent bunch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amv on November 23, 2013, 05:21:40 am
Hi all
This is my first post here
I have been watching this tread for about 3 weeks (found it because i was following the ill faited MU camera)
And for the last two weeks i have been trying to find an E4 somewhere in Europe. But i quess that you Guys, and
this tread has really drained the Continent  ;)
Well i will keep looking  :-\
But let me just say that i am really impressed by the Work you Guys have done with this really cool  toy  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 23, 2013, 08:34:02 am
Welcome
I have the same problem with the company CONRAD.DE (CONRAD.PL)
Also bought a 10% discount.
Cam they send, on Wednesday, then on Thursday, last Friday .... of course not sent. :-//
......  explain the problems they have in stock
Now I got from the President (representative office in Poland) to ensure that the camera is sent to me on Monday.

But no company has these cameras actually out of stock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 23, 2013, 09:07:17 am
Something off topic a little...

I note that the Flir can read sky temperature (how accurately, I'm not sure).

We are well into thunderstorm season here and was wondering if a thermal camera can be used to indicate the presence of sub-zero temperatures in thunderheads that will lead to hail? There's probably heaps of variables affecting this though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 23, 2013, 09:32:29 am
Open clear sky with a cheap IR thermometer reads -40 or so on a clear night, clouds measure between ambient and -5C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 23, 2013, 09:50:05 am
The gimbals have built in liquid references and can read the cloud temps much better, even more impressive is tracking of birds that you cant see in the sky !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 23, 2013, 09:57:07 am
The gimbals have built in liquid references and can read the cloud temps much better, even more impressive is tracking of birds that you cant see in the sky !
I'd guess water/couds have pretty low emissivity, and over such a long distance, attenuation through the atmosphere may also affect accuracy, however you can very clearly see clouds at night.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on November 23, 2013, 10:03:45 am
Hi Guys.Ive been reading with great fascination so I took the plunge and got an E4. Just came yesterday SW# 1.17.7
My problem is when I browse to the .fif flile i(I created) in flirtnetinstall I get this message.

(ids_illegal-file)

Heres what Im doing.(Im trying to use mikes creation from page 33)
I add my serial number to the E8.cfg at the end of  his given file and save it.
I run CRC01 E8.cfg and get the generated crc and add it exactly as it was generated under the serial number in the e8.cfg file and using the system tree he provided   
    [ flashfs\system\appcore.d\config.d\e8.cfg }i  put the new e8,cfg and the camera.cmd in the last folder.
I make it into a zip file using win zip and change it to a .fif  .( I have it on a lash drive.) I follow the rest of the procedure and get this error

A CASE OF BEER TO THE KIND SOUL WHO PUTS ME ON THE ROAD TO THERMAL IMAGING  HAPPINESS
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 23, 2013, 10:06:50 am
Right, been mucking about with raw data + applying palette. Not perfect, but reasonable enough for now.

Maybe the center of the span is not exactly as it should be. Right now I use the median, since that's available from the meta-data. But maybe something else is used by Flir.  :-// Colors are a bit different too, but that's likely due to the 324234 different YUV->RGB "standards" one can choose from. Looks like Flir uses the how-to-get-washed-out-colors YUV to RGB conversion, while I use the non-clipped range aka non-washed out colors version.

Added feature is that you not only get rid of the clutter in the original image, but you can also select different ranges and spans. Or apply a different palette. But no doubt Flir Tools does that too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 23, 2013, 10:12:37 am
Hey jlr134!

I run CRC01 E8.cfg and get the generated crc and add it exactly as it was generated under the serial number in the e8.cfg file and using the system tree he provided   
    [ flashfs\system\appcore.d\config.d\e8.cfg }i  put the new e8,cfg and the camera.cmd in the last folder.

The "camera.cmd" must be in the root directory of the zip file. So when you open the created zip file, you must see the "camera.cmd" and the folder "flashfs". That's all.
Good luck and have fun with your E8!  ;)

Greetings
stefbeer

EDIT: @ mrfibble below me: I would have been even faster but I have to proof-read everything 2-15 times before I post it. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 23, 2013, 10:13:00 am
    [ flashfs\system\appcore.d\config.d\e8.cfg }i  put the new e8,cfg and the camera.cmd in the last folder.
I make it into a zip file using win zip and change it to a .fif  .( I have it on a lash drive.) I follow the rest of the procedure and get this error

The file camera.cmd should be in the ROOT directory, so NOT in the same dir as where you put e8.cfg.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 23, 2013, 10:13:56 am
Darn you and your 23 seconds.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 10:28:48 am
Seems like EzCRC01 does not get enough attention since not linked from 1. post :)

EDIT: post 1700
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on November 23, 2013, 10:31:30 am
Guys Im running late for work and cant try it till I get home...but Im real serious about any offer of beer.
Im send a message when Im up and running and Ill get you (both) your suds.
thanks

( and I know you would have helped a guy out out regardless...but beer is beer)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on November 23, 2013, 01:37:47 pm
please also check your CRC is written in UPPERCASE letters: I got caught in...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 23, 2013, 02:53:51 pm
I have been looking at the 9 Hz image refresh rate and found the following stuff, looks like another dead end but maybe anyone else can find something.

In FlashFS\tmp\prod.log:

10 Preparation:All tasks reporting ready
11 Preparation:Image frequency 9
Using .image.flow.detector.TFpa to check tempstable


This is coming from ProdApp.exe:

0008F494                 LDR     R1, =aAllTasksReport ; "All tasks reporting ready"
0008F498                 BL      sub_Log
0008F49C                 LDR     R1, =a_image_sysi_12 ; ".image.sysimg.basicImgData.distrData.imageFreq"
0008F4A0                 ADD     R2, SP, #0x64+var_60
0008F4A4                 ADD     R0, SP, #0x64+var_24
0008F4A8                 BL      sub_Getresource
0008F4AC                 LDR     R2, [SP,#0x64+var_60]
0008F4B0                 LDR     R1, =aImageFrequency ; "Image frequency %d"
0008F4B4                 MOV     R0, R5
0008F4B8                 BL      sub_Log


which obviously reads the .image.sysimg.basicImgData.distrData.imageFreq resource:

>rls .image.sysimg.basicImgData.distrData.imageFreq
imageFreq                      9


It's even writable:

>rset .image.sysimg.basicImgData.distrData.imageFreq 1

>rls .image.sysimg.basicImgData.distrData.imageFreq
imageFreq                     1


Tried with one because that would be easier to notice than 30, but nothing changed and after a cold boot the 9 is in there again.
I could find one other reference to imageFreq, in appcore_dll.dll but this is just a const structure, so I have no idea where it is used and where it is written...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 23, 2013, 04:00:31 pm
@PA0PBZ: Have you tried to compare your findings with the software from the Exx models? Maybe the software does internally check the camera model number and overwrites the dynamic configured frame rate with the constant in appcore_dll.dll
What is the constant value in this DLL? Can this be modified and set to one?  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 23, 2013, 04:44:59 pm
@PA0PBZ: Have you tried to compare your findings with the software from the Exx models? Maybe the software does internally check the camera model number and overwrites the dynamic configured frame rate with the constant in appcore_dll.dll
What is the constant value in this DLL? Can this be modified and set to one?  ;)

I'm sorry, I was not clear enough. In appcore_dll.dll the imageFreq is not initialised, there is just a pointer for a structure that contains a lot of the distrData values:

.rdata:00173518 ; protected: static struct SI_STRUCT_METADATA_T const * const CBasicImageData::mMetaDistrData
.rdata:00173518 _mMetaDistrData_CBasicImageData__1QBUSI_STRUCT_METADATA_T__B DCD aImgname
.rdata:00173518                                         ; DATA XREF: .rdata:off_1856B8o
.rdata:00173518                                         ; "imgName"
.rdata:00173528                 DCD aDistrlive          ; "distrLive"
.rdata:00173538                 DCD aDistrrecalled      ; "distrRecalled"
.rdata:00173548                 DCD aCurglobaloffse     ; "curGlobalOffset"
.rdata:00173558                 DCD aCurglobalgain      ; "curGlobalGain"
.rdata:00173568                 DCD aRegulmethodmas     ; "regulMethodMask"
.rdata:00173578                 DCD aVisualimage        ; "visualImage"
.rdata:00173588                 DCD aFocusdistance      ; "focusDistance"
.rdata:00173598                 DCD aStripeheight       ; "stripeHeight"
.rdata:001735A8                 DCD aStripestart        ; "stripeStart"
.rdata:001735B8                 DCD aImagefreq          ; "imageFreq"

etc.


So the value of imagefreq is not initialised in this dll, I don't know where it happens. Probably something else gets the structure from the dll and uses that to initialise the values, but I don't have a cross ref for all the files yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 23, 2013, 04:55:43 pm
Looking at the strings of gethwtype.exe:

...
usage: gethwtype [-h] [-v]
       -h   Help, show this text
       -v   verbose, show additional info
Identifies FLIR hardware that this utility runs on
Shows hardware as: <type><subtype>
Known hardwares:
Qx - unknown HW
H1 - Fire camera
Y1 - T-MkII (Ylva) camera
Z3 - ASCO camera
Z2 - IVCO or ZOCO_BLUE camera
Z1 - ZOCO camera
S1 - SART camera
F1 - Liston camera
T1 - PT camera
R1 - A2 camera
X1 - Ixx
G1 - GF
P2 - P-Cam,   BACP2
P1C- P-Cam,   BACP rev >=08, UIP rev>=05
P1B- P-Cam,   BACP rev >=08, UIP rev 03/04
P1A- P-Cam,   BACP rev 07
A5B- A-Cam S, AHCO3 AND SB0601 30 Hz detector
A5A- A-Cam S, AHCO3 AND SB0601 9 Hz detector
A4B- A-Cam R, AHCO AND SB0601 30 Hz detector
A4A- A-Cam R, AHCO AND SB0601 9 Hz detector
A3B- A-Cam S, AHCO AND SB0601 30 Hz detector
A3A- A-Cam S, AHCO AND SB0601 9 Hz detector
A2B- A-Cam R, AHCO AND SB0401 30 Hz detector
A2A- A-Cam R, AHCO AND SB0401 9 Hz detector
A1B- A-Cam S, AHCO AND SB0401 30 Hz detector
A1A- A-Cam S, AHCO AND SB0401 9 Hz detector
Ex - T-Cam, unknown subtype (remote)
E4 - T-Cam, BACT2 AND ULIS detector
E3B- T-Cam, BACT2 AND SB0601 30 Hz detector
E3A- T-Cam, BACT2 AND SB0601 9 Hz detector
E2B- T-Cam, BACT AND SB0601 30 Hz detector
E2A- T-Cam, BACT AND SB0601 9 Hz detector
E1B- T-Cam, BACE rev 04-07 AND SB0401 30 Hz
E1A- T-Cam, BACE rev 04-07 AND SB0401 9 Hz
....

I suspect the appcore executes gethwtype.exe to obtain detailed camera informations.
Is it possible to run this command on the console?
I wonder what it returns on a default E4 cam.

I hope mine will get delivered soon ;)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 23, 2013, 04:59:15 pm
appcore* contains some other interesting settings:

distrData.imageMilliFreq
image.sensor.frequency

Maybe distrData.imageMilliFreq correlates with distrData.imageFreq?

9Hz could read 111ms


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 05:00:53 pm
Well, the 9Hz investigations told us that the setting must be stored in a really good location - like hardcoded in some binary place - and that's good this way:

Nobody (mentally sane) should want to force Flir to either cancel the product line or totally rework the firmware because some trade of arms law defines that a hack of 9->30 would turn the camera into a military class product, dual use stuff, ITAR etc... there are plenty of names where that stuff runs under. I can just repeat myself: I like my camera legally tradeable and non-mil-spec'ed.

Just compare it to turing a (legal) manual or semi-automatic weapon into a fully-automatic one ... that would cause trouble.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 23, 2013, 05:16:35 pm
Quote
Nobody (mentally sane) should want to force Flir to either cancel the product line or totally rework the firmware because some trade of arms law defines that a hack of 9->30 would turn the camera into a military class product, dual use stuff, ITAR etc... there are plenty of names where that stuff runs under. I can just repeat myself: I like my camera legally tradeable and non-mil-spec'ed.

I think FLIR was smart to ensure the framerate could not be modified; however, I personally would love to have an illegal, mil-spec, big daddy thermal camera. Plus I don't think it would be illegal to process, just to transport out of its country of origin. I deal with enough ITAR documents at work to know just how stupid the whole system is. I mean, I could have purchased an Exx camera that is 60Hz -- what's the difference?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 23, 2013, 05:17:43 pm
Well, the 9Hz investigations told us that the setting must be stored in a really good location - like hardcoded in some binary place - and that's good this way:

Nobody (mentally sane) should want to force Flir to either cancel the product line or totally rework the firmware because some trade of arms law defines that a hack of 9->30 would turn the camera into a military class product, dual use stuff, ITAR etc... there are plenty of names where that stuff runs under. I can just repeat myself: I like my camera legally tradeable and non-mil-spec'ed.

Just compare it to turing a (legal) manual or semi-automatic weapon into a fully-automatic one ... that would cause trouble.
I have no doubt that questions will have been asked inside Flir about how well locked down the framerate is, and if it was vulnerable, I think they would have stopped shipping units until it was fixed, as it wouldn't be difficult to nail down an internal FPGA setting. We've been seeing units that have left the factory weeks after they must have been aware of the hack. 

And don't forget that at 60fps with that small lens, the noise level would make the high-framerate performance pretty poor, though there may be some intermediate framerates that might be a useable compromise between noise and image quality.
The lens housing design would make it quite hard to add a bigger lens. If this wasn't the case it may have been worth someone investigating writing a completely new FPGA design, however such efforts would probaby be better directed at the automotive units, which are smaller, available more cheply (used) and have a much better lens. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 23, 2013, 05:18:11 pm
Maybe you will get checked against Anti-Terror database and have to fulfil a security audit in order to receive the 60Hz camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 23, 2013, 05:25:43 pm
I may be missing the obvious but what exactly is it that 'they' are scared villains may do with a 60fps TIC?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 05:26:33 pm
I think FLIR was smart to ensure the framerate could not be modified; however, I personally would love to have an illegal, mil-spec, big daddy thermal camera. Plus I don't think it would be illegal to process, just to transport out of its country of origin. I deal with enough ITAR documents at work to know just how stupid the whole system is. I mean, I could have purchased an Exx camera that is 60Hz -- what's the difference?
I guess that discussion could end in an analogy to "why would it be illegal to build or posess nuclear weapons", a private M1 tank, fully loaded etc... I guess it would be really cool to own a M1 ... until your neighbour targets it with Hellfire rockets from his Apache...

ok... a bit overdramatization - what I wanted to say: it's the law - if you dislike it, then write to your legal representatives at the government or get some lobbyist funding :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 05:29:10 pm
I may be missing the obvious but what exactly is it that 'they' are scared villains may do with a 60fps TIC?
probably the same reasons you're disallowed to sell outer-space-grade climate chambers... build a rocket... (I guess that's another reason for limiting temperature-span - space is pretty cold)... test rocket or weapon parts... hell knows what else...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 23, 2013, 05:37:04 pm
Hmm, hopefully just a coincidence, but after following all the instructions and making the .fif file with the tree and camera files in it, I'm getting a (IDS_FILE_FORMAT_ERROR) error.

I take it that while CRC01 is case sensitive it's OK to have the checksum itself with the alpha characters in lower case?
Is there a specific name that should be used for the fif file?
Is it because I'm using notepad to edit the serial and checksum numbers?  (being wary of the CR/LF issue)

I'll maybe try from scratch again later.  I'm still a bit wary of knackering a new and expensive toy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 23, 2013, 05:44:50 pm
Hmm, hopefully just a coincidence, but after following all the instructions and making the .fif file with the tree and camera files in it, I'm getting a (IDS_FILE_FORMAT_ERROR) error.

I take it that while CRC01 is case sensitive it's OK to have the checksum itself with the alpha characters in lower case?
Is there a specific name that should be used for the fif file?
Is it because I'm using notepad to edit the serial and checksum numbers?  (being wary of the CR/LF issue)

I'll maybe try from scratch again later.  I'm still a bit wary of knackering a new and expensive toy.

Notepad is ok, its what I used.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 05:45:08 pm
I'll maybe try from scratch again later.  I'm still a bit wary of knackering a new and expensive toy.
Check out my footer:
Ez-CRC01: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 23, 2013, 05:57:58 pm
I may be missing the obvious but what exactly is it that 'they' are scared villains may do with a 60fps TIC?
Night vision gunsights and and heat-seeking missiles
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 23, 2013, 06:09:15 pm
I may be missing the obvious but what exactly is it that 'they' are scared villains may do with a 60fps TIC?
Night vision gunsights and and heat-seeking missiles

I see. I would have thought that guns, ammunition and rocket fuel would be harder to come by and easier / more practical to control than a 60fps TIC ?

Mind you the Americans have some strange regs. I recently bought a Surefire Helfighter spotlight and the vendor had to remove the IR filter that it was fitted with before shipping it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 06:31:49 pm
Mike:
I think I managed to identify the compass-chip used in the higher series: HMC5843 or HMC5883 .. is there any free place on the PCB matching that IC?
Quote
Honeywell's HMC5843, a 3-axis digital magnetometer designed for low-field magnetic sensing. The sensor has a full-scale range of ±4 gauss and a resolution of up to 7 milli-gauss.
Supplied voltage should be between 2.5 and 3.3VDC.
Communication with the HMC5843 is simple and all done through an I2C interface. All registers and operating modes are well described in the datasheet below.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 23, 2013, 07:01:08 pm
Night vision gunsights and and heat-seeking missiles

Yes, but surely that would still work at 9Hz if the missile slowed down to walking pace when it got to within a few metres of its target and instructed the target to remain stationary.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 07:02:29 pm
WLAN Chip: something related to: RT28701 ... P3221 / P3001
but probably needs some wlansettings.exe in FlashFS ... which is not easily available either...



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 23, 2013, 07:26:12 pm
I've just trimmed this post down to hide my incompetence.

It's worth mentioning that the error (IDS_FILE_FORMAT_ERROR) may indicate that you have inadvertently put a folder containing the two files inside the zipped folder instead of just the files on their own.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on November 23, 2013, 07:44:20 pm
OK, I screwed up.  I didn't realise that I was putting a folder into the zipped folder.  I just applied the modification and my camera is now full resolution.

That was quite a neat little script Taucher.  It was a lot easier than doing it the original way.

So thanks guys.  My apologies if I made anyone think FLIR had already taken measures to prevent the upgrade.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mtdoc on November 23, 2013, 09:12:01 pm
I ordered mine from Tequipment.net yesterday (yeah EEVblog discount!).   

At the time I ordered, their web page showed 4 in stock - then 3 in stock after my order.   Today it shows 62 in stock!  :wtf: New shipment?  Hopefully mine will still be hackable...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 23, 2013, 11:04:18 pm
Look what showed up in my website log... Might be interesting to do the same filter search Chez Dave....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on November 23, 2013, 11:13:36 pm
Thank you STEFBEER and MR.FLIBBLE for your help. Because of you I have a brand new baby E8.
( I believe I owe you some beers)
And thanks to Mike , Ive been a fan for a long while
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 23, 2013, 11:16:46 pm
Mike, can you somehow evaluate the referrer of those hosts / hits? Maybe there's something useful in the URL of the referrer (even if it's just in their Intranet)?

@ jlr134: You're very welcome! :) Glad to see you made it in the E8 club ;) And for my part you don't owe me a beer, I'm not much of a beer drinker ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 23, 2013, 11:18:56 pm
Look what showed up in my website log... Might be interesting to do the same filter search Chez Dave....
Long time no visit... maybe when they shipped you the softcase? ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ullki on November 23, 2013, 11:33:21 pm
Dare I atempt a joke in my very first post?

I'm not much of a beer drinker ;D
you need to check your profile, it seems as if you have entered the wrong country of origin ;)



OnT: Successfully upgraded my E4 to an E8, many thanks to all of you making this possible! Now contemplating if I should go for E8+, am I correct that you then have to accept some bugs / hanging GUI etc?

I'm now cheering thankfully to Flir HQ (well to the trees hiding it from the highway) when I pass there on my way to work. Maybe I should stop some day and take a pic of their entrance, 320x240 of course!

/U
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 24, 2013, 12:33:14 am
Finally got my E8 today!

Dave, that's great - at least now we have somebody who has one of those astro-priced cams to check the dead pixel map for comparison!
This way we can find out if the E4's just get the worst "dead pixel count sensors" ... or not :)  :-/O

I'm also interested in the default config files of that cam - just for a small "diff" :)

It would be interesting to look through the whole filesystem. :)

And even more interesting on an Exx. :D

Have been playing around today and now realise how important it is to have manual control over the temperature span and variety of palettes especially for building problems.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 24, 2013, 12:47:29 am
I ordered mine from Tequipment.net yesterday (yeah EEVblog discount!).   

At the time I ordered, their web page showed 4 in stock - then 3 in stock after my order.   Today it shows 62 in stock!  :wtf: New shipment?  Hopefully mine will still be hackable...

I was told they got 75 on Friday
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 24, 2013, 02:05:03 am
I'm also interested in the default config files of that cam - just for a small "diff" :)
It would be interesting to look through the whole filesystem. :)

And even more interesting on an Exx. :D

Indeed! It would be interesting to see the differences for the .exe + .dll files, as well as the various configuration files. And definitely for any of the Exx series. No need for any "private" files with camera specific information, just the generic stuff I listed would be extremely interesting already.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 24, 2013, 06:04:03 am
I think FLIR was smart to ensure the framerate could not be modified
Keep in mind that the sensor itself is capable of 60Hz operation so any 'terrorists" could easily extract it from the camera and incorporate it into their own systems... and I think anyone who wanted to would've done it already, long before Mike even reviewed the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 24, 2013, 07:19:41 am
Keep in mind that the sensor itself is capable of 60Hz operation so any 'terrorists" could easily extract it from the camera and incorporate it into their own systems...

More than that, they could just tap off the raw 60FPS serial data pin Mike found. No need to pull the sensor out at all.

It will be interesting to see just what this raw data looks like on a screen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 24, 2013, 08:43:44 am
Indeed! It would be interesting to see the differences for the .exe + .dll files, as well as the various configuration files. And definitely for any of the Exx series. No need for any "private" files with camera specific information, just the generic stuff I listed would be extremely interesting already.

The .exe and .dll files are the same for all Ex models, and there is very little difference between the Ex and Exx series. If I remember correctly the Exx has an extra mediaserver.exe but that's about it, 99% the same. You can download the firmware update from the Flir website and have a look yourself.
But the model specific .cfg files, yes that would be interesting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 24, 2013, 10:25:53 am
You can download the firmware update from the Flir website and have a look yourself.
But the model specific .cfg files, yes that would be interesting.
I did just that waaaay at the beginning of this thread somewhere, but the firmware image doesn't contain everything...

And another reason for asking for a dump of all those exe + dll etc, is that the files on someone's version XYZ firmware tend to be a different version than the one single magic version Flir happens to have available for download. That goes for the E4 as well as far as I am concerned. Having a look at the various exe/dll's for different firmware versions of the Ex might be interesting.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 24, 2013, 01:42:31 pm
So here is my E30 conf.cfg
some entries needs help, please have a look
.caps entry
.caps.config entry
.caps.config.name text "app E30_B"
.caps.config.revision text "1.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool false
.caps.config.image.framegrab entry
.caps.config.image.framegrab.visual entry
.caps.config.image.framegrab.visual.enabled bool true
.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool false
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.downsample bool true
.caps.config.image.settings.resIR int32 160
.caps.config.image.settings.resVIS int32 1600
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool false
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool false
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 0
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool false
.caps.config.image.sysimg.alarms.humidity.maxCount int32 0
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool false
.caps.config.image.sysimg.alarms.insulation.maxCount int32 0
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool false
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool false
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool false
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool false
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 90
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool false
.caps.config.image.zoom.maxFactor double 1
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool false
# ID 490xxxxx

and these :scared:
.caps entry
.caps.config entry
.caps.config.name text "GUI E30_B"
.caps.config.revision text "1.1"
.caps.config.IIG entry
.caps.config.IIG.enabled bool true
.caps.config.IIG.DC int32 1
.caps.config.IIG.IR int32 1
.caps.config.IIG.canvasSketches int32 0
.caps.config.IIG.IRImageSketch bool false
.caps.config.IIG.DCImageSketch bool false
.caps.config.IIG.textAnnotations int32 0
.caps.config.IIG.videos int32 0
.caps.config.IIG.voiceAnnotations int32 0
.caps.config.IIG.objects int32 1
.caps.config.image entry
.caps.config.image.enabled bool true
.caps.config.image.adjust entry
.caps.config.image.adjust.enabled bool true
.caps.config.image.adjust.auto bool true
.caps.config.image.adjust.interval bool true
.caps.config.image.adjust.above bool false
.caps.config.image.adjust.below bool false
.caps.config.fusion entry
.caps.config.fusion.enabled bool false
.caps.config.fusion.thermal entry
.caps.config.fusion.thermal.enabled bool false
.caps.config.fusion.thermal.auto bool false
.caps.config.fusion.thermal.interval bool false
.caps.config.fusion.thermal.above bool false
.caps.config.fusion.thermal.below bool false
.caps.config.fusion.PIP entry
.caps.config.fusion.PIP.enabled bool false
.caps.config.fusion.PIP.locked bool false
.caps.config.laser entry
.caps.config.laser.enabled bool true
.caps.config.laser.positionMarker bool false
.caps.config.measure entry
.caps.config.measure.enabled bool true
.caps.config.measure.emissivityTable entry
.caps.config.measure.emissivityTable.enabled bool true
.caps.config.measure.externWindow entry
.caps.config.measure.externWindow.enabled bool true
.caps.config.measure.localObjectParams entry
.caps.config.measure.localObjectParams.enabled bool false
.caps.config.measure.screening entry
.caps.config.measure.screening.enabled bool false
.caps.config.mode entry
.caps.config.mode.enabled bool true
.caps.config.mode.program bool false
.caps.config.mode.panorama bool false
.caps.config.mode.video bool false
.caps.config.mode.radiometricVideo bool false
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.presets bool false
.caps.config.save entry
.caps.config.save.enabled bool true
.caps.config.save.simultaneous bool true
.caps.config.save.fastShoot bool false
.caps.config.report entry
.caps.config.report.enable bool false
.caps.config.report.createPdf bool false
# ID 490xxxxx
and that :box:
#
# Appservices wlan configuration
#
.caps entry
.caps.config entry
.caps.config.name text "srvs E30_B"
.caps.config.revision text "1.1"
.caps.config.wlan entry
.caps.config.wlan.enabled bool false
.caps.config.bluetooth entry
.caps.config.bluetooth.enabled bool false
# ID 490xxxxx

please post your E60 ideas thx
all false into true? the "maxCount int32 xx" is also intersant :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 24, 2013, 01:55:13 pm
Quote
What the hell! Look at dead pixels of my E4! E4 get all the bad sensors.

I thought I recognized that photo, haha. Don't worry about the dead pixels too much though; Mike's camera had a lot as well, and the camera takes perfectly fine thermal images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 24, 2013, 02:04:49 pm
Thanks mrfibble, works great!
What the hell! Look at dead pixels of my E4! E4 get all the bad sensors.  :--

The dead pixels make me smile. You would think that as technology advances we are getting better and better at increasing yield but more often it seems to be about finding creative ways to cover up the mistakes. Turn silicon that would have gone in the bin saleable with a few lines of code to interpolate nearby pixels, an accountant's dream. :) You should see how much fudgery goes on in DSLR's!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 24, 2013, 02:10:15 pm
Quote
You should see how much fudgery goes on in DSLR's!

That's nothing -- try headphones!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 24, 2013, 02:11:28 pm
Dare I atempt a joke in my very first post?
OnT: Successfully upgraded my E4 to an E8, many thanks to all of you making this possible! Now contemplating if I should go for E8+, am I correct that you then have to accept some bugs / hanging GUI etc?
I'm now cheering thankfully to Flir HQ (well to the trees hiding it from the highway) when I pass there on my way to work. Maybe I should stop some day and take a pic of their entrance, 320x240 of course!
@pic - that would surely be funny :)
@menu: I have just little to no negative feedback on beta2 - if at all then the delta measuring modes are laggy - and the hack is revertable (just keep a backup for the overwritten files) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 24, 2013, 02:14:06 pm
So here is my E30 conf.cfg
-snip-
please post your E60 ideas thx
all false into true? the "maxCount int32 xx" is also intersant :-//
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 90

I'd disable that one ... Note: I'm not aware of the main differences between E30 and E60 ... and too lazy to compare them.
Don't just blindly enable anything!


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 24, 2013, 02:30:04 pm
So here is my E30 conf.cfg
-snip-
please post your E60 ideas thx
all false into true? the "maxCount int32 xx" is also intersant :-//
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 90

I'd disable that one ... Note: I'm not aware of the main differences between E30 and E60 ... and too lazy to compare them.
Don't just blindly enable anything!



Yes thank you Taucher, picture is to noisy now, I think they do the temperature sensivity with that!
In the service mode resIR is 320!! and noise is 0 :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on November 24, 2013, 09:55:29 pm
Hi,

What would be really nice would be a picture of the internals of the E30.
I would like to know if it's the same PCB than the E4, and if so, maybe we can find out which wireless module they use and add that to the E4

uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tecman on November 25, 2013, 12:06:01 am
So here is my E30 conf.cfg
-snip-
please post your E60 ideas thx
all false into true? the "maxCount int32 xx" is also intersant :-//
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 90

I'd disable that one ... Note: I'm not aware of the main differences between E30 and E60 ... and too lazy to compare them.
Don't just blindly enable anything!



Yes thank you Taucher, picture is to noisy now, I think they do the temperature sensivity with that!
In the service mode resIR is 320!! and noise is 0 :-DD

Funzt:

What entries did you change ?

paul
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 25, 2013, 08:06:35 am
Need help |O

the crc01.exe doesnt work anymore????
it responds:
"[!] Unable to open this file"

I cecked everything CRLF is OK, ... what is going on? Yesterday it works fine! But today |O
I extract the e4hack3b files again and again, but only one answer:
"[!] Unable to open this file"
I checked with the original untouched E8.cfg --> but the same answer: "[!] Unable to open this file"

please help me :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 25, 2013, 08:22:05 am
"[!] Unable to open this file"
please help me :-//
you need to learn about windows file locking mechanisms and to be more precise which programs tried to open the file.
also if you're working on a network drive about security zones ... and last but not least: reboot and/or close open processes
suggestion: try my EzCRC01 (see footer)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 25, 2013, 09:51:13 am
Does anyone in Europe received the Flir E4 from the company conrad.de (and web pages Conrad.xx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on November 25, 2013, 09:55:44 am
Does anyone in Europe received the Flir E4 from the company conrad.de (and web pages Conrad.xx)

Not exactly the same, but the same warehouse, I bought and received one from conrad.nl
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 25, 2013, 10:11:07 am
"[!] Unable to open this file"
please help me :-//
you need to learn about windows file locking mechanisms and to be more precise which programs tried to open the file.
also if you're working on a network drive about security zones ... and last but not least: reboot and/or close open processes
suggestion: try my EzCRC01 (see footer)
thx Taucher
I put my E60 file as template.cfg in your great EzCRC01-V01-static
and that works!!! :clap:
and my E30 accepted it -->  :-+
now work with ui.d and wlan.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ullki on November 25, 2013, 12:18:46 pm
Turned off the highway this morning and took this photo of the Flir office right north of Stockholm, where I understood that my camera is "designed and engineered", and where they come up with passwords like 3vlig, thank you Flir for making it possible for me to own a 320x240 TIC!

This is MSX@320x240, when I look at it in pure termal image, it's apparent that I need to go for the T-series ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 25, 2013, 12:51:52 pm
Really, 320x240 is still only thumbnail resolution. Soon, thermal cameras will not only be sold as tools, but as toys -- 20 megapixel thermal cameras will be sold at Wal-Mart for a few hundred dollars. It might take a decade, but it will happen eventually.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on November 25, 2013, 01:48:32 pm
Turned off the highway this morning and took this photo of the Flir office right north of Stockholm, where I understood that my camera is "designed and engineered", and where they come up with passwords like 3vlig, thank you Flir for making it possible for me to own a 320x240 TIC!

This is MSX@320x240, when I look at it in pure termal image, it's apparent that I need to go for the T-series ;)

Ah! This is great! I hope they don't take this as an insult, we all love FLIR and this photo proves the influence of this forum on the electronics industry, great job ullki.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on November 25, 2013, 02:01:06 pm
Turned off the highway this morning and took this photo of the Flir office right north of Stockholm, where I understood that my camera is "designed and engineered", and where they come up with passwords like 3vlig, thank you Flir for making it possible for me to own a 320x240 TIC!

This is MSX@320x240, when I look at it in pure termal image, it's apparent that I need to go for the T-series ;)

I thought the floors and some of the chairs in there would have been a LOT hotter...  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 25, 2013, 02:12:21 pm
Quote
I thought the floors and some of the chairs in there would have been a LOT hotter...

Actually, the thermal camera cannot see through the glass. It's only the MSX outlines (from the regular camera) of the chairs etc inside the building that you are seeing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 25, 2013, 04:30:16 pm
Quote
I thought the floors and some of the chairs in there would have been a LOT hotter...

Actually, the thermal camera cannot see through the glass. It's only the MSX outlines (from the regular camera) of the chairs etc inside the building that you are seeing
If you were a thermal imaging comany, wouldn't it be fun to have a logo on your building that was only visible through a TIC... ;D

..or on a smaller scale, how about some T-shirts printed in inks with different emissivities, with logos you can only see with a TIC...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tim_h on November 25, 2013, 04:36:35 pm
Received my camera today :) from Alpha Electronics Maidstone UK. Camera is made in Estonia.

SW version 1.19.8
Calibration date: November 22 2013.

Just installing FLIR tools...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cyr on November 25, 2013, 05:24:48 pm
If you were a thermal imaging comany, wouldn't it be fun to have a logo on your building that was only visible through a TIC... ;D

Perhaps the FLIR guys could borrow this tech (also developed in Sweden):

BAE's Adaptive Camouflage (https://www.youtube.com/watch?v=wlLqdFsMnCE#ws)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 25, 2013, 05:28:13 pm
It looks like the rumors about FLIR making the E4 "hack-proof" are just that - rumors. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on November 25, 2013, 07:09:00 pm
testing firmware takes time, they wouldn't want to rush out some crappy firmware, that would be extremely bad advertisement.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on November 25, 2013, 07:45:40 pm
How's the Linux-based E4->E8 transition looking?  mrflibble posted the autohack https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051) but things on the Windows side seem to have advanced quite a bit since then.  And it doesn't have a README.

So, should I go with the flow and set up a one-time Windows VM?  Or should I go for glory on Linux (which I expect would require re-reading everything posted since around page 50...?)

Gotta say, this camera has already been surprisingly useful.  Looking forward to when they cost $200 and everyone has one.
Title: Flir E4 Thermal imaging camera teardown
Post by: ullki on November 25, 2013, 08:04:30 pm

Turned off the highway this morning and took this photo of the Flir office right north of Stockholm, where I understood that my camera is "designed and engineered", and where they come up with passwords like 3vlig, thank you Flir for making it possible for me to own a 320x240 TIC!

This is MSX@320x240, when I look at it in pure termal image, it's apparent that I need to go for the T-series ;)

Ah! This is great! I hope they don't take this as an insult, we all love FLIR and this photo proves the influence of this forum on the electronics industry, great job ullki.

Indeed, maybe I should be explicit about that: This was by no means meant as an insult but rather as a tribute, to all you Flir employees out there: you make (well develop) some awesome hardware inside that glass facade, thank you very much! I'm now* a proud Flir TIC owner and will try my best to promote your products!

* Yes, I'm not a lost E8 customer but rather a gained new customer that only went for the E4 due to the upgrade-ability, so you made an additional $1000 on me (actually, in Sweden it's considerably more expensive than that, must be very costly to ship it across the Baltic Sea ;) )

/U
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on November 25, 2013, 09:15:16 pm
will knot soon if last batch of 62 unit on tequipment was 1.2.x or not  ;D

To Be Shipped
Estimated Ship Date: 11/26/2013
(1 day)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 25, 2013, 09:16:46 pm
How's the Linux-based E4->E8 transition looking?  mrflibble posted the autohack https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051) but things on the Windows side seem to have advanced quite a bit since then.  And it doesn't have a README.

So, should I go with the flow and set up a one-time Windows VM?  Or should I go for glory on Linux (which I expect would require re-reading everything posted since around page 50...?)

Gotta say, this camera has already been surprisingly useful.  Looking forward to when they cost $200 and everyone has one.
I'm sure if you ask nicely someone will CRC01 a file with your serial number, but it shouldn't be a problem for anyone who speaks Linux or Mac to recompile the CRC01 source
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 25, 2013, 09:17:36 pm
will knot soon if last batch of 62 unit on tequipment was 1.2.x or not  ;D

To Be Shipped
Estimated Ship Date: 11/26/2013
(1 day)
Now 51.... still flying off the shelves!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 25, 2013, 09:26:20 pm
I have a feeling FLIR is creating rumors of the "fix" to get people to buy more E4's. :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on November 25, 2013, 09:54:27 pm
i found the great Mike tread just this week end
and when buy my saturday have 60 left

so yup may have a rush before to late ;-0  ,or it fault of santa claus

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on November 25, 2013, 09:56:57 pm
i found the great Mike tread just this week end
and when buy my saturday have 60 left

so yup may have a rush before to late ;-0  ,or it fault of santa claus

almost hope it 1.2 just for the fun  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 25, 2013, 10:17:33 pm
I just wanted to share a tip for a nice little focus tool: an automotive fuse! For macro thermal vision I just turn it CC half a turn to almost a full turn. Fine tuning is only a matter of going closer or further away with my E4-8.
Some hot shots to lighten up this great forum:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 25, 2013, 10:20:32 pm
How's the Linux-based E4->E8 transition looking?  mrflibble posted the autohack https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333051/#msg333051) but things on the Windows side seem to have advanced quite a bit since then.  And it doesn't have a README.

So, should I go with the flow and set up a one-time Windows VM?  Or should I go for glory on Linux (which I expect would require re-reading everything posted since around page 50...?)

Gotta say, this camera has already been surprisingly useful.  Looking forward to when they cost $200 and everyone has one.


You can run the original crc01.exe under wine. It worked fine for me, gave me the same CRC as it did running under Win 7.

What would really be useful is for someone to set up a VM with Win 7 in it and do a packet capture (WireShark) of the transactions that occur over the USB/Ethernet when the flir drivers talk to the RNDIS DHCP server on the camera.
I've tried setting a linux pc up with a static address of 192.168.0.1 and 192.168.1.1 (both of which I've seen my Win7 PC get from the camera) to no avail. I'm thinking that the flir drivers are using a non-standard port for DHCP or some other magic handshake with the camera. WireShark under native Win 7 will not capture USB transactions.
It would really be nice to be able to talk to the camera via telnet/ftp/http from linux.

I haven't seen this mentioned before (but may have missed it). Point your web browser at the IP of the camera when connected via RNDIS... Quite a lot of info there, but be carefull!!! don't do any fiddling with the calibration pages, or things might get upset.

Again, many heartfelt thanks to Mike and all the others that contributed to this hack.

   ...ken...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 25, 2013, 11:25:15 pm
What would really be useful is for someone to set up a VM with Win 7 in it and do a packet capture (WireShark) of the transactions that occur over the USB/Ethernet when the flir drivers talk to the RNDIS DHCP server on the camera.
I've tried setting a linux pc up with a static address of 192.168.0.1 and 192.168.1.1 (both of which I've seen my Win7 PC get from the camera) to no avail. I'm thinking that the flir drivers are using a non-standard port for DHCP or some other magic handshake with the camera. WireShark under native Win 7 will not capture USB transactions.
It would really be nice to be able to talk to the camera via telnet/ftp/http from linux.

I would probably dig through docs on the RNDIS standard. From what i remember RNDIS emulates a point to point ethernet link that appears to an OS as ethernet, but the lower layers are fudged - at least that's the way i think of it. If you do a release/renew the RNDIS adaptor gets upset and will not get a new IP, probably does not support this. You have to unplug-replug to restore connectivity. Like i say the lower layers are fudged because there will only ever be two hosts on the "network".

Google for "[MS-RNDIS].pdf"

I had a go anyway with Wireshark, it's tricky to sniff what is happening because the RNDIS interface is not available until the camera is plugged in. However if you are quick you can capture some initial traffic. The camera appears to offer an address to itself, the source MAC appears to be from an unknown vendor - will send you the grab if you like.

I used to use a program called "USB Trace" years ago do do USB sniffing, was playing with an FTDI USB Host module at the time. Looks like it is still around, http://www.sysnucleus.com/ (http://www.sysnucleus.com/). This was great because you could set it running and watch the whole init process as you plugged a device in and of course pick through the protocol.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 25, 2013, 11:30:04 pm
Quote
What would really be useful is for someone to set up a VM with Win 7 in it and do a packet capture (WireShark) of the transactions that occur over the USB/Ethernet when the flir drivers talk to the RNDIS DHCP server on the camera.
Not sure why this would be particularly useful, compared to  rev-enging the protocol they use for firmware updates over USB UVC, as that would be a more likely way in if RNDIS got disabled as a hack countermeasure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 25, 2013, 11:52:07 pm
Mike,
That would certainly be useful as well, and would require the same USB sniffing/recording setup as figuring out the RNDIS DHCP. Time will tell as to what version 1.2.? will bring.

MrSquirrel,
I'd like to see the dump you got, may give me some ideas. Thanks..

I had gotten the MS-RNDIS .pdf a while ago and at first read, it's DHCP seemed like it should work with a linux client. But I will read it again.

I haven't set up a VM with Win 7 for lack of Win 7. I ran it on my desktop for the first time since I bought the box, just to update my E4 to E8+. I took many hours to update Win 7 before I could begin installing the flir tools.
I might try Win 7 again to use the "USB Trace" program.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 25, 2013, 11:58:44 pm
Quote
What would really be useful is for someone to set up a VM with Win 7 in it and do a packet capture (WireShark) of the transactions that occur over the USB/Ethernet when the flir drivers talk to the RNDIS DHCP server on the camera.
Not sure why this would be particularly useful, compared to  rev-enging the protocol they use for firmware updates over USB UVC, as that would be a more likely way in if RNDIS got disabled as a hack countermeasure.

I've been doing some reversing on the USB protocol, but I stopped. Amusingly enough exactly with the above setup, not sure if I mentioned it somewhere. win7-64 in a virtualbox. That's how I applied the E8 hack as well. That's also how I run my telnet scripts. win7 guest sets up the link, and then I ssh tunnel to the linux guest. That way you have the ports of the flir available on your linux localhost. I would have preferred using native rndis on linux directly to the flir, but that was a nogo. I'm pretty sure I  :rant: about that, because it's damn annoying. I hope it's just a matter of me using an old kernel or me being stupid. That way there should be an easy fix for it.

Oh yeah, tip du jour when setting up rndis etc in vm... I get the best results when I killed the IRCAM somethingsomething in the system tray. You get that one after you install the Flir RNDIS drivers. So the low level drivers are okay, but the "handy tool" only gets in the way...

I was busy reversing the command protocol over UVC, but then I decided that using the camera through telnet+ftp interface made a bit more sense in terms of flushing time.  ;D

So on the linux side it would be more productive to get rndis working. Or maybe it's already working for you because you have  a more recent kernel and/or I am being silly.

As in for the functionality, having rndis working properly without needing a VM would be action #1. After that a libusb based tool to do commands/updates over UVC would be #2 IMO. Too bad that for me right now #0 is "Use Camera" and other non-E4 related things. :P

Oh yeah, re VM ... you obviously have to pass the USB device through to the VM. I think I listed the various USB ID's somewhere earlier on... I'll just paste it here...
Code: [Select]
MSD                   : 09cb:ffff
UVC                   : 09cb:1004
RNDIS                 : 09cb:1002
RNDIS and UVC         : 09cb:1005
RNDIS and MSD         : 09cb:1006
UVC and MSD (standard): 09cb:1007
RNDIS, UVC and MSD    : 09cb:1005

Re: RNDIS + DHCP... From the win7 guest this is working. When using native rndis on linux I can see the USB payloads for a dhcp request going from linux box to flir. Payload looks proper (using wireshark to snoop usb traffic). However, no return URBs from flir. So it's silently dropping those because it hasn't seen the proper handshake yet.

After a couple more tries I went a screw it, and telnet through the VM. After all, there are thermal images to be made...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 26, 2013, 12:26:37 am
mrflibble,

I tried the camera on several different kernels,
3.5.?      x86 Linux Mint
3.8.13    Arm Cortex A8 Angstrom
2.6.31    x86-64 Ubuntu 9.10
3.8.0      x86-64 Ubuntu 13.04

All had the same (lack of) DHCP performance.
When I ran WireShark on Ubuntu 13.04 I could see the USB data encapsulating the Ethernet DHCP requests when I monitored the USB interface, I could also monitor the "derived" Ethernet interface and see DHCP requests going over to the camera, but nothing coming back.
Googling rndis ,linux, WinCE 6 gets lots of hits on people using linux to talk to WinCE devices via RNDIS. Sooo, I think it is possible, there is just something about the flir WinCE build.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 26, 2013, 12:41:06 am
All had the same (lack of) DHCP performance.
When I ran WireShark on Ubuntu 13.04 I could see the USB data encapsulating the Ethernet DHCP requests when I monitored the USB interface, I could also monitor the "derived" Ethernet interface and see DHCP requests going over to the camera, but nothing coming back.
Googling rndis ,linux, WinCE 6 gets lots of hits on people using linux to talk to WinCE devices via RNDIS. Sooo, I think it is possible, there is just something about the flir WinCE build.
Exactly all of that, yes. :)

Like I said, you see the DHCP request (encapsulated in URB) going to the flir, but the E4 never even sends an acknowledge of the URB. Almost as if it is just not servicing that endpoint. Although it probably is, but just silently dropping it.

I have also tried static ip + route + arp, but no dice. So my suspicion is that Flir did something not 100% standard in their rndis drivers. Oh and on kernel 3.3.4 it doesn't work either.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 26, 2013, 01:08:39 am
So here is an interesting point, when I connected my E4 to my Win 7 PC, that already had an ethernet connection to my 192.168.0.x network, the new ethernet interface created when the camera was connected got 192.168.1.1. So the camera must have exchanged enough data with the PC to realize that the 192.168.0.x net was already in use. Just like DHCP should be behaving. This is why I think sniffing that interface while Win 7 + flir drivers negotiate the DHCP lease will be enlightening.
BTW if i disabled the 192.168.0.x ethernet interface before connecting the camera, the usb-->camera "ethernet" then got 192.168.0.1.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 26, 2013, 01:12:24 am
Here is the DHCP capture file. You always get that malformed packet which seems to confuse Windows initally.

I don't know the Linux equivalent but there are Windows command line tools (i forget the name of) you can use to "replay" packets captured in a Wireshark grab back out an interface.  That is sometimes useful when debugging when you have a known good trace.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 26, 2013, 02:52:31 am
Here is the DHCP capture file. You always get that malformed packet which seems to confuse Windows initally.

I don't know the Linux equivalent but there are Windows command line tools (i forget the name of) you can use to "replay" packets captured in a Wireshark grab back out an interface.  That is sometimes useful when debugging when you have a known good trace.


Thanks...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on November 26, 2013, 09:04:24 am
Does anyone in Europe received the Flir E4 from the company conrad.de (and web pages Conrad.xx)

Ordered at 11/08 and received my E4 on 11/18 from conrad.de, calibration date 11/13, firmware 1.19.8. They got some stock on 11/14 and dispatched my unit on 11/16.

My package even contains the delivery note from Flir estonia to Conrad, about a batch of 10 E4s, including their serial numbers. I now contacted Conrad about that missing battery, since the web shop (by mistake?) promised that 2 batteries are included by the time I ordered. Now they corrected their article description, but I'm still waiting for an answer :D

Big thanks to Mike and all other contributers, for making it possible that I now own a 320x240 TIC!

Another thing, I noticed a spot on my lens, which I tried to clean with a Q-Tip soaked in some isopropyl alcohol and canned air. The spot is still there but now I have a small circular spot on my thermal images as well  :( It's quite hard to see after powering up the E4, but gets more prominent after some time. That circle is shown to be a little warmer than the surrounding environment, except when I point the camera to a hot surface, then it seems to be colder.
Since any dirt on the lens should be out of focus (?), did I somehow manage to move dust or oil droplets inside the housing to the sensor surface by blowing on the lens?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 26, 2013, 09:23:12 am
I think I listed the various USB ID's somewhere earlier on... I'll just paste it here...
Code: [Select]
RNDIS and UVC         : 09cb:1005
...
RNDIS, UVC and MSD    : 09cb:1005

I asked this before, but I don't think my question was clear enough.  How can the same VID/PID pair select two different protocol combos?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on November 26, 2013, 09:28:09 am
I noticed a spot on my lens, which I tried to clean with a Q-Tip soaked in some isopropyl alcohol and canned air. The spot is still there but now I have a small circular spot on my thermal images as well  :( It's quite hard to see after powering up the E4, but gets more prominent after some time. That circle is shown to be a little warmer than the surrounding environment, except when I point the camera to a hot surface, then it seems to be colder.

Since any dirt on the lens should be out of focus (?), did I somehow manage to move dust or oil droplets inside the housing to the sensor surface by blowing on the lens?

Probably not.  But there may have been a coating on the outside of the lens, and your cleaning removed a portion of it.

Just speculating.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 26, 2013, 09:46:27 am
Quote
I now contacted Conrad about that missing battery, since the web shop (by mistake?) promised that 2 batteries are included by the time I ordered. Now they corrected their article description, but I'm still waiting for an answer :D
ISTR reading that the E8 comes with a spare battery and standalone charger - that may be the  cause of confusion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEVblog on November 26, 2013, 10:15:07 am
ISTR reading that the E8 comes with a spare battery and standalone charger - that may be the  cause of confusion.

My E8 came with a 2nd battery & USB charger stand, custom spots in the molded case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 26, 2013, 10:30:02 am
It would be lol to see the E8 modded to an E4, just for kicks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on November 26, 2013, 10:32:14 am
Really, 320x240 is still only thumbnail resolution. Soon, thermal cameras will not only be sold as tools, but as toys -- 20 megapixel thermal cameras will be sold at Wal-Mart for a few hundred dollars. It might take a decade, but it will happen eventually.
For that to happen the companies would need to change the perception of one from being just a tool to a more consumer-oriented product, which I don't see as happening easily. With visible light cameras it's a lot more obvious why that happened - people like to take pictures (and video) of things as a complement to their memories, something they can easily identify with. But I doubt the general public would be as interested in taking thermal pictures and/or knowing the temperatures of things, because human eyes don't see into the infrared already (not to mention TIC pictures make people look odd and creepy.) The price of optics and sensors also has to come down a *lot* more than it is today, down to visible-light camera prices (example: 640x480 30FPS  modules for <$10 (http://dx.com/p/ov7670-300kp-vga-camera-module-for-arduino-147742)), and in that case the companies would probably want to keep more of it as profit rather than lower their prices.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on November 26, 2013, 10:52:19 am
It could happen as just a side effect of the continued development into visible light camera sensors and optics.
If new optics and sensor development produces technology able to sense thermal as well as visible for example, then we could see all cameras able to do thermal imaging.

The lens would need to be transparent to both visible and thermal wavelenghts, but that might be possible with new meta-materials
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 26, 2013, 11:00:02 am
Quote
For that to happen the companies would need to change the perception of one from being just a tool to a more consumer-oriented product, which I don't see as happening easily. With visible light cameras it's a lot more obvious why that happened - people like to take pictures (and video) of things as a complement to their memories, something they can easily identify with. But I doubt the general public would be as interested in taking thermal pictures and/or knowing the temperatures of things, because human eyes don't see into the infrared already (not to mention TIC pictures make people look odd and creepy.) The price of optics and sensors also has to come down a *lot* more than it is today, down to visible-light camera prices (example: 640x480 30FPS  modules for <$10), and in that case the companies would probably want to keep more of it as profit rather than lower their prices.

For certain the prices will have to come down, but they already have been coming down quite drastically in the past few years. With healthy competition I am sure it will happen. As for it transitioning from a tool to a toy, perhaps you are right -- there's only a small group of artists who like the idea of thermal videos. However, even as a tool it would be something that most people would like to have in their homes. Measuring propane left in a tank, checking insulation, or a plathora of other uses. I still feel confident that in ten years or so, 640x480 TIC's will cost under $500
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Clint on November 26, 2013, 11:07:05 am
I am in the UK and am more than happy having paid £670 for my 320x240 camera :) - double the resolution for similar money wont be more than a couple of years away.

Have a look at my dogs cold paws leaving prints on my wooden floor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 26, 2013, 11:12:58 am
It could happen as just a side effect of the continued development into visible light camera sensors and optics.
Unlikely - LWIR optics is all about the materials - the optics for typical TIC resolutions are trivial compared to current optical camera  perfoemance - I can't see any fusion of th etwo happenning anytime soon. 
 Automotive pedestrian safety market is what will drive costs down over the next few years. The E4 already incorporates developments from this - the sensor packaging and moulded lens, and as volumes increase, costs will come down. Probably only a few years before we'll see TICs in the tool sections of hardware stores.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on November 26, 2013, 11:40:31 am
I noticed a spot on my lens, which I tried to clean with a Q-Tip soaked in some isopropyl alcohol and canned air. The spot is still there but now I have a small circular spot on my thermal images as well  :( It's quite hard to see after powering up the E4, but gets more prominent after some time. That circle is shown to be a little warmer than the surrounding environment, except when I point the camera to a hot surface, then it seems to be colder.

Since any dirt on the lens should be out of focus (?), did I somehow manage to move dust or oil droplets inside the housing to the sensor surface by blowing on the lens?

Probably not.  But there may have been a coating on the outside of the lens, and your cleaning removed a portion of it.

Just speculating.

That was my first thought as well, while I was really careful it might still be possible. But that spot is only about 10 or 15 pixels in diameter and I would expect a way more fuzzy look if it were caused by the lens. Maybe I find a way to rotate the lens a bit and see if the disturbance moves likewise.
On the other hand, the original spot, that made me try to clean it in the first place, is still there and doesn't show up in the images. It's near the border of the lens and possibly a defect in the coating as well.

Quote
I now contacted Conrad about that missing battery, since the web shop (by mistake?) promised that 2 batteries are included by the time I ordered. Now they corrected their article description, but I'm still waiting for an answer :D
ISTR reading that the E8 comes with a spare battery and standalone charger - that may be the  cause of confusion.

Probably, I remember one of the enclosed leaflets stated those accessories as being optional. I don't think Conrad will send me another battery, but since they listed 2 of them in their article description, I thought it might be worth asking and see how they respond. Maybe not at all, I send them my complaint on thursday and have not received a reply yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 12:47:53 pm
Thermal camera lenses are particularly sensitive to damage by incorrect cleaning methods.

The coating on the lens directly effects the lenses performance and removal of such causes degradation of the image.

A Germanium lens should be cleaned with non solvent based fluids. I recommend the use of the standard eye glass cleaner that contains no IPA or solvents. Such cleaners are safe on plastic lenses and TIC lenses. IMHO you should not use the little packets of  lens tissue type glasses cleaners as these can be abrasive. Use a Microfibre cloth.

Manufacturers recommend that only an air duster is used to prevent scratching of the lens coating. I read of one poor chap who religiously wiped his lens with a lens cloth after each use to keep it clean. He wrote off a very expensive camera lens as a result ! Friction from regular rubbing of the lens with a cloth will cause damage to the coating. Try cleaning the lens very carefully with the spray on spectacles cleaner on a soft microfiber lens cloth. There may be a residue from your previous attempt causing the thermal effect that you are seeing.

Be aware that the Ex series uses a new(ish) lens manufacturing technology that is not pure Germanium. It is s a composite 'glass' that may be moulded to shape rather than diamond cut. I am not aware of this lenses vulnerabilities to IPA. I am sorry to say, you may have damaged your lens permanently. FLIR will repair it but sadly it will cost you as it is not a warranty failure. Contact your supplier in the first instance and then FLIR HQ if the supplier cannot assist.

For those unaware. It is not necessary to keep your lens completely dust free on this camera. You are unlikely to see any degradation in the image. Dust on the FPA detector is a very different matter though so take care if removing the lens from the camera at any time. The detectors window is also quite delicate and should only be cleaned with compressed air.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 01:01:13 pm
PASS (UK) have stock

I have spoken with David at PASS (UK) today. They have stock of the E4 at the moment. Please contact David on his direct telephone or email address for more information.

For contact details please look at message 1109 on this page:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110)

remember to tell David that you come from the EEVBlog forum and you may get a discount.

The news is good, but I can say no more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kayvee on November 26, 2013, 01:08:32 pm
You beat me to it, I was about post the same news!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 26, 2013, 01:13:40 pm
Take a look on ebay, the Flir E4 cameras from a seller in Luxembourg have just arrived in stock with FW 1.19.8
Article ID 251384446334
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 01:17:54 pm
For those unaware, I have produced a separate thread titled

FLIR E4 - The useful information thread

You will find it here.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

The idea behind the thread is to pull the useful information about the E4 into one, easy to browse, location so that newbies do not need to trawl through the mixed topics of this long thread in order to locate specific information.

PLEASE do not enter specific details of any form of hacking or firmware modification into that thread as it is best that any such discussions occur in this thread, where they belong. I have already linked to this thread from the information repository. Please do likewise if there is a specific discussion that you think will be of interest to new arrivals.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on November 26, 2013, 02:28:00 pm
Flir has a guide for lens cleaning:

http://flir.custhelp.com/app/answers/detail/a_id/193 (http://flir.custhelp.com/app/answers/detail/a_id/193)

I don't know if the new E series is applicable though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 02:59:01 pm
Also see this interesting article on why it is best to not use faceplate cleaning wipers on Thermal CCTV cameras....there isn't the need in most cases.

http://www.flir.com/uploadedfiles/Eurasia/MMC/Tech_Notes/TN_0004_EN.pdf (http://www.flir.com/uploadedfiles/Eurasia/MMC/Tech_Notes/TN_0004_EN.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on November 26, 2013, 03:14:28 pm
...
A Germanium lens should be cleaned with non solvent based fluids. I recommend the use of the standard eye glass cleaner that contains no IPA or solvents. Such cleaners are safe on plastic lenses and TIC lenses. IMHO you should not use the little packets of  lens tissue type glasses cleaners as these can be abrasive. Use a Microfibre cloth.
...

Thanks for this detailed information. I chose the cleaning procedure based on some generic recommendation I found throughout different product sheets of thermal cameras, including this guide:

Flir has a guide for lens cleaning:

http://flir.custhelp.com/app/answers/detail/a_id/193 (http://flir.custhelp.com/app/answers/detail/a_id/193)

I don't know if the new E series is applicable though.

Since I had no idea, what stained my lens (I've never touched it or used it in dirty environment), my plan was to first time clean all possible residues and after that only use canned air at rare intervals to keep it clean. Now that sounds like a bad idea. I was aware that the lenses are fragile and thought to use appropriate caution. But maybe the lenses on the Ex are more picky than on older models due to their changed manufacturing process. Anyway, I don't think I get it repaired, because (1) it's a very small spot at the border of the image and (2) I don't want my firmware to be "upgraded" ;)

So i will investigate what happens when I turn the lens if I find a tool and some time. Or live with it, I'm just annoyed cause I know it's there and very likely wasn't before.

Just for interest's sake, is it possible to buy a replacement lens or will that also need recalibration? And how much would it cost?

Oh, and at least some good news on the other thing: Conrad decided to send me that "missing" battery, according to their now arrived reply to my inquiry. Might be good to know for other customers, who bought their E4 while the article page was bugged  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 26, 2013, 03:17:50 pm
Is it possible to get a lens protector for the Ex-Series? Something that just sits in the cone shaped area before the lens?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 03:43:03 pm
OLSENN,

There is not an official lens protector available for the Ex series but please read my posting on the E4 information repository:

message #2

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

You can make your own cheaply and easily  ;)

The industrial thermal cameras have semi-permanent and disposable lens protector options. That is to say expensive and inexpensive types. The semi-permanent types use high quality materials such as germanium and other high transmission materials to avoid serious calibration errors. The cheaper disposable protectors use a very thin film to reduce through losses. The detailed shrink film material works very well when tested on my E4. For info, my TESTO branded germanium lens protector costs around US$400  :scared:

http://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=321244696874 (http://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=321244696874)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bandrik on November 26, 2013, 04:00:21 pm
You can make your own cheaply and easily  ;)

If you don't mind, would you please go into a little more detail how you made and applied your Polyolefin protector? A photo would probably be the best help. I'm very interested in doing this, but I'm not quite sure what shape and size needs to be cut out, and where it would be best applied to the camera so that it stays in place and doesn't look terribly unattractive (if possible).

If you'd like, you could just append your post in the other thread (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332125/#msg332125) with this info, which would probably help others quite a bit to have it all in one place.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 04:15:13 pm
I just stretched the film across the camera face and held it in place with a rubber band. It was a test and not a permanent solution. I have no need of such a protector on my E4 as the lens is well recessed and I am not working with dust, dirt or liquids at the moment  :)

The film may be applied to any frame of your choosing with nothing more than UHU, Bostick No.1  or any other decent hobby glue. To tighten the film (no truly necessary) you can warm it with a hair dryer and it will pull taught. The mounting frame could be made to sit inside the rubberised aperture of the camera reasonably easily as Mike showed in his videos for using close-up lenses.

I am afraid the exact solution will fall to your inventiveness. You could use Georges80 20mm lens holder design and have it printed as I have done.

My intended use of the material is very different ...... I will use the film as the lens window in an external weatherproof box for wildlife observation using one of my 320x240 BST Fire Brigade cameras  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 26, 2013, 04:17:00 pm
Quote
Just for interest's sake, is it possible to buy a replacement lens or will that also need recalibration? And how much would it cost?
I very much doubt that the problem results from the lens. Something at the surface of the lens will be so much out of focus, it would be hard to notice it. Definately not only 4-5 pixel wide. More likely something lays on the sensor. Maybe a piece of plastic (from mounting)
You may screw out the lens completely and then blow directly onto the sensor and you can also clean the bottom side of the lens. Even turning it only a few degrees will show if the spot moves too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 26, 2013, 05:41:14 pm
I noticed a spot on my lens, which I tried to clean with a Q-Tip soaked in some isopropyl alcohol and canned air. The spot is still there but now I have a small circular spot on my thermal images as well  :( It's quite hard to see after powering up the E4, but gets more prominent after some time. That circle is shown to be a little warmer than the surrounding environment, except when I point the camera to a hot surface, then it seems to be colder.

Since any dirt on the lens should be out of focus (?), did I somehow manage to move dust or oil droplets inside the housing to the sensor surface by blowing on the lens?

I had a spot in my image as well, see the picture in my post https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239)

It behaved much like yours, seeming warmer than the surrounds, except when pointing at something hot.
This turned out to be a speck of dust on the sensor. I took the camera apart as per mikes instructions and used a camera sensor dusting ball to clean it after which the spot was gone.

If you do, be very careful to mark the original position of the lens, if it's off just a tiny bit you'll be pretty far out of focus at infinity (it took me several iterations to get it back even though i marked it well).

Also, download the full E4 manual from FLIRs site and browse to page 21. There you have directions for cleaning the lens, including recommended liquids.
Cotton wool with IPA at concentrations ABOVE 30%, among many other much stronger solvents, is recommended. I doubt you have damaged it.

http://support.flir.com/DocDownload/Assets/92/English/T559828-en-US$AB.pdf (http://support.flir.com/DocDownload/Assets/92/English/T559828-en-US$AB.pdf)

Edit: Added manual URL
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 05:54:34 pm
Blimey, I just read the manuals section on lens cleaning. I am surprised at the content, but they make the things, so know best. I personally would not worry too much about IPA on a Germanium lens if care is used, but going near it with acetone makes me shiver because acetone can be so harmful to plastics. The lens holder must be resistant to solvents ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 26, 2013, 06:47:43 pm
Yeah, i'd probably stay away from acetone. Hell, i'd stay away from touching the lens with anything unless absolutely required.
I mainly wanted to set his mind at ease regarding possible damage to the lens, i'm not really looking to give out maintenance tips.. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 26, 2013, 09:11:02 pm
Indeed.

I have seen a 'blooming' effect on glass lenses after the use of IPA. It may be that the lens just needs a very gentle wipe with a glasses cleaning microfiber cloth after 'huffing' on the lens ? Very low risk if you are gentle and it may solve the 'halo' problem
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 26, 2013, 09:33:14 pm
Quote
I thought the floors and some of the chairs in there would have been a LOT hotter...

Actually, the thermal camera cannot see through the glass. It's only the MSX outlines (from the regular camera) of the chairs etc inside the building that you are seeing
If you were a thermal imaging comany, wouldn't it be fun to have a logo on your building that was only visible through a TIC... ;D



..or on a smaller scale, how about some T-shirts printed in inks with different emissivities, with logos you can only see with a TIC...

That's like something out of They Live. Instead of the glasses you need a TIC.
"I have come to chew bubblegum and kick ass..."
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 26, 2013, 09:42:22 pm
Quote
"I have come to chew bubblegum and kick ass..."

...and I'm all out of gum!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 26, 2013, 10:16:16 pm
Got my Flir E48 from Tequipment, unlocked with no trouble

Does anyone have the extra lenses http://store.flir.com/category/e-series-accessories (http://store.flir.com/category/e-series-accessories) if so can you post some pictures with them?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on November 26, 2013, 10:41:02 pm
My Flir has a new name...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on November 26, 2013, 11:03:20 pm
Got my Flir E48 from Tequipment, unlocked with no trouble

Does anyone have the extra lenses http://store.flir.com/category/e-series-accessories (http://store.flir.com/category/e-series-accessories) if so can you post some pictures with them?

Thanks

I believe those lenses are for the Exx models. The Ex has no stock provisions for extra lens mounting (but it is possible with the adapters designed earlier in this thread).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 26, 2013, 11:59:48 pm
How do you get the rset commands to stick through a restart?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madscientisthut on November 27, 2013, 03:48:03 am
My order came in yesterday.
FW 1.19.8

Thanks Mike!

Image of my water cooled PC

after:    :clap:                                                                                                       before:   :)

(http://i296.photobucket.com/albums/mm188/kpgcfd/e4hack_before_after_zps88f6a6af.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on November 27, 2013, 03:53:41 am
Quote from: madscientisthut
   Image of my water cooled PC   .....   after:    before:   :)   
OK that's going to start ANOTHER rush on stock !! Excellent comparison shots !!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 27, 2013, 05:09:47 am
Water Cooling

Dual H100s on Xeon X5690s

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on November 27, 2013, 05:44:36 am
are blocks cold? or shiny?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 06:42:44 am
How do you get the rset commands to stick through a restart?

Depending on what part of the resource tree ... making a .cfg with a CRC01 , or making a .rsc with a CRC32

So what particular rset commands do you want to make persistent?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on November 27, 2013, 08:40:49 am
I had a spot in my image as well, see the picture in my post https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239)
I saw that image the time you posted it, but in my memory the spot was somewhat bigger, so I didn't bother searching for your post. After now seeing it again and realize it's the same size and shape, it convinced me to play around a little. So I used a duster ball to blow air in some of the housings cavities, in the hope of again moving something inside. With success, after this "treatment" a 2nd spot with the same appearance showed up on my image :D
So any grain of dust on the sensor may create a similar looking disturbance, with it's thermal intensity depending on the size of this dust particle.

After this I evaluated my options in cleaning the sensor surface using Mike's teardown video. Then one led to the other and in the end I had my unit disassembled, the sensor dusted and everything reassembled again.
I'm now spot free, so my sensor and lens are OK :)

To keep things exciting, I now have some offset between my thermal and the visual image, making MSX look a little odd on greater distances.
Anyone knows where to adjust this? Is this done in software or do I have to dismantle my E4+ again?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 27, 2013, 09:47:51 am
I got mine 10 min ago  :clap:
Model: Flir E8+  :-+ :-DD
Site: Flir systems ou Estonia
Calibration date: November 22, 2013
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 27, 2013, 10:26:28 am
To keep things exciting, I now have some offset between my thermal and the visual image, making MSX look a little odd on greater distances.
Anyone knows where to adjust this? Is this done in software or do I have to dismantle my E4+ again?
Are you sure you set your focus correctly to inifinity?
Or maybe your distance settings in the config menu is set to anything less then ">3m"?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 10:32:42 am
To keep things exciting, I now have some offset between my thermal and the visual image, making MSX look a little odd on greater distances.
Anyone knows where to adjust this? Is this done in software or do I have to dismantle my E4+ again?
Are you sure you set your focus correctly to inifinity?
Or maybe your distance settings in the config menu is set to anything less then ">3m"?

there are register options (rset) - I posted them some while ago - in case that somebody misaligned the image ... but the physical setup for precise distance is very important :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on November 27, 2013, 11:32:59 am
Are you sure you set your focus correctly to inifinity?
Or maybe your distance settings in the config menu is set to anything less then ">3m"?
there are register options (rset) - I posted them some while ago - in case that somebody misaligned the image ... but the physical setup for precise distance is very important :)
Distance setting should be at >3m, but I'm not sure about focus. I'm lacking a proper lens tool, so I adjusted the lens according to my marks before reassembling the device. Most probably it's a bit off, yes. But I didn't notice any degradation in image quality, so I was satisfied for now. I think it's hard to get it right, since those thermal images don't offer that much contrast and will always look a bit softer. I guess I need to dremel some simple tool for lens adjustment and start experimenting.

Oh, and it's not just the parallax error resulting from the lens distance, it's off sideways as well.

Good to know there is a software setting for this. I think you're referring to this post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178)

By "physical setup" you're talking about those calibration steps mentioned in the linked post?

Then obviously it's finally time for RNDIS mode. I only did the resolution hack yet, addmenu was still on my todo list for future exercises.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 12:33:04 pm
Good to know there is a software setting for this. I think you're referring to this post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178)

By "physical setup" you're talking about those calibration steps mentioned in the linked post?
Yes, that's the post - I think it's clear what to do if taking basic trigonometry and the lens-lens-distance in consideraton - one has to align the camera's face-plane geometrically parallel to the reference object plane (ideally a surface with thermal and visual markings/features/borders)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 27, 2013, 12:36:20 pm
Hello,
I need the flir eeprom unlocked, it needs password  |O
anyone unlooked it yet?

cant find it, please please help me
thx!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 12:47:15 pm
Hello,
I need the flir eeprom unlocked, it needs password  |O
anyone unlooked it yet?

cant find it, please please help me
thx!
You can edit the eeprom via the I2C command. The test mode seems to implement some simple access control but not looked at this.
EEPROM records are protected by a simple 16 bit checksum - this is documented fairly early in this thread
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 27, 2013, 01:19:46 pm
Hello,
I need the flir eeprom unlocked, it needs password  |O
anyone unlooked it yet?

cant find it, please please help me
thx!
Instead of just asking for unlocking the Eeprom it would be more helpful if you post why you need to unlock it, what you have done with your E30, what worked and what worked not, where you had problems and how you solved them. Exactly what Mike and Taucher and others were doing. Then you will get much more feedback from many more people as they are interested in solving a challenge.
Look how the E4 hack worked ... many people provided little peaces of helpful (and sometimes not helpful) information - and together the 320x240 and the menu hack were possible. It is as always: a good team can make anything possible, one on its own often not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 27, 2013, 01:35:31 pm
Hello,
I need the flir eeprom unlocked, it needs password  |O
anyone unlooked it yet?

cant find it, please please help me
thx!
Instead of just asking for unlocking the Eeprom it would be more helpful if you post what you have done with your E30, what worked and what worked not, where you had problems and how you solved them. Exactly what Mike and Taucher and others were doing. Then you will get much more feedback from many more people as they are interested in solving a challenge.
Look how the E4 hack worked ... many people provided little peaces of helpful (and sometimes not helpful) information - and together the 320x240 and the menu hack were possible.


Im not yet ready with my E30, WLAN doesnt work, 0-650°C doesnt work, aso...

but 320x240 works now.... :-+ I did same as mike does with conf.cfg nothing new...

I rent a E60 for one day, so Im in a hurry.....and want to reed its eeprom to get closer
what else do we need from it? BUT I will not tear it down!

Im not a PC crack, I normaly work with wood!
So any help for me? :box:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 01:49:36 pm
I rent a E60 for one day, so Im in a hurry.....and want to reed its eeprom to get closer what else do we need from it?

use rls in recursive mode and dump ALL settings to a file (use FlashIFS) - takes several minutes with
Code: [Select]
rls -rl > \FlashIFS\allsettings-yourcameratype.txt

EDIT: taking a copy of all available files via FTP will probably also be a good idea
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 01:55:14 pm
I rent a E60 for one day, so Im in a hurry.....and want to reed its eeprom to get closer what else do we need from it?

use rls in recursive mode and dump ALL settings to a file (use FlashIFS) - takes several minutes with
Code: [Select]
rls -rl > \FlashIFS\allsettings-yourcameratype.txt

EDIT: taking a copy of all available files via FTP will probably also be a good idea
Gets my vote.  :-+ Both the full resource dump and the full download of all files has useful tidbits in it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 27, 2013, 02:00:51 pm
 :'(
So any help for me? :box:
O0 Peace!
As the former posters say: make full backup of all files with an FTP tool such as Filezilla.
If you need details for this: just send a PM and I will write down all needed steps.
Save these files/folders in one new folder and never touch them - make edits only to a copy of the whole directory.

Question: never tried this: rls -rl > \FlashIFS\allsettings-yourcameratype.txt
Will it also read out the Eeprom?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 02:09:01 pm
Question: never tried this: rls -rl > \FlashIFS\allsettings-yourcameratype.txt
Will it also read out the Eeprom?
Short: nope

as far as I remember mike stated something (like) that the eeprom is just beeing used to store the camera SN, model name etc.
... but we have seen that inside appcore that data is taken into account when enabling features - so a full dump of the eeprom could be interesting - did anybody already make a script/commandset for that? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:09:21 pm
Question: never tried this: rls -rl > \FlashIFS\allsettings-yourcameratype.txt
Will it also read out the Eeprom?

No. It will make a full dump of all the entries in the resource tree. Incidentally, rls -rll will show even a bit more detail.

Also, you can use user root and password 3vlig when running those commands. This does result in a different response for some entries, but so far I have not been able to do anything useful with it. Just thought I'd mention it in case someone else want to mess with the resource tree.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 27, 2013, 02:11:55 pm
I rent a E60 for one day, so Im in a hurry.....and want to reed its eeprom to get closer what else do we need from it?

use rls in recursive mode and dump ALL settings to a file (use FlashIFS) - takes several minutes with
Code: [Select]
rls -rl > \FlashIFS\allsettings-yourcameratype.txt

EDIT: taking a copy of all available files via FTP will probably also be a good idea
Gets my vote.  :-+ Both the full resource dump and the full download of all files has useful tidbits in it.

Yes! Please copy off the entire folder structure - everything to your local PC.

What FTP client are you using and we can explain how to do this.

The OS on the Exx will have extra bits & pieces included with the build that are not present on the Ex or in the firmware updates (which are just application updates, not the full OS).
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:13:09 pm
so a full dump of the eeprom could be interesting - did anybody already make a script/commandset for that? :)

Not me. I tried to use i2c.exe to read out the eeprom, but all I got was FF entries. So I was probably doing something wrong there.

Is there an example i2c.exe command that does read out something meaningful? I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:19:52 pm
Come to think of it, please do both:

Code: [Select]
rls -rl > \FlashIFS\allsettings-yourcameratype.txt
rls -rll > \FlashIFS\allsettings-yourcameratype-full.txt

For some entries the full (-ll) listing does give a bit of extra info. And for all the others it's noise. But since you only have it for a day, and it doesn't take you any extra time ... please run both. It would be a bit silly to find out afterwards that we would have liked the extra detail on some field in the resource tree. :P

As for ftp clients ... winscp (http://winscp.net/eng/download.php) is pretty handy. Put it in ftp mode, and connect to 192.168.0.2. Login with user=flir, pass=3vlig. Then you simply select your destination folder on the left, and do select all on the right side (source). Press F5 to recursively copy the lot...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 27, 2013, 02:21:10 pm
Question: never tried this: rls -rl > \FlashIFS\allsettings-yourcameratype.txt
Will it also read out the Eeprom?
Short: nope

as far as I remember mike stated something (like) that the eeprom is just beeing used to store the camera SN, model name etc.
... but we have seen that inside appcore that data is taken into account when enabling features - so a full dump of the eeprom could be interesting - did anybody already make a script/commandset for that? :)

Yes, and it appears that all of the data in the EEPROM appears to be editable from via the service menu via the web server.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 02:23:10 pm
... I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.

Would you mind taking some hi-res images of the inside/PCB?
I'd like to check if there's some pre-defined place for the identified gyro/compass sensor-chips :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 02:23:32 pm
so a full dump of the eeprom could be interesting - did anybody already make a script/commandset for that? :)

Not me. I tried to use i2c.exe to read out the eeprom, but all I got was FF entries. So I was probably doing something wrong there.

Is there an example i2c.exe command that does read out something meaningful? I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.
It may need some probing to find what I2C device address the eeprom lives at, normal values would be addresses A0 to AE in steps of 2 - I think I2c.exe will give an error or message for an un-acked device address.
You may also need to guess the size - the easiest way is usually to read a big chunk and look for the address wraparound.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:32:12 pm
... I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.

Would you mind taking some hi-res images of the inside/PCB?
I'd like to check if there's some pre-defined place for the identified gyro/compass sensor-chips :)

I'll see what I can manage with my decidedly NON hi-res collection of who-the-hell-cares photography equipment. ;)
As an aside, didn't Mike's teardown vid show those unpopulated pads?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 02:36:58 pm
... I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.

Would you mind taking some hi-res images of the inside/PCB?
I'd like to check if there's some pre-defined place for the identified gyro/compass sensor-chips :)

I'll see what I can manage with my decidedly NON hi-res collection of who-the-hell-cares photography equipment. ;)
As an aside, didn't Mike's teardown vid show those unpopulated pads?
I don't recall any unpopulated chips, but there was an unpopulated  FFC and one other, possibly a board-stack connector.
Anything on the PCB would be shielded by the internal metal frame and LCD casing, so either the module, or at least the antenna would need to be outside the metal area.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:37:34 pm
It may need some probing to find what I2C device address the eeprom lives at, normal values would be addresses A0 to AE in steps of 2 - I think I2c.exe will give an error or message for an un-acked device address.
You may also need to guess the size - the easiest way is usually to read a big chunk and look for the address wraparound.

Ah okay. I thought you maybe had some working i2c.exe commands since you said:

You can edit the eeprom via the I2C command. The test mode seems to implement some simple access control but not looked at this.
EEPROM records are protected by a simple 16 bit checksum - this is documented fairly early in this thread

I'm not entirely sure what the eeprom unlock password in the service mode would have to do with anything. I mean, if you can just read (and write!) eeprom using i2c.exe. That said, I would expect the eeprom to be write-able directly on the SCL/SDA wires. As in bypassing any flir applications, but just toggling the wires yourself. Best done with the application killed. :P

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 02:42:09 pm
... I'd try it right now, but it's opened up and I'd rather not power it right now until I check a few things. :P I like my magic smoke on the inside.

Would you mind taking some hi-res images of the inside/PCB?
I'd like to check if there's some pre-defined place for the identified gyro/compass sensor-chips :)

I'll see what I can manage with my decidedly NON hi-res collection of who-the-hell-cares photography equipment. ;)
As an aside, didn't Mike's teardown vid show those unpopulated pads?
Yes, and he panned around most of the time - I greatly appreciate his teardown, but I really wished there was more light during the teardown filming and less "speed" while turning things... many frames are pretty motion-smeared :)

@Mike - I think there were unpopulated areas and pads ... will review the teardown again...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 27, 2013, 02:46:19 pm
I rent a E60 for one day, so Im in a hurry.....and want to reed its eeprom to get closer what else do we need from it?

use rls in recursive mode and dump ALL settings to a file (use FlashIFS) - takes several minutes with
Code: [Select]
rls -rl > \FlashIFS\allsettings-yourcameratype.txt

EDIT: taking a copy of all available files via FTP will probably also be a good idea


I took the files via filezilla :-+
but the rls thing ??? inside cmd promt? telnet promt doesnt work.... :--

the eeprom pasword is needed in service menu!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 27, 2013, 02:51:13 pm
Quote
but the rls thing inside cmd promt? telnet promt doesnt work....
What windows version are you using?
Probably you have not installed it yet. It is easy to do: Press F1 on the desktop to enter Windows help. Then enter 'Telnet' and you will be given some instructions how to enable it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 02:55:41 pm
I took the files via filezilla :-+
but the rls thing ??? inside cmd promt? telnet promt doesnt work.... :--

If you can ftp, then you have tcp/ip connection. So I will read "telnet prompt doesnt work" as "telnet client not present or no workey"
In which case the solution is:
1) install + run putty.exe from this here download page
2) select telnet mode
3) connect to 192.168.0.2 (or the same ip you used for ftp)

And then run those rls commands.

Edit: Also, since you didn't attach the files ... by way of sanity check, how many files did you get? Just to be sure you got it all. Would be a shame to find out later you didn't recursively grab everything, what with this being a rental and all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 02:59:10 pm
PW seems to be no big deal:
Code: [Select]
function EEPromIsUnlocked()    {        return restree.getResourceValue("system.eeprom.unlock") == "Unlocked" ? true : false;    }

function PrintEEPromControls()    {
        var EEPromStatusText = restree.getResourceValue("system.eeprom.unlock");
        var EEPromMakeUnlockCmd = !EEPromIsUnlocked();
        Response.Write('<INPUT id="ee_unlock" type="submit" name="ee_unlock" value="Unlock">');
        Response.Write('&nbsp;&nbsp;Password&nbsp;<INPUT id="ee_pw" type="password" name="ee_pw" value="">&nbsp;');
}

function EEPromLockActions()    {
        if ( Request.Form( "ee_unlock" ) != "" )
            restree.setResourceValue("system.eeprom.unlock", Request.Form( "ee_pw" ));
        else if ( Request.Form( "ee_lock" ) != "" )
            restree.setResourceValue("system.eeprom.unlock", "lock");
}
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 03:00:40 pm
but the rls thing ??? inside cmd promt? telnet promt doesnt work.... :--
telnet command not installed or no connection?
was the camera on/running
chance of doing a portscan? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 03:04:33 pm
I've read that too, but I fail to see how you come to the conclusion that it doesn't matter.

What that does is READ the system.eeprom.unlock resource. Which either has value "Unlocked" or not. If it is NOT unlocked, then it presents the html form, in which you plonk your super secret password. You then submit it. And then your favorite .asp page will effectively do a rset .system.eeprom.unlock PASSWORD_YOU_JUST_SUBMITTED. After that it will do a read of the resource again to show you if it is "Unlocked" or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 03:13:17 pm
I've read that too, but I fail to see how you come to the conclusion that it doesn't matter.

What that does is READ the system.eeprom.unlock resource. Which either has value "Unlocked" or not. If it is NOT unlocked, then it presents the html form, in which you plonk your super secret password. You then submit it. And then your favorite .asp page will effectively do a rset .system.eeprom.unlock PASSWORD_YOU_JUST_SUBMITTED. After that it will do a read of the resource again to show you if it is "Unlocked" or not.
it means there will be code to compare the PW ... so the solution is probably already somewhere in the IDA files :)
edit: ...if not ... then a bruteforce hack is still scriptable :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 27, 2013, 03:21:36 pm
Sorry :) guys
Jest tu kto? z Polski
Wstawi? instrukcje po Polsku ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 03:25:29 pm
Sorry :) guys
Jest tu kto? z Polski
Wstawi? instrukcje po Polsku ?
"zajrzyj tutaj:"
http://translate.google.pl/translate?hl=pl&ie=UTF8&prev=_t&sl=en&tl=pl&u=https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (http://translate.google.pl/translate?hl=pl&ie=UTF8&prev=_t&sl=en&tl=pl&u=https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)

http://translate.google.pl/ (http://translate.google.pl/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 03:41:30 pm
@PW: "1235" is a string directly near "Locked" and "Unlocked" ... might be worth a try ... also the MAC address starting with 00:40:7F: ....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 03:51:05 pm
it means there will be code to compare the PW ... so the solution is probably already somewhere in the IDA files :)
edit: ...if not ... then a bruteforce hack is still scriptable :)
That I will readily agree to. :)

Seeing your other post ... tested 1235 yet? And that MAC is indeed very Flirry.

Which reminds me. I have tried some more DHCP, with added M$ bullshit fields in the DISCOVERY and REQUEST packets. At first I thought they did something dodgy in the initial stages. So I faked a lease with the right values already set, and set it to be a valid lease. That way the dhcp client (dhclient in this case) will skip the discovery and do a straight up request for those fields. So the request had the exact same fields in it as the windoze equivalent. Still no response whatsoever. It's not a port thing either, Flir uses default ports etc.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 27, 2013, 03:53:19 pm

I just got my E4 yesterday, and "as is" it's a pretty cool device. I ordered it from Transcat about a week ago, since they were the only place with stock out of about 25 places I called. The firmware is 1.18… which is nice.

So now I really want to take the upgrade plunge, but I'm a little lost on what are the latest steps for the hack. Please forgive my ignorance, but I wan't to get in and out smoothly.

Can you post the link for the latest directions and the software download? It requires a cable connection, right? If so then do I have to open the unit or can I do it over USB? I thought I read that this unit has no Wi-Fi, since that's on the Exx series.

I also read somewhere about a menu hack to add the extra color templates which sounds great. Is that a completely different procedure or is that wrapped into the latest "E8" hack? If it's separate I would like to add that as well. Someone mentioned an insulation template that sounded cool.

After doing these mods, is it easy to get back to factory settings in case I need to send it in for warranty service or post-warranty service?

Does adding these mods affect the calibration or accuracy of the readings? I think someone said it would stop the constant calibration interruption, but can that be turned back on if necessary? I mainly want it off for the video stream, but I don't mind having it on if I'm just surveying something and I want more accuracy. Can the HUD info be turned off while I'm streaming the video to my laptop over USB and then be turned back on?

Sorry for all the questions, but I didn't see all this in one place, and I wanted to be up to date on the settings and procedures. Perhaps other newbies like me will benefit from having this all in a single post.

Thanks again for any help, and I really appreciate the info and humor on this forum.

I'm working at the zoo this weekend, so I can't wait to try getting all kinds of thermal animal footage.The higher res and other new features will be very cool. I will post my stuff right away.

One last thing. Does anyone know of a small digital recorder that will take the USB video stream from the E4 so I don't have to carry around a laptop all the time to record video. I don't want to take my laptop in with the raccoons for obvious reasons.  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 27, 2013, 03:56:11 pm
1235 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 03:57:06 pm
1235 :-+

Sweet. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 04:01:09 pm
1235 :-+

Sweet. :)
haha, just by looking at appcore with a hex-ed... had no time to test...  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 04:02:31 pm
Can you post the link for the latest directions and the software download? It requires a cable connection, right? If so then do I have to open the unit or can I do it over USB?

If you're on windows, see Taucher's EzCRC01 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090).

And yes that will work over USB.

If you want telnet + ftp capability you'll have to put your E4 into RNDIS (networkey modey) with:

menu => settings => device settings => camera information => hold RIGHT cursor key for 10 seconds => select USB mode => RNDIS + UVC.

After that your windoze should setup an additional network adapter. After that you can check with your browser on 192.168.0.2 if it works. Also ftp and telnet should work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 27, 2013, 04:10:26 pm
Taucher small no agreement
It has to translate from English into Polish for "viewers" from Poland
If anyone here is from Poland :)
 :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 04:16:01 pm
Taucher small no agreement
It has to translate from English into Polish for "viewers" from Poland
If anyone here is from Poland :)
 :palm:
exactly what it does - take English text and output Polish text
sl = source language = en
tl = target language = pl
u = url
hl = homepage language - set also to PL here...

http://translate.google.pl/translate?hl=pl&ie=UTF8&prev=_t&sl=en&tl=pl&u=https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (http://translate.google.pl/translate?hl=pl&ie=UTF8&prev=_t&sl=en&tl=pl&u=https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)

if you want to translate text then just use/visit the translate.google services
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 27, 2013, 04:35:56 pm
Translation by Google comes out sometimes differently, sometimes overlook nonsense..  :--
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 04:38:23 pm

So now I really want to take the upgrade plunge, but I'm a little lost on what are the latest steps for the hack. Please forgive my ignorance, but I wan't to get in and out smoothly.
The first message in this thread is kept up to date with links to most current info
Quote
One last thing. Does anyone know of a small digital recorder that will take the USB video stream from the E4 so I don't have to carry around a laptop all the time to record video. I don't want to take my laptop in with the raccoons for obvious reasons.  :D
Not offhand - the internal memory has room for about 500 shots though, but can't do video.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myself on November 27, 2013, 05:40:42 pm
One last thing. Does anyone know of a small digital recorder that will take the USB video stream from the E4 so I don't have to carry around a laptop all the time to record video. I don't want to take my laptop in with the raccoons for obvious reasons.  :D

You may be able to do this with an Android phone: http://www.infinitegra.co.jp/en/solution/AndroidApp1.htm (http://www.infinitegra.co.jp/en/solution/AndroidApp1.htm)

I'm not sure what format the video comes across in, but if V4L supports the camera, you should be good. (I haven't ordered my E4 yet but have been following this thread for a few days.) Let us know if it works!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 27, 2013, 05:47:37 pm
I'm not sure what format the video comes across in, but if V4L supports the camera, you should be good. (I haven't ordered my E4 yet but have been following this thread for a few days.) Let us know if it works!

V4L2 supports it, that's what I use with mencoder + mplayer to record/view it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 27, 2013, 06:02:31 pm
I think its time for a Menzoberranzan Edition boot screen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 27, 2013, 06:15:30 pm
How do you get the rset commands to stick through a restart?

Depending on what part of the resource tree ... making a .cfg with a CRC01 , or making a .rsc with a CRC32

So what particular rset commands do you want to make persistent?

I was considering disabling the auto cal stuff, it causes a lot of stutters and you can still do a manual cal with the play button.

Is there a setting to expand the auto cal delay? If it happened less often that would be awesome!


So I just create a .cfg file with the settings and place it in the zip file and reupload it?

Does it matter which folder its in or does the whole structure get searched?

Thanks

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bandrik on November 27, 2013, 06:27:37 pm
(questions and stuff went here)

Hey there KingVidiot. I can help with a few of these. Not being an expert, I invite others to chime in on the parts I'm unsure on (or correct me where I'm incorrect).

Can you post the link for the latest directions and the software download? It requires a cable connection, right? If so then do I have to open the unit or can I do it over USB?
The first page has a link to the latest version of the E4 to E8 hack instructions, with a download of the files you'll need. It uses USB, so no screwdrivers necessary. No Wi-Fi on this model. I'm considering making a "for dummies" walkthrough guide for those totally new at modding things or not computer savvy and need a little extra help.

I also read somewhere about a menu hack to add the extra color templates which sounds great. Is that a completely different procedure or is that wrapped into the latest "E8" hack?
Different procedure. A few pages back someone listed a more step-by-step means of doing it. Like above, I may make a "dummies" walkthrough.

After doing these mods, is it easy to get back to factory settings in case I need to send it in for warranty service or post-warranty service?
There are instructions for undoing the E4 to E8 hack, and the second hack that adds menus is as simple as reinstating the original files (assuming you make a backup before copying over the modded files). Not sure if the factory can detect any hacking after these "undo" steps are performed.

Does adding these mods affect the calibration or accuracy of the readings? I think someone said it would stop the constant calibration interruption, but can that be turned back on if necessary? I mainly want it off for the video stream, but I don't mind having it on if I'm just surveying something and I want more accuracy. Can the HUD info be turned off while I'm streaming the video to my laptop over USB and then be turned back on?
Not sure, but I don't think it affects accuracy. I didn't notice any talk about pausing the constant calibration interruption, and I would be VERY interested in learning how to do that myself. As for video stream, I think the HUD is "baked into" the video output as Mike mentioned that during his review.

Does anyone know of a small digital recorder that will take the USB video stream from the E4
Looks like the tip above on using an Android device is your best bet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on November 27, 2013, 06:28:02 pm
Hi Mike

PDF on that link in first page was now gone ...  ,some one probably got a call ;-)

Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

and seem that tequipment ship date was very approximative  ,claiming it got delay since need a export approval ...
Title: AW: Flir E4 Thermal imaging camera teardown
Post by: maex on November 27, 2013, 06:32:43 pm
It is possible to get a full system image from an E30 or E40?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 06:43:41 pm
Good news!  just received mine today and it has version 1.19.8

(ordered from the new batch at tequipment Monday)


Now to sort out why parallels isn't seeing it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 06:46:38 pm
Sorted it out... For some reason when I told it to assign the USB device it ignored me  :--

Got it to send the file, all looks good now!   :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 06:47:13 pm
I got mine 10 min ago  :clap:
Model: Flir E8+  :-+ :-DD
Site: Flir systems ou Estonia
Calibration date: November 22, 2013
SW-Version? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 06:51:31 pm
Good news!  just received mine today and it has version 1.19.8
(ordered from the new batch at tequipment Monday)
Now to sort out why parallels isn't seeing it...
what's your date of calibration?

I think we can call that report on unhackable firm definately a troll
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 07:03:01 pm
Good news!  just received mine today and it has version 1.19.8
(ordered from the new batch at tequipment Monday)
Now to sort out why parallels isn't seeing it...
what's your date of calibration?

I think we can call that report on unhackable firm definately a troll

Sorry VERY new to this, where would I find it?   :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 07:04:48 pm
Here is a before and after (after is on top)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 07:06:09 pm
A couple more
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 07:11:25 pm
Good news!  just received mine today and it has version 1.19.8
(ordered from the new batch at tequipment Monday)
Now to sort out why parallels isn't seeing it...
what's your date of calibration?

I think we can call that report on unhackable firm definately a troll

Sorry VERY new to this, where would I find it?   :palm:
it's written on a calibration cert (paper) supplied with the camera :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 07:16:59 pm
Thats why!  I didn't RTFM!!!

LOL!!

Estonia Nov 12 2013
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 27, 2013, 07:51:02 pm
My E4 just arrived today.
Calibration: Nov 9, 2013 in Estonia
Software: 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on November 27, 2013, 07:52:51 pm
Just noting that as-is it seems much better than the i3.  The menu interface is MUCH faster, the MSX is nice, the calibration is 10 time quieter, and the screen is larger and clearer. Excited to get this upgraded now.
Title: FLIR TOOLS + forever working for free
Post by: Petrlib on November 27, 2013, 07:53:14 pm
Hello to all and especially for newbies,

I just recieved infortmation about FLIR TOOLS + . This is nothing illegal or software modification. It is just " time stopping tool ".
If you want have full working FLIR TOOLS + / in full working 30-days trial mode / you can use this tool:

http://www.jailbreakmodo.com/how-to-use-trial-version-software-forever-without-expiration.html (http://www.jailbreakmodo.com/how-to-use-trial-version-software-forever-without-expiration.html)


http://www.technize.net/extend-trial-software/ (http://www.technize.net/extend-trial-software/)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 27, 2013, 08:03:53 pm
Thats why!  I didn't RTFM!!!

LOL!!

Estonia Nov 12 2013

Thanks :)

btw - the Flir manual is a really good read unless you're already skilled in TIC technology and measurements etc.
They went to quite some effort describing lots of good to know stuff there - I can really recommend it - esp. the more general IR appendix.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 27, 2013, 08:15:08 pm
Thats why!  I didn't RTFM!!!

LOL!!

Estonia Nov 12 2013

Thanks :)

btw - the Flir manual is a really good read unless you're already skilled in TIC technology and measurements etc.
They went to quite some effort describing lots of good to know stuff there - I can really recommend it - esp. the more general IR appendix.

Been doing the online course.  Only looked at the PDF of the manual thats why I didn't see the calibration sheet ;) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 27, 2013, 08:30:02 pm
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.

Heh, that was one of the first things I fixed. Damn annoying to have it perform a nuc (calibration) juuuust when you're doing a measurement.


Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false

# turn on auto-nuc
rset .tcomp.services.autoNuc.active true

# trigger nuc
rset .image.services.nuc.commit true

The idea is to turn off auto-nuc, and then trigger a nuc when you think it's useful. I.e between measurements. Or not at all.  ;D

Happy uninterrupted video streaming!

Is this implemented in the latest hack on page 1? I really need to be able to toggle the calibration for video streams (no chopppy vids). I heard that you can force a calibration with one of the buttons, so it doesn't need to come on all the time.

Also I thought that there was a way to remove the HUD on video streams. I looks like FlirTools might remove the HUD graphics for stills, but I need it for video. Any chance here?

Another question about the firmware. If I have to redo the factory mode and send it in for service, and they upload a new firmware, can I reload the old firmware if I have the installer (someone posted one a while back)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 27, 2013, 08:36:09 pm
(questions and stuff went here)

Hey there KingVidiot. I can help with a few of these. Not being an expert, I invite others to chime in on the parts I'm unsure on (or correct me where I'm incorrect).

Can you post the link for the latest directions and the software download? It requires a cable connection, right? If so then do I have to open the unit or can I do it over USB?
The first page has a link to the latest version of the E4 to E8 hack instructions, with a download of the files you'll need. It uses USB, so no screwdrivers necessary. No Wi-Fi on this model. I'm considering making a "for dummies" walkthrough guide for those totally new at modding things or not computer savvy and need a little extra help.

I also read somewhere about a menu hack to add the extra color templates which sounds great. Is that a completely different procedure or is that wrapped into the latest "E8" hack?
Different procedure. A few pages back someone listed a more step-by-step means of doing it. Like above, I may make a "dummies" walkthrough.

After doing these mods, is it easy to get back to factory settings in case I need to send it in for warranty service or post-warranty service?
There are instructions for undoing the E4 to E8 hack, and the second hack that adds menus is as simple as reinstating the original files (assuming you make a backup before copying over the modded files). Not sure if the factory can detect any hacking after these "undo" steps are performed.

Does adding these mods affect the calibration or accuracy of the readings? I think someone said it would stop the constant calibration interruption, but can that be turned back on if necessary? I mainly want it off for the video stream, but I don't mind having it on if I'm just surveying something and I want more accuracy. Can the HUD info be turned off while I'm streaming the video to my laptop over USB and then be turned back on?
Not sure, but I don't think it affects accuracy. I didn't notice any talk about pausing the constant calibration interruption, and I would be VERY interested in learning how to do that myself. As for video stream, I think the HUD is "baked into" the video output as Mike mentioned that during his review.

Does anyone know of a small digital recorder that will take the USB video stream from the E4
Looks like the tip above on using an Android device is your best bet.

Thanks Bandrik, nice summary.

The tablet video won't work for me since I don't have one, and the delay is too much/video too choppy. The E4 is choppy enough, and I don't want to make it more choppy.
I'm looking online for other recording options.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 27, 2013, 08:37:42 pm
[...]
You may be able to do this with an Android phone: http://www.infinitegra.co.jp/en/solution/AndroidApp1.htm (http://www.infinitegra.co.jp/en/solution/AndroidApp1.htm)
[...]

I'm not KingVidiot but I just tried it with my Samsung Galaxy S3 with Android 4.1.2. Result: "unsupported device" - So no luck  :(

And regarding to the cal date and the "new batch":
I ordered my E4 here in Germany at www.messgeraete-chemnitz.de (http://www.messgeraete-chemnitz.de) on Sun, Nov 10 2013. It was Shipped on Tue, Nov 12 2013 and delivered on Wed, Nov 13 2013. My Camera was calibrated on Sat, Nov 9 2013, so I'm not sure if this batch is really that "new". Mine was delivered with Version 1.19.8, of course.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 27, 2013, 08:50:16 pm
Cool now I can see if my food is done inside the microwave :-DD
Yes I know you can't see through glass but it was a nice picture

But seriously. Now I want bluetooth!
I (we) want to send pictures to my phone and control the camera with my phone (with the app from FLIR
Before I make mine Open (after a little playing time )
Has anyone debugged the non assembled connectors?
Or has anyone encountered a Bluetooth settings menu?

The IMX has a special comport (register settings) for Bluetooth.
So I expect that the camera is looking at start-up for a Bluetooth module.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 09:09:00 pm
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.

Heh, that was one of the first things I fixed. Damn annoying to have it perform a nuc (calibration) juuuust when you're doing a measurement.


Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false

# turn on auto-nuc
rset .tcomp.services.autoNuc.active true

# trigger nuc
rset .image.services.nuc.commit true

The idea is to turn off auto-nuc, and then trigger a nuc when you think it's useful. I.e between measurements. Or not at all.  ;D

Happy uninterrupted video streaming!

Is this implemented in the latest hack on page 1? I really need to be able to toggle the calibration for video streams (no chopppy vids). I heard that you can force a calibration with one of the buttons, so it doesn't need to come on all the time.
no.
If you press and hold the play button it forces a cal. Note that cals happen a lot less often once the sensor temp has stabilised. If you leave it too long, you will start seeing a few drifty pixels appearing - again this may be less of an issue once the temp has stabilised.
Quote
Another question about the firmware. If I have to redo the factory mode and send it in for service, and they upload a new firmware, can I reload the old firmware if I have the installer (someone posted one a while back)?
If a purpose of any new FW is to prevent a hack, probably not. But obviously that depends on what they do.
They could easily fiddle with stuff like calibration files (or anything on flashfs) to make older FW not work, and new FW could be a lot more picky about what (if anything) it lets you install as "new" FW. Bear in mind that many factory "repairs" will simply be board swaps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on November 27, 2013, 09:40:53 pm
Forgot to mention cal date on my E4 before, so here goes: serial 639064xx, cal date nov 7, fw rev 1.19.8.

Also decided to get the extra battery and external charger the E8 is supposed to have. Those are a bit on the pricey side. Also, every time I see the charger in action I get an uncontrolled urge to say "exterminate!". Dunno why.

Got a lens adjustment tool printed at shapeways, the end result seems to be of pretty good quality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 27, 2013, 09:56:31 pm
For anyone interested, I have been keeping a list of serial numbers, calibration dates and firmware versions here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

If anyone wishes to PM me their partial serial number (First 5 digits is fine), FW and Cal date , I will keep updating the list for the forum members. The list is anonymous.

The latest unit I have listed is as follows:

S/n 6390 7xxx
Cal - 25 Nov
FW - 1.19.8

(Thanks to an anonymous forum member)

If you look at the serial numbers....if they are sequential, FLIR have sold quite a few E4's  ;D

63907xxx - 639027xx = Approx 4300 over roughly 2 months.

That of course assumes that the last 4 digits are not a combination of unique serial plus batch number as is common on many equipment serial numbers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on November 27, 2013, 11:33:13 pm

That of course assumes that the last 4 digits are not a combination of unique serial plus batch number as is common on many equipment serial numbers.

ASSuming 6390 only applies to E4's. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 27, 2013, 11:49:23 pm
Have been playing around with i2c.exe, it is a bit scary not knowing what it is actually doing on the bus. Especially when it comes to the read/write option and the effect it has on the read/write flag on the address byte being sent out. The read/write flag on the DS1388 Real time clock is inverted!!!

I do not recommend you do anything with i2c.exe you know what you are doing.
You could end up performing a write operation and screwing up your camera!


It seems that the EEPROM is at address 0xAE but the command will only return a maximum of 256 bytes.

Code: [Select]
\flashbfs\system>i2c.exe r AE FF
Open I2C device
I2C read command 57 100 returned: FF FF FF FF FF FF FF FF FF FF FF 0 46 4C 49 52 20 45 34 0 0 0 0 [snip].

Notice that 46 4C 49 52 20 45 34 is "FLIR E4" as identified by Mike in his video when he was sniffing the bus. Serial and calibration date follow later.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 27, 2013, 11:57:31 pm
Camera ID's

E4 - 63901
E5 - 63905  :o
E6 - 63902
E8 - 63903

i3 - 60101
i5 - 60101
i7 - 60101

E30 - 49001
E40 - 49001
E50 - 49001
E60 - 49001

T420 - 62101
T440 - 62101
T450 - 62101

T600 - 55901
T610 - 55901
T620 - 55901
T630 - 55902
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 27, 2013, 11:58:06 pm

That of course assumes that the last 4 digits are not a combination of unique serial plus batch number as is common on many equipment serial numbers.

ASSuming 6390 only applies to E4's.
The part number of all the E series starts with 6390, so could well be that they use the same SN prefix for all models - especially as the model may be determined at the last stage of production/calibration .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 03:52:32 am
UGH!  Something is Borked...

When I try to save an image now I am getting a message that there is no Memory card? 

Anyone else see this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 28, 2013, 05:05:15 am
When I try to save an image now I am getting a message that there is no Memory card? 

Anyone else see this?
Relax, that's "normal". When you do the usb cable dance, it needs some time to figure out what to do with this here flash drive. So after fiddling with usb, give it a few seconds. If you get that message, try again in 5 seconds.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 06:03:59 am
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on November 28, 2013, 06:32:47 am
Hi, got mine in today from the West coast USA.  Cal Nov 9th, firmware 1.19.8

I noticed something odd, though.  The display has a 8 degree gradient temperature going across it. 
The first two are captures from the ceiling, rotated 180 degrees.  The 3rd one is with the lens cover closed. 
This doesn't seem right, does anyone else see this issue with theirs?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 28, 2013, 06:35:51 am
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...

There's a new one... needing to reflash (reformat?) it. Because I really hope you just mean format. :P

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 28, 2013, 06:38:51 am
Hi, got mine in today from the West coast USA.  Cal Nov 9th, firmware 1.19.8

I noticed something odd, though.  The display has a 8 degree gradient temperature going across it. 
The first two are captures from the ceiling, rotated 180 degrees.  The 3rd one is with the lens cover closed. 
This doesn't seem right, does anyone else see this issue with theirs?

That big a gradient with the lens cover closed just can't be good. And uniform gradient under rotation is not good either. Looks like you may have a defective unit somehow. I mean, 8 degrees gradient ... that's just unusable.

I'd send an e-mail to Flir asking about this, in parallel with looking to return the unit as DOA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 06:48:38 am
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...

There's a new one... needing to reflash (reformat?) it. Because I really hope you just mean format. :P

Yeah tried format... It didn't like it... :(  Actually trying reflash.  Hoping that it didn't get fried   |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 28, 2013, 06:54:44 am
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...

There's a new one... needing to reflash (reformat?) it. Because I really hope you just mean format. :P

Yeah tried format... It didn't like it... :(  Actually trying reflash.  Hoping that it didn't get fried   |O

Reformatting because it had problems finding the device in the first place might be not the best of ideas.

Soooo, how exactly did your dog unplug the usb device in an unscheduled manner? Are any of the USB functionalities working at all?

Stupidity check #1 is use a different cable + different usb port. Just in case something went a bit wonky.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on November 28, 2013, 07:32:34 am
Hi, got mine in today from the West coast USA.  Cal Nov 9th, firmware 1.19.8

I noticed something odd, though.  The display has a 8 degree gradient temperature going across it. 
The first two are captures from the ceiling, rotated 180 degrees.  The 3rd one is with the lens cover closed. 
This doesn't seem right, does anyone else see this issue with theirs?

That big a gradient with the lens cover closed just can't be good. And uniform gradient under rotation is not good either. Looks like you may have a defective unit somehow. I mean, 8 degrees gradient ... that's just unusable.

I'd send an e-mail to Flir asking about this, in parallel with looking to return the unit as DOA.

it's strange, the calibration doesn't take care of it.  I wonder if the calibration shutter isn't fully retracting, or some sensor bias connection went bad
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 07:34:58 am
Hi, got mine in today from the West coast USA.  Cal Nov 9th, firmware 1.19.8

I noticed something odd, though.  The display has a 8 degree gradient temperature going across it. 
The first two are captures from the ceiling, rotated 180 degrees.  The 3rd one is with the lens cover closed. 
This doesn't seem right, does anyone else see this issue with theirs?

in short: that's just not looking right - is there some object covering the corner of the IR lens?
such an object could spoil the image even after self-calibration (NUC) (if it resides on one of the lens surfaces)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 07:38:06 am
it's strange, the calibration doesn't take care of it.  I wonder if the calibration shutter isn't fully retracting, or some sensor bias connection went bad
yep, such a mechanical issue would cause something like that - have that regulary with my chinese flir  - hitting re-cal and a knock helps most of the time then... does it change with NUC in different positions?
(hold play button till "calibrating")
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 28, 2013, 08:13:52 am
Quote from: Taucher
hitting re-cal and a knock helps most of the time then
Good idea: try to knock the camera on the table a few times, maybe the shutter which closes during calibration is jammed in someway. If there is not change: send it back immediately to your reseller for an exchange before they run out of stock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 08:16:38 am
it's strange, the calibration doesn't take care of it.  I wonder if the calibration shutter isn't fully retracting, or some sensor bias connection went bad
yep, angle seems matching - see the attached screenshot from mikes teardown
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on November 28, 2013, 08:17:24 am
I rotated the lens out to have a look and found this aluminum thing with a hole in it (the aperture) was loose and rattling around.  This must be what is causing the problem, as if it's not perfectly centered, different sections of the sensor are blocked, I guess. It probably throws out calibration totally, too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 08:20:16 am
Quote from: Taucher
hitting re-cal and a knock helps most of the time then
Good idea: try to knock the camera on the table a few times, maybe the shutter which closes during calibration is jammed in someway. If there is not change: send it back immediately to your reseller for an exchange before they run out of stock.
hehe - yes, that chinese model would make a great mace ... but it's just bad software not driving the stepper timing correctly - I'll probably get rid of that cam anyway as I now have a superior model :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 08:24:57 am
I rotated the lens out to have a look and found this aluminum thing with a hole in it (the aperture) was loose and rattling around.  This must be what is causing the problem, as if it's not perfectly centered, different sections of the sensor are blocked, I guess. It probably throws out calibration totally, too.
the shutter error is gone in that mirror image too... probably the metal thing was blocking the shutter from retreating fully :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 28, 2013, 08:36:06 am
Quote
I'll probably get rid of that cam anyway as I now have a superior model
me too - it is already on the way. Which 'superior model' do you have now?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 10:26:06 am
The E4 is designed to survive a 2m drop test which is quite impressive. If a part is floating around inside the camera I would suggest getting a new one from the supplier as your unit has not been assembled correctly. These things are too expensive to accept a less than 'perfect' unit. You have the images as evidence of the fault. The latest stock is shipping from Estonia with firmware 1.19.8 (as at 25 Nov) so you can relax on that front. US warehouse stock looks to have been shipped from Europe about 2 weeks ago.

Title: Problem with Flir Tools +
Post by: Petrlib on November 28, 2013, 11:29:39 am
Hello my friends,

I install Flir Tools and used 30 days trial of Flir Tools + . When I want report in MS WORD ( MS OFFICE 2010 ) there is error. Flir Tools showing " generating report " and after few seconds error :

NullReferenceException: Object reference not set to an instance of an object

Do you have same problém? Do you know how to fix it?

Any help will be good!

Thank you - Petr
Title: Flir Tools
Post by: Petrlib on November 28, 2013, 11:32:36 am
One more  question about Flir Tools.

Is it any chance to have temperature marks on Picture? At this moment is possible to have just marks Sp and temperature marks are on side in table. ( °C or °F )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 01:31:26 pm
I have made a comment on my serial no. Vs Firmware & cal date repository regarding firmware version 1.20.3.

This was reported by one person to have been installed in a repaired E4. Those aware of that persons statement will know of its stated implications. The reporter was a brand new member of the forum with no provenance to the statement. At the time I advised readers to 'Panic Slowly' until more information was received.

I have made efforts to confirm the existance of the 1.20.3 firmware and there is absolutley no independant verification if its existance.

Firmware 1.19.8 was still being installed on 25 Novemeber 2013. It is time, IMHO, to declare the report of 1.20.3 to be an error or hoax, and not applicable to the present releases of E4's from Estonia.

There is the likelihood that FLIR will release new firmware in the future with any bug fixes that have been reported. There is no official comment from FLIR on the recent E4 improvement program that users have instigated. It is not possible to predict what, if any, action is taken to make such improvement difficult.

I shall continue to log serial numbers against firmware and calibration dates as the archive may be of future interest to forum members.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 01:40:38 pm
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...

There's a new one... needing to reflash (reformat?) it. Because I really hope you just mean format. :P

Yeah tried format... It didn't like it... :(  Actually trying reflash.  Hoping that it didn't get fried   |O

Reformatting because it had problems finding the device in the first place might be not the best of ideas.

Soooo, how exactly did your dog unplug the usb device in an unscheduled manner? Are any of the USB functionalities working at all?

Stupidity check #1 is use a different cable + different usb port. Just in case something went a bit wonky.

Cable got yanked during transfer...

Ok so the reflash completed and I was successful in DOWNGRADING the firmware  :-+  (Not what I was trying but cool nonetheless)

HOWEVER... I still get the "There is no memory card" error"  When I looked at the "drive" there wasn't a DCIM folder or anything else... Created one but that didn't resolve it...  |O

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 01:42:52 pm
Its been quite a bit more than a few seconds... The usb cable got yanked (blame it on the dog  |O)  And When I tried to reconnect it said that the file system was unrecognized and windoze kicked off a repair... ARGH!  Trying to reflash it now...

There's a new one... needing to reflash (reformat?) it. Because I really hope you just mean format. :P

Yeah tried format... It didn't like it... :(  Actually trying reflash.  Hoping that it didn't get fried   |O

Reformatting because it had problems finding the device in the first place might be not the best of ideas.

Soooo, how exactly did your dog unplug the usb device in an unscheduled manner? Are any of the USB functionalities working at all?

Stupidity check #1 is use a different cable + different usb port. Just in case something went a bit wonky.

Oh and all other USB functions are available. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 01:51:22 pm
IIRC there is more than just a DCIM file in that 'drive'.
I will take a look in mine and report back. If I can attach the missing files  here, I will. If not PM me your email address.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 02:07:40 pm
As I suspected, the E4 drive contains some other files. Not certain that this is your problem but I attach the files you appear to have lost and as the OS has not recreated them I suppose they are either unimportant or beyond the OS to recreate.

I deleted the content of the txt file as it is just the boot log.

Have you tried the Windows drive repair tool? Also, I trust you have formatted it with FAT32 and not NTFS ? Windows 7 drive properties indicates that the drive is 182,421,504 bytes in size.

I attach screen grabs of the drive as seen by Win7 storage management.

Good luck
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 02:50:34 pm
Yup on fat 32... It won't complete.  I did get the other files back but no joy...

Wonder if somehow the readonly flag got set on the DCIM folder but can't figure out where it is when I ftp to it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 03:04:08 pm
I have been thinking about the failure mode . If the system flash and drive flash are on the same chip (I can't remember whether they are) and the flash was being written to when the cable was disconnected, there is a very high risk of the flash chips FAT getting corrupted, resulting in all manner of nasty effects. I would have expected the E4 to fail on boot though.

I think you need input from one of the Win CE experts on rebuilding the FAT. I am way out of my comfort zone with doing this sort of thing on Win CE SBC's.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 03:10:32 pm
It would make sense that they are if you can FTP and see the file system and the pictures...  When you FTP to the camera, where do you see the pictures?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 03:25:40 pm
When I looked at the files content using Filezilla I saw Documents and settings plus FlashBFS.

I assume the pictures are stored in Documents and settings but I could not access them as an access violation occurred. I am wary that what you see via the FTP is a manipulated image of the FLASH memory. A bit like a proxy server. You see what the OS allows you to see. This may explain why you cannot treat the flash drive area that holds the pictures like a normal USB stick. Hence failure to format that area of the memory ? I am likely talking total rubbish though as I have little experience of embedded computers and how they present their flash through FTP access.

Sorry I cannot be of more help to you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 03:35:49 pm
Given that everything is functioning except storing images, I am hopeful that its just a permissions issue at this point... I did shoot off an email to Flir in hopes they have a solution. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 28, 2013, 03:41:19 pm
I suggest you copy off the contents of FlashFS, as this is everything unique to your cam.
It should in principle be possible to rebuilt everything from scratch - there are some scary looking tools both in the Windows dir, and the pre winCE boot serial terminal prompt, however it isn't known if we have the files necessary to do a clean build from the latter - it appears to have the ability to mount as a USB device, but we don't know if it needs a special format to be able to use this. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 03:53:43 pm
I suggest you copy off the contents of FlashFS, as this is everything unique to your cam.
It should in principle be possible to rebuilt everything from scratch - there are some scary looking tools both in the Windows dir, and the pre winCE boot serial terminal prompt, however it isn't known if we have the files necessary to do a clean build from the latter - it appears to have the ability to mount as a USB device, but we don't know if it needs a special format to be able to use this.

Done...

What is interesting is when I search with Filezilla, I can not find a DCIM folder?  If you can ftp the pictures off, I would think you would see it right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 04:02:44 pm
Also, what is the name of the drive?  I noticed that it says untitled and pretty sure that it didn't before...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 04:34:23 pm
interesting... Version.rsc has serial and a CRC...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 28, 2013, 04:35:43 pm
so here the E60 files I used for my E30, pw funzt666

but remember do it by your own risk, I had some bad starts with my new E60, but together we will win! :-DD
So if you need more please ask!

E30 has same components inside, WLAN and bluetooth is on board!!!
So it regognize my WLAN android hotspot, but FLIR mobile doesnt see my cam :-//
Im not ready with it, ...

but good news: it works as good as the orig E60 I have rent :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 28, 2013, 04:37:57 pm
Also, what is the name of the drive?  I noticed that it says untitled and pretty sure that it didn't before...
The user drive is \FlashIFS, though I have occasionally seen it get mounted as FlashIFS2 - I think this was when service mode was active.
If you're not seeing this from FTP this would explain why saving isn't working
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 04:39:25 pm
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 04:45:20 pm
so here the E60 files I used for my E30, pw funzt666

but remember do it by your own risk, I had some bad starts with my new E60, but together we will win! :-DD
So if you need more please ask!

E30 has same components inside, WLAN and bluetooth is on board!!!
So it regognize my WLAN android hotspot, but FLIR mobile doesnt see my cam :-//
Im not ready with it, ...

but good news: it works as good as the orig E60 I have rent :-+

Any chance you'll open the cam an make some pics and note the part#? :)

@flirtools: I think they detect compatible cameras by type/name
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 28, 2013, 04:46:20 pm
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Could be some corruption - might be worth renaming FlashIFS and creating a new one - renaming may be safer if contents are corrupt.

Remember FlashIFS will disappear when you connect with MSD, and will take a few secs to re-mount when USB is unplugged or USB mode changed
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 04:47:29 pm
Mike - I think you are onto something... FlashIFS is not there and when I created the directory, it got deleted...


When I look now its not there at all in Filezilla...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 28, 2013, 04:49:19 pm
E60+ WLAN works now :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 05:00:03 pm
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Could be some corruption - might be worth renaming FlashIFS and creating a new one - renaming may be safer if contents are corrupt.

Remember FlashIFS will disappear when you connect with MSD, and will take a few secs to re-mount when USB is unplugged or USB mode changed

Got it recreated, no joy... Wondering what the contents of flashIFS are vs what you see when you MSD...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 28, 2013, 05:12:31 pm
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Could be some corruption - might be worth renaming FlashIFS and creating a new one - renaming may be safer if contents are corrupt.

Remember FlashIFS will disappear when you connect with MSD, and will take a few secs to re-mount when USB is unplugged or USB mode changed

Got it recreated, no joy... Wondering what the contents of flashIFS are vs what you see when you MSD...
FlashIFS should be the same as what you see via MSD, which is also what you see via the virtual drive that Flir's toolbar util sets up when the unit is in RNDIS mode.
Actually I wonder if this could be an issue - if this util is running may be worth trying stopping it, though AFAIK it's just an FTP link so shouldn't stop normal FTP via RNDIS working.
There is a utility in wither Windows of FlashBFS\system that will show some info about the flash filesystem - don't recall the name but it is fairly obvious - may be worth trying this (via telnet console)
Console may also be a more reliable place to look at directories, attributes etc.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 05:21:02 pm
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Could be some corruption - might be worth renaming FlashIFS and creating a new one - renaming may be safer if contents are corrupt.

Remember FlashIFS will disappear when you connect with MSD, and will take a few secs to re-mount when USB is unplugged or USB mode changed

Got it recreated, no joy... Wondering what the contents of flashIFS are vs what you see when you MSD...
FlashIFS should be the same as what you see via MSD, which is also what you see via the virtual drive that Flir's toolbar util sets up when the unit is in RNDIS mode.
Actually I wonder if this could be an issue - if this util is running may be worth trying stopping it, though AFAIK it's just an FTP link so shouldn't stop normal FTP via RNDIS working.
There is a utility in wither Windows of FlashBFS\system that will show some info about the flash filesystem - don't recall the name but it is fairly obvious - may be worth trying this (via telnet console)
Console may also be a more reliable place to look at directories, attributes etc.

Ok, that seems to be the issue.  What I see via MSD is not the same.

AND any attempt to recreate FlashIFS is not sticking...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 28, 2013, 05:50:36 pm
I wonder if any distributors will have Black Friday discounts tomorrow.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 06:05:38 pm
Wondering if it had a hardware prob to start...


Now its stuck on the flir startup screen and won't do anything... ARGH...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on November 28, 2013, 06:15:55 pm
A bit more info about the defective camera.. I let it sit overnight and this morning noticed that when it first starts up, there isn't as much of a temperature gradient problem.  I took a snap when it started up and once a minute for the first 5 minutes.  You can see that the gradient forms when its internal electronics begin heating up.  This time, the inner aperture moved a bit and the gradient is now top to bottom.
These are all with the cover closed and the unit sitting still.
I'm curious to see what someone else's model does in the first 5 minutes of startup after sitting several hours to cool off.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 28, 2013, 06:26:05 pm
I got a message today: New FLIR Tools Version
Should we be worried?

In the "read more..." link: <li>Camera update (applies to FLIR Ex, Kxx, Exx and T6xx series only).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on November 28, 2013, 06:31:56 pm
Just seen the same. Would they dare implement an auto firmware update ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 28, 2013, 07:10:03 pm
I got a message today: New FLIR Tools Version
Should we be worried?
Well, try out and tell us  >:D >:D
... just kidding ... why risk something? Old Flir tools are working fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2013, 07:44:57 pm
A bit more info about the defective camera.. I let it sit overnight and this morning noticed that when it first starts up, there isn't as much of a temperature gradient problem.  I took a snap when it started up and once a minute for the first 5 minutes.  You can see that the gradient forms when its internal electronics begin heating up.  This time, the inner aperture moved a bit and the gradient is now top to bottom.
These are all with the cover closed and the unit sitting still.
I'm curious to see what someone else's model does in the first 5 minutes of startup after sitting several hours to cool off.

That camera is defective.

There is no temperature gradient on my E4 and the display stays a nice even orange colour when the camera is in auto mode. When looking for temperature drift it is best to use a very small span such as 2 or 4 degrees Celsius. $ 4 degrees can be achieved on an E4 with upgraded menus offering manual span. I find Auto mode sticks to large spans of 8 Degrees or more. If yo are seeing gradient drift at wider spans, it will be truly awful at 4 degrees span.

As I previously stated, I recommend you exchange your unit ASAP.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 28, 2013, 07:46:02 pm
Quote
I got a message today: New FLIR Tools Version
Should we be worried?

This is one of those times where you should actually read (I know) the EULA. If the new version is going to automatically update firmware files on your camera, you'll have to agree to it somewhere for legal purposes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on November 28, 2013, 07:52:02 pm
I am not going to update anything with this camera.  No sense in chancing it.
Camera works just fine the way it is as an E4/8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tanntraad on November 28, 2013, 07:52:32 pm
I got a message today: New FLIR Tools Version
Should we be worried?
Well, try out and tell us  >:D >:D
... just kidding ... why risk something? Old Flir tools are working fine.
True :) It would be way out of my league to mess with software on this level. I didn't save the complete ZIP of the last version but the new one's got a "terminatetrueupdate.exe" and it scares the crap out of an amateur like me.
Title: AW: Flir E4 Thermal imaging camera teardown
Post by: maex on November 28, 2013, 08:01:52 pm
I'm very interested to get time-lapse working. I have some strings seen in the firmware. Has the E60 this feature?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amiq on November 28, 2013, 08:18:14 pm
For those of you who imported a camera to your country via a third party (friend/shipping agent etc.) - have you registered your purchase with Flir?

I haven't done so yet but I'm wondering if there will be any 'complications'.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 08:32:23 pm
Hoping that they don't ding me too bad on the repair for mine... :(  Dunno if the dog yanking the cord was the issue or not, but can't just straight up claim warranty...

Lesson learned.. No picture transfers near the pooch...  (he is a tad rambunctious and got tangled in the usb when he jumped up on the couch  |O) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 28, 2013, 08:34:06 pm
A bit more info about the defective camera.. I let it sit overnight and this morning noticed that when it first starts up, there isn't as much of a temperature gradient problem.  I took a snap when it started up and once a minute for the first 5 minutes.  You can see that the gradient forms when its internal electronics begin heating up.  This time, the inner aperture moved a bit and the gradient is now top to bottom.
These are all with the cover closed and the unit sitting still.
I'm curious to see what someone else's model does in the first 5 minutes of startup after sitting several hours to cool off.

If as Aurora says, your camera is defective, maybe you should try the FLIR-Tools update.

Nothing to lose if you are going to get exchanged/repaired under warranty. AND it may tell the rest of us whether the update is safe for the hack or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 28, 2013, 08:39:19 pm
A bit more info about the defective camera.. I let it sit overnight and this morning noticed that when it first starts up, there isn't as much of a temperature gradient problem.  I took a snap when it started up and once a minute for the first 5 minutes.  You can see that the gradient forms when its internal electronics begin heating up.  This time, the inner aperture moved a bit and the gradient is now top to bottom.
These are all with the cover closed and the unit sitting still.
I'm curious to see what someone else's model does in the first 5 minutes of startup after sitting several hours to cool off.

If as Aurora says, your camera is defective, maybe you should try the FLIR-Tools update.

Nothing to lose if you are going to get exchanged/repaired under warranty. AND it may tell the rest of us whether the update is safe for the hack or not.

That is a good idea!  Seeing you hafta rma it anyway. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 28, 2013, 08:55:28 pm
Hoping that they don't ding me too bad on the repair for mine... :(  Dunno if the dog yanking the cord was the issue or not, but can't just straight up claim warranty...

Lesson learned.. No picture transfers near the pooch...  (he is a tad rambunctious and got tangled in the usb when he jumped up on the couch  |O)
Did you remove the battery/hard reset the cam - and did you try the reset to factory settings funktion?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 28, 2013, 09:40:01 pm
I have the language file unravelled

There are some useful options described  :-+ like video and time lapse
I think we are missing a menu  >:D

And I think that the WIFI function only has a WEB encrypted option ??  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 28, 2013, 10:00:54 pm
Quote
I got a message today: New FLIR Tools Version
Should we be worried?

This is one of those times where you should actually read (I know) the EULA. If the new version is going to automatically update firmware files on your camera, you'll have to agree to it somewhere for legal purposes
Would be interesting to see if the InstallNet thing has changed - a change in that would be highly suspicious....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on November 28, 2013, 10:01:33 pm
Just to make sure I'm not missing anything, has someone unlocked wifi on the E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on November 28, 2013, 10:03:11 pm
Just to make sure I'm not missing anything, has someone unlocked wifi on the E4?
Nope - it lacks the hardware to enable such a feature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on November 28, 2013, 10:30:12 pm
InstallNet from 11/26

md5 B1E0E444F97ED212357A35AA71E29457
sha2 256 578A716CC9B790266EF92A14EAB09557D5BEC02152F3DF69FF49776B27C4DCD9
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: funzt on November 28, 2013, 11:04:56 pm
I got a message today: New FLIR Tools Version
Should we be worried?
Well, try out and tell us  >:D >:D
... just kidding ... why risk something? Old Flir tools are working fine.
True :) It would be way out of my league to mess with software on this level. I didn't save the complete ZIP of the last version but the new one's got a "terminatetrueupdate.exe" and it scares the crap out of an amateur like me.
I tested my cam with the updated flir tools ...no problems yet
did cold start...everything seems ok
@peter please help me in the 650 temperatur thing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 28, 2013, 11:06:11 pm
InstallNet from 11/26

md5 B1E0E444F97ED212357A35AA71E29457
sha2 256 578A716CC9B790266EF92A14EAB09557D5BEC02152F3DF69FF49776B27C4DCD9

InstallNet v1.7.13241.1001 as packaged with tools v4.0.13284.1003
MD5 b1e0e444f97ed212357a35aa71e29457

Looks good :)
Title: Regarding the new FLIR Tools...
Post by: Taucher on November 29, 2013, 02:30:51 am
Ok, I couldn't resist to stop this whole "guessing" about the new tools (what a waste of time):
Direct link: http://cdn.cloud.flir.se/update/flir%20tools/4.0.13330.1003/flir%20tools.zip (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13330.1003/flir%20tools.zip)

First let's take a look at the list of the last available updates:
Quote
   FLIR Tools / FLIR Tools+ 4.0 (4.0.13330.1003)
   FLIR Reporter 9.2 PRO, 30-Day Evaluation (9.2.13330.1001)
   FLIR Sensor Manager 3.10 (v3.10.0.0)
   FLIR Sensor Manager 3.10 (v3.10.0.0)
   FLIR ix v6.5.3 Update Pack (P/N: 6010X-XXXX)
   FLIR Exx P/N:645xx / 646xx (3.12.7) Update Pack
   FLIR Kxx (1.19.9) Update Pack
   FLIR Ex (1.18.7) Update Pack
   FLIR ResearchIR MAX 3.5 with SCxxxx and Xsc series drivers, 30-Day Evaluation (3.5.13277.1001)
   FLIR ResearchIR 3.5, 30-Day Evaluation (3.5.13277.1001)
... ok, as expected the tools got updated.. nothing exciting yet ...
   
Then let's look at the differences in newest Flir Tools - compared with previous version:
(unpack .zip, unpack .cab files etc)
Findings in short:
- Flir removed lots of old, binary stuff inside prerequisite directories (VCredist etc. - no Flir code)
- They kept language packs unchanged in size
- If something got changed, then mostly just version numbers, but not sizes for most files
- Only relevant changes are inside report generator and clearly office-report-integration-related
They just cleaned up some office integration with the new tools - so please stop panicking!

In more detail:
Inside flir tools.cab:
- file_FLIR_Tools_Updater.exe is  UPXed... but unchanged ...
- file_FLIR_Tools_Updater.dat (PKzip file, PW is "99B2328D3FDF4E9E98559B4414F7ACB9"  :-DD )
... got changed due to version information strings:
  _TUProj.dat-> old: "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003"
  _TUProj.dat-> new: "http://cdn.cloud.flir.se/update/flir tools/4.0.13330.1003"
  that .dat file beeing some .lua script made by/for TrueUpdate 3.0 - whoever likes to take a look - now you know where...
  The URLs above seem to be some webservices or to require getting/posting some additional value
  Also possibly helpful: /CHECK_UPDATE_AVAILABLE_ONLY
 
Other files from the .cab:
DynamicDataDisplay.dll ... recompiled with new version info, no relevant changes
file_Flir.Configuration.Configurator ... recompiled with new version info, no relevant changes
...etc etc...
file_Flir.Modules.Common - gained some bytes
file_Flir.Modules.Organize - gained some bytes
file_FLIR_Tools_Updater.dat - changed size due to compression - see above ;)
GoogleAnalyticsTracker.dll <- WTF?!... excuse me - are we spying on our customers?! (same size, change just recompile/signed with up2date key)
--- NO other changes there in the tools ---

Inside flir word reporting.cab: 
- IRSummaryTable (minor changes)
- IRTable  (minor changes)
- RapidReportCreator.exe  (minor changes)
- WizardClassLibrary.dll (minor changes)
... plus some updates for version information - but no functionality

File: configureoffice.exe -> got removed...
Conclusion again: They just cleaned up some office integration with the new tools - you can stop panicking and stop comparing hashes now  ;D
Title: Re: Regarding the new FLIR Tools...
Post by: Richard Wad on November 29, 2013, 04:04:51 am
Nice Taucher
I see GoogleAnalyticsTracker.dll is in the previous version also
Without it in the progdir Flirtools crashes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 29, 2013, 04:12:43 am
Hoping that they don't ding me too bad on the repair for mine... :(  Dunno if the dog yanking the cord was the issue or not, but can't just straight up claim warranty...

Lesson learned.. No picture transfers near the pooch...  (he is a tad rambunctious and got tangled in the usb when he jumped up on the couch  |O)
Did you remove the battery/hard reset the cam - and did you try the reset to factory settings funktion?

At this point its now stuck on the Flir start up screen... Removed the battery but no go.  Is there another way to reset?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 29, 2013, 04:37:51 am
At this point its now stuck on the Flir start up screen... Removed the battery but no go.  Is there another way to reset?

:o That doesn't sound too good. What did you do to that poor camera? With a bit of luck it "only" hangs on trying to startup appcore. As in, if you had RNDIS enabled before mucking about you might still have ftp + telnet because these services are seperate from appcore + the gui with which you interact. If that is the case I suggest you do a full download of all files now. Yes, again even if you did that already in the past. And obviously to a seperate location so that you have both old and new situation.

It may just fail on some messed up resource / config file combination, but no way to be sure.  :-//

At any rate, if you are still having this problem after battery removal etc ... try ftp-ing all files.
Title: Re: Regarding the new FLIR Tools...
Post by: mrflibble on November 29, 2013, 04:46:18 am
... got changed due to version information strings:
  _TUProj.dat-> old: "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003"
  _TUProj.dat-> new: "http://cdn.cloud.flir.se/update/flir tools/4.0.13330.1003"
  that .dat file beeing some .lua script made by/for TrueUpdate 3.0 - whoever likes to take a look - now you know where...
  The URLs above seem to be some webservices or to require getting/posting some additional value
  Also possibly helpful: /CHECK_UPDATE_AVAILABLE_ONLY

Nothing as exciting as that. "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003" is just the url prefix for where to grab the iso/exe/zip file. That XML you see is just because the other end is just some REST api serving binary blobs. And when you configure that mickeysoft style, you get that XML on a 404. :P

Relevant urls:
http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir%20tools.zip (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir%20tools.zip)
http://cdn.cloud.flir.se/update/flir%20tools/4.0.13330.1003/flir%20tools.zip (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13330.1003/flir%20tools.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 29, 2013, 06:16:33 am
At this point its now stuck on the Flir start up screen... Removed the battery but no go.  Is there another way to reset?

:o That doesn't sound too good. What did you do to that poor camera? With a bit of luck it "only" hangs on trying to startup appcore. As in, if you had RNDIS enabled before mucking about you might still have ftp + telnet because these services are seperate from appcore + the gui with which you interact. If that is the case I suggest you do a full download of all files now. Yes, again even if you did that already in the past. And obviously to a seperate location so that you have both old and new situation.

It may just fail on some messed up resource / config file combination, but no way to be sure.  :-//

At any rate, if you are still having this problem after battery removal etc ... try ftp-ing all files.

No such luck... :( 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 29, 2013, 06:42:59 am
Mmmh... assuming no pebkac, that would mean either no RNDIS or something more serious. Do you remember what usb mode you had it in last?

Does it still list as an uvc video device? As in, when you use FlirInstallNet, and do a refresh, does it list any camera's? If you still have the UVC interface then maybe that can be used to fix things. UVC is available pretty early in the boot process, so hopefully some luck there.

If you tried that, and no luck there either ==> what is the USB device VID/PID?
Title: Re: Regarding the new FLIR Tools...
Post by: Taucher on November 29, 2013, 09:03:29 am
Nothing as exciting as that. "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003" is just the url prefix for where to grab the iso/exe/zip file. That XML you see is just because the other end is just some REST api serving binary blobs. And when you configure that mickeysoft style, you get that XML on a 404. :P
As you see I had added the direct DL link in my post ... so yes, I know that DL url ... but I'd suppose there's some mechanism to detect when a new version is available - and that version number can't be known by the old updater... well, time for a wireshark :)
Title: Re: Regarding the new FLIR Tools...
Post by: mrflibble on November 29, 2013, 09:25:22 am
Nothing as exciting as that. "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003" is just the url prefix for where to grab the iso/exe/zip file. That XML you see is just because the other end is just some REST api serving binary blobs. And when you configure that mickeysoft style, you get that XML on a 404. :P
As you see I had added the direct DL link in my post ... so yes, I know that DL url ... but I'd suppose there's some mechanism to detect when a new version is available - and that version number can't be known by the old updater... well, time for a wireshark :)

You also said "The URLs above seem to be some webservices or to require getting/posting some additional value ", which is the bit I was responding to. No webservice there. Definitely not at an url that already contains the version string in it. ;)

But running the update + wireshark should show you fast enough where it gets it's "new update available" information from.
Title: Re: Regarding the new FLIR Tools...
Post by: Taucher on November 29, 2013, 10:20:24 am
Nothing as exciting as that. "http://cdn.cloud.flir.se/update/flir tools/4.0.13284.1003" is just the url prefix for where to grab the iso/exe/zip file. That XML you see is just because the other end is just some REST api serving binary blobs. And when you configure that mickeysoft style, you get that XML on a 404. :P
As you see I had added the direct DL link in my post ... so yes, I know that DL url ... but I'd suppose there's some mechanism to detect when a new version is available - and that version number can't be known by the old updater... well, time for a wireshark :)

You also said "The URLs above seem to be some webservices or to require getting/posting some additional value ", which is the bit I was responding to. No webservice there. Definitely not at an url that already contains the version string in it. ;)

But running the update + wireshark should show you fast enough where it gets it's "new update available" information from.
...it does :)

Flir Tools on start:
   http://internalstore.flir.com -> StatusCode: 302, Moved temporarily -> Location:  http://www.flir.com/internalstore/ (http://www.flir.com/internalstore/)
   http://www.flir.com/internalstore/ -> Http: Request, GET /,
   Query:/?productname=FLIR%20Tools&licensefileid=50040&licenseserialnumber=&computername=EXISTS&username=EXISTS/EXISTSALSO
   = Reply: HtmlPayload: <!DOCTYPE html ... <title>FLIR Tools</title> ... <meta http-equiv="Content-Type" ....

Flir Tools Updater:
   Ipv4: Dest = cdn.cloud.flir.se ... aka ....msecn.net (microsoft windows azure cloud I assume)
   UserAgent:  TrueUpdate 3.5
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts1
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts2
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts3
   Reply contains an executeable file

I've detected no further traffic from Flir Tools - but note that I have an extensive hosts-file and might be blocking google analytics attempts this way - a second packet sniff would be helpful here :)
Title: Re: Regarding the new FLIR Tools...
Post by: mrflibble on November 29, 2013, 10:53:08 am
But running the update + wireshark should show you fast enough where it gets it's "new update available" information from.
...it does :)

Flir Tools on start:
   http://internalstore.flir.com -> StatusCode: 302, Moved temporarily -> Location:  http://www.flir.com/internalstore/ (http://www.flir.com/internalstore/)
   http://www.flir.com/internalstore/ -> Http: Request, GET /,
   Query:/?productname=FLIR%20Tools&licensefileid=50040&licenseserialnumber=&computername=EXISTS&username=EXISTS/EXISTSALSO
   = Reply: HtmlPayload: <!DOCTYPE html ... <title>FLIR Tools</title> ... <meta http-equiv="Content-Type" ....

Flir Tools Updater:
   Ipv4: Dest = cdn.cloud.flir.se ... aka ....msecn.net (microsoft windows azure cloud I assume)
   UserAgent:  TrueUpdate 3.5
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts1
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts2
   Http: Request, GET /update/flir%20tools/4.0.13284.1003/flir_tools.ts3
   Reply contains an executeable file
Yup, that looks a lot more sensible. :)

Quote
I've detected no further traffic from Flir Tools - but note that I have an extensive hosts-file and might be blocking google analytics attempts this way - a second packet sniff would be helpful here :)
Perfectly willing to help, but what do you expect to find?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 29, 2013, 11:39:28 am
Just a few more pesky questions before I run the EZCRC01 tool. I want to make sure I have a full untouched E4 backup before I upgrade.

In normal USB mode I copied all photos and hidden files as is to a folder. It seems like there should be more to back up than this.

I installed the Flir Windows driver, enabled the RNDIS + UVC on the cam, and tried to connect to the cam via 192.168.0.2. Upon connection the page showed but no files were listed.

I read that I need to do the RNDIS step for the menu hack, so It would be nice to get it working. However I want to get the res, etc hack working first. How do I do a full backup of the factory installed/user files?

The rest of the stuff looks easy, so as soon as I get a nice backup I can continue to install all hacks.

Thanks ahead of time for your help and patience.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 29, 2013, 11:58:43 am
I installed the Flir Windows driver, enabled the RNDIS + UVC on the cam, and tried to connect to the cam via 192.168.0.2. Upon connection the page showed but no files were listed.

use whatever ftp client you like. ftp connect to 192.168.0.2, user=flir, pass=3vlig, grab all files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 29, 2013, 12:17:27 pm
I installed the Flir Windows driver, enabled the RNDIS + UVC on the cam, and tried to connect to the cam via 192.168.0.2. Upon connection the page showed but no files were listed.

use whatever ftp client you like. ftp connect to 192.168.0.2, user=flir, pass=3vlig, grab all files.
I have found that not all FTP clients work - filezilla is fine
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 29, 2013, 12:21:10 pm
I installed the Flir Windows driver, enabled the RNDIS + UVC on the cam, and tried to connect to the cam via 192.168.0.2. Upon connection the page showed but no files were listed.

use whatever ftp client you like. ftp connect to 192.168.0.2, user=flir, pass=3vlig, grab all files.
I have found that not all FTP clients work - filezilla is fine

Now you spoiled anotherwise perfectly fine lesson on active/passive modes. I got tired of spamming "USE WINSCP IN FTP MODE BECAUSE IT IS SUPERAWESOME", so I went for "use whatever" instead. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on November 29, 2013, 01:42:36 pm
Mmmh... assuming no pebkac, that would mean either no RNDIS or something more serious. Do you remember what usb mode you had it in last?

Does it still list as an uvc video device? As in, when you use FlirInstallNet, and do a refresh, does it list any camera's? If you still have the UVC interface then maybe that can be used to fix things. UVC is available pretty early in the boot process, so hopefully some luck there.

If you tried that, and no luck there either ==> what is the USB device VID/PID?

Will give that a shot, but its acting as if its not booting... Given that their appeared to be some kind of corruption on the drive, I think it went south.  It might need a trip to the mothership :(

RNDIS was the mode it WAS in the last time. 

Checked the USB and it doesn't appear as a device at all. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on November 29, 2013, 02:39:27 pm
Thanks Mike for hack!!
I just picked up E4 in SF (Purchased from Valuetesters, purchased 21 November).
Firmware: 1.19.8
SN: 6390673X
Camera version: E4 1.0
Calibration date: 12 November
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: H.O on November 29, 2013, 04:12:52 pm
So, exactly 3 weeks after giving my money to PASS, for a unit they confirmed to have, I finally received my E4 today.
S/N: 63907xxx
F/W: 1.19.8
Cal date: 2013-11-25
I payed £720+S/H & VAT

Followed the step by step guide to apply the upgrade and it just worked, of course. Thanks Mike!

Need to read up on what functionallity the menu hack provides before trying the out - if I feel it's something I need. Not that I strictly needed the E4 in first place but, well yeah, you know....  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 29, 2013, 04:19:48 pm
I have just received the 3D printed E4 parts from Lunevalley3D in the UK.

If you want to see the focus tool, lens holder and tripod adapter please look here:

 https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg339327/#msg339327 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg339327/#msg339327)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 29, 2013, 04:38:16 pm
This tripod holder looks really awesome! Thanks Georges80. I think I will get one ordered, too.
Is there a plan to place an order like for multiple pieces to maybe get a discount? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 29, 2013, 04:50:24 pm
I am not aware of a group buy for printing these parts but Dale at Lunevalley3D is a nice guy who wants to produce good quality parts. His prices are very reasonable. Apparently some printers charge by volume which makes items like the tripod adapter expensive. Note my comments on the fill percentage. the part would be much cheaper with a 10% fill as less material is used. The outside finish should not be changed by a lesser fill.

There should be 3D printing services in most European countries so a local provider who can print high resolution parts may be better for you.

I must say I am impressed with this whole 3D design and printing capability and I don't have the hassle of keeping the printer working, have a choice of colours to choose from and printer related failures cost me nothing. The cost is reasonable for the usefulness of the part produced  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on November 29, 2013, 05:01:45 pm
So, exactly 3 weeks after giving my money to PASS, for a unit they confirmed to have, I finally received my E4 today.
S/N: 63907xxx
F/W: 1.19.8
Cal date: 2013-11-25
I payed £720+S/H & VAT

Followed the step by step guide to apply the upgrade and it just worked, of course. Thanks Mike!

Need to read up on what functionallity the menu hack provides before trying the out - if I feel it's something I need. Not that I strictly needed the E4 in first place but, well yeah, you know....  8)

So they manufactured more than 300 pieces on two weeks, nice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 29, 2013, 11:09:46 pm
If someone wants to make his own menu icons, they are in the FlashBFS\system\ui.d\facet_z3.rcc file
This is a dump of all 405 icons
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 29, 2013, 11:10:14 pm
I've been using the tripod mount for quite a few measurements and found it to be great... but... what I wanted was something that was more easily adjustable vertically and so went looking for options.

I've ordered a manfrotto flex arm (the 237HD model) and a superclamp for it. So, to use this new setup (should arrive next week), I really needed a 1/4-20 mount on the 'end' of the holder. Spent some time last night adding a 2nd mount point to the original design and created a new 3D model.

Some pics of it below including the sketchup and stl files. It's basically identical to the original design but with a rear/bottom mount. It was a little more challenging for the 3d printer since it had to create an overhang, but seemed to handle it. Just needed a little cleanup of the dross/raft that it created for the overhang section.

cheers,
george.

Title: Notes regarding the Flir Updater
Post by: Taucher on November 29, 2013, 11:21:09 pm
Random notes/info regarding the downloaded updater files:
(Feel free to skip reading this post unless you like to dissect the updater) ^-^

~Log:
first let's get the main files which the updater is fetching...
wget http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts1 (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts1) (crypted blob)
wget http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts2 (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts2) (file_FLIR_Tools_Updater.dat, encrypted Zip, key known)
wget http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts3 (http://cdn.cloud.flir.se/update/flir%20tools/4.0.13284.1003/flir_tools.ts3) (file_FLIR_Tools_Updater.exe, UPXed exe)


# file flir_tools.ts1

flir_tools.ts1: data

# binwalk flir_tools.ts1
DECIMAL         HEX             DESCRIPTION
-------------------------------------------------------------------------------------------------------------------
# xortool.py flir_tools.ts1
The most probable key lengths:
   5:   12.8%
   7:   12.9%
  10:   12.3%
  13:   11.5%
  16:   10.8%
  19:   9.6%
  24:   8.6%
  26:   8.1%
  31:   7.0%
  34:   6.4%
Key-length can be 3*n
Key-length can be 5*n
Most possible char is needed to guess the key!


-> The character distribution is mostly uniform and my gut feeling suggests it's a xor'ed zip or some CBC crypted ini
Remark: the .dat in the update dat file (ts2) is possibly containing the crypt-key or checksum as 4 byte binary ("_TUProjDT.dat")



# file flir_tools.ts2
flir_tools.ts2: Zip archive data, at least v2.0 to extract

# binwalk flir_tools.ts2  -> obviously new version of the flir_tools_update.dat
DECIMAL         HEX             DESCRIPTION
-------------------------------------------------------------------------------------------------------------------
0               0x0             Zip encrypted archive data, at least v2.0 to extract, compressed size: 25747,  uncompressed size: 92278, name: "_TUProj.dat"
25788           0x64BC          Zip encrypted archive data, at least v1.0 to extract, compressed size: 16,  uncompressed size: 4, name: "_TUProjDT.dat"
25847           0x64F7          Zip encrypted archive data, at least v2.0 to extract, compressed size: 4478,  uncompressed size: 11282, name: "IRIMG1.JPG"
30365           0x769D          Zip encrypted archive data, at least v2.0 to extract, compressed size: 8285,  uncompressed size: 8440, name: "IRIMG2.JPG"
38690           0x9722          Zip encrypted archive data, at least v2.0 to extract, compressed size: 165099,  uncompressed size: 344064, name: "IRZip.lmd"
203828          0x31C34         Zip encrypted archive data, at least v2.0 to extract, compressed size: 118247,  uncompressed size: 390590, name: "ReportIR_Update.ico"
322886          0x4ED46         End of Zip archive


Remark: decryption password is "99B2328D3FDF4E9E98559B4414F7ACB9" (also note that it's some hexdump as string)



# file flir_tools.ts3
flir_tools.ts3: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

-> Here it's already obvious that it is "flir tools updater.exe" ... but let's play around just for fun:

# binwalk flir_tools.ts3
DECIMAL         HEX             DESCRIPTION
-------------------------------------------------------------------------------------------------------------------
790804          0xC1114         LZMA compressed data, properties: 0xB8, dictionary size: 16777216 bytes, uncompressed size: 8192 bytes
835452          0xCBF7C         LZMA compressed data, properties: 0x40, dictionary size: 16777216 bytes, uncompressed size: 8192 bytes



let's deUPX it...
        File size         Ratio      Format      Name
   --------------------   ------   -----------   -----------
   1612096 <-    853312   52.93%    win32/pe     flir_tools.ts3
Unpacked 1 file.



# binwalk flir_tools.ts3
(unpacked now)
DECIMAL         HEX             DESCRIPTION
-------------------------------------------------------------------------------------------------------------------
956112          0xE96D0         Copyright string: " (C) 1994-2004 Tecgraf, PUC-Rio $ $"
1161384         0x11B8A8        TIFF image data, little-endian
1194172         0x1238BC        LZMA compressed data, properties: 0x40, dictionary size: 16777216 bytes, uncompressed size: 256 bytes
1535036         0x176C3C        LZMA compressed data, properties: 0xB8, dictionary size: 16777216 bytes, uncompressed size: 8192 bytes
1579676         0x181A9C        LZMA compressed data, properties: 0x40, dictionary size: 16777216 bytes, uncompressed size: 8192 bytes


And some Unicode strings (visible also by using exploer->file properties)
VS_VERSION_INFO
StringFileInfo 04090000
Created with TrueUpdate
CompanyName FLIR Systems
FileDescription flir tools updater.exe runtime
FileVersion 3.5.4.1
ProductName flir tools updater.exe
ProductVersion 4.0.13330.1003

Summary: nothing really exciting ... but I'm considering blacklisting the server-name in the hosts file so the auto-download of the new updater binary is stopped :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 29, 2013, 11:22:35 pm
Oh George  :)

Another adapter for my favourite 3D print provider  :)

Great work. Thank you.

Can you please provide a picture of the 1/4" 20tpi thread insert that you are using.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 29, 2013, 11:32:13 pm
I've been using the tripod mount for quite a few measurements and found it to be great... but... what I wanted was something that was more easily adjustable vertically and so went looking for options.

I've ordered a manfrotto flex arm (the 237HD model) and a superclamp for it. So, to use this new setup (should arrive next week), I really needed a 1/4-20 mount on the 'end' of the holder. Spent some time last night adding a 2nd mount point to the original design and created a new 3D model.

Some pics of it below including the sketchup and stl files. It's basically identical to the original design but with a rear/bottom mount. It was a little more challenging for the 3d printer since it had to create an overhang, but seemed to handle it. Just needed a little cleanup of the dross/raft that it created for the overhang section.

cheers,
george.

Idea; Let's include the tripod-thread in the STL file itself... it will be plastic, but once worn out that thread can still easily be replaced with a metal insert by simply drilling a larger hole ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 29, 2013, 11:39:11 pm
Oh George  :)

Another adapter for my favourite 3D print provider  :)

Great work. Thank you.

Can you please provide a picture of the 1/4" 20tpi thread insert that you are using.

Pictures attached. One side mates with a 1/4" hex key to 'screw' it into the wood/plastic etc. On V2 of the files, I've increased the blind hole ID's a little to make it easy for this particular nutsert to be screwed directly into the plastic without having to heat the nutsert to 'melt' in.

cheers,
george.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on November 29, 2013, 11:48:50 pm
Idea; Let's include the tripod-thread in the STL file itself... it will be plastic, but once worn out that thread can still easily be replaced with a metal insert by simply drilling a larger hole ;)

Left as an exercise for the reader :) I have included the Sketchup file, so if someone want's (and knows) how to create a threaded hole - more power to them :)

Also, I print my models with 10% fill (part of the prep work to take the stl file and create the makerbot specific file), so drilling a bigger hole would get into the 'empty' honeycomb space and there would be nothing to 'tap' into. Of course if folk have theirs printed 100% fill (costs more, takes longer of course), then there would be some 'meat' to tap into.

I'm my case the 1/4-20 nutserts are easy to purchase at the local hardware store so it's somewhat academic to my needs...

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: unicorn5 on November 30, 2013, 06:00:15 am
Hi, I'm not technical, just joined due to e4 links.

It seems i'm a little late to the game, would it be thought of as not the smartest thing to do, to order a unit now if only interest is to have a e4 hacked, but no good reason to own one. Though I do intend to see what heat is lost from my house due to bad insulation?

And as I have no reason to own one, my other idea was to strap the e4 onto my chest attach it to RC FPV video goggles and walk around in pitch black. Based on the lens angle of view would that be possible or is the field of view too narrow and so not really viable.  Not wide angle enough and too shakey. I have a 4x 42mm night vision device and that works really well but don't know how to relate it's magnification and angle of view to a flir e4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on November 30, 2013, 08:15:08 am
If you want to fit it in a 10% fill simply take the insert and fill the thread section with a little silicone rubber after spraying it with oil inside. When dry wash it to remove the oil and make it clean and oil free on the outside, and fill the printed part with some 2 part epoxy and screw in the insert fast then place it so the insert is at the low point and wait for the epoxy to cure around it. Very strong and adds a little extra mass and more strength to the bottom of the print.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 30, 2013, 09:23:03 am
Another ready source of inserts is 3/8" to 1/4"adapters, so including a 3/8" thread in the moulding would allow a metal insert to be screwed & glued in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 30, 2013, 12:04:32 pm
Another happy owner of a Flir E4 "just undo it" edition

Calibration certificate
Model: Flir E4
Serial No.: 639077xx
Site: FLIR Systems OÜ, Estonia
Date: November 22, 2013

Software: 1.19.8

FLIR Tools: 4.0.13330.1003

Ordered from omega.de for about ~EUR 930,- exkl. VAT incl. shipping

The upgrade worked as described in Post #1.

Thanks to everyone involved.

This is an awesome tool. Not much to add to the review by mikeselectricstuff. The USB port is a real weak spot. The resolution of the normal camera seems unnecessarily low. Now it's time to scout for some 3D printing services...or get a printer
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on November 30, 2013, 12:28:14 pm
@Dave: I am sure that you plan to do a video with your E8 on thermography and using the TIC. Many people have their first TIC now and would like to use it for verifying the thermal insulation of their houses and for checking PCBs.
Unfortunately there are many pitfalls for a beginner.
When doing building analysis, the thermal images seen on the cam and color gradings might lead to wrong assumptions.

This might not be your specialist field but it would be great if you point out some details so that every new TIC owner can do the engineers approach: listen, learn and know what and where to search :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on November 30, 2013, 12:56:21 pm
I installed the Flir Windows driver, enabled the RNDIS + UVC on the cam, and tried to connect to the cam via 192.168.0.2. Upon connection the page showed but no files were listed.

use whatever ftp client you like. ftp connect to 192.168.0.2, user=flir, pass=3vlig, grab all files.

So, something is vexing me. I'm no stranger to basic IP routing and similar things, but even with my knowledge and following the very clear directions I can't get the RNDIS stuff to allow me to connect to the camera and browse/copy the files before upgrading the camera. Everything has installed correctly, camera is in the right mode, and the drivers are all working. Using Filezilla I just keep getting timeouts. Any ideas on what I need to check? It's probably something stupidly simple. See the attached portion of my Device Manager.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 30, 2013, 12:59:52 pm
Since it does list a Flir network adapter there at least there is something working. Maybe 192.168.0.0/24 is already in use an it assigns for example 192.168.1.2 to your camera? You could check out the properties of that Flir Network adapter to check ip etc...

Also, when you put your E4 in UVC + RNDIS mode, then when you use FlirInstallNet and then do a refresh it should list your camera as both a UVC device as well as a networked device in the Camera selection dropdown menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 30, 2013, 01:00:31 pm
@Dave: I am sure that you plan to do a video with your E8 on thermography and using the TIC. Many people have their first TIC now and would like to use it for verifying the thermal insulation of their houses and for checking PCBs.
Unfortunately there are many pitfalls for a beginner.
When doing building analysis, the thermal images seen on the cam and color gradings might lead to wrong assumptions.

This might not be your specialist field but it would be great if you point out some details so that every new TIC owner can do the engineers approach: listen, learn and know what and where to search :)

Again: FLIR has really good information on how to use their products - already included in the manual - plus there are their really nice, freely available PDFs handbooks for specialty uses :)

In principle it settles down to
TIC Beginner Rules:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 30, 2013, 01:03:12 pm
Since it does list a Flir network adapter there at least there is something working. Maybe 192.168.0.0/24 is already in use an it assigns for example 192.168.1.2 to your camera? You could check out the properties of that Flir Network adapter to check ip etc...
Look simply at the assigned IP of the FLIR's network interface - it might be another range like 168.... default gateway of that interface is usually the camera address!
(Taken care of by the installed TIC system service ... you can use cmd with ipconfig /release and /renew on the interface to fix a bad IP assignment)
Title: Re: Notes regarding the Flir Updater
Post by: mrflibble on November 30, 2013, 01:03:27 pm
# binwalk flir_tools.ts1

Didn't know that one yet. binwalk added to the collection of handy tools, thanks. :)

Yesterday I checked the update, but apart from some amusing bits in the update script nothing useful really as you also found out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 30, 2013, 01:26:06 pm
For those wishing to learn about thermography I offer the following links from FLIR. I will add this to the useful information thread as well.

1. FLIR are offering a free book that helps with building surveys. You have to register but I have not received any marketing as a result :) The book is available as a download, in paper format or both. I went for both and it is an interesting publication. As has been stated, there are pitfalls for newbies....such as corner effect.

http://www.flir.com/cs/emea/en/view/?id=49380 (http://www.flir.com/cs/emea/en/view/?id=49380)

2. Various free books on different topics may be downloaded here:

http://www.flir.com/cs/emea/en/view/?id=42241 (http://www.flir.com/cs/emea/en/view/?id=42241)

3. The FLIR ITC training centre offers courses in thermography for both newbies and advanced users. Some courses are at the centre whilst others are free on-line e-training. I recommend taking the free courses as they will help users to understand the world of thermography and to get the most out of your camera. The courses are about an hour each and as they are free you have nothing to lose. There are no catches to these free courses.

http://www.flir.com/cs/emea/en/view/?id=41758 (http://www.flir.com/cs/emea/en/view/?id=41758)

Most courses are on the US site:

http://irtraining.inquisiqr3.com/ (http://irtraining.inquisiqr3.com/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sipo75 on November 30, 2013, 02:10:41 pm
itc has a YouTube channel

Emissivity Explained in Plain English
Emissivity Explained in Plain English (https://www.youtube.com/watch?v=gueQrS6ORI0#)

itc channel
https://www.youtube.com/user/infraredtraining/videos (https://www.youtube.com/user/infraredtraining/videos)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on November 30, 2013, 02:41:51 pm
Probably some have already seen this
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69184;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on November 30, 2013, 02:48:53 pm
yeah, it's been discussed before. The unlock password is 1235.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on November 30, 2013, 03:04:53 pm
Haha, how lazy can you get?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jdesbonnet on November 30, 2013, 05:54:09 pm
Small (I hope) hickup on loading the FIF (E4 firmware 1.19.8, FLIRInstallNet from FLIR tools 4.0.13330.1003, Windows 7 64 bit). I'm getting a "RESPONSE_TIMEOUT" in a dialog box when attempting to upload the FIF file generated with the e4hack3b.zip and then:

Connection timeout
Operation aborted
NoAdapter

in the main area of FLIRInstallNet. The tool does find the camera as "FLIR USB Video -"  and the "Get Versions" button works (reporting the camera's firmware etc). I'm going to try rebooting windows but since I'm in that piece of junk only once a year it takes about a day to reboot thanks to uncancellable updates on power down.

Update 1 Dec 2013: Ya, took a while to reboot Windows due to all the updates since the last reboot about a year ago. So worked perfectly after the Windows reboot. What had me worried was that some elements of the FLIRInstallNet software were communicating with the camera, but not the FIF uploader.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 30, 2013, 06:53:12 pm
Figured out how to telnet into my E4+ from linux.

>>> EDIT and the web & ftp interfaces work too.
Make sure the camera is in RNDIS mode.
AND that this is the only network interface active at the time.

First plug in your camera, and set up the resulting pseudo ethernet interface (varies by distro) to have a static IP of
192.168.250.3.

>>>> EDIT could probably add the default GW as well in the network management tool.

Unplug the camera wait 5-10 seconds then plug it back in.

Then, as root,

arp -s 02:40:7f:xx:yy 192.168.250.2
-------^^^^^^^^^^   your mac address with 02 instead of  00 at the front.

I then ping the camera

ping 192.168.250.2

Then, again as root,

route add default gw 192.168.250.2

and lo I can telnet to the camera!

telnet 192.168.250.2

 I'd love for someone else to try this and see if it works for them, I've spent a lot of time going through WireShark dumps of ethernet traffic between the camera and Win 7 and this is the simplest way to brute force it in linux.
YMMV.
   ...ken...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 30, 2013, 07:06:15 pm
From FLIR's Youtube site.

How to make an MSX fusion image of a PCB by combining a thermal image with a separate photo taken with a digital camera. This could be useful when doing close-up work where the Ex camera is of little help. It looks like you need FLIR Tools+ but I believe that is available as a demo version ?

Create an MSX Image (Tools+) (https://www.youtube.com/watch?v=gmILckpdTdU#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on November 30, 2013, 07:14:50 pm
Figured out how to telnet into my E4+ from linux.

>>> EDIT and the web & ftp interfaces work too.
Make sure the camera is in RNDIS mode.
AND that this is the only network interface active at the time.

Great news and congrats :)
Hint: you should be able to access the filesystem over the SMB share as well :)

Regarding "only active NIC" ... I'd try to get rid of the default gateway - and just add a route... this way your running IP setup should continue to work in parallel.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 30, 2013, 07:24:49 pm
Taucher,

I am by no means a networking expert, and this method can certainly be refined, but it is fairly simple and works. ;>))
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on November 30, 2013, 10:41:07 pm
So, exactly 3 weeks after giving my money to PASS, for a unit they confirmed to have, I finally received my E4 today.

Glad you posted that - it reminded me to check whether they credited the order i cancelled on 25th. Guess what - they haven't !

Going to kick up hell on Monday - this isn't funny on top of the pack of lies i've been spun (and clearly not the only one).

I won't be dealing with them in future, you might say i'll be giving them a PASS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on November 30, 2013, 10:44:15 pm
And a somewhat simpler method

Make sure the camera is in RNDIS mode, other network interfaces are fine as long as they are not on 192.168.250.x.

First, on your linux box, as root:

echo 0 > /proc/sys/net/ipv4/conf/all/arp_accept

Then, as before, plug in your camera, and set up the resulting pseudo ethernet interface (varies by distro) to have a static IP of
192.168.250.3.

Unplug the camera wait 5-10 seconds then plug it back in. (This may not be necessary and there is probably an easier way )

Then you can ping, telenet, ftp, & use the web interface. I've tried the SMB interface, but it doesn't seem to work, probably due to the lack of NETBIOS exchanges that occurred on the Win 7 box.
Title: Spying Bastards
Post by: Taucher on December 01, 2013, 12:11:45 am
Nice Taucher
I see GoogleAnalyticsTracker.dll is in the previous version also
Without it in the progdir Flirtools crashes
Ok, stole myself some additional time and did an investigation on the Google Analytics DLL:

Found URLs inside DLL:
http://www.google-analytics.com/__utm.gif (http://www.google-analytics.com/__utm.gif)
https://ssl.google-analytics.com/__utm.gif (https://ssl.google-analytics.com/__utm.gif)

As said had to check my hosts file first ... had them blacklisted already...
0.0.0.0      ssl.google-analytics.com
0.0.0.0      www.google-analytics.com (http://www.google-analytics.com)
... ok, temporarily redirected them for testing to my local http-server.. fired up the tools and :wtf:  hold and beware...
BINGO, HOME-CALLING!

:rant: "Bloody, Spying BASTARDS"  :rant:
 :-- :-- :-- :-- :-- :-- :-- :-- :-- :--

This (and more) is beeing sent to Google:

When starting:   
   &utmn=<SOME NUMBER>
   &utmhn=<THE WINDOWS MACHINE HOSTNAME>
   &utme=5(Application start*4.0.13284.1003*)(0)8(Origin*OSCulture*OSBits)9(EXTERNAL*<LOCALE>*<OS-BITS>)....

When opening the images browser:
   &utmdt=Library Tab   

When looking at an image:
   &utmdt=Edit Window 
   
Feel free to contribute more!


I understand developers who want to optimize their product and provide the user with a better experience, but then... what for do they need my machine's name for?!
Tons of additional numbers beeing sent (click/mouse coordinates?) ... could also be encoded username, password, IP... (ok, that's now just my paranoia kicking in)...
Opt-out function: didn't see any

I don't like that at all!

PS: sending referer: http://library.tools.flir.com (http://library.tools.flir.com)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 12:36:20 am
Regarding rndis on linux, or windoze for that matter:

Code: [Select]
rls -ll .services.net.interface.RNDISFN1

# if this doesn't show the interface, force reconstructing resource tree
restartapp

rls -ll .services.net.interface.RNDISFN1

.services.net.interface.RNDISFN1: (8)
rw--rw--rw---p 0 root   root   <b> DHCP                       false
r---r---r----- 0 root   root   <a> actualAddress    "192.168.250.2"
rw--rw--rw--0p 0 root   root   <a> address          "192.168.250.2"
rw--rw--rw--1- 0 root   root   <b> commit                     false
rw--rw--rw--0p 0 root   root   <a> gateway          "192.168.250.1"
rw--rw-------- 0 root   root   <u> mac             "02:40:7F:xx:xx:xx"
rw--rw--rw--0p 0 root   root   <a> netmask          "255.255.255.0"
r---r---r----- 0 root   root   <a> tcpConnects      "192.168.250.1"


rset .services.net.interface.RNDISFN1.address 192.168.250.2
rset .services.net.interface.RNDISFN1.gateway 192.168.6.66
rset .services.net.interface.RNDISFN1.commit true

rdump -f \temp\net_gateway.rsc .services.net.interface.RNDISFN1

# inspect .rsc file, and when okay add it to the

move /temp/net_gateway.rsc /FlashFS/system/appcore.d/factory.d/.

restart

For testing purposes the gateway is now set to something different, while
the rest is still at default. Why? Because that way you only have to setup a
default connection between 192.168.250.2 (E4) and 192.168.250.1 (PC), and
you can check if the new setting based on resource has been succesfully
applied or not. I put it in appcore.d right now, but you might want to put network
related stuff in services.d.

If resource based config worked, then you can do a telnet and then "route
print". If you see the 192.168.6.66 test route then it worked. If not, then
not. :P Once you get a reliable method (so far it's too flaky) then you can
apply the proper static values you want.

As for usb plug in out in + adding default routes ... no need for all that. You can simply do this:

/etc/udev/rules.d/70-persistent-net.rules
Code: [Select]
#
# Flir E4 met RNDIS
#
# USB device 0x:0x (rndis_host)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:40:7f:xx:xx:xx", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth4"

Then in /etc/network/interfaces:
Code: [Select]
auto eth4
iface eth4 inet static
        address 192.168.250.1
        netmask 255.255.255.0
        up arp -i eth4 -s 192.168.250.2 02:40:7f:xx:xx:xx

Obviously change the xx:xx:xx entries to match your own MAC.

If you want your linux box to route packets for the E4 as well so you can
fuel your paranoia like Taucher, then you'll have to enable forwarding.
Personally I keep this OFF. :P If I need ftp forwarded I'll set up a seperate rule for that.

You can also enable DHCP using the above rset method if you feel like it.

SMB should just work. By default there isn't all that much to be had
though. Just the IPC ...

Code: [Select]
nmblookup -A 192.168.250.2

...

nmblookup IRCAM.... -B 192.168.250.2

querying IRCAM.... on 192.168.250.2
192.168.250.2 IRCAM....<00>

smbclient -L IRCAM....

smbclient  '\\IRCAM....\IPC$' 3vlig

And does anyone else get that the battery refuses to charge when it's really
low? Right now it's looooow, so I can start it for maybe 10 seconds and then
it goes poof again. When I show battery stats (hold LEFT + RIGHT cursor) it
shows Battery: 3%, 13mA ... but no charging (lightning) symbol.
Sound familiar, or do I just have a crappy battery or something?

Oh yeah, and I had some details on flash as well, but can't reach it now
because ... well 3% battery.  :P And NOT charging, GRRRRR.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 01, 2013, 12:53:17 am
Could be that when very low it starts charging at a low rate for a while in case it's a faulty batery
Title: Re: Spying Bastards
Post by: Fraser on December 01, 2013, 12:55:49 am

I understand developers who want to optimize their product and provide the user with a better experience, but then... what for do they need my machine's name for?!
Tons of additional numbers beeing sent (click/mouse coordinates?) ... could also be encoded username, password, IP... (ok, that's now just my paranoia kicking in)...
Opt-out function: didn't see any

I don't like that at all!

PS: sending referer: http://library.tools.flir.com (http://library.tools.flir.com)

FLIR use quite a tough anti-piracy procedure on their software as it is a very expensive optional accessory that they wish to protect. FLIR Tools is free but may be upgraded to FLIR Tools+. The activation of Tools+ is likely to be similar to that of the other FLIR software as it costs around $400.

Could it be that the Google data exfiltration is part of an anti-piracy protection system ?

Like you, I am unhappy if my computer is passing my activities with FLIR Tools to FLIR via Google collection agents. As I am registered with FLIR HQ they could likely correlate me with the build state of my camera so such data would not be anonymous. I don't recall agreeing to that but its likely buried in the EUL. Not too happy with this finding. ET phone home indeed ! 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 12:57:09 am
If you want your linux box to route packets for the E4 as well so you can
fuel your paranoia like Taucher, then you'll have to enable forwarding.


SMB should just work. By default there isn't all that much to be had
though. Just the IPC ...


And does anyone else get that the battery refuses to charge when it's really low?

@USB - Check your USB power status - lsusb -v / hwinfo --usb / hwinfo --usb-ctrl ... maybe hard-reboot your cam after hacking it's soul to death? ;)

@SMB - did you note how niceliy the hostname is generated from the SN?  ;D

@Paranoia - I'm still missing my http://en.wikipedia.org/wiki/Tin_foil_hat (http://en.wikipedia.org/wiki/Tin_foil_hat) .. my Idol:
(https://i1.ytimg.com/vi/-13Q-UsXKQM/mqdefault.jpg)  :-/O
Title: Re: Spying Bastards
Post by: Taucher on December 01, 2013, 01:01:22 am
Like you, I am unhappy if my computer is passing my activities with FLIR Tools to FLIR via Google collection agents. As I am registered with FLIR HQ they could likely correlate me with the build state of my camera so such data would not be anonymous. I don't recall agreeing to that but its likely buried in the EUL. Not too happy with this finding. ET phone home indeed !
Well, my paranoid, default OS setup took care of that home calling - feel free to adjust your hosts-file or windows firewall rules to take care of the unwanted data traffic :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 01, 2013, 01:02:09 am
With these mods can you guys find a way to toggle the annoying calibration popup on and off?

I don't want to be streaming video to my computer and have that damn thing continue to popup. When I shoot video I don't care if it's always fully calibrated.

Heh, that was one of the first things I fixed. Damn annoying to have it perform a nuc (calibration) juuuust when you're doing a measurement.


Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false

# turn on auto-nuc
rset .tcomp.services.autoNuc.active true

# trigger nuc
rset .image.services.nuc.commit true

The idea is to turn off auto-nuc, and then trigger a nuc when you think it's useful. I.e between measurements. Or not at all.  ;D

Happy uninterrupted video streaming!

I really need to be able to toggle the calibration for video streams (no choppy vids). I heard that you can force a calibration with one of the buttons, so it doesn't need to come on all the time.

OK, E4 hack is working well, but I need to fix this calibration step. What file do I edit to change the NUC values?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 01:07:07 am
Could be that when very low it starts charging at a low rate for a while in case it's a faulty batery

Good point, and looks to be likely too. Right now it is at 4% and 35mA (as opposed to 3%, 13mA earlier on).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 01:08:17 am
I really need to be able to toggle the calibration for video streams (no choppy vids). I heard that you can force a calibration with one of the buttons, so it doesn't need to come on all the time.
OK, E4 hack is working well, but I need to fix this calibration step. What file do I edit to change the NUC values?
Manual Re-Cal(NUC): keep holding down "Playback"
@File: you can probably put it in any <additional config> file that you like <as long as it's getting loaded> - or just run the wanted commands via telnet before recording a vid.
If you're asking yourself about rset and how to ... -> use telnet and don't use any file as this will change the default settings after startup.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 01:16:14 am
@USB - Check your USB power status - lsusb -v / hwinfo --usb / hwinfo --usb-ctrl ... maybe hard-reboot your cam after hacking it's soul to death? ;)

Heh, did that already, and also changed usb ports. Nothing. To be on the safe side I hooked it up to the 100% Flir approved charger.... But it looks to be just a safe slow charge like Mike pointed out.

Quote
@SMB - did you note how niceliy the hostname is generated from the SN?  ;D
I did notice that I am pretty sleepy. :palm: I'm not overly worried about serials though, but fixed on general principle, thanks. On that subject, you know you put your user/machine name in the HTTP request a few pages ago, right? Not that those were highly exciting, but just so you know. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 01:20:26 am
@SMB:
\\192.168.0.2\root$
\\192.168.0.2\windows$
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 01:25:38 am
I really need to be able to toggle the calibration for video streams (no choppy vids). I heard that you can force a calibration with one of the buttons, so it doesn't need to come on all the time.
OK, E4 hack is working well, but I need to fix this calibration step. What file do I edit to change the NUC values?
Manual Re-Cal(NUC): keep holding down "Playback"
@File: you can probably put it in any <additional config> file that you like <as long as it's getting loaded> - or just run the wanted commands via telnet before recording a vid.
If you're asking yourself about rset and how to ... -> use telnet and don't use any file as this will change the default settings after startup.

Indeed. I'd keep that bit of config non-permanent. Personally I'd use a telnet script. Or you can make a .FIF that executes those rset commands. That way before you start recording you do pointey clickey in FlirInstallNet, and apply that .FIF.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 01:28:05 am
On that subject, you know you put your user/machine name in the HTTP request a few pages ago, right? Not that those were highly exciting, but just so you know. :P
I assume you're referencing "EXISTS/EXISTSALSO" ... that's not my username or machine-name ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 01:30:41 am
On that subject, you know you put your user/machine name in the HTTP request a few pages ago, right? Not that those were highly exciting, but just so you know. :P
I assume you're referencing "EXISTS/EXISTSALSO" ... that's not my username or machine-name ;)
That was likely since it was highly contrived, but you never know. But more importantly, 6% @ 1290mA. yay!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 01:36:01 am
On that subject, you know you put your user/machine name in the HTTP request a few pages ago, right? Not that those were highly exciting, but just so you know. :P
I assume you're referencing "EXISTS/EXISTSALSO" ... that's not my username or machine-name ;)
That was likely since it was highly contrived, but you never know. But more importantly, 6% @ 1290mA. yay!
But you were close - it almost got past my scanning eyes because they added the hostname twice (once standalone, once as windows domain prefix) and my hostname isn't standing out in such a string - username neighter ... so nearly overlooked that one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 01, 2013, 01:48:11 am

OK, E4 hack is working well, but I need to fix this calibration step. What file do I edit to change the NUC values?
Manual Re-Cal(NUC): keep holding down "Playback"
@File: you can probably put it in any <additional config> file that you like <as long as it's getting loaded> - or just run the wanted commands via telnet before recording a vid.
If you're asking yourself about rset and how to ... -> use telnet and don't use any file as this will change the default settings after startup.
[/quote]

Indeed. I'd keep that bit of config non-permanent. Personally I'd use a telnet script. Or you can make a .FIF that executes those rset commands. That way before you start recording you do pointey clickey in FlirInstallNet, and apply that .FIF.
[/quote]

I guess I'm confused. Didn't these options come form an existing cfg file?
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false
# turn on auto-nuc
rset .tcomp.services.autoNuc.active true
# trigger nuc
rset .image.services.nuc.commit true

I would rather make the settings permanent since I can always ftp a fixed file back into the cam if I don't want it off. Since I'll be doing a lot of video, it makes sense to have it off and only available when I push the play button.

Do you have a turnkey solution? I'm not experienced at this stuff. I'm very grateful for any help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 02:00:23 am
@KingVidiot:
did you ever connect to your camera via telnet?!
if not: learn how to do that - it's easy and was explained multiple times here.
then just enter the rset commands that you like.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 01, 2013, 02:04:52 am
@KingVidiot:
did you ever connect to your camera via telnet?!
if not: learn how to do that - it's easy and was explained multiple times here.
then just enter the rset commands that you like.

I'll give it a go, thanks.

At least I can do that from a Mac or PC.  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 02:07:42 am
Off Topic: US ARMY Camera Catches Afghans gangbanging a goat (TIC video)
... www.liveleak.com/view?i=93d_1384239379 (http://www.liveleak.com/view?i=93d_1384239379)
 :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 01, 2013, 02:14:04 am
Cruel Ba**ards....I hope they catch something really nasty and their d*cks fall off !
Title: Re: Spying Bastards
Post by: Mr-Beamer on December 01, 2013, 03:06:12 am

BINGO, HOME-CALLING![/size]
:rant: "Bloody, Spying BASTARDS"  :rant:
 :-- :-- :-- :-- :-- :-- :-- :-- :-- :--

This (and more) is beeing sent to Google:

When starting:   
   &utmn=<SOME NUMBER>
   &utmhn=<THE WINDOWS MACHINE HOSTNAME>
   &utme=5(Application start*4.0.13284.1003*)(0)8(Origin*OSCulture*OSBits)9(EXTERNAL*<LOCALE>*<OS-BITS>)....

When opening the images browser:
   &utmdt=Library Tab   

When looking at an image:
   &utmdt=Edit Window 
   
Feel free to contribute more!


I understand developers who want to optimize their product and provide the user with a better experience, but then... what for do they need my machine's name for?!
Tons of additional numbers beeing sent (click/mouse coordinates?) ... could also be encoded username, password, IP... (ok, that's now just my paranoia kicking in)...
Opt-out function: didn't see any

I don't like that at all!

PS: sending referer: http://library.tools.flir.com (http://library.tools.flir.com)

not only do they sent stuff to google.


Host: internalstore.flir.com\r\n
Connection: Keep-Alive\r\n
\r\n
Full request URI: http://internalstore.flir.com/?productname=FLIR%20Tools%2B&licensefileid= (http://internalstore.flir.com/?productname=FLIR%20Tools%2B&licensefileid=)XXXXX&licenseserialnumber=&computername=XXXXXXX&username=XXXXXXX%5CXXXX

Response Phrase: Moved Temporarily
location: http://www.flir.com/internalstore/\r\n (http://www.flir.com/internalstore/\r\n)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 01, 2013, 07:30:28 am
Maybe they have a secret deal with the NSA? :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homr on December 01, 2013, 08:06:57 am
No wonder they are dieing for virgins.
Title: Re: Spying Bastards
Post by: Rasz on December 01, 2013, 09:50:21 am
Nice Taucher
I see GoogleAnalyticsTracker.dll is in the previous version also
Without it in the progdir Flirtools crashes
Ok, stole myself some additional time and did an investigation on the Google Analytics DLL:

Found URLs inside DLL:
http://www.google-analytics.com/__utm.gif (http://www.google-analytics.com/__utm.gif)
https://ssl.google-analytics.com/__utm.gif (https://ssl.google-analytics.com/__utm.gif)

As said had to check my hosts file first ... had them blacklisted already...
0.0.0.0      ssl.google-analytics.com
0.0.0.0      www.google-analytics.com (http://www.google-analytics.com)
... ok, temporarily redirected them for testing to my local http-server.. fired up the tools and :wtf:  hold and beware...
BINGO, HOME-CALLING!

:rant: "Bloody, Spying BASTARDS"  :rant:
 :-- :-- :-- :-- :-- :-- :-- :-- :-- :--

This (and more) is beeing sent to Google:

When starting:   
   &utmn=<SOME NUMBER>
   &utmhn=<THE WINDOWS MACHINE HOSTNAME>
   &utme=5(Application start*4.0.13284.1003*)(0)8(Origin*OSCulture*OSBits)9(EXTERNAL*<LOCALE>*<OS-BITS>)....

When opening the images browser:
   &utmdt=Library Tab   

When looking at an image:
   &utmdt=Edit Window 
   
Feel free to contribute more!


I understand developers who want to optimize their product and provide the user with a better experience, but then... what for do they need my machine's name for?!
Tons of additional numbers beeing sent (click/mouse coordinates?) ... could also be encoded username, password, IP... (ok, that's now just my paranoia kicking in)...
Opt-out function: didn't see any

I don't like that at all!

Some of those andom looking numbers is individual OS fingerprint and camera SN so they can track individual users. I wouldnt be surprised if they also fingerprinted pictures taken with the camera.
Im pretty sure its illegal in EU :/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 01, 2013, 11:19:14 am
Not if it's buried in the EULA somewhere...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 11:29:27 am
@Eula:
Legal or not, Eula or not - it's just another piece of gathering market data without giving the user an option to say "no, I don't want to be tracked"... but I guess it's easier not to bother customers.
Also not to forget - that tracking will not stop sending data if you have a paid or volume-accounted internet access (like mobile surfing with your notebook etc.).

@Updater
not only do they sent stuff to google.
Full request URI: http://internalstore.flir.com/?productname=FLIR%20Tools%2B&licensefileid= (http://internalstore.flir.com/?productname=FLIR%20Tools%2B&licensefileid=)XXXXX&licenseserialnumber=&computername=XXXXXXX&username=XXXXXXX%5CXXXX
yes, wrote about that too - but didn't highlight it with :rant: as it would have deserved to ...

... btw - note that it's not even trying to use SSL to provide any level of network security or prevent misuse of a hijacked update data stream (ok, who would bother...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 11:29:39 am
Not if it's buried in the EULA somewhere...

Sure it is. Or did you fulfill the requirement in your EULA stipulating that you kill at least 2 bunnies per day and evade taxes? Just because some legal droid vomited up some randomized sequence of characters doesn't make said vomit legal.

"By looking at this legal document you agree to  :blah: ..." yeah, good luck with that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 01, 2013, 11:57:35 am
Google lookenpeepers aside, some info on the flash partitions.


\>diskutil -L

Store "NAND FLASH":
Device Name: "DSK1:"
Description.: NAND FLASH
Partitions: 1
Mount Count: 1
Device Type: FLASH
Device Flags: |STORAGE_DEVICE_FLAG_READWRITE|TRANSACTED|
Device Attributes:
Number of Sectors: 8192
Bytes per Sector: 2048
Free Sectors: 0
Biggest Partition Creatable (sectors): 0

Partiton "Part00" on "DSK1:":
        Partition Name: "Part00"
        File System: exfat.dll
        Volume Name: FlashFS
        Volume Attributes:      Volume Flags: |WFSC_SUPPORTED|LOCKFILE_SUPPORTED|STORE|
        Number of Sectors: 7104
        Partition Type: NTFS or SDXC
        Partition Attributes: |MOUNTED|

Store "NAND FLASH":
Device Name: "DSK2:"
Description.: NAND FLASH
Partitions: 1
Mount Count: 1
Device Type: FLASH
Device Flags: |STORAGE_DEVICE_FLAG_READWRITE|TRANSACTED|
Device Attributes:
Number of Sectors: 91904
Bytes per Sector: 2048
Free Sectors: 0
Biggest Partition Creatable (sectors): 0

Partiton "Part00" on "DSK2:":
        Partition Name: "Part00"
        File System: exfat.dll
        Volume Name: FlashIFS
        Volume Attributes:      Volume Flags: |WFSC_SUPPORTED|LOCKFILE_SUPPORTED|STORE|
        Number of Sectors: 89280
        Partition Type: NTFS or SDXC
        Partition Attributes: |MOUNTED|

Store "NAND FLASH":
Device Name: "DSK3:"
Description.: NAND FLASH
Partitions: 1
Mount Count: 1
Device Type: FLASH
Device Flags: |STORAGE_DEVICE_FLAG_READWRITE|TRANSACTED|
Device Attributes:
Number of Sectors: 20480
Bytes per Sector: 2048
Free Sectors: 0
Biggest Partition Creatable (sectors): 0

Partiton "Part00" on "DSK3:":
        Partition Name: "Part00"
        File System: exfat.dll
        Volume Name: FlashBFS
        Volume Attributes:      Volume Flags: |WFSC_SUPPORTED|LOCKFILE_SUPPORTED|STORE|
        Number of Sectors: 19328
        Partition Type: NTFS or SDXC
        Partition Attributes: |MOUNTED|


Those are the FlashFS, FlashBFS and FlashIFS mountpoints we already knew. I suppose the root directory (with \windows and \temp etc in it) is just a ramdisk that's initialized during WinCE boot.
Title: Re: Spying Bastards
Post by: M. András on December 01, 2013, 02:35:38 pm
Nice Taucher
I see GoogleAnalyticsTracker.dll is in the previous version also
Without it in the progdir Flirtools crashes
Ok, stole myself some additional time and did an investigation on the Google Analytics DLL:

Found URLs inside DLL:
http://www.google-analytics.com/__utm.gif (http://www.google-analytics.com/__utm.gif)
https://ssl.google-analytics.com/__utm.gif (https://ssl.google-analytics.com/__utm.gif)

As said had to check my hosts file first ... had them blacklisted already...
0.0.0.0      ssl.google-analytics.com
0.0.0.0      www.google-analytics.com (http://www.google-analytics.com)
... ok, temporarily redirected them for testing to my local http-server.. fired up the tools and :wtf:  hold and beware...
BINGO, HOME-CALLING!

:rant: "Bloody, Spying BASTARDS"  :rant:
 :-- :-- :-- :-- :-- :-- :-- :-- :-- :--

This (and more) is beeing sent to Google:

When starting:   
   &utmn=<SOME NUMBER>
   &utmhn=<THE WINDOWS MACHINE HOSTNAME>
   &utme=5(Application start*4.0.13284.1003*)(0)8(Origin*OSCulture*OSBits)9(EXTERNAL*<LOCALE>*<OS-BITS>)....

When opening the images browser:
   &utmdt=Library Tab   

When looking at an image:
   &utmdt=Edit Window 
   
Feel free to contribute more!


I understand developers who want to optimize their product and provide the user with a better experience, but then... what for do they need my machine's name for?!
Tons of additional numbers beeing sent (click/mouse coordinates?) ... could also be encoded username, password, IP... (ok, that's now just my paranoia kicking in)...
Opt-out function: didn't see any

I don't like that at all!

PS: sending referer: http://library.tools.flir.com (http://library.tools.flir.com)

this is the very reason i set up the firewalls to interactive mode anything tries to connect to the internet triggers a user response window so i can decide i allow it or not apart from basic windows stuffs not too much is allowed to communicate on my computer, im sick of data gathering for improvements purposes of course without any data which can be used to identify you. yeah sure os license etc is not usable for that purpose bullshit....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isailer on December 01, 2013, 10:15:50 pm
I received my new E4 a few days ago but I noticed with the lens cover closed, the unit shows a ~15F degree temperature gradient. Does this mean the unit is defective?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigClive on December 01, 2013, 11:17:12 pm
Is it diagonal by any chance?  If you look back through the recent posts you'll see someone else had what appeared to be an obstruction in the cameras field of view which may have been the calibration shutter mechanism failing to retract fully or even becoming loose inside the unit due to either a manufacturing issue or a serious impact in transit.

If you do find it persists and affects the results in normal operation then don't do the hack as you may need to contact your supplier to exchange the unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 01, 2013, 11:26:52 pm
So after the hack my simple workflow of connecting the cam to my Mac and streaming to a Quicktime video doesn't work. The Flir is no longer an option as a capture camera in QT. I tried all sorts of USB modes on the cam but no luck. I can browse the cam in the MacOS Finder for the DCIM folder, but that's about it.

Anyone else see this? Any ideas for what is going on? I was going to shoot some vids at work today. Grrrr...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 01, 2013, 11:32:21 pm
So after the hack my simple workflow of connecting the cam to my Mac and streaming to a Quicktime video doesn't work. The Flir is no longer an option as a capture camera in QT. I tried all sorts of USB modes on the cam but no luck. I can browse the cam in the MacOS Finder for the DCIM folder, but that's about it.

Anyone else see this? Any ideas for what is going on? I was going to shoot some vids at work today. Grrrr...
get sleep, read syslog, cold restart any component involved and take close care to have the modes set up right... btw: I don't buy mac :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 01, 2013, 11:36:02 pm
Thanks. It's not a Mac thing. My Win7 ultimate has the same issue.  :-DD

I'll keep playing with the stuff...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 02, 2013, 12:26:42 am
Silly me, it was a camera setting, or a reboot of the cam and with a camera setting.  |O

Sorry for the false alarm. Strange, it didn't work on that setting before.

At least I can shoot some animal footage at work now.
Stay tuned for the vids...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on December 02, 2013, 01:24:58 am
Silly me, it was a camera setting, or a reboot of the cam and with a camera setting.  |O

Sorry for the false alarm. Strange, it didn't work on that setting before.

At least I can shoot some animal footage at work now.
Stay tuned for the vids...

Post some pics when you can

I have some pictures of my bird

(http://www.iceisfun.com/FLIR0018.jpg)

(http://www.iceisfun.com/FLIR0019.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on December 02, 2013, 01:33:58 am
I knew it would be only a matter of time before someone took a picture of their bird!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kaptein QK on December 02, 2013, 11:24:26 am
Just don't flip it!  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 02, 2013, 11:45:58 am
Just don't flip it!  :D

Too late!

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69386)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on December 02, 2013, 03:26:35 pm
Did someone encoutered issue - when Flir E4 camera is connected to PC it is unable to boot?
I would like to aks is is possible to modify the camera settings to set the black background to some transparency level?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jdesbonnet on December 02, 2013, 04:24:11 pm
Encountered a weird one this morning: it failed to warm boot while disconnected from USB (FLIR logo would appear and thermal for a brief instant, then off). Tried twice.  I had it in webcam mode last night (using VLC). My first thought was battery was low, but plugged USB cable ... indicated a full charge. But it *did* boot while plugged in. And it's been fine so far (plugged and unplugged).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on December 02, 2013, 05:04:11 pm
I've had this problem several times.
A cold boot solved the problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 02, 2013, 05:13:04 pm
Did someone encoutered issue - when Flir E4 camera is connected to PC it is unable to boot?
I would like to aks is is possible to modify the camera settings to set the black background to some transparency level?
I've already tried making the buttons transparent - little (read:no) success - the binary probably doesn't load the menu images in alpha enabled mode (in order to conserve processing power?) - the numbers (incl. design) are probably just hardcoded ... but I'd be glad to be proven wrong on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on December 02, 2013, 06:42:15 pm
I've had this problem several times.
A cold boot solved the problem.

I mean the PC boot, not the camera itself, so it is different issue I suppose.

Did someone encoutered issue - when Flir E4 camera is connected to PC it is unable to boot?
I would like to aks is is possible to modify the camera settings to set the black background to some transparency level?
I've already tried making the buttons transparent - little (read:no) success - the binary probably doesn't load the menu images in alpha enabled mode (in order to conserve processing power?) - the numbers (incl. design) are probably just hardcoded ... but I'd be glad to be proven wrong on this.

Thanks for info. It will be nice feature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 02, 2013, 06:55:06 pm
For those asking about transparent background for the on screen information, I have tried that mode on my PM695 and I can report that I found it vey hard to see the readings against some backgrounds so quickly reverted to the opaque background. Just my 2 Cents worth.

I will take a PM695 thermal image in the two modes and attach it to this message later for information.

Update: Pictures uploaded. Some provide clear text against the background, others not so clear. With a solid background the text is very clear in all cases. It is a matter of personal choice, but I use a solid background with the reduced (single tier) data block rather than the 3 tier extended data block. I am surprised that the Ex series does not offer a choice of on screen data display preferences, but I have to remind myself that it is the basic entry level series aimed at simple use..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 02, 2013, 07:08:54 pm
I've had this problem several times.
A cold boot solved the problem.

I mean the PC boot, not the camera itself, so it is different issue I suppose.


With the E4 plugged into your PC it will appear as a storage class device. If your PC won't boot when the E4 is plugged in then you need to go into the PC bios and disable booting via USB etc. i.e. the issue is your PC, not the E4...

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on December 02, 2013, 07:22:40 pm
I've had this problem several times.
A cold boot solved the problem.

I mean the PC boot, not the camera itself, so it is different issue I suppose.


With the E4 plugged into your PC it will appear as a storage class device. If your PC won't boot when the E4 is plugged in then you need to go into the PC bios and disable booting via USB etc. i.e. the issue is your PC, not the E4...

cheers,
george.

No it is different, with plugged USB drive it boots-up normally and doe not matter if the camera is set to RNDIS or UVC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 02, 2013, 08:07:19 pm
I've had this problem several times.
A cold boot solved the problem.

I mean the PC boot, not the camera itself, so it is different issue I suppose.


With the E4 plugged into your PC it will appear as a storage class device. If your PC won't boot when the E4 is plugged in then you need to go into the PC bios and disable booting via USB etc. i.e. the issue is your PC, not the E4...

cheers,
george.

No it is different, with plugged USB drive it boots-up normally and doe not matter if the camera is set to RNDIS or UVC.

My opinion is:

Your PC is seeing a boot partition or boot information inside the E4 so is trying to boot from it. Disable the USB boot option in your bios to verify if that is the case.The E4 is appearing as a storage class and your PC is trying to boot from it since it sees something that looks bootable (given there's a wince file system in the E4).

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 02, 2013, 08:10:22 pm
Since that sort of behaviour depends on many things, your logic ==> arrow is not logical enough. Which is another way of asking: did you actually try 1) turning it off and on yet 2) disable USB boot in the bios. Because it is a pretty good candidate for the behavior you describe. That, and "but but USB disk #1 doesn't cause any problems" is really no guarantee that a totally different disk on a different port (potentially even a different chipset) will not cause issues.

So if you have not actually tested disabling USB boot in bios, then this would be a good idea to check.
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on December 02, 2013, 09:08:08 pm
Since that sort of behaviour depends on many things, your logic ==> arrow is not logical enough. Which is another way of asking: did you actually try 1) turning it off and on yet 2) disable USB boot in the bios. Because it is a pretty good candidate for the behavior you describe. That, and "but but USB disk #1 doesn't cause any problems" is really no guarantee that a totally different disk on a different port (potentially even a different chipset) will not cause issues.

So if you have not actually tested disabling USB boot in bios, then this would be a good idea to check.
Also and more importantly most usb drives will not have a partition flagged as a boot partition because they are storage only. This camera on the other hand likely will. Since it needs to boot its firmware.

Sent from my EVO using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jdesbonnet on December 03, 2013, 02:11:26 am
Anyone got pointers on extracting radiometric data from the JPEG images using open source tools (or documentation that would enable me to write such software)?
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on December 03, 2013, 02:49:05 am
Anyone got pointers on extracting radiometric data from the JPEG images using open source tools (or documentation that would enable me to write such software)?

For image data analysis in a lab setting in the past I've used ImageJ (http://rsbweb.nih.gov/ij/). It's open source, java based and very useful for performing a variety of measurements and data extractions. It's powerful but has a bit of a learning curve. Plus you can write plugins and macros for it.
 
Sent from my EVO using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 03, 2013, 03:05:55 am
Anyone got pointers on extracting radiometric data from the JPEG images using open source tools (or documentation that would enable me to write such software)?
Exiftool + ImageMagick.

Sample usage: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325366/#msg325366 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325366/#msg325366)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 03, 2013, 05:45:44 am
Anyone got pointers on extracting radiometric data from the JPEG images using open source tools (or documentation that would enable me to write such software)?
Exiftool + ImageMagick.

Sample usage: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325366/#msg325366 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg325366/#msg325366)

I found this worked quite well but I needed to add the full paths to convert.exe since Windows 7 has a command line tool named "convert" as well:

Code: [Select]
exiftool FLIR0010.jpg -RawThermalImage -b | C:\"Program Files"\ImageMagick-6.8.7-Q16\convert.exe - -interlace none -depth 16 r:- | C:\"Program Files"\ImageMagick-6.8.7-Q16\convert.exe -size 320x240 -interlace none -depth 16 -endian msb gray:- problem_solved.png
and

Code: [Select]
C:\"Program Files"\ImageMagick-6.8.7-Q16\convert.exe problem_solved.png -normalize -depth 8 raw_image_relative.png
worked for me.

I poked around a little bit so see if there was away to get some sort of colorized output aside from the grey scale but failed. (didn't try hard)

Results (try a guess at what that is) :

Title: Flir E4 Thermal imaging camera teardown
Post by: ullki on December 03, 2013, 06:35:15 am

Results (try a guess at what that is) :

The excellent resolution of FLIR TICs made this far too easy ;) It's a very central piece for a thing very central to people from (at least) the US, and without it, USA would literarily stop. (My European prejudices ;) )

Make and model is harder, but it seems like a V or boxer configuration and with a turbocharger.

/U
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 03, 2013, 10:21:27 am
@OrBy
after this simple convert, your grayscale is not linear to temperature

see this post:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)

here you find a sample php script with all steps:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230)
( last version: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102) )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 03, 2013, 10:53:00 am
here you find a sample php script with all steps:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230)
( last version: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102) )
Ooooh, nice! Your script has a few steps I didn't have yet. Thank you! :)

I did something lame based on median + applying palette in a linear fashion. Generated surprisingly good results given the lameless, but still not perfect. Looks like you are doing it properly. :)

Must ... assimilate ...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SPRX on December 03, 2013, 10:59:34 am

I ordered my Flir E8 (formally known as E4) today to join the club..!   :-DD

Will see how it goes.....
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 03, 2013, 11:54:56 am
Also and more importantly most usb drives will not have a partition flagged as a boot partition because they are storage only. This camera on the other hand likely will. Since it needs to boot its firmware.
This camera is not a PC, its boot process is very different from a PC.

But your PC hanging because the camera is connected could be due to the USB enumeration that the BIOS does at bootup, either the camera returns something that confuses the BIOS or the BIOS sent something that confuses the camera and it's waiting for a response.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 03, 2013, 02:20:22 pm

Results (try a guess at what that is) :

The excellent resolution of FLIR TICs made this far too easy ;) It's a very central piece for a thing very central to people from (at least) the US, and without it, USA would literarily stop. (My European prejudices ;) )

Make and model is harder, but it seems like a V or boxer configuration and with a turbocharger.

/U

Right on the 1st count, 2nd count not so much (cant fault ya - it's a oddball) - VW 2.0L 4cy with a supercharger. :)


@OrBy
after this simple convert, your grayscale is not linear to temperature

see this post:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)

here you find a sample php script with all steps:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24230.html#msg24230)
( last version: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg26102.html#msg26102) )

Whoa - snazzy!

Here is my friends laser cat after running through tomas123's flir.php:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on December 03, 2013, 04:10:58 pm
Here is the lens holder 3d printed from Shapeways in black material with ZnSe 20mm x 2.5" lens (purchased from eBay).  It works pretty well!

1st Photo: Lens holder bottom view
2nd Photo: Lens holder top view
3rd Photo: No Lens approx. 6" away from Arduino Mega
4th Photo: Lens attached approx. 3" away from Arduino Mega
5th Photo: Lens holder attached to camera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 03, 2013, 06:29:43 pm
I want one
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: keithu on December 04, 2013, 12:02:56 am
Inspired by the impressive work of Mike and other forum members I got myself an E4. Before I apply the hack though could anyone shed some light (so to speak) on the attached image? It's a capture from the visible light camera only, in lowish light levels, and shows some horizontal noise bands.

The image was taken before I had charged the battery for the first time and I haven't been able to reproduce it since giving it a charge so the obvious conclusion is that it was something that could be reasonably expected when operating with borderline battery voltage. My concern is that if it does indicate an incipient fault that would require warranty service somewhere down the line I could lose 'hackability'.

Just as another data point,
s/n: 63908xxx
f/w: 1.19.8
cal: Nov 29 2013
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 04, 2013, 12:46:46 am
No such lines seen on my camera even when battery is low. Give your camera a good test over the next few days to see if it reproduces the symptom. If not, put it down to a glitch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mtdoc on December 04, 2013, 08:55:42 am
Another happy E4 --> E8 customer here. Thanks Mike and all   :-+

Arrived today - 10days after ordering it from Tequipment- Cal date November 12th.

Early Xmas present to myself. Now I just gotta keep my 7 year olds hands off of it....

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 04, 2013, 08:59:26 am
Inspired by the impressive work of Mike and other forum members I got myself an E4. Before I apply the hack though could anyone shed some light (so to speak) on the attached image? It's a capture from the visible light camera only, in lowish light levels, and shows some horizontal noise bands.

The image was taken before I had charged the battery for the first time and I haven't been able to reproduce it since giving it a charge so the obvious conclusion is that it was something that could be reasonably expected when operating with borderline battery voltage. My concern is that if it does indicate an incipient fault that would require warranty service somewhere down the line I could lose 'hackability'.

Just as another data point,
s/n: 63908xxx
f/w: 1.19.8
cal: Nov 29 2013
The visible camera does get pretty noisy at low light levels - if it looks OK on a good battery I wouldn't worry about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: keithu on December 04, 2013, 09:19:00 am
The visible camera does get pretty noisy at low light levels - if it looks OK on a good battery I wouldn't worry about it.
Thanks Mike - and thanks for all the work you've done on this  :-+

I'm sure you're right - it's clearly a pretty basic camera module. The whole image has obvious noise in low light levels but the lines look more like induced electrical noise to me. I sent the image to FLIR Support to see what they have to say about it and will report back if there are any developments.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 04, 2013, 09:26:51 am
Good to know there is a software setting for this. I think you're referring to this post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178)

By "physical setup" you're talking about those calibration steps mentioned in the linked post?
Yes, that's the post - I think it's clear what to do if taking basic trigonometry and the lens-lens-distance in consideraton - one has to align the camera's face-plane geometrically parallel to the reference object plane (ideally a surface with thermal and visual markings/features/borders)
Found time to hook up my E4 to ftp and telnet and adjusted the MSX offset according to your post. Worked great, for a while. Any idea how to make those changes less temporary? Because any auto calibration will reset them to their old values, I tried creating a .rsc in appcore.d/factory.d folders, but to no avail.

What's the difference in using .cfg or .rsc and \FlashBFS or \FlashFS anyway? Looks like FlashBFS contains model dependant firmware and FlashFS per device settings, but when do I have to use which file type in what folder tree to apply some specific settings?

Regarding the banding keithu reported, my visual camera shows horizontal lines and noise as well in low light conditions, thought it to be normal. Maybe it's caused by flickering energy-saving lamps. In a well lit environment I don't see any impairment in image quality, so I didn't care.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: keithu on December 04, 2013, 10:01:01 am
Regarding the banding keithu reported, my visual camera shows horizontal lines and noise as well in low light conditions, thought it to be normal. Maybe it's caused by flickering energy-saving lamps. In a well lit environment I don't see any impairment in image quality, so I didn't care.

Interesting that you have the same lines. I also thought they might be caused by fluorescent lighting, but they're just the same under incandescent.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 04, 2013, 10:14:39 am
Interesting that you have the same lines. I also thought they might be caused by fluorescent lighting, but they're just the same under incandescent.

Can't really say if they are the same, I just remember to have found some nasty lines in my fusion images, which where caused by MSX adding the noisy visual image to the thermal image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: keithu on December 04, 2013, 11:48:52 am
Here's the word from FLIR Support on the noise lines issue:
Quote
It is typical, I'm afraid. I can confirm that we are aware of the problem and it is under investigation.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 04, 2013, 11:59:36 am
Interesting response. I just tested my camera and could not reproduce the effect even in a darkened room. My battery is fully charged though so I will test again when its gets towards empty. If it is battery charge related, it would suggest that a buck boost converter output ripple increases at a certain low input voltage level. Maybe it has to work harder to maintain the output and generates the ripple as a result?

I don't think my E4 will be going anywhere near a FLIR service centre anytime soon though  ;)  If my unit has this issue, and it annoys me, I will look at filtering the output of the problematic power supply element myself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 04, 2013, 01:53:27 pm
Here's the word from FLIR Support on the noise lines issue:
Quote
It is typical, I'm afraid. I can confirm that we are aware of the problem and it is under investigation.
My guess is at lower battery voltages, a DC-DC converter is either working harder & producing more noise, or happenning to hit a frequency that coincides with the camera's scan rate. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 04, 2013, 01:58:35 pm
What's the difference in using .cfg or .rsc and \FlashBFS or \FlashFS anyway? Looks like FlashBFS contains model dependant firmware and FlashFS per device settings, but when do I have to use which file type in what folder tree to apply some specific settings?
FlashFS is all camera-specific, cal data and config files etc.
.rsc are general settings that apply to all models, .cfgs are mostly unit specific ( either due to cal issues  or to prevent configs being copied )
I'm not sure there is a direct corresponence between stuff in config files and resources - I think some resources are created/manipulated by the application indrectly from info in the config files.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 04, 2013, 02:23:30 pm
edit 03.03.2015:
see also: stitching panoramas
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715)
nice sample https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg621514/#msg621514 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg621514/#msg621514)


edit 13.07.2014:
with IM 6.8.9 you must edit the lines inside the php code with gray pipes "gray:-"
see http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=25875&p=113203#p113203 (http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=25875&p=113203#p113203)



reading radiometric image with Exiftool + ImageMagick (without flir tools)

I extended my php script for reading the embedded png image from Flir E4 in jpg format. Most Flir Cams use 16 Bit RAW as embedded image (like Flir E40).

Code: [Select]
>php flir.php
usage: flir.php [options] -i ir_file.jpg -o outputimage

Settings:
-i ir_file.jpg      flir radiometric image
-o output.jpg       save  8 Bit image jpg
-o output.png       save 16 Bit image png

Options Summary (type input values without units) :
--resize val        scale sensor size with "convert -resize val" (val i.e. 600x or 100%, default is 200%)
--tref temp         overwrite embedded Reflected Apparent Temperature (degree Celsius)
--tatm temp         overwrite embedded Atmospheric Temperature (degree Celsius)
--dist distance     overwrite embedded Object Distance (m)
--hum humidity      overwrite embedded Relative Humidity (%)
--emis val          overwrite embedded Emissivity (val i.e. 0.95)
--rmin raw_min      set min RAW value instead embedded value (set scale min temp)
--rmax raw_ma       set max RAW value instead embedded value (set scale max temp)
--pal iron.png      use own palette (instead of embedded palette.png)
--clut              disable "Color LookUp Table" and color scale (save a grayscale image)
--scale             disable color scale on the right edge
--stretch           stretch "middle of color scale" to "medium of gray image"
--pip[=AxB]         input image is a flir PiP radiometric image
                    overlay embedded "real image" with "ir image"
                    [optional] crop ir image to size AxB (i.e. --pip=90x90 )
--msx               Flir MSX Mode for PiP
--shade             Flir MSX Mode for PiP with amboss effect
--help              print this help

# source:
# [1] http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.0.html
Edit the path to exiftool and imagemagick !!

let's try with the E4 sample image from here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340938/#msg340938 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340938/#msg340938)
(https://www.eevblog.com/forum/index.php?action=dlattach;topic=21772.0;attach=69397;image)
Code: [Select]
>php flir.php -i FLIR0080.jpg -o test1.jpg

>php flir.php --pip -i FLIR0080.jpg -o test2.jpg

>php flir.php --pip --msx -i FLIR0080.jpg -o test3.jpg

>php flir.php --pip --shade -i FLIR0080.jpg -o test4.jpg

>php flir.php --pal rainBGR.png -i FLIR0080.jpg -o test5.jpg

exiftool FLIR0080.jpg -b -EmbeddedImage > real.jpg
see result images below


background info to used formulas

- E4 manual pdf page 57 of 74
- Notice_to_customer_FLIR_Ax5%20I_O_synchronization_and_measurement.pdf (see attachment)
- http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944)

let's begin:
Code: [Select]
with tau=1,0 (ignore athmosphere)
U_tot= measured camara sensor voltage
U_tot=eps*U_obj+(1-eps)*U_refl
->   U_obj=(U_tot-(1-eps)*U_ref)/eps

next step (S= measured camara sensor voltage in digits):
I must change the sign of paremeter O, because O is saved negative in exif header of Flir jpg
Code: [Select]
T (in Kelvin) = B / log(R/(S + O) + F)
-> S = R / exp(B/T-F)-O

now write RAW instead of S
and R_sensor instead of U_tot:
Code: [Select]
  RAW_refl = R / exp(B / T_refl - F ) - O
  RAW_obj=(RAW_sensor - (1-eps)*R_ref)/eps
  T (in Kelvin) = B / log(R/(RAW_obj + O) + F)
  T (in °C) = B / log(R/(RAW_obj + O) + F) - 237.15

now  substitute R with R= R1/R2 compare the formulas with php code:
Code: [Select]
// calc amount of radiance of reflected objects ( Emissivity < 1 )
$RAWrefl=$R1/($R2*(exp($B/($Temp_ref+273.15))-$F))-$O;

$RAWmaxobj=($RAWmax-(1-$Emissivity)*$RAWrefl)/$Emissivity;

$Temp_max=sprintf("%.1f", $B/log($R1/($R2*($RAWmaxobj+$O))+$F)-273.15);
don't forget that $Temp_ref = ReflectedApparentTemperature ( in °C)


Calculations of Atmosphere transmissivity

see http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)
we need 15 parameters for a temperature calculation
Code: [Select]
$ exiftool -Atm* -Planck* -Object* -Emis* -Reflected* -Relativ* 4x4-100m.jpg
Atmospheric Temperature         : 20.0 C
Atmospheric Trans Alpha 1       : 0.006569
Atmospheric Trans Alpha 2       : 0.012620
Atmospheric Trans Beta 1        : -0.002276
Atmospheric Trans Beta 2        : -0.006670
Atmospheric Trans X             : 1.900000
Planck R1                       : 14168.402
Planck B                        : 1386
Planck F                        : 2.5
Planck O                        : -7363
Planck R2                       : 0.026881648
Object Distance                 : 100.00 m
Emissivity                      : 0.95
Reflected Apparent Temperature  : 30.0 C
Relative Humidity               : 50.0 %





- hint for windows user for using php as a portable version without some installations:
    download from http://windows.php.net/download/#php-5.4 (http://windows.php.net/download/#php-5.4) the current version 5.4.xy
    extract zip to a folder php-5.4.xy-nts-Win32-VC9-x86
    run > php-5.4.xy-nts-Win32-VC9-x86\php.exe flir.php ... options...
- download ExifTool from version 9.54
- use the Q16 version of imagemagick !!


changes, enhancements and informations around E4 RAW sensor values
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on December 04, 2013, 02:28:08 pm
Hi All-

I was registered with this username in the past, but seems it disappeared, maybe I wasn't active enough, not sure, but here I am again...

Anyways, I was wanted a FLIR camera for over a few years now, but cost for the high resolution was just too much.  You all got me to pull the trigger on this and I just ordered the E4 through Tequipment using the EEVblog discount (thanks!).  I am close to where they ship these from (they ship them out of PA, not NJ where their office is), so I should have it quick.  I'll report back on the firmware/calibration date, but I'm guessing I'll be good as the units they are shipping I was told they received last week and I think others reported the hackable firmware version as of last week.  I keep my fingers crossed until then...  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 04, 2013, 03:40:29 pm
FlashFS is all camera-specific, cal data and config files etc.
.rsc are general settings that apply to all models, .cfgs are mostly unit specific ( either due to cal issues  or to prevent configs being copied )
I'm not sure there is a direct corresponence between stuff in config files and resources - I think some resources are created/manipulated by the application indrectly from info in the config files.
Thanks, so my stuff should go to FlashFS. But I still have to find a way to make my MSX adjustments permanent. I think calibration gets those values from calib.rsc every time and is keeping overwriting mine, but I guess it's a bad idea to do my edits there.

While playing with my backupped files I tried to extract the calibration pic and bad pixel map as mrflibble did in this post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326966/#msg326966 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326966/#msg326966)

Looks like my cam has 62 bad pixels in 54 clusters and my calibration picture doesn't show heavy banding.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 04, 2013, 03:59:28 pm
FlashFS is all camera-specific, cal data and config files etc.
.rsc are general settings that apply to all models, .cfgs are mostly unit specific ( either due to cal issues  or to prevent configs being copied )
I'm not sure there is a direct corresponence between stuff in config files and resources - I think some resources are created/manipulated by the application indrectly from info in the config files.
Thanks, so my stuff should go to FlashFS. But I still have to find a way to make my MSX adjustments permanent. I think calibration gets those values from calib.rsc every time and is keeping overwriting mine, but I guess it's a bad idea to do my edits there.

While playing with my backupped files I tried to extract the calibration pic and bad pixel map as mrflibble did in this post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326966/#msg326966 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326966/#msg326966)

Looks like my cam has 62 bad pixels in 54 clusters and my calibration picture doesn't show heavy banding.
Remember that (AIUI) all config files in a folder are scanned, in alpjhabetical order so if you find somewhere that a setting appears to be set, you should be able to override it by adding another rsc file with a later alphabetical name. Remember that RSC files need to have a correct CRC32.

Incidentally, in terms of MSX misalignment if you've had the camera out, it is possible that the vis cam isn't seated quite right when clipped back in - I've had this happen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 04, 2013, 04:02:12 pm
As the bad pixel map has been mentioned again. Here are my observations from the test I did on my camera....

I set the camera to show bad pixels.

The display showed quite a number....around a 100 or so. That is not great worry to me at all BUT there was some odd stuff that I noted during the test.

1. The dead pixel map was NOT constant. If you captured several images, as I did, you could see that some pixels were always bad, whilst others came and went at random. Almost like twinkling stars !
I immediately thought that this was compression artefacts on the LCD screen. But no, if I open the uncompressed images in FLIR Tools there are definitely differences in the pixel maps captured. Nothing massive but there appear to be quiet a few pixels that appear and disappear.

2. In the dead pixel mode with the lens cover closed, it was possible to see a sort of 'time tunnel' effect with a sweeping cone of noise travelling from the outer edges of the image to the middle, or was it the other way around, I forget. It was an interesting effect, like some sort of video processing algorithm at work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 04, 2013, 06:55:40 pm
[Remember that (AIUI) all config files in a folder are scanned, in alpjhabetical order so if you find somewhere that a setting appears to be set, you should be able to override it by adding another rsc file with a later alphabetical name. Remember that RSC files need to have a correct CRC32.

Incidentally, in terms of MSX misalignment if you've had the camera out, it is possible that the vis cam isn't seated quite right when clipped back in - I've had this happen.
I didn't remove the visual camera, still it might got a little shock from dis-/reassemling the device. It's off about 4x1 pixel @2m, but it adds up on greater distances.

I tried a .rsc file with the new parameters, but are those loaded after calibration occurs? Because each auto calibration resets the MSX offset to it's old state. When on a telnet session, you could rset the new values, then it worked for while and after some time calibration kicks in, misaligning MSX and rls showed the old values again.

1. The dead pixel map was NOT constant. If you captured several images, as I did, you could see that some pixels were always bad, whilst others came and went at random. Almost like twinkling stars !
Saw the same on my cam when showing bad pixels with rset. Looked almost like an insect swarm, i.e. changing quite a lot. I captured some images and intend to compare them to the map extracted out of the calibration pic.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 04, 2013, 06:58:47 pm
Looks like my cam has 62 bad pixels in 54 clusters and my calibration picture doesn't show heavy banding.

Are you sure about the banding? I'm guessing you may be a bit overly optimistic, but I cannot be sure ofcourse. You did the image processing. Why do I think you might be too optimistic about the banding? Two reasons:

First, the bad pixels in the first image are really dark. So I am guessing you are looking at greyscale stretched values from lowest to highest, without doing something about the raw values of those bad pixels. If you look at my pictures waaay back, then you'll see that the bad pixels are medium grey. That's because I substituted the median value to bad pixels. That way they do not mess up the normalization.

And second, you do get correction terms that have banding in it. That alone tells me that there is correction being done for banding in the underlying raw values.

If you're interested you could PM me your two files for calibration + correction, so I can run it over here as well as a comparison. That, and it gives me an excuse to improve the bit of code I have to process cal + correction images. Right now it's crap. :P

Edit: Oh yeah, and third reason I think you really get more banding is that your first pic doesn't show enough vignetting. You could be lucky and get a really good sensor with almost no banding. However getting a magic lens that doesn't show roughly the same amount of vignetting as on my pics would seem unlikely. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 04, 2013, 07:33:42 pm
Looks like my cam has 62 bad pixels in 54 clusters and my calibration picture doesn't show heavy banding.

Are you sure about the banding? I'm guessing you may be a bit overly optimistic, but I cannot be sure ofcourse. You did the image processing. Why do I think you might be too optimistic about the banding? Two reasons:

First, the bad pixels in the first image are really dark. So I am guessing you are looking at greyscale stretched values from lowest to highest, without doing something about the raw values of those bad pixels. If you look at my pictures waaay back, then you'll see that the bad pixels are medium grey. That's because I substituted the median value to bad pixels. That way they do not mess up the normalization.

And second, you do get correction terms that have banding in it. That alone tells me that there is correction being done for banding in the underlying raw values.

If you're interested you could PM me your two files for calibration + correction, so I can run it over here as well as a comparison. That, and it gives me an excuse to improve the bit of code I have to process cal + correction images. Right now it's crap. :P

Edit: Oh yeah, and third reason I think you really get more banding is that your first pic doesn't show enough vignetting. You could be lucky and get a really good sensor with almost no banding. However getting a magic lens that doesn't show roughly the same amount of vignetting as on my pics would seem unlikely. ;)
Of course you're right, it's highly unlikely I did the calculations the way you did, so our images aren't comparable. For instance, I replaced all bad pixels (i.e. pixels with a value way off the others) by zero and ignored them while normalizing. Besides them, my smallest value was 31863 and my highest was 46430, which mark the range from 0 (black) to 1 (white) in the shown image. But I didn't think of it much, so possibly all my math is fubar.

And I do have banding in my thermal images, at least it's noticable on uniformely heated areas. As you said, my 3rd picture doesn't look as nice as the first one. So I'm not that lucky, I was just interested to see those pics and thought someone else might be as well (regarding binning, etc.). Of course you can have my calibration data and apply the same math to them as you did on yours.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 04, 2013, 09:01:50 pm
>php flir.php --pip --msx -i FLIR0080.jpg -o test3.jpg

Hey tomas123 - love the work your doing with this flir.php! Do you think there would be a way to use the --msx without the --pip? (combine the 640x480 real image at 1x with the 320x240 thermal at 2x)

Trying to get the nicest looking images I can out of it without clutter of the scale bar or other UI elements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 04, 2013, 09:06:26 pm
Did someone encoutered issue - when Flir E4 camera is connected to PC it is unable to boot?
I would like to aks is is possible to modify the camera settings to set the black background to some transparency level?

Slightly OT - is that a WRAP or ALIX? (pFsence? m0n0wall?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 04, 2013, 09:25:46 pm
Do you think there would be a way to use the --msx without the --pip? (combine the 640x480 real image at 1x with the 320x240 thermal at 2x)
Trying to get the nicest looking images I can out of it without clutter of the scale bar or other UI elements.

php is only a wrapper for the two command line tools exiftool and convert
read the code and use convert it as desired
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 04, 2013, 09:47:51 pm
php is only a wrapper for the two command line tools exiftool and convert
read the code and use convert it as desired

Your resulting images are indeed pretty neat! Yesterday I made the same non-linear function + some other stuff in python, and that's looking good. Do you happen to have some functions for inclusion of atmospheric influence? I've got reflection, but might as well include some functions for atmospheric influence while I'm at it.

Oh yeah, and you had some interesting typo somewhere that had me scratching my head for a bit. R=R1/R2. Not R1=R/R2. :P Obvious in hindsight, but not when you're trying to figure things out from fragmented information.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 04, 2013, 10:17:24 pm
Oh yeah, and you had some interesting typo somewhere that had me scratching my head for a bit. R=R1/R2. Not R1=R/R2
wow, you are right and you are the first power reader of my post
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944)
it was a hard way, to find the exif tags AND the correlate formula ( scratching my head )
Flir don't public some background informations

Quote
Temperature (in Kelvin) = B / log(R / (S - O) + F)
S is the 14-bit digital signal value.
log(x) is the base-e logarithm of the x parameter.
R Planck R constant ( R=R1/R2 )
B Value range 1300 - 1600.
F Value range 0.5 - 2
O (offset) constant
with R1/R2 Flir avoids large values and rounding errors

Do you happen to have some functions for inclusion of atmospheric influence?
I haven't found any practical informations for air calculations
I wrote here
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24310.html#msg24310 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24310.html#msg24310)
Quote
extend the formula for "ObjectDistance, RelativeHumidity, Atmospheric Temperature" is not simple
read a fluke manual of Ti100, Ti105, Ti110, Ti125 - there is also no compensation of air influence
 
here you find more informations (a sample with 100m (!) distance):
http://qirt.gel.ulaval.ca/archives/qirt2010/papers/QIRT%202010-092.pdf (http://qirt.gel.ulaval.ca/archives/qirt2010/papers/QIRT%202010-092.pdf)
    from the book "Infrared Thermography Errors and Uncertainties" (google for preview, page 55 ff)

simple ignore the inclusion of atmospheric influence in near distances,
measuring error is minor versus reflections (see link to pdf and google books)

at page 57 you find this formula with air influence >:(
s is the signal level (14/16 Bit from sensor) and proportional to the radiation intensity
now I know, why Fluke ignores the atmospheric influence
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 04, 2013, 11:25:32 pm
Quote
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
It could actually be noise reduction or shaping - maybe this is a threshold to decide when to apply noise reduction, i.e. adjust filter until noise is below the target value.  "Mk" - mask? Perhaps something like a hysteresis function?

targetNoiseMk is a noise generator in mK (conforming with NETD/ thermal sensity in Flir Datasheets of the selected cam)
Formerly I stacked some noisy images with Registax or AviStax  to subtract out the randomly noise and it works great!!

after setting targetNoiseMk to zero, stacking of images don't improve results  :(

here a sample from a Flir E40 (old cam hacked formerly from 160x120 to 320x240)
in service menu I can measuring the noise

Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  60 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      61.28      12.13
Row Noise        14.84      2.94
Column Noise     13.67      2.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      25.69      5.09
Row Noise         7.08      1.40
Column Noise      7.82      1.55
Uniformity      198.23     39.25

Total noise        MilliKelvin      Digital Units
Pixel Noise       67.01     13.27
Row Noise          9.71      1.92
Column Noise      10.10      2.00


and now without noise (cam temperature is 25 Grad):
Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  0 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      19.85      3.93
Row Noise         6.39      1.26
Column Noise      8.64      1.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      18.98      3.76
Row Noise         4.70      0.93
Column Noise      5.54      1.10
Uniformity      210.23      41.63

Total noise        MilliKelvin      Digital Units
Pixel Noise      28.96      5.73
Row Noise         5.76      1.14
Column Noise      7.66      1.52


see the differences (NETD is 0,03 °C @ 25°C)

Quote
http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters (http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters)
Uncooled infrared cameras systems are typically a little noisier, in the range of 30 - 120mK. Noise in an image can be spatial or temporal.
Spatial noise is noise across the image at any given point in time. It is perceived as an unchanging fixed pattern on top of the image.
Temporal noise is noise at any point in the image over time. It is perceived as the static that moves in an image.
NETD is typically the measure of both these noise types.

remarkably Flir dont't disable the noise generator at the top cams of a serie (Flir E4 -> E8 , Flir E30 -> E60)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 05, 2013, 12:59:57 am
This issue of noise still interests me. I have heard from others on this forum that noise is sometimes deliberately introduced to aid digital signal processing. I had not heard of that before but was aware that two of the challenges in uncooled micro-bolometers was taming the output drift and the noise that the detector creates. If the added noise is the same throughout a range of cameras, from cheap to expensive models, it certainly suggests that it is not another form of hobbling...... or is it. I have no idea, but I would welcome some clarity on the subject if anyone understands its purpose in the system.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 05, 2013, 01:04:05 am
... I was just interested to see those pics and thought someone else might be as well (regarding binning, etc.). Of course you can have my calibration data and apply the same math to them as you did on yours.

Same here. I'd love to see some comparisons between the calibration images as well as the correction images. So if you could send your .gan and .crs files that would be really great! In the mean time I have slightly reduced the crappiness of the calibration picture processing code.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tesla500 on December 05, 2013, 01:16:59 am
In regards to adding noise, did we ever get an answer as to weather or not the 9fps models average many frames of the 60fps sensor output to reduce noise, or simply decimate (use only one of the of the frames and discard all those in between)?

If someone wants to perform a simple test we can determine this.

Pan quickly across a scene horizontally and take a picture while panning. Include a vertical object in the pan, ensuring the camera is square to the vertical object. We can determine the pan speed by looking at skewing of the vertical object when panning (since these sensors have rolling shutters at 60hz), and see if the blur is about equal to the pan distance per frame (decimation) or ~6x that (averaging of frames). I suspect in the latter case it will be very hard to see the skewing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 05, 2013, 01:52:57 am
Oh yeah, and you had some interesting typo somewhere that had me scratching my head for a bit. R=R1/R2. Not R1=R/R2
wow, you are right and you are the first power reader of my post
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944)
it was a hard way, to find the exif tags AND the correlate formula ( scratching my head )
Flir don't public some background informations
I for one am very happy that you went to all the trouble of finding all those exif tags. That's what makes exiftool so damn useful for use with the E4. :)

Quote
Temperature (in Kelvin) = B / log(R / (S - O) + F)
S is the 14-bit digital signal value.
log(x) is the base-e logarithm of the x parameter.
R Planck R constant ( R=R1/R2 )
B Value range 1300 - 1600.
F Value range 0.5 - 2
O (offset) constant

with R1/R2 Flir avoids large values and rounding errors
Heh yeah, that's the one.  ;D

Quote
Do you happen to have some functions for inclusion of atmospheric influence?
I haven't found any practical informations for air calculations
Well, darnit. I figured that from your post on the exiftool forum, but I thought I'd ask just to be sure. Qualitatively speaking it's my understanding that the atmospheric contributions are "pretty small" aka "negligible", but with that sort of thing I always like to muck about with the numbers to get a feeling for it, just to be sure.

Quote
now I know, why Fluke ignores the atmospheric influence
All that pic tells me is that they sum for 6 main components to the total radiosity. It just looks that complicated because someone skipped their class on communication skill and concise notation. That looks needlessly verbose. Need sleep + will read again.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 05, 2013, 05:28:48 am
My manfrotto 237HD turned up today to go with the superclamp that I received yesterday.

With my V2 holder I'm now a happy camper. The 237HD easily supports the E4 and is very stable. I can easily adjust it up/down as needed to bring it into focus with any board I have on my bench. I can now either adjust the lens with my lens adjustment tool or pop in a ZnSe lens for closeup work.

A couple of pics of the setup and with the E4 hanging on the end of the 237HD and superclamp, below.

cheers,
george.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 05, 2013, 07:10:36 am
Qualitatively speaking it's my understanding that the atmospheric contributions are "pretty small" aka "negligible", but with that sort of thing I always like to muck about with the numbers to get a feeling for it, just to be sure.

load a picture in Flir Tools and play around with the air values - you see the negligible changes at near distance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: phtn on December 05, 2013, 08:27:43 pm
TL;DR  received new E4 in USA. firmware 1.19.8.

hi all,

not sure if this is still the relevant thread, but I just wanted to provide another anecdotal piece of evidence regarding shipping versions of the E4. if we've moved this information elsewhere I apologize and please direct me.

i got mine from amazon, it took forever to arrive despite prime shipping. amazon actually thought the unit was lost. I thought maybe FLIR had held shipment. but, it did arrive. here's what it says:

FLIR E4 1.0
Part number 63901-0101
software 1.19.8

when I went to download the software it offered me FLIR Tools 4.0.13330.1003 dated November 28, 2013, which seemed worrisome since it's pretty new and could try to break the hack. any comments on FLIR Tools versions?

finally, a question: JPEGs coming out of this thing are already in 320x240 resolution.

it isn't immediately obvious to me, perhaps I'm blind, whether they are extrapolated up from 80x60, in these days of huge resolution monitors I'm used to enormous JPEGs and I can't decide what I'm looking at.

is the hack to set the native resolution of the sensor to 320x240 and thus output a more clear JPEG?
or.....did something else occur and FLIR gave up? (doubt it)

cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 05, 2013, 08:53:05 pm
is the hack to set the native resolution of the sensor to 320x240 and thus output a more clear JPEG?
This.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: phtn on December 05, 2013, 11:01:51 pm
TL;DR the hack still works with my above version info.

@mrfibble, thank you for confirming that for me.

I'm writing to confirm that the hack did work for me, given the software versions and firmware info I supplied a few posts ago. I was operating inside a VirtualBox 4.1.2 on a linux host and as someone noted on ~page 88, make sure you have guest extensions & EHCI enabled for the FLIR software to see your camera, otherwise it won't.

I was a little nervous about such new FLIR software running (Nov 28, recall) to do the install, so I copied bin/ back over to my host for a poke around. I did the lazy search for obvious non-obfuscated strings that suggested a quick hack had been put in place to stop the E8 cfg push. I couldn't find anything. Since I was running the FLIR software in a virtualbox I disabled networking but I didn't check to see if it was phoning home or anything. then I followed the instructions.

so for the record this FLIRInstallNet.exe works:
$ sha1sum FLIRInstallNet.exe
bb65c19e3bbacaa7e9f5fe764914f9c77ca9d681  FLIRInstallNet.exe

This exe just links to mscoree.dll so there isn't anything else to investigate unless if it dynamically loads dlls, and that's where my Windows knowledge ends.

using my FLIR now, things seem to be fine, the new functionality is there.
cheers to Mike and everyone else who may have assisted along the way in this enhancement.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 05, 2013, 11:07:28 pm
TL;DR the hack still works with my above version info.

@mrfibble, thank you for confirming that for me.

I'm writing to confirm that the hack did work for me, given the software versions and firmware info I supplied a few posts ago. I was operating inside a VirtualBox 4.1.2 on a linux host and as someone noted on ~page 88, make sure you have guest extensions & EHCI enabled for the FLIR software to see your camera, otherwise it won't.

I was a little nervous about such new FLIR software running (Nov 28, recall) to do the install, so I copied bin/ back over to my host for a poke around. I did the lazy search for obvious non-obfuscated strings that suggested a quick hack had been put in place to stop the E8 cfg push. I couldn't find anything. Since I was running the FLIR software in a virtualbox I disabled networking but I didn't check to see if it was phoning home or anything. then I followed the instructions.

so for the record this FLIRInstallNet.exe works:
$ sha1sum FLIRInstallNet.exe
bb65c19e3bbacaa7e9f5fe764914f9c77ca9d681  FLIRInstallNet.exe

This exe just links to mscoree.dll so there isn't anything else to investigate unless if it dynamically loads dlls, and that's where my Windows knowledge ends.

using my FLIR now, things seem to be fine, the new functionality is there.
cheers to Mike and everyone else who may have assisted along the way in this enhancement.

you could have just followed the posts in this thread - we've pretty much dissected the tools / their installation package.
if you want to be spared of unwanted updates just remove the updater exe folder once the tools are installed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 05, 2013, 11:36:09 pm
a compare of Noise Measuring in Service Menu
http://192.168.0.2/service/Diag/NoiseMeasure.asp (http://192.168.0.2/service/Diag/NoiseMeasure.asp)

new Flir E4 with temp. range -20 to +250 °C
-> Pixel Noise  17.86 mK  =  1.66 digits
Code: [Select]
\>rls .registry.caps.config.image.targetNoise
enabled                     true
targetNoiseMk                  0

\>rls .system.tempsens
TSBoard                  317.285
TSFpa                    316.633
TShutterDigFilt1       322.03729

Temporal noise        MilliKelvin      Digital Units
Pixel Noise      17.50      1.63
Row Noise      11.02      1.02
Column Noise      9.59      0.89

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      12.51      1.16
Row Noise      2.71      0.25
Column Noise      4.32      0.40
Uniformity      178.43      16.59

Total noise        MilliKelvin      Digital Units
Pixel Noise      17.86      1.66                   ====> 10,75 mK/Digit
Row Noise      4.81      0.45
Column Noise      5.89      0.55

old Flir E40 with temp range -20°C bis +120 °C
-> Pixel Noise:   28.96mK =  5.73 Digits
Code: [Select]
\>rls .registry.caps.config.image.targetNoise
enabled                     true
targetNoiseMk                  0

> rls .system.tempsens
TSFpa                  307.98074 Kelvin (35 Grad)
TSShutter              308.14041

Temporal noise        MilliKelvin      Digital Units
Pixel Noise      19.85      3.93
Row Noise         6.39      1.26
Column Noise      8.64      1.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      18.98      3.76
Row Noise         4.70      0.93
Column Noise      5.54      1.10
Uniformity      210.23      41.63

Total noise        MilliKelvin      Digital Units
Pixel Noise      28.96      5.73      ====> 5,0 mK / Digit !!
Row Noise         5.76      1.14
Column Noise      7.66      1.52

the old E40 makes really cleaner images with their large good lens (good f-stop)
but the sensor noise is large (30 mK)

Flir combines in the cheap E4 a better sensor (20 mK Noise) with a really bad lens (unsharp)

see below:
the f-stop of the small lens is not so bad - they double the temperature range to 250°C of flir e4 with minor signal amplification

Quote
http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters (http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters)
Uncooled infrared cameras systems are typically a little noisier, in the range of 30 - 120mK. Noise in an image can be spatial or temporal.
Spatial noise is noise across the image at any given point in time. It is perceived as an unchanging fixed pattern on top of the image.
Temporal noise is noise at any point in the image over time. It is perceived as the static that moves in an image.
NETD is typically the measure of both these noise types.


for mathematician: calc different sensor size ;-)

lens of Flir E4
Field Of View                   : 45.0 deg
Code: [Select]
\> .calib.lens.leExFOL7
C1                       0.00982
C2                        0.0424
clearanceDistance           0.04
descr                     "FOL7"
fNumber                      1.5
focDirReverse              false
focLen                      6.57
refT                         303
refTTransmission            0.94

and lens of Flir E40
Field Of View                   : 25.0 deg
Code: [Select]
rls .calib.lens.leE: (23)
C1                       0.00982
C2                        0.0424
clearanceDistance           0.04
rdescr                    "FOL18"
fNumber                      1.3
focLen                     18.04
refTTransmission          0.9025
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jdesbonnet on December 05, 2013, 11:41:38 pm
you could have just followed the posts in this thread - we've pretty much dissected the tools / their installation package.
if you want to be spared of unwanted updates just remove the updater exe folder once the tools are installed.

This whole thread is getting very unwieldy and difficult to read/search (especially for those who haven't been following it since the start). It would be handy to have a few pages (eg Wiki) that distills all of the current knowledge on the Flir cameras. I'd be happy to help if someone can suggest a suitable tool.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 05, 2013, 11:58:23 pm
you could have just followed the posts in this thread - we've pretty much dissected the tools / their installation package.
if you want to be spared of unwanted updates just remove the updater exe folder once the tools are installed.

This whole thread is getting very unwieldy and difficult to read/search (especially for those who haven't been following it since the start). It would be handy to have a few pages (eg Wiki) that distills all of the current knowledge on the Flir cameras. I'd be happy to help if someone can suggest a suitable tool.

Absolutely true - it took me about one day to read the whole thread when I joined the E4 "community" .. meanwhile it's probably enough volume for several days of reading.

I've considered writing a Wiki / inofficial manual ... but decided not to do so as it would probably draw more attention to the hack and this could lead to an increased need on Flir's side to take countermeasures (and likely trigger a PR-avalance / Streisand Effect)
Right now It's probably best for anybody to keep the whole hack cooking on low flame ;)

A complete, up2date index to important posts would surely be nice for newbies - but that can be just done/maintained by one of the first contributors to this thread ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jdesbonnet on December 06, 2013, 12:12:25 am

Absolutely true - it took me about one day to read the whole thread when I joined the E4 "community" .. meanwhile it's probably enough volume for several days of reading.

I've considered writing a Wiki / inofficial manual ... but decided not to do so as it would probably draw more attention to the hack and this could lead to an increased need on Flir's side to take countermeasures (and likely trigger a PR-avalance / Streisand Effect)
Right now It's probably best for anybody to keep the whole hack cooking on low flame ;)

A complete, up2date index to important posts would surely be nice for newbies - but that can be just done/maintained by one of the first contributors to this thread ;)

Yup, agree. Also being on the flir's "Most Wanted" playing cards pack wouldn't be helpful should I ever need a repair under warrantee job done :)  I'm guessing Mike is the Ace of Spades :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 06, 2013, 12:36:48 am
This is the reason why I created the 'E4 Useful information thread'. There was non-hack related information getting lost in the reams of hack related postings. I have no issue with that as I keep up to date with this thread. It can be a pain for newbies and when you want to find a specific non hack related posting though.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

The useful information thread points to this and other useful threads, but I wish to avoid placing any in-depth detail about the configuration based 'improvement' of the E4 in that thread as it will make life difficult for me at the employer level.

Being a little contraversial .....I have always believed that some effort is often needed when upgrading equipment, either directly developing the upgrade or reading about it, and how it was achieved. There is a great deal to be learnt about the E4 from reading the many pages in this thread. Some wish to skip the background and go straight to the punch-line with a simple guide to upgrading their new toys capability. I have no issue with that, but I believe they are missing out on a learning opportunity and just going for the quick win. As I say, no problem with wanting a quick result, but it would be good to read the whole thread in slower time as there is much useful information here.

My viewpoint is likely very outdated in the modern world of fast Google searches, but I grew up in an era where you had to do paper based research at the library in order to achieve a desired goal.  Patience was required. Sure it was a chore but you learnt a lot on the 'journey' to the answer !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rufus on December 06, 2013, 01:10:16 am
This whole thread is getting very unwieldy and difficult to read/search

The 'Print' view renders the whole topic in a single page allowing you to search the whole topic in your browser. I find that useful for large topics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 06, 2013, 09:49:21 am
What would be useful is to have a way to add something like a grade or importance level to posts, which could then be used as a filter to let the reader decide on what level of detail they get - like the slashdot comments system.

I do update the first post in the  thread with links to latest info, but I agree that some intermediate level of filtering to condense long threads would be useful. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2013, 10:40:58 am
Flir combines in the cheap E4 a better sensor (20 mK Noise) with a really bad lens

as sample an "untouched" calibration image from a Flir E4 (remapping bad pixel)
ds250C_we_ap_fi_le_static.gan

you see diagonal stripes from the bad lens (top left corner)
sensor stripes from read-out are accurate vertical

ps: there are 170 bad pixel
convert to an 1-bit image and count with imagemagick identify
Code: [Select]
>identify -verbose *.gif
Image: ds250C_we_ap_fi_le_static.gif
  Geometry: 320x240+0+0
  Channel depth:     gray: 1-bit
  Histogram:
       170: (  0,  0,  0) #000000 black
     76630: (255,255,255) #FFFFFF white
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2013, 01:52:48 pm
for comparison here a calibration image from a Flir E40

ds120C_we_ap_fi_le_static.gan
17 Bad Pixel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mark_O on December 06, 2013, 02:15:18 pm
Yup, agree. Also being on the flir's "Most Wanted" playing cards pack wouldn't be helpful should I ever need a repair under warrantee job done :)  I'm guessing Mike is the Ace of Spades :D

Actually, I'd say that Mike deserves a rather nice Christmas card from Flir.  Considering the fact that as a result of his efforts, he likely generated something on the order of ~0.5M$ of sales at EOY-Q4 that they would not have seen otherwise.

Not that he'll get one, of course.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 06, 2013, 02:42:06 pm
for comparison here a calibration image from a Flir E40

ds120C_we_ap_fi_le_static.gan
17 Bad Pixel

Interesting E4 vs E40 comparison. Incidentally could you also post the raw .gan and .crs files? That, and do you use exiftool for the gan files? I tried it some time ago but that didn't work. So in the interest of a quick fix I just ditch the 544 byte header and read the raw 16-bit data.

Also interesting to see that you get roughly the same amount of banding on the E4 as on mine. I also checked schdiewen's .gan file and it really does seem he's a lucky bastard! XD No banding to be detected in the .gan file. I'll post the FFT in a bit. There is a big fat stripe in the .crs image so that's a bit weird.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on December 06, 2013, 03:56:28 pm
just got my  from tequipment  (take very long before ship)

V 1.19.8  sn 63906xxx


was quite impress by the "pelican" case that come whit
definitively a good buy  ;D

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on December 06, 2013, 06:11:38 pm
Just to confirm that the cam in RNDIS mode works fine on a Linux host with kernel 3.11 (I am using Linux Mint 13 with the kernel of the latest ubuntu version, package name "linux-image-generic-lts-saucy", version 3.11.0.14.13)

kernel messages when plugging the cam in:

[117540.997436] usb 1-6: reset high-speed USB device number 13 using ehci-pci
[117541.154362] rndis_host 1-6:1.0: RNDIS_MSG_QUERY(0x00010202) failed, -47
[117541.162965] rndis_host 1-6:1.0 eth1: register 'rndis_host' at usb-0000:00:1a.7-6, RNDIS device, 00:40:7f:xx:xx:xx

kernel version:

xxx@xxx01 ~ $ uname -a
Linux xxx01 3.11.0-14-generic #21~precise1-Ubuntu SMP Wed Nov 13 19:37:48 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

After plugging in the cam, the host fires up a new interface "eth1" with IP 192.168.0.1 and it's possible to connect to the cam via http/ftp/telnet
No problem at all  O0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 06, 2013, 06:12:35 pm
The price of the FLIR E8 has dropped from $5,995 to $4,995. I wonder if the E4 hack had anything to do with it. >:D

Edit: It turns out it's a Cyber Monday discount: https://www.facebook.com/FLIRthermography/posts/654409804602576 (https://www.facebook.com/FLIRthermography/posts/654409804602576)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 06, 2013, 07:13:32 pm
The price of the FLIR E8 has dropped from $5,995 to $4,995. I wonder if the E4 hack had anything to do with it. >:D

Edit: It turns out it's a Cyber Monday discount: https://www.facebook.com/FLIRthermography/posts/654409804602576 (https://www.facebook.com/FLIRthermography/posts/654409804602576)
It was always overpriced compared to the lower models in the Ex0 range - doubt they ever expected to sell many
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 06, 2013, 07:24:05 pm
The E8 is old hat anyway....long live the Special Edition E8+  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on December 06, 2013, 07:47:19 pm
Just to confirm that the cam in RNDIS mode works fine on a Linux host with kernel 3.11 (I am using Linux Mint 13 with the kernel of the latest ubuntu version, package name "linux-image-generic-lts-saucy", version 3.11.0.14.13)

kernel messages when plugging the cam in:

[117540.997436] usb 1-6: reset high-speed USB device number 13 using ehci-pci
[117541.154362] rndis_host 1-6:1.0: RNDIS_MSG_QUERY(0x00010202) failed, -47
[117541.162965] rndis_host 1-6:1.0 eth1: register 'rndis_host' at usb-0000:00:1a.7-6, RNDIS device, 00:40:7f:xx:xx:xx

kernel version:

xxx@xxx01 ~ $ uname -a
Linux xxx01 3.11.0-14-generic #21~precise1-Ubuntu SMP Wed Nov 13 19:37:48 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

After plugging in the cam, the host fires up a new interface "eth1" with IP 192.168.0.1 and it's possible to connect to the cam via http/ftp/telnet
No problem at all  O0

bernroth, could you do a "cat /proc/sys/net/ipv4/conf/all/arp_accept"

I was using Mint 14 but with 3.5.0-17-generic kernel. and my arp_accept defaulted to "0" so the GARP packet that the camera sends, when plugged in, goes on deaf ears.

  tnx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on December 06, 2013, 09:29:05 pm
Happy Day, Flir E4 delivered by UPS just now and it's version 1.19.8  s/n: 63906xxx

Honestly with MSX it looks pretty darn great as is...can only imagine once I upgrade it.  :D

If it helps anyone, I placed my order on 12-4-2013 in the morning from Tequipment.net but due to issues at their warehouse shipping location in PA it didn't ship until yesterday, but I still received it as I'm really close to where they ship from.  So I get to play this weekend!!  :-+

UPDATE:

OK, that didn't take long... Many thanks Mike for the great work and instructions.  Sweet upgrade!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bernroth on December 06, 2013, 10:20:59 pm
Quote
bernroth, could you do a "cat /proc/sys/net/ipv4/conf/all/arp_accept"

arp_accept is 0 on my system.
I think they might have fixed the whole RNDIS issue somewhere between 3.8 and 3.11

If 3.11 available on your system?

Try:
aptitude search linux-generic-lts-saucy

If not, well, I would recommend to use Mint 13 as it's supported till april 2017 and has always all new kernels from the newest ubuntu distributions available.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2013, 10:24:01 pm
Incidentally could you also post the raw .gan and .crs files? That, and do you use exiftool for the gan files? I tried it some time ago but that didn't work. So in the interest of a quick fix I just ditch the 544 byte header and read the raw 16-bit data.

my png's are 16 bit raw values

simple rename .gan to .fff
start flir web viewer http://support.flir.com/webviewer (http://support.flir.com/webviewer) (damned MS Silverlight) and in upload dialog type * and ENTER for select your *.fff file
now you can save the uploaded fff image as radiometric flir jpg image
use exiftool for expand 16 raw values from jpg
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 06, 2013, 10:32:25 pm
bernroth, could you do a "cat /proc/sys/net/ipv4/conf/all/arp_accept"

I was using Mint 14 but with 3.5.0-17-generic kernel. and my arp_accept defaulted to "0" so the GARP packet that the camera sends, when plugged in, goes on deaf ears.

FWIW, if have arp_accept set to 0. And when I plug in the E4 it now all works automagically. Just make sure you have the right udev rules (which you probably have), and set the ethx to allow-hotplug in your /etc/network/interfaces file. I used to add a static arp entry, but that's not really required so commented it out. Are you sure there's not some other curious setting blocking arp? When I do a ping, then I see the proper arp request + reply, followed by the icmp packets. Without needing that arp_accept.

Code: [Select]
23:29:15.434109 ARP, Request who-has 192.168.250.2 tell 192.168.250.1, length 28
23:29:15.435302 ARP, Reply 192.168.250.2 is-at 02:40:7f:0a:88:83, length 28
23:29:15.435314 IP 192.168.250.1 > 192.168.250.2: ICMP echo request, id 11272, seq 1, length 64
23:29:15.437701 IP 192.168.250.2 > 192.168.250.1: ICMP echo reply, id 11272, seq 1, length 64

Where 192.168.250.1 is my linux box, and 192.168.250.2 is the E4.

I just checked this after a cold boot of the E4. And yes, I cleared the arp cache before doing this, just to be sure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 06, 2013, 10:39:42 pm
Incidentally could you also post the raw .gan and .crs files? That, and do you use exiftool for the gan files? I tried it some time ago but that didn't work. So in the interest of a quick fix I just ditch the 544 byte header and read the raw 16-bit data.
my png's are 16 bit raw values
I have no problem using your png's, I just hoped maybe there was a feature in exiftool that I missed to directly read those .fff files. Because I already had tested the rename to .fff and then run exiftool on that. But all that tells you is that yes it's a FLIR file (based on the FFF signature in the header) and that's it.

Quote
simple rename .gan to .fff
start flir web viewer http://support.flir.com/webviewer (http://support.flir.com/webviewer) (damned MS Silverlight) and in upload dialog type * and ENTER for select your *.fff file
now you can save the uploaded fff image as radiometric flir jpg image
use exiftool for expand 16 raw values from jpg
That is more work, not less. ;) Guess I will just keep doing what I am doing. Oh look, 544 byte header. weeeey, *skip*.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2013, 11:42:25 pm
I just hoped maybe there was a feature in exiftool that I missed to directly read those .fff files.

ok, I wrote a simple config file for exiftool to read this special images

read this
http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/Streaming_format_ThermoVision.pdf (http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/Streaming_format_ThermoVision.pdf)
for tag information ( FFF_TAGID_GainDeadMap = 5, FFF_TAGID_CoarseMap = 6)

using:
Code: [Select]
$ exiftool -config config.txt ds250C_we_ap_fi_le_static.gan -b -RawThermalImage > ds250C_we_ap_fi_le_static.tif

$ exiftool -config config.txt ds250C_we_ap_fi_le_static.gan
ExifTool Version Number         : 9.38
...
File Type                       : FLIR
MIME Type                       : application/unknown
Raw Thermal Image Width         : 320
Raw Thermal Image Height        : 240
Raw Thermal Image Type          : TIFF
Raw Thermal Image               : (Binary data 153804 bytes, use -b option to extract)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 07, 2013, 12:08:20 am
some background infos

in pdf from last post you find the flir tag for "Raw Thermal Images"
    FFF_TAGID_Pixels = 1,

some flir cams save this 16 bit raw images as native byte sequence in reverse order

sample flir E40 (32 Byte Header)
Code: [Select]
$ exiftool IR_2316.jpg -v3 | grep -A4 'Tag 0x0001 ('
  | - Tag 0x0001 (38432 bytes):
  |     0ef4: 02 00 a0 00 78 00 00 00 00 00 00 00 9f 00 00 00 [....x...........]
  |     0f04: 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [w...............]
  |     0f14: bc 37 e9 37 ba 37 cd 37 ae 37 e1 37 ff 37 dd 37 [.7.7.7.7.7.7.7.7]
  |     0f24: f3 37 eb 37 c1 37 e2 37 c8 37 f2 37 05 38 e5 37 [.7.7.7.7.7.7.8.7]
Phil Harvey (exiftool) decided to export the byte sequence in reverse order as tif image.

But some Flir Cams save the raw values as compressed 16 bit png
sample flir E4 (32 Byte Header)
Code: [Select]
$ exiftool FLIR0011.jpg -v3 | grep -A4 'Tag 0x0001 ('
  | - Tag 0x0001 (77714 bytes):
  |     0ef4: 02 00 40 01 f0 00 00 00 00 00 00 00 3f 01 00 00 [..@.........?...]
  |     0f04: ef 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
  |     0f14: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 [.PNG........IHDR]
  |     0f24: 00 00 01 40 00 00 00 f0 10 00 00 00 00 04 d6 3e [...@...........>]

see here for more informations about decoding flir headers
https://metacpan.org/source/EXIFTOOL/Image-ExifTool-9.25/lib/Image/ExifTool/FLIR.pm
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 12:15:24 am
Right, had some fun with FFTs just to see what we can see with regard to banding, vignetting, etc. Turns out that indeed you can see that in the spectral domain.

cal_norm.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69939)

mrflibble-E4-spectral.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69941)

mrflibble-E4-spectral_cutoff_000.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69943)

mrflibble-E4-spectral_cutoff_060.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69945)

mrflibble-E4-convolution_cutoff_060.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69947)

The big spectral blobs near the X-axis in the 1st and 3rd quadrant look to be at about the right spot for the banding seen on the original cal pic.

What was new to me was the high frequency component on the Y-axis. That would seem to suggest that odd rows are slightly different from even rows. There is also a smaller high frequency component on the X-axis, which would indicate odd/even columns also being different but less so than the rows.

After I noticed this I added some stats to check for mismatches in the even/odd rows and columns.


Bad pixel threshold: 4 sdev
Bad pixel count: 62

                 |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  32150  45489  36041.49  2372.99
Even rows        |  32397  45489  36123.39  2369.27
Odd rows         |  32150  45074  35959.60  2373.92
Even columns     |  32264  45489  36069.75  2379.06
Odd columns      |  32150  44516  36013.24  2366.61

Even-Odd mismatch for (ROW,COL): (+163.79 , +56.51)



What that says is that the average of the even rows is quite a bit higher than the average of the odd rows. And same story for the columns, but less so. Which indeed matches my suspicion that maybe the sensor pixel are either grouped by 2 or 4. Or maybe larger groups, haven't checked yet what's the most likely grouping based on stats.

And it also seems that the crappier the sensor the more pronounced the effect.

For example schdiewen's pretty darn awesome E4  looks to be far better in this regard.

schdiewen-E4-spectral.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69949)


Bad pixel threshold: 4 sdev
Bad pixel count: 64

                 |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  31863  45767  36190.67  2370.90
Even rows        |  32117  45408  36196.05  2374.12
Odd rows         |  31863  45767  36185.28  2367.69
Even columns     |  32117  45201  36208.34  2378.75
Odd columns      |  31863  45767  36173.00  2362.93

Even-Odd mismatch for (ROW,COL): (+10.78 , +35.34)


That looks to be one clean sensor... Note the lack of high frequency component. So unlike mine, this sensor looks to be fairly equal for the odd/even rows.

And tomas123's E40 is even better ...

tomas123-E40-spectral.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69951)


Bad pixel threshold: 4 sdev
Bad pixel count: 17

                 |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  32360  43359  36067.35  2222.82
Even rows        |  32360  43265  36065.73  2221.96
Odd rows         |  32422  43359  36068.98  2223.71
Even columns     |  32360  43265  36074.36  2226.46
Odd columns      |  32434  43359  36060.34  2219.19

Even-Odd mismatch for (ROW,COL): (-3.25 , +14.02)


And lucky for me, tomas123's E4 sensor looks to have about the same characteristics as mine. Both in terms of spectral components and also in terms of odd/even rows/cols mismatch. That always helps to verify you're not
just making stuff up.  ;D

tomas123-E4-spectral.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69953)


Bad pixel threshold: 4 sdev
Bad pixel count: 170

                 |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  32144  47159  36220.38  2537.15
Even rows        |  32144  47159  36284.63  2530.87
Odd rows         |  32148  46964  36156.13  2541.83
Even columns     |  32200  47159  36262.19  2551.62
Odd columns      |  32144  47112  36178.56  2521.93

Even-Odd mismatch for (ROW,COL): (+128.50 , +83.63)


I'll just dump the rest in a zip so those interested can grab that, otherwise this post becomes one big picture attachement fest. :P

Update: well darnit. Zip file too big or something. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 12:22:53 am
ok, I wrote a simple config file for exiftool to read this special images

read this
http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/Streaming_format_ThermoVision.pdf (http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/Streaming_format_ThermoVision.pdf)
for tag information ( FFF_TAGID_GainDeadMap = 5, FFF_TAGID_CoarseMap = 6)

using:
Code: [Select]
$ exiftool -config config.txt ds250C_we_ap_fi_le_static.gan -b -RawThermalImage > ds250C_we_ap_fi_le_static.tif

$ exiftool -config config.txt ds250C_we_ap_fi_le_static.gan
ExifTool Version Number         : 9.38
...

Oh, nice! I'll test that right now. :)

Code: [Select]
exiftool -config exiftool_config_tomas123.txt ds250C_we_ap_fi_le_static.gan -b -RawThermalImage | convert - ds250C_we_ap_fi_le_static.png
exiftool -config exiftool_config_tomas123.txt ds250C_we_ap_fi_le_static.gan -b -RawThermalImage | display -

Update: works as advertised. Nice one. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 07, 2013, 12:30:53 am
What was new to me was the high frequency component on the Y-axis. That would seem to suggest that odd rows are slightly different from even rows. There is also a smaller high frequency component on the X-axis, which would indicate odd/even columns also being different but less so than the rows.
If you recall on the teardown, there are 2 high-speed datastreams - I wonder if there are 2 ADCs.
Though from memory I thought the interleaving was along the X axis, however it's plausible that some analogue elements are alternated on each side of the die, or maybe even the MEMs structure has some alternate-lineness. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: unicorn5 on December 07, 2013, 12:35:40 am


For example schdiewen's pretty darn awesome E4  looks to be far better in this regard.



So this may have already been said, but does it appear the sensors are graded, the crap goes to the E4, the quality the E8, and during manufacturing there maybe a rare situation where there's a lack of crap graded sensors so they use a better quality normally reserved for more expensive model. And so the difference between E8 and E4 for most people will actually be firmware AND HARDWARE?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 07, 2013, 12:47:54 am
@mrflibble

Do you have also skew stripes:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69939)

Are the aberrations caused by the lens?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 12:48:34 am
If you recall on the teardown, there are 2 high-speed datastreams - I wonder if there are 2 ADCs.
Though from memory I thought the interleaving was along the X axis, however it's plausible that some analogue elements are alternated on each side of the die, or maybe even the MEMs structure has some alternate-lineness.

That's a very good point. Two seperate DACs could definitely be at play here. For the odd/even rows this would actually already be enough. However I suspect there is also some alternate-lineness ;) in the rows columns. If not only because of X-axis spectral content + column statistics, but also because the .crs file (correction) definitely shows some stripes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 12:58:49 am
@mrflibble

Do you have also skew stripes:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69939)

Are the aberrations caused by the lens?

Yeah, the stripes on my sensor are pretty close to what your E4 is showing. I was actually quite happy that that result rolled out after I made up some tests. That way it confirmed that at least one other sensor (+lens) out there shows similar behavior.

I think those aberrations are indeed caused by the lens. Actually it's probably a combination of both sensor and lens, but the "bendiness" can only be caused by the lens. A straight line could have been sensor. The trick is of course to model it and try and seperate the two by deconvolution, but that is for another day.  ;D

Speaking of which ... actually a way to try and get a handle on that is the following:
- take several snapshots of a stable scene
- do the same, but now with the lens correction disabled in the image flow
- repeat a bunch of times + average the pics with, and the pics without correction
- do convolution of those two results
- profit!

In the past I've played around a little with enabling/disabling the various steps in the image flow, and you can indeed see the slight influence of the lens correction. So with that it's hopefully possible to seperate the two causes.

Edit: this is the one I mean ...
Code: [Select]
# disable lens correction
rset .image.flow.lens.partOfImgFlow false

# enable lens correction (default)
rset .image.flow.lens.partOfImgFlow true

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 01:12:22 am

So this may have already been said, but does it appear the sensors are graded, the crap goes to the E4, the quality the E8, and during manufacturing there maybe a rare situation where there's a lack of crap graded sensors so they use a better quality normally reserved for more expensive model. And so the difference between E8 and E4 for most people will actually be firmware AND HARDWARE?

Well, so far all we have is three E4's and one E40. I'd love some more .gan and .crs files for both E4 and other models as well so we can have a bigger comparison. As tomas123 pointed out, the lens on the E40 is also a lot better. And it has a pretty low bad pixel count too, so at least the E40 gets the nice goodies. ;) I would assume the E8 would get better binned sensors than the E4 and about the same lens. If that is the case then on the E8 you'd get the same "bendiness" as on the E4, somewhat less bad pixels, and hopefully a less pronounced odd/even row effect. But who knows, need more data.  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 07, 2013, 01:16:11 am
in this forum, no one will probably buy a E8 :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 01:27:49 am
in this forum, no one will probably buy a E8 :-DD
Indeed. Why buy an E8 when you can have an E8+.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TinyScooby on December 07, 2013, 01:55:10 am
Hi All-

I was registered with this username in the past, but seems it disappeared, maybe I wasn't active enough, not sure, but here I am again...

Anyways, I was wanted a FLIR camera for over a few years now, but cost for the high resolution was just too much.  You all got me to pull the trigger on this and I just ordered the E4 through Tequipment using the EEVblog discount (thanks!).  I am close to where they ship these from (they ship them out of PA, not NJ where their office is), so I should have it quick.  I'll report back on the firmware/calibration date, but I'm guessing I'll be good as the units they are shipping I was told they received last week and I think others reported the hackable firmware version as of last week.  I keep my fingers crossed until then...  :)

Is this discount still going on? If so, how does it work? thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: unicorn5 on December 07, 2013, 02:12:09 am
Quote
Indeed. Why buy an E8 when you can have an E8+.  ;D

Oh ofcourse but given that you guys know or suspect the sensors are bin'd with the trash going to E4 more appropriate title is E8-, as they can never be as good when their image quality is critically reviewed [discounting the lucky schdiewens of this word]
As you say more data needed & not many/any  E5,6,8 owners here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 07, 2013, 02:36:54 am
As promised here are some shots from the zoo.

By the way, either I'm already spoiled with the 320 res images or the hack didn't take since some of these don't look too smooth. Thoughts?

Videos coming soon...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on December 07, 2013, 03:47:45 am
Just a follow-up on my 8 degree gradient defective unit, they responded and rather promptly sent a replacement unit and an RMA shipping label for the first one.  Great service!  After seeing some of the image correction maps here, stored in the unit, I think the defective unit can probably be repaired pretty easily by fixing the aperture in place properly and re-doing the complete sensor calibration procedure.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iceisfun on December 07, 2013, 04:01:27 am
223 stainless suppressor after ~15 rounds

(http://www.iceisfun.com/getsomeguns12062013/FLIR0144.jpg)

50 bmg stainless suppressor ~7 rounds
individual baffles visible
(http://www.iceisfun.com/getsomeguns12062013/FLIR0124.jpg)

(http://www.iceisfun.com/getsomeguns12062013/FLIR0125.jpg)

(http://www.iceisfun.com/getsomeguns12062013/FLIR0126.jpg)

(http://www.iceisfun.com/getsomeguns12062013/FLIR0127.jpg)

Bird sleeping with head on back
(http://www.iceisfun.com/FLIR0051.jpg)

Bird Suspicious about "Camera"
(http://www.iceisfun.com/FLIR0042.jpg)

Unknown Revolver
(http://www.iceisfun.com/getsomeguns12062013/FLIR0148.jpg)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nova1200 on December 07, 2013, 04:12:16 am
K.V. - yes, it looks like your E4 is still an E4. For example, here is the embedded thermal image from the African Gray parrot file:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 07, 2013, 05:47:47 am
King...

Are the auto hot spot, auto cold spot and picture in picture functions present and working?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 07, 2013, 09:55:29 am
K.V. - yes, it looks like your E4 is still an E4. For example, here is the embedded thermal image from the African Gray parrot file:
The easy way to tell is the presence of the additional measurement modes and PiP display mode. The usual cause is getting the CRC01 wrong somehow
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 07, 2013, 12:02:17 pm
mrflibble, if you could do that analysis on Mike's sensor it would be interesting to see the results - he posted the dead pixel map a while ago and everyone commented on the huge number of duds (~200?). But now we're reasonably certain that there's some sort of binning going on.


Is there something interesting about the thermal profile of birds? There's been an unusually large number of pictures of them so far...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 12:36:59 pm
mrflibble, if you could do that analysis on Mike's sensor it would be interesting to see the results - he posted the dead pixel map a while ago and everyone commented on the huge number of duds (~200?). But now we're reasonably certain that there's some sort of binning going on.
Do you happen to have the link? This thread is so bleeping long... Also, did he post the .gan file? All I recall is him showing a snapshot with rset .image.flow.maps.combGainDeadMap.pixReplace false. While informative, that is not the same as the .gan file.

Maybe you are thinking of this one (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327538/#msg327538)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 07, 2013, 02:24:56 pm
I have noted comment on the number of dead pixels in a particular micro-bolometer.

Before anyone gets overexcited about dead pixels, please consider that the detector is not a common CCD and is prone to dead pixels. It goes with the territory, especially when working on a low budget. The threshold for a FLIR provided micro-bolometer for ANY consumer grade camera is 99.9% operational pixels. Some cheaper grades of micro-bolometer are 99.8% operational.

The maths says:

320x240 = 76800 pixels

99.9% = 76800 * 0.1% = 76.80 dead pixels
99.8% = 76800 * 0.2% = 153.60 dead pixels

It is my belief that the micro-bolometer fitted in the Ex series is one of the cheaper 99.8% operational sensors. Note the operational percentage applies to a model of sensor and not 'binning' within a model of sensor production. 99.8% is a perfectly respectable micro-bolometer and that is why a thermal camera has dead pixel processing. Even my $50,000 thermal camera has dead pixels. For newbies the term dead pixel may appear scary , but please consider this normal for the technology, the price point of the camera, and the amazing value for money when compared to cameras like my PM695.

I note comments regarding the quality of the lens used in the Ex series. Again I must point out that the thermal imaging industry normally uses very expensive Germanium lenses that cost more than the retail price of the complete E4 ! Efforts were made to reduce the cost for consumer cameras. The need for a huge depth of fields and fixed focus lead to a small aperture simple 'reverse telescope' lens system. The material from which the lens is made is not pure Germanium, it is Chalcogenide Glass. This material has made moulded lenses possible with a substantial reduction is manufacturing costs. It is comparable in performance to a Germanium lens but not equal. The choice made by FLIR was to provide a decent, if not perfect, Chalcogenide Glass lens as opposed to a large Germanium lens as fitted to the Exx series. That as part of the cost reduction process. If you want a quality 30mm Germanium multi element focussed lens system, expect to pay around $2000 to $5000 for just the lenses, depending on quality.

For newbies to thermal imaging, remember the purpose of the product and consider the true resolution of the system. The resolution is that of a common cheap low end web cam, and not that of a DSLR. An amazing quality lens structure is NOT required, hence the common use of simple single or limited element count lens structures, even in the industrial cameras. These things are not designed to produce 'artistic' images with zero barrel distortion etc  ;)

Sadly, if anyone wants really high quality micro-bolometers and lenses guaranteed, they will need to open their cheque book and expect to pay the going rate, which last time I bought such a camera was GBP35000 ($52500). That was two years ago. When this is considered, I think many will agree that $1000 for a 320x240 camera with a less than perfect micro-bolometer and  lens is still quite a bargain.

Newbies to thermal imaging.....Enjoy your cameras and stop worrying about dead pixels and lens perfection  ;D

To those who are investigating such issues, I know that this is for your own enjoyment and interest and I enjoy reading your posts. I just don't want newbies thinking that your excellent findings mean the E4 is cr*p as it most definitely is not, especially when in E8+ guise  :) Having the manual span mode has been a godsend in my recent use of the camera. Thanks to all that have worked to improve on the base configuration and released the cameras full potential.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on December 07, 2013, 03:08:28 pm
A question for you guys using a close up lens in a holder:-

I've just received my ZnSe lens to go in one of the holders designed by Georges80 and note that it has a flat and a convex side.
 
Did you guys mount yours with the convex side facing the camera lens or away from it? Mine seems to work both ways???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 07, 2013, 03:12:36 pm
Flat side towards target, convex towards camera

To see why, look here:

http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F (http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F)

The light path is in reverse to that shown in the picture. In very close focus situations plano-convex are common but users often operate them with the convex towards the target a it 'looks right'. A mistake but the lens does work in reverse, just not as well.

My inframetrics meniscus close-up lens in configured in this way with the concave side facing the target. It does look odd but it is how it is supposed to me.  The longer focal lengths from China are bi-convex but my 50mm FL lens is also plano-convex like yours.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on December 07, 2013, 03:16:46 pm
Flat side towards target, convex towards camera

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 03:26:32 pm
I have noted comment on the number of dead pixels in a particular micro-bolometer.

Before anyone gets overexcited about dead pixels, please consider that the detector is not a common CCD and is prone to dead pixels. It goes with the territory, especially when working on a low budget. The threshold for a FLIR provided micro-bolometer for ANY consumer grade camera is 99.9% operational pixels. Some cheaper grades of micro-bolometer are 99.8% operational.

Indeed. Especially when considering that what we paid for is for a 80x60 sensor. :) Even for example Mike's sensor which has a reasonably large number of bad pixels is perfectly capable of creating good quality thermal images.

Quote
Newbies to thermal imaging.....Enjoy your cameras and stop worrying about dead pixels and lens perfection  ;D

To those who are investigating such issues, I know that this is for your own enjoyment and interest and I enjoy reading your posts. I just don't want newbies thinking that your excellent findings mean the E4 is cr*p as it most definitely is not, especially when in E8+ guise  :) Having the manual span mode has been a godsend in my recent use of the camera. Thanks to all that have worked to improve on the base configuration and released the cameras full potential.

Running those FFTs was basically along the lines of "lets see what we can see". For example I wasn't really looking for any high frequency components in the spectrum. But hey, the numbers are the numbers. So after that I did that bit of seperate statistics for odd/even rows/colums, and hey, that confirms it. Nothing ground breaking or worrisome, just a bit of numerical fun.  ;D And the exact same goes for bad pixel count. Besides, this is a perfectly good excuse to practice using numpy/scipy. :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 07, 2013, 03:35:38 pm
Mrflibble,

I love the work you have done, and are doing....I don't claim to understand it all, but that is why it is interesting. You and I know how good the E4 is in use, but I didn't want new arrivals to the thread to think the E4 was a flawed product.

Please keep investigating the Ex secrets...it makes very interesting reading.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on December 07, 2013, 04:59:07 pm
Quote
bernroth, could you do a "cat /proc/sys/net/ipv4/conf/all/arp_accept"

arp_accept is 0 on my system.
I think they might have fixed the whole RNDIS issue somewhere between 3.8 and 3.11

If 3.11 available on your system?

Try:
aptitude search linux-generic-lts-saucy

If not, well, I would recommend to use Mint 13 as it's supported till april 2017 and has always all new kernels from the newest ubuntu distributions available.

bernroth,

It's not a kernel issue.
Just got some to time to poke at this again, what led me to do the arp_accept = 1 is that on all of my linux boxes it was set to 0 and when the camera sent it's GARP packet, none of my arp cashes got updated. I mistakenly thought that was a problem. After you & mrfibble reported success WITHOUT arp_accept = 1, I tried just changing my static IP to 192.168.250.1 and it "just worked(tm)". Tested on Mint 14's 3.5.0-17-generic and Ubuntu 9.10's 2.6.31-23-generic.
 
Win 7 and the camera go through quite a dance when the camera is plugged in, first starting at 192.168.250.x then switching to 192.168.0.x or 192.168.1.x depending on what comes back from various ARP and PING requests.

When we had tried a dynamic IP, the linux dhclient didn't do anything but a DHCP_DISCOVER which the camera didn't respond to, then dhclient kept retrying till it timed out.

When we did a static IP of 192.168.1.1 or 192.168.0.1, the camera was at 192.168.250.2 and waiting. The camera would respond to an DHCP_REQUEST, but I could never get that to work by modifing dhclient.conf. Probably a mistake on my part in trying to match the DHCP_REQUEST format that the Win 7 box sent.

With a static IP of 192.168.250.1 the camera was happy at 192.168.250.2, and would talk telnet/ftp/http.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 07, 2013, 05:18:15 pm
The material from which the lens is made is not pure Germanium, it is Chalcogenide Glass. This material has made moulded lenses possible with a substantial reduction is manufacturing costs. It is comparable in performance to a Germanium lens but not equal.

here is a compare of a Flir E4 (FOL 7) with fixed focus Chalcogenide Glass lens and a Flir E40 with a Germanium (?) lens (FOL 18)
both cameras enhanced to 320x240

this is a coffee machine
Distance Flir E4 ca. 110cm (Datasheet 45° field of view)
Distance Flir E40 ca. 190cm (Datasheet 25° field of view) 

NETD E4 vs. E40
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342873/#msg342873 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342873/#msg342873)

all images converted with exiftool and imagemagick
E4 use a png with reverse byte order - see code for changing the byte order
Code: [Select]
exiftool -b -RawThermalImage FLIR0238.jpg | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- -auto-level -resize 800x -depth 8 e4-gray.png
convert e4-gray.png iron.png -clut e4-iron.png

exiftool -b -RawThermalImage IR_0480.jpg | convert - -auto-level -resize 800x -depth 8 e40-gray.png
convert e40-gray.png iron.png -clut e40-iron.png

download color palettes from this post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 07, 2013, 05:48:13 pm
The Exx series has an undoubtably better focus. No argument. But this is comparing a fixed focus lens with a manual focus lens. Manual focus will win out as it does not have the compromises of the fixed focus optics. In this case, even a Germanium lens would not fix the image softness. I suppose this is why all of my industrial cameras are manual or auto focus. I do have to do a lot of re-focussing whilst using them though. The DOF on my PM570 and PM695 cameras is very shallow. The fixed focus lens allows FLIR to reduce cost whilst making life easier for the user. All compromises that effect the final image. but hopefully not to the extent of making the camera a poor performer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 07, 2013, 05:52:28 pm
When we had tried a dynamic IP, the linux dhclient didn't do anything but a DHCP_DISCOVER which the camera didn't respond to, then dhclient kept retrying till it timed out.

When we did a static IP of 192.168.1.1 or 192.168.0.1, the camera was at 192.168.250.2 and waiting. The camera would respond to an DHCP_REQUEST, but I could never get that to work by modifing dhclient.conf. Probably a mistake on my part in trying to match the DHCP_REQUEST format that the Win 7 box sent.

Yup, I also noticed the lack of response to the DHCP_DISCOVER. But that's not the root problem either. Because when I noticed the lack of DHCP_DISCOVER response I thought I'd be clever and fake an existing dhcp lease, so that dhclient goes straight to the DHCP_REQUEST stage. When I wireshark it the request looks exactly the same as for win7. Buuuut, no reply there either. :( So something else is going on. But at that point I went screw it, I will just use a static config. Neeeeeeext.

Quote
With a static IP of 192.168.250.1 the camera was happy at 192.168.250.2, and would talk telnet/ftp/http.

Yup. :) That's my setup as well. With allow-hotplug you don't even have to ifup the interface. Just plug it in and all good to go.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 07, 2013, 05:53:08 pm
@Aurora

I have the images not rated.

The Flir E4 -> E8+ has a great cost-benefit ratio.
The price of a original E8 is overpricing opposite a E60 (both have native 320x240 resolution)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on December 07, 2013, 10:47:31 pm
Two more successfully converted today.  version 1.19.x
Thanks to Mike and everyone involved in this awesome hack!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rufus on December 08, 2013, 12:39:44 am
The print view of this topic now renders a blank page, guess it got too big for SMF as well.  Shame. Apart from easy in browser searching the print view is also useful for saving a local copy.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 12:51:14 am
@tomas123,

Apologies, I misunderstood the reason for your comparison of image quality. I totally agree that the E8 is a very poor match to the Exx series and offers very poor value in comparison at that retail price point.

It was interesting to see the lack of fine detail in the Ex image when compared to the Exx image. As I stated, not unexpected but a very useful comparison all the same.  The E40 gives a decent image  :)

When using a close-up lens there may be an improvement in detail within the image if the auxiliary lens effectively becomes a focussing lens. I shall have to experiment.

For the mechanically minded it would be feasible to fit a much better lens to the E4, in place of the small OEM fitment, but the calibration would suffer and a decent primary lens plus variable focus assembly would need to be sourced. They sometimes appear at reasonable prices as ex military equipment in the USA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 08, 2013, 10:00:58 am
@tomas123,

Apologies, I misunderstood the reason for your comparison of image quality. I totally agree that the E8 is a very poor match to the Exx series and offers very poor value in comparison at that retail price point.

It was interesting to see the lack of fine detail in the Ex image when compared to the Exx image. As I stated, not unexpected but a very useful comparison all the same.  The E40 gives a decent image  :)

When using a close-up lens there may be an improvement in detail within the image if the auxiliary lens effectively becomes a focussing lens. I shall have to experiment.

For the mechanically minded it would be feasible to fit a much better lens to the E4, in place of the small OEM fitment, but the calibration would suffer and a decent primary lens plus variable focus assembly would need to be sourced. They sometimes appear at reasonable prices as ex military equipment in the USA.
The  construction would significantly limit how big a lens you could get in there before you have to start chopping into the magnesium frame. I don't think the thread is any kind of standard that I could find - I did compare it to a few cable gland threads but didn't find a match
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 12:51:42 pm
Agreed. The fitting of a different lens would involve significant changes to the E4 lens assembly. I would not expect to find anything that would be a simple fitment. I was thinking of the complete lens assemblies that are sometimes available Ex military. These would have to be grafted into the E4 and some serious modifications undertaken. The user would effectively be re-engineering everything forward of the micro-bolometer. 

Who would bother? Well if someone wanted to turn the E4 into a long range surveillance thermal camera or just better optical  performance is needed without accurate temperature read-out, such a project would make financial sense as opposed to buying one of the Exx series or buying an Exx plus a telephoto lens. This kind of project would use the E4 as a cheap building block for a more advanced camera. At $1000 it is still a bargain 320x240 thermal core when compared to the FLIR Tau  ;)

You are right to point out that this would not be a trivial operation though  :)

I have an Agema 880 with a very high quality 12 Degrees Germanium lens that measures approx. 70mm  diameter.  I have all the required germanium optics in the 880 lens mount (removable) to graft it onto virtually any camera core. That is a future project I have planned for upgrading an ISG Talisman Wasp BST 320x240 fire fighter TIC. It has a advantage of a X2 digital zoom  :)  The 880 is an expensive museum piece and needs liquid nitrogen that I cannot easily source, so it is basically a paper weight at the moment.

I personally will not hardware modify my E4 as it does all that I need of it. I can fall back on my PM570's and 695's for detail work, and I have the required auxiliary lenses for this already.

Thermal imaging can be a very interesting alternative to conventional digital photography and I enjoy experimenting with the technology, but I do not have the expertise in the software improvement that you and others are demonstrating here. I am very much a hardware tech when it comes to TIC upgrades  :)

Axis do a range of CCTV thermal lenses that might be an option for an E4 lens upgrade. Picture attached. I saw a 19mm AXIS lens for $250 recently on e*ay USA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: okent on December 08, 2013, 02:36:25 pm
Once you get into engineering a retrofit optic I think you would be getting close to the cost of the FLIR Scout PS32.
Same core and refresh rate and about 3K in cost.
Granted, I would love to have an optic I could attach to the front of my E4 to allow longer range scanning but as you stated I just don't think it is reasonably possible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on December 08, 2013, 03:50:37 pm
I was actually surprised that the Scout series is also only 9Hz refresh rate. I figured since it was designed for hunting (primarily) it would be faster to accommodate for tracking a moving animal. However, I suppose that pesky export license just wouldn't be worth the hassle.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: osteron on December 08, 2013, 09:10:02 pm
Received my E4 in germany:

Calibration Date  03 Dec
Serial Number   6390 89xx
Firmware 1.19.8
Model E4 1.1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 09:30:33 pm
E4 1.1 ?

That's a new HW version. My E4 is a 1.0

Could you please provide the camera module version information.

To access this got 'Settings' in the menu. Select 'Device Settings', select 'Camera Information'.
Now press the right side of the navigation pad for 10 s3econds or more. Another menu will appear.
Select 'Version information'

Grateful if you will detail the list the module versions. You can truncate the name of the module for speed if that helps as there are a few modules to list.

To exit the menu use the left navigation pad button.

Many thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 08, 2013, 09:34:41 pm
@osteron

Did the hack still work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 09:51:58 pm
Not wanting to be mean or untrusting but we have already had a hoax first poster with a fictitious firmware version. Until I see a screen picture and the module versions I will treat this report as a typo and unconfirmed. If another E4 is found with the 1.1 HW we will have corroboration of the report.

The next question will be, does the unit accept the improvements ?. If not it will be a case of working out what has changed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 08, 2013, 10:06:22 pm
I can confirm it:

model E4 1.1
part-no 63901-0101
firmware 1.19.8
appkit 1.0.14
confkit  E4 1.1
osimgkit 16.0.10
prodkit 1.0.0.8
AppCore 22.0.0.5
AppService 22.0.0.1
etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 10:30:39 pm
@tomas123,

Many thanks for the conformation. E4 1.1 confirmed  :)

So 'Confkit' has changed to version 1.1.

Possibly just a production upgrade as this is a new model.

Have any hardware versions changed?....i.e. IRDM 0.0.1.0, POLLUX 0.1.0.0, POLLUX FPGA 8.1.25.0 ?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 08, 2013, 10:35:53 pm
IRDM 0.0.1.0, POLLUX 0.1.0.0, POLLUX FPGA 8.1.25.0 ?
... are the same
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 08, 2013, 10:43:51 pm
Suggestion - let's compare the contents ;)
FlashFS\system\kits.d
Code: [Select]
# confkit.rev
# This file contains revision information for all loaded
# files in a kit
# Do not edit

NAME userconf
VERSION E4 1.0
DATE 12-Jun-2013

# format: FILE <filename> <size> <CRC32>
#     or: FILE <filename> undefined
FILE flashfs\system\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\appcore.d\factory.d\adjust.rsc 113 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\alignmode.rsc 145 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\extimages.rsc 146 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\hcfalpha.rsc 138 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\intensity.rsc 147 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\palette.rsc 268 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\pathimages.rsc 136 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\power.rsc 341 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\time.rsc 128 <CENSORED>
FILE flashfs\system\appcore.d\factory.d\usb.rsc 114 <CENSORED>
FILE flashfs\system\kits.d\confkit.rev undefined
FILE flashfs\system\service\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\service\appcore.d\factory.d\bw.rsc 258 <CENSORED>
FILE flashfs\system\service\appcore.d\factory.d\rndis.rsc 84 <CENSORED>
FILE flashfs\system\services.d\config.d\conf.cfg undefined
FILE flashfs\system\services.d\factory.d\no_wzctool.rsc 60 <CENSORED>
FILE flashfs\system\ui.d\config.d\conf.cfg undefined
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2013, 10:48:41 pm
Thanks @tomas123.

As your camera is 'enhanced', the new E4 1.1 does look to be an innocent product development version.  :)

@osteron. Thank you for providing your camera details. Yours was the first report of a new E4 version (1.1). You have assisted in mapping the version history of the E4 model. Cheers  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 08, 2013, 10:54:19 pm
Why censor your supersecret CRC32 that is not a CRC01?  :o Did I miss the memo?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: osteron on December 08, 2013, 11:09:45 pm
Code: [Select]
# confkit.rev
# This file contains revision information for all loaded
# files in a kit
# Do not edit

NAME userconf
VERSION E4 1.1
DATE 25-Oct-2013

# format: FILE <filename> <size> <CRC32>
#     or: FILE <filename> undefined
FILE flashfs\system\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\appcore.d\factory.d\adjust.rsc 113 568770501
FILE flashfs\system\appcore.d\factory.d\alignmode.rsc 145 1145798160
FILE flashfs\system\appcore.d\factory.d\extimages.rsc 146 3959544322
FILE flashfs\system\appcore.d\factory.d\hcfalpha.rsc 138 403022140
FILE flashfs\system\appcore.d\factory.d\intensity.rsc 147 3198357105
FILE flashfs\system\appcore.d\factory.d\palette.rsc 268 767855916
FILE flashfs\system\appcore.d\factory.d\pathimages.rsc 136 2892098096
FILE flashfs\system\appcore.d\factory.d\power.rsc 341 1775527956
FILE flashfs\system\appcore.d\factory.d\time.rsc 128 3305292736
FILE flashfs\system\appcore.d\factory.d\usb.rsc 114 2394224369
FILE flashfs\system\kits.d\confkit.rev undefined
FILE flashfs\system\service\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\service\appcore.d\factory.d\bw.rsc 258 4267495318
FILE flashfs\system\service\appcore.d\factory.d\rndis.rsc 84 1796347983
FILE flashfs\system\services.d\config.d\conf.cfg undefined
FILE flashfs\system\services.d\factory.d\no_wzctool.rsc 60 2262041015
FILE flashfs\system\ui.d\config.d\conf.cfg undefined
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 08, 2013, 11:15:03 pm
The exact same here, except of course the version + date.

Code: [Select]
# confkit.rev
# This file contains revision information for all loaded
# files in a kit
# Do not edit

NAME userconf
VERSION E4 1.0
DATE 12-Jun-2013

# format: FILE <filename> <size> <CRC32>
#     or: FILE <filename> undefined
FILE flashfs\system\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\appcore.d\factory.d\adjust.rsc 113 568770501
FILE flashfs\system\appcore.d\factory.d\alignmode.rsc 145 1145798160
FILE flashfs\system\appcore.d\factory.d\extimages.rsc 146 3959544322
FILE flashfs\system\appcore.d\factory.d\hcfalpha.rsc 138 403022140
FILE flashfs\system\appcore.d\factory.d\intensity.rsc 147 3198357105
FILE flashfs\system\appcore.d\factory.d\palette.rsc 268 767855916
FILE flashfs\system\appcore.d\factory.d\pathimages.rsc 136 2892098096
FILE flashfs\system\appcore.d\factory.d\power.rsc 341 1775527956
FILE flashfs\system\appcore.d\factory.d\time.rsc 128 3305292736
FILE flashfs\system\appcore.d\factory.d\usb.rsc 114 2394224369
FILE flashfs\system\kits.d\confkit.rev undefined
FILE flashfs\system\service\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\service\appcore.d\factory.d\bw.rsc 258 4267495318
FILE flashfs\system\service\appcore.d\factory.d\rndis.rsc 84 1796347983
FILE flashfs\system\services.d\config.d\conf.cfg undefined
FILE flashfs\system\services.d\factory.d\no_wzctool.rsc 60 2262041015
FILE flashfs\system\ui.d\config.d\conf.cfg undefined
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 08, 2013, 11:36:53 pm
The exact same here, except of course the version + date.
Code: [Select]
FILE flashfs\system\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\kits.d\confkit.rev undefined
FILE flashfs\system\service\appcore.d\config.d\conf.cfg undefined
FILE flashfs\system\services.d\config.d\conf.cfg undefined
FILE flashfs\system\ui.d\config.d\conf.cfg undefined

Yep, same here also - no SN in those CRC obviously...
.. so any change would probably be in one of those "undefined" files :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 08, 2013, 11:49:23 pm
Why censor your supersecret CRC32 that is not a CRC01?  :o Did I miss the memo?
To nourish my paranoia ;) ...supported by lazyness to verify if the files are unique or not
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 08, 2013, 11:52:38 pm
To nourish my paranoia ;)
And remember: just because you're paranoid doesn't mean they're not after you!!!  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 09, 2013, 09:52:05 am
Can prepare in to save "opportunities" camera "configuration file" in the EEPROM memory which will not be so easily accessible from the "File System"
And then it will be after the event :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 09, 2013, 09:54:55 am
Right, had some fun with FFTs just to see what we can see with regard to banding, vignetting, etc. Turns out that indeed you can see that in the spectral domain.
...
Those are really nice and interesting pictures. And thanks for sharing the numbers as well. After seeing my calibration pic the first time, I thought that the lower vignetting will lead to a lower dynamic range and thus my normalized picture would show more noise than yours. But now i know that our dynamic ranges are comparable, mine is even slightly larger.

So what's the "result", why are those pics that different, you have vignetting and banding, I have spatial noise instead? Perhaps the calibration pictures are already scaled?

Obviously there is quite some variation in the sensor and lens attributes. From trying to interface a thermopile array sensor (Melexis MLX90620) to a µC I remember a rather extensive compensation calculation for each individual pixel, with lots of calibration parameters stored in an internal EEPROM. So I think there are some more interesting numbers buried in the calibration files, which might be helpful in understanding this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on December 09, 2013, 08:15:18 pm
So like others probably I'd like an "additional" lens to allow close up PCB inspection.  I've seen some 3d printer files and a few prototypes to provide a "hack" of a lens adjustment tool or additional lense, but is there someone selling these that I can purchase one from via PayPal, etc?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mtdoc on December 09, 2013, 08:21:33 pm
So like others probably I'd like an "additional" lens to allow close up PCB inspection.  I've seen some 3d printer files and a few prototypes to provide a "hack" of a lens adjustment tool or additional lense, but is there someone selling these that I can purchase one from via PayPal, etc?

Try a google search for 3-D printing services. There may be one near you or one that will ship to you.  I found a few near me that will do this for both lens adjustment tools and the lens holder for about $15.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on December 09, 2013, 08:29:14 pm
Got my from shapeways.com  for 45$ (inc shipping to canada) for lens holder and the adjsut tool
bit more expensive but it professional SLS machine so normally better that make bot ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on December 09, 2013, 10:56:52 pm
Do I need both the lens adjustment tool and the lens adapter?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 09, 2013, 11:09:23 pm
Do I need both the lens adjustment tool and the lens adapter?

Your choice.

The lens adjustment tool allows you to easily set the focus point to 2" or even less. It means every time you switch from far to close you need to adjust the lens.

The lens adapter allow you to leave your primary lens along and just pop in a 2" or 3" etc ZnSe lens when needed. You do have to buy the ZnSe lens so factor that into your total cost.

The ZnSe lens WILL attenuate the signal to some degree since it is an additional optic. I've not noticed much difference in readings at lower temps (say below 40C), but on some measurements in the 90C range I saw of the order of 5C or more lower reading with the ZnSe installed.

I have both :)

cheers,
george.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 09, 2013, 11:11:32 pm
Bear in mind that the lens is a plastic thread into a metal thread, and not designed for large numbers of adjustments, so if you are likely to need to change from normal to close-up a lot, an external lens is probably a better option to avoid wear
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 09, 2013, 11:30:02 pm
For those interested in the typical CO2 laser ZnSe lens spectral response, look here:

http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=4313 (http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=4313)

Its not bad for our purposes but there will be some effect on the cameras calibration as already noted.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on December 10, 2013, 01:56:32 am
Been using my E4 for a few weeks.  Even at 80x60 it's damned useful.  So, fine, I finally went for the hack using a netbook running stock Linux Mint 16.

First, how the heck are you guys getting into the diagnostic screen?  I tried all sorts of combinations of power on, hit one of (Left, Center, or Back), then hold down Play for 5-10 seconds, both before and after the splash screen disappears.  Nothing.  I'm really glad for https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326705/?topicseen#msg326705 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326705/?topicseen#msg326705) because navigating to the versions screen and holding down Right for 10 sec worked great.

Anyhow, in the diagnostic screen, set USB Mode to RNDIS.  Now plug in the computer.  Mint will spend an unproductive few minutes trying to obtain DHCP from the camera and notifying you about it.  Ignore it.  Open Network Settings, click on the new Wired network (for me, it was the first item in the list), and configure it to be a static ipv4 with address 192.168.250.3.  Default /24 netmask is fine.  No DNS, routes, or gateway needed.  If your computer has multiple wired network interfaces, you might have to do some pluggging/unplugging to figure out which one is the RNDIS camera and which one is the physical port.

EDIT: You only need to set up the network once.  From then on, if the camera is in RNDIS mode, Mint will automatically set it up when the camera appears.  Plug and play.

Now ping 192.168.250.2.  If ping doesn't resolve, unplug the camera for a few seconds and plug it back in.  This worked for me.  No routing or arp commands needed.  If you still can't get anything, check out the linux tricks mentioned in previous posts.

Now that ping can see the camera, you can fire up ftp, ssh, telnet, or whatever you want.  All hail Mike.

Except now I'm a little stuck.  I can't run FLIRInstallNet on Linux, can I?  (ick, no VMs)  How should I put my modified E8.cfg on the camera?  Just FTP it into FlashFS/system/appcore.d/config.d?

I could also zip up a fif file but then how would I install it?

Random notes:

To compile the crc01 executable, 'apt-get install g++', cd to Mike's CRC01_source, and run "g++ *.cpp -o crc01"

Over telnet, "rset .image.flow.maps.combGainDeadMap.pixReplace false" to show dead pixels.  Pass true to hide them again.  Also "restartapp" will reboot the camera without breaking the telnet connection.  If it looks like it's hung, don't worry.  It'll come back.

For the record: E4 1.0, Software 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 10, 2013, 02:44:53 am
I'm really glad for https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326705/?topicseen#msg326705 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326705/?topicseen#msg326705) because navigating to the versions screen and holding down Right for 10 sec worked great.
You're welcome :)
Except now I'm a little stuck.  I can't run FLIRInstallNet on Linux, can I?  (ick, no VMs)  How should I put my modified E8.cfg on the camera?  Just FTP it into FlashFS/system/appcore.d/config.d?
I could also zip up a fif file but then how would I install it?
The additional config file belongs into \Flashfs\system\appcore.d\config.d\ - try putting the E8.cfg there and powercycle the camera, if the config stays there, then you should be running in E8 mode (unless your CRC01 somehow computed wrongly). Beware of PC style CRLF line-endings while editing!
Btw - I suggest to turn noise generation completely off (AFAIR the example file kept it at low level).

Note: the "flir/3vlig" ftp-login doesn't work if the camera is powered down - just had that issue - but FTP port would be listening *interesting*
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 10, 2013, 03:06:50 am
Can it be that Dave's forum broke down on the size of this thread?
The print page gives a "500, Internal Server Error" reply (just http header, no content).
Edit: other threads still seem to "print"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on December 10, 2013, 04:19:44 am
So FlashFS/system/appcore.d/config.d/E8.cfg doesn't work.

But FlashFS/system/appcore.d/config.d/e8.cfg (lowercase e8) does work.  Lovely!

Thanks Taucher.  Now I guess it's time to play with menus...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 10, 2013, 04:24:43 am
FlashFS/system/appcore.d/config.d/e8.cfg (lowercase e8) does work.  Lovely!

@Mike ... I guess it would be nice to include a note that putting the cam in RNDIS mode and FTPing the config will also work - no need for Flir tools :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 10, 2013, 04:29:36 am
So FlashFS/system/appcore.d/config.d/E8.cfg doesn't work.

True and makes sense - as mentioned somewhere in this thread the config files are loaded by ascii order - uppercase letters come before lowercase letters - thus E will load before c(onfig) - but e will load after c :) The hack is just adding a second set of commands - which happen to be dupes of the existing config file .. of cause with nicer values ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mordkanin on December 10, 2013, 04:09:50 pm
Doesn't seem to be any issues with upgrading the 1.1. Happy owner of one, here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on December 10, 2013, 04:35:23 pm
Yes, but it's not so obvious when E8.cfg sorts below config.cfg in your ftp client.  :)

Wow, UVC mode and guvcview on Linux work fantastic.  Beautiful video.  Now I want a tripod mount so this thing can record my ham-handed hot air rework and welding attempts.

There appears to be a minor a problem with the triple RNDIS+MSD+UVC mode.  MSD doesn't appear to work -- the pictures aren't mounted.  MSD+UVC is fine, and MSD+RNDIS is fine too.  No big deal, just switch before plugging in.  It's definitely menu hack time -- pressing right for 10 seconds is getting old.

Examples next...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on December 10, 2013, 04:51:13 pm
Here are a few pictures.  Some are pre-hack, some are post-hack.  It's obvious which are which.

Notice the framing inside the wall behind the xmas tree.  That wouldn't show up nearly as well without the hack.

Dog just came in from outside with cold ears, nose, tail, and toes.  And dog poop can't hide from me anymore.  Both pre-hack.  80x60 is still darned useful.

#0016: yum.

Finally, shoes a few minutes after taking them off.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bronson on December 10, 2013, 05:06:48 pm
Oh, and a dead pixel map if it's interesting.  Looks the same as everyone else's.

Mrflibble, you still want config data?  These files?

./FlashBFS/system/zeromap.fff
./FlashBFS/system/rotationmapcw.fff
./FlashBFS/system/rotationmapccw.fff
./FlashBFS/system/distmap.fff

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 10, 2013, 06:26:18 pm
Mrflibble, you still want config data?
Yes please. Specifically those four:

./FlashFS/system/maps/ds250C_we_ap_fi_le_static.gan
./FlashFS/system/maps/ds250C_we.crs
./FlashFS/system/maps/ds_we_ap_fi_leExFOL7_LCFMap.fff
./FlashFS/system/maps/ds_we_ap_fi_le_LCFMap.fff


Quote
./FlashBFS/system/zeromap.fff
./FlashBFS/system/rotationmapcw.fff
./FlashBFS/system/rotationmapccw.fff
./FlashBFS/system/distmap.fff

So far I haven't really looked at these last four .fff files. I think these are the same for all the E4 cameras. But it can't hurt to actually check that, so if you could include those as well that'd be great. All I know about those so far is that they are 468 16-bit value, and that the zeromap is indeed all zeros. ;) I think they might be parameters for image processing blocks, but that is only a random quick guess. So far most of the playing around has been with the .gan (calibration image) and .crs (correction image).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 10, 2013, 06:44:08 pm

There appears to be a minor a problem with the triple RNDIS+MSD+UVC mode.  MSD doesn't appear to work -- the pictures aren't mounted.  MSD+UVC is fine, and MSD+RNDIS is fine too.  No big deal, just switch before plugging in.  It's definitely menu hack time -- pressing right for 10 seconds is getting old.

I also found this, but at least on Windows it's not a problem as the Flir monitor thing implements a virtual drive on the toolbar via FTP/RNDIS, so only an issue if you need to plug into a different machine that doesn't have the RNDIS driver.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 10, 2013, 07:03:31 pm
Those are really nice and interesting pictures. And thanks for sharing the numbers as well. After seeing my calibration pic the first time, I thought that the lower vignetting will lead to a lower dynamic range and thus my normalized picture would show more noise than yours. But now i know that our dynamic ranges are comparable, mine is even slightly larger.

So what's the "result", why are those pics that different, you have vignetting and banding, I have spatial noise instead? Perhaps the calibration pictures are already scaled?
Well to be honest there is no "result". What you see is what you get.  ;D To have a meaningful "The Result [tm]" I'd really have to have more data across different cameras. Damned statistics, always needs more data. ;) That said, even with limited data there are some interesting features that can be seen.

I took a look at the correction images recently. These are from your camera:

schdiewen-E4-CRS-spectral-nofilt.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70352)
Clean.
schdiewen-E4-CRS-spectral-bandpass-10-60.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70354)
Clean.
schdiewen-E4-CRS-spectral-highpass10.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70356)
Hey look, high frequency components. And in the right locations to not just be figments of the imagination.

And as reference here's the GAN file again, but now a bit more properly processed. Bad pixels are now the average of the surrounding 4 pixels. When a surrounding pixel is bad, or this is right on the edge, then median value is used for the non-existing pixel. Mine didn't need this feature, but yours did due to bad pixels right on the edge.
schdiewen-E4-GAN-spectral-highpass10.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70358)

Compare that to CRS and GAN file for my camera:

mrflibble-E4-CRS-spectral-nofilt.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70360)
mrflibble-E4-CRS-spectral-bandpass-10-60.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70362)
mrflibble-E4-CRS-spectral-highpass10.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70364)
mrflibble-E4-GAN-spectral-bandpass10-60.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70366)

I already posted about the spectral blobby things (technical term) in the 1st and 3rd quadrant. You can clearly see those on the last image. Those are related to the banding you see in the original calibration image. You can see those components all lie on a straight line through the origin, and that line is perpendicular to the bands (aka not making stuff up). And as you can see the correction image also contains those same spectral components, which is a nice confirmation. I'm not sure if it is easy enough to see those in a browser window, but if you open up that

Another thing to note about the correction images is that they are really really clean off-axis. Which is not so strange since those .crs files are the output of a correction algorithm. Which makes any off-axis components all the more interesting IMO.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cynfab on December 10, 2013, 07:53:20 pm
mrfibble,

For your data processing pleasure:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 10, 2013, 08:03:47 pm
More data for mrfibble to crunch attached.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on December 10, 2013, 09:48:05 pm
All your base data are belong to us.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 12:19:13 am
The E4 Map files from my camera.

I would be interested in what you can tell me about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 01:02:29 am
Thanks a lot for all the data guys!  :-+ Keep 'm coming.  ;D

I don't want to spam the thread with loads and loads of pictures (this time ;)), so for this post I will pick one sensor that shows some nice example of features. I will get to all the others as well, but I have to figure out a way to summarize things a bit. :)

Take this spectrum from a correction image.

OrBy-E4-CRS-spectral-highpass10.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70388)

So that's the spectrum of the corrections Flir's calibration algorithm spits out, while they try to find a good tradeoff for this particular camera. You can see the two regions along a roughly 45 degree line. Just by looking at that you can see that "ah, there's probably something that is going to cause banding, and those bands will be perpendicular to that ~ 45 degree line.

Alright, lets look at the spectrum of the calibration image.

OrBy-E4-GAN-spectral-highpass10.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70390)

Yup, definitely stuff along that line. In the correction image (CRS) it was mainly centered around one frequency, but in the calibration image (GAN) you can see that it is smearing some spectral power along the line. Which means ... feature is in the same direction, but the frequency magnitude (aka line width) is varying over a certain range.

OrBy-E4-GAN-normalized.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70392)
Hey look, isn't that what we just described?  ;D The banding is indeed perpendicular to that line in the spectral image, and you see thin bands (high frequency) near the edge of the image and wide bands (low frequency) near the center of the image. The cause of all that being the lens I'd think.

Other stats from OrBy's E4:

Bad pixel threshold: 4 sdev
Bad pixel count: 81

Stripsize = 1    |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  31855  45060  35748.66  2408.95
Even rows        |  31855  45007  35781.32  2397.23
Odd rows         |  31972  45060  35716.00  2420.21
Even columns     |  31937  45060  35774.87  2411.03
Odd columns      |  31855  45007  35722.44  2406.62

Even-Odd mismatch for (ROW,COL): ABS(+65.32 , +52.43)  REL*1000(+1.82714 , +1.46655)


It does show odd/even mismatches, more than some cameras, less than others. By having looked at the numbers for several cameras now I'm reasonably sure that there is an underlying regular pattern to the pixels on the die.

And here is the same thing run against the correction image, after an arbitrary scale factor to get numbers that fit the columns nicer. The relative numbers (which is what we're after) do not change when scaling.

Stripsize = 1    |  MIN    MAX    MEAN      SDEV
-----------------+---------------------------------
Full image       |  21000  43000  33171.28  1090.85
Even rows        |  21000  43000  33264.19  1086.16
Odd rows         |  29000  43000  33078.36  1087.62
Even columns     |  29000  43000  33456.93  1049.45
Odd columns      |  21000  43000  32885.62  1056.12

Even-Odd mismatch for (ROW,COL): ABS(+185.83 , +571.30)  REL*1000(+5.60224 , +17.22279)

Which says that yes there is quite a bit of alternate line-ness ;) and more so for colums. And when just eyeballing the normalized correction image you can also see definite stripes. Well, either that or I have been staring at this stuff for too long.  ;D

OrBy-E4-CRS-normalized.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70394)

And for the sake of completeness the bad pixel map:
OrBy-E4-GAN-bad_pixels.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70396)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 01:16:08 am
Excellent analysis of the data, and fascinating reading for me.

I am still trying to understand the meaning of it all, but will keep reading until I do  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 02:43:27 am
For those interested in the performance of the lens in the E4, I suggest that you read the attached document that may also be found here:

http://www.lightpath.com/literature/technicalPapers/MoldedChalcogenideGlassTechnology.pdf (http://www.lightpath.com/literature/technicalPapers/MoldedChalcogenideGlassTechnology.pdf)

Section 3 details lens performance considerations.

 ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 11, 2013, 04:33:09 am
Btw guys - this seems to be getting the largest topic in EEVblog history - just the OWON thread has more replies (for now)  ;D
... and that one started back in 2011 ...  :-+

Edit: added data:
REVIEW - Owon SDS7102 - A look at the SDS series from Owon New
2308 Replies
246620 Views

Flir E4 Thermal imaging camera teardown
2222 Replies
72636 Views

Hantek - Tekway - DSO hack - get 200MHz bw for free New
2135 Replies
437648 Views


Sniffing the Rigol's internal I2C bus New
1926 Replies
141373 Views


REVIEW - Rigol DS2072 - First Impressions of the DS2000 series from Rigol New
1827 Replies
143152 Views


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 11, 2013, 04:45:35 am
Excellent analysis of the data, and fascinating reading for me.

I am still trying to understand the meaning of it all, but will keep reading until I do  ;D

I am with Aurora on this one on both counts ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 11, 2013, 08:16:55 am
I just received a new E4 ....(E4 1.0, Software 1.19.8)........ My problem is that I load the new configuration into the camera using FLIRInstallNet and the original hack (pg.33) the program says it loaded the files without problem .I then powercycle the camera but the new configuration dosnt stay in the camera .This is the second camera Ive done, first one went fine( after you guys straightened me out) and Im doing the process exactly like the first.  I was hoping someone could give me an idea  as to what the problem could be (  Ive triple checked the CRC01)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 11, 2013, 08:24:47 am
I just received a new E4 ....(E4 1.0, Software 1.19.8)........ My problem is that I load the new configuration into the camera using FLIRInstallNet and the original hack (pg.33) the program says it loaded the files without problem .I then powercycle the camera but the new configuration dosnt stay in the camera .This is the second camera Ive done, first one went fine( after you guys straightened me out) and Im doing the process exactly like the first.  I was hoping someone could give me an idea  as to what the problem could be (  Ive triple checked the CRC01)
Check out EzCRC (see my footer), verify that you did enter your serial number in the config file, ensure e8 is lowercase and that the path does not contain a surplus dirname or lacks something.
Alterantive: put the cam into RNDIS mode and upload the file by FTP (see some postings above)
PS: Powercycle = remove battery = hard reboot!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 11, 2013, 09:59:21 am
After dis- and reassembling my E4 to clean my dusty sensor, the visual and thermal images were shifted against each other, making MSX useless for me. This problem is now solved and here comes a short howto, in case someone else faces the same challenge.

Warning: It involves messing with the calibration file unique to your cam, so 1) know what you're doing and 2) have a backup!

Taucher posted some registers which can be modified by rset:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg327178/#msg327178)

This way you could realign your MSX image by adjusting xpanVal and ypanVal, unfortunately I was not able to make it persistent. But since the parallax error depends on the distance to the object to be imaged, it wouldn't have helped anyway.

For a given userDistance z the shift d ((x,y)panVal = floor(d)) between visual and thermal image is calculated by

Code: [Select]
d(z) = c1 + c0/z                        (1)
with c0 and c1 being constant values that are factory calibrated into your cam. d, c0 and c1 are 2-dimensional (x,y), units are [px] for d and c1, [m] for z and [px*m] for c0. The coordinate system starts with (0,0) in the upper left corner, d is the shift of the visual image relative to the thermal image (see below for example).

The constants c0 and c1 are provided by \FlashFS\system\calib.rsc, here are mine:

Code: [Select]
...
.calib.visual.fusion.leExFOL7.C0X double -0
.calib.visual.fusion.leExFOL7.C0Y double 8.1835451
.calib.visual.fusion.leExFOL7.C1X double -8.0483421
.calib.visual.fusion.leExFOL7.C1Y double -2.2975248
...

There are more parameters important for MSX (zoom, rotation, ...), but I didn't need to touch them. So I'm only covering horizontal and vertical shift here.

You have at least two options to calculate new constants for your calibration file:

1) You could set these four parameters to zero, copy the resulting file with a new CRC32 back to the cam, overwriting the original one (keep a backup!) and reboot the E4. To recalculate new values for c0 and c1 you need to get at least two MSX images A and B with some distance between them, determine dA(zA) as well as dB(zB) and solve the system of linear equations to:

Code: [Select]
c0 = (dA - dB)/(1/zA - 1/zB)            (2)
c1 = (dA*zA - dB*zB)/(zA - zB)          (3)

Hint for the sign of d: if your visual image appears 5px to the top and 3px to the left of your thermal image, then d = (-3px, -5px).
Note that you don't need to configure z in the cams settings for this, with c0=c1=(0,0) while measuring, (x,y)panVal will be 0 for all z as well.

2) I found it easier to use rset to modify xpanVal and ypanVal (see Tauchers post) on my connected E4, until my MSX images looked the way I wanted. You may want to temporarily disable auto calibration while doing this or wait for the cam to settle.
I started with a very distant object, in my case it was a street light about 50m away, a building front with windows will also work. Now you already have c1, because c1 = d for large z. Then you need a second image of a nearby object, it should be small and centered in your image to minimize error. I used my doors peep hole at about 25cm away and adjusted (x,y)panVal and the distance to get a proper fit. Now you can use equation (1) to get c0.

My new calibration file obtained by 2) worked great, at least indoors, distant objects were still off by 3px. Reason: the configurable userDistance in the cams settings ends with ">3" (cam uses z=3m then), which makes it impossible to reach c1 for infinity. I decided to overcorrect my parameters and used my obtained c1 as if it were dA at zA=3m and calculated new constants with (2) and (3). Now I have perfect MSX even for great distances, while indoors my actual z slightly differs from the configured userDistance. However, I think it would be a better solution to have additional menue entries for greater distances (e.g. ">10").

Another thing worth mentioning: The cam doesn't round() the result for (x,y)panVal, it just chops off everything following the decimal point. So if your dy results to 5.99px at z=3m you'll end up with a 5px shift being used. You may want to adjust the constants to avoid this and could use rls .image.fusion to see the actual values the cam is using.

Some additional information about MSX can be found in patent EP2634747:
https://data.epo.org/publication-server/rest/v1.0/publication-dates/20130904/patents/EP2634747NWA1/document.pdf (https://data.epo.org/publication-server/rest/v1.0/publication-dates/20130904/patents/EP2634747NWA1/document.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 11, 2013, 10:09:07 am
Thank you Taucher. I remember seeing your EZCRC01 back around page 100 but my computer dosnt want to run it , I sure did ( not valid win 32 message).
Anyway I considered alll your suggestions and the only one I couldn't  be %100 sure of is the CRC01( and I ran it 3 times) so I tried it again, got the right number
and now I have two cameras . Much gratitude to you and all the other heavy thinkers that hang around here. Ive read every post at least once and if I understood %30
of what I read Id be lucky(but I can try for %35)

thanks

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 11, 2013, 10:33:23 am
Thank you Taucher. I remember seeing your EZCRC01 back around page 100 but my computer dosnt want to run it , I sure did ( not valid win 32 message).
Anyway I considered alll your suggestions and the only one I couldn't  be %100 sure of is the CRC01( and I ran it 3 times) so I tried it again, got the right number
and now I have two cameras . Much gratitude to you and all the other heavy thinkers that hang around here. Ive read every post at least once and if I understood %30
of what I read Id be lucky(but I can try for %35) thanks
You're welcome, glad that it finally resolved :)

@Win32 error - did you try the -static version - if yes - which windows version, how many bits, ran from .zip or extracted the archive first?
Steps to reproduce the error?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 11, 2013, 11:46:36 am
@schdiewen

great work.

some informations to the same topic:

I spend some time in self made MSX images for a  Flir E40 (old version of E40 without msx).
On E40 the axis of real and thermal cams are shifted. By focussing the thermal image the real image moves by a diagonal line...

In this worth reading thread I asked for a solution for finding the best overlapping between real and thermal image with imagemagick:
http://studio.imagemagick.org/discourse-server/viewtopic.php?t=23318&p=97895 (http://studio.imagemagick.org/discourse-server/viewtopic.php?t=23318&p=97895)

I reversed engineered the exif tags from flir jpg (thanks to Phil Harvey).
The calibrated position coordinates (offset) from thermal to real images are also inside Flir-PiP-Images
see my old post: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24156.html#msg24156 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24156.html#msg24156)

after then I worked out two imagemagick overlay filters for a MSX simulations and a nice amboss effect
here you find a sample (see the php script)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

MSX
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69637;image)

and amboss (see structure of table plate)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69639;image)

PS: Flir has a patent for a simple image processing procedure?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 12:06:35 pm
From what I understand the differenece between FLIR MSX and previous forms of image fusion is the edge capture that produces  boundary lines of objects and detail rather than just a whole visual image merged into a thermal image which can obscure thermal detail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 11, 2013, 12:11:05 pm
exactly, a simple Photoshop / Gimp / ImageMagick image calculation
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 11, 2013, 12:25:17 pm
After dis- and reassembling my E4 to clean my dusty sensor

Can you please give as a dusty thermal image?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 11, 2013, 12:57:14 pm
if anyone is still afraid to permanently hack his\her i3\i5 here is simple step by step guide

read post #524 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

1. power on camera

2. press menu button once

3. press play (gallery) button for 5 seconds

4. switch to RNDIS usb mode

5. install flir drivers on your pc

6. connect camera to pc, give it a minute to install and start

7. connect to camera's ftp server at 192.168.0.2 user:flir password:3vlig with ftp client capable of passive mode i.e. total commander

8. make full backup of filesystem to a secure location

9. download mike's crc01 tool from this https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) post

10. install some proper text editor i.e. notepad++ (and enable showing all characters in view \ show symbols)

11. open backup\FlashFS\system\appcore.d\config.d\conf.cfg

12. remove last line that says
Code: [Select]
# CRC01 ????????

13. replace number at the end of   ||.caps.config.image.settings.resIR int32 X||   with value from   ||.caps.config.image.settings.fpgaResolution.resIR int32 X||*

14. save changes as new file

15. use crc01 to calculate checksum of this file

16. open backup\FlashFS\system\appcore.d\config.d\conf.cfg file again, do the same resolution modification and replace checksum with calculated one

17. save changes as new file that you will upload to camera (in extra step i have changed attributes and date & time of new file to be the same as old one, but this is most likely unnecesary)

18. connect to ftp again, and upload created file overwriting one that sits in \FlashFS\system\appcore.d\config.d\conf.cfg (or check mike's post just under this one and let us know)

19. unmount & disconnect camera, use reset button in battery compartment to reboot it

it worked for me, i don't take any responsibility for anything but merely sharing what i did described as good as i could, do it at your own risk


*
Code: [Select]
* Z-cam has a detector with 80x80, 120x120 or 144x144 pixels.

Thank you very much!

I managed to permanently hack my FLIR i3 to a FLIR i7, using the step-by-step guide.
The thermal images looks much better now, from 60x60 (3600) pixels to 144x144 (20736) pixels, that's 5.76 more resolution!  :-+ for free!

The installed firmware is v6.5.3 (newest version)

Used apps:

Thank you again!  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 01:04:30 pm
The Patent document relates to the use of the thermal image in a projection system. I belivee that it is the projection of the thermal image onto the target surface that is the Patented idea and not the MSX functionality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 11, 2013, 01:23:45 pm
from 60x60 (3600) pixels to 144x144 (20736) pixels, that's 5.76 more resolution! 

the flir hack is not new, but nobody published the hack yet (avoid closing the vulnerability)
I hacked my Flir E40 a year ago, after I read something about the the Flir i3/i5/i7 sensor (documents from year 2010)

The Flir i3/i5/i7 sensor size is 320x240 pixel
see http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/ (http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/)
(http://www.i-micronews.com/upload/Image/FLIR_Micro-bolometer.jpg)
and page 3 in  www.i-micronews.com/upload/Micronews/Micronews_90.pdf (http://www.i-micronews.com/upload/Micronews/Micronews_90.pdf)

nice blog http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135 (http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135)
(http://postfiles4.naver.net/20100313_3/sgyee_1268425726119Mlqs5_png/flir3-c-cw_sgyee.png?type=w3)

http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)
Quote
The sensor used in the i3 has 20 times more pixels than necessary, and four times more pixels than the i7. Incidentally, the same sensor can be used in more expensive cameras.
...
Each pixel is composed of a thin resistance in vanadium oxide (VOx) covered with an absorber in silicon oxide which absorbs the infrared ray. The temperature of the SiO2 layer is proportional to the temperature of the IR radiation, and the value of the resistance VOx is proportional to the temperature of the absorber. A measurement of the resistance provides the temperature.

Have you tried the full resolution 320x240 pixel (or square 240x240)?
What resolution you get over the service menu?
see here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316173/#msg316173 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316173/#msg316173)

flir published  the root password in may 2010 ;-)
see 1.3.3.2 in http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)

PS: mike knew about flir i3/i5/7 sensor in August 2013  :)
https://www.eevblog.com/forum/crowd-funded-projects/m-thermal-imager-real-or-fake/msg281507/#msg281507 (https://www.eevblog.com/forum/crowd-funded-projects/m-thermal-imager-real-or-fake/msg281507/#msg281507)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 01:40:20 pm
OK, now here is an ugly thought for those who adjust their lens focus using a lens tool.

Mrflibble is doing some great work analysing anomalies in the E4 image maps. At the moment it is appearing that the lens used in the camera has some bearing on the contents of the maps and distortions are being observed. What is worrying is that some E4's have significant anomalies and others very little, if any evident. Consider this hypothetical situation for a moment :

From production to use:

1. E4 camera fitted with a Chalcogenide glass lens that is not perfect and contains random optical errors (not confirmed as fact but something is showing up in the maps suggesting this may be the case)
2. E4 lens is set to correct focus point and 'locked-off'
3. E4 camera is calibrated and correction tables produced to compensate for physical 'defects' in the sensor AND OPTICAL BLOCK.
4. The lens optical errors are captured and countered in software ? (unconfirmed)
5. As noted the errors in the lens may be random in nature. The user rotates the lens to adjust focus. All calibration data for lens defect correction becomes invalid as defects have now moved !
6. The result of lens defects moving and the cameras attempt to counter the defects in software tables that are static could cause interesting effects ?

This is all circumstantial and I do not profess to have any inside knowledge on this, but it just occurred to me whilst considering the lens structure and materials used. Take a look at the lens document that I posted earlier and see what you think. If I am right, it would not be a good idea to rotate the lens as significant errors in the lens defect correction would appear.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 11, 2013, 02:00:18 pm
google found the first reseller of a flir cam with hacked resolution  :palm:
Quote
"new Flir i3 Thermal Imaging Camera with resolution enhanced to i7 144x144 microbolometer"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 02:03:01 pm
It was only a matter of time I suppose. E4's will soon be hitting the market in their 'enhanced' configuration. Human nature...the quick buck has great appeal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 11, 2013, 03:55:24 pm
Which says that yes there is quite a bit of alternate line-ness ;) and more so for colums. And when just eyeballing the normalized correction image you can also see definite stripes. Well, either that or I have been staring at this stuff for too long.  ;D

I let the E4 warm up for a while with the shutter closed and then took a snap. With the RainbowHC color scale you can see this affect if you look closely. Does it bug me - nope. :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on December 11, 2013, 03:59:45 pm
Can you please give as a dusty thermal image?
I'm afraid I only have one picture with that dusty spot on it and it's hard to see here (top middle, the bluish dot in the black sky).

But here you find a small description of the symptoms and a link containing another sample from JockeT:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392)

My spot looked like this, maybe not that prominent but the same size. I managed to get a second identical one on my images before cleaning the sensor. So beware where you blow on your cam  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 04:16:16 pm
I must say I was surprised at how open the internal optics and Micro-bolometer are on my PM695. I had expected the optical block to be 'sealed' to the Micro-bolometer to avoid dust ingress. Granted, the camera is fully gasketed and water resistant, but not when the battery/ memory card cover is open. You can actually see right inside the camera then ! FLIR charge a lot for lens cleaning...go figure !

I mention this only because members of this forum have suffered dust on their E4 Micro-bolometers..... it isn't a 'cheap camera thing'. A pity that FLIR did not make the optical block a little more resistant to dust ingress as that need not increase costs significantly. Dust on the optics isn't great, but dust on the Micro-bolometer window is a nightmare for anyone not able to dismantle the camera and clean it themselves.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 05:38:32 pm
I let the E4 warm up for a while with the shutter closed and then took a snap. With the RainbowHC color scale you can see this affect if you look closely. Does it bug me - nope. :)

For bonus points you can do the following. Warm up with the external shutter closed like you are doing. Then do:

Code: [Select]
# turn off auto-nuc + trigger nuc
rset .tcomp.services.autoNuc.active false
rset .image.services.nuc.commit true

# check settings
rls .tcomp.services.autoNuc.active
rls .image.services.nuc.shutter
rls .image.flow.shutter.position

# close internal shutter
rset .image.flow.shutter.position "in"

# wait 1 second, then take snap
bt -s

The internal shutter will open up again automatically after a short pause. You can also take a snapshot using the store command or with rset etc, but the bt -s method is pretty lazy and doesn't mess with regular operations.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 05:49:53 pm
I see large squares in your first image....wonder what that is ?

Mystery picture time  ;D Love it !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 06:37:00 pm
OK, now here is an ugly thought for those who adjust their lens focus using a lens tool.

...

4. The lens optical errors are captured and countered in software ? (unconfirmed)
5. As noted the errors in the lens may be random in nature. The user rotates the lens to adjust focus. All calibration data for lens defect correction becomes invalid as defects have now moved !
6. The result of lens defects moving and the cameras attempt to counter the defects in software tables that are static could cause interesting effects ?

4: Yeah I'm pretty sure that lens is being corrected for. Some time ago I posted the relevant resource settings in the image flow with which you can enable/disable it.
5: Indeed. Both the GAN + CRS files show corrections that are almost certainly lens related and that are NOT invariant under rotation.
6: Only several ways to find out.  ;D

That PDF on chalcogenide glass was pretty interesting. If the lens assembly in the E4 is indeed as shown in figure 2, then you can easily see how small manufacturing imperfections can cause some of the things we see on those calibration pics. For example when the two elements are tilted slightly relative to each other. That would seem rather silly to me, but what do I know? :-// More likely would be to actually have them properly aligned (that's not all that hard these days I would hope), but then have a slight imperfection in the negative element. I don't know squat about it so can very well be wrong, but I would guess an imperfection in that mold pressed chalcogenide glass element is more likely than not aligning the two elements properly. Any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 07:30:56 pm
The good news is that the E4 appears to used a singlet and not an air gapped doublet lens. The singlet is concave on the target side and convex on the micro-bolometer. This is a reverse telescope design for wide angle combined with decent distance between the lens and detector face.

Lens alignment is unlikely the issue. Lens material or moulding imperfection is more likely.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 07:39:42 pm
The good news is that the E4 appears to used a singlet and not an air gapped doublet lens. The singlet is concave on the target side and convex on the micro-bolometer. This is a reverse telescope design for wide angle combined with decent distance between the lens and detector face.

Lens alignment is unlikely the issue. Lens material or moulding imperfection is more likely.

That's good to know. :) I already thought it a bit unlikely that in 2013 we would still get that large a misalignment. I mean given the relative costs of the camera and the distances involged it would be really dumb (IMO) if it was out of whack that much to show the imperfections that we see. But me no workey in manufacturing, so what do I know.  :-//

So this singlet is just one single piece (singlet, duh) of BD-1 with a coating applied to one side?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 11, 2013, 08:11:30 pm
OK, now here is an ugly thought for those who adjust their lens focus using a lens tool.

Mrflibble is doing some great work analysing anomalies in the E4 image maps. At the moment it is appearing that the lens used in the camera has some bearing on the contents of the maps and distortions are being observed. What is worrying is that some E4's have significant anomalies and others very little, if any evident. Consider this hypothetical situation for a moment :

From production to use:

1. E4 camera fitted with a Chalcogenide glass lens that is not perfect and contains random optical errors (not confirmed as fact but something is showing up in the maps suggesting this may be the case)
2. E4 lens is set to correct focus point and 'locked-off'
3. E4 camera is calibrated and correction tables produced to compensate for physical 'defects' in the sensor AND OPTICAL BLOCK.
4. The lens optical errors are captured and countered in software ? (unconfirmed)
5. As noted the errors in the lens may be random in nature. The user rotates the lens to adjust focus. All calibration data for lens defect correction becomes invalid as defects have now moved !
6. The result of lens defects moving and the cameras attempt to counter the defects in software tables that are static could cause interesting effects ?

This is all circumstantial and I do not profess to have any inside knowledge on this, but it just occurred to me whilst considering the lens structure and materials used. Take a look at the lens document that I posted earlier and see what you think. If I am right, it would not be a good idea to rotate the lens as significant errors in the lens defect correction would appear.

I think you are getting a bit paranoid here....

If there were 'significant errors' caused by rotating the lens then you would see this on basic tests on targets with uniform temperature. eg point it at a desk and rotate the focus control.

If errors were 'significant' then you would see obvious thermal error patterns appear as you rotate the lens for each focus point. Mine seems completely uniform but then I'm not trying to look at tiny uniformity errors of a fraction of a degree.

Also, I took my E4 into work today to compare to the old Irisys 4010 we have there. Basically the modded E4 completely outclasses the 4010 when used for closeup PCB work. The 4010 gives a very noisy and dithered image and the 160x120 sensor isn't as sensitive and a lot of detail is lost.

But if the cameras are used for looking at stuff a couple of metres (or more) away then the lens of the E4 lets it down because it has the wide angle lens. So everything looks so tiny. The 4010 easily wins here despite the noisy image. eg you can see facial detail far better at several metres with the 4010 and the E4 is a poor second. Maybe it's possible to fit an external lens to make it better for distance work?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 08:28:11 pm
I think you are getting a bit paranoid here....

If there were significant errors caused by rotating the lens then you would see this on basic tests on targets with uniform temperature. eg point it at a desk and rotate the focus control.
Not if the error is something that can be corrected for (and is being corrected for) electronically. I am all for logic based on "lets see what it does when I rotate this", but unfortunately this line of reasoning doesn't work.

In your example you rotate the entire imaging system. In Aurora's example you rotate 1 single part of the imaging system.

Quote
If errors were 'significant' then you would see obvious thermal error patterns appear as you rotate the lens for each focus point. Mine seems completely uniform but then I'm not trying to look at tiny uniformity errors of a fraction of 1 degree.
And in fact I am expecting there to be slight differences under rotation, because not everything can be compensated away perfectly. Unfortunately I don't have a decent black body source, so that is just a gues for now...

Any chance I could take a look at your calibration files? The four files in ./FlashFS/system/maps/ I mean... Because not all camera's show this effect. It could for example very well be that your calibration and correction image doesn't show any significant banding etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 11, 2013, 08:44:44 pm
Quote
In your example you rotate the entire imaging system. In Aurora's example you rotate 1 single part of the imaging system.
I'm using my homemade focus tool to adjust focus from a few cm to several metres and making a comparison on a uniform surface. 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 08:59:36 pm
Quote
In your example you rotate the entire imaging system. In Aurora's example you rotate 1 single part of the imaging system.
I'm using my homemade focus tool to adjust focus from a few cm to several metres and making a comparison on a uniform surface.
I was mainly responding to the logic, not to the case of your particular camera that may very well have a lens where this is not an issue. Several other cameras don't show this effect either, just some.

Don't get me wrong, I am all for the effect being negligable. My camera does show some banding, and I intend to use it for some closeup work too. So being able to get away with lens rotation with zero issues would be a plus.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on December 11, 2013, 09:18:18 pm
Realize this might not be the place for it, but playing around with the flir tools, I haven't been able to get it to record.  (No record button is showing on the app?)  Has anyone had success? And yes its the +

I did find this that might interest folks that don't have Tools+

http://flir.custhelp.com/app/answers/detail/a_id/332 (http://flir.custhelp.com/app/answers/detail/a_id/332)

It talks about using VLC to view/record...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 11, 2013, 09:25:20 pm

I was mainly responding to the logic,

Can you explain why you think I am rotating the whole imaging system when I use my focus tool? I've not looked inside my camera but I kind of assumed I was just rotating a lens with the focus tool and not the 'whole imaging system'. Just wondering if there's something wrong with my reasoning (or yours )

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 11, 2013, 09:45:13 pm
Oooops I didn't intend to instigate a major discussion on the issues of lens rotation.  I Just wanted to raise it as a thought for those who are studying the finer detail of the camera system. I keep in mind that I am using a very cheap thermal camera that was supposed to operate at 80x60 resolution, and I am using it at 320x240. So should be both very pleased with its performance and less concerned about any minor anomalies that it presents in its excellent images. I am a very happy owner of my E4(E8+)  :)

I do appreciate the work that mrflibble is doing as I am learning from it.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 11, 2013, 10:15:38 pm
Well you did use words like ugly and "significant errors" with respect to using the focus tool. :)

I thought my reasoning was sound in that you can use the focus tool and if the errors were significant then you would easily see them. i.e. they would appear in a similar way to spotting debris on the top lenses in a microscope. You rotate the eyepiece lens in the microscope and if the dirt rotates you know there is a problem with the top lens and the artefacts are dirt on this lens and are not on the subject.

In this case it would be 'corrected errors' introducing a spontaneous rotating dirty error effect as you rotate the tool away from the factory position.

If they were that significantly bad you could easily set the camera back (exactly) to the factory position  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 10:28:02 pm

I was mainly responding to the logic,

Can you explain why you think I am rotating the whole imaging system when I use my focus tool? I've not looked inside my camera but I kind of assumed I was just rotating a lens with the focus tool and not the 'whole imaging system'. Just wondering if there's something wrong with my reasoning (or yours )

I cannot explain that. I can however explain why I think that pointing the camera at something, taking a picture, then rotating the camera and then taking another picture is rotating the whole imaging system. Which is what I thought you said. But given your reaction now that you mean just rotating the lens, and reading it back "... eg point it at a desk and rotate the focus control" I take it you mean that you keep the camera steady and only rotate the lens. In that case no arguments from me, because that is exactly the same thing that Aurora was talking about. So my bad, I cannot read.  |O

And all that after I just typed up a response about the signal path, but after I reread your response that is now a moot point. *pout* ;)

Going back to the original subject, you have pointed the camera at a steady uniform surface, then rotated the lens and no differences to be seen? If yes, then that is good news. How good the news is for those of us with banding etc would depend a bit on if your calibration/correction pic shows any banding. If your .gan/.crs shows banding + you get no adverse effects under rotation ==> joy! If you don't have banding to begin with then this good news for you doesn't automatically translate into good news for those of us that do see some banding in the calibration picture.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 11, 2013, 10:30:33 pm
Well you did use words like ugly and "significant errors" with respect to using the focus tool. :)

Heheh, I have also used words like "crappier sensor" when comparing the various E4 camera's. Doesn't mean I think they are actually crap. This E4 is damn good value for money IMO. Especially as an E8+. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on December 11, 2013, 10:42:09 pm
I was hunting a good TIC on ebay since months, but

08 Dec@01:30 AM I saw this post and, immediately, I entered in panic mode. I couldn´t sleep anymore.
08 Dec@02:15 AM Finish to read about about 15 pages of this post, but I realized they were written in 48 hours (thank you Aurora to delete some stuff). I understood 65% of it.
08 Dec@02:30 AM I ordered the E4 on Tequipment.NET with 2 day air shipping.
11 Dec@16:30 PM I got my brand new E4, FW 1.19.8. Model E4 1.0. Calibration 13 Nov 2013.

It is not too late guys, don´t think just buy it.

@FLIR: You would never have got my 1000$ without this. Just think about that over Xmas.
@Mike: Just undo it. You are the Chuck Norris of the Electronics Engineer (FYI when Alexander Bell invented the telephone he had 3 missed calls from Chuck Norris).
I´m proud to live in the same planet at the same time with you.

It´s time to blast some AC DC in the air and to get some more resolution...

Update: Done, too easy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on December 11, 2013, 10:52:52 pm
Realize this might not be the place for it, but playing around with the flir tools, I haven't been able to get it to record.  (No record button is showing on the app?)  Has anyone had success? And yes its the +

I did find this that might interest folks that don't have Tools+

http://flir.custhelp.com/app/answers/detail/a_id/332 (http://flir.custhelp.com/app/answers/detail/a_id/332)

It talks about using VLC to view/record...
.

I think others are using the E4 like a webcam. Mine appears this way to the PC if you connect it via USB without Flir Tools. I assume you're using an E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 11, 2013, 10:54:19 pm
Quote
Going back to the original subject, you have pointed the camera at a steady uniform surface, then rotated the lens and no differences to be seen?
Yes, I did several quick and lazy tests but my interpretation of 'no difference' might not be the same as everyone. It pretty much looked the same even orange colour but with the usual noise. I have a look through focus tool and all I could see was some random noise on the orange.

I did this on the auto temp scale so maybe if someone tried it on a zoomed manual scale it might be more apparent but I would be falling asleep at the significance of fractions of a degree in non uniformity. This is because I have to look at the overall measurement uncertainty of the entire system plus the uncertainty of the emissivity of the subject and also the calibration drift of the instrument over a few seconds.

If I was worried about uniformity over fractions of a degree across the whole screen area then I don't think I'd be using an Ex series camera. So for my use (and probably most people) it's a non issue with this camera I have here :)



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 11, 2013, 11:04:27 pm
Well, thanks to everybody here. I just received and converted my E4.

I have to say E4 original resolution is pretty low. So low, it is much worse than my old ARGUS camera for half price.
See my argus video hot and cold water - now I can sell this one :)

Thermal camera ARGUS - water play (https://www.youtube.com/watch?v=q7sP1tPVdrE#)

After conversion to 320x240 it looks much better and puts old Argus into shame.
I have to do some side by side comparison.

I had problem with drivers on my computer, x64 Win7, camera is not recognized at all. I do not know why.
So I tried my notebook, also x64 Win7. Here it is working well. Conversion was pretty easy, well documented.
Anyone having trouble with drivers ? Windows is saying installation of driver failed. Any suggestion ?

I think original founder of hack deserves some kind of "donate".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 11, 2013, 11:14:36 pm
Just found another use for the E4 (with  tripod) - checking nozzle aim and evenness of heating when using a hot-air tool to remove a QFN from a crowded PCB without collateral damage - makes it a lot quicker as you can accurately get heat exactly where it's needed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on December 11, 2013, 11:32:37 pm
Realize this might not be the place for it, but playing around with the flir tools, I haven't been able to get it to record.  (No record button is showing on the app?)  Has anyone had success? And yes its the +

I did find this that might interest folks that don't have Tools+

http://flir.custhelp.com/app/answers/detail/a_id/332 (http://flir.custhelp.com/app/answers/detail/a_id/332)

It talks about using VLC to view/record...
.

I think others are using the E4 like a webcam. Mine appears this way to the PC if you connect it via USB without Flir Tools. I assume you're using an E4.

E4 and I will have to take a look.  I don't remember it showing as a webcam...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 12, 2013, 12:13:22 am
I tried to think of another reasonable test for the focus tool vs lens error concern:

I hooked the camera up to FLIR tools and streamed the image to my large PC screen
Then I wound out the focus a long way to get it to focus really close to the lens.
I then closed the lens cover and pressed my finger against the lens cover to warm it up.
I then locked the temperature scale
I then watched on the screen as the lens cover cooled off to see if there were any odd pattern effects.
I then rotated the lens a few degrees and tried again. The results were remarkably good. What I did see was occasional vertical bands and some random and very subtle spattery patterns but these were at tiny fractions of a degree and may be a factor of the video compression. They didn't appear to be lens rotation sensitive.

So in this test at least there weren't any obvious/stubborn issues with non uniformity as it cooled down for either lens rotation.

This isn't exactly a conclusive test but I didn't see errors or ugliness that I would call remotely significant at either lens focus angle :)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 01:44:05 am
@G0HZU,

This is indeed good news  :)  I have the focus tools so it would have been a shame if that option had 'issues'.

I am currently using the auxilliary ZnSe lens option, as that best suits my needs.

Thank you for doing the tests that you have carried out for us.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 01:48:09 am
Just found another use for the E4 (with  tripod) - checking nozzle aim and evenness of heating when using a hot-air tool to remove a QFN from a crowded PCB without collateral damage - makes it a lot quicker as you can accurately get heat exactly where it's needed.

Mike,

Thats an excellent idea. I had not thought of that use before. Thanks  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 12, 2013, 01:52:28 am
Well, thanks to everybody here. I just received and converted my E4.

I think original founder of hack deserves some kind of "donate".

I second that but I have a related question, how is this forum funded because I for one would be interested in donating toward its operational expenses .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 12, 2013, 05:05:36 am
Well, thanks to everybody here. I just received and converted my E4.

I think original founder of hack deserves some kind of "donate".

I second that but I have a related question, how is this forum funded because I for one would be interested in donating toward its operational expenses .

You can become a Supporter (https://www.eevblog.com/forum/profile/?area=subscriptions) for $25 a year.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 12, 2013, 05:15:57 am
Thanks
Title: Is this hack still functioning?
Post by: thereza on December 12, 2013, 11:03:32 am
Planning on picking one up from amazon if none of them have been patched yet to prevent this hack.   Any reports of it failing?

Thnx,
Reza
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 12, 2013, 12:32:42 pm
I think original founder of hack deserves some kind of "donate".
Buy stuff to send to him for teardown? :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on December 12, 2013, 02:12:28 pm
Quote from: daves
   I think original founder of hack deserves some kind of "donate" 
There must be some way to support those who spend a lot of effort, and cost, for our free "upgrades."
Many already donate to EEVBlog, but that doesn't help the others.   Ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on December 12, 2013, 03:07:01 pm
since today it a hot day i try my camera outdoor

seem the reading in cold temperature was bit off ..

actual outdoor was only -22 

also did camera put serial number on exif ?
edit : self reply
        yes camera serial number was on the EXIF
        so post original image expose your serial number  camera |O
        take image put it on flir tool folder and it will show camera SN ..
        have test wit image i take from that tread for make sure info nome from image itself
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 03:31:28 pm
I have been experiencing inaccuracy at temperatures below 0 Degrees Celsius, but didn't want to post detail until I have determined whether it is user error !  I was seeing -4 Degrees Celsius when a thermocouple was saying +2 Degrees on a house brick and concrete path outside my house. I have yet to investigate what was going on. Could be emissivity but the error seems too large. I changed the refelected temperature setting but it had little effect. More testing needed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on December 12, 2013, 04:36:40 pm
HI Aurora

have take several shot on different surface , snow ,brick  ,sky etc
whit camera a room temp and at outdoor temp (let sit outdor for 10 min)

and same result ,it strange since indoor temp look accurate

and -20 was quite a big error 
will need more test meteo said it was -20 for next 3 day  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 12, 2013, 04:39:07 pm
I have been experiencing inaccuracy at temperatures below 0 Degrees Celsius, but didn't want to post detail until I have determined whether it is user error !  I was seeing -4 Degrees Celsius when a thermocouple was saying +2 Degrees on a house brick and concrete path outside my house. I have yet to investigate what was going on. Could be emissivity but the error seems too large. I changed the refelected temperature setting but it had little effect. More testing needed.
cold surfaces may have condensation & ice, which will affect emissivity
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 05:00:35 pm
I will do some proper tests with test pieces in the fridge and freezer and see how the E4 behaves.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alphatronique on December 12, 2013, 05:31:42 pm
have made quick test indoor / outdoor whit Flir box so it a reproducible surface to everyone here

my thermometer said -17  and image was take away from sunlight
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 05:41:04 pm
I will do a test with the PM695 and E4 in parallel to see if they give the same temperature. They are both thermal cameras operating in the same scenario so there should be little difference.

Watch this space.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 12, 2013, 06:30:30 pm
uncooled microbolometer: At low temperatures, the accuracy drops dramatically.
Flir defines NETD (noise equivalent temperature difference) at 30°C.
http://flir.custhelp.com/app/answers/detail/a_id/128 (http://flir.custhelp.com/app/answers/detail/a_id/128)

I think, the blackbody for calibration of the E4 is also uncooled ;-)
http://www.flirshop.com/product/4-inch-blackbody-source/Tau320-Accessories (http://www.flirshop.com/product/4-inch-blackbody-source/Tau320-Accessories)

--
Don't forget to set the right air temperature and distance!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: unicorn5 on December 12, 2013, 07:11:58 pm
Hi, I"m non technical. Interested in your lens discusion but don't really know what you're talking about.

Inn short a pair of glasses, ie a lens over the existing lens won't help with getting a sharper image, only magnifying or altering focus, but the non-sharpness of images can only be fixed with replacing existing lens, and replacement lens would be a different material to E4 lens and more expensive than E4 it's self. Is that approx correct?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nixxon on December 12, 2013, 07:20:00 pm
Here is a IR picture of the full moon taken a while back with a Fluke TiR.

If I remember correctly, there are ca 9 pixels covering the lunar disk, and that should theoretically be enough to get a somewhat accurate reading, disregarding the influence of the atmosphere of earth and of course the reflected temperature of the sun on the moon.

According to my TIR, the temperature is ca 55 ' Celcius.

If the modded E4 has the double FOV (45') and the double resolution, the results should possibly be similar using the E4 with similar IFOV.

Imaging Performance Fluke TiR:
Field of View ....................................................... 23 ° x 17 °
Spatial Resolution (IFOV)................................... 2.5 mRad
Minimum Focus Distance
Thermal Lens.................................................. 15 cm (approx. 6 in)
Visible (Visual) Light Lens .............................. 46 cm (approx. 18 in)
Focus.................................................................. Manual
Image Frequency................................................ 9 Hz refresh rate
Detector Type ..................................................... 160 X 120 Focal Plane Array,
uncooled microbolometer
Infrared Lens Type.............................................. 20 mm EFL, F/0.8 lens
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2013, 07:30:55 pm
@Unicorn5

The E4 uses a small aperture lens and a fixed focus. The large depth of field produces a reasonably focussed image between 0.5m and infinity. Being fixed focus, it is a compromise solution and does not generally produce the sharpness of focus achievable with a larger lens capable of being focussed. The down side of a lens that can be focussed and that has a larger aperture is the small depth of field that it exhibits so you have to re-focus often if changing the camera to target distance by very much.

The E4 does not contain a 'rubbish' lens so improvement in clarity may be possible with the use of auxiliary optics. This is what I do for close-up work and the focus is good.

To gain very crisp images with the E4, at most distances, a lens with adjustable focus would be desirable. How well the current E4 lens performs if its focus is adjusted for each distance, I do not know. It is optimised for a large depth of field not fine focus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 12, 2013, 07:54:10 pm
My first post here but I have read EVERY page of the great thread!
It's YOUR fault that I bought an E4  ;D ;D
AND I should have it tomorrow (Friday the 13th!)  :phew:

A friend of mine also bought on and should have his today (he ordered it before I did by a week).

I am going to upgrade both of ours AFTER I make SURE nothing is wrong with them or show any anomalies like banding, etc., like I have read in this forum.

I have a 3d printer and got the lens adjusting tool .stl file so I am going to print a couple for us.
We are in a paranormal investigation group so we'll see if these E4 [8's] help... they should.

I am also going to use it for thermal mapping my house's heat leakage (a 1911 craftsman with shiplap wood siding), and I want to see how my attic insulation is working.

There are many uses I am thinking of to use the E4[8] with as well, but this thread made me bite the bullet.
I got a good price for it also... 895 free shipping (about %10).

Thank you Mike for your hard work coming up with the very simple hack!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dustout on December 12, 2013, 08:36:15 pm
Quote
Every single camera in the i-series has a 320x240 detector that is cropped, in software, to either 140x140, 100x100, or 80x80.

Assuming you're a good hacker, you could probably get access to all that 320x240.
It is possible that they use reject sensors with defects for the lower-res products, and/or possibly only calibrate them for the resolution they're sold as - I think the latter is fairly plausible if cal takes appreciable time as that equates directly to cost. thermalguy could probably shed some light on this.

I did some more experimenting with my i3 resolution. If I tell it use resolutions above 120px it maxes out there.  Oddly I cannot get it to actually go up to 140x140 as setting it to that just maxes it out at 120x120.  Digging around in files I noticed a file
Code: [Select]
/FlashFS/system/fpga_isc0601_120x120_c16.bin which makes me think the max resolution on this thing is a bit more hard-coded.  No matter what I set the resolution to above 120x120 the web interface shows a "Sub Area A_W1" of 14400px (which would be 120x120), 432 nops, 2 cols, 2 rows and "Area A_3" of 1600px. I'm not sure what that is.

Oddly enough the original fpgaResolution setting in the service config is 144 so I would think it WOULD at least go up to at least 144x144, but it will not.

I wonder if it would be possible to drop in a higher resolution fpga bin file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 13, 2013, 12:59:56 am
I did some low temperature tests this evening.

The target was a pair of diecast boxes that have been painted with Kylon paint. The Emissivity is supposed to be 95% according to FLIR.

One box was cooled to +7 Degrees Celsius and the other to -8 Degrees Celsius

The attached pictures show the direct comparison between my Industrial PM695 and the E4.
The PM695 permits entry of ambient temp, distance and humidity. the E allows only Reflected temp. All settings were entered from readings taken with a suitable thermometer/humidity meter.

A contact thermocouple was used to measure the surface temperature of the boxes. The -8 Degrees Celsius test had to be carried out quickly as the frosting that developed degraded the accuracy of the readings (as Mike warned)

The E4 appears to have accuracy issues as the temperature drops below zero Degrees Celsius. The error is similar to that experienced outside when I measure a wall temperature. I am not in the habit of measuring low temperatures with my TIC so I am not at all bothered by this minor issue. I can always use the PM695 anyway.

Note that when a thick frost had formed on the -8 Degrees Celsius test box, both cameras produced readings of around 0 Degrees Celsius even though the box was still well below that temperature. The emissivity was totally changed by the layer of water.

Please note that this was not a 'lab conditions' test and some small error will be present. What was apparent though was the size of the E4 error when reading a -8 Degrees Celsius test piece.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on December 13, 2013, 01:18:29 am
Finally got mine, damn distributor took a month to get it in. Good thing they at least offer free calibration forever. I was getting worried.

Version 1.19.8
Cal: Nov 29th
Serial: 639086XX

Attached is KFC from last night
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Richard Wad on December 13, 2013, 03:27:22 am
I did some low temperature tests this evening.

The target was a pair of diecast boxes that have been painted with Kylon paint. The Emissivity is supposed to be 95% according to FLIR.

One box was cooled to +7 Degrees Celsius and the other to -8 Degrees Celsius

The attached pictures show the direct comparison between my Industrial PM695 and the E4.
The PM695 permits entry of ambient temp, distance and humidity. the E allows only Reflected temp. All settings were entered from readings taken with a suitable thermometer/humidity meter.

A contact thermocouple was used to measure the surface temperature of the boxes. The -8 Degrees Celsius test had to be carried out quickly as the frosting that developed degraded the accuracy of the readings (as Mike warned)

The E4 appears to have accuracy issues as the temperature drops below zero Degrees Celsius. The error is similar to that experienced outside when I measure a wall temperature. I am not in the habit of measuring low temperatures with my TIC so I am not at all bothered by this minor issue. I can always use the PM695 anyway.

Note that when a thick frost had formed on the -8 Degrees Celsius test box, both cameras produced readings of around 0 Degrees Celsius even though the box was still well below that temperature. The emissivity was totally changed by the layer of water.

Please note that this was not a 'lab conditions' test and some small error will be present. What was apparent though was the size of the E4 error when reading a -8 Degrees Celsius test piece.

Aurora I noticed this also several weeks ago, thanks for confirming I was not alone.
Outside temps were in the 40s F and my E4/8 was reading ground temperature 15-25 degrees less.
Granted surface ground temps are likely to be lower than air temperature where we are at, but it was definitely nowhere near accurate.
Where I am now is around 15 F, if you'd like I can post up some shots to compare.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wizzard on December 13, 2013, 04:58:00 am
Mine arrived today, ordered almost 3 weeks ago.

E4 1.1
639082XX
63901-0101
1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 13, 2013, 06:22:39 am
All E4 are brand-new and calibrated.
I think they don't use cooled blackbodies for the low cost E4.

the calibration values are embedded in exif header (fingerprint like serial number):
Code: [Select]
$ exiftool -flir:pl* E4-8DC.jpg
Planck R1                       : 14871.23
Planck B                        : 1400.3
Planck F                        : 2.5
Planck O                        : -7575
Planck R2                       : 0.027825247

the my post here
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)
Code: [Select]
T_obj= B / ln(R1/(R2*(RAW_obj+O))+F)
  T_obj = object temperature in Kelvins
  RAW_obj = RAW value (pixel) (Voltage 16/14Bit)
  R1 Planck R1 constant
  R2     Planck R2 constant
  B    Planck B constant. Value range 1300 - 1600.
  F     Planck F constant. Value range 0.5 - 2.
  O    Planck O (offset) constant. Its a negative value.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on December 13, 2013, 01:47:29 pm
According to the Flir Ex Datasheet:

Temperature Range    –4° F to 482°F (–20° to 250°C)
Accurancy                        ±2% or 2°C

So if you guys are going with a Flir E4 to measure T<-20°C, you are out of spec and the Mr. Flir can do whatever he wants.

First I assume to read the accurancy specification like this:

IF -2°C<(Measured Temperature [°C] * 0.02)<2°C THEN Accurancy[°C]=+- 2°C ELSE Accurancy[°C]=+-(Measured Temperature [°C]* 0.02)

am I right? So at 250°C I am reading +- 5°C?

Thanks Aurora an error of -8.3°C-(-7°C)=-1.3°C is still in spec in my eyes.

So to me it sounds like the more you getting close to those range borders (far away from 20°C???  :-//) the more you will lose accurancy. It would be interesting to see this error amplitude vs measured temperature. I´m expecting now a good read between -10°C and 100°C (+-2°C). It looks like by reading this forum for about T<-10°C the Flir is out of spec... mah...
Interesting would be to see the accurancy in the high temperature zone >100°C, (if someone already did it sorry I didn´t read all the 153 pages).

I'm imaging  the marketing guys (they should just study economy on books and don´t mess around with specifications) discussing with the developers regarding what to put in the datasheet for temperature range and accurancy... poor developers, I was often on that side of the table.

Z
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 13, 2013, 02:52:00 pm
Hello guys,

is flir.php (convert and exiftool) working for you ?
I have fresh new E4 (arrived in 4 days after purchase, from PASS UK) and I am receiving weird result.

It creates ir, raw, gradient, palette pngs. No one is real view. Ir and raw seems somehow damaged.

Any tips ?

FINAL SOLUTION: I had wrong version of convert, needs to be 16bit. SOLVED
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mkaufer05 on December 13, 2013, 05:43:39 pm
I received the Flir E4 two days ago, and I tried the hack for it, but it does not work. the firmware on it is 1.19.8. and has a  date of Nov-23-2013 as its date of it being installed with the Firmware  So unless Im doing something wrong, then the Hack for the E4 no longer works. 
If  I am doing something wrong then please let me know. >:( :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 13, 2013, 05:45:22 pm
I received the Flir E4 two days ago, and I tried the hack for it, but it does not work. the firmware on it is 1.19.8. and has a  date of Nov-23-2013 as its date of it being installed with the Firmware  So unless Im doing something wrong, then the Hack for the E4 no longer works. 
If  I am doing something wrong then please let me know. >:( :(
You are probably doing something wrong. Errors in creating the CRC are the usual issue
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 13, 2013, 05:52:39 pm
is flir.php (convert and exiftool) working for you ?

Do you have used this version?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
download the flir-script.zip

I think, you have trouble with the reverse byte order
Code: [Select]
  //16 bit PNG: change byte order
   $size=$exif[0]['RawThermalImageWidth']."x".$exif[0]['RawThermalImageHeight'];
   exec($exiftool." -b -RawThermalImage $flirimg | ".$convert." - gray:- | ".$convert." -depth 16 -endian msb -size ".$size." gray:- raw.png");   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mkaufer05 on December 13, 2013, 05:54:05 pm
Well, I follow the instructions correctly.  when i use the Flir install program to install the FiF file it shows as camera been updated and everything O.K.. but still its not  hacking it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on December 13, 2013, 05:59:01 pm
The CRC is wrong.  Got a camera with the same version and it works fine.  You want to make sure you don't add any additional lines at the end.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on December 13, 2013, 07:02:11 pm
I did a similiar but simpler test as Aurora, but I only have my hacked i3 for comparison. I turned on both cameras and let them stabilize for about 10 - 15 minutes with a closed shutter.
After that, first I took a picture of a radiator and tried to aim at the same measuring spot. Results:
E4: 35.7°C
i3: 35.7°C

Then I went outside and took a picture from the wall of our garage:
E4: -5.2°C
i3: -2.5°C

2.7°C temperature difference? I'd say that's a lot compared to the radiator measurement which was spot on.

Our thermometer shows 0.2°C outside but thats probably not very accurate, it's a cheap and very old wireless thermometer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 13, 2013, 07:11:42 pm
I found an interesting thread about the hack on a gun forum: http://www.northeastshooters.com/vbulletin/threads/showthread.php?t=231048 (http://www.northeastshooters.com/vbulletin/threads/showthread.php?t=231048)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 13, 2013, 07:13:31 pm
Well, I follow the instructions correctly.  when i use the Flir install program to install the FiF file it shows as camera been updated and everything O.K.. but still its not  hacking it.
Take a look at Ez-CRC01 in my footer-  expecially made for people who fail to edit a .txt file ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 13, 2013, 08:15:24 pm
Right, video streaming time. I wanted to have my E4 in a setup in another room and still be able to check both the measurements and check the video. And preferably without having to walk over there all the time. I already had telnet + scripts to take readings and take snapshots and such. But no video until now. (Well not true, I ran mplayer over an X11 tunnel, but that was rather lame :P ).

So now I have a streaming server that can be connected to over the network. If you feel like it you could even make it remotely accessible because you want to check the thermal state of your beer before going home or something.

All you need is just one piece of software, and that is ffmpeg (http://www.ffmpeg.org/). Then setup a tcp server with ffserver (working example config attached, rename to ffserver-flir.conf). When that is running you send your E4 camera stream to this ffserver using ffmpeg.

Code: [Select]
# start streaming server
ffserver -f ffserver-flir.conf

# send flir E4 stream to ffserver
ffmpeg -r 25 -f video4linux2 -i /dev/video0 -vcodec copy http://localhost:8090/feed1.ffm

That's it. Now you can connect to the stream using your favorite media player or browser.

Code: [Select]
mplayer  -nocache   http://yourserver:8090/flir.asf

I tested it with 3 seperate machines all displaying the stream simultaneously, and no problemo. :)

There were some sneaky gotchas to get it working, but those are all neatly embedded in the config + command line. Re-ordering of certain options like "-r" is at your own peril. ;)

Forgot to mention... You can also have it start ffmpeg automatically, so all you need is start ffserver. I'd advice starting things up seperately the first time though just so you can see all the debug output in case something doesn't go as planned. At any rate, to automatically start ffmpeg just add 1 line to Feed section, like so:

Code: [Select]
<Feed feed1.ffm>
File /tmp/ffserver_feed1.ffm
FileMaxSize 2048K
ACL allow 127.0.0.1
Launch ffmpeg -r 25 -f video4linux2 -i /dev/video0 -vcodec copy
</Feed>

And another thing I didn't mention is that this uses UVC so you will have to have kernel support for that, but that would seem rather obvious. :P Anyways, for most popular distros uvc should work out of the box. And another other thing ... this sends the RAW video stream directly to ffserver. This way ffmpeg does NOT do any encoding, nor does ffserver have to do any transcoding. So ffserver takes the raw stream, and directly encodes it (to a 512kbps asf stream in this case). If you want you can have ffmpeg do some initial encoding to get some compression, send it to ffserver and have that do transcoding before streaming. But the bitrate for the raw stream is pretty low so IMO the current setup makes more sense.

Doh! Also forgot to mention this ... you can check the server status by browsing to http://yourserver:8090/stat.html (http://yourserver:8090/stat.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 13, 2013, 08:32:45 pm
My first post on this magnificent forum....

My E4 arrived last week (from stock at a supplier in this country).
serial # 639065xx, SW 1.19.8
cal. date 9 Nov 2013

Thanks Mike for the tear-down video and for making the 320x240 resolution possible! This transforms an expensive toy into a very useable instrument.
I wouldn't have bought the E4 (with a limitation of 80 x 60 px.) otherwise.
Taucher: thanks for the extended menus.
And to all who contributed, thank you too most sincerely.

When I look with IrfanView at the image properties of an image, an "Exposure Time" of 1/28.1 seconds is indicated.
Anyone some thoughts on this?

Just fantasizing: assume the resolution of the microbolometer-ADC is 6 bit, then the following could be true:
* normal E4-mode: minimum temp span is 8.3 C. 1/64 x 8.3 C = 0.13 C
* extended menu (E8-mode): minimum temp span is 4 C. 1/64 x 4 C = 0.625 C.
This could correspond with the FLIR spec of thermal sensitivity < 0.15 C for the E4 and 0.06 C for the E8.
Or am I just imagining things??  (Or didn't I read the previous posts properly  :-[ )
I was just wondering where the difference in specs originated from.

Concerning the outdoor temp measurement of the brick wall of my home, I also experienced a much too low indicated temp...
Would be nice to know what I am doing wrong. Different settings of emissivity do not help and limiting the view to just a small part of the wall neither.
Sky indication is  <40C.

Jac
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 13, 2013, 09:00:30 pm
Just fantasizing: assume the resolution of the microbolometer-ADC is 6 bit, then the following could be true:

The ADC counts in the raw thermal image are 16-bit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 13, 2013, 09:07:30 pm
thanks mrflibble, I was just babbling absolute nonsense.
6 bit could never span the whole range of -40.....+280C with the specified sensitivity...

J
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 13, 2013, 09:09:53 pm
Just fantasizing: assume the resolution of the microbolometer-ADC is 6 bit, then the following could be true:

The ADC counts in the raw thermal image are 16-bit.
I have a feeling that when I was looking at the raw stream on the scope it was 14 bits.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on December 13, 2013, 09:16:25 pm
2.7°C temperature difference? I'd say that's a lot compared to the radiator measurement which was spot on.

Well since both devices have the same accurancy +/-2% or 2º C, it could be that both are in spec since the difference is not bigger than 4°C.
For example the real temperature could have been -4°C.

See my previous post for details:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg346980/#msg346980 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg346980/#msg346980)

If I´m wrong let me know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tinhead on December 13, 2013, 09:39:11 pm
that's crazy fast growing thread, within exactly two months you beated all other threads Mike!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 13, 2013, 09:40:05 pm
@zucca,

Regarding your previous post on my tests using a PM695 as a comparison of accuracy......

The PM695 was within spec during the +7 Degrees C test and the -8 Degrees C test. Readings were +7.3 Degrees C and -8.3 Degrees C. The Camera is rated at +- 2% between -40 and +500 Degrees C. No +-2 Degrees  shown as found in the E4 spec.

The E4 was accurate during the + 7 Degrees C test with a reading of +7  :) BUT when used to read the -8 Degrees C test piece the E4 read -11.6 degrees C. That is an error of over 30% on a camera that claims +-2% or +-2 Degrees C down to -20 Degrees C.

This phenomena appears to be confirmed by others experience with the camera. Personally I have no problem with this as I do not intend using it as an accurate thermal camera at low temperatures  ;) As has been stated, this is a budget camera that may not even be calibrated at sub zero temperatures. My PM695 can accurately read very low temperatures down to -40 Degrees C because it is an industrial preventative maintenance camera designed to be capable of such ...... but it cost over $50,000 so you might expect better performance in some areas when compared to a $1000 E4  ;D

I will do some more E4 temperature accuracy tests when I find time....Christmas is rushing up on me and much to do.

Manual including specs for the PM695 is here.

http://www.flir.com/uploadedFiles/Legacy_-_NEW/Thermography/ThermaCAMPM695.pdf (http://www.flir.com/uploadedFiles/Legacy_-_NEW/Thermography/ThermaCAMPM695.pdf)

The PM695 manual contains a useful emissivity guide for many materials which may be used to set up your E4 emissivity option.

The manual contains no warnings regarding accuracy loss at sub zero C temperatures.

If there is an issue here, it is that FLIR suggest accurate use down to -20 Degrees C. I have yet to be convinced that such is true. Testing at these low temperatures is challenging as 'frost' quickly forms on the test piece. This ruins the accuracy of the test.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on December 13, 2013, 10:42:29 pm
Thanks Aurora for cleaning up the air, I overlooked the -11,6 C in the picture.  :palm:

This confirm my theory that below 0C in the data sheet the management sales guys took over the FLIR developers, or the developers missed something huge.

Also it looks like my accuracy calculation is right  :phew:

Now I have to read the manual you suggested.

Thanks for correcting me.

Z
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 13, 2013, 11:07:17 pm
I guess problem is somewhere in exiftool. It does not work even for sample photo from your post. Same result. When I extract embeded real image, it is correct. But IR image is corrupted.

the php script is only a wrapper for command line tools exiftool and convert
test the two lines direct und correct the script if necessary
see here for palette colors https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791)
Code: [Select]
exiftool -b -RawThermalImage FLIR0238.jpg | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- -auto-level -resize 800x -depth 8 e4-gray.png
convert e4-gray.png iron.png -clut e4-iron.png

PS: load newest imagemagick version
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Anders Olsson on December 14, 2013, 12:29:47 am
I had another E4 delivered from proffsbutiken.se today (for a friend living abroad where the E4 is difficult to find):
Model: E4 1.1
Serial number: 639084XX
Software: 1.19.8
Calibration date: November 28

Upgrade worked perfectly this time too!

It seems like the claim the FLIR person at the job fair five weeks ago made, about them working on blocking the hack, is taking some time to implement  :)

I had an opportunity to borrow an i7 at the same time as i had the E4 and my "E8" at home.
Here is a video with all three cameras side by side in case anyone is interested: FLIR i7, E4 and E8 side by side (Thermal camera test, watch in HD) (https://www.youtube.com/watch?v=aRwyxW8ET_g#ws)
It was difficult to capture the colors and details correctly, but it might give people who are not owners of thermal cameras an idea of what they are capable of.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KingVidiot on December 14, 2013, 12:37:50 am
I received the Flir E4 two days ago, and I tried the hack for it, but it does not work. the firmware on it is 1.19.8. and has a  date of Nov-23-2013 as its date of it being installed with the Firmware  So unless Im doing something wrong, then the Hack for the E4 no longer works. 
If  I am doing something wrong then please let me know. >:( :(
You are probably doing something wrong. Errors in creating the CRC are the usual issue

I agree. I was doing something dumb before and failing the hack, and now everything is updated and running great.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mkaufer05 on December 14, 2013, 01:00:40 am
I was succesful in finally hacking the E4 into the E8. And yes it was the CRC that i was doing wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 14, 2013, 01:05:07 am

:clap: :clap:
:clap: :clap: :clap:
Largest thread on the EEVblog!
:clap: :clap: :clap:
 :clap: :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 01:10:42 am
This clearly demonstrates the great interest in the E4 thermal camera and its hidden secrets  :)

For info the latest Calibration Certificate that we have seen for an E4 is 3 December.

Anyone have an even more recent certificate ?

Full history of calibration dates, firmware and serial numbers is here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

Update: We have a 4th December certificate now  :)  E4 V1.1 as expected.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 01:26:51 am
@Anders,

Thanks for making that comparison video. Very useful to see the three cameras side by side. I am left with the view that the E4 in standard build still puts in a good performance. The E8 does, of course, perform even better  ;)

FLIR did a nice job on the Ex series EXCEPT for that damned micro USB socket......what were they thinking when they decided to use that awful connector  :-//  I have fed that comment back to Andy at FLIR and I did get thanks for my input. The Exx series gives you two USB connector types plus a separate charging socket.....I know the E4 is budget but the E8 isn't !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: junktronix on December 14, 2013, 02:35:45 am
I'm sure this will be lost in the noise, but I wanted to say that I got an E4 delivered from Amazon today which has firmware 1.19.8 and upgraded to 320x200 with 5 minutes effort.  THANK YOU for the information and _excellent_ video(s)
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on December 14, 2013, 02:41:12 am
I'm sure this will be lost in the noise, but I wanted to say that I got an E4 delivered from Amazon today which has firmware 1.19.8 and upgraded to 320x200 with 5 minutes effort.  THANK YOU for the information and _excellent_ video(s)
can you give the calibration date, that is of great use to the people in this thread.

Sent from my EVO using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 14, 2013, 02:52:15 am
From what I can tell, FLIR is in no hurry to "fix" the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on December 14, 2013, 06:26:35 am
This clearly demonstrates the great interest in the E4 thermal camera and its hidden secrets  :)

For info the latest Calibration Certificate that we have seen for an E4 is 3 December.

Anyone have an even more recent certificate ?

Full history of calibration dates, firmware and serial numbers is here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

Update: We have a 4th December certificate now  :)  E4 V1.1 as expected.

Forgot to add in my post (Nov 29th Cal) my HW is also 1.1.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 14, 2013, 08:17:55 am
For convenience I have attached the emissivity lists taken from the manuals of the E4 and PM695.

J
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 14, 2013, 09:17:43 am
From what I can tell, FLIR is in no hurry to "fix" the hack.
They could certainly have easily fixed it several weeks ago if they'd really wanted to.
We know that they know about it, so the only conclusion can be they're not especially bothered. I've been keeping an occasional eye on Tequipment's stock, and E4's are still selling well, though they've also shifted a few E8/6/5 (or returned them!)
I'm sure they won't be too unhappy about leaving Fluke in the dust!
   
..of course we shouldn't over-estimate our own importance in all this - only 76K thread views and 180  downloads of the latest hack zip is chickenfeed in the worldwide market. How many  potential buyers even know of the existence of EEVBLOG or Hackaday ?
They've sold maybe 50-100 units to people who otherwise wouldn't have been in the market, again not a huge deal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 14, 2013, 11:42:01 am
you are right, Flir is not afraid

As I wrote ahead, the hack is not "new"
I hacked my old Flir E40 a year ago.
I used another way, without a CRC Generator

I think, that many engineers found this simple way:

The Exx has a open WiFi.
After connecting to the wifi, you find at address 192.168.64.1.

port 23
a open telnet without password (administrator rights!!)

port 21
ftp with the login flir/3vlig
Flir publiced the ftp login password in a flir manual

port 80 Webserver
http://192.168.64.1/service (http://192.168.64.1/service)
"These web pages are password protected, and only intended for trained personel."
with the same login/password  flir/3vlig
-> now you have activate the highres mode  320x240 px

it's not really hidden...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 14, 2013, 11:47:43 am

Same result. I have downloaded imagemagic and exiftool on friday. Corrupted image is coming from the exiftool. Computer is Win7, x64.
I will try from scratch on another computer to see the result. Thank you for you support so far.

please send an flir e4 image and post
Code: [Select]
$ exiftool -ver
9.38
$ convert -version
Version: ImageMagick 6.8.7-2 2013-10-24 Q16 http://www.imagemagick.org
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 14, 2013, 03:04:57 pm
Hello, thank you all for the information you have shared here on this topic. I recently received my E4 for this mod, worked ok but some errors were seen. Has anyone seen such a behaviour on the screen like on picture 1? It went away with battery removal. Next strange phenomenon was when I left camera stationary on the desk for few secons, IR picture "burned" on the screen and "shadow" of it refused to go away :scared: Battery removal, again.

What do you think about pics 2 and 3, decent quality? It's a fridge compressor..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 03:34:27 pm
Regarding picture #1. The pattern reminds me quite a bit on what I've seen when I take pictures with the internal shutter closed. Although the temperature range would seem to be a bit off. Then again, if this was taken with the internal shutter accidentally shut then maybe the firmware got confuzzled.  :scared: So maybe the shutter hadn't fully opened? Anyways, that is just a guess purely based on the pattern.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 14, 2013, 03:43:19 pm
I'm 99 % sure that the shutter was open, when closed it shows just some flat orange :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 03:43:38 pm
Same result. I have downloaded imagemagic and exiftool on friday. Corrupted image is coming from the exiftool. Computer is Win7, x64.
I will try from scratch on another computer to see the result. Thank you for you support so far.

If the embedded thermal image is PNG, then exiftool will extract it as is. Which means that exiftool treats is as a binary blob that you get unaltered. So you get the unaltered PNG header followed by the unaltered PNG data, which due to the Flir implementation happens to be 16-bit gray pixels with bytes in the wrong order.

But as tomas123 pointed out, please post the original picture causing the issue so we can test it. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 03:45:59 pm
I'm 99 % sure that the shutter was open, when closed it shows just some flat orange :)

So how about the remaining 1%? That is still statistically valid material.  ;D Internal shutter (the one closed during automatic calibration under camera control) != external shutter (the thingy you flick open before taking pictures).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 03:47:12 pm
@nacke,

Please provide the firmware version (1.19.8 ?), first 5 or 6 digits of the serial number, Calibration date and E4 version of your camera (1.0 or 1.1)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 14, 2013, 03:48:36 pm
Oh, I mixed those shutters. That's good to know, thanks.

Aurora: You already have them on your list ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 03:56:17 pm
Oh, I mixed those shutters. That's good to know, thanks.
Anyways, I am not saying it must be the internal shutter. Just that the pattern (the upper part) looks a lot like what I see with internal shutter closed. The temperature range & that low temperature stripe on the bottom are a bit of a mismatch, but it's just something to keep in mind should this happen again in the future.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 03:57:46 pm
OK no worries  :)  I don't log owners details and I have a mind like a sieve at the moment !

I want to keep an eye on unusual events in case they occur to a certain serial number range or hardware version. The more data I have the better  :)  Thank you for providing the information on your camera.

We have at least one other report of a persistent image issue and another of the battery charge icon causing a ghost image on the screen after a charge cycle. It is unusual and both are unexplained at the moment. I do not believe this effect to be connected with any 'improvements' made to the camera as there would have been more reports of such.

If you thoroughly test the camera and the issue does not re-occur, it is likely a random event that will hopefully not re-occur.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 14, 2013, 04:05:53 pm
"I want to keep an eye on unusual events in case they occur to a certain serial number range or hardware version. The more data I have the better"

That's a good practice. I'll be in contact if there's any other issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 14, 2013, 06:44:22 pm
Quote
Has anyone seen such a behaviour on the screen like on picture 1?
Yes, mine went a bit mad once last week and the display filled with patterned junk a bit like yours.

I think I may have caused it when fitting and removing the cable for the badly designed USB interface. Once it did it, a normal on/off cycle caused it to fail to reboot and it would give random junk or a blank screen. However, it would sometimes reboot OK with the USB connected. It definitely was NOT caused by a tired battery as it had been charged the night before and showed full charge.

But even when rebooted with the cable it would go a bit mad and showed strange scaling. It was instantly cured with a battery removal/reset and has been fine since. So I think these cameras can crash and they need a full reset now and again. It was as if some critical data in RAM had been corrupted and the only cure was a hard reset.

I've not seen any image retention/burn issues though...
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: junktronix on December 14, 2013, 07:05:58 pm
Full details

SN: 6390 88xx
Cal date: 2-Dec-2013
Firmware: 1.19.8
Model: E4 1.1

I've only been using it for a day, but it seems to be working well.  No crashes, noise or distorted images to report.


I'm sure this will be lost in the noise, but I wanted to say that I got an E4 delivered from Amazon today which has firmware 1.19.8 and upgraded to 320x200 with 5 minutes effort.  THANK YOU for the information and _excellent_ video(s)
can you give the calibration date, that is of great use to the people in this thread.

Sent from my EVO using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 07:07:38 pm
I have not seen many reports of E4's crashing even when 'improved' by owners so it seems to be a pretty stable platform, for which I am grateful. For info, I am running the slightly modified 'Taucher BETA2' (BETA2a) menu that had some additional syntax corrections and it has yet to crash when in use or selecting functions. There are also some changes to the Menu lists in this version. If any one else wants to try the same version of the Menu, take a look here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg334399/#msg334399 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg334399/#msg334399)

The changes to Tauchers excellent Menu file were carried out by Uup, but I have seen little comment on this version. It works well for me and Uup spotted some issues and corrected them for us. Cheers Uup.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 14, 2013, 07:40:24 pm
I also installed the BETA2a menu and it seems to work very stable so far.

A question:
when you look into the FlashBFS\system folder, there are the files bootlogo.bmp and bootlogo_legal.bmp.
I adapted both to my own taste (and made both identical), but the bootlogo does not seem to be in use anywhere. Is that correct?
The original FLIR boot-up screen picture keeps coming up, and that is not the picture that is now in this location. Is it located somewhere else (and was I mislead by the file name...)?
The changed bootlogo_legal picture works well by the way.

Thanks.
J.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 14, 2013, 07:46:17 pm
I also installed the BETA2a menu and it seems to work very stable so far.

A question:
when you look into the FlashBFS\system folder, there are the files bootlogo.bmp and bootlogo_legal.bmp.
I adapted both to my own taste (and made both identical), but the bootlogo does not seem to be in use anywhere. Is that correct?
The original FLIR boot-up screen picture keeps coming up, and that is not the picture that is now in this location. Is it located somewhere else (and was I mislead by the file name...)?
The changed bootlogo_legal picture works well by the way.

Thanks.
J.
Yes - I think there is another bootlogo embedded in the bootloader or somewhere else obscure - I don't think bootlogo.bmp is ever displayed in normal operation
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 07:47:09 pm
I have not seen many reports of E4's crashing even when 'improved' by owners so it seems to be a pretty stable platform, for which I am grateful.
When using the E4 just through the button pressey menu I haven't experienced any issues either. When mucking about with the usb connection I do experience some issues. For example when testing streaming recently I noticed that when you send certain ioctls to the uvc video device it barfs every now and then, resulting in unusable video. But so far most curious behaviour has been fixed by issuing a restartapp command over telnet, no powercycles required.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 14, 2013, 08:00:34 pm
Yes - I think there is another bootlogo embedded in the bootloader or somewhere else obscure - I don't think bootlogo.bmp is ever displayed in normal operation

Thanks Mike.
I could not find any accessible FLIR-logo picture anywhere (at least not at locations I was able to peek...)

Jac
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 14, 2013, 08:11:00 pm
I've done the resolution hack but even after reading the thread from beginning to end, can't quite build up the confidence to do the menu hack.

If any of you guys have the time could you please post up a brief step by step guide. I don't quite need a 'baby walk' but a step by step on setting up the modes / connectivity prior to copying the files across with filezilla would really help in my case.
Install FLIR RNDIS driver
Select USB RNDIS mode via keypad
Use Filezilla to FTP to 192.168.0.2, login flir, password 3vlig
I, too have added the beta2a "upgrade" and it works GREAT!!!
FIRST though I copied all the files in the camera to a local folder just in case.
Then used filezilla to overwrite the new folder tree.
BUT the IP for my camera was 192.168.250.2
Guess the camera has DHCP?

Great work Mike and Taucher on the "updates"!!!!!  VERY nice camera now!

BTW...
E4 v 1.0
sn 639076xx
cal 11/21/13
and the big question...
firmware 1.19.8
purchased 12/5
$895
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 14, 2013, 08:16:16 pm

@Bootlogo - there's a dedicated app for showing the bootup screens
note that the camera does display an animation, then followed by static images - legal notice one only on hard boot

@Menu BETA2 vs BETA2a
The really important patch for stability was the one to the .pal file - which is identical in both menu versions.
What UUP did change were mostly cosmetics like re-hiding the hidden menu and moving USB mode selection back there.

He also disabled an inactive (never shown) block on the main menu which I already had marked to be removed :)
Code: [Select]
  <!--HACK - probably useless-->
  <ui_model type="AddOnLensSettingsModel" name="addOnLensSettingsModel"/>

No syntax errors or something like that... anyway I still want to try to get the humidity settings menu somehow - and a lens correction menu could be handy for the addon lens users :)

But please keep in mind - BETA2 is not "stable" in regard to my quality standards as there are anomalies:
- when using advanced color palettes in combination with advanced measurement modes - especially the delta modes seem to be not the best code (depend on preset files, work with temp-files etc) and I've noticed some strange jumps of last selected element when using those modes. But since PAL fix no lockups :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 14, 2013, 08:25:44 pm
BTW - a good file and folder comparison tool is essential when playing with stuff like this and comparing huge sets of data with unknown changes - that's where I'm REALLY happy with Examdiff Pro from Prestosoft - if anybody knows similar, better (or free) software with file and directory comparison mode (other than unix "diff") then please feel free to contribute your knowledge :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 14, 2013, 08:29:00 pm
Hi Taucher,

The 'syntax' comment related to the following from Uup:

"However, I did have an issue with the UI crashing, or locking-up, intermittently when switching between measurement modes. Did anyone else encounter this issue?

Couldn't find the exact cause but I found some errors in the file "design_ui_z3.xml", which I corrected."

I used BETA2a because of this, as it appeared it helped with instability in measurement modes which, as you say, had/still have issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on December 14, 2013, 08:34:49 pm
Not sure if this is interesting and/or mentioned before:

The IR-sensor temp indeed seems to be around 30 C.
Astra Service Web indicates the following values for the Temperature Sensors:

Name                  Raw     Corrected [°C]
TSBoard              302.57 29.42
TSFpa                  301.46 28.31
TShutterDigFilt1  304.42 31.27

J
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 14, 2013, 08:39:16 pm
Hi Taucher,

The 'syntax' comment related to the following from Uup:

"However, I did have an issue with the UI crashing, or locking-up, intermittently when switching between measurement modes. Did anyone else encounter this issue?

Couldn't find the exact cause but I found some errors in the file "design_ui_z3.xml", which I corrected."
I used BETA2a because of this, as it appeared it helped with instability in measurements modes which, as you had/still has issues.

well, "errors" sounds like "crappy work" - just take a look yourself - diff the files and watch out that most stuff is comment editing anyway

only two changes were: a) USB mode menu deduplicated b) removed addOnLensSettingsModel entry
I'm still running my BETA2 and failed to "crash" the camera yet ... but maybe I'm just using it differently than others.

Any step-by-step guide to reproduce an error would be greatly appreciated :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 14, 2013, 08:57:55 pm
Just found: new firmware (T6xx series, November 29, 2013) online:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t6xx_v2.37c.20_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_t6xx_v2.37c.20_update_pack.zip)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: unicorn5 on December 14, 2013, 10:04:25 pm

purchased 12/5
$895

Could you share with the team where you buy at that price?
It's a very important price. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 14, 2013, 11:50:35 pm
... if anybody knows similar, better (or free) software with file and directory comparison mode (other than unix "diff") ...

Depending on your preferences and the job at hand: meld, kompare, vimdiff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on December 14, 2013, 11:54:33 pm
I was looking inside some system files and found a list of camera's inside the  gethwtype.exe file.
Maybe this is interesting for some one.
Do these cameras almost use the same hardware setup so they can reuse the software?


"E1A- T-Cam, BACE rev 04-07 AND SB0401 9Hz"
"E1B- T-Cam, BACE rev 04-07 AND SB0401 3Hz"
"E2A- T-Cam, BACT AND SB0601 9 Hz detector"
"E2B- T-Cam, BACT AND SB0601 30 Hz detector"
"E3A- T-Cam, BACT2 AND SB0601 9 Hz detecor"
"E3B- T-Cam, BACT2 AND SB0601 30 Hz detecor"
"E4 - T-Cam, BACT2 AND ULIS detector"
"Ex - T-Cam, unknown subtype (remote)"
"A1A- A-Cam S, AHCO AND SB0401 9 Hz detecor"
"A1B- A-Cam S, AHCO AND SB0401 30 Hz detecor"
"A2A- A-Cam R, AHCO AND SB0401 9 Hz detecor"
"A2B- A-Cam R, AHCO AND SB0401 30 Hz detecor"
"A3A- A-Cam S, AHCO AND SB0601 9 Hz detecor"
"A3B- A-Cam S, AHCO AND SB0601 30 Hz detecor"
"A4A- A-Cam R, AHCO AND SB0601 9 Hz detecor"
"A4B- A-Cam R, AHCO AND SB0601 30 Hz detecor"
"A5A- A-Cam S, AHCO3 AND SB0601 9 Hz detecor"
"A5B- A-Cam S, AHCO3 AND SB0601 30 Hz detecor"
"P1A- P-Cam,   BACP rev 07"
"P1B- P-Cam,   BACP rev >=08, UIP rev 03/04"
"P1C- P-Cam,   BACP rev >=08, UIP rev>=05"
"P2 - P-Cam,   BACP2"
"G1 - GF"
"X1 - Ixx"
"R1 - A2 camera "
"T1 - PT camera "
"F1 - Liston camera "
"S1 - SART camera"
"Z1 - ZOCO camera"
"Z2 - IVCO or ZOCO_BLUE camera"
"Z3 - ASCO camera"
"Y1 - T-MkII (Ylva) camera"
"H1 - Fire camera"
"Qx - unknown HW"

ps has anyone played with fvd.exe?
As I can see now this app can tests the entire camera and maybe spit out some interesting stuff.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 01:05:22 am

purchased 12/5
$895

Could you share with the team where you buy at that price?
It's a very important price. Thanks.
Yes, I thought the price was GREAT!

I bought it from thermalimagercamera (dot) com.

There is a button when looking at the E4 page that is "request quote".
you fill out a small form with your name and email address, and they send you an email with the quote price of 895.50 and a reference number.

This is for phone orders only (the web price is not affected as far as I know).  FREE SHIPPING too!

The same business has another website as well (same place/phone number), but there isn't a quote request.  There is a "call for quote" though, but I don't know if the same price is offered  (kinda strange).
They are located in Arizona.

As of today (12/14) they seem to have stock... when I ordered I was told mid December, but I noticed their stock "indicator" had 2 out of 5 bars on the 11th, and I received a call asking if I was still interested in the E4... why YES I was!!!!
I received it on 12/13 (of all days!) via UPS ground.

Also, do NOT forget about filling out the form for the FREE Flir gifts!!!!  This is from Flir and NOT the seller as you need your order number and serial number... still worth it!!!

This makes the E4 even MORE attractive!!!  the price and the free stuff!!!

I have "upgraded" mine  (8) and the menu mods.... WONDERFUL!!!!  Couldn't ask for MORE!!!

Now we just need to see if we can get better than 9fps!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 01:20:39 am
Here is a strange one!  I have read that others have had similar problems like this.
These were taken with the AC adapter plugged in.
The lens cover was on and off... didn't seem to make a difference, and these problems seldom occurred and didn't seem to happen with a particular combination of lens cover/power button press, just when the AC adapter was plugged in.
It seems like when running on batteries, these problems do not occur.
This also occurred even before ANY "updating" was done (stock E4), so it doesn't appear to be due to the mod.
These images were taken with a DSLR and NOT the usb output of the camera (obviously... AC adapter).
The fringing was due to the dslr's resolution/image sensor and the E4 lcd creating an interference pattern.

I was also able to use a browser and actually log into the web interface in the camera!!!  Has anyone tried this?
The user and password is what we have all seen here and you CAN modify the EEPROM and calibration of the camera IF you are clumbsy enough to do so.

Getting into the "service mode" does require a password even after logging into the web interface, but I didn't try it.
E4 v1.0
sn 63907xxx
FW 1.19.8
cal 11/21
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 15, 2013, 01:38:52 am
Here is a strange one!  I have read that others have had similar problems like this...
Those screenshots show the camera UI restarting - can be reproduced by restartapp - no need to worry
(if noise persists: cold boot (remove battery) the camera)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 15, 2013, 01:59:13 am

purchased 12/5
$895

Could you share with the team where you buy at that price?
It's a very important price. Thanks.


You can get the same deal by requesting a quote from Tequiptment.net ( dont forget the promotional gift from Flir)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 02:34:50 am
Here is a strange one!  I have read that others have had similar problems like this...
Those screenshots show the camera UI restarting - can be reproduced by restartapp - no need to worry
(if noise persists: cold boot (remove battery) the camera)
Great!  Thanks for the "reassuring" info!
I though I might have a flaky camera, but it worked fine on battery so I thought it might just be an AC adapter problem, or the power supply inside the camera having problem while running the battery management section and the camera.

Also wanted to thank you for the menu upgrade (beta2a)!  I copied the folder to the camera and now I have MANY more options!!!  VERY useful!

Bill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 02:37:29 am

purchased 12/5
$895

Could you share with the team where you buy at that price?
It's a very important price. Thanks.


You can get the same deal by requesting a quote from Tequiptment.net ( dont forget the promotional gift from Flir)
Are they in Europe?  Another great source for a good price!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 15, 2013, 05:18:09 am
Hi everyone

Does anyone trying to get all the 320x240 resolution from the Flir i3/i5/i7???  :-//

I have successfully upgraded my i3 to 144x144 (actually 120x120 in Flir tools) & added the extra measurement menu.

I really hope that someone could find a fix/hack to use all the potential resolution.

I tried simply replace the numbers in the conf.cfg file from 144 to 320 & 240 but it is still stuck on 120x120.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 15, 2013, 07:50:52 am
Hi everyone
Does anyone trying to get all the 320x240 resolution from the Flir i3/i5/i7???  :-//
...
I tried simply replace the numbers in the conf.cfg file from 144 to 320 & 240 but it is still stuck on 120x120.
Well, every hardware has REAL limits ... guess where they are for your i-series  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 09:34:05 am
Hi everyone
Does anyone trying to get all the 320x240 resolution from the Flir i3/i5/i7???  :-//
...
I tried simply replace the numbers in the conf.cfg file from 144 to 320 & 240 but it is still stuck on 120x120.
Well, every hardware has REAL limits ... guess where they are for your i-series  :palm:
Even if display resolution is limited, it could potentially save full-res images, but ISTR someone here found evidence that the FPGA code limits resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 09:48:02 am
And of course there is the issue of the Mk1 and Mk2 FLIR 'i' series cameras. IIRC the Mk1 i7 had lower resolution of 120x120 maximum rather than the later Mk2 with 140x140.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: G0HZU on December 15, 2013, 01:15:32 pm
Quote
The lens cover was on and off... didn't seem to make a difference, and these problems seldom occurred and didn't seem to happen with a particular combination of lens cover/power button press, just when the AC adapter was plugged in.
It seems like when running on batteries, these problems do not occur.
This also occurred even before ANY "updating" was done (stock E4), so it doesn't appear to be due to the mod.

Yes, I think mine also went a bit mad because I used it with the USB charger connected. I assumed I'd been clumsy in fitting it or removing it during the charging process and this kicked off the instability. The USB interface/connector system is laughably poor on the camera and I'm amazed how it got through a basic design review at Flir.

My camera has only the basic mod done. I haven't bothered with the menu mods yet. But when it went mad I saw various regular patterns on the screen and the scaling did something similar to your image with it showing temperature extremes in the scaling.

By doing the battery remove/reset trick it seems to have fully cleared the problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 15, 2013, 01:21:49 pm
And of course there is the issue of the Mk1 and Mk2 FLIR 'i' series cameras. IIRC the Mk1 i7 had lower resolution of 120x120 maximum rather than the later Mk2 with 140x140.

Yes, there is a file in /flashFS/system called "fpga_isc0601_120x120_c16.bin" which seems to be the limiting the resolution.
There is also a file called "fpga.castor.bin" in the same folder.

I have uploaded the files in ZIP-format if anyone is interested in looking at the code in the file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Anders Olsson on December 15, 2013, 02:54:16 pm
I had a look what differs my E4 1.0 from my friends E4 1.1:

..............................................

Model E4 1.0
Serial number 639035XX
Part number 63901-010
Software 1.87.7

Calibration date: September 30

IRDM 0.0.1.0
POLLUX 0.1.0.0
POLLUX_FPGA 8.1.18.0
camcore T198304 - 01 - 63804XXX
detector * _ * _ *
mainboard T198283 - 10 - 1996XXXX
appkit 1.0.13
confkit E4 1.0
osimgkit 16.0.10
prodkit 1.0.0.7
AppCore 22.0.0.3
AppServices 22.0.0.1
Bootloader 16.0.3.0
ResMon 22.0.0.1
WinCE 6.0.0.0
appcore_dll 1.9.0.1
common_dll 1.9.0.1
facet_core 22.0.0.1
facet_ui_qml 22.0.0.1
fvd 16.0.46.0

...........................................

Model E4 1.1
Serial number 639084XX
Part number 63901-010
Software 1.91.8

Calibration date: November 28

IRDM 0.0.1.0
POLLUX 0.1.0.0
POLLUX_FPGA 8.1.25.0
camcore T198304 - 01 - 63804XXX
detector * _ * _ *
mainboard T198283 - 10 - 1996XXXX
appkit 1.0.14
confkit E4 1.1
osimgkit 16.0.10
prodkit 1.0.0.8
AppCore 22.0.0.5
AppServices 22.0.0.1
Bootloader 16.0.3.0
ResMon 22.0.0.1
WinCE 6.0.0.0
appcore_dll 1.9.0.1
common_dll 1.9.0.1
facet_core 22.0.0.1
facet_ui_qml 22.0.0.1
fvd 16.0.47.0

.......................................

Both are marked Model: FLIR E63900, T198547
As far as I can see they are identical on the outside.
The plastic box and the accessories appears to be identical too.

EDIT: Added calibration dates.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 03:57:17 pm
The E4 1.1 release is dated 25 October 2013. My first thoughts were a counter-measured version created as a response to Mike's revelations earlier in that month. That would have been a very short development and testing period though and the user improvements are still possible. Closing some potentially exploitable, as yet undiscovered, vulnerabilities in the code is another possibility. If that were the case, I would have expected closure of the 'Mike upgrade' route as well.

I am aware that the critical issue for FLIR is to prevent any chance of upgrades to higher frame rates though. In the big scheme of things, the resolution increase is not such a big issue. Complying with ITAR is. I make no suggestions as to what the changes in E4 V1.1 achieve but it will be interesting to discover their purpose in the longer term.

I am pleased with the stability and performance of the E4 V1.0 so it is hard to guess what needed improvement.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 15, 2013, 06:00:49 pm
E4's micro-usb connector reminds me of Nokia N900, which had badly supported and fragile usb slot.

http://www.blogcdn.com/www.engadget.com/media/2010/02/nokia-n900-microusb.jpg (http://www.blogcdn.com/www.engadget.com/media/2010/02/nokia-n900-microusb.jpg)

It might be a good idea to grind down the teeth on male connector to avoid that to happen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on December 15, 2013, 06:16:52 pm
I have two questions about things I've been reading on here:

1) How fragile is the micro-usb connector? I've never had one of those break on me before but everyone here keeps complaining about how it worries them needing to rely on that for charging.

2) Regarding the frame rate and ITAR, would FLIR be liable for us hacking their product (in the theoretical event that we do), so would only WE be breaking the law by doing so? I mean if FLIR sells the things in compliance of ITAR regulations and we modify the device to no longer comply with said regulations, how is this FLIR's fault?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 06:35:10 pm
Olsenn,

Good questions....answers here:

1. The Micro USB connector is a low torque resistant design that does not incorporate mechanical strain relief. It relies upon the small solder pads on each side of the shell. Mike noted this weakness in the design in his video. You need to consider the fact that the E4 is a large and heavy object when compared to your average mobile phone that commonly uses tiny connectors. There appears little reason to fit such a tiny and potentially fragile connector in the E4. I also find the micro USB connector a PITA when needing to plug the data com or charger cable into it. Fiddly instead of easy IMHO. Hopefully we will find it to be reliable and robust enough in service. Who wants to send their E4 back to a service agent because of a damned USB connector failure....I certainly would not wish to  ;)

2. The regulations surrounding the manufacture of thermal cameras are complex. You are absolutely right that it is the customer making the changes without manufacturer aid or approval. Sadly that does not mean that if a frame rate hack were to become public, FLIR need take no action. Due to the products nature they have to make all reasonable efforts to prevent such. If a hack becomes available, they have to make reasonable efforts to prevent its on-going effectiveness on new stock. Failure to do so can effect the approvals in place for world wide distribution of such technology.  I have been advised of this difficult situation that FLIR are facing from an industry insider, and have no reason to doubt the source.

Interestingly, it is not illegal or prohibited to modify the E4. No action would be enforceable against a user carrying out such a modification on his/her camera. If you decided to sell a 320*240  >9Hz camera to a military enemy of the Western World, that would be a different matter however. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 15, 2013, 06:47:29 pm
Maybe someone could design separate battery charger just like those 3D -printed lens adjust tools. Just some copper wiring in it and there it goes :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 06:57:29 pm
The charger needs to contain the appropriate charge management circuit for the Li-Ion E4 battery or else overcharging may be a risk. I personally have too little experience of Li-Ion chargers to risk it.

I considered buying one of the significantly cheaper 'Intelligent'  Li-Ion chargers designed for Radio Control type batteries, but as I know nothing of the E4 battery internal design, I would have had to go with a straight + and - charge input with no internal temperature monitoring. I know it can be done, but is such wise. I really don't know  :-//

I do have a FLIR external charger and spare battery en-route to me though. I will see how complex the charger is when it arrives and advise accordingly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 07:10:37 pm
I have two questions about things I've been reading on here:

1) How fragile is the micro-usb connector? I've never had one of those break on me before but everyone here keeps complaining about how it worries them needing to rely on that for charging.
Although The micro-USB is similar to that used on other products, an issue on the E4 is that the angle of the PCB makes the plug entry at a slightly non-intuitive angle, so a clumsy insertion by a user unfamiliar with it is more likely to cause damage than on, say, a phone.  Definitely warn anyone you might loan it to!
Quote
2) Regarding the frame rate and ITAR, would FLIR be liable for us hacking their product (in the theoretical event that we do), so would only WE be breaking the law by doing so? I mean if FLIR sells the things in compliance of ITAR regulations and we modify the device to no longer comply with said regulations, how is this FLIR's fault?
ITAR (and related regs in other countries) does cover release of information, but it's not clear if this only applies to the original manufacturer (Hence Flir won;t give out any tech service info) , or also to anyone elsepublishing information allowing conversion to an export-controlled specification.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 07:20:59 pm
With regard to a DIY external charger for the Ex series.

As I stated, I considered building my own using an intelligent charger in order to remain safe from the unfortunate effects of a Li-Ion battery that is maltreated whilst charging ... I really don't need to experience a battery explosion or fire in the house....my wife would banish me to the lab !

I was going to use one of the many Ansmann X-Base Deluxe chargers (240V/12V supply) that I have, as they can charge many battery technologies, including Li-Ion, using just two terminals. Batteries charged in this way are not monitored by the charger though. I also managed to purchase several fire containment pouches from the local Model shop that was shutting down. GBP2.99 looked a good deal  :) These pouches are to be recommended to those experimenting with Li-Ion charging. They apparently contain the explosion and sacrifice themselves to stop any fire escaping. Cheap insurance ?

I was going to pursue this avenue of investigation as the FLIR charger costs an eye watering $125 and likely GBP125 in the UK  OUCH !

I have since been gifted the FLIR charger and a spare battery, so the investigation into an alternative charger ceased.

http://traxxas.com/support/Traxxas-Battery-Basics (http://traxxas.com/support/Traxxas-Battery-Basics)

A Lithium battery pouch safety test:

Lipo Anti-Explosion bag (https://www.youtube.com/watch?v=iX1MdkSU56M#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 15, 2013, 08:03:45 pm
The charger needs to contain the appropriate charge management circuit for the Li-Ion E4 battery or else overcharging may be a risk. I personally have too little experience of Li-Ion chargers to risk it.

Looking at the dimensions of the battery, I think there probably is a normal 18650 LiCO cell in it. The protection circuit could be in the cell it self, or does 3 connectors instead of 2 tell that there is no circuit?

Flir could use these panasonics and increase capacity by nearly 30 %:

http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable (http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 08:19:23 pm
The charger needs to contain the appropriate charge management circuit for the Li-Ion E4 battery or else overcharging may be a risk. I personally have too little experience of Li-Ion chargers to risk it.

Looking at the dimensions of the battery, I think there probably is a normal 18650 LiCO cell in it. The protection circuit could be in the cell it self, or does 3 connectors instead of 2 tell that there is no circuit?

Flir could use these panasonics and increase capacity by nearly 30 %:

http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable (http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable)
From measuring at the contacts, I'm pretty sure the third contact is just a standard 10K thermistor, not a data line. There is probably a standard protection circuit in there, so should be chargeable from a normal 18650 charger.
There is a gas-gauge IC on the main board - not sure how this handles battery swapping though. As you can get a charge percentage by pressing the left& right buttons in charge mode, you could probably work out the logic.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 15, 2013, 08:41:38 pm
Regarding the frame rate and ITAR, would FLIR be liable for us hacking their product (in the theoretical event that we do), so would only WE be breaking the law by doing so? I mean if FLIR sells the things in compliance of ITAR regulations and we modify the device to no longer comply with said regulations, how is this FLIR's fault?

I do not understand why framerate is such issue. There are many cameras doing 30fps you can buy. As I posted here before, I am selling my old ARGUS, due to new FLIR E4. And see the framerate and the resolution. So. If anybody wants, its possible to buy many 30fps cameras and legally.

I also do not understand why export from USA to EU is restricted, when Flir is made in EU :scared: and is coming from EU. You can buy it normally in EU, so why export from USA is forbiden ?  :palm:

Thermal camera ARGUS - water play (https://www.youtube.com/watch?v=q7sP1tPVdrE#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 08:56:10 pm
There is an interesting thread on adapting chargers to charge 18650 cells on this forum:

https://www.eevblog.com/forum/beginners/canon-camera-li-on-charger-to-charge-18650-batteries/ (https://www.eevblog.com/forum/beginners/canon-camera-li-on-charger-to-charge-18650-batteries/)

As Mike suggested, the third terminal is commonly just a 10K thermistor. You can modify a quality camera battery charger and keep the temperature monitoring safety features  :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 15, 2013, 09:07:57 pm
Hi everyone

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Link: http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu (http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu) Link updated 16-03-2015

Cheers
Erik
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 09:25:02 pm
@daves,

This matter has come up for discussion previously but I think all my input was deleted by me during my major self-deletion event.

Thermal camera technology has been controlled due to its military applications. It is a VERY effective tool to help kill people (believe me, I know). It can be very hard to hide your thermal 'footprint' in theatre and the military realised this.

Thermal camera technology was the preserve of the military, fire fighting services and industry. It was both extremely expensive technology and heavily controlled to prevent our enemies obtaining it and using it against our forces. Over time the technology has developed and become both more compact and available to the public. In order to allow public use the cameras used to be provided direct from the manufacturer to the customer after background security checks had been completed and a licence issued.

In more recent years the US Government decided that thermal cameras should be available to a wider marketplace but with Caveats. The caveats were that medium resolution, high frame rate cameras could only be sold to persons who had been subject to background checks and who were not considered a threat to NATO. What was permitted was the supply of medium resolution low frame rate thermal cameras to the public without background checks. Export controls still apply to such devices in terms of selling or supplying them to enemies of NATO.

The agreement on the international transportation and supply of devices that may forma part of a weapons system is INTERNATIONAL and part of the Wassenaar Arrangement. Europe complies with the contents of this agreement (Including Estonia !)

http://www.wassenaar.org/ (http://www.wassenaar.org/)

http://www.wassenaar.org/controllists/index.html (http://www.wassenaar.org/controllists/index.html)      Section 6 applies (6.3 onwards)

Note that required performance limiters are not supposed to be non-removable in order to comply with the arrangement ! This would suggest that FLIR would have to hard code certain specs into the chipset as already suspected by Mike and others.

There has been discussion on why a 9fps camera is OK yet a 30fps or 60fps is not. I regret I cannot comment on this but needless to say it relates to weapon system capability. I am fully aware that it is possible to illegally or covertly obtain thermal camera technology. That is not a reason to make the higher capability technology freely available to all however. Why make like easy for your enemies ?

There was a recent auction in the UK for a 1280 x 1024 60fps weapons grade thermal camera. It was being sold by an official MoD disposal contractor and a mistake had been made. I advised the contractor of the status of the thermal camera as a prohibited item for public sale and it was immediately withdrawn. I am still amazed at the hostility vented on me for taking this action. Some people do not get the bigger picture and do not realise that some of us are duty bound to take action.

I think it only fair to advise that I am not impartial on the matter of making >9fps thermal cameras easily available to all. If you are in the security & weapons systems industry you understand the implications. If you are not in the security and weapons industry, it can be hard to accept but I am afraid that is just life.

There may be a case for relaxing the thermal camera restrictions but as many will know, changes in national security and military policy takes time and needs an adequate incentive, Such does not exist at this time.

In time the Chinese will develop better thermal camera cores....but remember China is NOT an enemy of NATO  ;)

With regard to your ARGUS..... I know the cameras well  ;)

The ARGUS 1 is the first Generation ARGUS fire fighting camera, recognisable by its yellow case and round image. It is a pyro-electric vidicon based camera with relatively low line count (around 200 lines) and low sensitivity, meaning low range. It was perfect for the fire fighter however and easily sees through smoke. The ARGUS 1 is low performance compared to later technologies and is not ITAR liable. Technical information on these early Pyro-Vidicon based units is releasable to the public under an NDA.

The ARGUS 2 introduced the first BST FPA detector into the range. It is normally to be found in a black case with a standard 4:3 aspect ratio display. It uses a Raytheon BST thermal engine and IS a Raytheon NDA controlled device. The thermal engine is 320x240 30fps high performance unit. It is a very capable tool and performed well in the fire fighting services.  No technical details of the unit may be released to the public.

The ARGUS 3 is available in two versions....Blue case and Yellow case. They both use 320x240 30fps thermal engines. The yellow cased version uses a Raytheon thermal engine and IS an ITAR controlled device. I do not have details of the Blue cased units thermal engine. No technical details of the unit may be released to the public.

The ARGUS series continues to this day and now uses Micro-bolometers. They remain a controlled product due to their capabilities. No technical details of the unit may be released to the public.

I am aware that these cameras appear on auction sites....that is where I bought some of mine. Strictly speaking the sale of the units is not permitted but the sellers do not realise this. If you own one, it is not an illegal item to have. You just need to be aware that if you sell it, especially to an enemy of NATO, you could get into hot water with your own governments 'agencies'.

In truth, old ex fire brigade BST cameras are of little interest to the authorities these days. More modern Micro-bolometer high resolution, high frame rate thrmal cameras ARE of interest to them.

Also note that the ARGUS 3 is still supported by E2V. Faulty units often have dead thermal engines that make them uneconomic to repair. Be careful if buying one that is not shown working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 15, 2013, 09:36:33 pm
There is a gas-gauge IC on the main board - not sure how this handles battery swapping though. As you can get a charge percentage by pressing the left& right buttons in charge mode, you could probably work out the logic.

It could be just calculating percentage from cell voltage, if chemistry stays the same there is no problem.

As Mike suggested, the third terminal is commonly just a 10K thermistor. You can modify a quality camera battery charger and keep the temperature monitoring safety features  :)

That would be smart way for sure, especially if one wishes to use higher charging currents.

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

That's very professional looking guide there. How much resolution you were able to get from i3/i5?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 09:44:12 pm
Hi everyone

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Link: http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1 (http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1)

Cheers
Erik
Thanks - I'll add a link to this post from the start of the thread - if you update it, update this message so the link will stay valid.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 09:45:08 pm
The charger needs to contain the appropriate charge management circuit for the Li-Ion E4 battery or else overcharging may be a risk. I personally have too little experience of Li-Ion chargers to risk it.

Looking at the dimensions of the battery, I think there probably is a normal 18650 LiCO cell in it. The protection circuit could be in the cell it self, or does 3 connectors instead of 2 tell that there is no circuit?

Flir could use these panasonics and increase capacity by nearly 30 %:

http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable (http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable)
From measuring at the contacts, I'm pretty sure the third contact is just a standard 10K thermistor, not a data line. There is probably a standard protection circuit in there, so should be chargeable from a normal 18650 charger.
There is a gas-gauge IC on the main board - not sure how this handles battery swapping though. As you can get a charge percentage by pressing the left& right buttons in charge mode, you could probably work out the logic.
I believe Li-Ion batteries need current limiting to about 400ma, then when the terminal voltage reaches 4.2-4.25 volts, constant voltage charging starts.
This is for a 18650 3.2v battery.

I don't THINK temperature is used for charge termination (like Ni-cad or Ni-Mh are), but may be there to terminate charge IF the temperature increases.

Normal Li-Ion batteries do not get warm when charging (providing they are good and not defective), but you can damage them if you charge them with high current or overvoltage.

Voltage is critical!  Also, you do NOT want to undervolt them as that will permanently damage them.

There is alot of info on Li-Ion batteries and charging on the net.

Like was said before, it more than likely is a Li-Ion battery and an 18650. (see picture for comparison) The green battery is a panasonic 3400 mAh.  The Flir's battery is a 2800 mAh so I just might crack the battery open and see what's inside!
Sorry this is getting off topic, but I wanted to share my info on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 09:46:58 pm
I don't THINK temperature is used for charge termination (like Ni-cad or Ni-Mh are), but may be there to terminate charge IF the temperature increases.
AIUI the thermistor is used both for overtemp cutout, and also to prevent starting charging at low temps, which I believe can cause problems like being on fire.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 15, 2013, 09:58:56 pm
...
Nice told. I agree. Anyway for thermal imaging we do not need 30fps and for killing people we do not need thermal cameras  :box:
I just wanted to point out, that if someone want 30fps for any reason, there are many legal TICs out there  :-//

About the FLIR E4... Its working great, but yesterday I went out for taking some photos. I took about 20 pictures and camera turned off. And I could not power it on for about 20 seconds. After that, camera turned on and worked well. Besides this I have not seen any problems mentioned here - noise, ghosts... nothing like this. I am using enhanced menu.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 10:04:08 pm
I don't THINK temperature is used for charge termination (like Ni-cad or Ni-Mh are), but may be there to terminate charge IF the temperature increases.
AIUI the thermistor is used both for overtemp cutout, and also to prevent starting charging at low temps, which I believe can cause problems like being on fire.
Yes that is correct.  For NORMAL charging though, voltage limiting and current limiting is normally used for Li-Ion.
Nice to see that Flir's design incorporates battery failure and protection as well!

Similar temperature monitoring is used in laptop battery pack charge controllers also.  They probably charge the battery at a high rate (there is a limit though), and monitor the temperature to control charge current as well as low temperature.
The key is to make SURE that charge voltage NEVER exceeds 4.2-4.25... this seems to be the magic voltage for Li-Ion cells from what I have read.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 10:09:14 pm
Just a note (about a possible crash).
I was charging my battery in the Flir and did the "press right and left to see the charge progress" and it displayed the percentage and current below the battery icon.

Then about 2-3 minutes later (I wasn't keeping track of the time though), the screen went dark.
I pressed a couple of buttons including the power button and the display never came back.
I used a flashlight to try and light up the display and saw a typical windows error box in the display but couldn't read what it said.  No button pushing would clear the display even though there was a X in the upper right corner (typical windows "close window" box).

Had to r/r the battery to reset it.
I'll try it again and see if I can get it to crash and try and read the message.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 10:15:25 pm
Terminals for battery are:

reference picture...

Left  bat v+  (I measured 4.2v on fully charged battery)
Center bat common
Right  10K (at R.T.) to bat. common
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 10:39:19 pm
@daves,

No worries, others have asked the same question and I have explained some of it.  I have no problem with the topic of frame rate limitations and was happy to recreate some of what I previously deleted. It may help explain the situation to those unaware.

It may also be of interest to some that FLIR already have a significant problem in that their FPA appears to output an unadulterated 320x240 60fps signal. Such would appear to be a breach of the applicable regulations  ;) (limiting is supposed to be done 'on die').
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 15, 2013, 10:50:23 pm
OH BOY!!!  Are the flood gates going to open now!
Thanks for the info!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 15, 2013, 11:08:40 pm
How hard is it to get an ITAR export license anyway? Is it just signing some papers, or are there many legal hoops to jump through?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 11:18:59 pm
For an E4 the only requirement is that there is a paper trail to the end user, i.e a delivery address and name.

For a 320x240 pixel 60fps camera, a seller has to complete some paperwork, submit it to the appropriate authority (BIS in USA?). A licence is then issued for export out of the USA to the licenced recipient. Export without the licence is a federal offence which is why you will see US sellers only shipping to US Citizens in the USA. They don't want to risk any problems with their government. Others are unaware of the regulations and innocently ship equipment. On an individual sale, action is unlikely. If you were to sell a thousand without a licence the situation would likely be very different.

I know of no prosecutions for selling thermal camera technology without a licence. I am aware of a case in the UK where a chap was dealing in high technology weapons grade batteries and wishing to ship to an inappropriate customer without the required licences. He was extradited to the USA and I believe he is serving 3 years in prison as a result of his actions  :scared:

http://en.wikipedia.org/wiki/Christopher_Tappin (http://en.wikipedia.org/wiki/Christopher_Tappin)

FLIR do all the licence applications etc. as part of a purchase. The licence requirement is often lost/ignored on the used market. Other companies charge quite large sums of money to do the licence application etc. I have seen $300 charged.

Selling into Europe is straight forward especially if its is a single item. Selling into areas of international tension could be a little more challenging as the recipient of the technology needs to have a traceable security footprint.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2013, 11:33:03 pm
Other companies charge quite large sums of money to do the licence application etc. I have seen $300 charged.

I've seen an ebay dealer quoting $2500, but presumably because they don't want to do it.
I've also seen a report from a European who was unable to get an export license as they were  a private individual and not a company, though again this could have been a seller not wanting to take the risk
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2013, 11:42:10 pm
@pomonabill221

If you are referring to my comment on the output of the micro-bolometer module, it was Mike who discovered the 320x240 60fps data streams coming out of the module way back in October. It would not be trivial for a non specialist to turn the data stream into video. There are those with the skills in this forum community though. It is my understanding that the module should not be outputting such a 60fps signal but maybe FLIR have an agreement to do so. I have no inside knowledge of this but industry insiders are surprised at the 60fps discovery.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 16, 2013, 12:17:06 am
@pomonabill221

If you are referring to my comment on the output of the micro-bolometer module, it was Mike who discovered the 320x240 60fps data streams coming out of the module way back in October. It would not be trivial for a non specialist to turn the data stream into video. There are those with the skills in this forum community though. It is my understanding that the module should not be outputting such a 60fps signal but maybe FLIR have an agreement to do so. I have no inside knowledge of this but industry insiders are surprised at the 60fps discovery.
OK sorry then... credit for find this goes to Mike then!

Yes this IS surprising that Flir has the high framerate output "available" even though it isn't used... YET!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 16, 2013, 12:20:17 am
I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Quote
That's very professional looking guide there. How much resolution you were able to get from i3/i5?

Hi nacke

I have now 120x120 resolution with my i3 which normally have 60x60. It's 4 times more, but I really hope that someone could find a fix/hack to open all the available 320x240 sensor in the iX-series.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 16, 2013, 12:24:17 am
But is there really 320x240 on i-Series? Where did you find that out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 16, 2013, 12:28:32 am
Hi everyone

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Link: http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1 (http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1)

Cheers
Erik
Thanks - I'll add a link to this post from the start of the thread - if you update it, update this message so the link will stay valid.

Hi Mike

Your welcome! Sure, I will update the message if the link should change.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 16, 2013, 12:31:51 am
Silly question, but it is possible to increase the temperature range of the E4? I seem to recall a few posts about it, but I don't remember if anything ever came out of the discussion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 16, 2013, 12:32:46 am
But is there really 320x240 on i-Series? Where did you find that out.
Hi nacke

Here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345797/#msg345797 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345797/#msg345797)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 16, 2013, 12:32:59 am
The  Mk2 i7 (the black one) uses a 320x240 microbolometer limited to 140x140 but I have not seen comment on the Mk1 i7 (Blue/grey two tone). The following study refers:

http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf (http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf)

Interestingly, there is an error in the system plus document to be found here:

http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)

It shows a blue/grey i7 in the picture yet states 140x140 resolution. The Blue/grey i7 is the Mk1 with 'only' 120x120 resolution.

http://infraredcameras.net.au/thermalimagers/flir-i7-review (http://infraredcameras.net.au/thermalimagers/flir-i7-review)

No idea whether they used the same micro-bolometer in the Mk1 and Mk2 models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 16, 2013, 12:50:02 am
The  Mk2 i7 (the black one) uses a 320x240 microbolometer limited to 140x140 but I have not seen comment on the Mk1 i7 (Blue/grey two tone). The following study refers:

http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf (http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf)

My i3 is black & calibrated this year (2013), so it should be a Mk2, but I can "only" get 120x120 instead of 140x140...  :-//

Here is a timeline from http://www.optimumenergy.com/the-new-flir-i-series/ (http://www.optimumenergy.com/the-new-flir-i-series/)

(http://www.optimumenergy.com/wp-content/uploads/2012/02/flir-i-series-timeline-620px.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 16, 2013, 02:10:58 am
Silly question, but it is possible to increase the temperature range of the E4? I seem to recall a few posts about it, but I don't remember if anything ever came out of the discussion.

Not entirely sure what you mean here. You can manually set the temperature range + span. But not outside of the specifications AFAIK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 16, 2013, 07:12:13 am
Just "updated" another E4 with the "upgrade" and the menu changes!
E4 v1.0
sn 63907xx
cal date 11/21/13
Yet ANOTHER happy customer!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 16, 2013, 07:33:16 am
Not entirely sure what you mean here. You can manually set the temperature range + span. But not outside of the specifications AFAIK.

I thought this too, Ex0s measure to 650 C and sensor is the same. Might be hard to modify though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 09:20:14 am
ok, let's take this image
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340938/#msg340938 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340938/#msg340938)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69396;image)

this thread is long, further informations for using exiftool you find here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791)


you can split the pipe for debugging

//extract Raw Thermal Image
Code: [Select]
exiftool -b -RawThermalImage FLIR0080.jpg > t1.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71019;image)

// swap byte order (here you have trouble)
Code: [Select]
convert t1.png pgm:- | convert -endian lsb pgm:- t2.pngor
Code: [Select]
convert t1.png gray:- | convert -depth 16 -endian msb -size 320x240 gray:- t2.pngor since IM 6.8.8 with switch png:swap-bytes
Code: [Select]
convert -define png:swap-bytes=on t1.png t2.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71021;image)

// expand 16 Bit to visible range
Code: [Select]
convert t2.png -auto-level t3.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71023;image)

// extract color table
Code: [Select]
exiftool FLIR0080.jpg -b -Palette > pal.raw
// swap Cb Cr
// convert for Windows: -colorspace sRGB | for MAC OSX: -colorspace RGB
Code: [Select]
convert -size 224X1 -depth 8 YCbCr:pal.raw -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace RGB pal.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71027;image)

// coloring the radiometric image with a color lookup table
Code: [Select]
convert t3.png pal.png -clut t4.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71025;image)

We see that we have chosen the wrong colorspace (used above RGB)

// better results: sRGB
// and expand video pal color table from [16,235] to [0,255] with -auto-level
Code: [Select]
convert -size 224X1 -depth 8 YCbCr:pal.raw -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -auto-level pals.png
convert t3.png pals.png -clut t5.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71045;image)

...ready

see here for more informations:
- use the Q16 version of imagemagick !!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 11:04:31 am
sorry, I only skimmed your post
>convert -version
Version: ImageMagick 6.8.7-9 Q8 x86 2013-11-28 http://www.imagemagick.org (http://www.imagemagick.org)
Copyright: Copyright (C) 1999-2014 ImageMagick Studio LLC
Features: DPC OpenMP
Delegates: bzlib freetype jbig jng jp2 jpeg lcms lqr pangocairo png ps tiff webp xml zlib

you need the Q16 (16 bits-per-pixel) version of Imagemagick ;-)
(your t2.png is only 8 Bit)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 11:24:56 am
the final post is my first post, but no one will find the post 2091  :-\

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
I added the hint for Q16
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 16, 2013, 11:26:37 am
I had problem with flir.php scipt, image was somehow corrupted.

Solution - I had wrong Convert version, need the Q16 (16 bits-per-pixel) version of Imagemagick ;-)

To all E4 owners - I recommend this script a lot. Gives you real 640x480 image with PiP resized IR image.

See original Flir MSX image  and then Image coming from flir.php (blur reduced to 0x1).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 11:42:05 am
see my post above and try between colorspaces sRGB/RGB for better results

Imagemagick handles color translations to RGB/sRGB different
it's try and error (depend on version, plattform and color table)
I haven't found a perfect color space transformation for the embbed color table to jpg.

You can also download and try the flir palettes from my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)


here is my version (Windows 7 and ImageMagick 6.7.5-5 2012-02-11 Q16)
flir.php line 171
Quote
exec($exiftool.' '.$flirimg.' -b -Palette | '.$convert.' -size "'.$exif[0]['PaletteColors'].'X1" -depth 8 YCbCr:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace RGB -auto-level '.$embpal);
and cmd line
Code: [Select]
>php flir.php --pip --msx -i FLIR0010.jpg -o rgb.jpg
I think my colors are better looking
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 05:02:14 pm
Is anyone interested in panorama images?

The panarama feature of Flir Tools is bad (several rows).
I have a php script to generate Flir radiometric jpg from 16 Bit grayscale high resolution panoramas, stitched from Flir radiometric images with free MS ICE (Microsoft Research Image Composite Editor) or Photoshop (Photomerge).
The generated jpg are compatible with Flir Tools etc.


As attachment two compressed megapixel jpg (without radiometric part of 2MB)
images without msx  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 16, 2013, 05:24:10 pm
There has been some discussion on the accuracy (or lack thereof) of the E4 at low temperatures.

I just found the pictures I took some time ago when we had a nippy spell here in the UK. The temperature on the evening when the pictures were taken was +2 Degrees Celsius. I measured the concrete slab and wall with a thermocouple and an IR thermometer. Both confirmed a true surface temperature of +2.5 Degrees Celsius on the wall and  and +2.0 Degrees Celsius on the slab.

As can be seen from the pictures, the E4 was somewhat confused in its measurement of the brick wall and concrete slab Temperatures. Both surfaces were dry and clean.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eliocor on December 16, 2013, 05:34:36 pm
Is anyone interested in panorama images?
Yes, I would be interested in (without using Flir Tools+)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 16, 2013, 05:47:39 pm
Is anyone interested in panorama images?

The panarama feature of Flir Tools is bad (several rows).
I have a php script to generate Flir radiometric jpg from 16 Bit grayscale high resolution panoramas, stitched from Flir radiometric images with free MS ICE (Microsoft Research Image Composite Editor) or Photoshop (Photomerge).
The generated jpg are compatible with Flir Tools etc.


As attachment two compressed megapixel jpg (without radiometric part of 2MB)
images without msx  :)

Dear god that's awesome looking!

Please post that up :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 16, 2013, 05:50:34 pm
Is anyone interested in panorama images?

Sure. Would be great.

I am playing with flir.php, blur reduced to 0x1 seems better to me.
I plan to make batch process for more pictures. I would like also to add some automatic hot/cold spot. But I noticed gradient is not linear. I wanted pick up come RGB point from image and then locate same value on gradient to compute temperature. But not sure if this will work. I will give a try. I though to do some VB application for it, but since it would be limiting to windows user, I will stay with php and javascript.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 16, 2013, 06:08:26 pm
There has been some discussion on the accuracy (or lack thereof) of the E4 at low temperatures.

I just found the pictures I took some time ago when we had a nippy spell here in the UK. The temperature on the evening when the pictures were taken was +2 Degrees Celsius. I measured the concrete slab and wall with a thermocouple and an IR thermometer. Both confirmed a true surface temperature of +2.5 Degrees Celsius on the wall and  and +2.0 Degrees Celsius on the slab.

As can be seen from the pictures, the E4 was somewhat confused in its measurement of the brick wall and concrete slab Temperatures. Both surfaces were dry and clean.

Yes, I have exactly the same experience, and the magnitude of the error seems to be the same. I wasn't very happy when I discovered it. I made some water/ice-slush with my mixer, and my E4 claimed that it was -7 degrees C. Way out of spec. I hoped that maybe it was just a bad thermal connection between the temperature sensor and the metal chassis, but I opened it and applied some thermal paste, and it didn't help.

The error is smaller at room temperature, but increases rapidly at low temperatures. Compared with my IR termometer, which I now trust more, the E4 also shows too high temperature at higher temperatures.

I find it curious that many users seem to have the same problem. A consistent error should be possible to calibrate away (before delivery). I have a plot of the error compared to my IR termometer below. Temperature on the X axis and error on the Y axis

I then used excel to fiddle around with the planck calibration parameters in an highly unscientific way in an attempt to minimize the error. The result is in the second plot below. The point at 300 degrees is extrapolated, not measured. I just wanted to make sure that the graph didn't behave in any unexpected way in the extreme end when I changed the parameters.

After uploading these new parameters to calib.rsc my E4 seems to measure much better. Now my room temperature is a comfortable 21.5 degrees C, not 18 degrees, and my freezer is no longer colder than -40, but I'm still suspicious. This should not be needed. I also have a nagging suspicion that my E4 didn't have this error when it was new, but I can't prove it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 16, 2013, 06:20:16 pm
Cold temperature behaviour is surely somehow perverted. When you decrease emissivity setting in room temperature, surfaces look warmer to the camera as theory suggest. When I do the same outside (-10 C), the effect is opposite, what's going on in there?

Absolute error in those temperatures is around 9-12 celsius :-\

I also left camera outside for an hour to cool thoroughly to see how it changes things, and tested again. Error got even larger, to 14-17 C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 16, 2013, 06:33:25 pm
I plan to make batch process for more pictures. I would like also to add some automatic hot/cold spot. But I noticed gradient is not linear. I wanted pick up come RGB point from image and then locate same value on gradient to compute temperature.

I did a really quick/dirty cmd file that you can drop a flir image onto and it will spit out a completed file but for some reason it will only work when the file is in the same folder as the cmd/php.

"%~dp0php-5.4.22-nts-Win32-VC9-x86\php.exe" "%~dp0flir.php" --pal iron.png -i %1 -o done.jpg
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 16, 2013, 06:36:45 pm
In my experience it would appear that FLIR have provided somewhat optimistic accuracy specifications for the stated -20 to 250 Degrees Celsius measurement range. It would be interesting to hear whether an E8 is better behaved than its budget sibling. I am thinking that the E8 may have a more comprehensive calibration routine at the factory ?

DaveLJ.... anything to report on the performance of the E8 you have on loan for review please ?

I am going to get my Pace Heat Wave preheater from the lab and set up some positive temperature tests. The PACE preheater has a closed loop temperature controller but I will use an IR thermometer of known accuracy to check the thermal emission temperature of the hot plate. I may also use the PM695 for comparison tests as well. The preheater is supposed to produce plate temperatures of between 38 Degrees C and 371 Degrees C so plenty higher than the stated E4 top end measurement capability.

I may not get this done tonight though as other tasks are demanding my attention.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 09:22:45 pm
I then used excel to fiddle around with the planck calibration parameters in an highly unscientific way in an attempt to minimize the error. The result is in the second plot below.
...
After uploading these new parameters to calib.rsc my E4 seems to measure much better.

great idea
Which values do you have changed in calib.rsc ?

Code: [Select]
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.B double xxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.F double xxxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.J0 double xxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.J1 double xxxxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.R double xxxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 16, 2013, 09:48:30 pm
I then used excel to fiddle around with the planck calibration parameters in an highly unscientific way in an attempt to minimize the error. The result is in the second plot below.
...
After uploading these new parameters to calib.rsc my E4 seems to measure much better.

great idea
Which values do you have changed in calib.rsc ?

Code: [Select]
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.B double xxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.F double xxxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.J0 double xxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.J1 double xxxxx
.calib.extRBF.ds250C_we_apNOA_fiNOF_le.R double xxxx

R, called R1 in your post here: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)
B and J0 (also called O). I cant find R2 in calib.rsc, but it has the same effect as R1, so it would be pointless. F seems to be the same for all cameras, so I didn't want to touch it. I have no idea what J1 is.

By the way, the parameters exist in three different places in the calib.rsc file. I changed all of them just to be sure.

I find it really strange that the calibration is so far off. There is some information missing here. I mean, what's the point of being able to fine tune emissivity and ambient temperature if the camera is 10 degrees off at moderately low temperatures, and 10 degrees off the other way at higher temperatures anyway?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 10:00:03 pm
it took me some sleepless nights to find the formula in flir exif header
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html?PHPSESSID=m0nsbp287k2l5d2krqrb3oqhh4#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html?PHPSESSID=m0nsbp287k2l5d2krqrb3oqhh4#msg23972)

after then, I found the formula everywhere, like here on page 14
http://www.workswell.cz/manuals/flir/hardware/Ax5_models/ICD_GenICam_ICD_FLIR_Ax5_Camera_PC.pdf (http://www.workswell.cz/manuals/flir/hardware/Ax5_models/ICD_GenICam_ICD_FLIR_Ax5_Camera_PC.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 16, 2013, 10:15:02 pm
Is anyone interested in panorama images?

create a panorama image with exiftool, imagemagick, MS ICE  and php


preparation
(1) download free MS ICE from
http://research.microsoft.com/en-us/um/redmond/groups/ivm/ICE/ (http://research.microsoft.com/en-us/um/redmond/groups/ivm/ICE/)
I use a virtual machine (vmware with windows guest)
(2) install php, see here https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
(3) install imagemagick
(4) edit paths inside splitjpg.php


expand raw values from flir images

Variant A: radiometric jpg with embedded 16 Bit RAW (like Flir Exx)
Code: [Select]
> exiftool -b -RawThermalImage IR_*.jpg -w _%f.tif
    8 image files read
    8 output files created

Variant B.1: radiometric jpg with embedded 16 Bit PNG with reverse byte order (like Flir Ex)
Code: [Select]
// first extract all png
$ exiftool -b -RawThermalImage -if '$RawThermalImageType eq "PNG"' *.jpg -w %f.png
// now change byte order (Linux/Mac code)
$ for i in *.png ; do convert $i gray:- | convert -size 320x240 -depth 16 -endian msb gray:- _$i.tif ; done

Variant B.2: if you don't use pipes try Imagemagick mogrify (inside the same folder as convert)
a sample with reverse byte order (like Flir Ex)
Code: [Select]
$ exiftool -b -RawThermalImage FLIR*.jpg -w %f.png
$ mogrify -format tif -fx 'u/256+int(u*65536)%256)/256' *.png

Variant B.3: as Windows User use a *.cmd like this (untested)
Code: [Select]
@echo off
for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN IR*.jpg`) do call :over %%f
goto :eof
:over
set a=%1
echo %a:~3,4%
exiftool -b -RawThermalImage %1 | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- RAW%a:~3,4%.tif

Attention: all tiffs are black (check image with convert my_dark.tif -auto-level preview.jpg )
convert to larger size (and sharp it as you like)
Code: [Select]
> convert _*.tif -resize 480x -sharpen 0x1 _a%03d.png

now drop the 16 bit png to MS ICE
select "rotating motion"
crop the image
select export Format Tiff (16 Bit)
-> save as stitch.tiff

create a real thermal flir jpg,
importend: use an image from the same camera as template (same planck values)
template is here IR_0554.jpg - the first image of serie
Code: [Select]
> php splitjpg.php -i IR_0554.jpg -r stitch.tiff -o pano1

open the new build image pano1.jpg with flir tools and rebuild the preview jpg image

I can't post the recreated image pano1.jpg (>1MB blocked), but it looks like here after saving the preview image in Flir Tools
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71460;image)




variant

MS ICE is great for stitching untouched raw radiometric 16bit images witch low in contrast
is you are not satisfied with the result of ICE, you can expand the brightness range and use another panorama software (every 16 Bit panorama tool that finds the control points)

real RAW values are in a narrow range
see here for a table with the relationship RAW and °C  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356616/#msg356616 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356616/#msg356616)


first expand 16 Bit RAW values to _*.tif as described above

now use a sample image for analyze the temperature range (=raw values)
Code: [Select]
$ exiftool -rawval* IR_0548.jpg
Raw Value Median                : 14530
Raw Value Range                 : 1268
raw range is here 14530 +/- (1268/2)

alternativ analyze all tif images all at once (Linux syntax)
Code: [Select]
$ identify -verbose _*.tif | grep -n3 statist | grep -e 'min\|max' | sort -k3 -n | awk '{ if (NR ==1) print} END {print}'
137-      min: 13426 (0.204868)
138-      max: 15962 (0.243565)

we generous chose 13000 to 16000

change brightness with -level (minus)
Code: [Select]
$ convert _*.tif -resize 480x -sharpen 0x1 -level 13000,16000 _c%03d.png
now stitch the images with a 16 bit panorama software
I use here Photoshop with Photomerge (select Auto and correct lens..)

save the panorama as 16 Bit grayscale image with name pano-ps.png

after then limit the brightness to original brightness with  +level (plus)
use the same values from above
Code: [Select]
$ convert pano-ps.png +level 13000,16000 stitch-ps16.png

the last step:
create the real thermal flir jpg,
use a image from the same camera as template (same planck values !!)
Code: [Select]
$ php splitjpg.php -i IR_0556.jpg -r stitch-ps16.png -o pano1ps
open pano1ps.jpg with flir tools and rebuild the preview jpg image



compare the MS ICE panorama with a Flir Tools+ panorama
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356910/#msg356910 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356910/#msg356910)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=73923;image)



generate zoom images from embedded RAW sensor values
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359747/#msg359747 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359747/#msg359747)


edit 15.01.2014 : handle spaces in filenames
splitjpg.php
Code: [Select]
exec($convert." \"$raw16img\" -depth 16 -endian lsb gray:$rawimage");

edit 22.01.2014
a 360 degree panorama from john19
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370770/#msg370770 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370770/#msg370770)


edit 03.03.2015
new MS ICE V 2.0 (Image Composite Editor)

see stitched sample here (with some nice windows scripts for E4/E40)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg620145/#msg620145 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg620145/#msg620145)
discription of the panorama image workflow:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg621514/#msg621514 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg621514/#msg621514)
for images with hot spots use a additional gamma correction for ICE 2.0
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg623573/#msg623573 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg623573/#msg623573)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 16, 2013, 11:59:08 pm
E4 thermal accuracy test for positive temperatures

I have just completed testing my E4 using the following equipment

Pace HS200 Heat Wave digitally temperature controlled pre-heater
RS 1315 Datalogging thermocouple thermometer (New). Specified accuracy = +-0.05% +0.5C
Exergen D seriesD-501 non contact IR thermometer. Specified accuracy = +-2%

Details of RS 1315 may be found here:

http://uk.rs-online.com/web/p/digital-thermometers/7126039/ (http://uk.rs-online.com/web/p/digital-thermometers/7126039/)

Details of Exergen D series may be found here:

http://www.exergen.com/industrial/dseries/ (http://www.exergen.com/industrial/dseries/)

The test comprised of placing the thermocouple and non contact thermometer such that they recorded an accurate temperature reading for a piece of black pvc insulation tape, and later, a black anodised heat-sink.

The following temperatures were chosen (all in Degrees Celsius):

40C, 60C, 80C, 100C, 120C, 140C, 160C, 180C, 200C, 220C, 230C, 236C,240C, 250C.

It was not always possible to obtain an exact plate temperature in line with the above so the reading on the thermocouple or IR thermometer should be used as the temperature used for each test. The E4 was set at its 0.3m alignment to achieve the best possible MSX image but it was still a compromise in some images. The PVC tape gave up the fight at almost 200C so I used a black anodised heat-sink as a decent radiator and measured its base temperature with the thermocouple and E4. The Exergen IR thermometer could not be used above 200C when the tape failed. It did not read accurately on the heat sink due to target shape.

I continued to increase temperature until the E4 alerted me that it was above range. I then increased temperature a little more to see what the E4 read above its maximum specification.

The results should be self explanatory. I will place numeric results here later.

Now for the pictures

First the set-up and then the E4 images.

UPDATE: Readings listed from test:

Thermocouple Reading   E4 Reading  (In Celsius)  Delta % (Rounded)

39.9                              39.5                              -1.0%
59.6                              60.9                              +2.1%
79.5                              82.2                              +3.4%
100.0                            102                               +2.0%
120.9                            125                               +3.4%
141.0                            146                               +3.5%
160.0                            169                               +5.6%
180.1                            192                               +6.6%
200.6                            217                               +8.2%
220.2                            226                               +2.6%
236.7                            251 Overtemp Warning   +6.0%
240.0                            254 Overtemp Warning   +5.8%
250.8                            264 Overtemp Warning   +5.3%

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 12:03:18 am
Those panorama's sure look neat. :) I notice you run it in a vm, which is sorta doable but wouldn't be my first choice. Have you tried it in wine yet? According to this here link (http://appdb.winehq.org/objectManager.php?sClass=version&iId=15983) it should be reasonably useable. With the added bonus that it mentions that compositing works automatically. Preferably I would just run it from a batch script (hence the wine question). Does MS ICE support batching or do you have to pointey clickey the relative positions of the various pictures before running the solver?

Is says export as jpg has issues but who the hell cares, since export as png does work... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 17, 2013, 12:04:21 am
Last few pictures from E4 test
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 12:13:26 am
Interesting results there Aurora!  :-+ So to give a simplistic summary it looks like for low temperatures the E4 shows a lower temperature and for high temperatures the E4 shows a higher temperature. And by the looks of it a crossover at somewhere a little over 40 degrees C. I wonder what causes this? Are we not using it properly (wrong setting for emissivity or some such), or is this something systematic in the Ex range?

Or maybe this is a limitation of the calibration procedure for a budget model? As in ... yes the E4 would support better settings for the various parameters but this would mean a lengthy calibration procedure, which would be too expensive?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 17, 2013, 12:30:06 am
Does MS ICE support batching or do you have to pointey clickey the relative positions of the various pictures before running the solver?

not really
http://social.microsoft.com/Forums/en-US/806bf0c5-af8f-4526-9b90-6d28096441d2/faq-frequently-asked-questions-for-image-composite-editor?forum=ice (http://social.microsoft.com/Forums/en-US/806bf0c5-af8f-4526-9b90-6d28096441d2/faq-frequently-asked-questions-for-image-composite-editor?forum=ice)
Code: [Select]

What are the command-line options for Image Composite Editor?
Currently the command line is interpreted quite simply:
If the command line contains a file with the ".spj" extension (an Image Composite Editor project), the specified project is opened.
...
Otherwise, the command line is interpreted as a list of source images which are immediately stitched.

I found, that ICE is the only tool that can stitch those images (low in contrast)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71021;image)

if you use the variant with stretching the level " -level min,max" than you can use every 16 Bit panorama tool like Hugin
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71023;image)
but I have a bad experience with Hugin - it don't found good control points on small grayscale images (360x240 etc)
try Hugin (Linux/Mac/Win) for yourself and enjoy the scripting features of Hugin

Photoshop works great with 16 Bit Grayscale (level expanded)
http://sites.duke.edu/oit-mps/2010/11/16/stitching-a-panorama-in-photoshop-cs5/ (http://sites.duke.edu/oit-mps/2010/11/16/stitching-a-panorama-in-photoshop-cs5/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 12:40:23 am
Interesting results there Aurora!  :-+ So to give a simplistic summary it looks like for low temperatures the E4 shows a lower temperature and for high temperatures the E4 shows a higher temperature. And by the looks of it a crossover at somewhere a little over 40 degrees C. I wonder what causes this? Are we not using it properly (wrong setting for emissivity or some such), or is this something systematic in the Ex range?

Or maybe this is a limitation of the calibration procedure for a budget model? As in ... yes the E4 would support better settings for the various parameters but this would mean a lengthy calibration procedure, which would be too expensive?  :-//

Just a tought - does the offset error happen with unaltered, factory-like Flirs, too ... or was it somehow introduced by hacking around?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 17, 2013, 12:41:13 am
@mrflibble,

I set the emissivity for the test to suit the target so that should be correct. I also used three IR thermometers to check the radiated heat and they all read accurately when aimed at the tape or heat-sink. The Exergen is a quality product designed for this type of testing and it apparently produces its own black body within its head cone to lessen errors. I used my cheap IR thermometer and then my very expensive Raytek Germanium optics IR thermometer with emissivity settings. It is definitely the E4 that is wonky  :)

The error is not massive, but it does seem to point to a poor calibration table. Maybe the E8 has a more comprehensive calibration stage and this is why it costs more ? It is a bit sad that a cheap $15 Actron IR thermometer is more accurate though  :(

FLIR publish a specification that includes accuracy of +-2% or +-2 Degrees. Mine would definitely fail a test against that specification.

I am still not worried though as the E4 is a visual thermometer to me and I can achieve more accuracy of readings using other units if desired. I need the relative temperature displays and the rough measurement.

I must say the MSX was very useful during the test. As you can see from the pictures, the visual camera was defocused a little (due to focal distance) but still captured the read-outs on the meters. Very useful  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 04:12:56 am
I am trying to use my camera in a program called Blue Iris (a serveilance with motion detection).  I handles IP cameras and USB cameras.

On my desktop machine, the flir shows up just fine when the camera is in UVC and MSD and UVC and RNDIS as a "Flir USB video".
When I switch it to UVC only, it is listed as "Flir Ex-series".
The video is the same in both modes, but I was wondering why the different "types" vs. modes?

Also, on my laptop (same software/mode), it appears to connect (when Blue Iris connects, the time increments in the camera's frame), but the screen is black... NO video.  Is this a codec that my laptop is missing?

Also, is there any way to make the framed window for min/max temp detection larger or full screen rather than just the center ~"half"?

Anybody come up with an LCD screen protector?  Thinking of the pieces of silicon rubber for smart phones or something similar.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 04:20:15 am
Also, on my laptop (same software/mode), it appears to connect (when Blue Iris connects, the time increments in the camera's frame), but the screen is black... NO video.  Is this a codec that my laptop is missing?

Also, is there any way to make the framed window for min/max temp detection larger or full screen rather than just the center ~"half"?
check if you're using video overlay and output is sent to a different display (not connected) or different card...
@detection window: you can check out the default parameter files in the menu hack - I've kept them sized down as increasing them will probably slow stuff down :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 04:42:06 am
Also, on my laptop (same software/mode), it appears to connect (when Blue Iris connects, the time increments in the camera's frame), but the screen is black... NO video.  Is this a codec that my laptop is missing?

Also, is there any way to make the framed window for min/max temp detection larger or full screen rather than just the center ~"half"?
check if you're using video overlay and output is sent to a different display (not connected) or different card...
@detection window: you can check out the default parameter files in the menu hack - I've kept them sized down as increasing them will probably slow stuff down :)
That is very possible that video overlay is turned on... it is a laptop with dual display capability although when the internal webcam is selected in Blue Iris, the image (video) is fine... hhmmm.

I'll take a look at the menu hack as well for the large pip! 
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 05:15:06 am
Got Blue Iris to work!  Thanks!  Didn't really find the setting that redirected the video to another display, but I went through the menus, and clicked ok, and it started working!
Thank You!

For the "cursor box", what file has the size for the large box?  All I found in toolbar-config_Z3.xml was the menu to select that mode, not the definition of the box's size. hhmmm...
Thank you again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 05:25:45 am
For the "cursor box", what file has the size for the large box?  All I found in toolbar-config_Z3.xml was the menu to select that mode, not the definition of the box's size. hhmmm...
Thank you again!
Example:
ADDMENU\FlashBFS\system\ui.d\presets.d\preset_hotSpot.rsc
Code: [Select]
.image.sysimgInstances.main.measureFuncs.mbox.1.height int32 75
.image.sysimgInstances.main.measureFuncs.mbox.1.width int32 107
.image.sysimgInstances.main.measureFuncs.mbox.1.x int32 106
.image.sysimgInstances.main.measureFuncs.mbox.1.y int32 82
you should be able to test those settings over telnet using "rset"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 05:36:18 am
Thanks... Ill test it to see if I like larger bounding areas.
Frankly, I am not really familiar with telnet... can I just edit the .rsc file and perform the "update"?  Keeping the original or course!
Also, doesn't the CRC need to be re-calculated for new values?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 05:47:57 am
Thanks... Ill test it to see if I like larger bounding areas.
Frankly, I am not really familiar with telnet... can I just edit the .rsc file and perform the "update"?  Keeping the original or course!
Also, doesn't the CRC need to be re-calculated for new values?
All those answers have already been answered here MULTIPLE times - just give yourself a go and fire up telnet/ftp and poke around ... this way you're wasting other people's time for "baby me" stuff.
In short: "Man Up"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 05:51:56 am
JEEZZZ I'm sorry for asking!  You seemed to be helpful and then turned on me!
I just don't want to brick my camera!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 06:07:43 am
I just don't want to brick my camera!
Well, I had my cam stuck on (even cold) boot with an exception in appcore.exe - without telnet that error would have stayed permanent.
Telnet: It's simpler, its faster, it allows for more fun and to debrick in case something is a BAD setting ... - so if you want to do it the awkward way just because *yoda mode on* you don't want to learn the ways of the force...*yoda mode off* (read: how to use basic tools) ... well, then your path is taking you the wrong direction.
*EOF*

PS: Found a nice one: “Fear is the path to the dark side. Fear leads to anger. Anger leads to hate. Hate leads to suffering.”
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 06:30:04 am
I think you are assuming that I want to do it the awkward way.. I do NOT!
If there is an easier/safer/faster way to do it, I am all over it!
I do NOT need to have my hand held, but I am willing to learn.
I have just tried searching on telnet for what rset does (not listed in the typical telnet commands from what I found), and really didn't come up with any clear cut methods that a relatively new person could use, the threads I read were written by people that have been doing this for a long time.

I know for a fact, that ALL the people that have posted about telnet, HAD to start SOMEWHERE!!!

Now I don't expect ANYONE to "teach" me, but realize that I just spend close to $900 on this camera and I don't want to get into a situation that it becomes a doorstop!

If it is too much trouble for you, I apologize for asking and I will just live with what I have, rather than do something "by trying blindly" and bricking my camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 06:34:29 am
If it's bricking you are worried about, then actually doing some rset commands over telnet has a lot of advantages.

With rset you can apply the settings live and do some testing to see if you get the results you want, without making those settings permanent just yet. So if you made an error, things turn out to be unstable, crash or whatever, you can just do a cold reboot and you have your old stable settings back. If on the other hand you change the .rsc file, then next time you boot up those settings are applied. So if those are the wrong settings, resulting in instability ... not so good.

Which is the long way of saying: to be safe better apply new settings with rset first over telnet, test it a bit ... and then when comfortable enough with that you make the settings permanent with a .rsc file.

Also, see my post here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074) for an example on how to use rdump to save a part of the resource tree. As in, you make your changes (rset etc), test it, and then when done you save those settings to your favorite .rsc file using the rdump command.

PS: I've done a lot of mucking about with rset, and every curious state was  fixable with either a restartapp (most of the time this was enbough) or restart (win ce reboot) or power cycling. IMO rset is pretty safe. As long as you stay away from the eeprom :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 06:57:19 am
Thank you Mr. Flibbel for 'splaini rset, rdump,restartapp!

I am VERY concerned about possibly bricking my camera, and I didn't know that rset is a temporary "test mode" that doesn't make things permanent.
This is THE way to test things out without making changes permanent!  GREAT!

YOU BETTER BELIEVE I will STAY AWAY from the EEPROM.... that WOULD be permanent and dangerous!

I will investigate your post that you have linked, thank you.

I feel alot better knowing that rset is NOT permanent and can be used for experimentation.
I have updated my Rigol scope (using Dave's method), and updated 2 E4 so far, with success, but I DO know that if ANYTHING goes wrong (power glitch, cable yank, mistyping commands, etc.) you NOW have a doorstop!  OUI!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 17, 2013, 07:22:50 am
I feel alot better knowing that rset is NOT permanent and can be used for experimentation.
well, most settings there are on the fly stuff - but know that you can do damage there:
The camera will store information like "last state" and it will try to re-read it - if that value or state causes some memory corruption or other exception state, then you'll find appcore.exe belly up - possibly even on reboot (been there, done that - but it was due to missing preset files and delta-temp mode)
Fortunately most inputs are checked against allowable limits etc. by rset.
And as already stated: with telnet chances are WAY better that one still can fix the registry entry, restart the frontend without breaking the telnet session (restartapp) and have everything back living again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 17, 2013, 09:17:27 am
@mrflibble

I followed your link and found
When I show battery stats (hold LEFT + RIGHT cursor) it
shows Battery: 3%, 13mA ... but no charging (lightning) symbol.

I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 17, 2013, 12:43:13 pm
Emissivity setting.... Possibly an issue on the E4

I did a very quick test on my E4 last night to see how its emissivity setting behaved.

Either I was too tired to be playing or my E4 does indeed have a problem when it comes to emissivity setting. As I believe has already been mentioned.....the emissivity setting appears to be acting inversely to that which I would have expected

A test for anyone interested....... aim your E4 at an object that is warmer than background, like a radiator. Have a play with your emissivity setting and see what happens.


0.1 is shiny Gold with extremely low emissivity. 1.0 is a perfect black body or human skin with excellent emissivity.

When looking at a painted radiator at say 40C, and setting emissivity to 0.1 I would expect the camera to over compensate for the low emissivity, and when set to 1.0 it would undercompensate. Mine does the opposite !

More later when I return home from work
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 17, 2013, 01:50:36 pm
my flir e4 works correct:

refl. temp = 20°C

radiator emissivity=0,10 -> measure temp. = 208°C -> sensor_voltage_1 = function(10% of 208°C and 90% of 20°C)
radiator emissivity=0,95 -> measure temp. = 54°C -> sensor_voltage_2 = function(95% of 54°C and 5% of 20°C)
with sensor_voltage_1 == sensor_voltage_2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on December 17, 2013, 02:44:07 pm
Mine is fine too, at lower emissivity skin temp. went up to 40+ C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 17, 2013, 04:19:40 pm
I just did the same test on my E4 using my skin as the heat source. As you say, works normally. I was either 'tired and confused' or my E4 was  ;D

I will play with the emissivity a little more and maybe repeat the temperature test with some lower temperature sources to see what happens below 40C and into the minus C temperatures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 17, 2013, 05:19:05 pm
Cold temperature behaviour is surely somehow perverted. When you decrease emissivity setting in room temperature, surfaces look warmer to the camera as theory suggest. When I do the same outside (-10 C), the effect is opposite, what's going on in there?

Absolute error in those temperatures is around 9-12 celsius :-\

I also left camera outside for an hour to cool thoroughly to see how it changes things, and tested again. Error got even larger, to 14-17 C.

Did third test in -2 C conditions. 0.95 Emissivity shows temperature mostly correct, but camera goes crazy with 0.25: scale changes to -40 C -> - 40 C and spot temperature jams to -40 C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 06:27:15 pm
I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
When the E4 is busy charging you press the LEFT button and the RIGHT button at the same time for a while.

Edit: to clarify, the camera should be attached to usb or charger (obviously) and powered down.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 07:59:34 pm
I just did the same test on my E4 using my skin as the heat source. As you say, works normally. I was either 'tired and confused' or my E4 was  ;D

I will play with the emissivity a little more and maybe repeat the temperature test with some lower temperature sources to see what happens below 40C and into the minus C temperatures.
That can happen... information SATURATION!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 08:13:59 pm
One interesting thing I noticed about charging...
IF you use the Flir charger (5v at 2100 mA), the E4 indicates a max charge current of (about) 1.3A with a fully discharged battery.

IF you use a different USB power supply (I have a 5v 1A), the E4 indicates about 580mA under the same condition.

IF you use a computer's usb port (max current 500 mA), the E4 indicates about 380ma.

SO.... the E4 must be measuring the maximum available current from the supply and use (very roughly) half of the available current!
This would make sense as charging can be done from different sources and the E4 is trying to use the available current without overloading the source (wall wart/computer) while charging as fast as it can.

I did make a statement about not exceeding 400mA during charge, and the battery doesn't get warm, WRONG!, but IF the temp is monitored VERY carefully (and they do have a thermistor in the battery), then fast charging CAN be done as there is a little heat when using the wall wart at over 1 amp.

I measured the thermistor terminals after the battery had been charging for a while using the wall wart, and the measured resistance was about 8.7K, down from about 11.9K at room temp.  The battery was slightly warm too.
A Ni-Cd or Ni-Mh would be alot warmer!

Seems like there is a very complex battery management system in the E4, and not just a simple E/I monitoring.
Impressive!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 08:29:43 pm
One interesting thing I noticed about charging...
IF you use the Flir charger (5v at 2100 mA), the E4 indicates a max charge current of (about) 1.3A with a fully discharged battery.

IF you use a different USB power supply (I have a 5v 1A), the E4 indicates about 580mA under the same condition.

IF you use a computer's usb port (max current 500 mA), the E4 indicates about 380ma.
Yup, I can confirm all of the above. One additional result ... when you use a powered usb hub. I often have the E4 connected to the usb hub in my monitor (2407wfp) and then it also shows ~ 580 mA.

Crap, I just wanted to check it just to be sure I wasn't mixing up the numbers but of course .... 99% charged. Curse you reality, curse yoooooouuuuuuu! 99% charged when you want to test the charger, and 1% charged when you are testing power management features...  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 08:40:45 pm
One interesting thing I noticed about charging...
IF you use the Flir charger (5v at 2100 mA), the E4 indicates a max charge current of (about) 1.3A with a fully discharged battery.

IF you use a different USB power supply (I have a 5v 1A), the E4 indicates about 580mA under the same condition.

IF you use a computer's usb port (max current 500 mA), the E4 indicates about 380ma.
Yup, I can confirm all of the above. One additional result ... when you use a powered usb hub. I often have the E4 connected to the usb hub in my monitor (2407wfp) and then it also shows ~ 580 mA.

Crap, I just wanted to check it just to be sure I wasn't mixing up the numbers but of course .... 99% charged. Curse you reality, curse yoooooouuuuuuu! 99% charged when you want to test the charger, and 1% charged when you are testing power management features...  :rant:
LOL!!!   WOW, your hub must be powered with a 1 amp supply then?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 17, 2013, 08:44:18 pm
LOL!!!   WOW, your hub must be powered with a 1 amp supply then?

The hub is internal in the aforementioned monitor. It has 2 usb ports on the left side, which is quite handy. Well, 50% handy. It would be 100% handy if one monitor had the ports on the left side, and the other had the ports on the right side. :P

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 17, 2013, 09:03:15 pm
I see... thought you were referring to an external hub.  Still must be capable of an amp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 17, 2013, 11:29:05 pm
I really doubt the E4 is 'measuring' the available current capability of the charging source. That would be a neat trick...

Typically (and very common with smart phones, e.g. Samsung S4) is that there are 'tricks' that are used to 'guess' the current ability of the source.

One is obviously with a real USB device, the target will request that the host provides a certain current (up to 500mA for USB2) and the host then informs the target if that is possible. Part of the USB enumeration process.

The common Apple ipod technique to determine the type of charger is to look for certain voltages (pullup/pull down resistors in the charger) on the D+/D-. The Samsung S4 also looks for a USB cable that has the shield connected end to end for the ground path connection. My S4 can charge up to 1900mA with a) the correct charger and b) the correct cable. If I switch to a normal USB cable it drops to around 1100mA. Change the charger (or use a PC) and it drops to just under 500mA. There's a free app that provides this info for the S4 in realtime.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on December 18, 2013, 12:32:28 am
Hi all.
This is my first post, so please bear with us.
Many thanks to Mike and Taucher for their great job. :clap: :clap: :clap: :-+ :-+ :-+
In early December I bought E4.
number of cheese. 6390xxxx
num. part 63901-0101
1.19.8
In this area, I am completely ignorant.
I have read all about two times, from page 1 to 150
Google and YT hired for two weeks and now I have "E8 +".  :-DD
I confirm that EVERYTHING you need is in text. Even, to completely novice users - like me. Just a little effort( |O |O :scared: :box:  :-DD) to reach.
 Once again, thank you very much and best regards.

Mike, what do you think? Is it possible from E4 to do something a little like this: Flir Scout PS?

Merry Christmas and a Happy New Year!!!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on December 18, 2013, 03:57:46 am
Hey just wanted to drop you a note.  We use Ingram as a 3rd party warehouse in PA.  They have a shipping company.  All the stock we ship from there is OURS and is not bought from them. 

They have a logistics Part of their company:
http://www.ingrammicro.com/ext/0,,21910_21911_21912_21943,00.html (http://www.ingrammicro.com/ext/0,,21910_21911_21912_21943,00.html)

Thanks
Evan Cirelli

Vice President
TEquipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on December 18, 2013, 03:58:32 am
Hey just wanted to drop you a note.  We use Ingram as a 3rd party warehouse in PA.  They have a shipping company.  All the stock we ship from there is OURS and is not bought from them. 

These units were only ours.

Thanks
Evan Cirelli

Vice President
TEquipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 18, 2013, 04:02:00 am
I really doubt the E4 is 'measuring' the available current capability of the charging source. That would be a neat trick...

Typically (and very common with smart phones, e.g. Samsung S4) is that there are 'tricks' that are used to 'guess' the current ability of the source.

One is obviously with a real USB device, the target will request that the host provides a certain current (up to 500mA for USB2) and the host then informs the target if that is possible. Part of the USB enumeration process.

The common Apple ipod technique to determine the type of charger is to look for certain voltages (pullup/pull down resistors in the charger) on the D+/D-. The Samsung S4 also looks for a USB cable that has the shield connected end to end for the ground path connection. My S4 can charge up to 1900mA with a) the correct charger and b) the correct cable. If I switch to a normal USB cable it drops to around 1100mA. Change the charger (or use a PC) and it drops to just under 500mA. There's a free app that provides this info for the S4 in realtime.

cheers,
george.
That makes more sense since the Flir charger is tethered to the supply, where the usb cable I tried is a micro to regular usb cable for both the computer and the second power supply that I tried.
Other than the E4 loading the supply to the point of overload and droop (not very good), the only other way would be to "strap" some pins on the tethered cable... will have to look into that!

DANG!  I was giving the E4 alot of credit for being smart... oh well... we can always dream and "brag"!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on December 18, 2013, 04:08:53 am
Im reading this but a little late.  Did it work out for you?
Thanks
Evan Cirelli

TEquipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 18, 2013, 06:12:40 am
I did make a statement about not exceeding 400mA during charge, and the battery doesn't get warm, WRONG!, but IF the temp is monitored VERY carefully (and they do have a thermistor in the battery), then fast charging CAN be done as there is a little heat when using the wall wart at over 1 amp.
If it's a 2800mAh cell 1A is only 0.36C, manufacturers usually recommend ~0.5C (1.4A in your case) as a "standard charge" and most can take a 1C "fast charge". A standard 18650 charger should be able to charge it easily.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IRspector on December 18, 2013, 12:25:25 pm
Hi All.
Thanks to Mike, Taucher and Uup !!! I upgrade without problems my E4 to E8+ Special Edition.

Model E4 1.0 S/n 6390688X Made in Estonia
Part number 63901-0101
Software 1.19.8
Calibrate 13.11.2013

 Is it possible to make  60 fps instead 9 ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 18, 2013, 12:53:18 pm
Is it possible to make  60 fps instead 9 ???

Use search about that. It is a no no thing...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 18, 2013, 05:31:53 pm
It looks like TEquipment.NET is almost out of stock on E4's again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 18, 2013, 06:32:19 pm
I did make a statement about not exceeding 400mA during charge, and the battery doesn't get warm, WRONG!, but IF the temp is monitored VERY carefully (and they do have a thermistor in the battery), then fast charging CAN be done as there is a little heat when using the wall wart at over 1 amp.
If it's a 2800mAh cell 1A is only 0.36C, manufacturers usually recommend ~0.5C (1.4A in your case) as a "standard charge" and most can take a 1C "fast charge". A standard 18650 charger should be able to charge it easily.
Yes, that is true... I don't know where I got my 400mA charge current numbers (must be age... MY age!).
And as long as the temperature is monitored and the high charge rate is terminated when the voltage reaches about 4.1 volts (topping charge start), 1 or in some cases, 2C can be used although the battery life might be shortened if high currents are used.... Li-Ion's are BOMBS if charged too fast/overvoltage, but our Flir's don't have that problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 18, 2013, 09:32:08 pm
here I found a picture from the flir blackbody refrigerator

http://www.flir.com/cs/emea/en/view/?id=41491 (http://www.flir.com/cs/emea/en/view/?id=41491)
Code: [Select]
FLIR ATS recently purchased a unique blackbody that can calibrate thermal cameras at temperatures as low as -80° C (http://www.flir.com/uploadedImages/CS_EMEA/Application_Stories/Research_and_Development/Images/Blackbody.png)

I don't think that Flir calibrated the E4 at cold temperature


create a panorama image with exiftool, imagemagick, MS ICE  and php
Has anyone tried making a panorama?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on December 18, 2013, 10:18:43 pm
Some people may already know this but it was new for me and it surprised me a little bit, so I wanted to post it here.
Today I took a look at the datasheet for the E4 (http://support.flir.com/DsDownload/Assets/63901-0101_en_50.pdf) and it says as follows.

Measurement
Object temperature range–20°C to +250°C (–4°F to +482°F)
Accuracy ±2°C (±3.6°F) or ±2% of reading, for ambient temperature
10°C to 35°C (+50°F to 95°F) and object temperature
above +0°C (+32°F)

The temperature range is nothing new, but at Accuracy the part after "±2%" was completely new for me.
On the first page of the datasheet on the left side above the address, there's a timestamp: December 12, 2013, 10:43 AM
Is this a short term change of the datasheet or has this part been there all this time and I just never noticed it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 18, 2013, 10:31:18 pm
I dont see that on their product description on Flirs website but on the disk that comes with the camera, in the technical data folder the specs for the E4 do state this.
The document is dated April 13 2013 and that spec applies to all the Ex cameras ( and yes it was new to me and surprised me as well but after looking at the specs of fluke cameras...
it looks like they have similar accuracy tempature limitations)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: trap on December 18, 2013, 10:52:28 pm
E4 1.0    SN 6390xxxx    SW 1.19.8

Successfully now an E8+ with beta2b menu additions.

But I had a bit of troubles getting it to talk to my PC. Doing the menu additions was a real pain, and I did a few things to allow filezilla to talk to it. I disabled IPv6 with a FixIt from Microsoft (google helped). Then still no communication, although the driver popup seemed to indicate that it was on 192.168.0.2, there was nothing at that IP. Finally ran a network scan and found the cam at 192.168.1.2 !!  My router is 192.168.0.x/24, so why it wound up there makes no sense to me. Once I pointed things there, it talked fine.

There is a webserver on the camera. Wondering what trouble I can get into poking around there.

Many thanks to all who made me buy this. I needed to spend the money, since it was burning a hole in my pocket. Seriously, having a TIC was on my bucket list.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 18, 2013, 11:02:20 pm
Some people may already know this but it was new for me and it surprised me a little bit, so I wanted to post it here.
Today I took a look at the datasheet for the E4 (http://support.flir.com/DsDownload/Assets/63901-0101_en_50.pdf) and it says as follows.

http://support.flir.com/DsDownload/Assets/63903-0303_en_50.pdf (http://support.flir.com/DsDownload/Assets/63903-0303_en_50.pdf) Same for E8 too

http://support.flir.com/DsDownload/Assets/49001-2101_en_51.pdf (http://support.flir.com/DsDownload/Assets/49001-2101_en_51.pdf) and E50

http://www.trinstruments.cz/data/files/flir-t420-wifi-1113.pdf (http://www.trinstruments.cz/data/files/flir-t420-wifi-1113.pdf) There is no object temperature limit for T420, otherwise same

I'm surprised too
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 18, 2013, 11:04:08 pm
@stefbeer,

Good spot. I totally missed that important specification detail ! Or more accurately I misread it as a statement that the +-2.0C applied at above 0C ! To be truthful I wasn't buying for amazing accuracy so it wasn't of that much interest.

It makes it very clear that the camera has a specified accuracy only above 0C. FLIR do not calibrate the E4 below 0C, as others have suggested. 

My industrial Raytek IR thermometer actually refuses to measure any temperature below 0C as it would not be accurate at such temperatures.

From the lack of any accuracy detail below 0C in the specs of the E4, it would appear that any temperature shown is basically a 'best guess' and not to be trusted.

I have also been looking into the behaviour of PVC electrical tape and that is also a source of error in my temperature test. PVC tape changes in emissivity as its temperature changes ! Life is never simple. A true clack body is needed to carry out serious testing of the E4. Sadly I no longer have access to one at work. I may do some more testing on accuracy when time permits.

My FLIR PM695 manual suggests measuring a target surface with a thermocouple and and then adjusting the PM695 emissivity setting whilst looking at the same spot with the camera. this accurately sets the emissivity on that specific surface.

The E4 is still very useful to me as I tend to work with targets at temperatures above freezing  :).
I will use my accurate, if somewhat cumbersome, PM695's for any work requiring good accuracy between -40C and +500C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 18, 2013, 11:45:55 pm
I just took a look at my PM695 manual and brochures. The manual states an accuracy of +-2% at all temperatures between -40C and +500C (Optional to 2000C) No limitations on target temperature below 0C are shown.

The brochure states the same, though interestingly, the +-2.0C is added to the accuracy specification.

http://www-old.itl.waw.pl/oferta/wypozyczanie/pdf/g38/Flir-ThermacamPM695LWB.pdf (http://www-old.itl.waw.pl/oferta/wypozyczanie/pdf/g38/Flir-ThermacamPM695LWB.pdf)

I looked at the Flir E4 manual and it refers the user to the CD for specs  :o A bit odd I thought. The E4 brochure is even more evasive on the topic. It states an accuracy of  +-2% and a temp range of -20C to +250C  with no caveats. Naughty.

The marketing boys have had a lot of input to the documentation me thinks !

Well the Ex series is a budget range and, as I have stated before, the industrial preventative maintenance cameras cost an awful lot more money. We should not be surprised to find that the Ex series can't truly compete with its more expensive brothers in some areas.

The low temperature measurement capability, or rather the lack there-of, would not have affected my buying decision and we have to ask, how many of us would actually need to measure sub 0C targets ? I tend to work in the world above freezing  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 19, 2013, 12:20:26 am
Well, it's annoying to image buildings in winter conditions when those totally false temperatures run on the screen and pictures.

Development suggestion for Mr. Taucher: option to replace absolute temperatures with temperature difference  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 19, 2013, 01:36:26 am
@nacke,

A very fair point. For winter conditions such a limitation is annoying. It would certainly be an issue if someone wanted to sell their services doing heat and insulation audits involving temperatures below 0C. For my personal heat loss audits in the relatively warm UK winter its not such a problem and I tend to use the image to track down the trouble spots and then investigate them more thoroughly with other tools. it will certainly be a lot more pleasant wielding the relatively light weight and ergonomic E4 when compared to the almost 3kg PM series cameras.

I may be wrong but I believe I read of at least one person 're-calibrating' their E4 to correct the errors that he found in the measurements. Maybe this can be done below 0C to at least improve on the current inaccuracy, if not totally eradicate it. A good source of low temperatures would be needed along with a decent emissivity material and a thermocouple thermometer....then the hard work of plotting the differential as the source warms up from say -20C. I have no idea how you 'tweak' the calibration tables but someone on here may be able to shed some light on the matter. if my old PM695 can be calibrated down to -40C I would hope that something can be done by the user on the nice new Ex series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on December 19, 2013, 01:53:03 am
Does anyone else have a dead pixel in their LCD screen? *Frown*

I ran through the modification and had a nagging doubt that it wouldn't work. It worked beautifully.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 19, 2013, 01:59:56 am
Massaging it can sometimes remove a dead pixel depending on the cause. I know it sounds nuts and that is what I thought but it has worked on at least 2 LCD PC monitors that I have worked on. You have to be able to press on the actual LCD panel though and I am not sure that is possible without disassembly of the camera  :(

If you want to try....just google 'fixing lcd dead pixels'. You have little to lose by trying.

http://www.techradar.com/news/computing-components/peripherals/how-to-fix-dead-pixels-on-your-lcd-monitor-598484 (http://www.techradar.com/news/computing-components/peripherals/how-to-fix-dead-pixels-on-your-lcd-monitor-598484)

Sadly a single dead pixel is not normally considered grounds for rejecting a product but some suppliers have a no quibble returns policy. You can easily revert your camera to standard E4 and return it ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on December 19, 2013, 03:21:12 am
The LCD is protected behind a glass or high-strength composite shield.

I'm not going to go through the hassle of returning the entire unit unless the issue gets worse, nor will I open it up to massage the panel. I did consider that, but the protective cover got in the way. Complaining about it makes me feel a little better though. =)

Mike provided a "remove hacks" firmware option in the download, so it should be possible to restore it factory-fresh.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 19, 2013, 06:33:33 am
I have no idea how you 'tweak' the calibration tables but someone on here may be able to shed some light on the matter.
I used an IR thermometer to plot the difference between it an the E4 in an excel sheet. Then I used this forumula:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)
to calculate raw pixel values from E4 temperature values. From those pixel values I then made a new plot of what the difference between the IR thermometer and E4 would have been with new calibration parameters. I used trial and error and watched the curve change. When it was small enough I took the new calibration parameters and entered them in the calib.rsc file, calculated a checksum and uploaded it with ftp.

I tried first to make a new calibration file with the name zcalib.rsc and hoped that it would override the original so that I wouldn't have to overwrite it, but it didn't work. Maybe it only works for cfg files, not for rsc files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 19, 2013, 06:38:46 am
It works for .rsc files just fine. Traditional mistakes are either CRC wrong, or wrong file location. You probably know this, but just in case ... for .rsc files you have to use crc32 (not crc01 as for .cfg files).

Also for lazy people like me ... you can use the rdump command to save parts of the resource tree. See post about that not too long ago.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 19, 2013, 06:43:12 am
It works for .rsc files just fine. Traditional mistakes are either CRC wrong, or wrong file location. You probably know this, but just in case ... for .rsc files you have to use crc32 (not crc01 as for .cfg files).

Also for lazy people like me ... you can use the rdump command to save parts of the resource tree. See post about that not too long ago.

I couldn't get it to work for calib.rsc. The crc32 was correct, because when I removed the old calib.rsc and renamed my new zcalib.rsc to calib.rsc it worked. Both were placed in FlashFS/system.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 19, 2013, 06:51:27 am
I used trial and error and watched the curve change.

A better way would be to use Least Squares method or something to do this completely automatically. I'm sure excel could do it, but my excel programming skills are unfortunately not the best.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2013, 09:31:53 am
I used an IR thermometer to plot the difference between it an the E4 in an excel sheet. Then I used this forumula:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)
to calculate raw pixel values from E4 temperature values. From those pixel values ...

for information
you can simply grep RAW and convert values to temperature with IM convert

convert image to excel readable txt file
Code: [Select]
$ convert.exe 1.tiff -compress none 1.pgm

//open 1.pgm as text file
P2
160 120
65535
12894 12933 12933 12932 12983 12955 12919 12951 13023 13072 13130 13115 13143  || 13 values
13190 13372 13460 13484 13417 13374 13295 13211 13181 13101 13064 13030 13057
12996 12957 12953 12970 12970 12943 12959 12949 12956 12937 12950 12910 12916
12972 12996 13013 13084 13193 13251 13226 13109 13223 13280 13205 13132 13082

grep a single pixel 1x1 (see file above)
Code: [Select]
$ convert.exe 1.tiff -crop 1x1+39+0 -colorspace gray -format "%[mean]" info:
12972

$ convert.exe 1.tiff -crop 1x1+39+0 -colorspace gray -format "%[fx:mean*65535]" info:
12972

convert.exe 1.tiff -crop 1x1+0+0 -format "%[fx:round(65535*u.r)]" info:
12894

convert.exe 1.tiff -crop 1x1+13+0 -format "%[fx:round(65535*u.r)]" info:
13190

convert.exe 1.tiff -crop 1x1+26+0 -format "%[fx:round(65535*u.r)]" info:
12996

convert.exe 1.tiff -crop 1x1+39+0 -format "%[fx:round(65535*u.r)]" info:
12972

instead "1x1" use an area and replace "fx:mean*65535" with the planck formula from here
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html?PHPSESSID=ar725b60rdjf7dt5gveljn9gk1#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html?PHPSESSID=ar725b60rdjf7dt5gveljn9gk1#msg23972)
and you get the real temperature from a fixed spot (need a tripod)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JSJFIN on December 19, 2013, 03:43:42 pm
Second camera:

Ordered 12 December 2013 from tester.co.uk received today.

Calibration 25 November 2013
Firmware 1.19.8

Hacking worked like a charm, thanks all who participated in the hack development!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on December 19, 2013, 07:15:41 pm
Here is the excel sheet I made for calculating new calibration parameters, if anyone wants to play around with it. (Sorry for using commercial software.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on December 19, 2013, 07:25:58 pm
Just bought one.
Model E4 1.1
Software 1.19.8
The hack is still working.

But I have issue with RNDIS on windows 8.1.

Do you know a way to make it work on Linux?

Answer for Linux (Work like a charms...):
With a static IP of 192.168.250.1 the camera was happy at 192.168.250.2, and would talk telnet/ftp/http.
login flir/3vlig
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on December 19, 2013, 08:26:15 pm
Here is the excel sheet I made for calculating new calibration parameters, if anyone wants to play around with it. (Sorry for using commercial software.)

Great, I have to take at look at it. Thank you for the effort
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 19, 2013, 09:24:25 pm
The LCD is protected behind a glass or high-strength composite shield.

I'm not going to go through the hassle of returning the entire unit unless the issue gets worse, nor will I open it up to massage the panel. I did consider that, but the protective cover got in the way. Complaining about it makes me feel a little better though. =)

Mike provided a "remove hacks" firmware option in the download, so it should be possible to restore it factory-fresh.
More like "factory crippled"!  :palm:
Hope you get your problem resolved!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2013, 09:34:07 pm
Here is the excel sheet I made for calculating new calibration parameters, if anyone wants to play around with it.
thanks, a nice proof of my reversed engineered formulas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 19, 2013, 10:51:38 pm
I rewrote Tomas123's flir.php for batch process and added some more functions. I will post new versions only here, as update.
You can find original Tomas123 flir.php here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

WINDOWS VERSION GUI  (No need PHP)

DOWNLOAD ----> http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip) (about 12MB - it contains utils)

(http://test.daves.cz/wrapper/screenshot1.jpg)

YOUTUBE VIDEO : Batch Flir Images Converter (https://www.youtube.com/watch?v=5WXZp4PCBgo#)

Now there is also editor - under hard development of course :)
(http://test.daves.cz/wrapper/screenshot2.jpg)

This is prerelease version for testing ! Let me know bugs and suggestions. Its under development.
It can do thermal fusion with thermal opacity:

(http://test.daves.cz/wrapper/screenshot3.jpg)

It can do nice reports and yet better Picture in Picture (full IR inside of full Real - not like Flir tools!):
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=77005;image)

There is also support for interiors
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79925;image)

DOWNLOAD ----> http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip) (about 12MB - it contains utils)



You can use run it also as PHP script by hand (located in UTILS directory)

What is new from original scritp ? You can use wildcards to make it batch:
Code: [Select]
>php flir.php -i FLIR00??.jpg --msx --pip
You can use some directories, like
Code: [Select]
>php flir.php -i ./in/FLIR00??.jpg -o ./out --msx --pip
Tshift shifts temperature (just numbers) and resize can interpolate output image.
Code: [Select]
>php flir.php -i FLIR0049.jpg --resize 200% --pip --msx --tshift 5
You can assing photos to GPS location via GPX file, LOGO support, new palette calculation
Code: [Select]
>php flir.php -i inputdir/FLIR0???.jpg -o outpurdir --gpx ../gpsdir/gpsfile.gpx --gshift +15 --msx --pip --rmin 10500 --logo sometextMy E4 did some huge time deviation (2 minutes in 1 hour), after freeze and reboot it returned to normal. Anyway, was very hard to remap to correct position. Seems deviation was not linear, it made gaps between some photos. Maybe time is software computed, only on reboot synched with RTC.

You can generate html REPORT, viewable in your internet browser, can be saved as PDF...
--report must be together with --pip and --msx otherwise images will be mising
Code: [Select]
>php flir.php -i ../in/FLIR016?.jpg -o ../out --msx --pip --report
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: flu5 on December 19, 2013, 11:01:45 pm
Where can one find the latest and greatest .zip file for the image resolution enhancement?

Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 19, 2013, 11:06:09 pm
Where can one find the latest and greatest .zip file for the image resolution enhancement?

Thank you.
Link to most current stuff is maintained at start of thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on December 20, 2013, 12:30:54 am
Hi,

I have the feeling that we can make the JPG image bigger (320x200 is quite small). Without extra resolution but with more interpolation.

These commands (terminal) might help
rls image
rls image.services.store
rset ...

Any idea of how to configure it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on December 20, 2013, 12:59:02 am
Anybody else using FLIR Tools for Mac? I can't connect to my camera after the Menu hack, on windows works fine.

It is always listed as "Flir Ex-series" regardless of USB mode
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 20, 2013, 02:00:10 am
I can't connect to my camera after the Menu hack, on windows works fine.
By which you mean to say "On Mac I cannot connect to my camera before the menu hack either"?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on December 20, 2013, 03:40:17 am
mmm not really, sorry I don't know if I made a language mistake on that statement.

I mean that before the menu hack I was able to establish a connection between FLIR tools and my E4+, after the hack I can't.
On the other hand on Windows I have no problem, and is listed as "Flir USB video"

The question is, someone else is facing the same problem?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 20, 2013, 05:17:24 am

I looked at the Flir E4 manual and it refers the user to the CD for specs  :o A bit odd I thought. The E4 brochure is even more evasive on the topic. It states an accuracy of  +-2% and a temp range of -20C to +250C  with no caveats. Naughty.
The marketing boys have had a lot of input to the documentation me thinks !

Flir had a Thermal Imaging webinar today sponsored by EC&M.  I posted a question regarding this matter "specs being misleading'.... Of course they ignored the question.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 20, 2013, 06:53:59 am
The question is, someone else is facing the same problem?

Did you play with new USB menu ? Need to set first option, otherwise you can not connect as mass storage.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 20, 2013, 09:04:42 am
The question is, someone else is facing the same problem?

Did you play with new USB menu ? Need to set first option, otherwise you can not connect as mass storage.
I agree - most likely still set to one of the "other" USB modes - bad setting, only relation to menu hack is that the USB mode got changed (by the owner) to apply the hack - guess why "advanced" users recommendation :)
(I know my scale for "advanced" is set pretty low here  ::))
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mjl on December 20, 2013, 10:56:49 am
mmm not really, sorry I don't know if I made a language mistake on that statement.

I mean that before the menu hack I was able to establish a connection between FLIR tools and my E4+, after the hack I can't.
On the other hand on Windows I have no problem, and is listed as "Flir USB video"

The question is, someone else is facing the same problem?
Yes, me. I only recently (i.e. post-hack) tried using FLIR tools on my mac and it doesn't see my E4+ (on my work Windows laptop it works fine).

BTW: it shows up as a mass storage device in Finder so I can get at the images that way, but not in FLIR tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 20, 2013, 11:47:45 am
I rewrote flir.php for batch process. Dirty quick night job, so I did not tested it too much. Working for me under windows.
Code: [Select]
>php flir.php -i FLIR006?.jpg --msx --pip

my php doesn't accept the pathinfo function
Code: [Select]
>php -v
PHP 5.3.24 (cli) (built: Apr 10 2013 18:32:42)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2013 Zend Technologies

>php flir.php
Parse error: syntax error, unexpected '[' in E:\temp\Flir\FLIR_E4 - Kopie\flir.php on line 102

I don't understand the part
Code: [Select]
@pathinfo($options['o'])['extension']after reading
http://php.net/manual/en/function.pathinfo.php (http://php.net/manual/en/function.pathinfo.php)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 20, 2013, 12:06:45 pm
mmm not really, sorry I don't know if I made a language mistake on that statement.

I mean that before the menu hack I was able to establish a connection between FLIR tools and my E4+, after the hack I can't.
On the other hand on Windows I have no problem, and is listed as "Flir USB video"

The question is, someone else is facing the same problem?
Yes, me. I only recently (i.e. post-hack) tried using FLIR tools on my mac and it doesn't see my E4+ (on my work Windows laptop it works fine).

BTW: it shows up as a mass storage device in Finder so I can get at the images that way, but not in FLIR tools.

What USB mode is it set to?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on December 20, 2013, 12:44:18 pm
Suggestion if you cannot access your camera (and you have enabled RNDIS mode)

Use a USB Linux (life linux)

Set a static IP to 192.168.250.1 for the cam interface (top right).

You can connect your camera on 192.168.250.2.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 20, 2013, 12:46:45 pm
a untouched brand new Flir E4 has USB modus
Code: [Select]
UVC and MSD
... checked with hidden (usb) menu
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg334290/#msg334290 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg334290/#msg334290)
Quote
secret menu - hold <right> down for 10 secs in the Camera Information menu



What is usbforcefs [0, 3] ? ( USB force filesystem)
Code: [Select]
rls -r -l .system
r---r---r----- 0 root   root   <a> usbconn                "high480"
rw--rw--r----p*0 root   root   <i> usbforcefs                     0
                 [0, 3]
rw--r---r---1p 2 root   root   <a> usbmode                  "RNDIS"
                 ["RNDIS" "MSD" "UVC" "RNDIS_UVC" "RNDIS_MSD" "UVC_MSD" "RNDIS_UVC_MSD"]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on December 20, 2013, 01:56:21 pm
Quote
Yes, me. I only recently (i.e. post-hack) tried using FLIR tools on my mac and it doesn't see my E4+ (on my work Windows laptop it works fine).

BTW: it shows up as a mass storage device in Finder so I can get at the images that way, but not in FLIR tools.

Exactly, I can import as a mass storage too. Did you notice that even if you eject properly the memory it mounts again instantly?
BTW Finder is the explorer of windows

Quote
I agree - most likely still set to one of the "other" USB modes - bad setting, only relation to menu hack is that the USB mode got changed (by the owner) to apply the hack - guess why "advanced" users recommendation :)
Yes :D, In my first post I said that I even tried all the usb modes in case I was making bad assumptions.


Quote
a untouched brand new Flir E4 has USB modus
Code: [Select]
UVC and MSD

Yep, this was my first try, It was in that mode before I made the Menu hack, so it was obvious.


I think mac drivers are the problem, not the camera as is working on windows.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 20, 2013, 02:11:36 pm
I don't understand the part
Code: [Select]
@pathinfo($options['o'])['extension']

Sorry, that is PHP>5.4 syntax. I noticed it today morning. Please see the post for update version. Tested on 5.3.13
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 20, 2013, 04:26:31 pm
now it works fine

I like the white frame around the scale :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 20, 2013, 05:46:53 pm
Quote
I agree - most likely still set to one of the "other" USB modes - bad setting, only relation to menu hack is that the USB mode got changed (by the owner) to apply the hack - guess why "advanced" users recommendation :)
Yes :D, In my first post I said that I even tried all the usb modes in case I was making bad assumptions.
Well, then "un-hack" the camera and compare ;)
Maybe also worth a try: remove battery from camera (cold boot it) after changing USB mode!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on December 20, 2013, 07:23:07 pm
Quote
I agree - most likely still set to one of the "other" USB modes - bad setting, only relation to menu hack is that the USB mode got changed (by the owner) to apply the hack - guess why "advanced" users recommendation :)
Yes :D, In my first post I said that I even tried all the usb modes in case I was making bad assumptions.
Well, then "un-hack" the camera and compare ;)
Maybe also worth a try: remove battery from camera (cold boot it) after changing USB mode!

Even with cold boot it doesn't work, in reality is not a big issue with all the new functionality this is irrelevant, and at least one person has the same problem

I think this issue is important only for the record, thanks again to Mike and Taucher
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 20, 2013, 07:34:18 pm
Quote
I agree - most likely still set to one of the "other" USB modes - bad setting, only relation to menu hack is that the USB mode got changed (by the owner) to apply the hack - guess why "advanced" users recommendation :)
Yes :D, In my first post I said that I even tried all the usb modes in case I was making bad assumptions.
Well, then "un-hack" the camera and compare ;)
Maybe also worth a try: remove battery from camera (cold boot it) after changing USB mode!
Remember that the off button only goes to standby (unless pressed for a long time), so any brokenness that was there before will probably still be there when it wakes (if not more so).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 20, 2013, 08:34:20 pm
My FLIR Ex series external charging pod arrived today.

I have taken it apart to establish the quality of the design.

The rubber coated case is held together with a single screw under the ID label at the bottom of the charger. The base is a combination of metal and rubber to provide weight.  Construction is good and looks like it will last. The soldering is not the best I have seen and the excess flux has not been removed from the manually soldered micro USB connector. The unit is made in Malaysia.

I can advise that it is a standard 3 contact (NTC) Li-Ion charger design as will be seen below:

The main components contained within the charger are as follows (along with the common ID where known)

1. 1L4001  =  Linear LTC4001 Battery management IC. 2A charger with Timer & NTC sense input.
2. MNAB ZC5 = T.I. LMC555 - Yes the venerable 555 (CMOS version).
3. UL46 = USBLC6-4 TVS diode array for USB2.
4. PZ = Not known but possibly BZB84-B33 Zener diodes
5. G3A = Diode

The data sheet for the charge manager (LTC4001) is attached. This details all that is needed to build your own charger, or to understand the FLIR design. The battery contains only an NTC thermistor of value 10K Ohms. No other 'management' is contained in the battery pack. Update: It will have a protection circuit for the cell though.

The input connector for power is the same awful micro USB type as on the Ex, but at least it does not need to be unplugged often. A micro USB car charger may be used to produce a car charging pod for those on the move. The LTC4001 is tolerant of current limited power supplies.

For those wondering, the 555 timer just provides the low frequency drive to make the blue LEDs flash during charging.

Note the charging contacts. They look like they belong on a Canon Li-Ion battery charger. It may be possible to convert such a charger with relative ease but it may need its protection timer adjusted to take account of the Ex battery capacity.

FLIR are asking US$125 for this charge pod.....is it worth that much ? you decide.
I can buy modern new OEM Canon Li-Ion chargers for a fraction of that price.

Correction: It appears that the metal piece in the base of the charger is in fact a heat dissipator plate as it is sinking heat from the LTC4001 via the PCB ground-plane. Not the most efficient design but it does not get very warm so appears adequate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 20, 2013, 09:40:45 pm
I like the white frame around the scale :)

I am happy you like it. I just added DateTimeOriginal and CreateDate tags, which were empty on output file.
I also added GPS file support, to find location and fill GPS tags.

Code: [Select]
>php flir.php -i FLIR0038.jpg --gpx gps.gpx
GPS file readed, 1813 positions : 1813 times
=============================================================
Reading file: FLIR0038.jpg
Looking for GPS position...  FOUND 99.991694833333 : 99.811216666667

I need to test it more, before I will release update to my original post.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Shimalith on December 21, 2013, 04:58:47 am
Folks

Hi, I'm new member from Japan and a i3 user.
Thanks a lot of your geek activity, I'm enjoying TIC mod life, too!
So I'm going to feedback something..

1)Any ID/pass combination are available for FTP.
Not only flir/3vlig for ftp log in.

2)The i3 has a hardware reset button.
Left of the Li-ion battery connector.
This button functions equal to "Battery remove & connect again".

3)My i3 is now 240x240 of resolution!! ;)
That is "over-i7" monster.
i9? :-DD
Following picture is a comparison that i7 mod vs 240pix with same distance.
Now I got more broader FOV.

To mod:
 a) Upgrade to i7 with Erik's https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174)
 b) Edit conf.cfg file for service mode (FlashFS\system\service\appcore.d\config.d\)
  ".caps.config.image.settings.resIR int32 144" to ".caps.config.image.settings.resIR int32 240"
  ".caps.config.image.settings.fpgaResolution.resIR int32 144" to ".caps.config.image.settings.fpgaResolution.resIR int32 240"
  then Filestamp, adding CRC, Filestamp, and FTP.
 c) Connect i3 to your PC with RNDIS mode and activate the service mode.
 d) 2hrs after power off, "i9" will back i7 resolution.
Maybe "resIR" stands for "resolution of IR image"..

Issue1:
At the moment, this config cannot apply with normal mode.
Service mode might have less secure config checking system than normal mode.
Issue2:
"CSV output" resolution from FLIR Tools, now 120x120 at service mode, , another tricks?

Cheers,
Shimalith
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 21, 2013, 06:00:54 am
My FLIR Ex series external charging pod arrived today.

I have taken it apart to establish the quality of the design.

Thanks for the detailed pictures. :)

Quote
FLIR are asking US$125 for this charge pod.....is it worth that much ? you decide.
It looks nicely built, but not $125 nice ... so no. But at least this would be worth more than 2.5X the relative value of that "Flir" usb cable to me.  ;D So I would pay 2.5 times the real cost of a usb cable for this charger. :) Hell, I'd even pay 5x the real cost of a usb cable for this charger.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 21, 2013, 08:31:51 am
Thank You Aurora for the circuit detail, your observations of the build quality and the pictures.
NO I would NOT pay 125 for that!!!  I (and anyone else) could probably get samples of the charge controller and skip the mono for a lamp flasher....
Just getting/making a connector for the battery would be a fun challenge... I'm going to give it a whirl!

That is kind of typical of buying a manufacturers accessory though... the markup is ridiculous!  And the awful micro usb connector... fail on Flir's part.. otherwise I am enjoying my E4 (8+)!
Thanks Mike and Thatcher!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 21, 2013, 12:26:29 pm
Note the charging contacts. They look like they belong on a Canon Li-Ion battery charger. It may be possible to convert such a charger with relative ease but it may need its protection timer adjusted to take account of the Ex battery capacity.
The 3-contact arrangement is also pretty common on mobile phones. You can find chargers for those on eBay pretty easily. (http://www.ebay.com/itm/Mobile-Phone-Battery-Charger-Nokia-BL-6P-6500C-7900-/320894047667?forcev4exp=true)

No that is not worth $125... maybe $20.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 21, 2013, 02:07:59 pm
3)My i3 is now 240x240 of resolution!!

Are you sure?

Your sample image has "only" 120x120 pixel (thermal) resolution resized to 240x240 jpg
Code: [Select]
$ exiftool -flir:all IR_0005.jpg
...
Camera Model                    : FLIR_i9
...
Raw Thermal Image Width         : 120
Raw Thermal Image Height        : 120
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 16029 bytes, use -b option to extract)
I can't find differences to a Flir i7 sample from this website http://www.nuage.ch/site/flir-i7-some-analysis/ (http://www.nuage.ch/site/flir-i7-some-analysis/)
other the entry FLIR_i9  :-+

please take an 240x240 image in service mode 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 21, 2013, 08:31:01 pm
High resolution image hunters... go through the history of this forum to find Tomas123 post about image stitching.

Result is awesome. I just tried.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on December 21, 2013, 10:10:42 pm
Quote
My i3 is now 240x240 of resolution!! ;)
That is "over-i7" monster.
i9? :-DD
Following picture is a comparison that i7 mod vs 240pix with same distance.
Now I got more broader FOV.

To mod:
 a) Upgrade to i7 with Erik's https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174)
 b) Edit conf.cfg file for service mode (FlashFS\system\service\appcore.d\config.d\)
  ".caps.config.image.settings.resIR int32 144" to ".caps.config.image.settings.resIR int32 240"
  ".caps.config.image.settings.fpgaResolution.resIR int32 144" to ".caps.config.image.settings.fpgaResolution.resIR int32 240"
  then Filestamp, adding CRC, Filestamp, and FTP.
 c) Connect i3 to your PC with RNDIS mode and activate the service mode.
 d) 2hrs after power off, "i9" will back i7 resolution.
Maybe "resIR" stands for "resolution of IR image"..

Cheers,
Shimalith

Well I tried your guide above with my i3, but without luck.  :o
In Windows the flir images (jpg's) is always shown as 240x240 pixels pictures even with normal i3 settings (60x60), but the actual thermal image is only 60x60 or 120x120 when "upgraded/hacked" to i7 specs.

Well, I just received my new Flir E4 today!  :D

Version E4 1.1
Firmware 1.19.8
Calibrated november 28, 2013

I have already upgraded it to "E8" 320x240  :-+

Thank you all for making it possible  :clap:

Cheers
Erik
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 21, 2013, 11:41:48 pm
I found out about this site from toolguyd.com. The site blogger posted about the findings from this thread, and I couldn't help but order one. I ordered from Amazon and it was fulfilled by Test Equipment Depot.

I'm excited to try the mod, but I wanted to check for dead pixels etc first. I actually think I received a unit with a perfect screen, but with a "dead" infrared pixel? It's quite possible that I'm wrong, but there is a spot near the center that doesn't ever change in its temperature value. No matter where I point the camera, this spot will remain constant. Is there something simple I'm missing like a reset or diagnostic test I could do? I will post pictures when I get the chance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 21, 2013, 11:48:03 pm
@daves
we are a great team

Which procedure do you have selected?
The image is a stitched msx panorama and not a Flir radiometric image (set measured points in Flir Tools)

Some time ago I played around with freeware hugin.
With minor changes in the flir.php script you can save real and thermal image as two images with the same pixel size  and the same field of view.
Now you can stitch the real images with Hugin and save the *.pto project file.
In the next step load the thermal images and use the *.pto with the real image control points for stitching.
After then you have a real and a thermal panorama with the same field of view (make a MSX etc).
This method with hugin is great for thermal images with minor difference in temperature

go through the history of this forum to find Tomas123 post about image stitching.
the link: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715)
Title: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 21, 2013, 11:49:09 pm
These pictures were taken while moving the camera and with the lens closed. I forgot to save the picture and check to see if it showed up in the jpg too. Will investigate that next.

Any thoughts or advice is welcome!

So excited to get an e4(8), but I'd rather sort this out first before potentially voiding any warranties. 

(http://img.tapatalk.com/d/13/12/22/u5y8apug.jpg)(http://img.tapatalk.com/d/13/12/22/mejysaba.jpg)(http://img.tapatalk.com/d/13/12/22/ebuhe3et.jpg)(http://img.tapatalk.com/d/13/12/22/u2udedub.jpg)



Sent from my iPhone using Tapatalk (http://tapatalk.com/m?id=1) 2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on December 21, 2013, 11:55:34 pm

I dont think that's a single pixel, it seems more like dust.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 22, 2013, 12:01:30 am
i tried using a can of air to no avail. I only thought it was a defective sensor pixel since it doesnt move from its location on the screen at all. Also, the way the camera seems to render its temperature readings, it isnt blocky like a pixel array, more like it went through a smoothing filter.

Thanks again for any thoughts!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 22, 2013, 12:03:42 am
@david7586
disappears the hot spot after a NUC?

It makes it very clear that the camera has a specified accuracy only above 0C. FLIR do not calibrate the E4 below 0C, as others have suggested.

I haven't seen in Mike's video (position 18:30) a temperature sensor on the shutter.
The cam make repeatedly a NUC (Non uniformity correction).
The manual says: "Calculates a new image offset map. The map is made with the camera looking at an internal shutter. The command can to take up to 10 seconds."

With known temperature of a cold shutter would low temperature images are self calibrated. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 22, 2013, 12:07:26 am
dust on image see here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66900;image)

and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 22, 2013, 12:19:07 am
thank you tomas it looks like it's definitely dust. I would rather not potentially void my warranty. I guess I have to speak to the seller. Fortunately, they live close by and I could actually visit them when they're open on Monday.

Thanks everyone for the help!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 22, 2013, 12:31:16 am
@admin
We have only two threads for flir e4. (hacking, hardware, software)

Nobody finds an information here (print preview died at post 2000).
Earlier we have had some discussion about a Wiki etc.
Has anybody a good idea how we can continue with work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 22, 2013, 12:49:52 am
thank you tomas it looks like it's definitely dust. I would rather not potentially void my warranty. I guess I have to speak to the seller, which in this case is TEquipment. Fortunately, they live close by and I could actually visit them when they're open on Monday.

Thanks everyone for the help!

TEquipment.NET has a physical store?
Title: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 22, 2013, 12:51:24 am
Oops! I've been referring TEquipment as the place where I bought the E4 from, but it was infact Test Equipment Depot. I'm sorry for any confusion this may have caused to TEquipment if they read my posts before I removed all mention of their name. I apologize  :(


Sent from my iPhone using Tapatalk (http://tapatalk.com/m?id=1) 2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on December 22, 2013, 02:25:45 am
We have an office.  We do get walk in traffic but its not a storefront.  We do thermal seminars on one of the conference rooms. 

We cant win them all.  ( but we would like too)

Cheers
Evan Cirelli

TEquipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on December 22, 2013, 07:44:30 am
We have an office.  We do get walk in traffic but its not a storefront.  We do thermal seminars on one of the conference rooms. 

We cant win them all.  ( but we would like too)

Cheers
Evan Cirelli

TEquipment.NET

Webinars would be nice..or you could even utube them . ( and yes Im a happy customer of yours)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IRspector on December 22, 2013, 09:20:32 am
Hi People!
How make  my FLIR E8+ working as the webcam in Skype?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 22, 2013, 10:26:22 am
Hi People!
How make  my FLIR E8+ working as the webcam in Skype?
Ensure it's in VC-mode and then select it at the Skype settings? (untested)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 22, 2013, 10:30:11 am
@daves
we are a great team
Well, I think we everyone here are great team. I like to share my work, as others shared their work.

I just changed original flir.php yet more. It is preserving create time from original images to output file. Also it can read GPS file and save coordinates to out file. It makes javascript file with data and then place photos on google map. More over it generates html report with real, ir and combined image on page. And last option I added is logo in image. All in automatic batch process. For easy start I plan to do exe wrapper with windows gui for runing flir.php. Wrapper for wrapper :-D

I do not know if anyone is interested in this functions. I do not want to mess this forum with new versions, so I will only update my original post with batch flir.php time by time.

Today, I was on another walk outside. Camera freezed two times, with some mess on screen. In both cases it freezed while saving picture. After restart it showed gray palette squares. In first case image was not saved and after restart it was ok. In second case image was saved, but ghost image of mess remained and combined with actual picture. I had to remove battery. Battery was charged. I guess there is some problem with low temperature or some possible condensation.

UPDATE: Seems also time is very unstable when cold, on 1 hour trip it shifted by 2 minutes and after freeze and reboot it went back to normal. This made GPS synchronization useless.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 22, 2013, 11:35:31 am
hi daves,

I'm very interested in your work and sticked your post to watch further changing (gpx, reports etc.)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

How do you stitched the panorama?

My "old" E40 freezes also sometimes (remove battery) until second firmware update. Now it works stable but not unwavering.



look at your color space sRGB/RGB for best palette colors

some background informations:

you can also open a *.pal and convert the values with excel etc. (stretch to 255,255,255)
Code: [Select]
[version]
name=Iron
major=1
minor=1
edit=1
date=07-Oct-2010
[noOfColors]
224
[stretch]
0
[method]
0
[specialColors]
# Values in Y Cr Cb order
# overflow, red
67, 216, 98
# underflow, blue
41, 110, 240
#above, light gray
170, 128, 128
#below, dark gray
50, 128, 128
# isotherm 1, gray
100, 128, 128
# isotherm 2, blue
100, 110, 240
[palette]
#palette (224 colors)
16,101,140
17,103,142
18,105,145
19,106,147
20,108,149
21,110,152
22,112,154
23,114,156
24,116,158
25,118,160
26,120,162
27,121,164
28,123,165
29,125,167
30,127,169
31,128,170
32,130,172
33,132,173
34,133,174
35,135,175
36,136,177
37,138,178
38,140,179
39,141,180
40,143,181
41,144,181
42,145,182
43,147,183
44,148,183
44,150,184
45,151,185
46,152,185
47,154,185
48,155,186
49,156,186
50,157,186
51,159,186
52,160,186
53,161,186
54,162,186
55,163,186
56,165,186
57,166,186
58,167,186
59,168,186
60,169,185
61,170,185
62,171,185
63,172,184
64,173,184
65,174,183
66,175,182
67,176,182
68,177,181
69,177,180
70,178,180
71,179,179
72,180,178
73,181,177
74,182,176
75,182,175
76,183,174
77,184,173
78,184,172
79,185,171
80,186,170
81,186,169
82,187,168
83,188,166
84,188,165
85,189,164
86,189,163
87,190,161
88,190,160
89,191,159
90,191,157
91,192,156
92,192,154
93,193,153
94,193,151
95,194,150
96,194,148
97,194,147
98,195,145
99,195,144
99,195,142
100,196,140
101,196,139
102,196,137
103,197,135
104,197,134
105,197,132
106,197,130
107,197,129
108,198,127
109,198,125
110,198,123
111,198,122
112,198,120
113,198,118
114,198,117
115,198,115
116,198,113
117,198,111
118,198,109
119,198,108
120,198,106
121,198,104
122,198,102
123,198,101
124,198,99
125,198,97
126,198,96
127,198,94
128,198,92
129,198,90
130,198,89
131,197,87
132,197,85
133,197,84
134,197,82
135,197,80
136,196,79
137,196,77
138,196,75
139,196,74
140,195,72
141,195,71
142,195,69
143,194,68
144,194,66
145,194,65
146,193,63
147,193,62
148,193,60
149,192,59
150,192,58
151,191,56
152,191,55
153,191,54
154,190,53
154,190,51
155,189,50
156,189,49
157,188,48
158,188,47
159,187,46
160,187,45
161,186,44
162,186,43
163,185,42
164,184,41
165,184,40
166,183,40
167,183,39
168,182,38
169,181,37
170,181,37
171,180,36
172,179,36
173,179,35
174,178,35
175,177,34
176,177,34
177,176,34
178,175,33
179,175,33
180,174,33
181,173,33
182,172,33
183,172,33
184,171,33
185,170,33
186,169,33
187,168,33
188,168,34
189,167,34
190,166,34
191,165,35
192,164,35
193,163,36
194,163,37
195,162,37
196,161,38
197,160,39
198,159,40
199,158,41
200,157,42
201,156,43
202,155,44
203,155,45
204,154,46
205,153,48
206,152,49
207,151,51
208,150,52
209,149,54
209,148,56
210,147,58
211,146,60
212,145,62
213,144,64
214,143,66
215,142,68
216,141,70
217,140,73
218,139,75
219,138,78
220,137,80
221,136,83
222,135,86
223,134,89
224,133,91
225,131,95
226,130,98
227,129,101
228,128,104
229,127,108
230,126,111
231,125,115
232,124,118
233,123,122
234,122,126
235,121,130

the converting of embedded palette with exiftool/convert goes from jpg(YCbCr) to RGB/sRGB
here is a sample with a rainbow palette

Code: [Select]
$ exiftool -Palette* FLIR0074.jpg
Palette Colors                  : 224
Palette Method                  : 0
Palette Stretch                 : 2
Palette File Name               : \FlashBFS\system\iron.pal
Palette Name                    : Iron
Palette                         : (Binary data 672 bytes, use -b option to extract)

$ exiftool -b -Palette FLIR0074.jpg | convert -size 224X1 -depth 8 YCbCr:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -compress none sRGB.ppm

//open sRGB.ppm in texteditor (RGB values)
P3         //see http://en.wikipedia.org/wiki/Portable_graymap
224 1     //224 pixel = colors
255
17 15 17  //first value: blue or gray
17 15 17
18 15 23
17 16 30
...
231 235 230
233 235 233
236 234 236  //last value

now convert the first value (dark blue:Y Cr Cb =25/122/159) with online color converter
http://www.picturetopeople.org/color_converter.html (http://www.picturetopeople.org/color_converter.html)
Code: [Select]
Input Color :  YCbCr = (235, 130, 121)
Output:
RGB = (244, 255, 255);
CMY = (11, 0, 0)

RGB = (244, 255, 255) is the correct white yellow from flirtools.

I have not found a better solution with imagemagick.

another sample for RGB
Code: [Select]
$ exiftool -b -Palette FLIR0074.jpg | convert -size 224X1 -depth 8 YCbCr:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace RGB -resize 448x30! RGB.pngresult:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=72748;image)

and sRGB
Code: [Select]
$ exiftool -b -Palette FLIR0074.jpg | convert -size 224X1 -depth 8 YCbCr:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -resize 448x30! sRGB.pngresult:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=72746;image)

here you see a screenshot from FlirTools GUI, resized to 448x30 (yellow goes to white)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=72752;image)

I have no idea how convert colors better


only for fun (swap channels)

Quote
$ echo -n ABCDEF | convert -size "2X1" -depth 8  ycbcr:- -separate -swap 1,2 -combine -set colorspace ycbcr  - | hexdump -C
00000000  41 43 42 44 46 45                                 |ACBDFE|
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 22, 2013, 01:04:56 pm
Hi People!
How make  my FLIR E8+ working as the webcam in Skype?
I knew someone was going to do this sooner or later... IR webcam chat! Show off how cool (or hot) you are to your friends! :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IRspector on December 22, 2013, 01:55:50 pm

Ensure it's in VC-mode and then select it at the Skype settings? (untested)

Certainly I tried to do so.  But when I select Flir  Ex series in Skype or WebcamMax - than program freezes and requires a restart  :-- Somebody had positive experience using Flir Ex as webacam?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 22, 2013, 02:37:13 pm
Somebody had positive experience using Flir Ex as webacam?
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IRspector on December 22, 2013, 02:59:57 pm
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.

OK. What software do you use for this purpose? I try 3 programs - Skype, WebacamMax and Movavi Video Suite. And install newest Flir Driver - But it  doesn't work :wtf:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 22, 2013, 03:30:04 pm
OK. What software do you use for this purpose? I try 3 programs - Skype, WebacamMax and Movavi Video Suite. And install newest Flir Driver - But it  doesn't work :wtf:
For viewing, recording and streaming I use mplayer, mencoder and ffmpeg+ffserver respectively.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uwe on December 22, 2013, 04:23:01 pm
And another one upgraded from E4 to E8. Many thanks to Mike  :clap:

For the records:

Version E4 1.1
Firmware 1.19.8
Calibrated 03.12.2013

:q! Uwe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myself on December 23, 2013, 03:03:24 am
Well, hello, megathread!

Purchased my E4 from flir-direct.com on 2013-12-11, they shipped on the 12th, it arrived on my doorstep on the 16th, but I wasn't home, picked it up from the UPS depot on the 17th.

E4 1.1
Serial 639085xx
Software 1.19.8
Manufacture/calibration date 2013-11-28.

Got mine in the $995 bundle including the Reed tachometer, which is cheaply built for its suggested retail price, but seems to work and makes a nice addition to the lab. :)

Hack was easier than I expected, I came in over RNDIS and skipped all the .cmd and .fif stuff, just dropped the crc'd e8.cfg into config.d and rebooted, et voila! I then immediately lost USB connection (windows "device has malfunctioned" error) and nearly soiled myself with dread.  :-BROKE Nope, my USB cable was just on the brink! Grabbed a better cable and it's been smooth sailing ever since.

Haven't even done the menus yet. Been having too much fun taking pictures of kilns, watching board temperatures during soldering, and diagnosing 3D printer heat-bed problems.  :-+

Q: What do you call a thermal infrared sensor who's totally harshing your mellow?
A: Na hapbby zvpebobybzrgre.
(That's rot13, in case you're new to the internet.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myself on December 23, 2013, 06:11:06 am
I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
When the E4 is busy charging you press the LEFT button and the RIGHT button at the same time for a while.

Edit: to clarify, the camera should be attached to usb or charger (obviously) and powered down.

Not sure if anyone's still interested, but I just checked using an HP 6220B, and I'm seeing a curious discrepancy: The HP supply shows almost exactly 300mA being drawn (maybe 310) over the USB connection, but the E4 reports 496mA on that screen. I wonder if it might have a buck converter in there? I haven't gone in to measure the actual battery current.

(I've got banana leads connected to a USB jack, with the data pins shorted. Ran the camera down to about 20% before starting this.)

After throwing another ammeter inline on the supply, the HP reports 195mA, the inline 327mA, and the E4 170mA. I suspect that voltage drop in the longer leads may be coming into play...

Well, sorta! I upped the voltage a bit to compensate for that (back from 4.6 to 4.9 at the terminals) and charging current *dropped*.

...tf? I've decided I don't care that much!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on December 23, 2013, 06:15:27 am
After throwing another ammeter inline on the supply, the HP reports 195mA, the inline 327mA
Have you calibrated the ammeters? Because I have a hard time believing you've broken Kirchhoff's current law...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 23, 2013, 07:04:24 am
After throwing another ammeter inline on the supply, the HP reports 195mA, the inline 327mA, and the E4 170mA. I suspect that voltage drop in the longer leads may be coming into play...
If your HP supply says outgoing current is 195 mA and your other meter says it's 327 mA then this measurement is a wee bit suspect. What the E4 says at that point is irrelevant because the logic chain already went tits up way before we even got to the E4. Anyways, the E4 indicating a current higher than the current drawn over USB is not that strange. I don't know, but I would expect the E4 to monitor the actual current flowing into the battery (single cell Li-Ion right?) because that is what matter for making sure the battery lives a long happy life, and also doesn't blow up in your face or burns the house down. Like the charger pod Aurora took apart (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350952/#msg350952) the E4 could have an LTC4001 or something similar in there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 23, 2013, 09:36:53 am
I have no idea how convert colors better
An alternative is to read the YUV values from the .pal file, and then use your own function to do the conversion. I use a slightly modified version of the yuv2rgb method in this stackoverflow page (http://stackoverflow.com/questions/7041172/pils-colour-space-conversion-ycbcr-rgb) to do just that. Should be easy enough to port to php for inclusion in your tool.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 23, 2013, 10:03:48 am
I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
When the E4 is busy charging you press the LEFT button and the RIGHT button at the same time for a while.

Edit: to clarify, the camera should be attached to usb or charger (obviously) and powered down.

Not sure if anyone's still interested, but I just checked using an HP 6220B, and I'm seeing a curious discrepancy: The HP supply shows almost exactly 300mA being drawn (maybe 310) over the USB connection, but the E4 reports 496mA on that screen. I wonder if it might have a buck converter in there?
Easy enough to  test - just adjust the PSU  voltage & see if current increases as voltage drops
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 23, 2013, 02:59:16 pm
An alternative is to read the YUV values from the .pal file, and then use your own function to do the conversion.
I will try to implement it.

UPDATE... I DID. I used formulas from Wiki. Result is pretty same as IM. See. I will try to play with it.

Code: [Select]
Y:16 Cr:128 Cb:128 = R:0 G:0 B:0
Y:17 Cr:128 Cb:131 = R:1 G:-0 B:7
Y:18 Cr:127 Cb:134 = R:1 G:1 B:14
Y:19 Cr:126 Cb:137 = R:0 G:2 B:22
Y:20 Cr:126 Cb:142 = R:1 G:1 B:33
Y:21 Cr:125 Cb:148 = R:1 G:0 B:46
Y:22 Cr:124 Cb:154 = R:1 G:0 B:59
Y:23 Cr:123 Cb:156 = R:0 G:1 B:65
Y:24 Cr:122 Cb:158 = R:-0 G:2 B:70
Y:25 Cr:121 Cb:160 = R:0 G:4 B:75
Y:26 Cr:120 Cb:162 = R:0 G:5 B:80
Y:27 Cr:121 Cb:164 = R:2 G:4 B:85
Y:28 Cr:123 Cb:165 = R:6 G:4 B:89
Y:29 Cr:125 Cb:167 = R:10 G:2 B:94
Y:30 Cr:127 Cb:169 = R:15 G:1 B:99
Y:31 Cr:128 Cb:170 = R:17 G:1 B:102
Y:32 Cr:130 Cb:172 = R:22 G:-0 B:107
Y:33 Cr:132 Cb:173 = R:26 G:0 B:111
Y:34 Cr:133 Cb:174 = R:29 G:0 B:114
Y:35 Cr:135 Cb:175 = R:33 G:0 B:117
Y:36 Cr:136 Cb:177 = R:36 G:0 B:122
Y:37 Cr:138 Cb:178 = R:40 G:0 B:125
Y:38 Cr:140 Cb:179 = R:45 G:0 B:128
Y:39 Cr:141 Cb:180 = R:48 G:0 B:132
Y:40 Cr:143 Cb:181 = R:52 G:0 B:135
Y:41 Cr:144 Cb:181 = R:55 G:0 B:136
Y:42 Cr:145 Cb:182 = R:57 G:0 B:139
Y:43 Cr:147 Cb:183 = R:62 G:0 B:142
Y:44 Cr:148 Cb:183 = R:65 G:0 B:144
Y:44 Cr:150 Cb:184 = R:68 G:0 B:146
Y:45 Cr:151 Cb:185 = R:70 G:0 B:149
Y:46 Cr:152 Cb:185 = R:73 G:0 B:150
Y:47 Cr:154 Cb:185 = R:78 G:0 B:151
Y:48 Cr:155 Cb:186 = R:80 G:0 B:154
Y:49 Cr:156 Cb:186 = R:83 G:0 B:155
Y:50 Cr:157 Cb:186 = R:86 G:0 B:157
Y:51 Cr:159 Cb:186 = R:90 G:0 B:158
Y:52 Cr:160 Cb:186 = R:93 G:0 B:159
Y:53 Cr:161 Cb:186 = R:96 G:0 B:160
Y:54 Cr:162 Cb:186 = R:99 G:0 B:161
Y:55 Cr:163 Cb:186 = R:101 G:0 B:162
Y:56 Cr:165 Cb:186 = R:106 G:0 B:164
Y:57 Cr:166 Cb:186 = R:108 G:0 B:165
Y:58 Cr:167 Cb:186 = R:111 G:0 B:166
Y:59 Cr:168 Cb:186 = R:114 G:0 B:167
Y:60 Cr:169 Cb:185 = R:117 G:0 B:166
Y:61 Cr:170 Cb:185 = R:119 G:0 B:167
Y:62 Cr:171 Cb:185 = R:122 G:0 B:169
Y:63 Cr:172 Cb:184 = R:125 G:0 B:168
Y:64 Cr:173 Cb:184 = R:128 G:0 B:169
Y:65 Cr:174 Cb:183 = R:130 G:0 B:168
Y:66 Cr:175 Cb:182 = R:133 G:0 B:167
Y:67 Cr:176 Cb:182 = R:136 G:0 B:168
Y:68 Cr:177 Cb:181 = R:139 G:-0 B:167
Y:69 Cr:177 Cb:180 = R:140 G:2 B:167
Y:70 Cr:178 Cb:180 = R:143 G:2 B:168
Y:71 Cr:179 Cb:179 = R:145 G:3 B:167
Y:72 Cr:180 Cb:178 = R:148 G:3 B:166
Y:73 Cr:181 Cb:177 = R:151 G:4 B:165
Y:74 Cr:182 Cb:176 = R:154 G:5 B:164
Y:75 Cr:182 Cb:175 = R:155 G:6 B:164
Y:76 Cr:183 Cb:174 = R:158 G:7 B:163
Y:77 Cr:184 Cb:173 = R:160 G:8 B:162
Y:78 Cr:184 Cb:172 = R:162 G:9 B:161
Y:79 Cr:185 Cb:171 = R:164 G:10 B:160
Y:80 Cr:186 Cb:170 = R:167 G:11 B:159
Y:81 Cr:186 Cb:169 = R:168 G:12 B:158
Y:82 Cr:187 Cb:168 = R:171 G:13 B:158
Y:83 Cr:188 Cb:166 = R:174 G:14 B:155
Y:84 Cr:188 Cb:165 = R:175 G:16 B:154
Y:85 Cr:189 Cb:164 = R:178 G:17 B:153
Y:86 Cr:189 Cb:163 = R:179 G:18 B:152
Y:87 Cr:190 Cb:161 = R:182 G:19 B:149
Y:88 Cr:190 Cb:160 = R:183 G:21 B:148
Y:89 Cr:191 Cb:159 = R:186 G:22 B:148
Y:90 Cr:191 Cb:157 = R:187 G:24 B:145
Y:91 Cr:192 Cb:156 = R:189 G:24 B:144
Y:92 Cr:192 Cb:154 = R:191 G:26 B:141
Y:93 Cr:193 Cb:153 = R:193 G:27 B:140
Y:94 Cr:193 Cb:151 = R:195 G:29 B:137
Y:95 Cr:194 Cb:150 = R:197 G:30 B:136
Y:96 Cr:194 Cb:148 = R:198 G:32 B:133
Y:97 Cr:194 Cb:147 = R:200 G:33 B:133
Y:98 Cr:195 Cb:145 = R:202 G:34 B:130
Y:99 Cr:195 Cb:144 = R:204 G:36 B:129
Y:99 Cr:195 Cb:142 = R:204 G:37 B:125
Y:100 Cr:196 Cb:140 = R:206 G:38 B:122
Y:101 Cr:196 Cb:139 = R:208 G:39 B:121
Y:102 Cr:196 Cb:137 = R:209 G:41 B:118
Y:103 Cr:197 Cb:135 = R:211 G:42 B:115
Y:104 Cr:197 Cb:134 = R:213 G:44 B:115
Y:105 Cr:197 Cb:132 = R:214 G:46 B:112
Y:106 Cr:197 Cb:130 = R:215 G:48 B:109
Y:107 Cr:197 Cb:129 = R:216 G:49 B:108
Y:108 Cr:198 Cb:127 = R:219 G:51 B:105
Y:109 Cr:198 Cb:125 = R:220 G:53 B:102
Y:110 Cr:198 Cb:123 = R:221 G:55 B:99
Y:111 Cr:198 Cb:122 = R:222 G:56 B:99
Y:112 Cr:198 Cb:120 = R:224 G:58 B:96
Y:113 Cr:198 Cb:118 = R:225 G:60 B:93
Y:114 Cr:198 Cb:117 = R:226 G:62 B:92
Y:115 Cr:198 Cb:115 = R:227 G:63 B:89
Y:116 Cr:198 Cb:113 = R:228 G:65 B:86
Y:117 Cr:198 Cb:111 = R:229 G:67 B:83
Y:118 Cr:198 Cb:109 = R:230 G:69 B:80
Y:119 Cr:198 Cb:108 = R:232 G:71 B:80
Y:120 Cr:198 Cb:106 = R:233 G:73 B:77
Y:121 Cr:198 Cb:104 = R:234 G:75 B:74
Y:122 Cr:198 Cb:102 = R:235 G:77 B:71
Y:123 Cr:198 Cb:101 = R:236 G:78 B:70
Y:124 Cr:198 Cb:99 = R:237 G:80 B:67
Y:125 Cr:198 Cb:97 = R:239 G:82 B:64
Y:126 Cr:198 Cb:96 = R:240 G:84 B:64
Y:127 Cr:198 Cb:94 = R:241 G:86 B:61
Y:128 Cr:198 Cb:92 = R:242 G:88 B:58
Y:129 Cr:198 Cb:90 = R:243 G:90 B:55
Y:130 Cr:198 Cb:89 = R:244 G:91 B:54
Y:131 Cr:197 Cb:87 = R:244 G:94 B:51
Y:132 Cr:197 Cb:85 = R:245 G:96 B:48
Y:133 Cr:197 Cb:84 = R:246 G:97 B:47
Y:134 Cr:197 Cb:82 = R:248 G:99 B:45
Y:135 Cr:197 Cb:80 = R:249 G:101 B:42
Y:136 Cr:196 Cb:79 = R:248 G:104 B:41
Y:137 Cr:196 Cb:77 = R:249 G:106 B:38
Y:138 Cr:196 Cb:75 = R:251 G:108 B:35
Y:139 Cr:196 Cb:74 = R:252 G:109 B:34
Y:140 Cr:195 Cb:72 = R:251 G:112 B:31
Y:141 Cr:195 Cb:71 = R:252 G:113 B:31
Y:142 Cr:195 Cb:69 = R:254 G:115 B:28
Y:143 Cr:194 Cb:68 = R:253 G:118 B:27
Y:144 Cr:194 Cb:66 = R:254 G:120 B:24
Y:145 Cr:194 Cb:65 = R:255 G:121 B:23
Y:146 Cr:193 Cb:63 = R:255 G:124 B:20
Y:147 Cr:193 Cb:62 = R:255 G:126 B:19
Y:148 Cr:193 Cb:60 = R:255 G:127 B:17
Y:149 Cr:192 Cb:59 = R:255 G:130 B:16
Y:150 Cr:192 Cb:58 = R:255 G:131 B:15
Y:151 Cr:191 Cb:56 = R:255 G:134 B:12
Y:152 Cr:191 Cb:55 = R:255 G:136 B:11
Y:153 Cr:191 Cb:54 = R:255 G:137 B:10
Y:154 Cr:190 Cb:53 = R:255 G:140 B:9
Y:154 Cr:190 Cb:51 = R:255 G:140 B:5
Y:155 Cr:189 Cb:50 = R:255 G:143 B:5
Y:156 Cr:189 Cb:49 = R:255 G:144 B:4
Y:157 Cr:188 Cb:48 = R:255 G:147 B:3
Y:158 Cr:188 Cb:47 = R:255 G:148 B:2
Y:159 Cr:187 Cb:46 = R:255 G:151 B:1
Y:160 Cr:187 Cb:45 = R:255 G:152 B:0
Y:161 Cr:186 Cb:44 = R:255 G:155 B:0
Y:162 Cr:186 Cb:43 = R:255 G:156 B:0
Y:163 Cr:185 Cb:42 = R:255 G:159 B:0
Y:164 Cr:184 Cb:41 = R:255 G:161 B:0
Y:165 Cr:184 Cb:40 = R:255 G:162 B:0
Y:166 Cr:183 Cb:40 = R:255 G:164 B:0
Y:167 Cr:183 Cb:39 = R:255 G:166 B:0
Y:168 Cr:182 Cb:38 = R:255 G:168 B:0
Y:169 Cr:181 Cb:37 = R:255 G:171 B:0
Y:170 Cr:181 Cb:37 = R:255 G:172 B:0
Y:171 Cr:180 Cb:36 = R:255 G:174 B:0
Y:172 Cr:179 Cb:36 = R:255 G:176 B:0
Y:173 Cr:179 Cb:35 = R:255 G:178 B:0
Y:174 Cr:178 Cb:35 = R:255 G:180 B:0
Y:175 Cr:177 Cb:34 = R:255 G:182 B:0
Y:176 Cr:177 Cb:34 = R:255 G:183 B:0
Y:177 Cr:176 Cb:34 = R:255 G:185 B:0
Y:178 Cr:175 Cb:33 = R:255 G:188 B:0
Y:179 Cr:175 Cb:33 = R:255 G:189 B:0
Y:180 Cr:174 Cb:33 = R:255 G:191 B:0
Y:181 Cr:173 Cb:33 = R:255 G:193 B:0
Y:182 Cr:172 Cb:33 = R:255 G:195 B:2
Y:183 Cr:172 Cb:33 = R:255 G:196 B:3
Y:184 Cr:171 Cb:33 = R:255 G:198 B:4
Y:185 Cr:170 Cb:33 = R:255 G:200 B:5
Y:186 Cr:169 Cb:33 = R:255 G:202 B:6
Y:187 Cr:168 Cb:33 = R:255 G:204 B:7
Y:188 Cr:168 Cb:34 = R:255 G:205 B:11
Y:189 Cr:167 Cb:34 = R:255 G:207 B:12
Y:190 Cr:166 Cb:34 = R:255 G:209 B:13
Y:191 Cr:165 Cb:35 = R:255 G:210 B:16
Y:192 Cr:164 Cb:35 = R:255 G:212 B:17
Y:193 Cr:163 Cb:36 = R:255 G:214 B:21
Y:194 Cr:163 Cb:37 = R:255 G:214 B:24
Y:195 Cr:162 Cb:37 = R:255 G:216 B:25
Y:196 Cr:161 Cb:38 = R:255 G:218 B:28
Y:197 Cr:160 Cb:39 = R:255 G:220 B:31
Y:198 Cr:159 Cb:40 = R:255 G:221 B:34
Y:199 Cr:158 Cb:41 = R:255 G:223 B:38
Y:200 Cr:157 Cb:42 = R:255 G:224 B:41
Y:201 Cr:156 Cb:43 = R:255 G:226 B:44
Y:202 Cr:155 Cb:44 = R:255 G:228 B:47
Y:203 Cr:155 Cb:45 = R:255 G:228 B:50
Y:204 Cr:154 Cb:46 = R:255 G:230 B:53
Y:205 Cr:153 Cb:48 = R:255 G:231 B:59
Y:206 Cr:152 Cb:49 = R:255 G:233 B:62
Y:207 Cr:151 Cb:51 = R:255 G:234 B:67
Y:208 Cr:150 Cb:52 = R:255 G:235 B:70
Y:209 Cr:149 Cb:54 = R:255 G:237 B:75
Y:209 Cr:148 Cb:56 = R:255 G:237 B:79
Y:210 Cr:147 Cb:58 = R:255 G:238 B:85
Y:211 Cr:146 Cb:60 = R:255 G:239 B:90
Y:212 Cr:145 Cb:62 = R:255 G:240 B:95
Y:213 Cr:144 Cb:64 = R:255 G:241 B:100
Y:214 Cr:143 Cb:66 = R:254 G:243 B:105
Y:215 Cr:142 Cb:68 = R:254 G:244 B:111
Y:216 Cr:141 Cb:70 = R:254 G:245 B:116
Y:217 Cr:140 Cb:73 = R:253 G:246 B:123
Y:218 Cr:139 Cb:75 = R:253 G:247 B:128
Y:219 Cr:138 Cb:78 = R:252 G:248 B:136
Y:220 Cr:137 Cb:80 = R:252 G:249 B:141
Y:221 Cr:136 Cb:83 = R:251 G:250 B:148
Y:222 Cr:135 Cb:86 = R:251 G:251 B:155
Y:223 Cr:134 Cb:89 = R:251 G:251 B:162
Y:224 Cr:133 Cb:91 = R:250 G:253 B:168
Y:225 Cr:131 Cb:95 = R:248 G:254 B:177
Y:226 Cr:130 Cb:98 = R:248 G:255 B:184
Y:227 Cr:129 Cb:101 = R:247 G:255 B:191
Y:228 Cr:128 Cb:106 = R:247 G:255 B:202
Y:229 Cr:127 Cb:111 = R:246 G:255 B:214
Y:230 Cr:126 Cb:115 = R:246 G:255 B:223
Y:231 Cr:125 Cb:120 = R:246 G:255 B:234
Y:232 Cr:125 Cb:123 = R:247 G:255 B:241
Y:233 Cr:126 Cb:126 = R:249 G:255 B:249
Y:234 Cr:127 Cb:127 = R:252 G:255 B:252
Y:235 Cr:128 Cb:128 = R:255 G:255 B:255
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 23, 2013, 07:41:22 pm
Regarding the charging current. The chip in the external charger (L4001) uses a linear trickle charger to trickle charge a battery at 50mA in order to meet the minimum charge voltage. It then switches to a PWM charger. PWM will likely confuse a DC current monitoring device as it isn't dc it is switched DC  ;)
You would need to monitor the charge current with a dc current probe and oscilloscope.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 23, 2013, 10:45:11 pm
@daves

your file FLIR0040_palette_FLIR.png and  FLIR0040_palette_BT601.png looks great (your yellow goes to white).
Converted with which formulas from Wikipedia?
I think you stretched the footroom and headroom (killed offset of 16)

for information:
I discussed the IM YCbCr conversion with the IM site admin  :-+ here in may:
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23404 (http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23404)

you wrote for the brightest value of iron scale
Quote
Y:235 Cr:128 Cb:128 = R:255 G:255 B:255
but http://en.wikipedia.org/wiki/YCbCr#JPEG_conversion (http://en.wikipedia.org/wiki/YCbCr#JPEG_conversion)
(http://upload.wikimedia.org/math/7/7/7/77722e6f0e65f45ac42e6bc4e9699f3c.png)
goes to gray R:235 G:235 B:235 (=Y) and not white

this is exact the IM convert formula (see my forum link above)
Code: [Select]
$ convert xc:'sRGB(235,128,128)' -set colorspace ycbcr -colorspace srgb -format "rgb(%[fx:round(255*u.r,1)],%[fx:round(255*u.g)],%[fx:round(255*u.b)])" info:
rgb(236,234,236)
or simply
Code: [Select]
$ convert "xc:sRGB(235,128,128)" -set colorspace YCbCr -colorspace srgb -depth 8 -verbose info: | grep "#"
         1: (236,234,236) #ECEAEC srgb(236,234,236)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 12:52:51 am
you wrote for the brightest value of iron scale
Quote
Y:235 Cr:128 Cb:128 = R:255 G:255 B:255
but http://en.wikipedia.org/wiki/YCbCr#JPEG_conversion (http://en.wikipedia.org/wiki/YCbCr#JPEG_conversion)
(http://upload.wikimedia.org/math/7/7/7/77722e6f0e65f45ac42e6bc4e9699f3c.png)
goes to gray R:235 G:235 B:235 (=Y) and not white
You have to be careful converting back and forth, since there are two "standards". I think I posted about that eons ago in this thread. One is the crappy (IMO) clipped range, and the other is the full 0-255 range. Anyways, daves' result looks like a correct implementation of the bit of code I suggested (http://stackoverflow.com/questions/7041172/pils-colour-space-conversion-ycbcr-rgb). He now gets the exact same pretty non-washed out full range colors I get.

Check out the "## ITU-R BT.601 version (SDTV)" bit in yuv2rgb on the stackoverflow page. If you fill in Y:235 Cr:128 Cb:128, then you do in fact get R:255 G:255 B:255.

I love standards. There's so many of them, you can always pick one you like...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 24, 2013, 01:08:35 am
you are right,
with the palette from Daves BT.601 give the best result (clip offset of 16) for Y:235 Cr:128 Cb:128 (bright value)

but my FlirTools from Mac and IOS using a iron palette, where the white value is YCrCb=235,121,130   
BT.601 goes to RGB=243,259,259 (out of 8 Bit Range)

I think Flir uses different palettes on Mac and Windows.
I asked Daves to post his iron.pal file (Windows?)

As attachment my (Mac/IOS) palettes and a excel sheet for converting jpg and BT.601
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 01:19:44 am

but my FlirTools from Mac and IOS using a iron palette, where the white value is YCrCb=235,121,130   
BT.601 goes to RGB=243,259,259 (out of 8 Bit Range)

I think Flir uses different palettes on Mac and Windows.
Ey? What happened to ignoring all that and just grabbing the .pal files from your E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 24, 2013, 01:36:05 am
I answer myself:

the embedded palette in Flir jpg is compatible with BT.601 footroom and headroom (range 16...238)

Code: [Select]
$ exiftool -PaletteFileName FLIR0078.jpg
Palette File Name               : \FlashBFS\system\iron.pal

$ exiftool -b -Palette FLIR0078.jpg | hexdump -v -e '/3 "YCrCb ="' -e '3/1 " %03u ""\n"'
YCrCb = 016  128  128
YCrCb = 017  128  131
YCrCb = 018  127  134
YCrCb = 019  126  137
YCrCb = 020  126  142
YCrCb = 021  125  148
YCrCb = 022  124  154
YCrCb = 023  123  156
YCrCb = 024  122  158
YCrCb = 025  121  160
YCrCb = 026  120  162
YCrCb = 027  121  164
YCrCb = 028  123  165
YCrCb = 029  125  167
YCrCb = 030  127  169
YCrCb = 031  128  170
YCrCb = 032  130  172
YCrCb = 033  132  173
YCrCb = 034  133  174
YCrCb = 035  135  175
YCrCb = 036  136  177
YCrCb = 037  138  178
YCrCb = 038  140  179
YCrCb = 039  141  180
YCrCb = 040  143  181
YCrCb = 041  144  181
YCrCb = 042  145  182
YCrCb = 043  147  183
YCrCb = 044  148  183
YCrCb = 044  150  184
YCrCb = 045  151  185
YCrCb = 046  152  185
YCrCb = 047  154  185
YCrCb = 048  155  186
YCrCb = 049  156  186
YCrCb = 050  157  186
YCrCb = 051  159  186
YCrCb = 052  160  186
YCrCb = 053  161  186
YCrCb = 054  162  186
YCrCb = 055  163  186
YCrCb = 056  165  186
YCrCb = 057  166  186
YCrCb = 058  167  186
YCrCb = 059  168  186
YCrCb = 060  169  185
YCrCb = 061  170  185
YCrCb = 062  171  185
YCrCb = 063  172  184
YCrCb = 064  173  184
YCrCb = 065  174  183
YCrCb = 066  175  182
YCrCb = 067  176  182
YCrCb = 068  177  181
YCrCb = 069  177  180
YCrCb = 070  178  180
YCrCb = 071  179  179
YCrCb = 072  180  178
YCrCb = 073  181  177
YCrCb = 074  182  176
YCrCb = 075  182  175
YCrCb = 076  183  174
YCrCb = 077  184  173
YCrCb = 078  184  172
YCrCb = 079  185  171
YCrCb = 080  186  170
YCrCb = 081  186  169
YCrCb = 082  187  168
YCrCb = 083  188  166
YCrCb = 084  188  165
YCrCb = 085  189  164
YCrCb = 086  189  163
YCrCb = 087  190  161
YCrCb = 088  190  160
YCrCb = 089  191  159
YCrCb = 090  191  157
YCrCb = 091  192  156
YCrCb = 092  192  154
YCrCb = 093  193  153
YCrCb = 094  193  151
YCrCb = 095  194  150
YCrCb = 096  194  148
YCrCb = 097  194  147
YCrCb = 098  195  145
YCrCb = 099  195  144
YCrCb = 099  195  142
YCrCb = 100  196  140
YCrCb = 101  196  139
YCrCb = 102  196  137
YCrCb = 103  197  135
YCrCb = 104  197  134
YCrCb = 105  197  132
YCrCb = 106  197  130
YCrCb = 107  197  129
YCrCb = 108  198  127
YCrCb = 109  198  125
YCrCb = 110  198  123
YCrCb = 111  198  122
YCrCb = 112  198  120
YCrCb = 113  198  118
YCrCb = 114  198  117
YCrCb = 115  198  115
YCrCb = 116  198  113
YCrCb = 117  198  111
YCrCb = 118  198  109
YCrCb = 119  198  108
YCrCb = 120  198  106
YCrCb = 121  198  104
YCrCb = 122  198  102
YCrCb = 123  198  101
YCrCb = 124  198  099
YCrCb = 125  198  097
YCrCb = 126  198  096
YCrCb = 127  198  094
YCrCb = 128  198  092
YCrCb = 129  198  090
YCrCb = 130  198  089
YCrCb = 131  197  087
YCrCb = 132  197  085
YCrCb = 133  197  084
YCrCb = 134  197  082
YCrCb = 135  197  080
YCrCb = 136  196  079
YCrCb = 137  196  077
YCrCb = 138  196  075
YCrCb = 139  196  074
YCrCb = 140  195  072
YCrCb = 141  195  071
YCrCb = 142  195  069
YCrCb = 143  194  068
YCrCb = 144  194  066
YCrCb = 145  194  065
YCrCb = 146  193  063
YCrCb = 147  193  062
YCrCb = 148  193  060
YCrCb = 149  192  059
YCrCb = 150  192  058
YCrCb = 151  191  056
YCrCb = 152  191  055
YCrCb = 153  191  054
YCrCb = 154  190  053
YCrCb = 154  190  051
YCrCb = 155  189  050
YCrCb = 156  189  049
YCrCb = 157  188  048
YCrCb = 158  188  047
YCrCb = 159  187  046
YCrCb = 160  187  045
YCrCb = 161  186  044
YCrCb = 162  186  043
YCrCb = 163  185  042
YCrCb = 164  184  041
YCrCb = 165  184  040
YCrCb = 166  183  040
YCrCb = 167  183  039
YCrCb = 168  182  038
YCrCb = 169  181  037
YCrCb = 170  181  037
YCrCb = 171  180  036
YCrCb = 172  179  036
YCrCb = 173  179  035
YCrCb = 174  178  035
YCrCb = 175  177  034
YCrCb = 176  177  034
YCrCb = 177  176  034
YCrCb = 178  175  033
YCrCb = 179  175  033
YCrCb = 180  174  033
YCrCb = 181  173  033
YCrCb = 182  172  033
YCrCb = 183  172  033
YCrCb = 184  171  033
YCrCb = 185  170  033
YCrCb = 186  169  033
YCrCb = 187  168  033
YCrCb = 188  168  034
YCrCb = 189  167  034
YCrCb = 190  166  034
YCrCb = 191  165  035
YCrCb = 192  164  035
YCrCb = 193  163  036
YCrCb = 194  163  037
YCrCb = 195  162  037
YCrCb = 196  161  038
YCrCb = 197  160  039
YCrCb = 198  159  040
YCrCb = 199  158  041
YCrCb = 200  157  042
YCrCb = 201  156  043
YCrCb = 202  155  044
YCrCb = 203  155  045
YCrCb = 204  154  046
YCrCb = 205  153  048
YCrCb = 206  152  049
YCrCb = 207  151  051
YCrCb = 208  150  052
YCrCb = 209  149  054
YCrCb = 209  148  056
YCrCb = 210  147  058
YCrCb = 211  146  060
YCrCb = 212  145  062
YCrCb = 213  144  064
YCrCb = 214  143  066
YCrCb = 215  142  068
YCrCb = 216  141  070
YCrCb = 217  140  073
YCrCb = 218  139  075
YCrCb = 219  138  078
YCrCb = 220  137  080
YCrCb = 221  136  083
YCrCb = 222  135  086
YCrCb = 223  134  089
YCrCb = 224  133  091
YCrCb = 225  131  095
YCrCb = 226  130  098
YCrCb = 227  129  101
YCrCb = 228  128  106
YCrCb = 229  127  111
YCrCb = 230  126  115
YCrCb = 231  125  120
YCrCb = 232  125  123
YCrCb = 233  126  126
YCrCb = 234  127  127
YCrCb = 235  128  128
the last value is YCrCb = 235  128  128  :)

it's a nice sample for using hexdump, but they are the same values, like from Flir E4 file system \FlashBFS\system\iron.pal  |O
Code: [Select]
[version]
name=Iron
major=1
minor=2
edit=1
date=21-Nov-2012
[noOfColors]
224
[stretch]
2
[method]
0
[specialColors]
# Values in Y Cr Cb order
# overflow, red
67, 216, 98
# underflow, blue
41, 110, 240
#above, light gray
170, 128, 128
#below, dark gray
50, 128, 128
# isotherm 1, gray
100, 128, 128
# isotherm 2, blue
100, 110, 240
[palette]
#palette (224 colors)
16,128,128
17,128,131
18,127,134
19,126,137
20,126,142
21,125,148
22,124,154
23,123,156
24,122,158
25,121,160
26,120,162
27,121,164
28,123,165
29,125,167
30,127,169
31,128,170
32,130,172
33,132,173
34,133,174
35,135,175
36,136,177
37,138,178
38,140,179
39,141,180
40,143,181
41,144,181
42,145,182
43,147,183
44,148,183
44,150,184
45,151,185
46,152,185
47,154,185
48,155,186
49,156,186
50,157,186
51,159,186
52,160,186
53,161,186
54,162,186
55,163,186
56,165,186
57,166,186
58,167,186
59,168,186
60,169,185
61,170,185
62,171,185
63,172,184
64,173,184
65,174,183
66,175,182
67,176,182
68,177,181
69,177,180
70,178,180
71,179,179
72,180,178
73,181,177
74,182,176
75,182,175
76,183,174
77,184,173
78,184,172
79,185,171
80,186,170
81,186,169
82,187,168
83,188,166
84,188,165
85,189,164
86,189,163
87,190,161
88,190,160
89,191,159
90,191,157
91,192,156
92,192,154
93,193,153
94,193,151
95,194,150
96,194,148
97,194,147
98,195,145
99,195,144
99,195,142
100,196,140
101,196,139
102,196,137
103,197,135
104,197,134
105,197,132
106,197,130
107,197,129
108,198,127
109,198,125
110,198,123
111,198,122
112,198,120
113,198,118
114,198,117
115,198,115
116,198,113
117,198,111
118,198,109
119,198,108
120,198,106
121,198,104
122,198,102
123,198,101
124,198,99
125,198,97
126,198,96
127,198,94
128,198,92
129,198,90
130,198,89
131,197,87
132,197,85
133,197,84
134,197,82
135,197,80
136,196,79
137,196,77
138,196,75
139,196,74
140,195,72
141,195,71
142,195,69
143,194,68
144,194,66
145,194,65
146,193,63
147,193,62
148,193,60
149,192,59
150,192,58
151,191,56
152,191,55
153,191,54
154,190,53
154,190,51
155,189,50
156,189,49
157,188,48
158,188,47
159,187,46
160,187,45
161,186,44
162,186,43
163,185,42
164,184,41
165,184,40
166,183,40
167,183,39
168,182,38
169,181,37
170,181,37
171,180,36
172,179,36
173,179,35
174,178,35
175,177,34
176,177,34
177,176,34
178,175,33
179,175,33
180,174,33
181,173,33
182,172,33
183,172,33
184,171,33
185,170,33
186,169,33
187,168,33
188,168,34
189,167,34
190,166,34
191,165,35
192,164,35
193,163,36
194,163,37
195,162,37
196,161,38
197,160,39
198,159,40
199,158,41
200,157,42
201,156,43
202,155,44
203,155,45
204,154,46
205,153,48
206,152,49
207,151,51
208,150,52
209,149,54
209,148,56
210,147,58
211,146,60
212,145,62
213,144,64
214,143,66
215,142,68
216,141,70
217,140,73
218,139,75
219,138,78
220,137,80
221,136,83
222,135,86
223,134,89
224,133,91
225,131,95
226,130,98
227,129,101
228,128,106
229,127,111
230,126,115
231,125,120
232,125,123
233,126,126
234,127,127
235,128,128
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 01:41:50 am
I answer myself:

the embedded palette in Flir jpg is compatible with BT.601 footroom and headroom (range 16...238)
Yup. :)

Quote
... are the same values, like from Flir E4 folder \FlashBFS\system\iron.pal  |O
Well obviously. Where do you think those palettes embedded in the jpegs come from?  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 24, 2013, 01:58:08 am

IM convert has Rec601YCbCr color space, but it doesn't stretch the offset of 16

http://www.imagemagick.org/script/command-line-options.php#colorspace (http://www.imagemagick.org/script/command-line-options.php#colorspace)
Quote
$ convert xc:'sRGB(235,128,128)' -set colorspace Rec601YCbCr -colorspace srgb -format "rg(%[fx:round(255*u.r,1)],%[fx:round(255*u.g)],%[fx:round(255*u.b)])" info:
rg(236,234,236)
$ convert xc:'sRGB(235,128,128)' -set colorspace ycbcr -colorspace srgb -format "rgb(%[fx:round(255*u.r,1)],%[fx:round(255*u.g)],%[fx:round(255*u.b)])" info:
rgb(236,234,236)

I think, IM convert can BT.601 conversion with the fx operator
http://www.imagemagick.org/script/fx.php (http://www.imagemagick.org/script/fx.php)
http://www.imagemagick.org/Usage/transform/#fx (http://www.imagemagick.org/Usage/transform/#fx)
but I have to sleep on it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 02:05:21 am
IM convert has Rec601YCbCr color space, but it doesn't stretch the offset of 16
In the past I tried convert as well for the color conversion, but it didn't do what I wanted... It was much easier to just read the .pal file and output a temp png file with the palette (with proper RGB values) for use with -clut.

One of those days I really should cut out the intermediate -clut step, but what the hell, it works...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 24, 2013, 02:22:58 am
after understanding the BT.601 offset, I found a simple solution:

The colors are right, but the brightness is limited (16..238?).
With 16 Bit convert (Q16) we can simple stretch the brightness from 16*256=4096 to 238*256=60928

check your IM colorspace (switch between RGB or sRGB )
Code: [Select]
$ exiftool -b -Palette FLIR0074.jpg | convert -size 224X1 -depth 8 RGB:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -level 4096,60928 -resize 448x30! iron16.pngperfect:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=72903;image)

compare with a screenshot from FlirTools GUI
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=72752;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 02:35:20 am
Nice!  :-+ Your exiftool + imagemagick pipes are even more convoluted than mine. I like it!  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on December 24, 2013, 05:17:05 am
Regarding the charging current. The chip in the external charger (L4001) uses a linear trickle charger to trickle charge a battery at 50mA in order to meet the minimum charge voltage. It then switches to a PWM charger. PWM will likely confuse a DC current monitoring device as it isn't dc it is switched DC  ;)
You would need to monitor the charge current with a dc current probe and oscilloscope.

Are you sure about that?

The LTC4001 runs at nominally 1.5MHz switching speed (when not in trickle mode - which would be a rare situation). I really doubt you need a current probe/scope (I have both). A correctly operating decent meter should have no issues displaying an accurate average measured current (either input current or output current). At that switching frequency the output is essentially DC.

I think many folk get confused with PWM since it can be mean a) full load switching at some frequency and some duty cycle OR b) the PWM used by a switching regulator to drive a DC:DC converter's inductor. b) is what the LTC4001 is doing and the output is essentially clean DC.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ClamzOnProzac on December 24, 2013, 09:43:23 am
Last week I received my E4 (E4 1.1; sn 639083xx; fw 1.19.8; cal Nov 27, 2013). Enhancement to the E8+ level was relatively painless. Worth every penny. Many thanks to those who have made it possible!

That said...

When I pointed the E8+ at an ice bath I came to understand the concern voiced in some previous postings: a temp reading in the 21-22F neighborhood is out of line with the 32.5F reading from a cheap pocket IR thermometer. One would feel utterly justified in tossing a glass thermometer with similar error.

So, to set up a reality check in preparation of doing some parameter fiddling on CALIB.RSC, I copied the file and stripped the last # CRC32 line, then ran it through the Python script presented in message #260.

I found that the resulting CRC32 didn't match the original file CRC32.

However, presenting the same file to CheckCRC.exe (see link in message #264) yields the original CRC32 number from the file.

I know next to nothing about the internals of CRC encoders and decoders. Is an alternate number acceptable to the internal CRC checker of the FLIR instrument? Has anyone else stubbed a toe on this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 24, 2013, 11:53:33 am
Your exiftool + imagemagick pipes are even more convoluted than mine
it was a hard work together with Phil decoding the Flir Exif Headers
Phil is a master of perl and my parts are reverse engineering of unknown Flir tags and build the IM pipes

I'm very interested in your workflow
please publish more about it   :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 12:09:54 pm
So, to set up a reality check in preparation of doing some parameter fiddling on CALIB.RSC, I copied the file and stripped the last # CRC32 line, then ran it through the Python script presented in message #260.

I found that the resulting CRC32 didn't match the original file CRC32.
Maybe because post #260 is using the wrong flavor CRC? Use this instead:

Code: [Select]
import binascii
import sys
with open(sys.argv[1], 'r') as fp:
    data = fp.read()
    crc32_line = '# CRC32 %08x\r\n' % (binascii.crc32(data) & 0xffffffff);
    print crc32_line , ;

Edit: yes, self.data, that'll works. :P This was a snippet from a class method, so fixed now. The point is you should use binascii.crc32(). I use that for crc32 of resource files, and works just fine.

Update: to be sure I just tested it and both zlib.crc32() and binascii.crc32() give the correct result. So maybe user error? See my code above for the correct syntax of the CRC32 line.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 24, 2013, 12:31:58 pm
@Georges80,

No not certain. I saw PWM and, as you say, thought more complex to measure with a DC current meter than a simple DC current. Oooops showing ignorance of these charge systems now  :-[

Thanks for the clarification.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 24, 2013, 12:33:58 pm
it was a hard work together with Phil decoding the Flir Exif Headers
Phil is a master of perl and my parts are reverse engineering of unknown Flir tags and build the IM pipes
Well, I for one am glad for said hard work because it is damn handy. :) And I do like Phil's perl code, nice and readable. I used to do a lot of scripting in perl myself, but slowly migrating to python lately.
Quote
I'm very interested in your workflow
please publish more about it   :)
Yeah I intend to finish up some tools and publish them, but I have this affliction called Too Many Projects. :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ClamzOnProzac on December 25, 2013, 01:56:02 am
mrfibble and All,

"Edit: yes, self.data, that'll works. :P This was a snippet from a class method, so fixed now. The point is you should use binascii.crc32(). I use that for crc32 of resource files, and works just fine.

Update: to be sure I just tested it and both zlib.crc32() and binascii.crc32() give the correct result. So maybe user error? See my code above for the correct syntax of the CRC32 line."

Yes indeed, both zlib.crc32() and binascii.crc32()  yield the same CRC32 number. Unfortunately, both are not  the number I recorded from the .rsc file before deleting the CRC32 line and its EXACT duplicate generated by running CheckCRC.exe on that edited file.

To muddy the issue, I noticed that Wikipedia claims that zlib CRC32 is a different flavor of a  more mainstream CRC32 (see the table in the Wikipedia entry for "Cyclic redundancy check").

This is the kind of thing than can bruise a man's forehead, and being a good sport I'm trying my best to blame the user. So... I made a one line text file the content being "blah,blah" (no quotes and with one CRLF pair) and ran it through the three CRC32 decoders in question.

The  results are...
zlib.crc32() and binascii.crc32()  = ce5f6c51
CheckCRC.exe                           = 6134ae5a

This is troubling.  Anyone care to duplicate this?  BTW: I'm running Python 2.7 on WinXP SP2.

A very Happy Holiday to everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 25, 2013, 02:24:05 am
Alright, just tested the binascii.crc32() code as recently posted on python 2.7 on linux (debian). Result:
Code: [Select]
# CRC32 6134ae5a

To differentiate between a file read problem and a crc32 problem try this:
Code: [Select]
import binascii
data2="blah,blah\r\n"
crc32_line2 = '# DOUBLE CHECK CRC32 %08x\r\n' % (binascii.crc32(data2) & 0xffffffff);
print crc32_line2 , ;
I get the same correct result there as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Force on December 25, 2013, 03:16:02 am
Hello! My first post :)
I am wondering if the E4 can be used in a car, for avoid driving over deers and people at night? I drive early in the morning, and want to avoid hitting others. I,m looking for a "cheap" way to recognize humans and creatures, in the forest beside the road. Or Is it just for close distance? I cant read or write so god in english, but I,m doing so good I can. I am impressed and jealous of the knowledge, that people have in this thread. :)
Can the E4 be adapt or changed in somehow to do this?
/ Force
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 25, 2013, 03:21:12 am
The E4 is only 9 fps, so maybe not the best option for vehicle safety. There's been some talk in the thread about automotive thermal camera's as well, which is probably what you want for this.

Mike also did a teardown of an Audi camera here:
Audi night vision thermal imaging camera teardown (https://www.youtube.com/watch?v=UlCwb4o7nck#ws)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on December 25, 2013, 11:55:51 am
@Force

You can use VLC on Linux to connect to the camera.
You can then use a Raspberry with a small screen to connect to the camera using the USB cable.

Perhaps we might do something with the USB host mode of an Android tablet...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 25, 2013, 12:14:23 pm
@ClamzOnProzac:
In my code I always use binary mode for blobs for which the crc has to be calculated, but it just so happens that on linux text mode open() also works fine. Which is why the code you mentioned also gave me the correct CRC32 under linux. Not so for windows though. Just to be sure I put it through the test. I installed Python 2.7.6 on win7 64-bit, using the Python 2.7.6 Windows X86-64 Installer found here (http://www.python.org/getit/). I then did some tests with this code:

Code: [Select]
import binascii
import sys

def test_crc(label, data):
    print "{0:14s}: {1:=08x}".format(label, ((binascii.crc32(data) & 0xffffffff )) )

test_crc("blah,blah\\r\\n", "blah,blah\r\n")
test_crc("blah,blah\\r",    "blah,blah\r")
test_crc("blah,blah\\n",    "blah,blah\n")

with open(sys.argv[1], 'r') as fp:
    data = fp.read()
    test_crc("TEXT   OPEN", data)
   
with open(sys.argv[1], 'rb') as fp:
    data = fp.read()
    test_crc("BINARY OPEN", data)

When run against the same old file as before you get this:

blah,blah\r\n : 6134ae5a
blah,blah\r   : 503bf9f2
blah,blah\n   : ce5f6c51
TEXT   OPEN   : ce5f6c51
BINARY OPEN   : 6134ae5a

Seems pretty obvious what is going on.

Executive summary: use the "rb" flag for open() and problem solved. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iDevice on December 25, 2013, 05:35:08 pm
I received my lens adapter from Lune3D last week and I could try my Chinese CO2 laser lens at last.
I went for the 50mm one as advised by Mike and it works a treat.
The only issue is that there is a lot of aberration on the edges, I wonder if the lens has really to be put with the convex side towards the camera lens like Aurora advised.
I would have put it the other way around by default, but because the whole setup seems fragile, I don't want to try to reverse it if not necessary, so I would appreciate experience from others in that matter.

But I have another question: Although it's very nice for very high magnification work, I discovered that the 50mm lens is really a very close macro lens. I have to be at about 3 to 4 cm or something from subject which is often impossible due to large components around and FOV is too narrow as well for many purposes.
So I would like to know what focal length would be suggested for a working distance around 10-15 cm ? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on December 25, 2013, 10:07:11 pm
Quote
The E4 is only 9 fps, so maybe not the best option for vehicle safety.

It's not uncommon for automotive TIC's to operate at 9Hz as well, since they want people to be able to take their vehicles out of country on road trips without having to apply for a permit through the government first. They would otherwise need to have a security check done on all customers prior to purchasing one of their cars as well. 9Hz is sufficient.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 25, 2013, 10:21:23 pm
Some questions for experts (or someone else) on menu-hack:

I played around with my E4/8 and added and replaced some color palettes. But how can I change the palette icons?
I also customized the palette names in the language file, but unsuccessful when the length is not equal (e.g. want to replace "Arctic" with "Coldspot")

And what about zoom? Why is it not in use? Ok, digital zoom, what else? I activated zoom and it works fine.

@Icons: check my footer for URLs - there's a RCC file pointer in the postings how to unpack and repack RCC files (they conintain the icons)
@Zoom: please share your finding / config(s) - I did some very quick tests (icons showed up - but without function) and dropped it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on December 25, 2013, 10:30:49 pm
Quote
The E4 is only 9 fps, so maybe not the best option for vehicle safety.
It's not uncommon for automotive TIC's to operate at 9Hz as well, since they want people to be able to take their vehicles out of country on road trips without having to apply for a permit through the government first. They would otherwise need to have a security check done on all customers prior to purchasing one of their cars as well. 9Hz is sufficient.

Subversive suggestion:
Place your E4 behind the windshield and take a look how good the transparency of glass is - totally independent of Hz ;)

Automotive electronics have nearly as hard requirements as airborne and/or mil electronics - there's a lot of engineering required to make a sensible automotive product - if you like hacking an E4 into pieces and re-assembling it in automotive-style enclosures etc. ... then just do it - but be prepared to face some problems and to invest a lot of work.
Most likely it's just a waste of time/ressources trying to re-invent the wheel while there are already perfect wheels available.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 25, 2013, 10:51:37 pm
Simple car night vision:

1. Buy an Ex Cadillac Deville Raytheon night vision camera. 320x240 30fps and it outputs a simple composite video feed. They often appear on e*ay.com at decent prices a and are designed to sit behind the car grille. i.e. they are weather proofed with a lens protector to prevent lens damage when in use.

2. Take the Mercedes route, fit a powerful IR illuminator to the front of the car and use a standard night vision CCD camera. This is not thermal camera technology but it works for Mercedes  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuisinart on December 25, 2013, 11:59:29 pm
Happy holidays everyone, and thank you for your contributions!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 26, 2013, 12:05:04 am
@iDevice

An issue you need to consider with the auxiliary lenses is that the E4 cannot change focus to compensate for any discrepancy in the output of the lens. I used the concave side facing the target as it has its focal convergence point at the required ~50mm point. The lens converts the light to parallel beams for presentation to the E4 lens. No focus adjustment is therefore needed by the E4. In the reverse orientation the lens will work buts its set ~50mm focal point OUTPUT will possibly not be optimum for the E4 lens and some defocussing may occur.

I have taken some sample pictures for you to look at. The titles are the descriptors but here is more info.

Conc-T is the concave side facing the target
ConV-T is the convex side facing the target
100mm shows the image produced using the 100mm FL lens
E4lens shows the image without any auxiliary lens and a view of the test pcb (RS232 to Ethernet adapter)

Please decide which orientation of the 50mm lens suits you best. There DOES appear to be edge distortion with the concave side facing the target but in my tests this orientation appeared to have a sharper centre focus. I can only assume that this is due to the manner in which the lens is used on the E4 as my PM695 works fine in that configuration. My PM695 has a ~60mm diameter, 24 degree FOV lens though.
Note: my OEM close up lenses are orientated with the concave side facing the target and the convex facing the camera. The E4 application may differ due to the small fixed focus lens and the large FOV ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 26, 2013, 02:57:47 am
This one seems to fit well...

(http://imgs.xkcd.com/comics/christmas_lights.png)

Merry Randomized Winter Seasonal Winter* Festival Amalgamation!


(*) still like the winter version better, since that's where it originates from.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Captain Morgan on December 26, 2013, 05:47:37 am
First post here.

Hack worked fine on new unit purchased in Dec. The Calibration Certificate says the site was Estonia Date: Nov 28, 2013

E4 1.1
Software V 1.19.8

The resolution is beautiful. THX for the mod, files and instructions.


.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Researcher on December 26, 2013, 09:01:40 am
Good day, friends! I just discovered this awesome thread! :D
Please tell, is there a hack for latest Flir E4 HW model (1.1) with
latest firmware (1.2something), or I am too late to the party?  :-\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 26, 2013, 09:24:19 am
Good day, friends! I just discovered this awesome thread! :D
Please tell, is there a hack for latest Flir E4 HW model (1.1) with
latest firmware (1.2something), or I am too late to the party?  :-\

Exactly 1 post before you is someone using E4 1.1, and reporting the hack to work. So hardware revision is not an issue. As for firmware, 1.2somethings sounds nice and undefined. If you want to know for sure apply the hack (E8.cfg) and report if it works for you. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 26, 2013, 10:55:21 am
With 16 Bit convert (Q16) we can simple stretch the brightness from 16*256=4096 to 238*156=60928
Good job !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eyesky on December 26, 2013, 11:29:11 am
Hi Chaps,
Sorry for this basic....... falling at the first hurdle,   but where do I find E8.cfg ?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 26, 2013, 11:32:07 am
Good day, friends! I just discovered this awesome thread! :D
Please tell, is there a hack for latest Flir E4 HW model (1.1) with
latest firmware (1.2something), or I am too late to the party?  :-\
There is no credible evidence that any version later than 1.19.8 exists. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 26, 2013, 12:01:25 pm
Hi Chaps,
Sorry for this basic....... falling at the first hurdle,   but where do I find E8.cfg ?!

See first post for latest instructions: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eyesky on December 26, 2013, 12:11:24 pm
Thanks, but that's where I read about needing the e8.config........
begins.... OK, so this is it.....
Seems to not be bothered about 7zip - I just used Windows "send to compressed folder"

Open E8.cfg in a PC text editor (not anything that will mangle linefeeds etc.!)   ??? where's that from  ???




Hi Chaps,
Sorry for this basic....... falling at the first hurdle,   but where do I find E8.cfg ?!

See first post for latest instructions: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 26, 2013, 12:23:57 pm
Thanks, but that's where I read about needing the e8.config........
begins.... OK, so this is it.....
Seems to not be bothered about 7zip - I just used Windows "send to compressed folder"

Open E8.cfg in a PC text editor (not anything that will mangle linefeeds etc.!)   ??? where's that from  ???




Hi Chaps,
Sorry for this basic....... falling at the first hurdle,   but where do I find E8.cfg ?!

See first post for latest instructions: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)
It's in the .zip attatched to the hack post linked from the start of this thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eyesky on December 26, 2013, 12:46:54 pm
Thanks Mike!  |O :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wizzard on December 26, 2013, 04:06:31 pm
@ Aurora - The Cadillac / Raytheon imager is 320x240, but has a rotary mechanical chopper and is most certainly not 30Hz. It also suffers from very significant ghosting / hot+cold outlining, and the poor quality of analog NTSC video.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 26, 2013, 04:32:51 pm
I have seen one working and beg to differ on frame rate:

http://www.computer.org/csdl/mags/cg/1999/05/mcg1999050006.html (http://www.computer.org/csdl/mags/cg/1999/05/mcg1999050006.html)

See the world differently! - fun with thermal camera (https://www.youtube.com/watch?v=WR1_AqDcvdU#ws)


Thermal Camera Imager Imaging Flir Cadillac 320x240pxls (https://www.youtube.com/watch?v=l96g7yeT-XM#)

May be the unit you tried is suffering from its age ?

Yes it uses a shutter wheel . That is because it is a BST FPA. Chopper wheels are not, in themselves, a serious issue. they have been used for years and just create a slightly softer edge to an image. I have several fire fighting TICs that use this technology and work very well indeed. The issue can be reliability of the motor driving the wheel. The major advantage of the BST+Chopper wheel over the older micro-bolometer designs was the continuous image with no NUC shutter freezes.

IIRC the Cadillac thermal camera used a 160 'line' field x2 interlaced to create 320 horizontal 'lines', and a frame rate of 30fps was specified

If poor performance is noted, the following should be checked:

1. If the lens protector is fitted, is it in good clean condition.
2. Remove the lens protector (if fitted) and check the condition of the primary lens. Corrosion and stone impact damage will severely degrade the image. Check for a build up of dirt on the lens.
3. Listen to the unit running, does the chopper wheel motor spin up quickly and does it 'purr' like a cat ? If not it is likely in need of a service.
4. It is a good idea to service the chopper wheel motor as the bearings dry out over time. This adversely effects the image and will eventually lead to complete failure due to motor bearing failure. I have seen chopper wheels that cannot be turned due to seized bearings.
5. Be aware that a BST FPA needs a chopper wheel to maintain a change in the scene, as required by the detector elements (they only 'see' change). If a chopper wheel fails and the shutter is not obscuring the FPA, an image will still be visible but only thermal targets that move will be displayed. Early TICs allowed the user to switch off the chopper wheel to avoid image blur whilst panning a camera quickly.

Also a test here:

http://trydeal.com/nightvision/ (http://trydeal.com/nightvision/)

The first video showing the install in the car looks to produce a more than acceptable image for a car mounted system.

FLIR Thermal Night Vision Camera on Jeep Wrangler (https://www.youtube.com/watch?v=HFKxmfrv4DY#)

You tube has a few videos of these cameras working. They are certainly not 9fps or other low frame rates. Image quality comes down to the condition of the camera and ability of the installer/user. Many of these cameras suffered lens corrosion and damage due to failure of the lens protectors over the years. Good ones give excellent images.

As to the quality of analogue NTSC....well considering this is a monochrome camera system running at 320x240 resolution the issues of analogue video and the vagaries of NTSC colour reproduction are pretty mute. This is not an SVGA platform and was designed for simple implementation in a car. Who wants a computer running just to show a thermal image ? Digital has its place but sometimes analogue makes better sense....i.e. the KISS principle. If you want to see the nightmare that digital brings to the party, take a look at an AUDI or BMW night vision system....I doubt you will get it running without it being fitted in the original car with the original ECU's and dashboard computer.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iDevice on December 26, 2013, 11:15:29 pm

I have taken some sample pictures for you to look at. The titles are the descriptors but here is more info.

Conc-T is the concave side facing the target
This what I have and it confirms exactly what I was writing about.
Quote
ConV-T is the convex side facing the target
Much less edge distorsion, but at the cost of a slight defocus indeed.
Quote
100mm shows the image produced using the 100mm FL lens
This is of great help to me, I know what will be my next purchase from China  :)

I thank you Aurora.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 26, 2013, 11:28:59 pm
After repeating my tests of the 50mm lens I have come to the conclusion that my orientation of the lens with the concave side facing the target is compromised by the E4 application. As such I have changed my view on which way to install the lens. I will be changing my 50mm lens to have the convex side facing the target. The defocussing isn't serious enough to concern me and the edge distortion is significantly reduced.

The 100mm lens is bi-convex and therefore has no preferred orientation  ;) Nice and simple.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 27, 2013, 04:59:21 am
here is the zoom enable instruction: :-+

1. enable zoom in FlashFS\system\appcore.d\config.d\e8.cfg (from E4 hack): .caps.config.image.zoom.enabled bool true , don't forget to renew CRC01!
2. edit menu part in FlashBFS\system\ui.d\toolbar-config_z3.xml (from menu hack) as shown:

      <ToolBar name="zoomMenu">
         <ToolBar name="zoom_1x"/>
         <ToolBar name="zoom_2x"/>
         <ToolBar name="zoom_4x"/>
         <ToolBar name="zoom_8x"/>
      </ToolBar>

that's it :clap: :clap: :clap:

Works like a charm! Thanks  :-+
Title: Flir E4 Thermal imaging camera teardown
Post by: david7586 on December 27, 2013, 07:43:58 am

Good day, friends! I just discovered this awesome thread! :D
Please tell, is there a hack for latest Flir E4 HW model (1.1) with
latest firmware (1.2something), or I am too late to the party?  :-\

As others have said, you won't know until you've tried. Please do let us know how everything turns out for you.

If you don't mind me asking, where did you buy your unit from?


Sent from my iPhone using Tapatalk (http://tapatalk.com/m?id=1) 2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on December 27, 2013, 08:16:45 am
First try at panorama, converting to tiff, resize/sharpen and stitching went fine.
I get an error when running  the splitjpg.php

N:\flirscript>php.exe.lnk N:/flirscript/splitjpg.php -i N:/flirscript/FLIR0172.j
pg -r N:/flirscript/stitch.tiff -o N:/flirscript/pano1
.fffrebuilt FFF from 3 parts
split FFF file to segments
FLIR Record 0x20, offset 0x0200, length 0x09ac
FLIR Record 0x22, offset 0x0bac, length 0x0310
FLIR Record 0x21, offset 0x0ebc, length 0x0038
FLIR Record 0x01, offset 0x0ef4, length 0xb5bf
FLIR Record 0x2a, offset 0xc4b4, length 0x0060
FLIR Record 0x0e, offset 0xc514, length 0xa007
convert.exe: Unknown field with tag 18248 (0x4748) encountered. `TIFFReadDirecto
ry' @ warning/tiff.c/TIFFWarnings/847.
new image w/h=1098/357
write new radiometric jpg
part 0: 65534 Byte
part 1: 65534 Byte
part 2: 65534 Byte
part 3: 65534 Byte
part 4: 65534 Byte
part 5: 65534 Byte
part 6: 65534 Byte
part 7: 65534 Byte
part 8: 65534 Byte
part 9: 65534 Byte
part 10: 65534 Byte
part 11: 65534 Byte
part 12: 714 Byte

N:\flirscript>

N:\flirscript>convert.exe.lnk --version
Version: ImageMagick 6.8.8-0 Q16 x64 2013-12-21 http://www.imagemagick.org (http://www.imagemagick.org)
Copyright: Copyright (C) 1999-2014 ImageMagick Studio LLC
Features: DPC Modules OpenMP
Delegates: bzlib cairo freetype jbig jng jp2 jpeg lcms lqr pangocairo png ps rsv
g tiff webp xml zlib

The resulting pano1.jpg now is the same as the FLIR0172.jpg.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 27, 2013, 11:37:24 am
I get an error when running  the splitjpg.php

What error? All I see is a warning that can be safely ignored.

Quote
convert.exe: Unknown field with tag 18248 (0x4748) encountered. `TIFFReadDirectory' @ warning/tiff.c/TIFFWarnings/847.

It still generates the correct output, right?

@tomas123:
It might be a good idea to add a -quiet option to your convert command line to prevent user confuzzlement.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 27, 2013, 11:39:43 am
here is the zoom enable instruction: :-+

1. enable zoom in FlashFS\system\appcore.d\config.d\e8.cfg (from E4 hack): .caps.config.image.zoom.enabled bool true , don't forget to renew CRC01!
2. edit menu part in FlashBFS\system\ui.d\toolbar-config_z3.xml (from menu hack) as shown:

      <ToolBar name="zoomMenu">
         <ToolBar name="zoom_1x"/>
         <ToolBar name="zoom_2x"/>
         <ToolBar name="zoom_4x"/>
         <ToolBar name="zoom_8x"/>
      </ToolBar>

that's it :clap: :clap: :clap:

Works like a charm! Thanks  :-+
I tried it but no obvious difference - was in a hurry so may have missed something. What FW version do you have?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 27, 2013, 01:02:34 pm
@mrflibble
You are right, the script it's only a privat hack and I love warnings :)

First try at panorama, converting to tiff, resize/sharpen and stitching went fine.
I get an error when running  the splitjpg.php
...
The resulting pano1.jpg now is the same as the FLIR0172.jpg.
The same size?
Open the large pano1.jpg with FlirTools and enjoy ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 27, 2013, 02:12:47 pm
I tried it but no obvious difference - was in a hurry so may have missed something. What FW version do you have?

Recheck your steps. (edit the e8.cfg, re-crc/fif it, upload it, replace the section in toolbar-config_z3.xml, upload it, then cold boot the camera). Whole new menu comes on the main toolbar. It's only digital zoom so it works by reducing the resolution but it works none the less.

Running 1.18.7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 27, 2013, 02:37:43 pm
Regarding the digital zoom. IIRC my PM695 interpolates and processes the zoomed image to improve its appearance and then presents it as a 320x240 image. I have not added zoom to my E4 yet but will definitely do so. I wonder whether the E4 will do any 'clever' image enhancement when in zoom mode. Having the ability to narrow the field of view at the expense of resolution is still a useful function to have. Even if only X2 is used (160x120 pixels), it's a bargain when compared to the cost of a X2 Germanium lens group  :)

The zoom may also be useful when using a close-up auxiliary lens for PCB work  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 27, 2013, 04:06:09 pm
I wonder whether the E4 will do any 'clever' image enhancement when in zoom mode. Having the ability to narrow the field of view at the expense of resolution is still a useful function to have. Even if only X2 is used (160x120 pixels), it's a bargain when compared to the cost of a X2 Germanium lens group  :)
I didn't notice any really clever image enhancements in zoom mode. But it did look quite adequate for a digital zoom. I only ever used zoom scripted over telnet though, so no idea about the menu based zoom being discussed here.

Does the menu allow you to zoom in on something off-center? Although maybe not, since that is less of an issue during handheld operation.

Anyways, using zoom and grabbing the video stream gives a better result than grabbing the video and doing your own zoom. Presumably because by the time the video stream get to you there are all manner of dropped bits on the floor. Now if only we could get a raw 16-bit stream. Even at 9 fps that would be quite useful IMO.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iDevice on December 27, 2013, 04:29:45 pm
After repeating my tests of the 50mm lens I have come to the conclusion that my orientation of the lens with the concave side facing the target is compromised by the E4 application. As such I have changed my view on which way to install the lens. I will be changing my 50mm lens to have the convex side facing the target. The defocussing isn't serious enough to concern me and the edge distortion is significantly reduced.
I had time this morning to reverse my lens and the picture is much better now with the convex side towards target.
Unlike you, I didn't notice any degradation in sharpness, so for me it's a no brainer, it stays like that.
Quote
The 100mm lens is bi-convex and therefore has no preferred orientation  ;) Nice and simple.
I ordered the 100mm today as well so I will report back when it arrives.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on December 27, 2013, 04:37:11 pm
I was stupid not to open the pano1.jpg in flir tools, even if it looks wrong in windows preview, it is bigger after all.

However, the temperature scale is all wrong when imported to flir tools, the input images are all in about 15-28°C range, the result is in the -36-289°C range with auto scale.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wizzard on December 27, 2013, 07:02:33 pm
@ Aurora - I recall reading 15hz, but the motion on my video I took seems certainly better than 9hz ;) I could be mistaken in any case.

Test output from salvaged QVGA Raytheon camera (https://www.youtube.com/watch?v=pq_uig9-X5w#)

I did enjoy the unit, but the lens was poor for normal work (but great for infinity focus!), and the 'glow' of hot and cold objects was equally poor. But still, extremely useful.

Do you work with these Raytheon models often? I have another unit I am at a loss for checking the pin-out on - It's similar to the Cadillac one, but has an extra pin, and all the pins vanish into the PCB... I can work with an unlabeled but traceable circuit, but this one's out of my realm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 27, 2013, 07:50:56 pm
I was stupid not to open the pano1.jpg in flir tools, even if it looks wrong in windows preview, it is bigger after all.

However, the temperature scale is all wrong when imported to flir tools, the input images are all in about 15-28°C range, the result is in the -36-289°C range with auto scale.

sorry larky, my todos are not end user proved
amazing, that you have succesfull stitched a panorama in reverse byte order

as I wrote here, the Flir E4 use PNG with reversed byte order for embedded RAW images
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343791/#msg343791)

I extended the tutorial for E4
read https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715)
please test it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on December 27, 2013, 09:10:36 pm
I get the first step done on windows, to old exiftool on linux.
N:\flirscript>exiftool -b -RawThermalImage -if "$RawThermalImageType eq 'PNG'" FLIR*.jpg -w %f.png
and I get a collection of very ugly .png images. Great :)

For the next step I installed ImageMagick 6.8.8 Q16 on linux;
for i in *.png ; do convert $i gray:- | convert -size 320x240 -depth 16 -endian msb gray:- _$i.tif ; done
This leaves some me a bunch of .tif images that I can not open, but don't let that stop me;
convert *.tif -resize 480x -sharpen 0x1 a_%03d.png

convert: no decode delegate for this image format `_FLIR0172.png.tif' @ error/constitute.c/ReadImage/555.   :'(

Something is wrong in the byte order switch thing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 27, 2013, 10:04:15 pm
and I get a collection of very ugly .png images. Great :)
...
Something is wrong in the byte order switch thing

before you use a loop, try a single command pipe (works in windows and linux)
Code: [Select]
convert 001.png gray:- | convert -size 320x240 -depth 16 -endian msb gray:- 001.tifyou can convert the 16 bit tiff image to visible range (don't stitch it!)
Code: [Select]
convert 001.tif -auto-level preview.jpg
please upload a camera image and I convert a sample for you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 27, 2013, 11:17:34 pm
@larky
I found here my old post for converting Flir E4 radiometric image step-by-step
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348398/#msg348398 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348398/#msg348398)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 28, 2013, 01:00:55 am
convert *.tif -resize 480x -sharpen 0x1 a_%03d.png

convert: no decode delegate for this image format `_FLIR0172.png.tif' @ error/constitute.c/ReadImage/555.   :'(

Something is wrong in the byte order switch thing

Or you know, user error... Take a look at the file name (_FLIR0172.png.tif) and how that was built up. Then consider IM might have a problem guessing what format you mean to convert to. My guess is, fix the filenames, fix this particular error.

The seperate issue of changing byte order can be fixed with an IM oneliner.

Code: [Select]
convert has_wrong_byteorder.png gray:- | convert -depth 16 -endian msb -size 320x240 gray:- yay_byteorder_fixed.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on December 28, 2013, 08:35:44 am
Of course, I get a lot of user errors!
I was a little, OK, a lot, fooled by the fact that the png images all look completly gray.  |O

So this is the complete process now,
Quote
exiftool -b -RawThermalImage -if '$RawThermalImageType eq "PNG"' FLIR*.jpg -w %f.png

for i in FLIR*.png; do convert $i gray:- | convert -size 320x240 -depth 16 -endian msb gray:- 2$i ; done
convert 2FLIR*.png -resize 480x -sharpen 0x1 a_%03d.png

Import the gray png images to MS ICE, crop and export a stitched.tiff
php splitjpg.php -i FLIR0172.jpg -r stitch.tiff -o pano1
Open i FLIR tools, save and be happy!

thank you for the support, now out to shoot some panoramas!
 :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2013, 10:26:45 am
@larky
 :-+ :-+

most questions about exiftool/convert scripts caused by the reversed byte order in embedded Flir PNG
it's painful
most Flir cams use 16Bit uncompressed RAW and some cams use compressed (!) 16 Bit PNG

the PNG spec defines only big endian
http://www.w3.org/TR/PNG/#7Integers-and-byte-order (http://www.w3.org/TR/PNG/#7Integers-and-byte-order)
the byte order is a result of processor architecture in Flir cameras and a no public PNG implementation
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 28, 2013, 11:07:14 am
most questions about exiftool/convert scripts caused by the reversed byte order in embedded Flir PNG
it's painful
most Flir cams use 16Bit uncompressed RAW and some cams use compressed (!) 16 Bit PNG
It is indeed quite annoying. I have already gone over the Exiftool code (the Flir part of it), but as far as I can see there is not reasonable fix for the PNG situation. AFAIK some Flir camera's will use big endian and others user little endian. I could be wrong about that, and in fact I HOPE I am wrong about that because then there would be an easy fix.

Best compromise I can think of is to detect what flavor camera you are dealing with, and then based on that swap byte order or not. As in, if it's for example an E4 we know the embedded PNG is going to be crap because Flir decided to go non-standard on us. So extract PNG, swap bytes, repack PNG.

I already patched the latest exiftool version to have your extra tags in it (so I don't have to provide the extra .txt file with extra flir tags all the time). So if I'm going to patch it for use with a Flir camera I might just as well do aworkaround for this silly byte order business.

Do you (or anyone else) know what byte order is used by the various Flir cameras? I could fix it easy enough by always swapping byte order, but that wouldn't be very nice for owners of a Flir camera that actually does adhere to the PNG standard.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2013, 12:31:13 pm
Do you (or anyone else) know what byte order is used by the various Flir cameras? I could fix it easy enough by always swapping byte order, but that wouldn't be very nice for owners of a Flir camera that actually does adhere to the PNG standard.

Phil collect sample images from all cams :clap:
http://owl.phy.queensu.ca/~phil/exiftool/sample_images.html (http://owl.phy.queensu.ca/~phil/exiftool/sample_images.html)
Code: [Select]
$ exiftool -RawThermalImageType *
======== FLIR_B20HS.jpg
Raw Thermal Image Type          : PNG
======== FLIR_B335.jpg
Raw Thermal Image Type          : PNG
======== FLIR_Bertha3.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E30.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E30bx.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E40.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E40bx.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E50.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_E60.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_P60.jpg
Raw Thermal Image Type          : PNG
======== FLIR_P60NTSC.jpg
Raw Thermal Image Type          : PNG
======== FLIR_P60PAL.jpg
Raw Thermal Image Type          : PNG
======== FLIR_P640.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_P660.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T250_Western.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T360_Western.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T400.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T400Western.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T425.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T620.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T620bx.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_T640.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCAM_A320.jpg
======== FLIR_ThermaCAM_E65.jpg
Raw Thermal Image Type          : PNG
======== FLIR_ThermaCAM_EX320.jpg
Raw Thermal Image Type          : PNG
======== FLIR_ThermaCAM_P640.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCAM_P660West.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCAM_SC640.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCAM_SC660Wes.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCAM_T-400.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCamP660Wes.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_ThermaCamSC660WES.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_Z-Camera.jpg
Raw Thermal Image Type          : PNG
======== FLIR_b40.jpg
Raw Thermal Image Type          : PNG
======== FLIR_b50.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_i3.jpg
Raw Thermal Image Type          : PNG
======== FLIR_i5.jpg
Raw Thermal Image Type          : PNG
======== FLIR_i50.jpg
Raw Thermal Image Type          : PNG
======== FLIR_i60.jpg
Raw Thermal Image Type          : TIFF
======== FLIR_i7.jpg
Raw Thermal Image Type          : PNG

I published some php scripts for decoding radiometric flir images and they changes the reverse byte order automatic.
I also published some sample with IM pipes.
I don't know, how can we more help.
Change in exiftools are also not end user friendly, while Phil this changes not integrates in Exiftool Repository

Phil answered to my question about PNG byte order
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23672.html#msg23672 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23672.html#msg23672)
Quote
I don't plan to modify the raw data.  I just return the PNG as is, or tack a TIFF header onto the raw data, but that's as far as I'll go.  (ExifTool doesn't do image manipulations -- that's for other software.)

... but he has kindly exported 16 Bit RAW Data as Tif Images  ;)


it's slow, but works:
changing the byte order with fx operator
Code: [Select]
$ echo -n ABCDEF | convert -size "3X1" -depth 16  gray:-  -fx '(u+int(u*65536)%256))/256' - | hexdump -C
00000000  42 41 44 43 46 45                                 |BADCFE|

$ convert FLIR0074.png -fx '(u+int(u*65536)%256))/256' FLIR0074.tif
http://www.imagemagick.org/script/fx.php (http://www.imagemagick.org/script/fx.php)
range of pixel intensity u is float 0...1 (independent of 8/16/32 Bit)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2013, 12:51:02 pm
I already patched the latest exiftool version to have your extra tags in it (so I don't have to provide the extra .txt file with extra flir tags all the time).

Which new tags do you found?

I posted here some extensions:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343464/#msg343464 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg343464/#msg343464) ?

Phil is a great fan for new tags.
post the tags (with my changes) here
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.90.html (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.90.html)
and give Phil an E4 jpg sample (see post above)
He will take over the new tags
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 28, 2013, 01:00:01 pm
I already patched the latest exiftool version to have your extra tags in it (so I don't have to provide the extra .txt file with extra flir tags all the time).

Which new tags do you found?

None whatsoever. ;D What I tried to say is that I used your user config file you posted some time ago with your extra tags, and patched that into Exiftool source code. That way I don't have to specify that user config file on the command line every time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 28, 2013, 01:14:27 pm
I published some php scripts for decoding radiometric flir images and they changes the reverse byte order automatic.
I also published some sample with IM pipes.
I don't know, how can we more help.
Stricly speaking the problem is already solved. You have it in your php scripts, I have it in my python scripts. But despite us considering it problem solved we still get the occasional post with confusion related to swapped byte order.

That is easy enough to fix in exiftool, but this fix is really only going to be user friendly if it works out of the box. As in if I post a patch and that doesn't make it into mainstream then it is of no use. Because then the clueless would need even more clues (how to apply patch) than the clue required for fixing byte order with a imagemagick pipe.

Quote
Change in exiftools are also not end user friendly, while Phil this changes not integrates in Exiftool Repository

Phil answered to my question about PNG byte order
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23672.html#msg23672 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23672.html#msg23672)
Quote
I don't plan to modify the raw data.  I just return the PNG as is, or tack a TIFF header onto the raw data, but that's as far as I'll go.  (ExifTool doesn't do image manipulations -- that's for other software.)

... but he has kindly exported 16 Bit RAW Data as Tif Images  ;)
In which case I'm not going to bother. My stuff works, your stuff works, the rest can RTFM and find the appropriate posts on how to swap byte order. :)

Best way would probably be to start a wiki page. Yes I noticed your posts about it, but not enough time back then. And among other things we could explain the byte swapping in the PNG file and how to fix it with a simple command line.

Main challenge then is to have new arrivals actually RTFW. :P But linking to a single url for the wiki page is less work than finding an old post in this rather large thread. 2600+ bloody hell.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2013, 01:42:56 pm
I prefer a public Wiki Site like
http://www.wikidot.com/plans (http://www.wikidot.com/plans)
they have free community sites

and google give some hits with search
Code: [Select]
site:wikidot.com hack
but we need an admin with enough time  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2013, 05:15:24 pm
for all E4 users have trouble with pipes and reverse byte order I add third solution to my Flir Panorama Tutorial

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715)

Quote
Variant B.2: if you don't use pipes try Imagemagick mogrify
a sample with reverse byte order (like Flir Ex)
Code: [Select]
$ exiftool -b -RawThermalImage FLIR*.jpg -w %f.png
$ mogrify -format tif -fx 'u/256+int(u*65536)%256)/256' *.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 29, 2013, 01:09:35 am
Code: [Select]
$ exiftool -b -RawThermalImage FLIR*.jpg -w %f.png
$ mogrify -format tif -fx 'u/256+int(u*65536)%256)/256' *.png

This works very well!
I have managed to make a few now and have a very rough cmd file I can process them with (use at own risk):
Code: [Select]
@echo off
REM This cmd file assumes you have PHP, exiftool, and ImageMagick in the system path and have already edited splitjpg.php.
REM You also need to have MS ICE and FLIR Tools installed.
REM
REM Start the process by making sure that Panoramic.cmd and splitjpg.php are in the same folder as your source files for one shot.
REM Then run Panoramic.cmd by dragging the a file from the image set on top of of it.

exiftool -b -RawThermalImage FLIR*.jpg -w %%f.png

mogrify -format tif -fx u/256+int(u*65536)%%256)/256 *.png

del FLIR*.png

@echo Drag all the tiff files into MS ICE and crop and save them to a TIFF as stitch.tiff in the same folder as the source files then exit MS ICE.
@echo You will only see the images as grey - this is normal.
@echo Pressing any key will open MS ICE.

pause

C:\"Program Files"\"Microsoft Research"\"Image Composite Editor"\ICE.exe

@echo stitch.tiff should now be in the same folder as your source files and Panoramic.cmd/splitjpg.php.
@echo If it's not - move it there NOW before pressing a key.
pause

php splitjpg.php -i %1 -r stitch.tiff -o panoramic

@echo Open the panoramic.jpg file in FLIR Tools and resave it to rebuild the JPG preview.
@echo Pressing any key will open FLIR Tools.

pause

C:\ProgramData\Microsoft\Windows\"Start Menu"\Programs\"FLIR Systems"\"FLIR Tools.lnk"

pause

@echo You should now have a panoramic.jpg that can be used as you see fit.

del FLIR*.tif
del stitch.tiff
del *.fff
del raw.hex

On that note - I am trying to run one of the panoramic.jpg's I built through flir.php and keep getting an error:
Code: [Select]
Reflected Apparent Temperature: 20.0 degree Celsius
Emissivity: 0.95
Plancks values: 14020.368 0.02656248 1382.9 -7342 2.5

RAW Temp Range FLIR setting: 11115 12641
RAW Temp Range select      : 11115 12641
RAW reflected: 12167
Warning: GPS pointer references previous ExifIFD directory - C:/Users/OrBy/Downl
oads/FLIR E4/Manual Convert/panoramic.jpg
Warning: GPS pointer references previous ExifIFD directory - C:/Users/OrBy/Downl
oads/FLIR E4/Manual Convert/panoramic.jpg
RAW Temp Range from sensor : 0 27773
convert.exe: divide by zero `14020.368/(0.02656248*(65535*u+-1.0*7342))' @ error
/fx.c/FxEvaluateSubexpression/2191.
wrote "done.jpg" with Temp-Range: 4.9 / 26.1 degree Celsius

The output file is kinda half written but the end is corrupt.
Anyone have any insight?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 29, 2013, 01:20:56 am
FYI: TEquipment.NET just got a new stock of 20 E4's.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve1515 on December 29, 2013, 01:22:35 am
The website still says zero. Where did you hear that?

EDIT: Nevermind... Different places on their website list different things.  :) |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 08:50:40 am
@OrBy
you must open the "cripple" panorama.jpg with flir tools and rewrite (edit+save)  the jpg to write all  neccessary Flir Exif Tags

the fx operator is very slow, use a raw pipe in your batch (better solution)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 09:41:34 am
convert.exe: divide by zero `14020.368/(0.02656248*(65535*u+-1.0*7342))' @ error/fx.c/FxEvaluateSubexpression/2191.
wrote "done.jpg" with Temp-Range: 4.9 / 26.1 degree Celsius

The output file is kinda half written but the end is corrupt.
Anyone have any insight?

Sure. Divide by zero is bad m'kay. So if that expression I emphasized in bold is getting close enough to zero so it gets rounded down to zero before division (due to precision limitations in convert or whatever) then you're boned.

I also like the numerical capabilites of ImageMagick, but personally I wouldn't use it for this for precisely this kind of reason. But I will admit, it seems to work better than I would expect.  ;D As in, it took longer for this kind of problem to surface.

Doesn't php have reasonable PNG read + write + matrix operation support? That, or you could rescale the numbers a bit to avoid rounding errors if that is the case here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 02:39:29 pm
convert.exe: divide by zero `14020.368/(0.02656248*(65535*u+-1.0*7342))' @ error/fx.c/FxEvaluateSubexpression/2191.
wrote "done.jpg" with Temp-Range: 4.9 / 26.1 degree Celsius

The output file is kinda half written but the end is corrupt.
Anyone have any insight?

Sure. Divide by zero is bad m'kay. So if that expression I emphasized in bold is getting close enough to zero so it gets rounded down to zero before division (due to precision limitations in convert or whatever) then you're boned.
http://www.imagemagick.org/script/fx.php (http://www.imagemagick.org/script/fx.php)
I don't think, that the bold expression goes to zero

@OrBy
Do you have rewrite your panorama with Flir Tools?
Please post your jpg sample, if the error still occurs

I can open my panoramas with flir.php:
Code: [Select]
$ exiftool -raw* P1.jpg
Raw Value Median                : 14769
Raw Value Range                 : 1566
Raw Thermal Image Width         : 1410
Raw Thermal Image Height        : 638
Raw Thermal Image Type          : TIFF
Raw Thermal Image               : (Binary data 1799364 bytes, use -b option to extract)

$ ./flir.php -i P1.jpg -o test1.jpg

Reflected Apparent Temperature: -0.0 degree Celsius
Emissivity: 0.95

RAW Temp Range FLIR setting: 13986 15552
RAW Temp Range select      : 13986 15552
RAW reflected: 14005
RAW Temp Range from sensor : 13708 16000
wrote "test1.jpg" with Temp-Range: -0.1 / 10.0 degree Celsius
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 03:06:33 pm
convert.exe: divide by zero `14020.368/(0.02656248*(65535*u+-1.0*7342))' @ error/fx.c/FxEvaluateSubexpression/2191.
wrote "done.jpg" with Temp-Range: 4.9 / 26.1 degree Celsius

The output file is kinda half written but the end is corrupt.
Anyone have any insight?

Sure. Divide by zero is bad m'kay. So if that expression I emphasized in bold is getting close enough to zero so it gets rounded down to zero before division (due to precision limitations in convert or whatever) then you're boned.
http://www.imagemagick.org/script/fx.php (http://www.imagemagick.org/script/fx.php)
I don't think, that the bold expression goes to zero
The FxEvaluateSubexpression related error message begs to differ. ;) It only has to barf for one single pixel and you will get that error.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 03:14:28 pm
Quote
I don't think, that the bold expression goes to zero:
u is RAW Sensor value => Integer
Quote
u   (0.02656248*(65535*u+-1.0*7342)
0   -195,0217282
1   1545,750399
2   3286,522525
3   5027,294652
4   6768,066779
5   8508,838906
6   10249,61103
7   11990,38316
8   13731,15529
9   15471,92741
10   17212,69954
11   18953,47167
12   20694,24379
13   22435,01592

let's post OrBy a sample
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 04:01:23 pm
Can you tell me what the scaling factor of 65535 is doing there? Because if u is a 16-bit unsigned RAW sensor value then you might as well ditch the 1.0*7342 because that is vanishingly small to 65535*uint16 in the typical range for E4 raw images. But agreed, best just wait for the picture and test it. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 05:18:29 pm
a good question and the answer for the error

I wrote formulas here:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.60.html (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.60.html)

Code: [Select]
T = B / ln(R1/(R2*(S+O))+F)

T = object temperature in Kelvins
S = 16 Bit RAW value
R1 Planck R1 constant
R2     Planck R2 constant
B    Planck B constant. Value range 1300 - 1600.
F     Planck F constant. Value range 0.5 - 2.
O    Planck O (offset) constant. Its a negative value.

S = 16 Bit RAW value [0...65535]
ImageMagick u has a brightness range from 0...1  (float) , independent of 8/16 Bit
S= 65535 * u


the error comes from
ln(R1/(R2*(S+O))+F) => with  (R1/(R2*(S+O))+F)<0
if OrBy stitched a panorama with transparent edges he has a brightness of Zero
Flir Tools processed zero without errors
Quote
u   (0.02656248*(65535*u+-1.0*7342)
0   -195,0217282
1   1545,750399

snip from flir.php
Code: [Select]
// convert every RAW-16-Bit Pixel with Planck's Law to a Temperature Grayscale value and append temp scale
$Smax=$B/log($R1/($R2*($RAWmax+$O))+$F);
$Smin=$B/log($R1/($R2*($RAWmin+$O))+$F);
$Sdelta=$Smax-$Smin;
exec($convert." raw.png -fx \"($B/ln($R1/($R2*(65535*u+$O))+$F)-$Smin)/$Sdelta\" ir.png");
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 05:32:33 pm
S = 16 Bit RAW value [0...65535]
ImageMagick has a brightness range from 0...1  (float) , independent of 8/16 Bit
S= 65535 * u
This was sort of my hint to you, in the form of a leading question. ;) ;) ;)

So given that u is a float in the 0...1 range, what can we now deduce about the chances that the bit I put in bold actually does go to zero, and will cause an Fxsubexpressiondivbyzerothingyerror?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 05:49:53 pm
I have converted thousend images with the fx operator without errors.
The fx operator is the fastet way for calculating 320*240 = 76.800 Pixel inside a script
http://www.imagemagick.org/script/fx.php (http://www.imagemagick.org/script/fx.php)
fx can also handle conditional expressions, but I see no need for changes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 06:16:11 pm
I implied none of the <your_list_of_defenses>. All I'm saying is that the error is caused by a div by zero. Which for u=0...1 (you know, like you just said after my leading question ;) will in fact happen. Your nice table of u=0,1,2,3,4 is nice, but has nothing to do with the computational reality of what the FX evaluate actually sees. Case in point. The stuff in bold is 1st order. For 0 your table entry is negative, check. For 1 your table entry is positive, check, Guess what the behavior of that 1st order function is for u values between 0 and 1. Exactly, it has a zero crossing. The u value where the bold stuff hits zero is left as an excercise for the reader.

I am not responding to your intentions, which I am sure are nice and positive and stuffs. Nor am I responding to your loads of images that have not resulted in a problem. (If I got $1 for every time I heard that one from a pouty dev I would be rich indeed ;D). I am responding to the error message, which says div by zero on an expression that indeed has a zero crossing for the denominator on the domain [0,1] for u.

But anyways, that's all from me on the subject. If it works for you it works for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 06:47:32 pm
I think it may be related to this ...

Shift range of raw values because that is handy for some operation or other (panorama) ...

RAW Temp Range from sensor : 0 27773
convert.exe: divide by zero `14020.368/(0.02656248*(65535*u+-1.0*7342))' @ error/fx.c/FxEvaluateSubexpression/2191.

0 <= 7342 <= 27773
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 07:15:55 pm
we both understood why the panorama stitching can results in out of range values (logarithm)

I never used flir.php with self generated images and every user can simple edit the script for his requirements

we have here a nice fork for batch converting of images
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)
 
last week I posted
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg352778/#msg352778 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg352778/#msg352778)
and changed my lines 173 ff for better color tables
Code: [Select]
// extract color table, swap Cb Cr and expand video pal color table from [16,235] to [0,255]
// best results: Windows -colorspace sRGB | MAC -colorspace RGB
exec($exiftool.' '.$flirimg.' -b -Palette | '.$convert.' -size "'.$exif[0]['PaletteColors'].'X1" -depth 8 YCbCr:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB  '.$embpal);
//  clip BT.601 offset, the brightness is limited (16..238?)
exec($convert." ".$embpal." -level 4096,60928 ".$embpal);
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 29, 2013, 07:25:55 pm
Whoa - everyone has been busy this morning!

Ok - I am for sure opening the offending panoramic.jpg's in FLIR Tools and re-saving them. It does not affect every one that I have done but it does affect a few so it does not seem like a one off issue.
I do wonder if I am actually causing this or if it has to do with the fact that I am choosing to not crop the image in MS ICE before processing them though splitjpg.php?

Here is one of the images that seems to fail when running though flir.php

http://members.shaw.ca/orby/FLIR/panoramic.jpg (http://members.shaw.ca/orby/FLIR/panoramic.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 29, 2013, 07:31:32 pm
Of course. I'm not trying to diss you; I quite like the work you're doing. All I am trying to point out that the error message does indicate a div by zero. Why that is (user error, dev error, exploding cpu error), I don't care, div by zero is div by zero. Which was my point to begin with.

At any rate, regardless of intentions, do you see now that div by zero is occuring? What you do with this info is obviously entirely up to you because it's your code. All I try to do is point out what I think is happening, and is causing that error.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 29, 2013, 10:26:53 pm
Quote
I don't think, that the bold expression goes to zero:
u is RAW Sensor value => Integer
Quote
u   (0.02656248*(65535*u+-1.0*7342)
0   -195,0217282
1   1545,750399
2   3286,522525
3   5027,294652
4   6768,066779
5   8508,838906
6   10249,61103
7   11990,38316

|O |O   I wrote myself, that Imagemagick u range goes 0...1 (float) |O |O

Flir formula goes out of range, if RAW value less then abs(Planck_Offset)
this only happens with self made RAW values (i.e. panorama)

I changed flir.php from
Code: [Select]
exec($convert." raw.png -fx \"($B/ln($R1/($R2*(65535*u+$O))+$F)-$Smin)/$Sdelta\" ir.png");
to
Code: [Select]
// check RAW value > |Planck Offset|
// x?y:z  Imagemagick ternary conditional expression, returns value y if x > 0, otherwise z
exec($convert." raw.png -fx \"($B/ln($R1/($R2*((65535*u+$O)?(65535*u+$O):1))+$F)-$Smin)/$Sdelta\" ir.png");
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 29, 2013, 11:26:03 pm
tomas123 - you nailed it - all images process without any issues now.  :-+

If it were not for the fact that it's -27C outside with a windchill making it -37C (-35F for the people south of me) and my cold - I would be running around outside making pano's all night! ;D
For now indoor ones will have to do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 30, 2013, 08:54:05 am
another topic,
some informations to lens

What is the relationship between lens f-number and camera performance or NEdT?
http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=341&view=37198 (http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=341&view=37198)
Quote
By assigning a value of X to variable 1, and Y to the NEdT value of the camera using optic X, then the normalized value (to f/1.0) can be calculated as:  (1.0÷X)² x Y
As an example, assume a thermal imager with an NEdT of 87mK using an f/1.6 lens.
To normalize its performance to f/1.0, the calculation is: 
(1.0÷1.6)² x 0.087; or (0.625)² x 0.087; or 0.3906 x 0.087; equals 0.03398; which is 34.0mK.
This means that a camera with an f/1.6 optic has about 2.5 times less thermal sensitivity than the same camera with an f/1.0 lens.

The E8 FOV calculator is now online
http://flir.custhelp.com/app/utils/fl_fovCalc/pn/63903-0303/ret_url/%252Fapp%252Ffl_download_datasheets%252Fid%252F15 (http://flir.custhelp.com/app/utils/fl_fovCalc/pn/63903-0303/ret_url/%252Fapp%252Ffl_download_datasheets%252Fid%252F15)
Quote
Camera: 63903-0303; FLIR E8
Focal length: 6.6 mm
Resolution: 320 × 240 pixels
Field of view in degrees: 44.80
Close focus: 0.5 m (1.6 ft.)
D0.501.002.005.0010.0025.0050.00100.00m
HFOV0.410.821.654.128.2420.6141.2182.42m
VFOV0.310.621.243.096.1815.4530.9161.82m
DOF near0.320.470.620.760.820.870.880.89m
DOF far1.12InfinityInfinityInfinityInfinityInfinityInfinityInfinitym
IFOV1.292.585.1512.8825.7664.39128.79257.58mm
Legend:
D = Distance to target in meters and feet
HFOV = Horizontal field of view in meters and feet
VFOV = Vertical field of view in meters and feet
DOF near = Depth of field near limit in meters and feet
DOF far = Depth of field far limit in meters and feet
IFOV = Instantaneous field of view (size of one detector element) in millimeters and inches

with http://en.wikipedia.org/wiki/Angle_of_view (http://en.wikipedia.org/wiki/Angle_of_view)
I calculate a Flir Ex sensor size of 4,5mm x 3,0mm
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 30, 2013, 09:04:04 am
Quote
I don't think, that the bold expression goes to zero:
u is RAW Sensor value => Integer
Quote
u   (0.02656248*(65535*u+-1.0*7342)
0   -195,0217282
1   1545,750399
2   3286,522525
3   5027,294652
4   6768,066779
5   8508,838906
6   10249,61103
7   11990,38316

|O |O   I wrote myself, that Imagemagick u range goes 0...1 (float) |O |O

Flir formula goes out of range, if RAW value less then abs(Planck_Offset)
this only happens with self made RAW values (i.e. panorama)

Quite. But I decided not to rub it in (too much) at the time. That never helps for getting a solution. But now that you already fixed it (nice one!  :-+) I can do a told you so!!! ;) ;) ;)

I still haven't had enough time to mess with panorama's but your results look great. So I will surely borrowgrabstealninjabuildupon some of your php code in the future for that. Keep up the good work! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 30, 2013, 06:40:30 pm
Flir formula goes out of range, if RAW value less then abs(Planck_Offset)
Good job again ! I have also updated batch version here https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 30, 2013, 07:17:38 pm
for fans of calibration values I collected Planck values of 21 Flir E4 Cameras from this forum

the values are good to estimate the valid range
Code: [Select]
$ exiftool -cameraserialnumber -cameramodel -camerapartnumber -Planck* -T  * | sort -u
63900644 FLIR E4 63901-0101 14020.368 1382.9 2.5 -7342 0.02656248
63902276 FLIR E4 63901-0101 16100.758 1423.8 2.5 -7565 0.027524546
63902871 FLIR E4 63901-0101 13065.324 1362.1 2.5 -7426 0.026384041
63902926 FLIR E4 63901-0101 14616.754 1395.2 2.5 -7634 0.027545726
63903757 FLIR E4 63901-0101 15424.458 1411.1 2.5 -7669 0.027808052
63903771 FLIR E4 63901-0101 15623.854 1414.9 2.5 -7683 0.02773639
63903946 FLIR E4 63901-0101 15258.479 1407.9 2.5 -7484 0.027325163
639047xx FLIR E4 63901-0101 14469.053 1392.2 2.5 -7489 0.026838331
63905144 FLIR E4 63901-0101 15565.878 1413.8 2.5 -7702 0.028072728
63905150 FLIR E4 63901-0101 14366.53 1390.1 2.5 -7424 0.026818641
63905373 FLIR E4 63901-0101 13906.795 1380.5 2.5 -7472 0.027203841
63905649 FLIR E4 63901-0101 14911.534 1401.1 2.5 -7619 0.027500641
63906373 FLIR E4 63901-0101 14957.009 1402 2.5 -7386 0.026861623
63906375 FLIR E4 63901-0101 15038.183 1403.6 2.5 -7572 0.027612705
63906504 FLIR E4 63901-0101 14631.607 1395.5 2.5 -7614 0.027706234
63906582 FLIR E4 63901-0101 14871.23 1400.3 2.5 -7575 0.027825247
63906738 FLIR E4 63901-0101 15119.786 1405.2 2.5 -7652 0.027600825
63906800 FLIR E4 63901-0101 14187.615 1386.4 2.5 -7541 0.027075034
63906811 FLIR E4 63901-0101 14221.295 1387.1 2.5 -7543 0.027224826
63907847 FLIR E4 63901-0101 14454.367 1391.9 2.5 -7504 0.027200488
63908691 FLIR E4 63901-0101 13780.099 1377.8 2.5 -7324 0.026437858

and a fast google picture search:
Code: [Select]
$ exiftool -cameraserialnumber -cameramodel -camerapartnumber -Planck* -T  ../google/* | sort -u
63900032 FLIR E8 63904-0101 15206.969 1406.9 2.5 -7453 0.027209383
63900279 FLIR E8 63903-0303 13181.149 1364.7 2.5 -7297 0.026171871
63900287 FLIR E6 63902-0202 24583.551 1546.9 1 -8056 0.030313723
63900288 FLIR E8 63903-0303 23907.283 1538.5 1 -7877 0.02959899
63900327 FLIR E5 63905-0501 14187.615 1386.4 2.5 -7322 0.026472446
63900337 FLIR E4 63901-0101 14513.211 1393.1 2.5 -7355 0.026683211
63900344 FLIR E6 63902-0202 14926.68 1401.4 2.5 -7461 0.027109843
63903538 FLIR E4 63901-0101 15597.475 1414.4 2.5 -7520 0.027363654
63903771 FLIR E4 63901-0101 15623.854 1414.9 2.5 -7683 0.02773639
63904401 FLIR E4 63901-0101 14395.749 1390.7 2.5 -7534 0.027263179
63905648 FLIR E4 63901-0101 14557.501 1394 2.5 -7524 0.027254194
63908674 FLIR E4 63901-0101 14671.283 1396.3 2.5 -7578 0.027321232
63908976 FLIR E4 63901-0101 14459.261 1392 2.5 -7533 0.027230503
interesting, there  are two cams with Planck F = 1.0 on Flir Shopping Site (s/n 63900287 and 63900288):
(images from preproduction model?)
- http://www.revizeshop.cz/fotky29448/fotos/_vyrd11_329FLIR0016.jpg (http://www.revizeshop.cz/fotky29448/fotos/_vyrd11_329FLIR0016.jpg)
- http://www.tequipment.net/FlirMSXMulti-SpectralDynamicImaging.html (http://www.tequipment.net/FlirMSXMulti-SpectralDynamicImaging.html) with E8_Transformer_mounted_on_ceiling.jpg

Planck constants:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23972.html#msg23972)
Code: [Select]
boundary condition:
     object distance = 0
     external optics transmission = 1.0

T = B / ln(R1/(R2*(S+O))+F)

T = object temperature in Kelvins
S = 16 Bit RAW value
R1  Planck R1 constant
R2  Planck R2 constant
B   Planck B constant. Value range 1300 - 1600.
F   Planck F constant. Value range 0.5 - 2.
O   Planck O (offset) constant. Its a negative value.

ln() natural logarithm

calibration:
- sample for low temp. https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622)
- Excel sheet https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350457/#msg350457 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350457/#msg350457)



manual of GenICam ICD FLIR AX5 Camera
http://www.workswell.cz/manuals/flir/hardware/Ax5_models/ICD_GenICam_ICD_FLIR_Ax5_Camera_PC.pdf (http://www.workswell.cz/manuals/flir/hardware/Ax5_models/ICD_GenICam_ICD_FLIR_Ax5_Camera_PC.pdf)
Code: [Select]
Temperature (in Kelvin) = B / log(R / (S - O) + F)
S is the 14-bit digital signal value.
log(x) is the base-e logarithm of the x parameter.
R Planck R constant
B Value range 1300 - 1600.
F Value range 0.5 - 2
O (offset) constant
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 30, 2013, 08:44:12 pm
here comes the analysis

The tolerance of sensors are relatively little versus errors in measurement
This does not explain the large measurement errors of Ex at temperatures below 0 degrees.

see discussion
Today I took a look at the datasheet for the E4 (http://support.flir.com/DsDownload/Assets/63901-0101_en_50.pdf) and it says as follows.
Measurement
Object temperature range–20°C to +250°C (–4°F to +482°F)
Accuracy ±2°C (±3.6°F) or ±2% of reading, for ambient temperature
10°C to 35°C (+50°F to 95°F) and object temperature above +0°C (+32°F)

and
There has been some discussion on the accuracy (or lack thereof) of the E4 at low temperatures.

I just found the pictures I took some time ago when we had a nippy spell here in the UK. The temperature on the evening when the pictures were taken was +2 Degrees Celsius. I measured the concrete slab and wall with a thermocouple and an IR thermometer. Both confirmed a true surface temperature of +2.5 Degrees Celsius on the wall and  and +2.0 Degrees Celsius on the slab.

As can be seen from the pictures, the E4 was somewhat confused in its measurement of the brick wall and concrete slab Temperatures. Both surfaces were dry and clean.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348761/#msg348761 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348761/#msg348761)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on December 30, 2013, 08:54:10 pm
Can someone please tell me what progress has been made since the 3b resolution hack and taucher's beta2 mod? I saw reference to a zoom function etc. Are these features going to be added to the menu hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on December 30, 2013, 11:08:30 pm
Well, I though cameras were calibrated in ambient 20°C. But it is not working either.

Now outside is somewhat -5°C, digital thermometer on swimming pool wall is reading +2°C and it can be true, since water in is not freezed.
When I am with camera inside, in 22°C and just slide a door a little, point it out at pool, it says -7°C and when I point on any other thing, it says like -13°C.

So I though error is caused by low temperature of camera, but this seems not be true.

Why should we replace calibration values with better ones, when camera should be calibrated from factory ? Any explanation ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 31, 2013, 12:46:04 am
Just feel like posting a quick pano image. I cannot thank everyone enough for how much awesome has come out of this thread.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2013, 01:00:13 am
Did someone say the panoramic feature in FLIR Tools+ is not very good  ?

I ask because I have Tools+ but have yet to load it. The Panoramic feature was one that I was looking forward to using. So is it cr*p and in what respects ? Any insight appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 31, 2013, 01:13:19 am
Flir Tools is a great software, but the panorama function is extremely bad if you have more then 4 images (multi row, correction of distortion, cross-fade)

try the free 30 day trial Tools+ (a part from Flir Tools)

here is a sample (stitched from 8 images , see my tutorial https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715) )

Flir Tools+ (original size)
see the ghosts images at second columns head and the balustrade
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=73923;image)

and the same images resized and converted with the free Panorama Software MS ICE
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71460;image)

this is a relative good result for FlirTools+ (I shoot the images with tripod)
If you have rotated images like OrBy's engine bay then FlirTools+  :--

Flir want sell cameras with large sensors and not software solutions.
The imprint of the color scale and a logo in an original E4 image with 80x60 sensor pixels is cheating
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2013, 01:52:19 am
Thanks tomas123,

That was exactly what I was asking for. I now understand the issue a little better  :)

I already have FLIR Tools+ as FLIR were kind enough to gift me the upgrade after I sent them feedback on my cameras and the Tools software. I have been using the standard Tools software and have not got around to upgrading it to the + version yet. It will be nice to have the recording facility as well.

Thanks again for taking the time to answer my question with those very informative pictures.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 31, 2013, 03:05:50 am
My new ebay micro USB cable came today.

To address the poor placement of the USB port and the chance to damage it since it's not re-enforced that well I picked up a cable with a 90 degree bend in it.
Fits nice and stays flush and there is only a fraction of force being put on it from the rubber flap now.
Now recording video with vdub does not feel like as much of a gamble, and since it's a 6ft'er I am not so tied to the PC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2013, 11:42:51 am
I bought one of those leads as well. The down side for me was that it was quite hard to get a grip on the plug to remove it, thanks to the recessed socket. I was actually concerned that I was placing more force on the socket in my efforts to remove the right angled plug  :( Is your particular cable easy to unplug from the camera ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 31, 2013, 01:02:48 pm
Mine is very tight as well but I was thinking that adding a zip tie as a small pull tab may help. I am going to try later today.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2013, 02:01:42 pm
Good idea. I found I was pulling on the strain relief too much and that caused lateral force on the socket. It really is a great pity that the E4 design team chose such an awful connector but we must do what we can with what is provided. I looked at making a micro to mini USB adapter that would permanently sit in the socket recess. Sadly there is not enough depth for  the plug and sockets that I found. I have decided that if my micro USB socket fails I will do some surgery on my E4 and fit a decent connector.... it does not have to be a standard USB type so other options are available.

My FLIR PM series cameras use quality LEMO connectors but they have the down side of being VERY expensive  :( Quality costs  ;D
Title: Flir E4 Thermal imaging camera teardown
Post by: madshaman on December 31, 2013, 02:13:13 pm
A bit OT, but a fun game to play with a hacked E4 is thermal hide and seek.  Have the hider(s) wear bare feet, start where you are, then close your eyes and give them the count of ten to hide.

Their feet will leave behind big bright footprints for you follow :-)

I played this with my better half until she started tip toeing and hiding behind heat sources.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 31, 2013, 05:02:28 pm
Good idea. I found I was pulling on the strain relief too much and that caused lateral force on the socket. It really is a great pity that the E4 design team chose such an awful connector but we must do what we can with what is provided. I looked at making a micro to mini USB adapter that would permanently sit in the socket recess. Sadly there is not enough depth for  the plug and sockets that I found. I have decided that if my micro USB socket fails I will do some surgery on my E4 and fit a decent connector.... it does not have to be a standard USB type so other options are available.

My FLIR PM series cameras use quality LEMO connectors but they have the down side of being VERY expensive  :( Quality costs  ;D

Zip tie pull tab helps a good bit - and if angled correctly adds more strain relief/bracing against the housing while still not coming into contact with the rubber flap!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on December 31, 2013, 09:52:28 pm
The print view of this topic now renders a blank page, guess it got too big for SMF as well.  Shame. Apart from easy in browser searching the print view is also useful for saving a local copy.

gnif was nice enough to fix this... thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 01, 2014, 01:25:43 am
Can someone please tell me what progress has been made since the 3b resolution hack and taucher's beta2 mod? I saw reference to a zoom function etc. Are these features going to be added to the menu hack?
I wrote about the correct syntax of zoom enable in menu. There is a change in Mike's E4-Hack required.
Look at my footer for my post about this. Since this time I deleted the (at time) unused stuff from the file "toolbar-config_z3.xml", for clarity.
It is the actual and final hack status for me. Interesting future features are (for me) image resolution enhancement (like at zoom images) and a higher frame rate.
If you want details, please ask me.
After countless coldstarts there were malfunctions. It is recommendable to reset device settings to factory default. Then and since everything is working properly.
And after my E4 now is better than a E8, I have named E9 (in EEPROM)!
YEAH!!!!!  Thanks TONS for the zoom feature!!!!  SUPER EASY!!!!
I had installed the e8 hack previously and the zoom entries were already there, but the .xml file had the menu item commented out (disabled), so all I had to do was edit the <toolbar name= (etc) to enable the zoom menu item, and VIOLA!!!!!  I got's the zooommmm stuff!

EXCELLENT!!!  Thanks tons!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 01, 2014, 03:10:13 pm
Just for fun (and maybe because I'm a little stats-freak ;) ) I made a graph for the posts per day in this thread. See attached image.
I used the dates according to my timezone setting (UTC +1), so if anyone wants to try this at home, he / she may get a litte bit different numbers.
Oh, and just for the record: October 24th was the day when Mike confirmed the 320x240 Pixels resolution ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 01, 2014, 04:50:18 pm
Can someone please tell me what progress has been made since the 3b resolution hack and taucher's beta2 mod? I saw reference to a zoom function etc. Are these features going to be added to the menu hack?

I'll most likely un-comment zoom in Beta3 - but it's just digital zoom, there's no image quality to gain - so not urgent :)
Right now I'm pretty busy and I'm lacking enough free time to play with the E4  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 01, 2014, 05:33:48 pm
Taucher,

your efforts are greatly appreciated and I know exactly what you mean regarding finding spare time to 'play'. I have been using my E4 a lot recently and I must say I welcome the Zoom capability. The 45 Degree lens FOV is normally specified for close-in viewing such as a small room with an electrical distribution cabinet. The common 'standard' FOV on industrial thermal cameras was 24 Degrees. I am used to such, so find the E4 a little too wide angle for some tasks. Targets appear small on the display and so can be harder to interpret.

You are quite correct that the Zoom feature adds no improvement in resolution, in fact it reduces such. What the electronic zoom does offer though, is a larger target image on the E4's built in screen in real time and without the need of a PC. This can be useful where the target is small in size, such as a PCB SMT component. The ZnSe Close-up lens gives an excellent pcb inspection capability, but it will be nice to be able to zoom in closer when required.

The X2 zoom is likely to be my most used zoom level as 160x120 resolution is acceptable for my needs, and provides the approx. 24 Degrees FOV that I miss in the unenhanced E4. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 01, 2014, 05:39:08 pm
Happy New Year! Today I got a Google alert that the K-Series (fire fighting version of the E40)  trade-in program was extended. Not something I was particularly interested in except for the fact that the K series unit has two temperature ranges -20C - 150C and 0C - 650C as well as a fire palette that looked pretty cool. To that end  I wanted to see if there is anyone who has stumbled across any of the other temperature ranges in their exploits in other Flir cameras (Exx series has multiple ranges and I remembered someone renting an E60 for a short period of time) I was thinking that if we had the files from one that the higher temperature range might be made available and calibrated through the astra web interface. As it is right now only the one range is available. I have some applications where a higher temperature range would allow me to NOT apply too much heat to smaller fragile items and is on my "Thermal imaging wish list". Thanks for any thoughts consideration... :D

The K series info is available at: http://www.flir.com/uploadedFiles/CVS_Americas/Law_Enforcement/Products/K-Series/FLIR-K-Series-brochure.pdf (http://www.flir.com/uploadedFiles/CVS_Americas/Law_Enforcement/Products/K-Series/FLIR-K-Series-brochure.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 01, 2014, 05:55:56 pm
Which procedure do you have selected?
The image is a stitched msx panorama and not a Flir radiometric image (set measured points in Flir Tools)

Since FLIR makes JPG compressed too much, it makes ugly smudges and you do not know what is heat and what is jpg artefact :-D. So I use this procedure:

Extract IR images from all parts of panorama:
Code: [Select]
>panorama.cmd
I am using modified version of panorama.cmd, to produce visible IR:
Code: [Select]
@echo off
for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN FLIR*.jpg`) do call :over %%f
goto :eof
:over
set a=%1
echo %a:~4,4%
exiftool -b -RawThermalImage %1 | convert - gray:- | convert -depth 16 -endian msb -size 320x240 -level 10000,16000 gray:- RAW%a:~4,4%.tif

Then I extract also all real images:
Code: [Select]
>exiftool -b -EmbeddedImage FLIR*.* -w Real_%f.jpg
Now is time to stitch IR and REAL images, so I will have two panorama images.

After that, I convert panorama back to nonvisible IR:
Code: [Select]
>convert Stitched_panorama.tiff +level 10000,16000 stitch.tiff
And finally convert to some palette:
Code: [Select]
>convert stitch.tiff -level 10520,10900 pal.png -clut test.png
Then I take some image editor and put IR over REAL. Result you have seen before.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 01, 2014, 06:16:35 pm
Can someone please tell me what progress has been made since the 3b resolution hack and taucher's beta2 mod? I saw reference to a zoom function etc. Are these features going to be added to the menu hack?

I'll most likely un-comment zoom in Beta3 - but it's just digital zoom, there's no image quality to gain - so not urgent :)
Right now I'm pretty busy and I'm lacking enough free time to play with the E4  :)
HAPPY NEW YEAR!!!!

Yes just digital zoom but it appears to have some image smoothing so the quality isn't that bad.  I also removed the X8 zoom as it was really not very usable, even X4 is pushing it but could be useful in some situations.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 01, 2014, 06:27:07 pm
Happy New Year! Today I got a Google alert that the K-Series (fire fighting version of the E40)  trade-in program was extended. Not something I was particularly interested in except for the fact that the K series unit has two temperature ranges -20C - 150C and 0C - 650C as well as a fire palette that looked pretty cool. To that end  I wanted to see if there is anyone who has stumbled across any of the other temperature ranges in their exploits in other Flir cameras (Exx series has multiple ranges and I remembered someone renting an E60 for a short period of time) I was thinking that if we had the files from one that the higher temperature range might be made available and calibrated through the astra web interface. As it is right now only the one range is available. I have some applications where a higher temperature range would allow me to NOT apply too much heat to smaller fragile items and is on my "Thermal imaging wish list". Thanks for any thoughts consideration... :D

The K series info is available at: http://www.flir.com/uploadedFiles/CVS_Americas/Law_Enforcement/Products/K-Series/FLIR-K-Series-brochure.pdf (http://www.flir.com/uploadedFiles/CVS_Americas/Law_Enforcement/Products/K-Series/FLIR-K-Series-brochure.pdf)

The firefighting mode skin ( green numbers and smaller temperature scale) looks much more better than original one. I will really appreciate to have it on Ex camera enabled.
I'm also interested what is the difference between various temperature range cameras. Is it only calibration?
It seems that the zoom feature is for this version Kx0 and not for Ex series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2014, 12:14:43 am
Just installed activated the Electronic Zoom menu....... Excellent  :-+
A very useful facility to have on board.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 02, 2014, 10:35:28 am
Which procedure do you have selected?
The image is a stitched msx panorama and not a Flir radiometric image (set measured points in Flir Tools)
...
Then I take some image editor and put IR over REAL.

interesting, a fast way and your images overlay looks great

I tested some time ago Hugin. But Hugin is hard to control.
Hugin Panorama
...
With minor changes in the flir.php script you can save real and thermal image as two images with the same pixel size  and the same field of view.
Now you can stitch the real images with Hugin and save the *.pto project file.
In the next step load the thermal images and use the *.pto with the real image control points for stitching.
After then you have a real and a thermal panorama with the same field of view (make a MSX with IM convert etc).

This method with hugin is great for thermal images with minor difference in temperature ...
... where you can't find good control points in thermal images
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 02, 2014, 10:53:51 am
Hi to all,
my first post here.

Just hack my new E4 (Mike hack and ADDMENU_BETA2a), it works wonderfully!
Thanks to Mike and other great people here!

For log purpose:

Cal date: 17/Dec/2013
SN:63910xxx
Model: E4 1.1
SW: 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2014, 11:54:28 am
Thanks for s/n & FW info.

While the process is still fresh in your mind, it would be a good idea to add the Zoom menu as well. Details recently in this thread.

The complete FlashBFS file is available to use but I decided to edit my current Menu2b file instead.

I had some issues editing the XML file with the MS 2007 XML notepad due to 'illegal' characters in it, but ordinary notepad worked fine on the XML and allowed enablement of the zoom functionality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 02, 2014, 05:21:08 pm
Hello all, new boy on the forum. I discovered this thread just before Christmas and have finally got through all 179 pages, God knows how because after page 100 most of it went over my head!

I have held off getting the E4 so far, but now thanks to the information in this thread I am pretty sure that I can apply Mike's upgrade and unleash the E4's full potential.

I have a trip to New York approaching and wondered if anybody could recommend a reputable dealer there, or one which would deliver to an address over there. Obviously I will Google this, but a recommendation would gratefully received.

Secondly, did I read that the E30/E40 is also upgradable with E60 firmware?

Thanks in advance

Bovvy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 02, 2014, 06:23:32 pm
Thanks for s/n & FW info.

While the process is still fresh in your mind, it would be a good idea to add the Zoom menu as well. Details recently in this thread.

The complete FlashBFS file is available to use but I decided to edit my current Menu2b file instead.

I had some issues editing the XML file with the MS 2007 XML notepad due to 'illegal' characters in it, but ordinary notepad worked fine on the XML and allowed enablement of the zoom functionality.

Thanks Aurora for your answer.
If I am not wrong for the zoom features I have to uncomment some rows in the xml file and reload it by FTP, is it right?

I have also printed the tool for focusing and the lens holder see the pics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2014, 06:56:42 pm
Hiya,

Nice 3D prints  :-+

I have not seen that focus tool before. Can you share the STL file ?

You are correct regarding uncommenting the zoom statements in the XML file. You will also need to set the zoom statement from false to true in Mikes resolution upgrade file. This will require that you also run the CRC calculation again. Its the same process that you carried out for increasing the resolution but you need to first make the change to the zoom configuration line. There is no need to remove either of the files that you have already installed. Just over write them via FTP  :)


I have attached the XML file, within the FlashBFS folder structure, that I used. It is using the Version2b baseline created by Uup (which uses the XML file originally created by Taucher)

I have also added the edited resolution file with the Zoom option set to true

Update. I think I attached the wrong XML file so I have deleted it and added the right one. Sorry.

Update. I have added the Uup menu file set called FlashBFS that I edited to activate the Zoom function. Use this if you find it easier than using the XML file alone.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 02, 2014, 09:19:49 pm
Hello everyone. I just received my E4 from Valuetesters.

Cal date: Nov 21, 2013
SN:63907xxx
Model: E4 1.0
SW: 1.19.8

(Info matches another already in Aurora's list)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 02, 2014, 09:53:43 pm
After I successfully added the zoom option, I was messing with calibration file calib.rsc, since cold values are off anyway, so it could not be worse.

I used values from excel published here without any modification (because it cant be worse anyway) and I have great results.

Freezer is no more showing -40°C, but -18°C now. Ambient temperature is shifted +2.5°C - I believe when I do correct tests to get my own calibration values, I will get yet better.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 02, 2014, 10:21:57 pm
After I successfully added the zoom option, I was messing with calibration file calib.rsc, since cold values are off anyway, so it could not be worse.

I used values from excel published here without any modification (because it cant be worse anyway) and I have great results.

Freezer is no more showing -40°C, but -18°C now. Ambient temperature is shifted +2.5°C - I believe when I do correct tests to get my own calibration values, I will get yet better.

I accidentally got the wrong sign in the error columns. It doesn't matter much, but it may look confusing. Column C should be "B2-A2" etc, not "A2-B2", and column F should be "E2-A2" etc. It will still produce the right calibration parameters, but I'll attach the corrected sheet here anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 02, 2014, 10:34:05 pm
I accidentally got the wrong sign in the error columns.
I have noticed, but I though you meant it that way.

By the way - I had no time to deep tests yet, but seems to me if you put camera into cold, it shifts whole range down. I mean - I keep camera at 20°C and point at matte black painted steel and it says 23°C. I take it out in 0°C for a while to cool down a bit and take it back at 20°C and point again on that black steel and it says 19°C. If I let it warm, it gets back to 23°C.

What I am trying to say is, that the line probably should not be flat (horizontal), but should be tilted to count with temperature shift. Just guessing.

Great job anyway, It was kind of pitty to take camera out while it was telling you its -11°C or so, when actually was just below 0°C.

BTW: I do not know If someone told it before, but J0 = 1/R2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 02, 2014, 11:06:16 pm
BTW: I do not know If someone told it before, but J0 = 1/R2

You mean J1=1/R2.
J0 is the same as O in the excel sheet although in the calib.rsc file the sign for J0 seems to be reversed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2014, 11:08:14 pm
I have been playing with the XML file.

It is very easy to change the menu options present and the order in which they appear  :)

I have used the 'Zoom enabled' XML file produced by 'freak_ge' as the basis of my own personal XML preference.

I changed the palette order to the following:

Top row: Iron / Rainbow / Rainbow HC / White hot / Black hot / Arctic / Lava
Bottom row: Blue below / Red above / Interval / Detect Condensation / Detect insulation deficiencies

If anyone else wants to use this version of the XML, I attach it for your use. Just take the FlashBFS folder (after unzipping it) and use FTP to overlay the cameras FlashBFS folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 02, 2014, 11:12:33 pm
I know this has already been discussed before but I must say that the USB port is the absolute worst design.
Everything else about the E4 is beautiful, but that plug..... 0/5 stars on that.

Big props to Mike (researcher and high-rez enabler), Taucher (menus), freak_ge (zoom) and everyone else I missed for the discovery, subsequent learning and implementation of useful feature additions to the E4 to make it even better.
It is an incredible tool.  I've already found where the air ducts route in the floors, ceiling and walls as they go to the various rooms.  So cool!

I noticed after just a short while of using the E4 that the frequency of calibrations slowed down a lot.  I mean, after turning it on it was calibrating once every minute or so, but after being on for a while it only calibrates once every few minutes.  Definitely not as annoying as I first thought it would be.  Once the internal temperature stabilizes I guess it decides to reduce the frequency of calibrations, which makes sense.

I would not have purchased an E4 if it were not for the enhancements discovered here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2014, 11:34:08 pm
Yes the Micro USB connector has been highlighted as a very poor choice for what is otherwise a rugged design. I personally hate it. My eyesight is not what it was and I am always struggling to see the correct orientation of the plug and then getting the angle right for entry into the socket...... really cr*p  >:(

For info the external charger uses the same micro USB power connector and so can use the plug pack power supply supplied with the camera.

I reported my disappointment to the CEO at FLIR, and suggested that they might wish to revisit that aspect of the design in any future hardware updates.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 12:25:57 am
Additional FLIR Palettes inc Medical !

I have been looking at my file archives for the FLIR PM series of industrial cameras and have found a pile of palette PAL files. I have no idea whether these can be used with the E4 or will need conversion.

I am attaching them for experimentation only as some may be of interest:

These are common industrial palette types plus some odd ball palettes like 'Medical' that is used to diagnose breast cancer and other thermally detectable illnesses.

I suspect that the headers will be wrong and will need adapting to the newer PAL format ?

For those wondering what glowbow palette looks like.......

Thermal Imaging | Infrared video of convection currents in water (https://www.youtube.com/watch?v=sB9sd1PDJ1o#)

Enjoy  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 03, 2014, 12:33:43 am
Additional FLIR Palettes inc Medical !
Any examples how they look?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 12:54:11 am
I can produce some test images in the different palettes. Some may easily be found using a Google search as they are Industrial standard palettes. I'll see what I can do on example images

Having compared the PM Iron file with the E4 Iron file, the headers are totally different and the data blocks differ significantly as well. These PAL files may be of no use at all but I thought I would release them anyway.

Medical palette is detailed in the attached FLIR document on vet use.

This url provides examples of medical use on humans:

http://spectronir.com/image (http://spectronir.com/image)

This is also an interesting video on medical palettes

Medical thermal imaging software - Palette power (https://www.youtube.com/watch?v=aqtc-Shqrn0#ws)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 03, 2014, 12:59:07 am
Just a short FYI (19.12.2013):
http://support.flir.se/custhelp/softwaredownload/rss/feed.xml (http://support.flir.se/custhelp/softwaredownload/rss/feed.xml)
"FLIR IR Camera Player 2.3.3 : FLIR IR Camera Player 2.2.7 includes all drivers for both 32-Bit and 64-bit OS."
Download: http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=89 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=89)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 01:13:30 am
I just found a site that details my FLIR PM series PAL file format.

May be of use ?

http://www.irinfo.org/articles/article_4_2006_colbert.html (http://www.irinfo.org/articles/article_4_2006_colbert.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 01:27:36 am
Another interesting find......

http://www.infraredtraining.com/community/boards/thread/10111/ (http://www.infraredtraining.com/community/boards/thread/10111/)

I have FLIR Reporter somewhere (Demo) so maybe I can extract the PAL files  ;)  There could be some interesting palettes in there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 03, 2014, 02:10:10 am
When storing the E4, is it recommended to remove the battery from the unit or leave it installed?  Mine came shipped with the battery installed and it was almost discharged when I turned it on before charging for the first time.
As I understand, the OFF button simply puts the camera into a "soft off" state.  Am I correct in assuming that a small amount of power is being used in this state, slowly discharging the battery?
I did not see any technical information like this in the manuals I found, though I may have been looking in the wrong place for it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 02:34:08 am
Short term storage - leave the battery in. (This is anything up to say a month)

Long term storage - half charge the battery and remove it from the camera. Keep battery in cool dry place....not an attic (loft)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 03, 2014, 03:00:01 am
Standard Li-Po storage procedures, then.
Thanks, Aurora.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on January 03, 2014, 05:08:35 am
Hi everyone

What type of lens could be used for a Ex-model to optically zoom objects farther away??? (like a monocular with maybe 2-10 magnification?)


Cheers
Erik
Title: ADDMENU BETA 3
Post by: Taucher on January 03, 2014, 06:37:41 am
ADDMENU BETA 3 is ready for download  >:D
Download ZIP: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74552 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74552)
Post: see https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)

Probably a MUST HAVE for anybody who's using MSX with distances < 30cm  :-+

Code: [Select]
New in Beta 3:
- Add digital zoom (1x 2x 4x 8x) -> enable: set .caps.config.image.zoom.enabled true
- Add extra settings for rel. humidity and condensation mode humidity settings
- Add fine-tuning for MSX/focus distance
- Remove Triple-USB-Mode (does not work anyway)

Known bugs:
- Condensation mode does switch to thermal leak mode when fiddling with the humidity values
-> workaround: select the green palette again
- Archive mode: Video playback does not play back anything - useless icon
- MediaServer.exe (manual stuff): crashes when deployed but does not disturb TIC use

... and some minor stuff like re-arranging items
Feel free to check if you have yet unknown .caps settings that might be useful to be added (at least we now have a generic example how to edit numeric values via menu).

Wanted:
Any info how to get time-lapse or video recording mode operational (see commented block in toolbar-config_Z3) or how to bind a shell execute to a button or menu entry ("back" on main menu would be perfect)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 03, 2014, 08:48:57 am
Hiya,

Nice 3D prints  :-+

I have not seen that focus tool before. Can you share the STL file ?

You are correct regarding uncommenting the zoom statements in the XML file. You will also need to set the zoom statement from false to true in Mikes resolution upgrade file. This will require that you also run the CRC calculation again. Its the same process that you carried out for increasing the resolution but you need to first make the change to the zoom configuration line. There is no need to remove either of the files that you have already installed. Just over write them via FTP  :)


I have attached the XML file, within the FlashBFS folder structure, that I used. It is using the Version2b baseline created by Uup (which uses the XML file originally created by Taucher)

I have also added the edited resolution file with the Zoom option set to true

Update. I think I attached the wrong XML file so I have deleted it and added the right one. Sorry.

Update. I have added the Uup menu file set called FlashBFS that I edited to activate the Zoom function. Use this if you find it easier than using the XML file alone.
Thanks Aurora!
The current files are the right one?
Which difference with Taucher files https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359345/#msg359345 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359345/#msg359345)

The STL file for focusing tool is not mine, you can download it from here:
http://www.thingiverse.com/thing:188896/#files (http://www.thingiverse.com/thing:188896/#files)

Thanks again!
Title: Re: ADDMENU BETA 3
Post by: daves on January 03, 2014, 09:01:24 am
ADDMENU BETA 3 is ready for download  >:D

Well done again ! So, whats left here ? Now someone enable BT and WIFI and add SD CARD - All of these items are in configuration files too :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 03, 2014, 11:00:26 am
When storing the E4, is it recommended to remove the battery from the unit or leave it installed?  Mine came shipped with the battery installed and it was almost discharged when I turned it on before charging for the first time.
As I understand, the OFF button simply puts the camera into a "soft off" state.  Am I correct in assuming that a small amount of power is being used in this state, slowly discharging the battery?
I did not see any technical information like this in the manuals I found, though I may have been looking in the wrong place for it.
It does draw some power in  standby mode - I measured it in the review video. About 3.7mA, corresponding to about 1 month to 'dead', and about 500uA in 'Off' mode.
However I have a suspicion that it may go from standby to off mode after a while - not tested thoroughly but ISTR having seen it do a cold boot (showing modded startup screen) when I'm fairly sure I'd not removed the battery
 You can also force it into minimum-power mode with  a very long press of the power button, however there is no visual confirmation, again I showed this in the review video.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 11:35:30 am
@Bonocr,

The background to my postings of the XML file

1. I have chosen to use the Uup XML file (Bete2a) that is based on Tauchers original BETA2. (It chaged the config menu layout slightly)
2. I enabled the new Zoom funtion in the Uup XML (Beta2a) and tat is what I posted in the referenced message.
3. I compared the Beta2a XML with the one produced by freak_ge. Beta2a still contains lots of unused statements and comments as it is a Beta. The XML from freak_ge has Zoom enabled and has been stripped of all unused content and comments. Some palettes have been removed which I did not want so I needed to reactivate them.
4. I chose to use the XML produced by freak_ge and edited the palettes to re-enable them and place them in an order that suited me. That is the last XML that I posted along with comments on the ease of editing it for a custom layout.
5. Taucher has just released Beta3 which contains further enhancements.  I will be sticking with my current XML for the mpment as I do not need the added features of Beta3. I can easily change the Beta3 XML to my preferances if required though.

The version of XML that I am currently using is detailed here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359037/#msg359037 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359037/#msg359037)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 11:50:35 am
With regard to options that may exist in a non activated form in the software, my PM695 has a distance to target variable that may be set to take path loss into account. Not that essential though. It also has the option to change the size of the mesurement circle to suit different scenarios. Again I am not certain how much need there is for that on the E4. Extended temperature capabiity has also been mentioned before. Other FLIR cameras offer two temperature ranges and I can advise that no addtional thermal filter / attenuator is brought into play on my PM695 to achieve this. Additional filters / attenuators are employed for the very high ranges of 500 C to 1000 C and above. Could it be an offset function on the micro-bolometers ADC I wonder ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 03, 2014, 12:06:55 pm

@Aurora

Thank you very much Aurora.
I have used your E8 file and Taucher Beta 3 file: all works fine!
I would like to figure out how to use in correct mode the humidity settings, could you or everyone suggest me an example or a document?
Next step: I have to buy an ZnSe lens for close up view (Thanks to Taucher for fine tuning MSX).
I have fiddling with the focusing toll, may be I am out of focus now, there is an tested method for fix it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 12:26:50 pm
@bonocr

Please take a look at my E4 useful information thread. It contains detail of the focus setting when using a fixed focus lens. It may be of assistance to you. Other members of the forum have used the 'focus on a distant object' technique but this can be flawed as you will read. I have heard that the focus adjustment on the E4 is quite course, so care is needed and a steady hand  ;)

Be VERY careful to not scratch the surface of the lens....it isn't Germanium but is still fragile. It is concave so is quite well protected but a scratch on the Anti Reflective coating would be very bad news indeed. (The AR coating improves the transmission efficiency of the lens from around 40% to around 80%.....i.e. its important !)

E4 Useful information thread :

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104)

On the topic of the MSX fine tune when using a close-up lens ......... sorry, MSX does not work when the close up lens adapter is fitted. The adapter obscures the visual cameras view. You could possibly cut a large hole in the adapter for the visual camera to see through, but that camera is also unlikely to focus at very close distances, and does not benefit from the ZnSe close-up lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 03, 2014, 03:56:33 pm
I would like to figure out how to use in correct mode the humidity settings -snip-
If unsure use/keep the 0.5 default value.
The humidity-setting might be interesting in regard to accuracy tests (esp. sub zero).
It's also a nice example how any of the internal registry values can be manipulated from the menu!

The new condensation-settings (aka. alarm1) do this:
Ambient rel. humidity should be measured using some gauge/tool, then set in the camera.
Then the TIC can calculate the dew-point for the current temperature(reflected temp setting i guess)+rel. humidity pair.
The last setting allows to tell the dewpoint-formula to calculate for a different value - as mold might grow above ~70% rel. hum.

Basically the whole condensation mode is a bit gimmiky as a simple dewpoint-table and an educated user could just set up "blue below" some temperature and get the same results - but it's green palette fits the psychology and the built in dewpoint formula might be handy.

I strongly suggest reading the MANUAL (pdf) - there's a nice appendix - and Flir has put online some nice information for different use cases.

Title: Re: ADDMENU BETA 3
Post by: Taucher on January 03, 2014, 04:10:00 pm
ADDMENU BETA 3 is ready for download  >:D

Well done again ! So, whats left here ? Now someone enable BT and WIFI and add SD CARD - All of these items are in configuration files too :-DD
thx
in fact there's a "WANTED" in my post telling what would be probably next... time-lapse or video-recording would IMHO be really cool hacks

A shell-exec (TNT, are you reading this) from the menu would allow us to develop own application for the Ex and map them to a button!
--> I already confirmed that I can cross-compile an application.exe and get a confirmable message-box for the Ex when starting the app via telnet. Having a chance to start that app by pressing a regular menu button would mean we could make our own menu with any function we like - I hope you get my point :)

Regarding the .pal files: I remembered there's the command to load any .pal file via telnet - should make testing easy :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 03, 2014, 04:34:54 pm
Well, Tequipment certainly isn't shy about talking about the E4 hack.  I just asked them what the currently shipping firmware is, and the chat support person responded with "we haven't had any reports of them not being hackable to the E8."  He also mentioned that they sell 100 of these things a month.  I don't think FLIR is hurting for sales. 

Anyway, since the chat didn't answer my question, has anyone received an E4 from Tequipment recently?  If so, what firmware did it have on it when it arrived?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 03, 2014, 04:50:05 pm
A shell-exec (TNT, are you reading this) from the menu would allow us to develop own application for the Ex and map them to a button!
--> I already confirmed that I can cross-compile an application.exe and get a confirmable message-box for the Ex when starting the app via telnet. Having a chance to start that app by pressing a regular menu button would mean we could make our own menu with any function we like - I hope you get my point :)

Regarding the .pal files: I remembered there's the command to load any .pal file via telnet - should make testing easy :)

The application which will stich the picture in camera like smartphones does or  like the Microsoft ICE will be really cool :-) Video recording as well.
Thanks for new version of ADDMENU.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 03, 2014, 05:44:31 pm
@bonocr

Please take a look at my E4 useful information thread. It contains detail of the focus setting when using a fixed focus lens. It may be of assistance to you. Other members of the forum have used the 'focus on a distant object' technique but this can be flawed as you will read. I have heard that the focus adjustment on the E4 is quite course, so care is needed and a steady hand  ;)

Be VERY careful to not scratch the surface of the lens....it isn't Germanium but is still fragile. It is concave so is quite well protected but a scratch on the Anti Reflective coating would be very bad news indeed. (The AR coating improves the transmission efficiency of the lens from around 40% to around 80%.....i.e. its important !)

E4 Useful information thread :

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104)

On the topic of the MSX fine tune when using a close-up lens ......... sorry, MSX does not work when the close up lens adapter is fitted. The adapter obscures the visual cameras view. You could possibly cut a large hole in the adapter for the visual camera to see through, but that camera is also unlikely to focus at very close distances, and does not benefit from the ZnSe close-up lens.

Thanks for your link and useful information.
You right! I have to modify the STL file for the MSX camera, hope at 100mm the camera works.

I am careful with the TIC lens thanks ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 03, 2014, 05:54:32 pm
A shell-exec (TNT, are you reading this) from the menu would allow us to develop own application for the Ex and map them to a button!
--> I already confirmed that I can cross-compile an application.exe and get a confirmable message-box for the Ex when starting the app via telnet. Having a chance to start that app by pressing a regular menu button would mean we could make our own menu with any function we like - I hope you get my point :)

Any chance of a very rough howto for the dev environment? I'm not very much up to speed with windows dev environments due to an abundance of I-dont-care, but for the E4 there's enough incentive to flush some time... So if you maybe have a some pointers + sample config/make/project files of something that does something on the E4 then that would be very much appreciated. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 03, 2014, 06:00:18 pm
I would like to figure out how to use in correct mode the humidity settings -snip-
If unsure use/keep the 0.5 default value.
The humidity-setting might be interesting in regard to accuracy tests (esp. sub zero).
It's also a nice example how any of the internal registry values can be manipulated from the menu!

The new condensation-settings (aka. alarm1) do this:
Ambient rel. humidity should be measured using some gauge/tool, then set in the camera.
Then the TIC can calculate the dew-point for the current temperature(reflected temp setting i guess)+rel. humidity pair.
The last setting allows to tell the dewpoint-formula to calculate for a different value - as mold might grow above ~70% rel. hum.

Basically the whole condensation mode is a bit gimmiky as a simple dewpoint-table and an educated user could just set up "blue below" some temperature and get the same results - but it's green palette fits the psychology and the built in dewpoint formula might be handy.

I strongly suggest reading the MANUAL (pdf) - there's a nice appendix - and Flir has put online some nice information for different use cases.

Thanks Taucher for your explanation.
Which difference between the setting relative amb. humidity (that I can measure) and the relative humidity?

Now I look at the manual as you suggested.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 03, 2014, 06:10:54 pm
The picture quality of a zoomed recording is better than unzoomed recording and manual zoomed.
The output resolution is 320x240 normal as zoomed. Make a panoramic image of 16 4x zoomed recordings (1280x960), it's quite better than unzoomed recording streched 4 times.

I think, it's a unnecessary effort.
Simple resize the RAW sensor values with Imagemagick functions (sharpen etc.)

As attachment a quick-and-dirty hack for post processing zoom.
I rewrote my panorama php script - see here for using php
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715)

using
Code: [Select]
$ php ./E4zoom.php

usage: ./E4zoom.php [options] -i ir_file.jpg -r resize -s sharpen -o outputimage.jpg

Settings:
-i ir_file.jpg      flir radiometric image
-r resize           scale sensor size with "convert -resize val" (val i.e. 600x or 100%, default is 200%)
-s sharpen          scale sensor size with "convert -sharpen val" (val i.e. 0x0.4 , default is 0x1)
-o output           save a rebuild flir radiometric image with new 16BitImage

Options Summary:
--help              print this help

open the resized jpg with FlirTools and save the image for rebuilding the jpg part of the image



a sample macro image from Mavro
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg341533/#msg341533 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg341533/#msg341533)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69528;image)

Code: [Select]
$ php ./E4zoom.php -i withlens.jpg -r 640x -s 0x2 -o withlenszoom

/opt/ImageMagick/bin/convert raw.tif -resize 640x -sharpen 0x2 raw.tif
.fffrebuilt FFF from 3 parts
split FFF file to segments
FLIR Record 0x20, offset 0x0200, length 0x09ac
FLIR Record 0x22, offset 0x0bac, length 0x0310
FLIR Record 0x21, offset 0x0ebc, length 0x0038
FLIR Record 0x01, offset 0x0ef4, length 0x13426
FLIR Record 0x2a, offset 0x1431c, length 0x0060
FLIR Record 0x0e, offset 0x1437c, length 0x1a35
new image w/h=640/480
write new radiometric jpg
part 0: 65534 Byte
part 1: 65534 Byte
part 2: 65534 Byte
part 3: 65534 Byte
part 4: 65534 Byte
part 5: 65534 Byte
part 6: 65534 Byte
part 7: 65534 Byte
part 8: 65534 Byte
part 9: 27714 Byte

withlenszoom[.jpg] goes after saving with FlirTools to
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74614;image)

compare the slightly structures
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 03, 2014, 07:47:41 pm
Couldn't resist trying to make a panorama. Works great!


(http://www.lysator.liu.se/~john/ir_pano.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 03, 2014, 08:22:50 pm
I looked at your website to your others panoramas. Great.
Which software you using for stitching of 16 Bit RAW Images?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 03, 2014, 08:30:14 pm
I looked at your website to your others panoramas. Great.
Which software you using for stitching of 16 Bit RAW Images?
I use PTGui. It's very competent (probably the best stitcher available) but maybe not very beginner friendly.

The other panoramas on my web site look much better if you use the DevalVR option (requires plugin) instead of Flash. DevalVR uses hardware acceleration. Only for Windows though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 03, 2014, 09:12:32 pm
A question to US E4 owners out there:

What is the input voltage of the supplied charger?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 03, 2014, 09:17:50 pm
I've updated my zip to enable zoom in the template file - I've not been reading recent developments much recently - is there anything else that needs upading/new links etc.?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2014, 09:32:14 pm
Just so you are aware. The plug pack supplied with the E4 is multi voltage and is a Power Supply rather than a charger. Input is 100V to 240Vac. Output is 5Vdc at up to 2100mA. The power supply has integral US pins plus several adapters for other countries. Its a decent quality power supply. I am located in the UK but all the adapters are provided. FLIR distribute the same E4 camera kit worldwide.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 03, 2014, 09:47:40 pm
Thank you for the information Aurora.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 03, 2014, 10:28:30 pm
A shell-exec (TNT, are you reading this) from the menu would allow us to develop own application for the Ex and map them to a button!
--> I already confirmed that I can cross-compile an application.exe and get a confirmable message-box for the Ex when starting the app via telnet. Having a chance to start that app by pressing a regular menu button would mean we could make our own menu with any function we like - I hope you get my point :)

Any chance of a very rough howto for the dev environment? I'm not very much up to speed with windows dev environments due to an abundance of I-dont-care, but for the E4 there's enough incentive to flush some time... So if you maybe have a some pointers + sample config/make/project files of something that does something on the E4 then that would be very much appreciated. :)

It's a simple hello world style application - regarding the toolchain:
Option1: Visual Studio 2005 + Pocket PC SDK
Option2: http://cegcc.sourceforge.net/docs/using.html (http://cegcc.sourceforge.net/docs/using.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 03, 2014, 11:43:57 pm
Guys, I am working on my batch version of Tomas123 flir.php. Right now I am working on report tool.
The idea is to automatically create report by one command. No interaction needed.

See attachment what I do have now - this is first page. What data you expect to fill free corner ?

I plan some kind of histogram - which temperatures in which count are populated over image.
But I can put there some more info, like min, max, avg temp ... ... ... ...

Ideas ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MFSiNC on January 04, 2014, 12:01:55 am
Just joined to say thanks!

Delivered today from PASS, I've just done the resolution and menu mods. Working perfectly!

Calibration date: Dec 20, 2013
Serial: 63910xxx
Model: E4 1.1
SW: 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on January 04, 2014, 01:48:19 am
Somebody had positive experience using Flir Ex as webacam?
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.

Interestingly, it works with FaceTime :)


And for those that were following my saga with my e4 stating SD card not installed, and then finally getting stuck on the boot logo, FLIR replaced the camera as defective.   

Replacement is working perfectly.  (as a e4+ ;)  )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 04:36:49 am
Somebody had positive experience using Flir Ex as webacam?
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.

Interestingly, it works with FaceTime :)


And for those that were following my saga with my e4 stating SD card not installed, and then finally getting stuck on the boot logo, FLIR replaced the camera as defective.   

Replacement is working perfectly.  (as a e4+ ;)  )
SO I gather that you had Flir replace the camera?  Did you "upgrade" it before returning it and downgrade it before sending it back?  Just wondering if you left it as an E4+ and sent it back to Flir....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mikesus on January 04, 2014, 04:40:11 am
Somebody had positive experience using Flir Ex as webacam?
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.

Interestingly, it works with FaceTime :)


And for those that were following my saga with my e4 stating SD card not installed, and then finally getting stuck on the boot logo, FLIR replaced the camera as defective.   

Replacement is working perfectly.  (as a e4+ ;)  )
SO I gather that you had Flir replace the camera?  Did you "upgrade" it before returning it and downgrade it before sending it back?  Just wondering if you left it as an E4+ and sent it back to Flir....

There wasn't anything to upgrade or downgrade as it was not even showing up as a USB device.  Seems that it had a board failure of some sort.  Strange part was it was a slow progression.  First it wouldn't allow storage of images, and then it hit a point that it wouldn't even get past the boot screen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: synapsis on January 04, 2014, 05:32:43 am
And once again, Dave and Mike's videos cause me to spend money...

Hardware E4 v1.1
Firmware 1.19.8
Ordered 1/2, delivered 1/3 from Tequipment.
Cal date Dec 11, 2013 Estonia
Serial 639098xx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 05:35:34 am
Somebody had positive experience using Flir Ex as webacam?
Sure, just not in skype. UVC mode is pretty universal, so it should work with lots of software. So far I haven't encountered any issues.

Interestingly, it works with FaceTime :)


And for those that were following my saga with my e4 stating SD card not installed, and then finally getting stuck on the boot logo, FLIR replaced the camera as defective.   

Replacement is working perfectly.  (as a e4+ ;)  )
SO I gather that you had Flir replace the camera?  Did you "upgrade" it before returning it and downgrade it before sending it back?  Just wondering if you left it as an E4+ and sent it back to Flir....

There wasn't anything to upgrade or downgrade as it was not even showing up as a USB device.  Seems that it had a board failure of some sort.  Strange part was it was a slow progression.  First it wouldn't allow storage of images, and then it hit a point that it wouldn't even get past the boot screen.
Oh I see!  Well then it's good that it showed it's faults before you did anything to it then!  Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 04, 2014, 05:50:38 am
From Tequipment.net, delivered 1/3/14
Model: E4 1.1
SN: 63910XXX
Software: 1.19.8
Calibration: Dec. 11, 2013

Successfully applied resolution change and BETA3 menu "additions".

Needed to install FLIR device drivers (flir_device_drivers.exe) separately (after FLIR tools installation). I thought the drivers were already installed in the FLIR Tools installation. Until the driver installation, I couldn't FTP, telnet etc. to install the menu additions and was hunting for the device on other IPs than 192.168.0.2 as a few reported other locations.

Initial "surprise" - how much obvious light reflections show on the hybrid visible/thermal image. It would be helpful to get a "thermal only" image option to subtract this out sometimes.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 04, 2014, 06:58:43 am
TEquipment.NET is almost out of E4's again. Man, these things are flying off the shelves...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 04, 2014, 11:31:37 am
It would be helpful to get a "thermal only" image option to subtract this out sometimes.
When you shot photo, there is raw thermal image stored inside, no matter what shooting mode you were in. You can always look on raw IR image in Flir tools, even if you shot as MSX image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 12:20:16 pm
@Mikesus,

Thanks for letting us know the outcome of your E4 issue. I was thinking about your fault the other day, and was going to PM you to see how you were getting on getting it repaired.

I am pleased that FLIR just replaced the camera rather than going down the repair route, as some manufacturers like to do.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 12:36:30 pm
@Radget,

I am a little unsure what you mean by 'light reflections'

I presume that you are aware that a thermal camera cannot actually 'see' visible light and the MSX visible camera produces outline detail only.

Thermal cameras see thermal energy, so if an object is reflective at thermal wavelengths it will actually show you THERMAL reflections. Most commonly this is reflections of sources of heat like radiators, fires, Tungsten/Halogen light bulbs or even yourself. You are a 37C thermal projector and your own body heat reflects off of reflective objects. Be aware that a thermal reflector can take many forms and does not necessarily look reflective at visible light wavelengths. A shiny surface such as a whiteboard, many metal surfaces and even gloss paper act as thermal 'mirrors' when observing a scene. As an experiment......use your thermal camera to look at yourself in a Mirror. Then do the same using a plain glass window. The mirrors silver reflective surface is not 'in play' in this test.....the reflectivity occurs at the surface of the glass and does not need a reflective coating on the rear to work at thermal wavelengths. Glass is opaque at thermal wavelengths.

Do not take this as any sort of criticism or negative comment, but you need to read some books on the use of a thermal camera in order to understand what is actually happening in the image that you are viewing via the camera. Thermography is a very different world to that of visible light and needs to be interpreted correctly in order to make sense of the scene and what it is telling you. This is important when looking at houses as you can get some pretty odd results due to the various materials used and their physical properties. A Thermographer is trained to interpret the images and understand the limitations of the technology. Emissivity is a key element of thermography and a failure to understand its importance renders the Thermal camera little more than a toy in such hands.  As I say, no criticism of you here....your experience is VERY common and you will quickly understand why you get these odd/distracting results once you have read some of the freely available training material available from FLIR and via the internet.

Hope this helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 04, 2014, 12:50:00 pm
I presume that you are aware that a thermal camera cannot actually 'see' visible light and the MSX visible camera produces outline detail only.

MSX also pick up light reflections, not just outline details. See image - for example the LUK sticker on the door or reflection on glass.
Any light reflection will show in MSX image making it more yellow/white => warmer. While actually is not warm. And I think this is what he meant.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 01:17:43 pm
Ah I see what you mean. OK. I will let my post stand though as it applies to reflective surfaces and newbies may be unaware.

Thanks for clarifying the MSX issue.

Update:

It is sometimes challenging the determine whether the visible light portrayed by the MSX is also thermal energy reflection as well though. This occurs with a conventional light bulb that radiates light and lots of heat energy that reflects in the same manner as the light. The stickers in your image will also have a higher emissivity than a matted paint surface on which they are stuck. This is one of the reasons why a camera must also have the 'thermal only' view option. The user can compare the MSX and Thermal image to determine what is truly thermal emissions. An auto reflected light deletion algorithm might delete genuine thermal detail that is common with visible light detail ? Much would depend on how 'clever' it was. The human eye and brain is a very good differential detector.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on January 04, 2014, 01:34:17 pm
Thanks to all for a wonderful job  :clap:  :-+ and Happy New Year!
My Cinderella E4, BETA3 changed the beautiful Princess of.
I have a question.
What to do to FLIR logo was visible in the pictures (in BETA3)?
Thank you in advance for your response.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 04, 2014, 02:48:42 pm
Guys, I am working on my batch version of Tomas123 flir.php.

I plan some kind of histogram - which temperatures in which count are populated over image.

Ideas ?

hi daves

lets play around with the sample macro image from Mavro
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg341533/#msg341533 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg341533/#msg341533)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69528;image)
Code: [Select]
exiftool -b -RawThermalImage withlens.jpg | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- -auto-level withlens.png

convert withlens.png -define histogram:unique-colors=false histogram:histogram_gray.png

convert -size 200x256 gradient:gray0-gray100 -rotate -90 gray_range.png

convert histogram_gray.png gray_range.png -compose multiply -composite hist_gray.png

exiftool -b -Palette withlens.jpg | convert -size 224X1 -depth 8 RGB:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -level 4096,60928 -resize 448x30! iron16.png

convert hist_gray.png iron16.png -clut hist_color.png

convert hist_color.png -fuzz 0.5% -transparent black hist_color_trans.png
- you must replace the auto-level with the ImageMagick fx operator

edit 1
- the last line is only a quick-and-dirty hack and removes also the count of black pixels (make it transparent)
better use histogram_gray.png as a mask
Code: [Select]
convert hist_color.png histogram_gray.png  -alpha off -compose CopyOpacity -composite hist_color_trans.png
result
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74771;image)

edit 2
better version see here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg361468/#msg361468 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg361468/#msg361468)




Nobody here works with FlirTools?
I have not received comments on my post "zoom injection"
 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359747/#msg359747 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg359747/#msg359747)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 04, 2014, 03:42:15 pm
Nobody here works with FlirTools?
I have not received comments on my post "zoom injection"

I do. I immediately tested your zoom, once you posted it. Worked well, great tool too. Thanks.

Thank you for your tricks with histogram. You are "convert" master. I would do same job pixel by pixel in php  :palm:

I will try to play with it a little.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 04, 2014, 03:45:21 pm
...Which software you using for stitching of 16 Bit RAW Images?
I use PTGui. It's very competent (probably the best stitcher available) but maybe not very beginner friendly.
thanks, I tested PTGui with moderate success
PTGui don't accept grayscale 16 Bit Images (needs sRGB) and it's necessary to stretch the brightness with level operator for auto detect control points
Code: [Select]
$ convert _*.tif -resize 480x -sharpen 0x1 -level 9400,15500 -colorspace sRGB _a%03d.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 04, 2014, 04:03:44 pm
I would do same job pixel by pixel in php  :palm:
php loops are slow

there are also some nice scripts with imagemagick and gnu plot

http://www.imagemagick.org/Usage/scripts/im_histogram (http://www.imagemagick.org/Usage/scripts/im_histogram)
and
http://www.imagemagick.org/Usage/scripts/im_graph (http://www.imagemagick.org/Usage/scripts/im_graph)

sample (search for im_histogram and im_graph on this site: http://www.imagemagick.org/Usage/color_mods (http://www.imagemagick.org/Usage/color_mods) )
(http://www.imagemagick.org/Usage/color_mods/zelda_cumhist_graph.gif)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 04, 2014, 04:04:22 pm
PTGui don't accept grayscale 16 Bit Images (needs sRGB) and it's necessary to stretch the brightness with level operator for auto detect control points
Code: [Select]
$ convert _*.tif -resize 480x -sharpen 0x1 -level 9400,15500 -colorspace sRGB _a%03d.png

I did stretch the images, but I didn't do any explicit conversion to any rgb space, since convert seems to do that per default.

I assume that the "-colorspace" option only assigns a colorspace without changing the pixel values? The latter wouldn't be good, I think.
Edit: I mean: Changing the pixel values wouldn't be good, at least not if you want to open the stitched panorama in FLIR tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 04, 2014, 04:16:18 pm
funny, if I use this line:
Code: [Select]
$ convert _*.tif -resize 480x -sharpen 0x1 -level 9400,15500 _c%03d.png

// check
$ identify _c000.png
_c000.png PNG 480x360 480x360+0+0 16-bit sRGB 267KB 0.000u 0:00.000
then PTGui shows only correct the left half of every image (see screenshot)
Please post your command line.

Which values do you set in the dialog mask?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 04:24:10 pm
I would do same job pixel by pixel in php  :palm:
php loops are slow

there are also some nice scripts with imagemagick and gnu plot

http://www.imagemagick.org/Usage/scripts/im_histogram (http://www.imagemagick.org/Usage/scripts/im_histogram)
and
http://www.imagemagick.org/Usage/scripts/im_graph (http://www.imagemagick.org/Usage/scripts/im_graph)

sample (search for im_histogram and im_graph on this site: http://www.imagemagick.org/Usage/color_mods (http://www.imagemagick.org/Usage/color_mods) )
(http://www.imagemagick.org/Usage/color_mods/zelda_cumhist_graph.gif)

I always use R + ggplot2 when I need production quality histograms. IM or gnuplot are fine when you want something quick & dirty, so it depends a bit on your requirements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 04:58:46 pm
Ex with multiple spot measurements ?

I was just downloading a new STL for a Ex focus tool and noticed that an example image contained three measurement spots ! The data blocks on the image are also semi-transparent.

http://www.thingiverse.com/thing:188896/#files (http://www.thingiverse.com/thing:188896/#files)

I do not recall my upgraded E4 being capable of such. I just checked FLIR Tools and it has different spot markers so I don't think it is the product of FLIR Tools but I could well be wrong.

Anyone else have any ideas ? My PM695 has the multi spot measurement option and it can be useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 05:06:15 pm
Ex with multiple spot measurements ?

 ...

Anyone else have any ideas ? My PM695 has the multi spot measurement option and it can be useful.
I posted a few examples of precisely that eons ago. But no response so figured noone was interested in that.  :-// The ones I posted had 5 spot meters in it.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 04, 2014, 05:06:28 pm
funny, if I use this line:
Code: [Select]
$ convert _*.tif -resize 480x -sharpen 0x1 -level 9400,15500 _c%03d.png

// check
$ identify _c000.png
_c000.png PNG 480x360 480x360+0+0 16-bit sRGB 267KB 0.000u 0:00.000
then PTGui shows only correct the left half of every image (see screenshot)
Please post your command line.

Which values do you set in the dialog mask?

Hmm. This problem was actually not that easy to figure out. It seems that different versions of convert behave differently.

Code: [Select]
$ ./convert -version
Version: ImageMagick 6.8.7-6 Q16 x86 2013-11-07 http://www.imagemagick.org
$ ./convert FLIR0197.png -resize 480x -sharpen 0x1 oldversion.png
$ identify oldversion.png
oldversion.png PNG 480x360 480x360+0+0 16-bit sRGB 150KB 0.000u 0:00.000

$ convert -version
Version: ImageMagick 6.8.8-1 Q16 x64 2013-12-25 http://www.imagemagick.org
$ convert FLIR0197.png -resize 480x -sharpen 0x1 newversion.png
$ identify newversion.png
newversion.png PNG 480x360 480x360+0+0 16-bit sRGB 177KB 0.000u 0:00.000

The "identify" command claims that newversion.png is 16 bit sRGB, but Photoshop says it's 16 bit gray.
oldversion.png is 16 bit RGB, but not sRGB, so identify is wrong again.

That explains why PTGui could open my png files but not yours, because I used an older version of Imagemagick. It doesn't explain why the RGB files are smaller than the gray files though...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 04, 2014, 05:15:53 pm
I just checked FLIR Tools and it has different spot markers so I don't think it is the product of FLIR Tools but I could well be wrong.
That comes from Flir tools. You can do many markers in Flir tools and they look this way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve1515 on January 04, 2014, 05:17:05 pm
I just got my E4 and wanted to post a quick hack on how I took the stress off of the USB cable. What do you think?

Also, is the serial number marked anywhere on the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 05:19:35 pm
@daves,

Many thanks, 'mystery' solved  :)

Thank you  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 05:24:08 pm
@daves,

Many thanks, 'mystery' solved  :)

Thank you  :-+

You don't need Flir Tools for that. Mystery desolved. You can run those multiple spot measurements live on your E4. Mystery resolved. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 04, 2014, 05:27:10 pm
@daves
your flir tools image looks like 2x zoom injection  :)

if you are interested in measuring temperature of a single pixel (i.e. center pixel) in your script see my post here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350250/#msg350250 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350250/#msg350250)
 
better use an area (i.e. 4x4 Pixel)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 05:27:33 pm
@mrflibble.

Many thanks .....care to refresh me on what is involved please as I am no coder, and wonder how involved such a feature would be to add to my E4. I must have missed your previous posting on this. (there was a lot of development work going on, so I likely missed it amongst all the other posts).

Cheers

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 06:25:11 pm
Many thanks .....care to refresh me on what is involved please as I am no coder, and wonder how involved such a feature would be to add to my E4. I must have missed your previous posting on this. (there was a lot of development work going on, so I likely missed it amongst all the other posts).
Basically it is a bunch of rset commands to setup the measurements. So either do that over telnet, or using a .fif with some prebaked commands. Or if someone has some time, make a menu for it. Or borrow menu items from the .rcc + xml files from a camera that does have this already.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 06:31:01 pm
@mrflibble,

Many thanks....that's getting a tad too advanced for my very limited software skillset  :-[

I foolishly hoped that this was like some of the other enhancements with the code just needing to be activated, as was the case with Zoom.

I can live without it as the PM695's offer me it if needed. Thank you for explaining this to me though  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 06:48:11 pm
Many thanks....that's getting a tad too advanced for my very limited software skillset  :-[

I foolishly hoped that this was like some of the other enhancements with the code just needing to be activated, as was the case with Zoom.
Mmmh, the mention of zoom gives me an idea. Does the zoom functionality just do zoom x2, x4, x8 on the CENTER, or can you also pan around using the cursor keys? If the former ==> meh. If the latter, then maybe that can be reused in some way.

Why? For setting up multiple spots you basically need 2 things: what type of measurement does a spot do, and where is it located. The main functionality I see missing from the menu functions I have seen so far is the ability to change the position of a measurement spot (using the cursor keys).

Barring that, what you could do for the occasion is for example make a .fif that sets up 4 quadrants to find the hottest spot in each. That has some uses, and is easy enough.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 04, 2014, 07:22:53 pm
Well there had to be someone who messed up this mod.... I have been enjoying the camera and today decided to go from beta 2 to 3 I do not how but it rendered a no start up on the e4, filezilla shows flir username is accepted so that (I think shows) that there is still hope. But the pass is rejected of 3vlig. I tried all caps and one or two caps etc. but can not gain access. If there was something else to try I would appreciate it. I do also have telnet access with windows 7 though all I have done is verify that it works to list the directory's. But maybe that is a way in to edit wherever the password file is located? Thanks for any help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 07:34:55 pm
I presume you have done a full battery removal reset ?

Are you sure the camera IP address is correct in Filezilla ? It has been known to change ! Worth checking. 'flir' and '3vlig' used by me...no capitals used.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 07:37:42 pm
By far the most common error with this has nothing to do with a changed password on the E4. So I would spend more effort on other things first. Like try a different computer. That way you get the test of different {install of OS, install of ftp client, keyboard with crappy keys} for free.

And as Aurora suggest, make sure you use the correct ip address. But of course you are using the same ip address as the one you are using for the telnet connection. ;) Which incidentally is not necessarily the same ip address as the one filezilla stored during the last session.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 04, 2014, 07:43:39 pm
Yes battery out reset, checked IP address and I am trying a different computer right now to see but the fact that telnet gets a connection I am not holding out much hope. Thanks! Tried another pc same thing username accepted password wrong, e4 just flashes the flir boot screen then nothing is there a key to hold to see boot up messages?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve1515 on January 04, 2014, 08:22:24 pm
Maybe you could try to install the firmware upgrade package from FLIR's website.  :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 04, 2014, 08:55:52 pm
Yes battery out reset, checked IP address and I am trying a different computer right now to see but the fact that telnet gets a connection I am not holding out much hope. Thanks! Tried another pc same thing username accepted password wrong, e4 just flashes the flir boot screen then nothing is there a key to hold to see boot up messages?
If an error occurs after the patch files, I recommend a reset to factory settings. This has helped so far with me.
What is the telnet command for a factory reset? And if I do a reset then I will be stuck on UVC and will not be able to use ftp to fix whatever it is I did?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Anders Olsson on January 04, 2014, 09:00:08 pm
A friend of mine had an E4 delivered and successfully upgraded to full resolution the other day.
It was bought from proffsmagasinet.se
I did not catch the serial number of this one, but apparently it left FLIR not long ago:

Calibration date: Dec 23, 2013
Model: E4 1.1
SW: 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 04, 2014, 09:03:08 pm
Ex with multiple spot measurements ?
Anyone else have any ideas ? My PM695 has the multi spot measurement option and it can be useful.
Even though you got some answers already, the Ex is capable of adding multiple "spot" and "box" measurements (advanced measurement = true) - but the performance is even worse than with the delta modes (pretty sluggish) and it tends to completely lock up the camera - that's the reason why I left it disabled in the menu mod.

If you're _really_ into hacking, then take a look into the files and watch out for my comments near ".ui.userSettings.advancedMeasureMenu".

Example comment:
Code: [Select]
<!-- rset settings apply instantly without restart -->
<!--  rset .ui.userSettings.advancedMeasureMenu true  DO NOT USE THIS, NOT WORTH THE TROUBLE --->
<!--  rset .ui.userSettings.advancedMeasureMenu false --->
....
<!--<ToolBar name="measure_remove_selected"/> crash appcore-->
<!--<ToolBar name="measure_resize_box"/> no function-->
<!--<ToolBar name="measure_move_selected"/> no function -->
<!--<ToolBar name="measure_center_selected"/>-->

<!--lockups, only advantage: average over area function-->
<!--<ToolBar name="measure_min_max_avg_menu">
<ToolBar name="measure_local_max"/>
...


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 04, 2014, 09:13:09 pm
What is the telnet command for a factory reset? And if I do a reset then I will be stuck on UVC and will not be able to use ftp to fix whatever it is I did?

Well, maybe your case needs some additional diagnostics:
1) did you by accident completely fill up the FlashBFS drive or append to, instead of adding or overwriting files?
2) did you disconnect USB and unplug the battery, then you wait some moments and re-plug the battery - you press "power on" and wait approx one minute - what did and what does your camera screen show?
3) in this "booted" state plug in the camera to the PC - what IP does the PC interface have, what's the default gateway on that interface
4) try connecting via
4.1) telnet
4.2) ftp
4.3) www
4.4) samba
...to the camera, what are the results - do you get asked for username or password on each of those?

Also note: When connecting the camera after a cold boot directly to the PC without turning it on, then some factory-ftp seems to be running which does not allow a normal login.

Factory reset with a "bricked" camera will be hard to pull off as the UI would be frozen I suppose.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 09:16:51 pm
Ref attempting a firmware upgrade install........ I recommend that a firmware upgrade never be attempted until the situation is fully understood. A garbled firmware update can place an embedded computer beyond recovery by normal means. A bad situation made worse.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 04, 2014, 09:32:17 pm
Thanks for all the help, I will report my camera now boots up and is running again just fine. The way it got fixed was to log in anonymously  and I had direct access again to the file system, I loaded my saved stock files and it was running again! Then I added the beta 3 file again and  a restart and have everything but no zoom? Unless I just can not figure out how the zoom works.  Do you just use the center side buttons or is zoom a menu item? Again thanks for all the answers. To help anyone who ever thinks they bricked the camera first try telnet to 192.168.0.2 to see if the camera is in fact alive, if you can connect then even though there is no GUI interface push the off button and if the telnet connection is interrupted that shows the camera buttons work you just can't see anything. Then use your ftp program to connect but do not enter any login information, this should allow you to make whatever repairs you need. In my case i just had only touched the FlashBFS folder so that is the only one I replaced.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 09:38:00 pm
Great news

Thank heavens you made a back-up  :)

The Zoom function need the latest version of Mikes resolution hack file as the Zoom mode needs to be set to 'True' in the file.

The Zoom function is seen as a magnifying glass on the normal menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 04, 2014, 09:40:43 pm
Then I added the beta 3 file again and  a restart and have everything but no zoom?

Classic one: edit your e8.cfg, re-generate CRC...
.caps.config.image.zoom.enabled bool true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 09:42:00 pm
WHEW!!!!  I was starting to panic when I saw what happened to you!
VERY glad to hear that you MADE A BACKUP before doing anything!!  This is VERY important when doing any kind of "flashing" as you are dealing with the actual operating system and files the device uses.
Also glad to hear that you were able to restore your camera back and apply the upgrade successfully!
Thanks for posting your steps too.... this may come in handy for others that have a similar problem!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 09:50:47 pm
Just a thought...
If the E4 (or any other TIC) "stares" at an object/scene for long period of time (like several hours), will the sensor get "burned" with the image or deteriorate like an LCD display (yes I know the bolometer is NOT a display) or a plasma display?

Staring at the sun or a very hot source, I would imagine, WOULD damage the sensor, but I am talking about, say, the interior of a room/wall/windows/etc.?

Also, when connected to a computer for recording the stream through USB, does the camera get it's power from the USB port instead of the battery?  I tried a run time test with a battery that I replaced (3600mAh), and it ran for more than 12 hours with no discharge... NOT POSSIBLE, but I didn't think the USB port could supply enough power to run the E4.  I am trying a run test now with NO connection to the computer.

This might be a disadvantage when running portable... could shorten the run time of a laptop/tablet.
My laptop is a Dell E6500 and the bios has a setting that can enable the usb ports for charging devices (higher current) and it is enabled, but I didn't think it would power the E4 while it was on.
Ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 04, 2014, 09:58:23 pm
Just a thought...
If the E4 (or any other TIC) "stares" at an object/scene for long period of time (like several hours), will the sensor get "burned" with the image or deteriorate like an LCD display (yes I know the bolometer is NOT a display) or a plasma display?

Staring at the sun or a very hot source, I would imagine, WOULD damage the sensor, but I am talking about, say, the interior of a room/wall/windows/etc.?

Also, when connected to a computer for recording the stream through USB, does the camera get it's power from the USB port instead of the battery?  I tried a run time test with a battery that I replaced (3600mAh), and it ran for more than 12 hours with no discharge... NOT POSSIBLE, but I didn't think the USB port could supply enough power to run the E4.  I am trying a run test now with NO connection to the computer.

This might be a disadvantage when running portable... could shorten the run time of a laptop/tablet.
My laptop is a Dell E6500 and the bios has a setting that can enable the usb ports for charging devices (higher current) and it is enabled, but I didn't think it would power the E4 while it was on.
Ideas?
@sensor: unless you aim it at a nearby thermonuclear explosion, there is be no danger at all - the only thing that might deteriorate is the electronics part (electron drag etc). - keep in mind that Mid-IR is very weak (photon) irradiation and even UV would leave most materials involved unharmed... so unless you melt the sensor with concentrated IR heat there's little danger - plus the sensor is only seeing a part of the spectrum - so only that spectral energy can reach it.
@charging: my E4 shuts off when re-plugging the battery while it's on USB
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 04, 2014, 10:17:40 pm
Also, when connected to a computer for recording the stream through USB, does the camera get it's power from the USB port instead of the battery?
Yup. I've done measurements over a 48+ hour period with the E4 connected to a small linux box taking measurements, and after that the battery was still full. I always set the backlight to 0% and disable power saving for such runs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 10:25:01 pm
Comment on potential damage to micro-bolometer.

I have witnessed irreparable damage to a micro-bolometer that had the rising sum pass across its field of view. A whole swathe of pixels were burnt out and completely failed to generate an output. NUC could not correct this.

BUT..... I have seen several thermal camera specifications that state that the micro-bolometer is "sun proof" and cannot be damaged by such. I have no idea how this is achieved though. I seem to recall that the E4 is also "sun proof" but this needs to be checked. If so it is unlikely to suffer burn in due to ambient temperature exposure. It is after all just a load of thermistors in an array. You can degrade a thermistor if your really abuse it with focussed radiant heat though !

FLIRs comment on sun damage......

http://www.flir.com/uploadedfiles/eurasia/mmc/tech_notes/tn_0006_en.pdf (http://www.flir.com/uploadedfiles/eurasia/mmc/tech_notes/tn_0006_en.pdf)

BUT I don't think the E4 contains a VOX detector (I think it is Amorphous silicon)

Comment from ULIS on solar damage protection:

"Solar exposure is also taken into account and shows that ULIS amorphous silicon is perfectly well suited to sustain high intensity exposure. "

It wouls appear that modern detectors are very resistant to high intensity thermal source damage. A combination of detector design and passband filters are used.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 10:41:33 pm
Thank you all for your responses!!!
These were just things that I have had questions about and I don't intend to try and view the sun or other "very hot spots" with the TIC, but there may be accidental exposures, and that is why I asked.  Thanks!

I know that some CCD video/ip cameras CAN be damaged by staring at the sun, but that is a VERY different sensor and is "seeing" the full visible spectrum, and depending on the lens coating/blocking filters, could see IR/UV as well so there is TONS more radiation reaching the sensor.

As far as the power when connected to a laptop or other portable devices, I can see where the camera getting it's power from other devices could be an advantage, but it could also shorten the run time of the device as well.... I will just try a few different things like Mr.Flibble suggested (back light off).. I would imagine that alot of the operating current is for the backlight (LED?) and the shutter (although very short pulses).

Well Taucher... I WAS going to monitor a nuclear explosion soon.....  (yeah right!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 10:51:19 pm
Slightly OT but I hope interesting.

I was asked to look at a professional broadcast camera Electronic Viewfinder that had failed.

I discovered that the eyepiece had been left angled upwards and by sheer bad luck the Sun penetrated directly down the eyepiece optics and onto the LCD panel. Needless to say the LCD panel was totally fried and surrounding plastic parts were melted  :o

That was a very expensive error. Bad stuff can happen so it is good to know that FLIR have considered the risk of high intensity thermal sources on the detector elements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 04, 2014, 11:25:04 pm
OUCH!!! Depending on how long the exposure lasted... that could have cooked anything behind the lcd panel after a hole had been burned through it!
And because the viewfinder has optics in it for focusing, that must have been a REAL hot spot!  Too bad that happened!  $$$$$$
Probably had the camera on a tripod, the cameraman was looking down into the viewfinder, then walked away... POOF!  Wonder if the cameraman is still working for the same company?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2014, 11:31:24 pm
I just purchased a very nice looking long-wave Telephoto thermal camera lens. It offers quality Germanium optical elements and X3 magnification  :) 

Once it arrives I will report on the potential for adding such a telephoto lens to the E4 as I know the question has been asked before in this thread.

The idea of a X3 optical telephoto combined with a X2 digital zoom providing X6 at 160x120 pixels appeals  :)

If it doesn't suit the E4, I am pretty sure it will mate with my FLIR PM series cameras pretty easily.

Its coming to the UK from the USA so expect a progress report in a couple of weeks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 05, 2014, 12:40:55 am
Random observation - Google "Flir E4" - after the adverts, The hackaday article on this thread is the second result after Flir's own page  ;D
E4 (modified) also made Make's favorite new tools of 2013 (http://makezine.com/2013/12/27/2013-in-review-our-favorite-new-tools/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 05, 2014, 01:02:03 am
Love that tear down video! And thanks to Mike and everyone who worked on this, I am in underground construction and had been looking at a camera for awhile and did not want a cheap toy but could not justify the higher end camera. I do not need wifi or high fps so with the mods available now I have a camera that is just right! Again a sincere thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 01:11:30 am
It looks like someone has seen a business opportunity in FLIR Ex series tripod mounts. See attached picture.

It was advertised on eb*y as "Flir E4 E5 E6 E8 Thermal imaging camera tripod adapter"

Looks like it uses clamp screws on the rubber handle  :scared:

I prefer the Georges80 design  :)

Sorry for small size....it was in Google's cache for eb*y.
Title: Developing applications for the E4
Post by: Taucher on January 05, 2014, 01:44:44 am
@ mrflibble & anybody else interested in developing:

Code: [Select]
// WinCE6test.cpp - console and (cheap) gui application.

#include "stdafx.h"
#include <windows.h>
#include <commctrl.h>

int _tmain(int argc, _TCHAR* argv[])
{
printf("Hello World console!");
MessageBox(0, L"HelloWorld!", L"CeGCC says...", MB_OK);
return 0;
}
Cross compiled with windows mobile 6.0 professional SDK and VS 2005
EDIT: Also tested with PocketPC 2003 SDK - works fine too - example exe (hello world - no additional benefit) is attached.
Title: Re: Developing applications for the E4
Post by: Taucher on January 05, 2014, 02:25:28 am
@ mrflibble & anybody else interested in developing:
EDIT: Also tested with PocketPC 2003 SDK - works fine too - example exe (hello world - no additional benefit) is attached.
If you don't have VS2005 and the SDK but a Linux (like in a VM (virtualbox))... then
here's a detailed instruction how to cross compile from Linux

Developing an app for the E4 (CeGCC)
Fetch yourself a working snapshot of CEgcc - I took mine from
http://max.kellermann.name/download/xcsoar/devel/cegcc/ (http://max.kellermann.name/download/xcsoar/devel/cegcc/)
Memo: there are also windows versions of CeGCC (mingw) around, I didn't test them.

Tested with Ubuntu 12.04 LTS, 64 Bit:
http://max.kellermann.name/download/xcsoar/devel/cegcc/mingw32ce-mk-2013-04-03-amd64.tar.xz (http://max.kellermann.name/download/xcsoar/devel/cegcc/mingw32ce-mk-2013-04-03-amd64.tar.xz)
save to /opt and then unpack:
xz -d mingw32ce-mk-2013-04-03-amd64.tar.xz
tar xvf mingw32ce-mk-2013-04-03-amd64.tar

#some cosmetics - shorten dir name (you might also use a symlink):
/opt# mv mingw32ce-mk-2013-04-03-amd64 mingw32ce

suggested: add :/opt/mingw32ce/bin/ to your path

Extract the attached source and run build.sh - should finish without any message and result in a Hello.exe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 02:28:17 am
Btw - this thread has broken the 100.000 views count!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gilbjd on January 05, 2014, 06:30:22 am
I have successfully installed Taucher's latest menu hack to my E4 along with the new zoom function. Thank you to Mike and Taucher for your excellent work!

Due to carelessness and unfamiliarity with Filezilla, I foolishly neglected to save a copy of my 'virgin' FlashBFS folder and, of course, that has now been overwritten by the hacked version.

This means that I can't revert my E4 to its virginal state if the need arises.

Does anybody have a copy of their unhacked FlashBFS folder that they would be prepared to post?

Many thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 05, 2014, 06:54:52 am
Wow look at this auction on e bay
http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 05, 2014, 10:10:03 am
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8

I've seen more people are selling now E4 hacked into E8. Some are saying they are selling E8, while pictures comes from hacked E4 (exiftool).
I expected many people will do business of it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 05, 2014, 11:21:24 am
After a ADDMENU hack the FLIR logo (in display down left corner) was removed, what should I do to add it again?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on January 05, 2014, 11:57:54 am
Quote from: cuda12
Wow look at this auction on e bay
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8 
This is not good, almost fraud !! Greed like this will almost certainly get the attention of FLIR.
So he'll downgrade it, for the same price !!?? Almost feel like telling him what I think? Opinions????
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on January 05, 2014, 12:15:52 pm
Can't see any fraud, he's been truthful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on January 05, 2014, 01:12:21 pm
Quote from: London Lad
   Can't see any fraud, he's been truthful.   
Buys it for ~$900, applies a "public" hack (that others have spent time on), I doubt he has contributed anything to EEVBlog.
Has he explained that IF it ever goes in for repair, or gets a firmware update, the "extras" are GONE !!
He could then point them to the Forum and ask them to apply the hack themselves?? Sorry, I think it stinks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on January 05, 2014, 01:21:10 pm
May not be 'nice' but hardly fraud.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 01:48:01 pm
Wow ! $1000 profit already.

Ref. selling upgraded products for profit.

This is not uncommon. People do not realise how straight forward it is to enhance the camera and feel they are getting a bargain when someone else has done the work for them.

It is a bit entrepreneurial but not really 'wrong' in fraud terms as the seller has made it VERY clear that this is an E4 that has been enhanced to perform LIKE and E8. At no point does he claim it is an E8 or identical to such. Pretty honest but as you say, it would have been nice to credit the authors of the enhancement or at least the forum.

I suppose if someone wishes to effectively pay $1000 for the time a person spent doing the enhancement, that is their business.

As to FLIR, I doubt that they will be that concerned provided people do not try to pass off an E4 as a genuine E8. Such would be fraud and they would likely report the listing as their only action. If it became a mass sale of such fraudulently described devices, they might take legal advice on stopping such.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 03:14:46 pm
For info only....

Junktronix has kindly sent me some high quality Thorlabs Germanium lenses to experiment with.

I shall see if they have an application with the E4. These lenses will be superior in performance to ZnSe if their characteristics permit their use. They appear to be suitable as a primary lens with a back focus distance of around 15mm

http://www.ebay.co.uk/itm/111231059741?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.co.uk/itm/111231059741?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)

Datasheet

http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F (http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F)

I will advise on their usefulness to us as soon as I have done some tests (hopefully this week)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on January 05, 2014, 03:15:34 pm
for all those that are not sure if they want to install menu hack



flir e4 with menu hack and resolution hack - polish menu (https://www.youtube.com/watch?v=W_ImNTdhwyI#)


and for those that didn't decided if they want to get additional lens



flir e4 with ZnSe Lens 20mm diameter, focal length 50.8mm (https://www.youtube.com/watch?v=lieebmFpJvQ#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 03:28:43 pm
Thanks for the videos.

It is impressive how far the humble budget E4 has come thanks to the efforts of some generous members of this forum who shared their knowledge with us all.  I have said it before, but thanks to all who have helped to develop the E4 baseline in to what it is today....an E8+  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 05, 2014, 03:43:52 pm
@m4rkiz

Thanks for the video, very useful.
I just bought the lens ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 05, 2014, 03:53:47 pm

@freak_ge

Unfortunately, you're right  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on January 05, 2014, 03:56:23 pm
Quote from: Aurora
It is a bit entrepreneurial but not really 'wrong' in fraud terms as the seller has made it VERY clear that this is an E4 that has been enhanced to perform LIKE and E8. At no point does he claim it is an E8 or identical to such. Pretty honest but as you say, it would have been nice to credit the authors of the enhancement or at least the forum.   
Has he explained that IF it ever goes in for repair, or gets a firmware update, the "extras" are GONE !!

It's not like anyone will ever repair these themselves, and this not an unlikely scenario. IF he'd pointed to this thread,
THEN said "I'm charging the extra for my work", fine, but he hasn't pointed out the pitfalls !! AFAIC it stinks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve1515 on January 05, 2014, 04:01:14 pm
Is it possible to make the fine adjust distance menu display in feet instead of meters?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 04:09:23 pm
@digsys

Two Words....... CAVEAT EMPTOR

When spending this sort of money, the bidder would be foolish to not ask questions, consider implications and research the product  ;)

It is, after all, an open auction and not a classified ad. Bidders pay what they think an item is worth to them.

As long as the auction text is factually accurate, it is not the job of the seller to protect bidders from themselves  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 04:16:14 pm
For those, like me, who are amazed at the price that an E4-8 is achieving on eb*y.....think what will happen if/when FLIR make the improvement harder or not feasible ..... enhanced units or those that can be enhanced will become even more desirable. 100% profit will then be the norm ?

That's why I ordered 10 E4's and stored them in my garage  ;D

Just kidding  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rufus on January 05, 2014, 04:25:37 pm
When spending this sort of money, the bidder would be foolish to not ask questions, consider implications and research the product  ;)

There are millions of buyers on ebay - foolish ones are easily found.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 04:30:53 pm
There is nothing to suggest that they are or are not taking action on this matter already.

It is not unreasonable to believe that FLIR are taking the matter seriously as  it does effect their PR side if it becomes too well known. To develop a modified firmware and thoroughly test it takes time and I will not be at all surprised if some level of countermeasure is contained in a new firmware for release in the future. That is just the way these things naturally go. Rigol is a perfect example of such attempts at countermeasures when the DS1052 was improved. Not very successful countermeasures in that case though.  ;D

FLIR are a very powerful and professional company in the world of thermography....if they really want to make the enhancement of the E4 to move from trivial to very hard for the common user, I haver no doubt that they could achieve it. Nothing is un-hackable given time and access, but the effort to do so can increase exponentially to the point of it becoming only a mental game of chess between developer and hacker, and at great financial cost to both parties.

No one should be surprised, or annoyed, if FLIR do release a new 'hardened' build version of the E4. An ASIC based countermeasure would likely be enough to make life very difficult for a user to enhance their unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 04:38:28 pm
After a ADDMENU hack the FLIR logo (in display down left corner) was removed, what should I do to add it again?
Thanks
See my footer how to edit/replace graphics inside the RCC file - just replace the logo image INSIDE the .RCC archive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 04:42:17 pm
Is it possible to make the fine adjust distance menu display in feet instead of meters?
The value is directly linked to the internal registry - didn't test if the value is in Ft when the whole cam is set to the imperial system.
In that case ignore (or edit yourself) the "meters" if you see them - that's hardcoded in the hack.

Just check with the regular focus distance adjustment option (what it shows), the added one is simply a more precise version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 05, 2014, 04:47:53 pm
No one should be surprised, or annoyed, if FLIR do release a new 'hardened' build version of the E4. An ASIC based countermeasure would likely be enough to make life very difficult for a user to enhance their unit.

An ASIC based countermeasure would also likely be enough to make it very difficult for Flir to keep the E4 economically viable. ;D Cat, meet mouse. Mouse, meet cat. Have fun!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve1515 on January 05, 2014, 04:54:19 pm
Is it possible to make the fine adjust distance menu display in feet instead of meters?
The value is directly linked to the internal registry - didn't test if the value is in Ft when the whole cam is set to the imperial system.
In that case ignore (or edit yourself) the "meters" if you see them - that's hardcoded in the hack.

Just check with the regular focus distance adjustment option (what it shows), the added one is simply a more precise version.

Your new menu stays in meters regardless of how the meter is setup. So your menu label is correct. I was just hoping it would switch to feet also.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 05, 2014, 05:00:12 pm
Also think of the flood of returns that some will do when they think they have bricked their E4 (even if not covered) that alone would make flir enact some type of change to the firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 05, 2014, 05:01:26 pm
There is nothing to suggest that they are or are not taking action on this matter already.
..but not with any urgency. There is no question that they could easily have closed off the current "entry points" with minimal risk, and minimal need for testing, but the fact that many weeks have gone by and hundreds of units shipped since they must have been aware shows that it is not a high priority.
Quote
No one should be surprised, or annoyed, if FLIR do release a new 'hardened' build version of the E4. An ASIC based countermeasure would likely be enough to make life very difficult for a user to enhance their unit.
There would be no need for any hardware change. There are multiple things they could do on the existing
hardware to lock it down very effectively, if they really wanted to.

Without any inside knowledge, the only things we know for certain are that they are not so concerned about it that they are in any hurry to change the current situation (from which we can probably reasonably infer that a framerate hack is probably not viable) , and that they have sold a number of additional units that they wouldn't otherwise have sold as a direct result of  hackability.

If anything, I suspect Fluke are more pissed off than Flir.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 05, 2014, 05:07:50 pm
For info only....

Junktronix has kindly sent me some high quality Thorlabs Germanium lenses to experiment with.

I shall see if they have an application with the E4. These lenses will be superior in performance to ZnSe if their characteristics permit their use. They appear to be suitable as a primary lens with a back focus distance of around 15mm

http://www.ebay.co.uk/itm/111231059741?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.co.uk/itm/111231059741?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)

Datasheet

http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F (http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1780&pn=LA9410-F)

I will advise on their usefulness to us as soon as I have done some tests (hopefully this week)

I'm gong to buy it if your test will be sucessfull, thanks for taking action in this matter :-)
Am I right that germanium should give more consistent FOV measurement than ZnSe?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 05:14:00 pm
@Plesa:
germanium has a higher refractive index than ZnSe - but FOV (field of view) does not depend on that factor - more on the lens geometry.

Are you talking about image distortions or the depth of focus?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 05, 2014, 05:26:40 pm
Guys, I am working on my batch version of Tomas123 flir.php.

I plan some kind of histogram - which temperatures in which count are populated over image.

Ideas ?


Hi Daves,

after reading http://www.imagemagick.org/Usage/files/#mpr (http://www.imagemagick.org/Usage/files/#mpr) I found a better solution

first create an grayscale image and select any palette (replace the auto-level with the ImageMagick fx operator)
Code: [Select]
exiftool -b -RawThermalImage withlens.jpg | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- -auto-level image.png

exiftool -b -Palette withlens.jpg | convert -size 224X1 -depth 8 RGB:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -level 4096,60928 palette.png
check -colorspace RGB or sRGB for better colors (Linux/windows)

then write a histogram with this one-liner -> no temporary files and no pipe  :-+
Code: [Select]
convert palette.png -resize 256x200! image.png -define histogram:unique-colors=false -write histogram:mpr:hgram mpr:hgram -delete 1 -alpha off -compose CopyOpacity -composite hist_color_trans.pngor with background color white
Code: [Select]
convert palette.png -resize 256x200! image.png -define histogram:unique-colors=false -write histogram:mpr:hgram mpr:hgram -delete 1 -alpha off -compose CopyOpacity -composite -background white  -alpha remove -alpha off hist_color_trans.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 05, 2014, 05:28:38 pm
After a ADDMENU hack the FLIR logo (in display down left corner) was removed, what should I do to add it again?
Thanks
See my footer how to edit/replace graphics inside the RCC file - just replace the logo image INSIDE the .RCC archive.

  // FLIR logo
        Image {
            id: logo
            source: "../images/Sc_Logo_FlirHardEdges.png"
            visible: greenbox.appState !== GreenBox.FacetArchiveView

Is this the point that I have to modify?
In what way?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 05:36:51 pm
After a ADDMENU hack the FLIR logo (in display down left corner) was removed, what should I do to add it again?
Thanks
See my footer how to edit/replace graphics inside the RCC file - just replace the logo image INSIDE the .RCC archive.

  // FLIR logo
        Image {
            id: logo
            source: "../images/Sc_Logo_FlirHardEdges.png"
            visible: greenbox.appState !== GreenBox.FacetArchiveView

Is this the point that I have to modify?
In what way?
Thanks
Sc_Logo_FlirHardEdges.png <- that file got edited (into totally transparend) in the hack's RCC archive - you'd have to re-package the rcc file once you exchanged the file back to the original one - you could even replace it with a logo of your own ;)
I've updated my post about RCC extraction (see links in footer) to include extracted versions of the archives as re-packing seems to be less a problem compared to unpacking.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 05, 2014, 05:42:56 pm
@Plesa:
germanium has a higher refractive index than ZnSe - but FOV (field of view) does not depend on that factor - more on the lens geometry.

Are you talking about image distortions or the depth of focus?

These lenses has the refractive index reduced from ~4 to ~2 by AR coating. The transmission is lower 90% compared to 97% for ZnSe.
Of course the FOV depends only on the geometry.
Yes, I mean the differencies in the measurement should be lower when you are using Ge, than ZnSe. It can be due to the chromatic dispersion.
This can be eliminated by some calibration I think.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 05, 2014, 06:00:39 pm
I found a better solution
I have already implemented your first solution  |O Anyway thank you for better one, I will rewrite it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 05, 2014, 06:11:31 pm
then write a histogram with this one-liner -> no temporary files and no pipe  :-+
Code: [Select]
convert palette.png -resize 256x200! image.png -define histogram:unique-colors=false -write histogram:mpr:hgram mpr:hgram -delete 1 -alpha off -compose CopyOpacity -composite hist_color_trans.png

Nice one!  :-+ Saved for future reference. :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 05, 2014, 06:15:58 pm
Wow look at this auction on e bay
http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8
And he even has the galls to admit that it was "upgraded" by the information that he found on line?!?!?!
Then he says he will downgrade it back to an E4 but doesn't say anything about reducing the price!
He even sold it for 2570 and had 30 bids!!!
If they only knew... they could have bought an E4 for about 1/3 the price and done the upgrade themselves!  Guess some people just don't research first.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 05, 2014, 06:21:56 pm
It looks like someone has seen a business opportunity in FLIR Ex series tripod mounts. See attached picture.

It was advertised on eb*y as "Flir E4 E5 E6 E8 Thermal imaging camera tripod adapter"

Looks like it uses clamp screws on the rubber handle  :scared:

I prefer the Georges80 design  :)

Sorry for small size....it was in Google's cache for eb*y.

Tried to find the listing and nothing came up... I don't like that design as it looks like there are several set screws that capture the bottom of the handle.  The handle is rubberized so the screws would chew up the handle.
I have designed my own and will post pictures.  I have a tripod mount and a table top adjustable mount.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 05, 2014, 06:26:42 pm
Quote from: London Lad
   Can't see any fraud, he's been truthful.   
Buys it for ~$900, applies a "public" hack (that others have spent time on), I doubt he has contributed anything to EEVBlog.
Has he explained that IF it ever goes in for repair, or gets a firmware update, the "extras" are GONE !!
He could then point them to the Forum and ask them to apply the hack themselves?? Sorry, I think it stinks.
I cannot agree MORE!!!!  He has NOT divulged all the repercussions of the hack and what might happen if the camera has to go in for repair/replacement... warranty VOID!!!!
And if Flir DOES repair the camera, yes he will just have an E4 for 3X the price!!!
I would love to post a public comment on this guys store so all can see, but why waste the effort?  If several of us could write him, that would put a crimp in his style?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 05, 2014, 06:27:40 pm
@plesa,

First I should make it clear that I am not an optical expert  ;)

I have always worked with expensive Germanium optics and was told that they were the best for Thermal Camera lenses. I am aware that some industrial and military thermal cameras use a combination of Germanium and ZnSe lens elements.

Some years ago I discovered ZnSe as a lens that works at thermal camera wavelengths. When I discovered that document presenters use a No.2 bi-convex singlet close-up lens to achieve close focus for a standard Sony camera module,  I had the idea of using a ZnSe lens in the same way for
my thermal cameras. ZnSe has served me very well ever since. It has the advantage of being relatively cheap and available thanks to their use in CO2 cutting lasers. The Focal Lengths available were also perfect for my PCB inspection needs. ZnSe is pretty soft though and needs to be treated with care to avoid scratching. I have had a hard job finding any Germanium lenses with which to experiment so tried GaAs and that worked OK. GaAs has higher transmission losses though.

I am ALWAYS on the look-out for Germanium lenses and actively hunt e*ay. It is interesting that most auxiliary lenses seem to be based on Germanium so I have assumed that Germanium is still considered the lens material of choice. As I say, I am no expert in optics or optical material for thermal cameras. The little Germanium lenses that Junktronix has sent to me will be good to experiment with and compare to ZnSe. I have also purchased some Plano concave ZnSe lenses with which to experiment as they would be needed for building a non-image inverting telephoto lens. Finding a nice large, long focal length Germanium or ZnSe Plano convex lens for such a telephoto lens has proved challenging however.   

I welcome anyone's insight into the complex world of  optics and building auxiliary lenses for our cameras. I tend to build by experiment as I have to work with the specification of lenses that I can lay my hands on at a sensible price. It would be great to offer this forum a cheap way of achieving at least X2 optical magnification for the E4. The lenses will always be the challenge. I have just bought a nice mini lathe so can form the barrel with relative ease.

Playing with optics can be both challenging and fun  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 05, 2014, 06:54:07 pm
I have been able to change the cold boot logo into my own, but how is the "warm boot" logo changed?
It doesn't appear to be a static bmp or png, but a short animation (the blue horizontal bars move and grow).
Is this hard coded somewhere?  I seem to remember a post about this, but don't remember if anything was resolved about it.

Guess I should have said splash screen rather than logo...
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 05, 2014, 07:27:27 pm
I have been able to change the cold boot logo into my own, but how is the "warm boot" logo changed?
It doesn't appear to be a static bmp or png, but a short animation (the blue horizontal bars move and grow).
Is this hard coded somewhere?  I seem to remember a post about this, but don't remember if anything was resolved about it.

Guess I should have said splash screen rather than logo...
Thanks!
I suspect the other logo is buried somewhere, possibly in the bootloader, as it appears pretty quickly after a hard powerup. I'm sure WinCE has a mechanism for including custom boot logos, so WinCE docs would probably be a good place to look, but it could well be compiled into the bootloader image, which would probably be rather harder to get at, and more risky.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 05, 2014, 08:51:38 pm
What data you expect to fill free corner ?

I plan some kind of histogram - which temperatures in which count are populated over image.

Ideas ?

Hi Daves,

(1) temperature of center pixel https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350250/#msg350250 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350250/#msg350250)
(2) histogram https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg361468/#msg361468 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg361468/#msg361468)
(3) graph of temperature

You can draw a graph of temperature by a horizontal line in center of the image

first expand an image and select a palette
Code: [Select]
exiftool -b -RawThermalImage withlens.jpg | convert - gray:- | convert -depth 16 -endian msb -size 320x240 gray:- -auto-level image.png

exiftool -b -Palette withlens.jpg | convert -size 224X1 -depth 8 RGB:- -separate -swap 1,2 -set colorspace YCbCr -combine -colorspace sRGB -level 4096,60928 palette.png
check -colorspace RGB or sRGB for better colors (Linux/windows)

step-by-step:
Code: [Select]
convert image.png -crop 320x1+0+120 -resize 320x256! +repage 1.png
convert 1.png -size 320x256 gradient:gray100-gray0 -compose Minus_Src -composite -threshold 0% 2.png
convert 1.png palette.png -clut 2.png  -alpha off -compose CopyOpacity -composite 3.png
//replace transparence with color white
convert 3.png -flatten 4.png
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74990;image)
resize the graph with -resize HxV!
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69528;image)

here the same as one-liner - escape brackets in Linux with \(
Code: [Select]
$ convert image.png -crop 320x1+0+120 -resize 320x256! +repage -write mpr:gr palette.png -clut \( mpr:gr -size 320x256 gradient:gray100-gray0 -compose Minus_Src -composite -threshold 0% \) -alpha off -compose CopyOpacity -composite 3.png
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 05, 2014, 09:07:38 pm
Wow look at this auction on e bay
http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8

Easiest way how to resolve this is to report it to eBay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 05, 2014, 09:22:10 pm
I saw that the other day. However, I don't think it is actually breaking any eBay rules as the user never claimed it was an E8 (although I do find the title to be somewhat deceptive).
Title: K series firmware upgrade version 1.19.9
Post by: Navynuke on January 05, 2014, 09:23:00 pm
I have been sent a firmware upgrade from a source outside of EEVBlog for the K-series cameras (interestingly enough numbered 1.19.9) I would love to give anyone here a shot at it but it is ~10 mb zipped. If you want a copy shoot me a message and I can setup a box/dropbox folder so that you can see what all comes with it. I have taken the web directory out of the flash FS directory in the K series and it permits the changing of the default cases for the camera but i have been reluctant to change the calibration as I do not have access to any blackbodies. I also wanted to see what anyone else might find in this first. One thing I figured was going to get someone with greater code skills than mine's attention is that the K-series appears to use the same camera core but operates at 60Hz. I had thought about tricking the camera into upgrading to the K series and then reintroducing the E features but wasn't sure that would work and wanted to see what anyone else thought first... It might be that there are fundamental differences in the hardware (extra circuits on the board, etc) but it seems unlikely as they are fixed focus same basic camera.   
Title: Re: K series firmware upgrade version 1.19.9
Post by: Taucher on January 05, 2014, 09:28:50 pm
I have been sent a firmware upgrade from a source outside of EEVBlog for the K-series cameras (interestingly enough numbered 1.19.9) I would love to give anyone here a shot at it but it is ~10 mb zipped. -snip-
Do you mean flir_kxx_v1.19.9_update_pack.zip (9,95 MB)... that one is public on the official update-site :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 05, 2014, 09:42:12 pm
@plesa,

First I should make it clear that I am not an optical expert  ;)

I have always worked with expensive Germanium optics and was told that they were the best for Thermal Camera lenses. I am aware that some industrial and military thermal cameras use a combination of Germanium and ZnSe lens elements.

Some years ago I discovered ZnSe as a lens that works at thermal camera wavelengths. When I discovered that document presenters use a No.2 bi-convex singlet close-up lens to achieve close focus for a standard Sony camera module,  I had the idea of using a ZnSe lens in the same way for
my thermal cameras. ZnSe has served me very well ever since. It has the advantage of being relatively cheap and available thanks to their use in CO2 cutting lasers. The Focal Lengths available were also perfect for my PCB inspection needs. ZnSe is pretty soft though and needs to be treated with care to avoid scratching. I have had a hard job finding any Germanium lenses with which to experiment so tried GaAs and that worked OK. GaAs has higher transmission losses though.

I am ALWAYS on the look-out for Germanium lenses and actively hunt e*ay. It is interesting that most auxiliary lenses seem to be based on Germanium so I have assumed that Germanium is still considered the lens material of choice. As I say, I am no expert in optics or optical material for thermal cameras. The little Germanium lenses that Junktronix has sent to me will be good to experiment with and compare to ZnSe. I have also purchased some Plano concave ZnSe lenses with which to experiment as they would be needed for building a non-image inverting telephoto lens. Finding a nice large, long focal length Germanium or ZnSe Plano convex lens for such a telephoto lens has proved challenging however.   

I welcome anyone's insight into the complex world of  optics and building auxiliary lenses for our cameras. I tend to build by experiment as I have to work with the specification of lenses that I can lay my hands on at a sensible price. It would be great to offer this forum a cheap way of achieving at least X2 optical magnification for the E4. The lenses will always be the challenge. I have just bought a nice mini lathe so can form the barrel with relative ease.

Playing with optics can be both challenging and fun  :)

Thanks for info, I will try to find the source where I found the differences.
I also found quite cheap Ge, but it is not lens.
http://mtafz.wufpx.servertrust.com/product-p/wit-ge-101.htm (http://mtafz.wufpx.servertrust.com/product-p/wit-ge-101.htm)
Lot of Novotech items are on eBay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 05, 2014, 09:43:13 pm
I have been sent a firmware upgrade from a source outside of EEVBlog for the K-series cameras (interestingly enough numbered 1.19.9) I would love to give anyone here a shot at it but it is ~10 mb zipped. -snip-
Do you mean flir_kxx_v1.19.9_update_pack.zip (9,95 MB)... that one is public on the official update-site :)

Yep that would be the one... :palm: I thought I might be onto something.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 05, 2014, 09:43:22 pm
K series does look quite similar, but lens looks bigger, probably necessary for 60fps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 05, 2014, 09:52:20 pm
K series does look quite similar, but lens looks bigger, probably necessary for 60fps

That does look to be the same front mount as the Exx series (I know because it took a bit to figure out how to change the lenses on the Exx series) so it probably isn't the same :( Oh well I wasn't really worried about the speed I am still more interested in additional high temp readings. By utilizing the web portion of the K series thermacam webpage (not astra) it allows the min/max temps to be adjusted just not equipped to see if it truly changes it and what the effects on accuracy might be. I am working on putting together some different options for calibration and will report back as to the results
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 05, 2014, 09:53:37 pm
@K-series:
I did a complete mirror of anything normally downloadable from Flir and took a look in every Firmware-file.
Unfortunately except for the Exx series file there was little similarity to be found - especially little or no ui.d folder.
Even the Exx appcore is different and does not work in conjunction with the Ex DLLs ... I wasn't brave/dumb enough to try a complete Exx -> Ex replacement (plus there could be essential Exx files that are missing in the update file)...


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 05, 2014, 10:26:52 pm
I have been able to change the cold boot logo into my own, but how is the "warm boot" logo changed?
It doesn't appear to be a static bmp or png, but a short animation (the blue horizontal bars move and grow).
Is this hard coded somewhere?  I seem to remember a post about this, but don't remember if anything was resolved about it.

Guess I should have said splash screen rather than logo...
Thanks!
I suspect the other logo is buried somewhere, possibly in the bootloader, as it appears pretty quickly after a hard powerup. I'm sure WinCE has a mechanism for including custom boot logos, so WinCE docs would probably be a good place to look, but it could well be compiled into the bootloader image, which would probably be rather harder to get at, and more risky.
Thanks for the info.... guess I will leave well enough alone as it doesn't really affect the functionality of the camera and as you said, could be very risky!
Changing the cold boot logo is good enough!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on January 05, 2014, 10:52:14 pm
Anyone have shapeways print the closeup lens holder that was posted here? Any problems? I got contacted from shapeways that they won't print the stl before I beef up the material thickness in a spot they had marked on a render of the file. Unfortunately the pic is a bit unhelpful in illustrating the problem...

On the other hand, the tripod adapter was printed and looks/feels fine. Now, if I only could find one of those nutserts or even what the heck they are called around here so I'd know what to ask for in the hardware store....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 05, 2014, 11:33:50 pm
@mvh

I have printed myself the lens holder: no problems, for best result infill 100%
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on January 06, 2014, 12:25:29 am
I didn't think that there was really a problem with the model, dunno why shapeways cant print it with their nice commercial printers, when it has been done on a hobbyist printer.

I've been planning on getting a 3d-printer, but have considered it to be a bit too expensive project, so unfortunately I have to rely on services available. Now that I've bought a thermal cam (and the external charger and an extra battery!) I may have to review the issue. Now, if there only was a bit more of that elusive "free time" floating about...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 06, 2014, 12:58:39 am
I didn't think that there was really a problem with the model, dunno why shapeways cant print it with their nice commercial printers, when it has been done on a hobbyist printer.

I've been planning on getting a 3d-printer, but have considered it to be a bit too expensive project, so unfortunately I have to rely on services available. Now that I've bought a thermal cam (and the external charger and an extra battery!) I may have to review the issue. Now, if there only was a bit more of that elusive "free time" floating about...

My 3D printer cost less than the E4...and I printed some stuff for work which has earned me far more than I paid for the printer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 06, 2014, 01:03:50 am
I didn't think that there was really a problem with the model, dunno why shapeways cant print it with their nice commercial printers, when it has been done on a hobbyist printer.

I've been planning on getting a 3d-printer, but have considered it to be a bit too expensive project, so unfortunately I have to rely on services available. Now that I've bought a thermal cam (and the external charger and an extra battery!) I may have to review the issue. Now, if there only was a bit more of that elusive "free time" floating about...

If you need the lens holder send me a PM 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gilbjd on January 06, 2014, 03:18:20 am
Anyone have shapeways print the closeup lens holder that was posted here? Any problems? I got contacted from shapeways that they won't print the stl before I beef up the material thickness in a spot they had marked on a render of the file. Unfortunately the pic is a bit unhelpful in illustrating the problem...

On the other hand, the tripod adapter was printed and looks/feels fine. Now, if I only could find one of those nutserts or even what the heck they are called around here so I'd know what to ask for in the hardware store....

I had Shapeways (Eindhoven, Holland) print 3 of them for me in black laser sintered nylon using the stl file you refer to.

They did it quickly and without any queries. They came out fine and are a perfect, firm push-fit on the front of the E4.

I'm using them with 3 inch and 4 inch focal length ZnSe lenses obtained on eBay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 06, 2014, 06:22:22 am
Unfortunately except for the Exx series file there was little similarity to be found - especially little or no ui.d folder.

flir published two hardware versions of Exx
I have a E40 version 2012 (without MSX)
the last firmware file of version 2012 is here: http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127)
If you need some special files from my E40 v2012 (old flir menu, another file system), please send me a PM
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on January 06, 2014, 06:47:00 pm
Wow look at this auction on e bay
http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649 (http://www.ebay.com/itm/321287622872?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649)
It is an e4 that is titled e4-e8 and it's over $1700 and in the questions he even said it's not an E8
And he even has the galls to admit that it was "upgraded" by the information that he found on line?!?!?!
Then he says he will downgrade it back to an E4 but doesn't say anything about reducing the price!
He even sold it for 2570 and had 30 bids!!!
If they only knew... they could have bought an E4 for about 1/3 the price and done the upgrade themselves!  Guess some people just don't research first.

Hi,

I highly suspect that a Flir E4 is not as good as a Flir E8. Even if you can update the firmware.
I have "clusters" of bad pixels that are not a problem for a Flir E4, but could be visible for a Flir E8.

It's not a big issue, I'm still very happy with my upgrade, but it's not fair to sell a E4 as a E8.

What Flir is doing:
- They build many camera.
- They test these cameras.
- Cameras with many  bad pixels (that fail a quality test for E8), are downgraded to E6, E5, E4.

You probably have quality tests like:
- More than 50 dead pixels or a cluster of 3-4 pixels: This camera can only be sold as a E4.
- More than 20 dead pixels, or more than 3 clusters of 2 pixels: The camera can only be sold as a E6, E4...

Ect...

That's classical in a product line. So your upgraded Flir E4 is NOT a Flir E8. It's a defective Flir E8 (as it would fail the tests of the Flir E8), but a perfectly working Flir E4.

It's still a good deal....

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 06, 2014, 07:12:18 pm

@Ebay - that person is just exploiting some uneducated buyers - I considered upgrading+reselling myself, but decided not to do it as it would base on commercial intentions and hence be taxable, legally liable etc... plus it would be then "commercial hacking" - opening a whole new box of legal worms.

IMHO it's quite a bit immoral to sell freely available upgrades for such a price-premium - but OTOH there are (stupid) buyers willing to pay... so what the heck. I have seen ebay auctions that went 120% over the "buy now" price... several times....

That's life
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grumpydoc on January 06, 2014, 08:32:37 pm
Apologies for the late (and somewhat off topic) reply but I'm only dipping into the thread every few days and I noted this comment
These are common industrial palette types plus some odd ball palettes like 'Medical' that is used to diagnose breast cancer and other thermally detectable illnesses.
Specifically for breast cancer I'm not aware of any reputable centre offering mammography outside a research study - so far, in the few studies that have been carried out, thermal imaging has consistently shown itself to be unreliable for breast cancer screening or surveillance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 06, 2014, 08:50:46 pm
Apologies for the late (and somewhat off topic) reply but I'm only dipping into the thread every few days and I noted this comment
These are common industrial palette types plus some odd ball palettes like 'Medical' that is used to diagnose breast cancer and other thermally detectable illnesses.
Specifically for breast cancer I'm not aware of any reputable centre offering mammography outside a research study - so far, in the few studies that have been carried out, thermal imaging has consistently shown itself to be unreliable for breast cancer screening or surveillance.
Using thermal imaging for diagnostics is possible, but it's more like a "there's something" than "there's nothing" technology.

Tumors, infections and vascular problems manifest themself in thermal anomalies and thereby >can< stand out on thermal images.
If the problem is deeper inside the tissue, then the "inspection depth" is no longer sufficient - but especially for women with small breasts (that are hard to diagnose by squeezing between plates) there are advantages. It's no "magical" tool, but it does not harm anybody when taking a thermal image - in contrast to using x-rays.

EDIT: the "medical" palette seems pointless to me, more like something outdated, "antique" - thermal resolution is king and a good palette is important to visualize thermal effects.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 06, 2014, 09:03:26 pm
Unfortunately except for the Exx series file there was little similarity to be found - especially little or no ui.d folder.

flir published two hardware versions of Exx
I have a E40 version 2012 (without MSX)
the last firmware file of version 2012 is here: http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127)
If you need some special files from my E40 v2012 (old flir menu, another file system), please send me a PM

Thanks, that link goes to "FLIR Exx P/N:490xx (2.23.14) Update Pack" = flir_exx_pn490_v2.23.14_update_pack.zip
... another one that I already dissected and found nothing useable. If your cam has other contents than included in the upgrade file, then please feel free to zip them up for us - my best guess is, that the interesting stuff is hidden/zipped in the .TFS files.

FW contents of directory \flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d :

\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\report.d  <DIR>
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML  <DIR>
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\report.d\logo.d  <DIR>
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\report.d\logo.d\FLIR_logo.jpg
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\320_240.tfs
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\COMMON_FACET.tfs
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\fonts  <DIR>
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages  <DIR>
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\fonts\gulim.ttf
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\fonts\mingliu.ttf
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\fonts\msgothic.ttf
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\fonts\simsun.ttf
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\langmap.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.cs.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.da.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.de.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.el.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.en.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.es.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.fi.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.fr.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.hu.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.it.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.ja.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.ko.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.nb-NO.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.nl.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.pl.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.pt.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.ru.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.sv.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.tr.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.zh-CHS.xml
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\languages\strings.zh-CHT.xml

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 06, 2014, 09:19:44 pm
Interesting comment on the medical aspects of thermography.

Not my realm at all. I have just seen companies advertising such capabilities. VETs certainly seem to have uses for TICs but that is a little different to Breast Cancer I know. Zoo keepers also use them to remotely monitor the condition of the more dangerous animals...like the Big Cats. I saw that being done on one of the 'behind the scenes' Zoo programs. A lot safer than trying to stick a thermometer up a conscious Tiger's bum  :-DD

I found where the Palettes came from. They were extracted from my copy of FLIR Explorer99 so are likely very old and , as you say.....antique  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 06, 2014, 09:26:50 pm
@Palettes - I think they are the same as the ones in the flir tools reporting component- and of cause missing a header to make them compatible with the Ex

dir /B /S *.pal
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\Glowbow.pal
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\GREY.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\GREY10.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\Greyred.pal
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\InvertedGrey.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\IRON.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\IRON10.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\MEDICAL.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\Midgreen.pal
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\Midgrey.pal
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\RAIN.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\RAIN10.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\RAIN900.PAL
\FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\Yellow.pal

\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\arctic.pal
\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\bw.pal
\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\iron.pal
\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\lava.pal
\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\rainbow.pal
\FIRM\flir_exx_pn645_pn646_v3.12.7_update_pack\E2qtcomb_v3.12.7\FlashBFS\system\rainHC.pal
\FIRM\flir_ex_pn639_v1.18.7_update_pack\Z3comb_v1.18.7\FlashBFS\system\bw.pal
\FIRM\flir_ex_pn639_v1.18.7_update_pack\Z3comb_v1.18.7\FlashBFS\system\iron.pal
\FIRM\flir_ex_pn639_v1.18.7_update_pack\Z3comb_v1.18.7\FlashBFS\system\rainbow.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\arctic.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\bw.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\iron.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\lava.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\rainbow.pal
\FIRM\flir_gf3xx_v2.15.10_update_pack\Gcomb_v2.15.10\FlashFS\system\rainHC.pal
\FIRM\flir_ixx_bxx_v2.19.1_update_pack\FlashFS\system\bw.pal
\FIRM\flir_ixx_bxx_v2.19.1_update_pack\FlashFS\system\iron.pal
\FIRM\flir_ixx_bxx_v2.19.1_update_pack\FlashFS\system\rainbow.pal
\FIRM\flir_ix_v4.3.2_update_pack\Zcomb_v4.3.2\FlashFS\system\bw.pal
\FIRM\flir_ix_v4.3.2_update_pack\Zcomb_v4.3.2\FlashFS\system\bwr.pal
\FIRM\flir_ix_v4.3.2_update_pack\Zcomb_v4.3.2\FlashFS\system\iron.pal
\FIRM\flir_ix_v4.3.2_update_pack\Zcomb_v4.3.2\FlashFS\system\rainbow.pal
\FIRM\flir_kxx_v1.19.9_update_pack\FXcomb_v1.19.9\FlashFS\system\bw.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\arctic.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\bw.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\iron.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\lava.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\rainbow.pal
\FIRM\flir_t420-t440_v1.31.18_update_pack\E3comb_v1.31.18\FlashFS\system\rainHC.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\arctic.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\bw.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\iron.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\lava.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\rainbow.pal
\FIRM\flir_t6xx_v2.34.17_update_pack\FlashFS\system\rainHC.pal
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 06, 2014, 09:43:00 pm
And the 'Medical' palette has disappeared. As you say....it was likely useless.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 06, 2014, 09:46:09 pm
And the 'Medical' palette has disappeared. As you say....it was likely useless.

nope-still there: \FLIR Tools+ 4.0 (4.0.13330.1003) flir tools\flir\flir word reporting\MEDICAL.PAL
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on January 06, 2014, 10:02:15 pm
@Taucher: The best way to "fight back" these eBay guys is to do the same... more offer, lower price :) The risk: Flir will start to find a way to fix the issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 06, 2014, 10:03:30 pm
Oooops

I need to wear my glasses  :-[
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 06, 2014, 10:29:41 pm
Yes, I did mean what daves said. I know that thermography sees only thermal energy. And that FLIRTools can separate the two images of a hybrid. Also, so can shutting off the lights, assuming it is night for a purer image to subtract reflections.

No problem on the tutorial - I'm sure others will find it helpful. FLIR is great about teaching about thermography also in their documentation.



Ah I see what you mean. OK. I will let my post stand though as it applies to reflective surfaces and newbies may be unaware.

Thanks for clarifying the MSX issue.

Update:

It is sometimes challenging the determine whether the visible light portrayed by the MSX is also thermal energy reflection as well though. This occurs with a conventional light bulb that radiates light and lots of heat energy that reflects in the same manner as the light. The stickers in your image will also have a higher emissivity than a matted paint surface on which they are stuck. This is one of the reasons why a camera must also have the 'thermal only' view option. The user can compare the MSX and Thermal image to determine what is truly thermal emissions. An auto reflected light deletion algorithm might delete genuine thermal detail that is common with visible light detail ? Much would depend on how 'clever' it was. The human eye and brain is a very good differential detector.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grumpydoc on January 06, 2014, 10:48:23 pm
Quote
Using thermal imaging for diagnostics is possible, but it's more like a "there's something" than "there's nothing" technology.

Tumors, infections and vascular problems manifest themself in thermal anomalies and thereby >can< stand out on thermal images.
If the problem is deeper inside the tissue, then the "inspection depth" is no longer sufficient - but especially for women with small breasts (that are hard to diagnose by squeezing between plates) there are advantages. It's no "magical" tool, but it does not harm anybody when taking a thermal image - in contrast to using x-rays.

Specifically on the subject of breast cancer - the theory is plausible and thermal imaging has been the subject of some clinical trials.

However it is neither sensitive1 nor specific2 enough to be reliably used. The most recent study that I know about was published last year here https://www.breastsurgeons.org/presskit/docs/2012_INFRARED_THERMOG.pdf (https://www.breastsurgeons.org/presskit/docs/2012_INFRARED_THERMOG.pdf). In this study thermal imaging had a sensitivity of 50% and specificity of 67% - to get this in context it's only slightly better than flipping a coin :o

Other studies have shown similar results.

Not all breast cancers show up on mammography - that is true, that is why the standard of care for suspected breast cancer includes multiple imaging modalities (ultrasound as well as mammography and in equivocal cases MRI) as well as clinical examination and biopsy.

[1] sensitivity for medical tests is how reliably the test is positive in people who have the disease. I.e if you test 100 people who actually have a condition and the test is positive in 50 of these then the test has a sensitivity of 50%
[2] specificity is how reliably the test is negative in people who do not have the disease. I.e if you test 100 people who are healthy and the test is positive in 50 of these then the test has a epecificity of 50%
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 06, 2014, 11:03:49 pm
Also, more on thermography for medical diagnosis. Some of the problem is in the nature of disease itself. For instance, a tumor (or infected area) can certainly have increased vascularity (blood flow and thus heat) but can also have cystic areas (fluid filled) and necrotic areas (dead tissue, less heat). Frequently, you can find all three of the above in an active tumor/infection. So, thermography can sometimes accurately report on a situation and present a confusing, nonspecific picture i.e. "something is there but I don't know what".

As human patients can identify areas that are swollen, discolored or painful, screening thermography is impractical. For animals, the equation changes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 06, 2014, 11:29:24 pm
Thanks for the comments guys....very interesting. As I say I know nothing of the medical. I find your input most enlightening  :)

The limit of my human testing has been to aim a TIC at my toes ...... it confirmed what my brain was telling me.....they were flippin cold  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 06, 2014, 11:41:40 pm
got another thought percolating and thought I would see if someone already has the answer before heading out to chase at this particular windmill. I remembered that a friend of mine had a flir t-400 that was pre wifi and that he purchased from flir a usb dongle small enough that mated with the firmware to take advantage of the streaming and utilizing flir tools to store images directly into his iPhone. I did some digging and found this document http://www.airconcern.co.uk/PDFs/Flir-T951387-Datasheet.pdf (http://www.airconcern.co.uk/PDFs/Flir-T951387-Datasheet.pdf) with very little information but wondered if any of the technical geniuses on here might already know ...etc, etc, etc,     The vendor is UK based and their page is available here: http://www.airconcern.co.uk/flir-wifi-usb-adaptor-p-745.html (http://www.airconcern.co.uk/flir-wifi-usb-adaptor-p-745.html) I wonder if there is something specific about this particular dongle or whether the one my kid uses for skylanders on the nintedno wii would work.....  :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 06, 2014, 11:52:59 pm
As you say, that Dongle is designed to connect to the camera USB port and the camera uses it for Wi-Fi. My canon printer has the same capability if you plug a generic Dongle into the port on it. It would be easy for FLIR to ensure that only a dongle with their ID works with the firmware but it is such a cheap option they may not bother.

The bad news is that, IIRC, the E4 does not contain the required Wi-Fi support files to recognise or drive such a dongle, FLIR or other.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 06, 2014, 11:54:25 pm
The vendor is UK based and their page is available here: http://www.airconcern.co.uk/flir-wifi-usb-adaptor-p-745.html (http://www.airconcern.co.uk/flir-wifi-usb-adaptor-p-745.html) I wonder if there is something specific about this particular dongle or whether the one my kid uses for skylanders on the nintedno wii would work.....  :-/O
That looks like a regular boring wifi dongle you can get for a few $$$ from your favorite Chinese vendor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 07, 2014, 01:04:35 am
A long time ago I tried plugging in a USB OTG host cable, but I'm fairly sure it didn't puts out the 5V for host mode, so unlikely to be useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KTP on January 07, 2014, 03:10:50 am
See, I go away for a few months and come back to find out you guys have made me want yet another product! Damn you!

I am curious about two uses that would convince my better half to let me get a E4:

How well might it work in spotting someone who has fallen overboard at night in 48 degree water?  What would be the likely range?  Could you spot them as an orange dot from, say 100 feet away?

How well would it work at night to spot a bear if the outside temperature was around 50 degrees?  Not for hunting purposes, but just as a "what the **** was that noise?" while you are taking a dump in the middle of the night.  Would you be able to see something bear sized from 100 to 150 feet away at night?  How important is ambient temperature?  If the air temp is 80 or 85, does the signature of bear, moose or human go away?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2014, 04:42:56 am
@KTP:

I guess one can estimate the resolution knowing 45° FOV and 320 pixels ... => 0.14°/px ... in 100ft one pixel covers an area of 2.93 inches in diameter  A standing human (1,7m / 66") in 100ft distance would cover 22 pixels height on the sensor - a human head (7.8"/20cm) would be approx. 2-3px in size.  ^-^

Doubling the distance halves the resolution/coverage area - so a human's head in water should be visible up to some 250ft (76m) if not partially submersed.

Regarding animals: AFAIK their thermal signature is usually pretty small and usually concentrates around the eyes and head/mouth.

In theory (and reality) a TIC can't see detail in thermal equilibrium, but usually there's some minor difference (be it from atmospheric cooling/heating effects or whatever) ... and the E4 is pretty sensitive (not to forget: different emissivities result in different signals)

@bear+dump ... don't think fiddling with a TIC while taking a dump somewhere in the wilderness will go unnoticed by a nearby bear - I bet a bear would first smell you, then hear you and then watch you faint while you realize it's approach on the TIC-screen (which meanwhile nicely illuminates your shocked face)  :-DD

PS: I just remembered that I posted a TIC-video showing an unhappy goat in Afghanistan some time ago... the goat was pretty nicely visible - even how it struggled to escape (poor thing)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on January 07, 2014, 06:37:43 am
See, I go away for a few months and come back to find out you guys have made me want yet another product! Damn you!

I am curious about two uses that would convince my better half to let me get a E4:

How well might it work in spotting someone who has fallen overboard at night in 48 degree water?  What would be the likely range?  Could you spot them as an orange dot from, say 100 feet away?

How well would it work at night to spot a bear if the outside temperature was around 50 degrees?  Not for hunting purposes, but just as a "what the **** was that noise?" while you are taking a dump in the middle of the night.  Would you be able to see something bear sized from 100 to 150 feet away at night?  How important is ambient temperature?  If the air temp is 80 or 85, does the signature of bear, moose or human go away?

Yes to all of that. It is surprising how much a warm blooded animal/human does stand out! Harder to spot amphibians, reptiles though.

Unless the background temp is pretty close to the objective's temp then you can see it. Air temp itself is not directly visible unless it's carrying a lot of water droplets (so much for those ghost hunting shows  :)).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 07, 2014, 10:40:57 am
See, I go away for a few months and come back to find out you guys have made me want yet another product! Damn you!

I am curious about two uses that would convince my better half to let me get a E4:

How well might it work in spotting someone who has fallen overboard at night in 48 degree water?  What would be the likely range?  Could you spot them as an orange dot from, say 100 feet away?
The  E4  has a pretty wide FOV, so may be a bit wide for search type uses. Also, if someone is in waterproof clothing, you'd probably only see hands/face as everything else would be at aa similar temp to the water. Anything wet will also have rather low emissivity.
Quote
How well would it work at night to spot a bear if the outside temperature was around 50 degrees?
Outside temp isn't very significant - air has very low emissivity. 
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 07, 2014, 02:06:55 pm
Thanks, that link goes to "FLIR Exx P/N:490xx (2.23.14) Update Pack" = flir_exx_pn490_v2.23.14_update_pack.zip
... another one that I already dissected and found nothing useable. If your cam has other contents than included in the upgrade file, then please feel free to zip them up for us - my best guess is, that the interesting stuff is hidden/zipped in the .TFS files.

FW contents of directory \flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d :
...

I compared the flash of E40 (model 2012) versus the firmware update file 2.23.14 with this two commands.
As result you see all different files and and missing files in firmware update:
Code: [Select]
>md5deep64.exe -l -r E2comb_v2.23.14\FlashFS > firmwareupdate.txt

>md5deep64.exe -l -r -X  firmwareupdate.txt FlirE40\FlashFS
 FlirE40\FlashFS\system\appcore.d\config.d\conf.cfg
 FlirE40\FlashFS\system\appcore.d\factory.d\adjust.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\laser.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\intensity.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\palette.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\power.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\time.rsc
 FlirE40\FlashFS\system\appcore.d\factory.d\usb.rsc
 FlirE40\FlashFS\system\arctic.pal
 FlirE40\FlashFS\system\bw.pal
 FlirE40\FlashFS\system\calib_org.rsc
 FlirE40\FlashFS\system\calib.rsc
 FlirE40\FlashFS\system\default.rsc
 FlirE40\FlashFS\system\default_b\initial.rsc
 FlirE40\FlashFS\system\default_b\stats.rsc
 FlirE40\FlashFS\system\default__resmon.rsc
 FlirE40\FlashFS\system\default__ui.rsc
 FlirE40\FlashFS\system\default__services.rsc
 FlirE40\FlashFS\system\iron.pal
 FlirE40\FlashFS\system\journal.rsc.old
 FlirE40\FlashFS\system\journal.rsc
 FlirE40\FlashFS\system\journal__prod.rsc
 FlirE40\FlashFS\system\journal__resmon.rsc
 FlirE40\FlashFS\system\journal__prod.rsc.old
 FlirE40\FlashFS\system\journal__rtp.rsc
 FlirE40\FlashFS\system\journal__rtp.rsc.old
 FlirE40\FlashFS\system\journal__resmon.rsc.old
 FlirE40\FlashFS\system\journal__services.rsc.old
 FlirE40\FlashFS\system\journal__ui.rsc
 FlirE40\FlashFS\system\journal__ui.rsc.old
 FlirE40\FlashFS\system\journal__services.rsc
 FlirE40\FlashFS\system\kits.d\confkit.rev
 FlirE40\FlashFS\system\kits.d\extfontkit.rev
 FlirE40\FlashFS\system\lava.pal
 FlirE40\FlashFS\system\maps\ds120C_we.crs
 FlirE40\FlashFS\system\maps\ds650C_we.crs
 FlirE40\FlashFS\system\maps\ds650C_we_apNOA_fi_le_static.gan
 FlirE40\FlashFS\system\maps\ds120C_we_ap_fi_le_static.gan
 FlirE40\FlashFS\system\maps\ds_we_ap_fi_le.dpx
 FlirE40\FlashFS\system\prodspec.rsc
 FlirE40\FlashFS\system\ProgressApp.ini
 FlirE40\FlashFS\system\rainbow.pal
 FlirE40\FlashFS\system\rainhc.pal
 FlirE40\FlashFS\system\restore.rsc
 FlirE40\FlashFS\system\restore__prod.rsc
 FlirE40\FlashFS\system\restore__resmon.rsc
 FlirE40\FlashFS\system\restore__rtp.rsc
 FlirE40\FlashFS\system\restore__services.rsc
 FlirE40\FlashFS\system\restore__ui.rsc
 FlirE40\FlashFS\system\service\appcore.d\config.d\conf.cfg
 FlirE40\FlashFS\system\service\appcore.d\factory.d\bw.rsc
 FlirE40\FlashFS\system\services.d\config.d\conf.cfg
 FlirE40\FlashFS\system\services.d\factory.d\dcim.rsc
 FlirE40\FlashFS\system\service\appcore.d\factory.d\rndis.rsc
 FlirE40\FlashFS\system\services.d\factory.d\no_wzctool.rsc
 FlirE40\FlashFS\system\torrent.d\err_checkpoint.rsc
 FlirE40\FlashFS\system\ui.d\config.d\conf.cfg
 FlirE40\FlashFS\system\ui.d\factory.d\320_240.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\autofusion.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\pipfusion.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\save_direct.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\sim_save.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\regional.rsc
 FlirE40\FlashFS\system\ui.d\factory.d\tfsdir.rsc
 FlirE40\FlashFS\system\ui.d\tml\fonts\gulim.ttc.gz
 FlirE40\FlashFS\system\ui.d\tml\fonts\msgothic.ttc.gz
 FlirE40\FlashFS\system\ui.d\tml\fonts\simsun.ttc.gz
 FlirE40\FlashFS\system\ui.d\tml\fonts\mingliu.ttc.gz
 FlirE40\FlashFS\system\web\service\ppr.asp
 FlirE40\FlashFS\tmp\ppr\ppr.log
 FlirE40\FlashFS\tmp\prod.log
funny are the missing palettes in firmware update  :)

\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\320_240.tfs
\flir_exx_pn490_v2.23.14_update_pack\FlashFS\system\ui.d\TML\COMMON_FACET.tfs
This files are binary identical with flash of E40

How we can expand the compressed(?) tfs?
Code: [Select]
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  25 54 46 53 0A 0D 13 4C 21 01 00 00 10 00 00 00  %TFS...L!.......
00000010  43 72 02 00 6A 4D 12 00 AB 00 00 00 F8 91 B5 00  Cr..jM..«...ø‘µ.
00000020  67 3C 0C 00 95 00 00 00 70 7E B9 00 75 F1 09 00  g<..•...p~¹.uñ..
00000030  5B 00 00 00 5C 26 3A 04 31 E0 0C 00 3A 0D 00 00  [...\&:.1à..:...
00000040  37 68 57 05 44 4B 12 00 30 01 00 00 AE DF 37 06  7hW.DK..0...®ß7.

the firmware E2qtcomb_v3.12.7 for the new E40 model 2013 does'nt  contain this *.tsf files



my FlashFS\system\appcore.d\config.d\conf.cfg
Code: [Select]
#
# Generated at 2011-04-28 17:33:37
#
.caps entry
.caps.config entry
.caps.config.name text "app E40"
.caps.config.revision text "0.10"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.downsample bool true
.caps.config.image.settings.resIR int32 160
.caps.config.image.settings.resIR int32 160
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool false
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool false
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 0
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool false
.caps.config.image.sysimg.alarms.humidity.maxCount int32 0
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool false
.caps.config.image.sysimg.alarms.insulation.maxCount int32 0
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool false
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 3
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 3
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool false
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 60
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 2
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool false
# ID 490xxxxx

and FlashFS\system\ui.d\config.d\conf.cfg
Code: [Select]
#
# Generated at 2011-04-28 17:33:37
#
.caps entry
.caps.config entry
.caps.config.name text "GUI E40"
.caps.config.revision text "0.10"
.caps.config.IIG entry
.caps.config.IIG.enabled bool true
.caps.config.IIG.DC int32 1
.caps.config.IIG.IR int32 1
.caps.config.IIG.canvasSketches int32 0
.caps.config.IIG.IRImageSketch bool false
.caps.config.IIG.DCImageSketch bool false
.caps.config.IIG.textAnnotations int32 1
.caps.config.IIG.videos int32 1
.caps.config.IIG.voiceAnnotations int32 1
.caps.config.IIG.objects int32 5
.caps.config.image entry
.caps.config.image.enabled bool true
.caps.config.image.adjust entry
.caps.config.image.adjust.enabled bool true
.caps.config.image.adjust.auto bool true
.caps.config.image.adjust.interval bool true
.caps.config.image.adjust.above bool false
.caps.config.image.adjust.below bool false
.caps.config.fusion entry
.caps.config.fusion.enabled bool true
.caps.config.fusion.thermal entry
.caps.config.fusion.thermal.enabled bool false
.caps.config.fusion.thermal.auto bool false
.caps.config.fusion.thermal.interval bool false
.caps.config.fusion.thermal.above bool false
.caps.config.fusion.thermal.below bool false
.caps.config.fusion.PIP entry
.caps.config.fusion.PIP.enabled bool true
.caps.config.fusion.PIP.locked bool true
.caps.config.laser entry
.caps.config.laser.enabled bool true
.caps.config.laser.positionMarker bool true
.caps.config.measure entry
.caps.config.measure.enabled bool true
.caps.config.measure.emissivityTable entry
.caps.config.measure.emissivityTable.enabled bool true
.caps.config.measure.externWindow entry
.caps.config.measure.externWindow.enabled bool true
.caps.config.measure.localObjectParams entry
.caps.config.measure.localObjectParams.enabled bool false
.caps.config.measure.screening entry
.caps.config.measure.screening.enabled bool false
.caps.config.mode entry
.caps.config.mode.enabled bool true
.caps.config.mode.program bool false
.caps.config.mode.panorama bool false
.caps.config.mode.video bool true
.caps.config.mode.radiometricVideo bool false
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.presets bool false
.caps.config.save entry
.caps.config.save.enabled bool true
.caps.config.save.simultaneous bool true
.caps.config.save.fastShoot bool false
.caps.config.report entry
.caps.config.report.enable bool false
.caps.config.report.createPdf bool false
# ID 490xxxxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jquinn11733 on January 07, 2014, 02:33:36 pm
FYI.... bought four of the E4 units for academic use (chemistry lab-class),
and just did the upgrade.  Thanks!
Model: E4 1.1
Serial: 63909758
Serial: 63909748
Serial: 63909700
Serial: 63909711
Part#63901-0101
Software 1.19.8
Calibration Date: 12/9/2013  (all four)

Big change from the my Tech-Jam TJ-200 which was $4K for 8x8 pixels,
though it does go to higher temperature (1000C).

thanks and regards,
- Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 07, 2014, 03:58:43 pm
only for information:

I found here this values of the noise generator.
I think the unit of targetNoiseMk is [milliKelvin]

Flir E30B https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335974/#msg335974 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335974/#msg335974)
.caps.config.image.targetNoise.targetNoiseMk int32 90
Datasheet Thermal sensitivity: 75 mK

Flir E40 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg362889/#msg362889 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg362889/#msg362889)
.caps.config.image.targetNoise.targetNoiseMk int32 60
Datasheet Thermal sensitivity: 75 mK

Flir E60 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335988/#msg335988 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335988/#msg335988)
.caps.config.image.targetNoise.targetNoiseMk int32 90 (it's true?? taucher)
Datasheet Thermal sensitivity: 50 mK

Flir E4 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg313584/#msg313584 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg313584/#msg313584)
.caps.config.image.targetNoise.targetNoiseMk int32 135
Datasheet thermal sensitivity: 150 mK

you can self measure your real thermal sensitivity - see my post here
a compare of Noise Measuring in Service Menu
http://192.168.0.2/service/Diag/NoiseMeasure.asp (http://192.168.0.2/service/Diag/NoiseMeasure.asp)

new Flir E4 with temp. range -20 to +250 °C
-> Pixel Noise  17.86 mK  =  1.66 digits
...

old Flir E40 with temp range -20°C bis +120 °C
-> Pixel Noise:   28.96mK =  5.73 Digits
...

and here
targetNoiseMk is a noise generator in mK (conforming with NETD/ thermal sensity in Flir Datasheets of the selected cam)
...
Quote
http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters (http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters)
Uncooled infrared cameras systems are typically a little noisier, in the range of 30 - 120mK. Noise in an image can be spatial or temporal.
Spatial noise is noise across the image at any given point in time. It is perceived as an unchanging fixed pattern on top of the image.
Temporal noise is noise at any point in the image over time. It is perceived as the static that moves in an image.
NETD is typically the measure of both these noise types.
...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 07, 2014, 07:27:50 pm
I do not pretend to understand the noise value used on these cameras. Even less so after seeing the Exx series values !. I remain unclear on whether the value is noise injection or noise compensation  :-// If anyone understands this and can put it into plain English I would welcome such a post. I thought I saw '5 'as a value used in the E4 but that may have been something different.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 07, 2014, 07:46:06 pm
sorry for my bad english  :-[

Flir adds additional synthetics noise to the sensor natural noise to reach the (bad) NETD, which specified in Flir data sheet

The Flir E4 uses a targetNoiseMk of 135 mK.
The hacked E4 config file reduce this value to 5.

Here I wrote about the differences of measured noise with targetNoiseMk on/off:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342315/#msg342315 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342315/#msg342315)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 07, 2014, 07:52:39 pm
tomas123

There is nothing wrong with your English  :-+

When I said please explain in plain English, in the UK that means in simple terms so that novices, like me, can understand  :)  Sorry if it sounded like any form of criticism ... it was not intended  :-[
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 07, 2014, 09:15:05 pm
macro without macro lens

Testo has a feature called SuperResolution, to stack multiple images for better resolution

I tried the image stacking with some Flir Images.

As sample a took some images from a raspberry pi ( the dimension you see here http://www.pyrosoft.co.uk/blog/2012/01/15/raspberry-pi-measurements-dimensions/ (http://www.pyrosoft.co.uk/blog/2012/01/15/raspberry-pi-measurements-dimensions/) )

unfortunately the lens of flir E40 at macro distances (0,4m) is only sharp in the center

connect with telnet to shell of Flir E40 camera and take a RAW sequence of 90 frames
I used a tripod and moved the cam a little while recording.

Code: [Select]
rset .image.services.rtrecord.filename \StorageCard\001.seq
rset .image.services.rtrecord.count 90
rset .image.services.rtrecord.frequency 30
rset .image.services.rtrecord.active true
delay 5
rset .image.services.rtrecord.store true

now we have the raw video file 001.seq

we can split the sequence in 90 images ( seq101.fff to seq190.fff) with this perl script
see my post here: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html#msg25567 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html#msg25567)

Code: [Select]
$ perl -f split.pl 001.seq 

$ cat split.pl
#!/usr/bin/perl
undef $/;
$_ = <>;
$n = 100;
# FLIR camera E40         
$pat="\x46\x46\x46\x00\x00\x00";
# Flir Tools (comment out)
#$pat = "\x46\x46\x46\x00\x43\x41\x50";
for $content (split(/(?=$pat)/)) {
        open(OUT, ">seq" . ++$n . ".fff");
        binmode OUT;
        print OUT $content;
        close(OUT);
}
as next step  convert this 90 images with exiftool/imagemagick to 16 bit png images

Code: [Select]
for i in *.fff; do exiftool -b -RawThermalImage $i | convert - -auto-level -resize 300% _$i.png ; done
now stack all png images with free tool Registax  http://www.astronomie.be/registax/ (http://www.astronomie.be/registax/) and save as 16 bit tif image
 

compare the images

a single frame
Code: [Select]
$ exiftool -b -RawThermalImage seq101.fff | convert - -auto-level resize 640x -clut single.jpg
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75319;image)
the LQFP64 chip size in the middle is 8x8mm

a single frame sharpen
Code: [Select]
$ exiftool -b -RawThermalImage seq101.fff | convert - -auto-level -resize 640x ../iron-pal.png -sharpen 0,3 -clut single-sharp.jpg (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75323;image)

and the stacked image of 90 frames
Code: [Select]
$ convert registax.tif -resize 640x ../iron-pal.png -clut stack.jpg(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75321;image)

and now a (over) sharpen stacked image at 300%
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75327;image)
look at the vertical chip labeling SMSC®
LQFP64 pin-distance: 0.5mm (16 pins at 8 mm)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 07, 2014, 09:37:22 pm
Um...bad things are happening.

I got the resolution upgraded.  Went to install the BETA3 menu.  Temp enabled RNDIS, FTP'd in, backed up my FlashBFS folder, copied in the new FlashBFS files, and did a hard restart.  The Special Edition logo screen came up on restart, but when I pressed the menu button, I got an Application Error warning.  I did another hard restart.  The camera is now functional and takes pictures, but I cannot access the menu at all. 

I tried to temp enable RNDIS again, but without the menu, I can't get the camera into FTP-accessible mode (since I can't access the info screen).  Please help!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2014, 09:59:25 pm
Um...bad things are happening.

I got the resolution upgraded.  Went to install the BETA3 menu.  Temp enabled RNDIS, FTP'd in, backed up my FlashBFS folder, copied in the new FlashBFS files, and did a hard restart.  The Special Edition logo screen came up on restart, but when I pressed the menu button, I got an Application Error warning.  I did another hard restart.  The camera is now functional and takes pictures, but I cannot access the menu at all. 

I tried to temp enable RNDIS again, but without the menu, I can't get the camera into FTP-accessible mode (since I can't access the info screen).  Please help!

I wonder if people startet appending instead of overwriting the files or if they did not enable all the features...
There's a reason I said "advanced users" (hanging "advanced" pretty low btw) *sigh*

Try FTP while the camera is running - if that fails too, then try applying the normal flir "upgrade" or create a net_install package with the patched files and use the flir tools to upload the hack - that one should always work unless you really screwed things up (like hurting appcore.exe)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 07, 2014, 10:03:02 pm
Um...bad things are happening.

I got the resolution upgraded.  Went to install the BETA3 menu.  Temp enabled RNDIS, FTP'd in, backed up my FlashBFS folder, copied in the new FlashBFS files, and did a hard restart.  The Special Edition logo screen came up on restart, but when I pressed the menu button, I got an Application Error warning.  I did another hard restart.  The camera is now functional and takes pictures, but I cannot access the menu at all. 

I tried to temp enable RNDIS again, but without the menu, I can't get the camera into FTP-accessible mode (since I can't access the info screen).  Please help!
It is possible that you have made an incorrect CRC01 of e8.cfg
That would just make it revert to E4
I've seen the very occasional menu/app crash but sorted itself after the next hard reset.
Even if the menu crashes, I would think the .fif option to enable RNDIS would work.
If the .fif installer works, then you should be able to make an install file to rewrite the factory default files.
If all else fails there's the serial console.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on January 07, 2014, 10:11:12 pm
Flir announced at CES an iPhone case/Thermal camera that will cost $350.

http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213 (http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 07, 2014, 10:22:05 pm
Indeed. I would like to see the thermal imaging engine in that unit....it is so slim-line !

Sadly this gives the guys at Mu Optics a plausible excuse for their product failing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 07, 2014, 10:26:02 pm
Color me stupid.  I will accept all insults hurled.  I made a number of errors, and luckily didn't break anything permanently.

First off, the first time I tried to copy the new files over, I *did* choose overwrite BUT I had the damned INFO screen open at the time.  That made two copies of the menu files.  The reason I got the application error is that it had two copies of all 3 menu files and didn't know which one to use.

The second error occurred when I was trying to FTP back in to fix my first error.  I left FLIRInstall open while I was trying to access the camera by FTP.  I'm pretty sure that Install program hijacks the FTP connection so that you cannot have another active connection to copy the files over.

I got back in there and straightened everything out.  Thank you guys for the quick troubleshooting efforts.  I appreciate the effort that you have put forth in developing these hacks.  Even if I did brick my camera, I wouldn't have blamed you guys in any way.  I knew it was for use at my own risk.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 07, 2014, 10:27:42 pm

Open question: Is it hackable? (Isn't that what we all are thinking?)

Flir announced at CES an iPhone case/Thermal camera that will cost $350.

http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213 (http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 07, 2014, 10:46:34 pm

Open question: Is it hackable? (Isn't that what we all are thinking?)

Flir announced at CES an iPhone case/Thermal camera that will cost $350.

http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213 (http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213)
There must be some "SNAG", otherwise no one would buy any FLIR product anymore. Why would you pay 6000$ or more, when this crap can do 640x480 for $350. So, maybe they presented 640x480 on CES, but for that $350 you can buy "commercial" version of it, with 80x80 @ 1fps version... hope...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 07, 2014, 10:47:44 pm

Open question: Is it hackable? (Isn't that what we all are thinking?)

Flir announced at CES an iPhone case/Thermal camera that will cost $350.

http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213 (http://gizmodo.com/flir-just-turned-your-iphone-5-into-a-predator-like-the-1496554213)
There must be some "SNAG", otherwise no one would buy any FLIR product anymore. Why would you pay 6000$ or more, when this crap can do 640x480 for $350. So, maybe they presented 640x480 on CES, but for that $350 you can buy 80x80 @ 1fps version... hope...
They do not quote the IR resolution anywhere - only the visible  camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on January 07, 2014, 10:52:00 pm
They quote it here:
http://gizmodo.com/your-iphone-could-soon-get-predator-vision-1177511480 (http://gizmodo.com/your-iphone-could-soon-get-predator-vision-1177511480)

But it's the resolution of the "normal" camera, not the infrared one!

From what I see the resolution seems to be 60x40, something like that.

What could be interesting is that it's easy to write an application to create panorama...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 07, 2014, 10:57:38 pm
Sc_Logo_FlirHardEdges.png <- that file got edited (into totally transparend) in the hack's RCC archive

Did you make other changes to the Facet RCC archive?  If not, couldn't you just replaced the hacked version with the original version of that particular RCC archive to get the logo back?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 07, 2014, 11:00:10 pm
Who knows. Maybe the photo is fake, I mean the resolution is pretty good, I have measured 220x160 just from that photo:
(http://img.gawkerassets.com/img/18xpk7jax5vhzjpg/ku-xlarge.jpg)

I saw some photos from CES of real item and the resolution seems much worse.

(http://asset0.cbsistatic.com/cnwk.1d/i/tim2/2014/01/07/DSC04670_610x458.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on January 07, 2014, 11:04:21 pm
http://flir.com/flirone/#case-4 (http://flir.com/flirone/#case-4)
The picture is not that good on this page...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 07, 2014, 11:16:33 pm
@daves

Your first picture looks like a different camera model or a prototype.

As has been said before, images on the adverts can be a little misleading and there is usually a caveat warning that it is a simulated image. The image content suggests that FLIR are aiming this unit at gimmick addicts and those who wish to look 'cool' in front of the ladies. A toy by any other name.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2014, 11:22:52 pm
Sc_Logo_FlirHardEdges.png <- that file got edited (into totally transparend) in the hack's RCC archive

Did you make other changes to the Facet RCC archive?  If not, couldn't you just replaced the hacked version with the original version of that particular RCC archive to get the logo back?

You could, but your menu would lack lots of icons for the new stuff then as I merged Exx and Ex together in order to get the missing icons
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 07, 2014, 11:27:57 pm
Sc_Logo_FlirHardEdges.png <- that file got edited (into totally transparend) in the hack's RCC archive

Did you make other changes to the Facet RCC archive?  If not, couldn't you just replaced the hacked version with the original version of that particular RCC archive to get the logo back?

You could, but your menu would lack lots of icons for the new stuff then as I merged Exx and Ex together in order to get the missing icons

Gotcha.  We've already established that I lack the expertise to do the more complicated hacks (since I failed at the easy ones).  I didn't know what else was in that file.  I like the FLIR logo on the images, but I will certainly deal with it not being there to have icons for all the new menu items.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2014, 11:56:39 pm
sorry for my bad english  :-[

Flir adds additional synthetics noise to the sensor natural noise to reach the (bad) NETD, which specified in Flir data sheet

The Flir E4 uses a targetNoiseMk of 135 mK.
The hacked E4 config file reduce this value to 5.

Here I wrote about the differences of measured noise with targetNoiseMk on/off:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342315/#msg342315 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342315/#msg342315)
I completely turned off noise in my config from day one on ...
Your quote "after setting targetNoiseMk to zero, stacking of images don't improve results" confirms this step :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 08, 2014, 12:32:32 am
Your quote "after setting targetNoiseMk to zero, stacking of images don't improve results" confirms this step :)
Yup, tomas123 did a pretty good job analyzing the noise. :) Still have a few tests for the temporal noise on my TODO list, but so much stuff, so little time. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vapid2323 on January 08, 2014, 02:03:49 am
So I am kinda a security nut, I wanted to see some folks thoughts on incorporating this into a security system. I would just want a warning triggered on movement and then if the movement continues map it against some thermal profile to hopefully rule out small critters. I saw someone post a histogram based on the thermal profile and that might do the trick :)

My camera is not here yet but, am I crazy or do you guys think this is within reach?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 08, 2014, 02:12:12 am
So I am kinda a security nut, I wanted to see some folks thoughts on incorporating this into a security system. I would just want a warning triggered on movement and then if the movement continues map it against some thermal profile to hopefully rule out small critters. I saw someone post a histogram based on the thermal profile and that might do the trick :)

My camera is not here yet but, am I crazy or do you guys think this is within reach?
One thing that I have noticed with the E4 (+) and probably other TIC's is that they do calibrate randomly (sometimes several times a minute, sometimes less... all due to temperature change), so this would be detected as motion unless you did some scene "crunching" to detect calibration cycles versus movement...
OR you just live with the change due to cal cycles.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 08, 2014, 02:12:33 am
So I am kinda a security nut, I wanted to see some folks thoughts on incorporating this into a security system. I would just want a warning triggered on movement and then if the movement continues map it against some thermal profile to hopefully rule out small critters. I saw someone post a histogram based on the thermal profile and that might do the trick :)

My camera is not here yet but, am I crazy or do you guys think this is within reach?
My gut feeling is, that you're way better off with normal PIR detectors. There are some really nice ones available - even with dual sensor setup to eliminate false alarms, small animal compatibility etc. Those devices are rugged and made for permanent use - if you want to use a FLIR E4 outdoors, then you'll need a new enclosure and so on ... that will ruin your day.

If a PIR detector is not suitable (relfections from street-traffic etc) then take a look at radar sensors - a good setup and they will ignore the cat, but detect any human :)

Sometimes a "simple" solution is just superior to a more complex one :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vapid2323 on January 08, 2014, 02:20:53 am
So I am kinda a security nut, I wanted to see some folks thoughts on incorporating this into a security system. I would just want a warning triggered on movement and then if the movement continues map it against some thermal profile to hopefully rule out small critters. I saw someone post a histogram based on the thermal profile and that might do the trick :)

My camera is not here yet but, am I crazy or do you guys think this is within reach?
My gut feeling is, that you're way better off with normal PIR detectors. There are some really nice ones available - even with dual sensor setup to eliminate false alarms, small animal compatibility etc. Those devices are rugged and made for permanent use - if you want to use a FLIR E4 outdoors, then you'll need a new enclosure and so on ... that will ruin your day.

If a PIR detector is not suitable (relfections from street-traffic etc) then take a look at radar sensors - a good setup and they will ignore the cat, but detect any human :)

Sometimes a "simple" solution is just superior to a more complex one :)

Thanks! Yeah, you might be right perhaps I might play around for the fun of it. Thanks for the advice :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on January 08, 2014, 03:50:05 am
unfortunately the lens of flir E40 at macro distances (0,4m) is only sharp in the center

crop captured images before throwing them at super resolution algo
your result image has ghosting on the edges, is that the result of soft edges in source data?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 08, 2014, 05:36:46 am
Going back to pages 14x of this thread there was some talk on .image.targetNoise enabled/disabled and the mk value being changed from 135 to 5. I was re-reading some of it and didn't seem to come away with the best understanding of it. My question is - would it not give a clearer image if this was disabled or set to 0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 08, 2014, 05:41:51 am
targetNoise ... would it not give a clearer image if this was disabled or set to 0?
My opinion (as stated above): yes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 08, 2014, 05:46:28 am
targetNoise ... would it not give a clearer image if this was disabled or set to 0?
My opinion (as stated above): yes

Wow that was fast. Followup Q - likely the best way of doing this is to re-role the e8.cfg editing:

.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5

should I just use

.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0

or just edit one or the other?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 08, 2014, 05:49:10 am
e8.conf
.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 08, 2014, 06:02:04 am
e8.conf
.caps.config.image.targetNoise.enabled bool false
.caps.config.image.targetNoise.targetNoiseMk int32 0

Thanks Taucher! I also had the chance to install BETA3 tonight. Lots to play with tomorrow now  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 08, 2014, 10:24:12 am
Going back to pages 14x of this thread there was some talk on .image.targetNoise enabled/disabled and the mk value being changed from 135 to 5. I was re-reading some of it and didn't seem to come away with the best understanding of it. My question is - would it not give a clearer image if this was disabled or set to 0?
There is nothing special about 5 - the only reason it's 5 in my  template e8.cfg file is that I made 3 versions to test, with 135 (original value), 35 and 5  to compare the difference - I left it at 5 as I assumed there would be minimal difference  between 0 and 5, and a small amount of noise can reduce visible banding.
 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 08, 2014, 01:07:33 pm
I posted here a sample for stacking images
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363213/#msg363213 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363213/#msg363213)


Testo published a nice paper for SuperResolution (super-sampling and deconvolution)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75387;image)
http://www.testosites.de/export/sites/default/thermalimaging/resources/downloads/Background_article_SuperResolution_EN.pdf (http://www.testosites.de/export/sites/default/thermalimaging/resources/downloads/Background_article_SuperResolution_EN.pdf)
edit 17.08.2015: dead link, use attachment

you can see this effect on the pins of the LQFP64 (pin-distance: 0.5mm)

single image (see left side of chip - pins are different blurred)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75389;image)

stacked image (all pins are sharp)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=75391;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 08, 2014, 05:41:30 pm
stacked image

Yet better result you should get by little shift every photo.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 08, 2014, 07:00:44 pm
 :) :)
I used a tripod and moved the cam a little while recording.

I record a RAW movie with Flir E40 with this commands (a batch script)
Code: [Select]
rset .image.services.rtrecord.filename \StorageCard\001.seq
rset .image.services.rtrecord.count 90
rset .image.services.rtrecord.frequency 30
rset .image.services.rtrecord.active true
delay 5
rset .image.services.rtrecord.store true


- with .image.services.rtrecord.active start the record (90 frames with 30 fps)
- the clip is stored in memory
- the command .image.services.rtrecord.store save the movie clip from memory to flash

I can't use a counter larger  as 160 frames -> the Flir E40 goes to out of memory

Code: [Select]
\>memory
           69% memory load.
     94,957,568 bytes total physical RAM.
     29,454,336 bytes available physical RAM.

after 160Frames = 24MB
\>memory
         98% memory load.
      94,957,568 bytes total physical RAM.
      2,727,936 bytes available physical RAM.




I haven't yet tried this with Flir E4

rls gives the same switches

Code: [Select]
.image.services.rtrecord: (6)
rw--rw------1- 0 root   root   <a> action                  "RECORD"
                 ["RECORD" "PLAYBACK"]
rw--rw------1- 0 root   root   <b> active                     false
rw--rw------1- 0 root   root   <i> count                         16
                 [2, 1000]
rw--rw-------- 1 root   root   <a> filename        "\Temp\default.seq"
rw--rw------1- 0 root   root   <d> frequency                     10
                 [0.01, 60]
rw--rw------1- 0 root   root   <b> store                      false

you can select a frequency of [0.01, 60]  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calle on January 08, 2014, 08:53:38 pm
Just got my Flir e4 today, hacked and ready to do some work! :)

Bought at Proffsmagasinet, Stockholm, Sweden
Modell    E4 1.1
S/N        639109**   ( leaving a few numbers out due to possible warrantyvoid.. )
Firmware 1.19.8

Thanks all you clever nerds whose work i prey upon ;)

edit: just found my cal-date
December 23 Estonia
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 08, 2014, 10:53:44 pm
I just rewrote Tomas123 flir.php for batch processing and without need of PHP. Its standalone EXE app. Only for Windows users.

Any one interested in testing and giving feedback before I will release public version ? I the other words, looking for tester :)
It is very first version I quickly put together today.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 08, 2014, 11:04:55 pm
Nice work  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: randy on January 09, 2014, 01:40:16 am
Guys I am not a teck guy. I just want to know what does "Make sure there is exactly one CRLF at the end of the file" mean. It is written in the description to hack e4 to e8. Thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 09, 2014, 01:42:51 am
Guys I am not a teck guy. I just want to know what does "Make sure there is exactly one CRLF at the end of the file" mean. It is written in the description to hack e4 to e8. Thanks in advance.
That's a linefeed-style (PC) - if unsure try my EzCRC01 (see footer)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 09, 2014, 01:43:54 am
I just rewrote Tomas123 flir.php for batch processing and without need of PHP. Its standalone EXE app. Only for Windows users.

Any one interested in testing and giving feedback before I will release public version ? I the other words, looking for tester :)
It is very first version I quickly put together today.

I vote for "post the code" - no need to be shy!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 09, 2014, 03:27:55 am
Guys I am not a teck guy. I just want to know what does "Make sure there is exactly one CRLF at the end of the file" mean. It is written in the description to hack e4 to e8. Thanks in advance.
CRLF == end of line on a regular PC editor (aka notepad). Press enter at end of line and you just added a CRLF.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 09, 2014, 07:09:55 am
WOW has there been tons of research on the configuration files!!!
I took a look at the addmenu beta 3/design_ui_z3.xml and have a couple of questions about it.
1) can the section  <ui_model type="EmissivityMaterialSettingsModel" name="emissivityMaterialModel">
    <ui_model_item type="SettingItem" label="ID_EMISS_CONCRETE" value="0.95"/>
    <ui_model_item type="SettingItem" label="ID_EMISS_WATER_FROST" value="0.98"/> ....
be resorted alphabetically buy moving the lines around?

2)can I change the power options timers from
  <!--Submenu: Power Options-->
  <ui_model type="AutoPowerOffSettingsModel" name="autoPowerOffSettingsModel">
    <ui_model_item type="SettingItem" ID="POWER_OFF" label="ID_SETUP_OFF" radio="true"/>
    <ui_model_item type="SettingItem" ID="POWER_5_MIN" label="ID_SETUP_5_MIN" radio="true"/>
    <ui_model_item type="SettingItem" ID="POWER_20_MIN" label="ID_SETUP_20_MIN" radio="true"/>
  </ui_model>
to other times, such as 15 min and 60 min by replacing the values/

3) Is the backlight brightness for low/medium/high predefined in hardware?  I would like to change the low and medium levels if possible.

One more... where is the Flir logo "color" setting?  I wouldn't mind trying a very faint image being displayed.

Don't know if it is dooable, but when powering down it might be fancy to pop up a message to remind the user to close the lens cover, or is the power button control the power section of the camera.  Was wondering because a short push of the power button puts the camera in sleep for a while, but a long push (over 5 seconds) turns the camera off.

Thanks!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 09, 2014, 09:01:00 am

Don't know if it is dooable, but when powering down it might be fancy to pop up a message to remind the user to close the lens cover, or is the power button control the power section of the camera.  Was wondering because a short push of the power button puts the camera in sleep for a while, but a long push (over 5 seconds) turns the camera off.

Thanks!!!!
I suspect the long button to power down may be a hardware, or very low-level software thing, just like on a PC. It would be good to have a way to tell if it had gone to sleep or power-off, but I suspect this would need to be done at a lower level than we're playing at.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 09, 2014, 10:17:48 am
...fancy to pop up a message to remind the user to ...
I suspect the long button to power down may be a hardware, or very low-level software thing, just like on a PC. It would be good to have a way to tell if it had gone to sleep or power-off, but I suspect this would need to be done at a lower level than we're playing at.

Well, assuming it's windows I'd guess there's a powermanagement-API that we could try to hook, add an extra daemon to the startup-bat to wait and intercept the API call, then display a message and shut down after a timeout... but I'd be the first one wanting to remove that annoyance :)

Again a low-tech variant is probably more efficient: place a nice, visible sticker inside the storage-case next to the Ex's resting space.
Label it "Attention: remove battery / deep-sleep active?" - and the beauty is: one can even customize the look :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 09, 2014, 10:54:55 am
....
1) can the section  <ui_model type="EmissivityMaterialSettingsModel" name="emissivityMaterialModel">
    <ui_model_item type="SettingItem" label="ID_EMISS_CONCRETE" value="0.95"/>
... be resorted alphabetically buy moving the lines around?

2)can I change the power options timers from
  <ui_model type="AutoPowerOffSettingsModel" name="autoPowerOffSettingsModel">
    <ui_model_item type="SettingItem" ID="POWER_OFF" label="ID_SETUP_OFF" radio="true"/>
...
to other times, such as 15 min and 60 min by replacing the values/

3) Is the backlight brightness for low/medium/high predefined in hardware?  I would like to change the low and medium levels if possible.

4) One more... where is the Flir logo "color" setting?  I wouldn't mind trying a very faint image being displayed.

@ 1): just resort them and see what happens - I think they were sorted by alphabet before I messed with them - anyway "never" used ;)

@ 2+3): I find the default values are just fine, but take a look at .power.setting (below) values below (telnet, command rls). You can replace the default settings by a new "model" that changes the wanted value directly - anything with ID_ is a pre-defined placeholder (defined in the language-files) and usually pre-associated with some value(in facet_ui_qml.dll), but the registry most times allows for entry of numeric values - best idea: first test by using rls/rset over telnet.

Define a SettingsValueModel, change the ID to something unique, label it, set min, max and step (better don't allow 0 as it would turn off the backlight), define resource="..power.settings.trueBacklight"
... then add that model-name to a menu entry where you like it - don't add it inside a RADIO list - you can take my humidity settings as example.

Strings:
AUTO_POWER_OFF:     ID_SETUP_OFF    ID_SETUP_5_MIN    ID_SETUP_20_MIN
DISPLAY_INTENSITY:   ID_SETUP_LOW    ID_SETUP_MEDIUM    ID_SETUP_HIGH
Low, Medium, High here are direct values inside the registry, which on change sets the true value (see below) - the situation is different with the auto-power-off settings.

.power.settings: (12)
 acOffTime                   1140 <- would be 19 minutes + 55 sec + 5 sec = 20 minutes
 acSysIdleTime                 55
 acUserIdleTime                 5
 battOffTime                 1140 <-- same here
 battSysIdleTime               55
 battUserIdleTime               5
 dumpActive                  true <-- write statistics, probably better get turned off in some .rsc.. but might have side-effects
 laserAllowed                true <-- useless :)
 laserEnable                false <-- useless :)
 screenSaverEnable          false <-- useless :)
 subjectiveBkl           "medium"  <-- allowed: ["low" "medium" "high"] .. sets the "trueBacklight" value
 trueBacklight                 40   <= 40% PWM, this is the value you'd want to fine-tune for better backlight control


@4) this has been discussed with another user already -  it's a ressource file manipulation (RCC) - I prefer not having the logo on, as it's no longer a "pure" FLIR ... not to forget that the logo takes away visible image pixels which were hard-earned ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 09, 2014, 06:46:11 pm

Don't know if it is dooable, but when powering down it might be fancy to pop up a message to remind the user to close the lens cover, or is the power button control the power section of the camera.  Was wondering because a short push of the power button puts the camera in sleep for a while, but a long push (over 5 seconds) turns the camera off.

Thanks!!!!
I suspect the long button to power down may be a hardware, or very low-level software thing, just like on a PC. It would be good to have a way to tell if it had gone to sleep or power-off, but I suspect this would need to be done at a lower level than we're playing at.
hhmmm... yes probably correct... for as little as I know about what the E4 is doing and what the files do, I thought I might ask rather than play around... YET...  I am learning though!  Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 09, 2014, 06:48:25 pm
...fancy to pop up a message to remind the user to ...
I suspect the long button to power down may be a hardware, or very low-level software thing, just like on a PC. It would be good to have a way to tell if it had gone to sleep or power-off, but I suspect this would need to be done at a lower level than we're playing at.

Well, assuming it's windows I'd guess there's a powermanagement-API that we could try to hook, add an extra daemon to the startup-bat to wait and intercept the API call, then display a message and shut down after a timeout... but I'd be the first one wanting to remove that annoyance :)

Again a low-tech variant is probably more efficient: place a nice, visible sticker inside the storage-case next to the Ex's resting space.
Label it "Attention: remove battery / deep-sleep active?" - and the beauty is: one can even customize the look :)

(got a good laugh out of that one!)... Yes, think that would be aLOT easier!!!
AND just as effective, if not MORE!  Plus the warning is "always on"   :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 09, 2014, 07:07:41 pm
....
1) can the section  <ui_model type="EmissivityMaterialSettingsModel" name="emissivityMaterialModel">
    <ui_model_item type="SettingItem" label="ID_EMISS_CONCRETE" value="0.95"/>
... be resorted alphabetically buy moving the lines around?

2)can I change the power options timers from
  <ui_model type="AutoPowerOffSettingsModel" name="autoPowerOffSettingsModel">
    <ui_model_item type="SettingItem" ID="POWER_OFF" label="ID_SETUP_OFF" radio="true"/>
...
to other times, such as 15 min and 60 min by replacing the values/

3) Is the backlight brightness for low/medium/high predefined in hardware?  I would like to change the low and medium levels if possible.

4) One more... where is the Flir logo "color" setting?  I wouldn't mind trying a very faint image being displayed.

@ 1): just resort them and see what happens - I think they were sorted by alphabet before I messed with them - anyway "never" used ;) I'll give it a try... just didn't know if, when an item is selected, this is where the preset emissivity comes from or if it was linked to another location in another file.. I just might use a few of them and comment out the ones that I probably will not use, but leave them in for future us.

@ 2+3): I find the default values are just fine, but take a look at .power.setting (below) values below (telnet, command rls). You can replace the default settings by a new "model" that changes the wanted value directly - anything with ID_ is a pre-defined placeholder (defined in the language-files) and usually pre-associated with some value(in facet_ui_qml.dll), but the registry most times allows for entry of numeric values - best idea: first test by using rls/rset over telnet.

Define a SettingsValueModel, change the ID to something unique, label it, set min, max and step (better don't allow 0 as it would turn off the backlight), define resource="..power.settings.trueBacklight"
... then add that model-name to a menu entry where you like it - don't add it inside a RADIO list - you can take my humidity settings as example.

Strings:
AUTO_POWER_OFF:     ID_SETUP_OFF    ID_SETUP_5_MIN    ID_SETUP_20_MIN
DISPLAY_INTENSITY:   ID_SETUP_LOW    ID_SETUP_MEDIUM    ID_SETUP_HIGH
Low, Medium, High here are direct values inside the registry, which on change sets the true value (see below) - the situation is different with the auto-power-off settings.

.power.settings: (12)
 acOffTime                   1140 <- would be 19 minutes + 55 sec + 5 sec = 20 minutes
 acSysIdleTime                 55
 acUserIdleTime                 5
 battOffTime                 1140 <-- same here
 battSysIdleTime               55
 battUserIdleTime               5
 dumpActive                  true <-- write statistics, probably better get turned off in some .rsc.. but might have side-effects
 laserAllowed                true <-- useless :)
 laserEnable                false <-- useless :)
 screenSaverEnable          false <-- useless :)
 subjectiveBkl           "medium"  <-- allowed: ["low" "medium" "high"] .. sets the "trueBacklight" value
 trueBacklight                 40   <= 40% PWM, this is the value you'd want to fine-tune for better backlight control
 I'm no stranger to Windows' registry and changed values/entries.  So are the .rcc files the actual registry?  (note to self.... DON"T mess with the E4's registry... not enough experience YET!).  I'll give your suggestions a try!  I have already messed around (using rset) with the mbox values for the hot/cold/center spot and made them permanent... still has a very small bug but I can live with it.

@4) this has been discussed with another user already -  it's a ressource file manipulation (RCC) - I prefer not having the logo on, as it's no longer a "pure" FLIR ... not to forget that the logo takes away visible image pixels which were hard-earned ;)  Well yes you are correct... why mess up a wonderful mod?!?!   :-+
Thanks for your help!  I am trying to learn this thing and what the different variables mean and do so I can maybe contribute a little.  I just need to become more comfortable changing things and since using rset, screwing up a little and using restartapp to restore things, my comfort level has come up alot!  Still though... I need to be careful, and I thank you, and everyone else, for your help!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 09, 2014, 07:16:57 pm
I just rewrote Tomas123 flir.php for batch processing and without need of PHP. Its standalone EXE app. Only for Windows users.

Any one interested in testing and giving feedback before I will release public version ? I the other words, looking for tester :)
It is very first version I quickly put together today.

Please free to post a link so we can test it, we are a lot of people here to give you feedback.

This is getting beyond a simple hack, a lot of people are contributing I wonder what I can contribute maybe an adapter for my new Manfrotto 237HD...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 09, 2014, 07:32:54 pm
Please free to post a link so we can test it, we are a lot of people here to give you feedback.

I will, but first I would like to fix the very first bugs, then I will release public version. I believe this will be within week.
I do not want to get newbies disappointed by some stupid error. For example we found user must have VCOMP100.DLL installed.
So I will prepare also some troubleshooting manual with links to microsoft download.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on January 09, 2014, 08:03:12 pm
Uncooled detector -- works at room temp
100m Range
4hr battery life
Pixel Size is smaller (like CMOS)
Lepton™ Camera Core - dimensionally same size CMOS camera @ 8.5mmx8.5mmx5.5mm
Sensor is 80x60 but uses tricks to make it "higher resolution"
 
All the technical details here (interview with President of Flir):
http://revision3.com/tekzillabites/flir-one-ces-2014 (http://revision3.com/tekzillabites/flir-one-ces-2014)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vasp on January 09, 2014, 08:32:03 pm
Hi newbie here
I just got my Flir E4 unpacked it and was a little afraid :( it looks like there is a smudge on the inner screen. see attached photo.
is it something that i should be worried about and get it replaced on warranty? :-\
Any thoughts?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 09, 2014, 08:49:32 pm
Uncooled detector -- works at room temp
100m Range
4hr battery life
Pixel Size is smaller (like CMOS)
Lepton™ Camera Core - dimensionally same size CMOS camera @ 8.5mmx8.5mmx5.5mm
Sensor is 80x60 but uses tricks to make it "higher resolution"
 
All the technical details here (interview with President of Flir):
http://revision3.com/tekzillabites/flir-one-ces-2014 (http://revision3.com/tekzillabites/flir-one-ces-2014)
Can we please keep all the Flir ONE/:Lepton stuff to It's own thread (https://www.eevblog.com/forum/testgear/flir-announces-personal-thermal-imager-for-iphone/)
(Mods - can you please move the posts from here to the Flir One thread)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 09, 2014, 09:20:07 pm
@Vasp

New E4? Appears used to my eyes. Mine had none of the dirt/dust around the screen that yours displays and there should not be smudges on the inner screen. Such could occur if someone has been careless whilst dismantling the E4. It does not have security seals so may be easily dismantled by a buyer and then returned as unwanted. My unit was spotless.  I personally would ask for a replacement unit...NOT A REPAIR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vasp on January 09, 2014, 09:37:32 pm
Thanks Aurora.
I was afraid of it, I will contact the seller and try to send it back.
Typically, I bought it online from Germany and i live in Sweden |O
I was so looking forward to modify it :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 09, 2014, 09:52:39 pm
I'm no stranger to Windows' registry and changed values/entries.  So are the .rcc files the actual registry?  (note to self.... DON"T mess with the E4's registry... not enough experience YET!).  I'll give your suggestions a try!  I have already messed around (using rset) with the mbox values for the hot/cold/center spot and made them permanent... still has a very small bug but I can live with it.

.RCC file is a ressource file in binary, compressed format (like a very special ZIP) - not to be confused with .rsc files, which are initial values (like some .INI file) :)
I wrote and published a .RCC unpacker (see footer for link) as the QT kit does not come with a binary for this task - usually a .rcc is just loaded by a QT program and then accessed over specialized API. The unpacker was written on Ubuntu Linux as I had QT available there. As written some days ago the unpacked contents are also online. The re-package program is available too, the commands to run it would even be easily ported to windows.

If one wants to mess with the icons or QML files, then RCC (un)packing is not bypassable :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 09, 2014, 11:07:24 pm
Thanks Aurora.
I was afraid of it, I will contact the seller and try to send it back.
Typically, I bought it online from Germany and i live in Sweden |O
I was so looking forward to modify it :(
Check to see if there are any images stored on it.
I think you can also read out the number of shutter closures in service mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 10, 2014, 12:33:27 am
I'm no stranger to Windows' registry and changed values/entries.  So are the .rcc files the actual registry?  (note to self.... DON"T mess with the E4's registry... not enough experience YET!).  I'll give your suggestions a try!  I have already messed around (using rset) with the mbox values for the hot/cold/center spot and made them permanent... still has a very small bug but I can live with it.

.RCC file is a ressource file in binary, compressed format (like a very special ZIP) - not to be confused with .rsc files, which are initial values (like some .INI file) :)
I wrote and published a .RCC unpacker (see footer for link) as the QT kit does not come with a binary for this task - usually a .rcc is just loaded by a QT program and then accessed over specialized API. The unpacker was written on Ubuntu Linux as I had QT available there. As written some days ago the unpacked contents are also online. The re-package program is available too, the commands to run it would even be easily ported to windows.

If one wants to mess with the icons or QML files, then RCC (un)packing is not bypassable :)
Thanks for the info!  I did see your un/packer in a thread and did download them, but I haven't tried them YET....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 10, 2014, 09:16:35 am
I have repack the ADDMENU_Beta3 with the FLIR logo visible (thanks to Taucher for the instructions).
The file is not yet tested (I can try on my E4 tomorrow)
If someone try it let me know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: psycho0815 on January 10, 2014, 04:57:32 pm
Just got my E4 today. Already hacked it, didn't have courage todo the Menuhack yet, but will propably do that eventually.
BTW Firmware was still 1.19.8. Not sure about the caldate, where can i find that?

EDIT: Never mind. Turns out there's a cal certificate buried in all the paper stuff.
Cal-date is December 4, 2013
Cal-Site is Estonia
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 10, 2014, 05:20:23 pm
Just got my E4 today. Already hacked it, didn't have courage todo the Menuhack yet, but will propably do that eventually.
BTW Firmware was still 1.19.8. Not sure about the caldate, where can i find that?

EDIT: Never mind. Turns out there's a cal certificate buried in all the paper stuff.
Cal-date is December 4, 2013
Cal-Site is Estonia
I think there is also a file in the root of the normal USB user file folder which includes the cal date.
probably also available in service mode
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 07:07:18 pm
Hello Guys,
Just followed the instructions to update my FLIR E4 and it worked great thanks to all..  But I have a question!!


how do you switch to the USB RNDIS Mode?

Thanks In advance to all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 07:10:55 pm
I think I answered my own Question, My Menu is not showing USB mode... 

firmware 1.19.8

would test be the problem ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: psycho0815 on January 10, 2014, 07:28:17 pm
You can switch USB to RNDIS via the secret Menu.
Goto Options->Device Options->Information and hold down the right Button for 10 seconds. From there you should be able to change USB Mode. At least it works on my cam and that's the same firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 07:29:30 pm
Thank you...  great!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 07:39:24 pm
I don't have device options !! I have Device Settings!!

please if you can explain better !


thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 07:44:48 pm
Please Disregard!!!  I got it to switch Modes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: psycho0815 on January 10, 2014, 08:06:22 pm
I was translating the menu items on-the-fly from german. should've changed the language setting. Sorry 'bout that
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 10, 2014, 08:10:07 pm
Today something strange happened to me. I leaved camera switched off (I mean in standby) for couple of days. By time it turned itself to hard off. When I powered on it today, it started booting and then i got message about appcore critical error. After battery remove and restart everything is just fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 10, 2014, 08:47:17 pm
That'll be the WinCE !.....they should have used Linux  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 10, 2014, 11:28:30 pm
I have repack the ADDMENU_Beta3 with the FLIR logo visible (thanks to Taucher for the instructions).
The file is not yet tested (I can try on my E4 tomorrow)
If someone try it let me know.

Awesome.  Works like a charm!  Thanks, Bonocr!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gabriel.klein on January 10, 2014, 11:32:52 pm
That'll be the WinCE !.....they should have used Linux  ;D

The power of marketing people :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 10, 2014, 11:50:50 pm
Hello Guys,

I have been spending hours in trying to use FLIR tools version 2.0 for Mac and I cant seem to make it work or locate the Camera!!
does any one have this same problem?

It seems to work with my PC software just fine.

I am now using the  version 10.9.1 with is Apple Newest version of there operating system ... hope maybe some has the answer

thanks to all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 11, 2014, 12:41:29 am
Using Taucher's BETA2a with Zoom enabled, when Color modes "Detect condensation" or "Detect insulation deficiencies" are selected, I am unable to adjust the threshold temperature.  The temperature displayed is in dark grey.  The up/down/left/right buttons have no effect.  The "Detect condensation" temperature is "48.7" (F) and the "Detect insulation deficiencies" temperature is "64.4" (F).  Are we supposed to be able to change these?
However, I CAN change the "Interval" min/max temperatures using up/down/left/right buttons.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 11, 2014, 12:46:26 am
Using Taucher's BETA2a with Zoom enabled, when Color modes "Detect condensation" or "Detect insulation deficiencies" are selected, I am unable to adjust the threshold temperature.  The temperature displayed is in dark grey.  The up/down/left/right buttons have no effect.  The "Detect condensation" temperature is "48.7" (F) and the "Detect insulation deficiencies" temperature is "64.4" (F).  Are we supposed to be able to change these?
However, I CAN change the "Interval" min/max temperatures using up/down/left/right buttons.

Check Beta3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 11, 2014, 01:44:05 am
Hello Guys,

I have been spending hours in trying to use FLIR tools version 2.0 for Mac and I cant seem to make it work or locate the Camera!!
does any one have this same problem?

It seems to work with my PC software just fine.

I am now using the  version 10.9.1 with is Apple Newest version of there operating system ... hope maybe some has the answer

thanks to all

At least me an another folk, please read previous posts.
(in a few words, it seems to be mac drivers)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 11, 2014, 01:57:54 am
Using Taucher's BETA2a with Zoom enabled, when Color modes "Detect condensation" or "Detect insulation deficiencies" are selected, I am unable to adjust the threshold temperature.  The temperature displayed is in dark grey.  The up/down/left/right buttons have no effect.  The "Detect condensation" temperature is "48.7" (F) and the "Detect insulation deficiencies" temperature is "64.4" (F).  Are we supposed to be able to change these?
However, I CAN change the "Interval" min/max temperatures using up/down/left/right buttons.

Check Beta3
Hi Taucher, I just loaded BETA3.  Thank you for this update.
I now see the new settings menus for "Ambient relative humidity", "Condensation: rel. amb. humidity" and "Condensation: humidity marking level".
Changing these settings does change the temperature threshold displayed in the "Detect condensation" Color mode.
How the settings work is not clear, yet.  Not sure what the values mean as decimal numbers.  But at least it is something that can change the threshold.
The up/down/left/right buttons still have no effect, however.
I suppose the icons for these Color modes are incorrect by displaying the up/down triangles to the right of the icons since up/down has no effect on them.
After all, "Blue below" and "Red above" do not have the up/down triangles next to their icons yet up/down adjusts their displayed temperature thresholds as expected.

Edit:  It appears the new settings do not have any effect on the "Detect insulation deficiencies" Color mode.  Updated above text to reflect that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 11, 2014, 02:45:19 am
Has anybody figured out if the E4 sensor is capable of 30 FPS (or at least north of 9 FPS), and is just being firmware limited?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 11, 2014, 03:02:37 am
From what I gather, the sensor has a raw 60 FPS data stream, but getting meaningful data from it would require a lot of filtering.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 11, 2014, 03:47:37 am
Hi Taucher, I just loaded BETA3.  Thank you for this update.
I now see the new settings menus for "Ambient relative humidity", "Condensation: rel. amb. humidity" and "Condensation: humidity marking level".
Changing these settings does change the temperature threshold displayed in the "Detect condensation" Color mode.
How the settings work is not clear, yet.  Not sure what the values mean as decimal numbers.  But at least it is something that can change the threshold.
The up/down/left/right buttons still have no effect, however.
I suppose the icons for these Color modes are incorrect by displaying the up/down triangles to the right of the icons since up/down has no effect on them.
After all, "Blue below" and "Red above" do not have the up/down triangles next to their icons yet up/down adjusts their displayed temperature thresholds as expected.
Edit:  It appears the new settings do not have any effect on the "Detect insulation deficiencies" Color mode.  Updated above text to reflect that.
Your'e welcome.
@values: example: 35% are the same as 0.35 ... I suggest reading up on "condensation point", "relative & abolute humidity" and "air moisture saturation tables"
@icons: I can just guess that your e8.config did not enable all features or you appended something instead of overwriting when adding the menu hack.
Also don't forget to restartapp/cold-boot.

@cursors: I can't follow you what exactly you're meaning - insulation and condensation have fixed values that are computed by ambient setup (temp, hum, condensation-%) - no cursor action to be expected there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 11, 2014, 05:29:58 am
Just reflecting on all that has been done by everyone here (Mike, Taucher, Aurora, and a few others)....
This camera is TOO GOOD TO BE TRUE with all the enhancements!!!!
Thank you to ALL the hard effort and work that has been done, and the gracious sharing of the work!
This thing has SO many features now, to me  it is priceless!!!
I would really like to contribute also, but I don't know the camera very well YET, but I am getting there and experimenting using telnet (telnet is your friend!)
For instance, I tried the "auto brightness" for the display and RATS it didn't work!  The item was there with a radio button, but nothing happened.  Probably another entry is needed in an .rsc file, but I need to know how to work with them first... I'll get there!
Thank you guys for your help!
Bill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bonocr on January 11, 2014, 07:04:38 am
I have repack the ADDMENU_Beta3 with the FLIR logo visible (thanks to Taucher for the instructions).
The file is not yet tested (I can try on my E4 tomorrow)
If someone try it let me know.

Awesome.  Works like a charm!  Thanks, Bonocr!

You are welcome!
A friend of mine have my E4, I hope to try my file on Monday...

BTW: I looked my old pics with FLIR logo and discover that the logo disappears if I generate a report with Flir tools.
Title: Un-Bricking an Ex + Version differences HW 1.0 <-> HW 1.1
Post by: Taucher on January 11, 2014, 09:12:15 am

I've had the chance to support a fellow forum user who had to un-brick his cam as he had by accident deleted all (deleteable) files from the E4 (good for him he had made a backup as first step).

The symptoms were like this:
- camera would show a logo on boot, that's all.
- RNDIS/FTP/TELNET were still available, but FTP login did not work - telnet was possible

The solution to the bricked state was fetching the firmware upgrade pack (even beeing a small downgrade in reality)
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip)
and flashing the .fif file with FlirNetInstall - confirming and ignoring several error messages.

Then after a reboot and putting it back into RNDIS mode again the backup was used to overwrite the older files, resulting
in a pretty much perfect reconstruction and a fully working camera where the firmware showed the newer version - disregarding
the fact that appcore.exe was not overwritten via FTP.

The perfect way would have been to create a .fif file from the backup or to have a .fif backup in the first place (FlirNetInstall).

I also did some version comparisons and found that his camera (with 1.8.19 firmware) has differences in the following files:

\FlashBFS\system\appcore.exe
\FlashBFS\system\fpga.bin
\FlashBFS\system\fvd.dll
\FlashBFS\system\prodapp.exe
\FlashBFS\system\web\service\imgcorr\pixkill.asp

\FlashFH\MaxResolution.txt  <- file unknown to me, containing "80" as content
\FlashFH\default_a\  -> \FlashFH\default_b\

.caps.config.revision text "1.0" <- mine
.caps.config.revision text "1.1" <- his

Prodspec.rsc contains some nice findings, too:
Quote
# For Ex camera and SBA0901   detector,  Astra
#special max resolution 80x60
.prodSpec.general.version text "0.4X" (was 0.42 for my 1.0)

.prodSpec.map.detectorDefects.blob.blobLimitBig int32 3000 (was 1150 for my 1.0)
.prodSpec.map.detectorDefects.blob.blobLimitSmall int32 3450 (was 1450 for my 1.0)
.prodSpec.map.detectorDefects.blob.maxNumberBlobs int32 100 (was 20 for my 1.0)

And a bunch of new entries:
.prodSpec.map.detectorDefects.blob.ratioTh double 0.37
#Above is replaced by this
.prodSpec.map.windowDefects entry
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le entry
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.Th1 int32 700
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.Th2 int32 400
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.radiusThreshold double 3.5
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.minRadius double 2.3
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.blobLimitBig int32 2450
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.blobLimitSmall int32 3450
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.maxNumberBlobs int32 100
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.ratioTh double 0.37
#pick up map to check from calib .calib.detector.staticGainMap.
#.prodSpec.map.detectorDefects.filename text "ds250C_we_ap_fi_le_static.gan"
# Unverified "dummy" values of Ckj added 2013-09-05
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C00  double -3.0813
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C01  double 22655.0
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C02  double -11879.0
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C10  double -0.0039
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C11  double -74.1062
.prodSpec.map.windowDefects.ds250C_we_ap_fi_le.C12  double 40.8838

....

.prodSpec.imgQuality.perf.ccase.ds250C_we_ap_fi_le.BigBB60_netd.maxSpatNoise double 30.0 (was 14.0 for mine)
.prodSpec.SE.ExFOL7.0.mtfMin double 0.23 (was 0.25 for mine)


\Windows\default.mky <-- seems to be some generated key
\Windows\system.mky <-- seems to be some generated key
\Windows\FTPd.tmp <-- differs, seems to be a FTP log-file

A few other files inside FlashBFS also differed (but had the same size) - that was obviously due to some compile time timestamping - usually 3 x 4 byte groups differed inside the file

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 11, 2014, 10:43:01 am

For instance, I tried the "auto brightness" for the display and RATS it didn't work!  The item was there with a radio button, but nothing happened.
I would imagine this needs an ambient light sensor to do anything useful.
Title: Re: Un-Bricking an Ex + Version differences HW 1.0 <-> HW 1.1
Post by: mikeselectricstuff on January 11, 2014, 10:47:19 am

I've had the chance to support a fellow forum user who had to un-brick his cam as he had by accident deleted all (deleteable) files from the E4 (good for him he had made a backup as first step).

The symptoms were like this:
- camera would show a logo on boot, that's all.
- RNDIS/FTP/TELNET were still available, but FTP login did not work - telnet was possible

Presumably this was this just the files on FlashBFS? I'd imagine FlashFS could also be restored ONLY IF you have a backup, as  these are device specific with calibration and bad-pixel maps etc.
Title: Re: Un-Bricking an Ex + Version differences HW 1.0 <-> HW 1.1
Post by: Taucher on January 11, 2014, 11:23:22 am
Presumably this was this just the files on FlashBFS? I'd imagine FlashFS could also be restored ONLY IF you have a backup, as  these are device specific with calibration and bad-pixel maps etc.
Actually I did not completely inspect what was deleted in every folder (was a skype screensharing, viewonly session), but FlashBFS was left only with a couple of not deleteable files - like appcore.exe. I've verified that it got "emptied" - the user was moving all files instead of copying them... and the backup folder contained anything readable including FlashFS and Windows.
I can hence safely assume that any removeable file got removed - probably after downgrade the camera was working with some setup defaults - uncalibrated - while restoring the cal-files restored the original performance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 11, 2014, 11:37:55 am

For instance, I tried the "auto brightness" for the display and RATS it didn't work!  The item was there with a radio button, but nothing happened.
I would imagine this needs an ambient light sensor to do anything useful.
Exx series setup contains this:
 <ui_model_item type="SettingItem" ID="AUTO" label="ID_SETUP_AUTO" radio="true" caps="power.settings.autoBacklight" caps_ge="1"/>
This caps-entry does not exist in the Ex-Series.

But of cause one could utilize the inbuilt camera to compute ambient brightness ...

.caps.config.image.framegrab.visual: (1)
enabled                     true

.caps.config.image.sensor: (1)
enabled                    false

...I wonder what's ment by "sensor" (it seems it can't be enabled - so it's not some software "sensor")

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rick Hunter on January 11, 2014, 04:28:51 pm
Nice hack but now I am trying to delete the flir logo in the ir image. I was looking around in the system file and I think it is hide in the Printer.swap file in the root of the system file. But I cant delete it or rename it. So anyone who can figure out how to delete the flir logo?

There is no copyright issues with these ir images I am taking. FLIR made the camera not the images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 11, 2014, 04:38:42 pm
Have you installed the Menu enhancement by Taucher yet ? That upgrade removes the logo and adds lots of useful features in the menu, like e-zoom and manual range capability. I recommend it if you want something more capable to use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 11, 2014, 09:11:34 pm

For instance, I tried the "auto brightness" for the display and RATS it didn't work!  The item was there with a radio button, but nothing happened.
I would imagine this needs an ambient light sensor to do anything useful.
That would make sense, but there was a comment in the file that it MIGHT use the visible camera for light level sensing..... seemed like that could have worked but of course it didn't.... RATS!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on January 12, 2014, 01:51:15 am
I've lost track, I'd like to apply Taucher's beta3, but want to do so in the proper manner, I'm looking for the detailed step by step info on properly doing a backup first and then applying BETA3.  I looked around, but don't see this anywhere...does it exist?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 12, 2014, 05:00:14 am
@inline, I found this back in 2013, it´s in this forum in the past pages...

*Warning* Don't mess about with the files on your camera if you don't understand what you are doing.

To install Taucher's menu hack:

1. Install the RNDIS drivers on your PC. (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe))
2. Turn on RNDIS on the camera via the hidden menu (Settings>Device Settings>Camera Information - Press <right> for 10 seconds, select "USB Mode" then select "RNDIS")
3. Connect camera to PC via USB.
4. FTP to camera (eg. with FileZilla): Normal logon type, Host "192.168.0.2", user name "flir", password "3vlig"
5. Make a back-up of the files on your camera (copy files from camera to your computer into a back-up directory of your choice)
6. Copy the ADDMENU-Beta files over the files in the camera (eg. unzip the files to your computer then copy the folder "FlashBFS" from your computer over the folder "FlashBFS" in the camera - overwrite files)
7. Power-down the camera, remove battery and USB cable.
8. Re-insert battery and turn on.
9. Enjoy!  :D
 
If you don't completely understand the above instructions then it would be best to not attempt the menu hack. Better to have basic functions.

FOR BETA 3 ZOOM FUNCTION:

1. If necessary edit your flashfs\system\appcore.d\config.d\e8.cfg like this:

...
.caps.config.image.zoom.enabled bool true
...

2. In case you modify the e8.cfg in step 1 then re-generate its CRC (I used the EzCRC01.exe in the ADDMENU-BETA3.zip).
3. Power-down the camera, remove battery and USB cable.
4. Re-insert battery and turn on.
5. Enjoy!, when you press menu you should see a ZOOM icon on the right  :D

@Taucher: do you think it make sense to add this .txt in attachment to yours ADDMENU-BETAx.zip? Thanks for all your effort, You are a Chuck Norris of hidden menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 12, 2014, 12:29:36 pm
@Taucher: do you think it make sense to add this .txt in attachment to yours ADDMENU-BETAx.zip? Thanks for all your effort, You are a Chuck Norris of hidden menu.

I won't re-package the files, but I did put a link in the post:
Quote
If you need additional instructions how to install the patch, then take a look here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 12, 2014, 12:38:00 pm
For BETA 3 ZOOM FUNCTION:
1. edit your e8.cfg
.caps.config.image.zoom.enabled bool true

I have updated the template cfg file in my hack zip to enable this
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 12, 2014, 10:58:57 pm
Interesting Flir patent on calibrating IR sensors :
https://www.google.co.uk/patents/US8378290 (https://www.google.co.uk/patents/US8378290)
(https://patentimages.storage.googleapis.com/US8378290B1/US08378290-20130219-D00001.png)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plesa on January 13, 2014, 08:02:03 am
Just a general question here to anybody capable of answering

If you had access to a 320x240 TiC that did video output at 30fps, what would you want to see *most*? It can be anything - literally anything.
Something which is not on Youtube channel below, like defence applications.
https://www.youtube.com/playlist?list=PLC66C90CB9B52B2C9 (https://www.youtube.com/playlist?list=PLC66C90CB9B52B2C9)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on January 13, 2014, 11:43:47 am
Just a general question here to anybody capable of answering

If you had access to a 320x240 TiC that did video output at 30fps, what would you want to see *most*? It can be anything - literally anything.

Biological phenomenon, real time viewing of surface blood vessels, exhaling/inhaling, and so on. nature observations like water flows. induced thermal events for observing material characteristics. probably 1000 other things where 9hz just wouldn't do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myself on January 14, 2014, 03:14:48 am
Has anybody figured out if the E4 sensor is capable of 30 FPS (or at least north of 9 FPS), and is just being firmware limited?

I hope if anybody has figured it out, they'll keep it nice and quiet! Publication of such a hack would surely bring the federal heat against FLIR who would then have no choice but to lock the next firmware down tight, and likely put much tighter protection on future models, too. And this party in many respects is just getting started. (I have two more friends who've bought E4's in the last week because of it.)

Without any inside knowledge, the only things we know for certain are that they are not so concerned about it that they are in any hurry to change the current situation (from which we can probably reasonably infer that a framerate hack is probably not viable) , and that they have sold a number of additional units that they wouldn't otherwise have sold as a direct result of  hackability.

Speaking of buying cameras, given the CES announcement, this hack serves them doubly: First, it gets a bunch of people outside their traditional market talking about the tech, enjoying their products, and popularizing their brand. Second, it clears out a bunch of low-end stock that might become difficult to sell once the iphone thingus is on the market. The cellphone gizmo isn't gonna eat much into Exx sales, but it'll certainly take a bite of E4's lunch. Who knows how many E4 housings, slightly-bad FPAs, etc, they have sitting around that they're now able to sell to us?

.power.settings: (12)
 laserAllowed                true <-- useless :)
 laserEnable                false <-- useless :)


My dad's older FLIR has a laser-pointer, which personally I find to be a gimmick, but his clients love it. ("High-tech" is apparently a very subjective thing, needing only be "higher tech than the observer encounters on a frequent basis".) Might its presence in these files perhaps suggest a function for some of those unpopulated pads on the board?

Some Ex0 model would be nice to check what's beeing used as WLAN / BT ;)
I wouldn't be surpised if the double-digit series cameras would be built around the same core design - display and sensor specs look identical to me. :-/O

Wouldn't surprise me either. With a bit of luck they use it as bluetooth uart with bspserial. If so, then even if you couldn't get the exact same module you would probably still be able to rig up something decent. That said, it would be really nice if someone could check what bluetooth module is being used in the higher end models.

Speaking of unpopulated pads! Yeah, this is my next big area of interest. They'd probably not bother with different bluetooth chipsets (and thus drivers and debugging effort) between models, at least not without a good reason (and part obsolescence would be one, but let's hope not!). So if we can get a peek at the chips in one of the BT-equipped units, it seems reasonable that grafting a similar chip into an E4++ might yield paydirt.

Anyone? Anyone? Bueller?

I *hate hate hate* having to plug in my USB cable to get images off this thing. Bluetooth would be sweet. An SD slot (into which I could drop an eyefi/pqi/transcend wireless SD card) would be even sweeter, because then I control the card's behavior. (the latter cards run linux, btw.)

Sooo. Any hints that this board shares anything with SD-slot-equipped models? The USB cable opening at the top is suspiciously big; I wouldn't be surprised if there was a daughterboard. Are there any hints of SD capability in the configs, etc? I haven't gone digging, this is all just wishful thinking on my part.

Hey, anyone tried a USB OTG cable on this sucker yet? I don't have one handy but might poke at that tomorrow.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: menthurae on January 14, 2014, 03:31:41 am
Hi everyone, I have monitored this thread for several months and finally pulled the trigger and bought a FLIR E4 locally. Price was around £800 GBP / $1310 USD equivalent in my local currency (Australian Dollars).

Here's hoping that my model is still updatable. I will post firmware info, etc once I receive it. Looking forward to using it for some fun and also an analysis tool at work!  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 14, 2014, 03:36:43 am
If the poll from this thread can be believed, FLIR have sold about 140 cameras that they otherwise wouldn't have because of the hack.  And they have only missed out on selling 9 of the E5/E6/E8 models.  Pretty good for their bottom line, I'd think.
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: rhost on January 14, 2014, 04:19:33 am
If the poll from this thread can be believed, FLIR have sold about 140 cameras that they otherwise wouldn't have because of the hack.  And they have only missed out on selling 9 of the E5/E6/E8 models.  Pretty good for their bottom line, I'd think.

Make that 141, mine should be here Thursday.

Sent from my SGH-I777 using Tapatalk

Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: mborotnguy on January 14, 2014, 04:35:24 am
If the poll from this thread can be believed, FLIR have sold about 140 cameras that they otherwise wouldn't have because of the hack.  And they have only missed out on selling 9 of the E5/E6/E8 models.  Pretty good for their bottom line, I'd think.

Make that 141, mine should be here Thursday.

Sent from my SGH-I777 using Tapatalk

142.  On backorder.  Crossing my fingers that there hasn't been a hardware/firmware change to prevent the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: markbener on January 14, 2014, 05:08:27 am
Hello

Is there anyway to change the device model?
When i view my images the meta description notes E4 with resolution 320/240
I would like it to read E8

??

Thanks in advance
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 14, 2014, 07:28:08 am
If the poll from this thread can be believed, FLIR have sold about 140 cameras that they otherwise wouldn't have because of the hack.  And they have only missed out on selling 9 of the E5/E6/E8 models.  Pretty good for their bottom line, I'd think.

Make that 141, mine should be here Thursday.

Sent from my SGH-I777 using Tapatalk

142.  On backorder.  Crossing my fingers that there hasn't been a hardware/firmware change to prevent the hack.

I think you can multiply at least 10 times. There are many ppl, who will not register to click the survey. Just use the hack and go.
In last 10 days there are 58 downloads of hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 14, 2014, 09:33:39 am
Is there anyway to change the device model?
When i view my images the meta description notes E4 with resolution 320/240
I would like it to read E8
There has been a report of a successful renaming (eeprom).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on January 14, 2014, 10:04:46 am
Has anybody figured out if the E4 sensor is capable of 30 FPS (or at least north of 9 FPS), and is just being firmware limited?

I hope if anybody has figured it out, they'll keep it nice and quiet! Publication of such a hack would surely bring the federal heat against FLIR who would then have no choice but to lock the next firmware down tight, and likely put much tighter protection on future models, too. And this party in many respects is just getting started. (I have two more friends who've bought E4's in the last week because of it.)
Did you even look at Mike's first post in this thread or watch near the end of the video? ;)
Title: AddMenu Beta3 FTP - problem
Post by: calle on January 14, 2014, 02:10:50 pm
Been playing around with the camera a few days and I feel like it´s time to bring some more bling bling on...
Followed this tut: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426)
to install Tauchers AddMenu but it won´t respond to FTP? I have installed RNDIS-driver and changed USB-mode to RNDIS but keep getting time out.
What have I missed? anyone with a clue?
Title: Re: AddMenu Beta3 FTP - problem
Post by: mikeselectricstuff on January 14, 2014, 03:57:14 pm
Been playing around with the camera a few days and I feel like it´s time to bring some more bling bling on...
Followed this tut: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426)
to install Tauchers AddMenu but it won´t respond to FTP? I have installed RNDIS-driver and changed USB-mode to RNDIS but keep getting time out.
What have I missed? anyone with a clue?
It can be fussy about which FTP programs it will talk to - filezilla does work
Also check you have the right IP address - in some cases some people have reported it being different to the default (e.g. try TELNETing to it)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 14, 2014, 04:05:54 pm
I was told last week that Tequipment.net would be getting a fresh batch of FLIR E4 Cameras on Jan 17th.. This information came as I was going to order one from them last week , Instead I found one at a Local Grainger Supply local to my area.  https://www.eevblog.com/forum/Smileys/default/icon_smile_thumbsup.gif (https://www.eevblog.com/forum/Smileys/default/icon_smile_thumbsup.gif)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on January 14, 2014, 04:07:54 pm
I ordered mine from TEquipment on Jan. 2 and received it yesterday. It came with a 1.19.8 firmware and calibration date of Dec. 13, 2013, I guess I caught it on time. ;)

Just wanted to thank everyone who had done work on bringing this to the general audience. I always wanted a hi-res TIC but could never afford one because of prohibitive costs.

Thank you for opening many new venues of research for us amateurs and armchair scientists alike.

EDIT: 100th post, yey!
Title: Re: AddMenu Beta3 FTP - problem
Post by: calle on January 14, 2014, 04:14:15 pm
Been playing around with the camera a few days and I feel like it´s time to bring some more bling bling on...
Followed this tut: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426)
to install Tauchers AddMenu but it won´t respond to FTP? I have installed RNDIS-driver and changed USB-mode to RNDIS but keep getting time out.
What have I missed? anyone with a clue?
It can be fussy about which FTP programs it will talk to - filezilla does work
Also check you have the right IP address - in some cases some people have reported it being different to the default (e.g. try TELNETing to it)

I started with total commander which I normally use, but downloaded Filezilla as well just to be sure. Telnet is something i´ve never tried... is there a simple check i can do here ( please specifie command ) or maybe i just should leave it be..
Title: Re: AddMenu Beta3 FTP - problem
Post by: Taucher on January 14, 2014, 04:28:24 pm
I started with total commander which I normally use, but downloaded Filezilla as well just to be sure. Telnet is something i´ve never tried... is there a simple check i can do here ( please specifie command ) or maybe i just should leave it be..

First check the basics: watch your system tray for the popup that tells what IP your camera has (if no such popup then check the latest Flir player download).
If you're still unsure about the IP then look at the network information of the Flir's interface or issue an "ipconfig /all" in a command prompt - the camera's IP is the standard gateway of the infrared network.

Ensure that you have turned on the camera as the cold boot ftp won't accept the flir login.

Regarding telnet and command prompts etc ... there's plenty of ressources out there - use a search engine or read this thread - I think we already described it a couple times :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 14, 2014, 07:10:19 pm
 Hi,
  I ordered a Flir E4 last week, and found out about this Hack over the weekend. It arrived today, the Calibration date is Dec 23rd 2013,  with firmware version 1.19.8. 
 I'm very keen on performing the hack. But am a bit unsure about some of the instructions. Could someone help me, either on this thread on via email.
  What would be a good PC text editor to use? I've downloaded GetDiz which does open the file, and I've put in my serial number, and saved it.
 The part i'm not sure about is,

   At PC command prompt, run
 
   CRC01  E8.cfg

 Could someone explain this to me please?

  Thanks
    Andy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 14, 2014, 07:21:34 pm
Has anyone succeeded in making the temp scale on right hand side smaller/larger/invisible? There are plenty of applications where I don't need it and it eats real estate
Title: Re: AddMenu Beta3 FTP - problem
Post by: calle on January 14, 2014, 07:42:22 pm
Quote
First check the basics: watch your system tray for the popup that tells what IP your camera has (if no such popup then check the latest Flir player download).
If you're still unsure about the IP then look at the network information of the Flir's interface or issue an "ipconfig /all" in a command prompt - the camera's IP is the standard gateway of the infrared network.

Ensure that you have turned on the camera as the cold boot ftp won't accept the flir login.

Regarding telnet and command prompts etc ... there's plenty of ressources out there - use a search engine or read this thread - I think we already described it a couple times :)
Surely, sorry for asking basic things I could´ve found myself, just got a little bit frustrated...

Flir Player version 2.3.3, I have tried in UVC and RNDIS-mode but no pop-up whatsoever. Through ipconfig/all I got the information that my standardgateway/camera has an ip of 0.0.0.0  ??

Edit: Finally got the gateway-ip to read 192.168.0.2 but still no reply on ftp or telnet. Maybe my camera are at fault or maybe me.
Is there something wrong with network-settings?
(http://s25.postimg.org/ijnit80xr/Flir_Network001.png) (http://postimage.org/)
how to take a screenshot on a pc (http://postimage.org/app.php)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 14, 2014, 07:43:02 pm
Has anyone succeeded in making the temp scale on right hand side smaller/larger/invisible? There are plenty of applications where I don't need it and it eats real estate

Easy with post process scripts from Tomas123 or me, see: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

I am also preparing Windows friendly version, see here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg364059/#msg364059 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg364059/#msg364059)

You can do many things you cant in Flir. For example picture in picture with 640x480 real image and full IR image inside. Disable color scale, create report, shift temperature...
I will put place of temp scale option - top / bottom, left, right, inside, outside - good idea... I want also put numbers over the scale, like on classic thermometer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 14, 2014, 08:07:20 pm
@freak_ge

Many thanks for the information on EEPROM editing. No Checksums to worry about then  :)

Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: psycho0815 on January 14, 2014, 08:23:10 pm
Hi,
  I ordered a Flir E4 last week, and found out about this Hack over the weekend. It arrived today, the Calibration date is Dec 23rd 2013,  with firmware version 1.19.8. 
 I'm very keen on performing the hack. But am a bit unsure about some of the instructions. Could someone help me, either on this thread on via email.
  What would be a good PC text editor to use? I've downloaded GetDiz which does open the file, and I've put in my serial number, and saved it.
 The part i'm not sure about is,

   At PC command prompt, run
 
   CRC01  E8.cfg

 Could someone explain this to me please?

  Thanks
    Andy

Notepad has been reported to work. I used notepad++, which also worked fine.
As for the CRC01 part:
Open a command promt by pressing Windowskey+R and typing cmd + Enter
Use the "cd" command to navigate to wherever you unzipped mikes archive to.
Now enter "CRC01 E8.cfg".
Continue as per mikes description.

I don't mean to be rude or anything, but if something that trivial trips you up, then maybe messing with the firmware of a 1000$ device isn't the best idea... 
Title: Re: AddMenu Beta3 FTP - problem
Post by: amigo on January 14, 2014, 11:44:15 pm
Surely, sorry for asking basic things I could´ve found myself, just got a little bit frustrated...

Flir Player version 2.3.3, I have tried in UVC and RNDIS-mode but no pop-up whatsoever. Through ipconfig/all I got the information that my standardgateway/camera has an ip of 0.0.0.0  ??

Edit: Finally got the gateway-ip to read 192.168.0.2 but still no reply on ftp or telnet. Maybe my camera are at fault or maybe me.
Is there something wrong with network-settings?
(http://s25.postimg.org/ijnit80xr/Flir_Network001.png) (http://postimage.org/)
how to take a screenshot on a pc (http://postimage.org/app.php)

Perhaps you are not reading this right?

Your LAN2 interface IP is on a .160 subnet but your gateway is on a .0 subnet. You really ought to be on the same subnet, or change the netmask for LAN2 to 255.255.0.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: randy on January 15, 2014, 12:04:14 am
Guys I just bought e4 camera and I am new to this forum started to look around how to hack it. Everyone talks about e8.cfg file but where is this file and camera.cmd file. how I find them.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: randy on January 15, 2014, 12:04:56 am
Mike I bought this camera only after seeing your review on you tube which is one of the best reviews of any product ever I have watched. Amazing, keep up the good work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calle on January 15, 2014, 12:36:32 am
@amigo
You nailed it! Thank you!

@Taucher
When browsing around I noticed that your FlashBFS are missing a lot of the original files as in my untouched folder, is it supposed to be this way?

@randy
Read the first post, that´ll straight out the question mark for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 15, 2014, 01:45:55 am
@Taucher
When browsing around I noticed that your FlashBFS are missing a lot of the original files as in my untouched folder, is it supposed to be this way?

Yes, you don't have to replace the original FlashBFS. You just need to merge the two by overwriting the files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calle on January 15, 2014, 02:17:51 am
@zucca
Cool, now i´ve got my menus in place!

@Taucher
I´ve kept your BC-adress, will send you a couple of beers when I get around to sort out my own.

I think I´ve mentioned it before but a big thank you to all contributors of this thread!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: randy on January 15, 2014, 02:43:42 am
Hello It may sound stupid to few but guys I am unable to find the location e8.cfg and camera.cmd file in the first post. Guys please help
I am not a teck guy. Please let me know how to locate these files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 15, 2014, 02:47:08 am
Hello It may sound stupid to few but guys I am unable to find the location e8.cfg and camera.cmd file in the first post. Guys please help
I am not a teck guy. Please let me know how to locate these files.

It's in the ZIP file attached to the following post...

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 15, 2014, 03:18:55 am
Has anyone succeeded in making the temp scale on right hand side smaller/larger/invisible? There are plenty of applications where I don't need it and it eats real estate

I guess you'll want to look at facet_z3.rcc(extracted)\qml\TempScale.qml

It can be rotated, the gradient border can be messed with, you can resize it if you like...
I'm pretty sure one can even use a command like opacity=0 to make stuff transparent...




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: enmike on January 15, 2014, 07:31:23 am
Hi, all!

I've bought and hacked E4 a month ago. All works perfectly, however I've noticed that the measured temperature is ~ 2K off.
Walls usually are 19'C, but the camera shows 16-17'C. I've also compare it agains i3 (well, i7).
Does anyone noticed this? Or has a fix?

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 15, 2014, 10:41:05 am
Hi, all!
I've bought and hacked E4 a month ago. All works perfectly, however I've noticed that the measured temperature is ~ 2K off.
Walls usually are 19'C, but the camera shows 16-17'C. I've also compare it agains i3 (well, i7).
Does anyone noticed this? Or has a fix?
Thanks.
My 2 cents would be on the emissivity settings :)
Also don't use walls to spaces with different (colder) temperature -> there's a thin air-layer sticking to the wall where the temperature drops a lot.
I hope you have read the great PDF-manual that's included with the cam :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 15, 2014, 11:22:32 am
The E4 is not a highly accurate temperature measuring device. Many factors effect the accuracy of the readings it provides. Contact measurement techniques such as a thermocouple or Platinum resistance probe are more accurate.

The E4 specification states +-2% or +-2 Degrees Celcuis error in rreadings, I have measured 3 Degree errors at points in its coverage above 0 Degrees Celcius. Such a specification is equivalent to the accuracy of a $5 digital thermometer. Thermal imaging is often more about temperature differentials and interpretation of what the image is showing, rather than highly accurate readings.

Thermal cameras offer the convenience of non contact temperature measurement, but I do not consider them a precision device in that respect. Even my very expensive industrial cameras have a +-2% +-2 Degree C tolerance.

The E4 is produced at a relatively low price point for such technology, and it would appear that its calibration process may have suffered as a result. Calibration takes time, and so costs FLIR money. The E8 MAY have better calibration due to its higher price point, but this is unconfirmed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 15, 2014, 12:21:00 pm
My free gift from FLIR shipped today and is supposed to be here tomorrow.  It'll be a surprise what I got.  I chose the laser distance meter from their list, but requested an extra battery, car charger and soft case instead of the distance meter.  They never contacted me to confirm or deny my request, I don't know what's in the box.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 15, 2014, 05:39:50 pm

Ok, after seeing the hack I am definitely buying the E4!

Can anybody suggest a trustworthy online store in the US from which I can buy it at a good price?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 15, 2014, 05:44:58 pm
Has anyone succeeded in making the temp scale on right hand side smaller/larger/invisible? There are plenty of applications where I don't need it and it eats real estate

I guess you'll want to look at facet_z3.rcc(extracted)\qml\TempScale.qml

It can be rotated, the gradient border can be messed with, you can resize it if you like...
I'm pretty sure one can even use a command like opacity=0 to make stuff transparent...

Taucher no chance your RCC depack/pack code will ever make it into any sort of win32 command line app or the like?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 15, 2014, 05:46:23 pm

Ok, after seeing the hack I am definitely buying the E4!

Can anybody suggest a trustworthy online store in the US from which I can buy it at a good price?

Thanks!
Tequiptment.net .
On the website request a quote.It should be ~%10 off the list price.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 15, 2014, 05:51:06 pm
Can anybody suggest a trustworthy online store in the US from which I can buy it at a good price?
According to flag in your profile (Greece) you are not allowed to buy in US.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 15, 2014, 05:51:49 pm
That is great! 
Thank you very much.    :)


Ok, after seeing the hack I am definitely buying the E4!

Can anybody suggest a trustworthy online store in the US from which I can buy it at a good price?

Thanks!
Tequiptment.net .
On the website request a quote.It should be ~%10 off the list price.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 15, 2014, 06:39:41 pm
Hi, all!

I've bought and hacked E4 a month ago. All works perfectly, however I've noticed that the measured temperature is ~ 2K off.
Walls usually are 19'C, but the camera shows 16-17'C. I've also compare it agains i3 (well, i7).
Does anyone noticed this? Or has a fix?

Thanks.

I've made a few posts about it:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350193/#msg350193 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350193/#msg350193)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg358979/#msg358979 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg358979/#msg358979)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 15, 2014, 07:11:41 pm
Ok, I asked for a quote giving them my Greece billing info and telling them that it
will be shipped in Illinois, but they told me they cannot ship it to Greece...

I wrote again to make it clear that it will be shipped to a US address and I am waiting
for a response...

Anyway, it looks like that they don't have it in stock.  Only the E8.

Can anybody suggest a trustworthy online store in the US from which I can buy it at a good price?
According to flag in your profile (Greece) you are not allowed to buy in US.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: randy on January 15, 2014, 11:16:09 pm
Thanks wilheldp  I really appreciate your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 16, 2014, 04:04:58 am
Taucher no chance your RCC depack/pack code will ever make it into any sort of win32 command line app or the like?

I'd love to code a "hackcenter" or at least some same-os-tools... but right now I'm pretty busy with other projects.  :(
The code should be pretty easy to port once one has a dev-environment with QT set up.

I decided to go for linux as the whole qt-env-installation was a simple matter of "apt-get install ... " and took just a couple of minutes.

Edit:
The repacking can be done with Windows and rcc.exe - I also wrote a repack.cmd for that purpose but I'm not sure about the origin of rcc.exe. Extracting and hitting "repack.cmd" should work to create a fresh.rcc and then prompt if you want to overwrite the facet rcc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: StevenH on January 16, 2014, 10:45:01 am
I've just discover this topic; i'm quite impressed by the fact that such a technology can be hacked quite easily by anyone. How is it possible?
I wonder what would be FLIR point of view/reaction ; i though that infrared cameras were controlled products...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 16, 2014, 12:11:28 pm
First I'd like to thank you guys for the great service you all are providing to everyone who owns a FLIR E4.

I bought mine couple days ago through Amazon.com and they shipped the unit super quick.
Look for the Seller Sales Store, can really recommend them. Outstanding service, perfect communication and support.
When i ordered they had 10 pcs on stock, from which one is mine ^^.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 16, 2014, 12:47:15 pm
Wow!  Amazon had 5 in stock yesterday night, and now nothing!
Tequipment.net needs 10 days to order one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 16, 2014, 01:15:35 pm
@StevenH

FLIR are a large player in the industrial thermal imaging market, they have not traditionally been working in the budget Consumer goods market, but began to enter it with the iX series. That series as also subject to 'user upgrade' prior to teh E4 release.  Consumer market users are more likely to 'hack' their new toy than an industrial user, and this may have been overlooked by FLIR. They just built the cameras as they have always done so, with little secuirty on the configuration files. That may well change since this event.

The Ex series are subject to ITAR regulations in so far as where they may be shipped, but they are not regulated in the same way as a medium resolution 30, 60 or 200 fps camera. At 9 fps they may be sold and shipped to many countries, with very little paperwork involved. The improvements that have been detailed in this thread are of no consequence where ITAR regulations are concerned as the camera is still a 9 fps unit. The resolution of 320x240 causes no concern to the US DoD and BIS at this low frame rate. If users began to upgrade their cameras to higher frame rates through simple configuaration changes, FLIR would be in breach of their responsibility to prevent such under ITAR approvals, and the brown stuff would hit the fan ! There is no public disclosure of such an improvement to the Ex series and it is expected to be 'locked down' in the hardware to prevent such. It is an ITAR requirement is that such a limitation must not be reversible by the end user.

As to the thermal camera industry response to this whole affair........ amusement would summarise it well. Those that I have spoken with are impressed with the work of those involved in the upgrade, and show little surprise that this has occurred. I suspect they have little secuirty in their cameras either, but the difference is that most of them supply to industry only. No one is feeling sorry for FLIR as they are big and 'bad' enough to weather the 'storm'. Be aware that other manufacturers do reverese engineer the competitions products to learn from them....that has always been the case in the manufacturing industry. FLIR's competitors were already aware of the 'secrets' within the FLIR products and , of course, within their own  ;)  No treachery is involvd in this case. Some clever Users have just used publicly available knowledge and information to enable, and add, functionality. That is why I prefer to call it an 'Enhancement' rather than a HACK as hacking can infer 'Black Hat' activity which is not something to be shouted about in polite circles.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 16, 2014, 01:35:13 pm
I installed tauchers beta3 menu hack last night, i followed the instructions, dropping the new flashbfs file onto the flashbfs on the camera. When I restarted the camera(removed the battery) nothing had changed. Looking at the new flashbfs file on the camera, the flashbfs folder that i moved, became a sub folder inside the cameras original flashbfs folder. So I deleted the extra folder, and dropped the settings folder from the new beta3 flashbfs into the camera flashbfs folder. This time the hack worked, i played with the menus and it all worked fine.
 This morning i was using the camera, trying out the new menus, went on the displays, i think i was on the small picture in picture . When the screen froze , and there were vertical strips about 3 to 4 mm wide, alternating  normal image strips and strips with distorted image(digital noise). I did a restart, and it was ok.
 Does anyone know what might cause this to happen, and any suggestion on what to do, to stop it happening again.
 
 Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 16, 2014, 02:41:34 pm
I installed tauchers beta3 menu hack last night, i followed the instructions, dropping the new flashbfs file onto the flashbfs on the camera. When I restarted the camera(removed the battery) nothing had changed. Looking at the new flashbfs file on the camera, the flashbfs folder that i moved, became a sub folder inside the cameras original flashbfs folder. So I deleted the extra folder, and dropped the settings folder from the new beta3 flashbfs into the camera flashbfs folder. This time the hack worked, i played with the menus and it all worked fine.
 This morning i was using the camera, trying out the new menus, went on the displays, i think i was on the small picture in picture . When the screen froze , and there were vertical strips about 3 to 4 mm wide, alternating  normal image strips and strips with distorted image(digital noise). I did a restart, and it was ok.
 Does anyone know what might cause this to happen, and any suggestion on what to do, to stop it happening again.
 
 Thanks
Probably just a random Windows CE crash.  That said, if it continues to occur, it would be a good idea to "undo" all enhancements you have performed and see if the problem goes away.   If the problem does not go away, then there could be a defect in the camera and it should be looked at by Flir under warranty.  Before sending in the camera for warranty work, you should remove any enhancements or potentially be denied warranty repair.

I have personally experienced a crash where I saw some very brief flickering purple sections on the bottom of the LCD screen followed by a Windows pop-up message telling me that the appcore.exe had crashed.  I shut the camera off by holding the power button down for a long time, then pulled the battery in order to force a full reset.   Has not occurred since, however I still expect to see random crashes once in a while just because it's Windows and there may be bugs in the Flir software (enhanced camera or not).  When navigating the menus I purposely slow down my keystroke speed in order to give the back-end software time to update the LCD completely so as to not cause "timing" related crashes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 16, 2014, 02:45:38 pm
I totally agree with QuantumLogic. I had the same experience with the "appcore.exe" crash.

the flashbfs folder that i moved, became a sub folder inside the cameras original flashbfs folder

Could it be a human error? That's why I use Total Commander and I stay away from Windows Explorer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 16, 2014, 04:56:17 pm
@andy1read
I suppose you did remove the battery after applying the menu hack
.. was your Ex hooked to USB for a longer time?

I left mine for some days (untouched) and when powering it up I had vertical banding that seemed to be originating from the LCD (not visible on captured images or in VLC) - also there was some ghosting of the FLIR logo after I left the camera to settle without battery for a while the banding got better, but is still present.

Right now I put the cam on power-cold-turkey (offline without battery) to let drain away all e-potentials.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 16, 2014, 04:57:43 pm
I totally agree with QuantumLogic. I had the same experience with the "appcore.exe" crash.

the flashbfs folder that i moved, became a sub folder inside the cameras original flashbfs folder

Could it be a human error? That's why I use Total Commander and I stay away from Windows Explorer.

It's simple: one has to drag & drop FlashBFS into the camera-root, not onto the other FlashBFS folder as that would be interpreted as "copy into that folder"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 16, 2014, 05:32:27 pm
Courtesy of Registax:

Note: Not done with an E4. All thermal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 16, 2014, 06:06:03 pm

Is there a chance that when you order an E4 now, you will receive a version that is locked and
unhackable?...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 16, 2014, 06:09:06 pm
@Taucher
It wasn't connected on the USB for very long, about half hour.I did remove the battery after the hack.
By dropping the Settings folder into the FlashBFS on the Camera, that should do the same as dropping the FlashBFS into the camera root, shouldn't it?
   I've been using the camera for half an hour , since I got home from work, and its been working without any problems.  Hopefully its a one off glitch, should I remove the battery and leave out for a while?
 You ( and anyone else involved ) have done a nice job with the menu hack, didn't realise how much the Flir logo got in the way,until it was gone. Don't understand why Flir would put a logo on the screen .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 16, 2014, 06:49:30 pm
Is it possible to connect the E4 to an Android device,using an OTG cable, and use it on Flir tools mobile?
Is it only possible to use Camera's that have wifi , with the App?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: psycho0815 on January 16, 2014, 07:02:36 pm

Is there a chance that when you order an E4 now, you will receive a version that is locked and
unhackable?...

i Just got mine a weeek ago and it still had the hackable 1.19.8 fimrware, but sure in theory that can always happen, bur honestly i don't see why flir would care.
For Example, i bought an E4 basically because of that hack, but i would never ever  bought an E8 and propably not even an E4 without the hack. And professional user will buy an E8 anyway just to be sure, so i dont see much point in locking uo the firmware, but you never know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 16, 2014, 07:18:15 pm
I think I will take my chances.
valuetesters.com have a 4 to 5 week backorder...

Difficult to find one right now.  Yesterday 6 E4s disappeared from amazon.com in a matter of hours!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 16, 2014, 07:36:03 pm
Note: I made my app public, free to all. See: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

This is my contribution as reward for other cool stuff developed here - hack, menu, scripts... Thank you.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 16, 2014, 08:04:34 pm
@daves

Thank You  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 16, 2014, 08:05:44 pm
Thank you for YOUR hard work and sharing with us!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 16, 2014, 09:11:02 pm
I think I will take my chances.
valuetesters.com have a 4 to 5 week backorder...

Difficult to find one right now.  Yesterday 6 E4s disappeared from amazon.com in a matter of hours!
Tell the dealer your order is conditional on it having a hackable firmware version, or guarantee refund if not (before they ship) - most dealers are aware of it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 16, 2014, 11:19:42 pm
I rewrote Tomas123's flir.php for batch process and added some more functions. I will post new versions only here, as update.

Any plans to make the source code available as well?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 17, 2014, 12:06:37 am
I think I will take my chances.
valuetesters.com have a 4 to 5 week backorder...

Difficult to find one right now.  Yesterday 6 E4s disappeared from amazon.com in a matter of hours!
Tell the dealer your order is conditional on it having a hackable firmware version, or guarantee refund if not (before they ship) - most dealers are aware of it.
Tequiptment has a 5 or 7 day return policy for any reason with no restocking fee ,(ask them ) thats one reason I went with them (the discount didnt hurt0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 17, 2014, 12:27:18 am
My free gift from FLIR shipped today and is supposed to be here tomorrow.  It'll be a surprise what I got.  I chose the laser distance meter from their list, but requested an extra battery, car charger and soft case instead of the distance meter.  They never contacted me to confirm or deny my request, I don't know what's in the box.

Unfortunately, it was the laser distance meter.  Oh well, I guess I'll have to finish measuring my house for my 3D printed model now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 17, 2014, 04:48:11 am
I did more testing on the battery and laptop connection...
first, like I said before, the +5 from the laptop MUST be connected to the E4 for the USB connection to work.
sooooo...
With a partially discharged battery, I measured the battery current and the +5 USB current with the camera on.  (I took the battery compartment apart and broke into the -V side of the battery and inserted an ammeter).

With the camera on:  110mA to the battery and 611mA from the laptop.

 The current does jump around and doesn't seem to reduce after time like Mike mentioned MIGHT happen due to the heater... rats!  Also, when the shutter operates the current increases to about 815mA for about 1 second.  Also i had the brightness on the backlight on high for worst case.

The sampling rate on my dvm isn't quite fast enough but I did do several manual cals and get the highest reading several times.  I also used the 10 amp scale for the lowest burden voltage I could, otherwise the E4 would shut off.

With the camera off and the backlight on to display the battery charge (left/right joystick buttons pressed): 407mA to the battery (it had already partially charged) and 590mA from the laptop.

With the backlight off: 357mA to the battery (charged up a little more) and 440mA from the laptop.

The charging seemed to quit at about 110mA into the battery and the E4 went into OFF (0 current).

One other thing I noticed is the displayed charge current and the actual current into the battery is quite a bit off..... IE... 416mA indicated and 370mA actual and 163mA indicated and 110mA actual.
I would have thought that it would be more accurate than this.

I might make up an external battery box for the camera when using portable because this would really reduce the run time of a laptop/phone/tablet since the E4 would be getting it's power from the device!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 17, 2014, 04:49:58 am
My free gift from FLIR shipped today and is supposed to be here tomorrow.  It'll be a surprise what I got.  I chose the laser distance meter from their list, but requested an extra battery, car charger and soft case instead of the distance meter.  They never contacted me to confirm or deny my request, I don't know what's in the box.

Unfortunately, it was the laser distance meter.  Oh well, I guess I'll have to finish measuring my house for my 3D printed model now.
I opted for the borescope and sent it to my father as I already have one (HarborFreight no less).
I also have a Bosch laser tape measure and it really is handy and accurate!  You will probably like yours!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 07:26:34 am
I think I will take my chances.
valuetesters.com have a 4 to 5 week backorder...

Difficult to find one right now.  Yesterday 6 E4s disappeared from amazon.com in a matter of hours!
Tell the dealer your order is conditional on it having a hackable firmware version, or guarantee refund if not (before they ship) - most dealers are aware of it.

I haven't tried that yet.  They already giving me trouble to ship it to US...
valuetesters told me they don't know the firmware until they receive the new units and this
will be after a month or so.

I asked tequipment yesterday for the firmware version I will receive, but no reply yet.
They need a week to deliver.  Let's hope that they will not lock the firmware.

A firmware downgrade would be a nice workaround I think.
If you are able to upload new firmware updates, then why not older ones?...
Has anybody tried that?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 17, 2014, 08:05:04 am
@Taucher
It wasn't connected on the USB for very long, about half hour.I did remove the battery after the hack.
By dropping the Settings folder into the FlashBFS on the Camera, that should do the same as dropping the FlashBFS into the camera root, shouldn't it?
   I've been using the camera for half an hour , since I got home from work, and its been working without any problems.  Hopefully its a one off glitch, should I remove the battery and leave out for a while?
 You ( and anyone else involved ) have done a nice job with the menu hack, didn't realise how much the Flir logo got in the way,until it was gone. Don't understand why Flir would put a logo on the screen .

@copying folders: yes - and that's basic OS handling - I guess that one is covered by "advanced users" ;)
@Menu hack - I'm somehow tempted to tweak the temperature-scale to be more subtle :)


Title: @Banding
Post by: Taucher on January 17, 2014, 08:08:39 am
Update on LDC-banding:
The banding seems to go away when the screen is showing WHITE (saturating) - just set the TIC to "manual temp" and lower the scale until anything is white... seems to help a lot :)

Attachment: How it looked when "banding" (enhanced image, zoom unaffecting the display)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 17, 2014, 09:38:46 am
A firmware downgrade would be a nice workaround I think.
If you are able to upload new firmware updates, then why not older ones?...
Has anybody tried that?
If one of the  purposes of a software change  is to stop the hack, then I'm sure they would have thought of that. However the fact that a couple of months and many hundreds, probably thousands  of units later they haven't done anything suggests they're not too bothered, and may actually be quietly glad of the extra sales and market share. With the hack, anyone would be nuts to buy any other 9fps TIC on the market. 
Stopping it now would do little but piss people off and benefit their competitors.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grumpydoc on January 17, 2014, 09:48:22 am
Quote
Stopping it now would do little but piss people off and benefit their competitors.
I suspect their best bet is to make it a little harder, but not try too hard to prevent it completely  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 10:08:13 am
A firmware downgrade would be a nice workaround I think.
If you are able to upload new firmware updates, then why not older ones?...
Has anybody tried that?
If one of the  purposes of a software change  is to stop the hack, then I'm sure they would have thought of that. However the fact that a couple of months and many hundreds, probably thousands  of units later they haven't done anything suggests they're not too bothered, and may actually be quietly glad of the extra sales and market share. With the hack, anyone would be nuts to buy any other 9fps TIC on the market. 
Stopping it now would do little but piss people off and benefit their competitors.

You are probably (and hopefully  :)) right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 17, 2014, 10:40:58 am
@taucher
 Do you know what dictates the max and min temps on the scale bar when in auto ?  I thought it went from the coldest to the hottest temp that were in the display. But thats not the case.
 In the auto setting, if i point it at a wall which only varies by 1 or 2 degrees ,  if the center reading is 15.5 degrees , the scale bar ranges from around 10 to 21 , which means the display ends up being a bright yellow/ orange.  If the scale was closer to the min and max temps in the display, this would show more colour detail. I've noticed there always seems to be aleast 10 degrees between the min and max.
 Thanks to your menu hack, in manual this can be overcome.
 I cant find anything in the menus which can adjust the auto ranging.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 11:10:10 am
I've noticed there always seems to be aleast 10 degrees between the min and max.
If the palette has 224 values and sensitivity of camera is 0.06°C, then it takes 13.44°C to fill the palette itself.

You can change Tmin and Tmax in software (Flir.php or BFIC.exe) to spread some small difference over the palette or use FlirTools to do it per image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 17, 2014, 11:14:42 am
@andy1read

This is the reason that I am so grateful for the new manual mode that Taucher introduced for us.

I often work with temperature spans of 2 or 4 Degees Celsius when using an industrial TIC, I found that the E4 was regularly setting a wide span of 10 Degrees or greater, no matter what the target FOV temperature range (as you have found). I have the feeling that FLIR set the Ex auto ranging to provide the 'prettiest', rather than most useful, picture on the users screen. There can be a large difference between what looks like a 'nice picture' with low noise and soft transitions, and a true thermographic measurement image where thermal resolution is important, and noise less so. My PM695 produces quite a noisy image at 2 Degrees C Span but it is the dogs dodads for spotting tempertaure differential in these small spans. When using the E4 I use Manual mode often and prefer that mode when monitoring PCB's etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 11:21:04 am
I use Manual mode often and prefer that mode when monitoring PCB's etc.

When doing building thermography while sky is clear, temp always fall down to -40°C at the sky. So manual mode is very useful also here to avoid this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on January 17, 2014, 11:26:24 am
I did more testing on the battery and laptop connection...
first, like I said before, the +5 from the laptop MUST be connected to the E4 for the USB connection to work.
sooooo...
With a partially discharged battery, I measured the battery current and the +5 USB current with the camera on.  (I took the battery compartment apart and broke into the -V side of the battery and inserted an ammeter).

With the camera on:  110mA to the battery and 611mA from the laptop.

 The current does jump around and doesn't seem to reduce after time like Mike mentioned MIGHT happen due to the heater... rats!  Also, when the shutter operates the current increases to about 815mA for about 1 second.  Also i had the brightness on the backlight on high for worst case.

The sampling rate on my dvm isn't quite fast enough but I did do several manual cals and get the highest reading several times.  I also used the 10 amp scale for the lowest burden voltage I could, otherwise the E4 would shut off.

With the camera off and the backlight on to display the battery charge (left/right joystick buttons pressed): 407mA to the battery (it had already partially charged) and 590mA from the laptop.

With the backlight off: 357mA to the battery (charged up a little more) and 440mA from the laptop.

The charging seemed to quit at about 110mA into the battery and the E4 went into OFF (0 current).

One other thing I noticed is the displayed charge current and the actual current into the battery is quite a bit off..... IE... 416mA indicated and 370mA actual and 163mA indicated and 110mA actual.
I would have thought that it would be more accurate than this.

I might make up an external battery box for the camera when using portable because this would really reduce the run time of a laptop/phone/tablet since the E4 would be getting it's power from the device!
Interesting numbers. Standard USB only allows up to 500mA even with negotiation...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 17, 2014, 11:29:23 am
Interesting numbers. Standard USB only allows up to 500mA even with negotiation...

5 Volt in + buck converter + 3.6 Volt out == interesting numbers?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 17, 2014, 11:30:48 am
On PCB work I noticed that auto mode made a mess of spans when the FOV contained a hot component as it was trying to cover the full range of temperatures present (understandable) I often want to 'ignore' the major heat sounce like a heatsinked regulataor and look in detail at the smaller components nearby, like SMD transistors etc. Manual mode makes that easy. Without a close-up lens and manual mode, the E4 produces a very pretty , but also pretty useless, view of a PCB that has legitimate hot components on it. I had this very issue when looking at my lathe speed controller yesterday. A resistor running at 140 C totally dominated the scene and caused a very wide span on the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: menthurae on January 17, 2014, 12:50:28 pm
Hey guys,

I am a bit worried. I left my E4 charging for about 2.5hrs whilst I watched a movie (battery was flashing as low when I went to plug it in). I now have the battery charging symbol "burnt" into the LCD screen. I've tried turning it on/off, taking battery out, running a pure white screen/pure black screen for a few minutes... I can still see it (especially on the grey menu items).

Any ideas if this will persist forever or do I just have to wait it out? I've since lowered my screen brightness to minimum to avoid it happening again/with other things... but yeah, not cool man!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 17, 2014, 01:13:51 pm
Has the sensitivty of a hacked E4 changed from 0.15 to the E8 0.06 ?

@dave
 I dont know how to change tmin and tmax,   would changing these let you have a smaller temp span when theres only a few degrees difference in the display, but the span will still change relative to larger temp differences ?( in the auto temp )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 17, 2014, 01:33:16 pm
Hey guys,

I am a bit worried. I left my E4 charging for about 2.5hrs whilst I watched a movie (battery was flashing as low when I went to plug it in). I now have the battery charging symbol "burnt" into the LCD screen. I've tried turning it on/off, taking battery out, running a pure white screen/pure black screen for a few minutes... I can still see it (especially on the grey menu items).

Any ideas if this will persist forever or do I just have to wait it out? I've since lowered my screen brightness to minimum to avoid it happening again/with other things... but yeah, not cool man!

It'll go away after a while, perhaps you can complain to FLIR about their crappy LCD sourcing. Lowering your brightness won't do anything anyway since the liquid crystals are the problem, not the backlight.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: menthurae on January 17, 2014, 01:43:21 pm
Hey guys,

I am a bit worried. I left my E4 charging for about 2.5hrs whilst I watched a movie (battery was flashing as low when I went to plug it in). I now have the battery charging symbol "burnt" into the LCD screen. I've tried turning it on/off, taking battery out, running a pure white screen/pure black screen for a few minutes... I can still see it (especially on the grey menu items).

Any ideas if this will persist forever or do I just have to wait it out? I've since lowered my screen brightness to minimum to avoid it happening again/with other things... but yeah, not cool man!

It'll go away after a while, perhaps you can complain to FLIR about their crappy LCD sourcing. Lowering your brightness won't do anything anyway since the liquid crystals are the problem, not the backlight.

Hrm OK I will keep an eye on it. It is not a deal breaker for me but it is mildly annoying. I am one of those OCD type people that wants their gear in A1 condition all the time. It is pretty annoying that this thing has such a crap LCD and the bad design of the USB port not being reinforced/having the flap apply pressure to the charging cable.

Oh well, at least it wasn't $8,000! =P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 02:00:08 pm
would changing these let you have a smaller temp span when theres only a few degrees difference in the display
Yes, for photos use your flirtools to do that for one picture, or script/bfic to convert many images.
Or for live video you can use VirtualDub, camera as input and apply filters to make your own palette settings
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 02:31:37 pm

Just received a price quote from instrumart and they said that the new batch of cameras
they will receive next week will have firmware version 2.0 or higher.

Anybody with a hacked v2.0 E4 ??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fairuse on January 17, 2014, 03:12:13 pm
Anyone know if a similar hack can be done to a FLIR E40? I'm assuming the sensor is the same as the E4-E8 and E50-E60
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 03:29:43 pm
Anybody with a hacked v2.0 E4 ??
No and version 2.0 seems mostly like turkey. Just calm down and wait till it comes, if you are afraid, buy from local dealer.

Or simply wait, if 2.0 is true. I doubt, since month ago 1.1 came with software not over 1.19. So... 2.0 ? Does not sound real.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 04:44:33 pm
* * * Extra! Extra! Read all about it! * * *    :)

I am afraid I have bad news...
Fresh quote from an online retailer:

"I haven't seen the new firmware notation but do know they have addressed
the ability to hack the unit.   The cameras we are waiting on will be the latest version.
"

...and I did not ask if the firmware was hackable...
Good while it lasted.

Mike get prepared for hack v2.0...   :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 17, 2014, 04:55:31 pm
@hgg

As daves said, Panic Slowly.

We have been through this once before with a claimed 1.2x firmware. It turned out to be bogus info.

As others have said, if concerned, either buy across the counter or from a supplier who guarantees V1.19 firmware.

If FLIR have carried out a countermeasure via new firmware then so be it. They have 'allowed' the purchase of an E4 that can be enhanced for 3 months though, so many potential buyers will have received their units already. New firmware (if it exists) will present the issue of how the 'brains' on this forum can consider its content when they do not own such a new firmware unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 05:42:43 pm
More retailers told me that FLIR is working on locking the firmware but they are not telling
them what firmware they will receive... 

It looks like that the new batch will be v1.20 though.

Murphy is always one step ahead!  >:(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 17, 2014, 05:54:12 pm
More retailers told me that FLIR is working on locking the firmware but they are not telling them what firmware they will receive... 
Retailers tell people all manner of things. As Aurora said that daves said, panic slowly. Vewy vewy slowly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 17, 2014, 05:57:53 pm
For my next trick I went been digging around and resizing things on my screen however the one thing I really am looking to do is make the background colors for the temperature in top right and temperatures on scale transparent (this was discussed earlier by taucher i think) so I can still see the numbers just not in the big square box around them (too much work went into giving us those pixels). I have tried changing the colors in design_ui_z3.xml  as I thought that would be where this would be specified in "<qml_context_property name="colors">" but am not having any luck. E4 seems to hang and generally misbehave. Has anyone succeeded in doing this? I did some googling and "discovered" that when no color is given that transparent was the default but of course that didn't work (as the tip came from the internet I was pretty sure it wouldn't  :D So if anyone has any ideas please feel free to throw them my way.
I realize that they can be removed after the fact just was wanting to remove them from the on camera screen

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 17, 2014, 06:09:37 pm
I did more testing on the battery and laptop connection...
first, like I said before, the +5 from the laptop MUST be connected to the E4 for the USB connection to work.
sooooo...
With a partially discharged battery, I measured the battery current and the +5 USB current with the camera on.  (I took the battery compartment apart and broke into the -V side of the battery and inserted an ammeter).

With the camera on:  110mA to the battery and 611mA from the laptop.

 The current does jump around and doesn't seem to reduce after time like Mike mentioned MIGHT happen due to the heater... rats!  Also, when the shutter operates the current increases to about 815mA for about 1 second.  Also i had the brightness on the backlight on high for worst case.

The sampling rate on my dvm isn't quite fast enough but I did do several manual cals and get the highest reading several times.  I also used the 10 amp scale for the lowest burden voltage I could, otherwise the E4 would shut off.

With the camera off and the backlight on to display the battery charge (left/right joystick buttons pressed): 407mA to the battery (it had already partially charged) and 590mA from the laptop.

With the backlight off: 357mA to the battery (charged up a little more) and 440mA from the laptop.

The charging seemed to quit at about 110mA into the battery and the E4 went into OFF (0 current).

One other thing I noticed is the displayed charge current and the actual current into the battery is quite a bit off..... IE... 416mA indicated and 370mA actual and 163mA indicated and 110mA actual.
I would have thought that it would be more accurate than this.

I might make up an external battery box for the camera when using portable because this would really reduce the run time of a laptop/phone/tablet since the E4 would be getting it's power from the device!
Interesting numbers. Standard USB only allows up to 500mA even with negotiation...
I was surprised to see over 500 mA from the usb port as well!  I did recheck my meter and it is correct, so I don't know why it was drawing over 500.... and didn't blow the usb fuse if my laptop has one for each port (it is a Dell E6500).
Any way, kind of proves that the host device will be delivering power when connected.... I will build a "splitter" that passes gnd/D-/D+ and connects the +5 to a battery so I don't load my laptop/tablet(when I get one)/etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 17, 2014, 06:18:46 pm
More retailers told me that FLIR is working on locking the firmware but they are not telling them what firmware they will receive... 
Retailers tell people all manner of things. As Aurora said that daves said, panic slowly. Vewy vewy slowly.
I agree... panic ssslllooowwwlllyyyy.... time will tell and NOTHING is impossible.
BUT
Why would retailers tell people that Flir is trying to lock the firmware????  Wouldn't that discourage people from buying the Ex line?  Of course that could also "make" people think about buying the pricier TIC's that already have the E4(8) features... at a MUCH higher price of course...

Interesting...  we will just have to wait and see!  (another mystery... just don't chew your fingernails too far!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 06:43:47 pm

ok, ok,  I am panicking slowly and I am placing an order right now!   :-\
Fingers crossed.   :palm:


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 06:50:46 pm
...I really am looking to do is make the background colors for the temperature in top right and temperatures on scale transparent...
I do prefer to do this on PC. Resize, do own palette, etc... You can choose position and in/out. More is coming.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 17, 2014, 06:55:47 pm

ok, ok,  I am panicking slowly and I am placing an order right now!   :-\
Fingers crossed.   :palm:
Well of course you will let us know what FW version you have?!?!?!
Yes fingers (toes/legs/arms) crossed!  Good Luck!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 17, 2014, 07:09:56 pm

ok, ok,  I am panicking slowly and I am placing an order right now!   :-\
Fingers crossed.   :palm:
Well of course you will let us know what FW version you have?!?!?!
Yes fingers (toes/legs/arms) crossed!  Good Luck!

Thanks.

That was it.  I bought it. 

Tomas123 lets hope that they will not make it harder this time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 17, 2014, 07:19:27 pm
As many of us have said before, FLIR would be shooting themselves in the foot if they "fixed" the E4 hack. That said, I'm sure there will be a new hack if FLIR does make the change.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0xdeadbeef on January 17, 2014, 07:49:01 pm
Hey guys,

I am a bit worried. I left my E4 charging for about 2.5hrs whilst I watched a movie (battery was flashing as low when I went to plug it in). I now have the battery charging symbol "burnt" into the LCD screen. I've tried turning it on/off, taking battery out, running a pure white screen/pure black screen for a few minutes... I can still see it (especially on the grey menu items).

Any ideas if this will persist forever or do I just have to wait it out? I've since lowered my screen brightness to minimum to avoid it happening again/with other things... but yeah, not cool man!

It'll go away after a while, perhaps you can complain to FLIR about their crappy LCD sourcing. Lowering your brightness won't do anything anyway since the liquid crystals are the problem, not the backlight.
Yet of course lowering the contrast of the charging pictures lowers the chance of burn in. I did so as described a few dozen pages before and since then I did not observe burn-in any more.
The good thing is that the initial burn-in disappeared after some hours of use. I guess it would have disappeared faster with an inverted (black on white) charge symbol though.

Hi, all!

I've bought and hacked E4 a month ago. All works perfectly, however I've noticed that the measured temperature is ~ 2K off.
Walls usually are 19'C, but the camera shows 16-17'C. I've also compare it agains i3 (well, i7).
Does anyone noticed this? Or has a fix?

Thanks.

I've made a few posts about it:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350193/#msg350193 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350193/#msg350193)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg358979/#msg358979 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg358979/#msg358979)
I noticed this some time ago as well and it seems weird that all our E4s seem to be off by the same amount. I'm aware that the tolerance is +/-2°C, but I wouldn't have expected that it's constantly 2°C off brand new at room temperature. I wonder in which way these cameras are calibrated if all show the same amount of error.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on January 17, 2014, 10:25:58 pm
I was a little confused. I uploaded the latest Mk3 files, but didn't see a zoom menu. Reset the E4 with *remove_hack* file, then tried again. Still no zoom menu.

Am I right in assuming that the zoom menu hack requires additional steps detailed at:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426) ?

I reread general instructions at https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) , and now see it says "Updated 3rd Jan - enabled zoom for zoom menu hack." When I first read it, I understood it to mean "added zoom menu hack."

I'm no longer confused, but figured I might save others the 10-15 minutes it took me to understand the situation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 17, 2014, 10:48:29 pm
Am I right in assuming that the zoom menu hack requires additional steps detailed at
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426) ?

Yes, FOR BETA 3 ZOOM FUNCTION:

1. If necessary edit your flashfs\system\appcore.d\config.d\e8.cfg like this:

...
.caps.config.image.zoom.enabled bool true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on January 17, 2014, 11:33:36 pm
Am I right in assuming that the zoom menu hack requires additional steps detailed at
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg366426/#msg366426) ?

Yes, FOR BETA 3 ZOOM FUNCTION:

1. If necessary edit your flashfs\system\appcore.d\config.d\e8.cfg like this:

...
.caps.config.image.zoom.enabled bool true

Yes, that's what it already says in the mk3 version of the e8.cfg file:

.caps.config.image.zoom.enabled bool true

What I'm saying is that I followed the procedure and it still didn't come up. I then read through a lot of pages and discovered Mike's method doesn't give the zoom option, but only enables it. I might tackle the BETA3 mod later on.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuantumLogic on January 18, 2014, 01:08:20 am
Glad you figured it out, Stuey.

Think of the e8.cfg file as the lowest-level configuration for the OS and underlying software.  It tells the OS and core software modules what hardware and software features are "supported" by the camera.  Some of these features are (or were) artificially disabled by Flir in order to create feature differences between the Ex series models (E4-->E8).  Zoom is one of those features.  So is thermal resolution.   Other features, such as WiFi support, require hardware that physically does not exist on the E4, so it cannot be enabled.

Then think of the enhanced menus as running on top of that, exposing the features turned on by e8.cfg to the user interface.  IE - the Zoom menu functionality on screen.

If you think of it like that, then it makes sense that only performing one of the changes will not enable the feature.  Both have to be modified for it to work.

Hope this helps others that may be confused by it all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 01:59:35 am
Just playin around with the charging screen....
The bmp is 196K and the camera resized it so the aspect ratio changed.. the image is 209x241
The original battery_frame was 76k and 320x240.
Contrast is high so may lead to lcd burning, but I can reduce the white level and re-load it in the camera.
After the back light turned off,  the image is still there when viewed with a flashlight.

Anybody know what this is?  Guesses?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ckthorp on January 18, 2014, 03:00:29 am
Anybody know what this is?  Guesses?

That would be Reddy Kilowatt, the power company mascot.  Good pick for a charging screen!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 03:11:16 am
Anybody know what this is?  Guesses?

That would be Reddy Kilowatt, the power company mascot.  Good pick for a charging screen!
TADA!!! You GOT IT!
Thanks!  I kinda thought it would be a hoot!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 04:19:55 am
And then there's this....
The only thing is after the charging finishes and the lightening bolt in the grey box disappears, the grey box stays.... oh well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 04:38:20 am
then this with the aspect ratio padded to 320x240
Am I going nuts?!?!?!?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on January 18, 2014, 05:13:29 am
Did any of the android guys here ever respond/try an android OTG cable? I have a friend with T series flir that sends his images and videos straight from his flir camera to ipad/iphone/etc.. using eyefi card. If USB OTG cable works then with eyefi would effectively have wifi from e4 and never have to worry about cable and usb connector again :) Will likely buy one tomorrow but not an android guy so gonna have to try to find one. I will report back if it works but check here before going out and buying the reader and eyefi card.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 05:19:06 am
A couple of stupid questions...
What is an OTG cable? and what is an eyefi card?
sorry, I don't have an ipad/iphone/smartphone/cell phone.... one of the few in this world that doesn't!

I would like to get something that I can record wireless also.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 18, 2014, 06:34:12 am
A couple of stupid questions...
What is an OTG cable? and what is an eyefi card?

http://en.wikipedia.org/wiki/USB_On-The-Go (http://en.wikipedia.org/wiki/USB_On-The-Go)
http://en.wikipedia.org/wiki/Eye-Fi (http://en.wikipedia.org/wiki/Eye-Fi)

Only a google away.;-)

In a pinch you can make an USB-OTG cable by shorting the sense pin to GND, but these things are so dirt cheap that you'd only do that if you need it NOW.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 18, 2014, 07:10:33 am
Did any of the android guys here ever respond/try an android OTG cable? I have a friend with T series flir that sends his images and videos straight from his flir camera to ipad/iphone/etc.. using eyefi card. If USB OTG cable works then with eyefi would effectively have wifi from e4 and never have to worry about cable and usb connector again :) Will likely buy one tomorrow but not an android guy so gonna have to try to find one. I will report back if it works but check here before going out and buying the reader and eyefi card.


Please share results either way
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 18, 2014, 07:25:56 am
Using the E4 with the menu hack, which has wifi in it.Would it be possible to modify the software/firmware so it can use a usb wifi dongle plugged into a micro usb to female usb adaptor?
 
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 07:27:12 am
A couple of stupid questions...
What is an OTG cable? and what is an eyefi card?

http://en.wikipedia.org/wiki/USB_On-The-Go (http://en.wikipedia.org/wiki/USB_On-The-Go)
http://en.wikipedia.org/wiki/Eye-Fi (http://en.wikipedia.org/wiki/Eye-Fi)

Only a google away.;-)

In a pinch you can make an USB-OTG cable by shorting the sense pin to GND, but these things are so dirt cheap that you'd only do that if you need it NOW.
DOH!  WHY didn't I think of that????  Thanks!
I usually use google for things like this.... must be my age showing1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 18, 2014, 07:53:57 am
Just a small backlink:

Ex (probably) supported wlan chipset (RT28701 ... P3221 / P3001):
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335511/?topicseen#msg335511 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335511/?topicseen#msg335511)

Compass/magnetometer (HMC5843 or HMC5883):
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335491/?topicseen#msg335491 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg335491/?topicseen#msg335491)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 18, 2014, 08:01:58 am
... I now have the battery charging symbol "burnt" into the LCD screen. I've tried turning it on/off, taking battery out, running a pure white screen/pure black screen for a few minutes... I can still see it (especially on the grey menu items).

Leaving the camera alone without any power did help - As already quoted way back in this thread a warmer temperature seems to help, too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 18, 2014, 08:48:26 am
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 18, 2014, 09:07:13 am
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Unfortunately the answer to that is unknown yet.
The chipsets just give us some hints on which drivers are probably on board already and are just sleeping - it seems like the Ex is a reduced version of the Exx where the GUI was just reduced to hide functions that are not present.
What's why I'd love to see a teardown images of an Exx-series TIC - for reference what WIFI was used there... but no luck yet.

The USB stack seems to be generic Windows Embedded 6.0 and I've confirmed that it's even possible to add new applications... so there's a chance we'll eventually find a solution.

Somewhat related: there was some effort done in a parallel thread regarding video capture on a second device (Rasperrby PI) and I guess it would be possible to extend such a project to WIFI - https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/ (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/) (note: I still have hope for an in-camera-video recording hack)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 18, 2014, 09:19:45 am
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
The Flir models that have WiFi (teardown anyone?) will most likely use an internal module, probably on a UART or SPI interface, though could be USB.
AIUI USB wifi dongles tend to rely heavily on software running on the host, so again unlikely and if it did have support, chances are it would only be for a specific chipset.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 18, 2014, 09:27:12 am
What's why I'd love to see a teardown images of an Exx-series TIC - for reference what WIFI was used there...
I've been waiting for exactly the same thing. For the same reason! ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 18, 2014, 10:25:22 am
Quote
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
Thats a shame, Flir tools mobile App looks good , Its the only Android App I've found, and I think it only works with WIFI connection ( I might be wrong ) .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 18, 2014, 10:43:30 am
Quote
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
Thats a shame, Flir tools mobile App looks good , Its the only Android App I've found, and I think it only works with WIFI connection ( I might be wrong ) .
Luckily that line of reasoning has no truck with reality. 1) an usb port doesn't have to supply power to the attached device to have working usb otg functionality. 2) the i.MX257 on the E4 board has an on chip USB OTG PHY.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 18, 2014, 12:09:42 pm
Using a OTG cable that has an extra cable for an external power source would overcome the problem of having no 5v on the cameras micro usb,to power a usb WIFI dongle, wouldn't it? Would just mean having to strap a little 5v battery power pack to the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on January 18, 2014, 12:11:24 pm
You could periodically swap the charging screen with an inverted version, if you didn't want the image to burn in.
What's why I'd love to see a teardown images of an Exx-series TIC - for reference what WIFI was used there...
I've been waiting for exactly the same thing. For the same reason! ;D
Anyone examined the firmware yet? The drivers would give a good clue what it is...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Aleksander on January 18, 2014, 12:30:02 pm
I am planning on using this on a multirotor to help the local Red Cross during SAR.
To transmit the picture to the ground I would prefer to have a video-out port, something that seems to not be avaliable.
To solve the problem I have been thinking about using a RasPi, connect to the E4 via USB, and use it as a USB-webcam to video converter.

The questions I am left with are:
Is there a video out on the PCB somewhere in the E4?
would I be able to adjust some of the settings via the USB? switching between FLIR, normal camera and MSX is the most useful I can think of right now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 18, 2014, 12:45:14 pm
I am planning on using this on a multirotor to help the local Red Cross during SAR.
To transmit the picture to the ground I would prefer to have a video-out port, something that seems to not be avaliable.
To solve the problem I have been thinking about using a RasPi, connect to the E4 via USB, and use it as a USB-webcam to video converter.

The questions I am left with are:
Is there a video out on the PCB somewhere in the E4?
No. USB via UVC is the only simple way. Hardware conversion from LCD interface wouldn't be too hard though - strap a video DAC on a board plugged into the LCD connector. Just need to check that framerate is something sensible, and maybe need to deal with the 320x240 timings - worst case you'd need a small FPGA to do a simple scan-rate conversion.
And there is the 60fps raw sensor datastream if you're feeling adventurous. Main issue with this is you need to do all the calibration, scaling, noise filtering etc. yourself
Quote

would I be able to adjust some of the settings via the USB? switching between FLIR, normal camera and MSX is the most useful I can think of right now.
Probably - you can certainly generate keystrokes via the console (either vis USB/RNDIS or the UART on the internal connector), there may also be an rset command to select image mode

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 18, 2014, 12:53:37 pm
@Aleksander

1. It would be worth searching for videos of such usage on YouTube. There are some that I have seen there using 9fps. You need to decide whether 9fps is adequate in terms of image quality with movement. 60fps is recommended for such uses. 9fps tends to give OK images when the aerial platform is hovering, but not so great when it is moving.

2. AFAIK the E4 does not have a useable video output anywhere on the PCB. Only the raw digital data stream coming out of the micro-bolometer module. USB webcam mode is the only route for extraction of video from the E4 demonstrated to date.

3. If you are considering USB control, you will need a wireless USB link. They are available but tend to have short range due to the data rates involved.

4. A 'Heath Robinson' approach to video output could be constructed using a small PCB camera observing the LCD screen of the E4. A bit like the old Oscilloscope camera idea.

5. A better choice for your 'drone' would appear to be one of FLIR's tactical models designed for hunting and maritime use. They will still be 9fps but they are 'torpedo' shaped and offer composite video output on the outside of the case. You may find one cheaply on the internet as some users may have upgraded to better models or even an E4 !

http://www.flir.com/cs/emea/en/view/?id=42106 (http://www.flir.com/cs/emea/en/view/?id=42106)

If the Autoliv AUDI and BMW FLIR Tau based cameras (30fps) could be made to operate without the control box, they would be an excellent choice for an aerial drone. Maybe that is why they are locked down  ;) Mike is looking into the possibilities that such units offer. We may get a definitive answer on that front in the future.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Aleksander on January 18, 2014, 01:07:52 pm
My plan was to mount this on a stabilised camera gimbal, I currently have a Sony NEX5 on it (video of it here: http://youtu.be/WYpcbq3oqEg (http://youtu.be/WYpcbq3oqEg)) 
So the current plan is to mount a cut down (removed handle and battery) E4 with E8 firmware on the gimbal and have a RasPi up in the air, and maybe input a RC-servo signal or more to the RasPi to control the camera, I might connect directly to the buttons on the E4 to control it from the ground, time will tell.

I liked the idea about replacing the LCD with a DAC, so I might have to look into that option..
So I basically want to use the E4 just to get a <$1000 core with 320x240 resolution.
If using USB only gives 9fps, what FPS does the camera feed to the LCD?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 18, 2014, 01:31:04 pm
The other thing to consider is the lens on the E4 is probably rather wide to be useful on an aerial platform.

For something small & light, the FlirOne may be worth waiting for, as that may solve all your requirements in one go
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 18, 2014, 01:34:32 pm
My plan was to mount this on a stabilised camera gimbal, I currently have a Sony NEX5 on it (video of it here: http://youtu.be/WYpcbq3oqEg (http://youtu.be/WYpcbq3oqEg)) 
So the current plan is to mount a cut down (removed handle and battery) E4 with E8 firmware on the gimbal and have a RasPi up in the air, and maybe input a RC-servo signal or more to the RasPi to control the camera, I might connect directly to the buttons on the E4 to control it from the ground, time will tell.

I liked the idea about replacing the LCD with a DAC, so I might have to look into that option..
So I basically want to use the E4 just to get a <$1000 core with 320x240 resolution.
If using USB only gives 9fps, what FPS does the camera feed to the LCD?
Haven't checked but 60hz is a common LCD refresh rate, but as it's only 320 wide, the line rate is probably too slow to easily get it to composite without some messing. If you can get some custom code running, it may be able to tweak the LCD timings on the MCU, but at best you'd probably end up with a rather squished image.
 I think the visible cam feed has a higher framerate then the 9Hz thermal.
For visual use (i.e. no measurement) it may not be too hard to process the raw sensor stream into something useable with a small FPGA, though you'll probably need at least a frame buffer, both for scan conversion and flat-field correction.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Aleksander on January 18, 2014, 01:44:28 pm
Ok, thanks for all the advice so far.
I think I need to plan this out some more, the extra cost of an alternative module might be worth it after all...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 18, 2014, 02:36:43 pm
@Aleksander,

Have you considered buying a used fire fighting thermal camera ? I bought several for prices between GBP30 ($45) and GBP200 ($300). Most need some TLC due to a hard life but the good points are that they are often just a small aluminium chassis inside a larger heat and water proof case  :)  I have several ISG Talisman Wasps that are built in this way. Once you remove the bulky case and non essential parts they come down to the compact BST head and a couple  of small PCB's. Now the really good news...non tube based Fire fighting cameras are usually at least 320x240 resolution with 30 or 60 fps refresh rate  :scared:  They usually have decent Germanium optics as well ! 

As a bonus, most have both internal video displays AND composite video output on an external socket. The Talisman series and many others also offer an option for a 1.3GHz or 2.4GHz long range video transmitter for communication back to a command and control centre at an incident. I have not checked to see if that option is fitted in my units but it is easily added anyway. My Talisman Wasps also include a X2 electronic zoom function activated by a simple button press.

The joy of fire fighting thermal cameras is that they are well designed with fully automatic operation and most of the features needed for a Drone deployment  ;)

Have a look at your local auction sites and see if you can find yourself a bargain. Be careful buying off eb*y as some of the fire fighter cameras sell for silly prices and if they do not work you take a risk of wasting your money. I repair them for fun so that issue was not a problem for me. You may wish to ensure the camera actually works before buying. Avoid a Pyro Vidicon based camera like the EEV ARGUS 1 (Yellow Case) as its internals are too bulky and sensitivity is lower than the later BST based cameras such as the ARGUS 2 (Black case) Even the ARGIS 2 is a little bulky inside. Look for an ISG Talisman Wasp or Elite if you can finds one. Avoid the pyro Vidicon standard Talisman for the same reasons as the ARGUS 1.

Final comment... most of the 320x24 pixel 30 and 60 fps fire fighter cameras are subject to ITAR regulations so be careful if trying to export out of the USA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dekker on January 18, 2014, 04:06:28 pm
Long time lurker, read about all posts in this thread.

Noticed talk about wifi/bluetooth which I wouid love so I can share what I found the other day just browsing through my backup files I took before applying the hack.

from: FlashFS/system/services.d/config.d/conf.cfg
Code: [Select]
.caps entry
.caps.config entry
.caps.config.name text "srvs E4"
.caps.config.revision text "1.0"
.caps.config.wlan entry
.caps.config.wlan.enabled bool false
.caps.config.bluetooth entry
.caps.config.bluetooth.enabled bool false
# ID 639XXXXX
# CRC01 XXXXXXXX

could that be the settings for appcore to load the drivers for wlan/bluetooth?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 18, 2014, 06:43:11 pm
Thank to all the FLIR E4 has been working great ! I wonder now if the same can be done with the E40 to update the firmware to have the options installed of the FLIR E60 !!!

Has there been any such postings or updates!

Best Regards to All
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 18, 2014, 06:55:25 pm
Somebody had to do it. 360 degree panorama:
http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html (http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html)
(Worlds first?)

You can choose flash or devalvr viewer in the pulldown menu at right bottom, and I highly recommend devalvr if you have windows, although it requires a small plugin (very easy to install).
Fullscreen is best of course (with devalvr). You can zoom with the mouse wheel.

It consists of 126 stitched images, and since it was a pain in the *** to do I wish in retrospective I had chosen a more more intresting subject, but I think it turned out ok anyway.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calle on January 18, 2014, 07:14:02 pm
Somebody had to do it. 360 degree panorama:
http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html (http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html)
(Worlds first?)

You can choose flash or devalvr viewer in the pulldown menu at right bottom, and I highly recommend devalvr if you have windows, although it requires a small plugin (very easy to install).
Fullscreen is best of course (with devalvr). You can zoom with the mouse wheel.

It consists of 126 stitched images, and since it was a pain in the *** to do I wish in retrospective I had chosen a more more intresting subject, but I think it turned out ok anyway.

mighty cool!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 07:33:02 pm
Using a OTG cable that has an extra cable for an external power source would overcome the problem of having no 5v on the cameras micro usb,to power a usb WIFI dongle, wouldn't it? Would just mean having to strap a little 5v battery power pack to the camera.
I am going to try exactly what you are talking about...
I ordered a battery pack (POWER BANK ROSEWILL RCBR-13001) from the egg (they are giving a $6 promo this month) and am going to fab a data cable from the battery to the E4 (since I doubt the data lines are used in the battery), and break out the +5 going back to the "output" port that will go to my laptop... similar to the cable you have a picture of.
We'll see!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 07:44:17 pm
Somebody had to do it. 360 degree panorama:
http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html (http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html)
(Worlds first?)

You can choose flash or devalvr viewer in the pulldown menu at right bottom, and I highly recommend devalvr if you have windows, although it requires a small plugin (very easy to install).
Fullscreen is best of course (with devalvr). You can zoom with the mouse wheel.

It consists of 126 stitched images, and since it was a pain in the *** to do I wish in retrospective I had chosen a more more intresting subject, but I think it turned out ok anyway.
VERY nice!!!  You can even see the path that people have walked.
What time of day was this?  Is the dark area where the foot prints are, grass?
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 18, 2014, 07:55:28 pm
Somebody had to do it. 360 degree panorama:
http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html (http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html)
(Worlds first?)

You can choose flash or devalvr viewer in the pulldown menu at right bottom, and I highly recommend devalvr if you have windows, although it requires a small plugin (very easy to install).
Fullscreen is best of course (with devalvr). You can zoom with the mouse wheel.

It consists of 126 stitched images, and since it was a pain in the *** to do I wish in retrospective I had chosen a more more intresting subject, but I think it turned out ok anyway.
VERY nice!!!  You can even see the path that people have walked.
What time of day was this?  Is the dark area where the foot prints are, grass?
Thanks!
It was in the middle of the day. It was cold (-10 degrees Celsius) and the ground was covered in new snow. That's why you can see the foot prints because the ground is warmer than the snow. The brick walls nearby are also warm. Just a day ago it was +5 degrees C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on January 18, 2014, 08:05:07 pm
It was in the middle of the day. It was cold (-10 degrees Celsius) and the ground was covered in new snow. That's why you can see the foot prints because the ground is warmer than the snow. The brick walls nearby are also warm. Just a day ago it was +5 degrees C.
Here is a part of the panorama in normal light:

http://www.lysator.liu.se/~john/visible.jpg (http://www.lysator.liu.se/~john/visible.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 18, 2014, 08:46:14 pm
Somebody had to do it. 360 degree panorama:
http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html (http://www.lysator.liu.se/~john/qtvr/irpano/irpano.html)
(Worlds first?)

You can choose flash or devalvr viewer in the pulldown menu at right bottom, and I highly recommend devalvr if you have windows, although it requires a small plugin (very easy to install).
Fullscreen is best of course (with devalvr). You can zoom with the mouse wheel.

It consists of 126 stitched images, and since it was a pain in the *** to do I wish in retrospective I had chosen a more more intresting subject, but I think it turned out ok anyway.
VERY nice!!!  You can even see the path that people have walked.
What time of day was this?  Is the dark area where the foot prints are, grass?
Thanks!
It was in the middle of the day. It was cold (-10 degrees Celsius) and the ground was covered in new snow. That's why you can see the foot prints because the ground is warmer than the snow. The brick walls nearby are also warm. Just a day ago it was +5 degrees C.
Well... BBRRRRRR!!!!
Oh really??? +5C!  a REAL heat wave!  ha!
Thanks for posting!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fairuse on January 18, 2014, 11:59:08 pm
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
The Flir models that have WiFi (teardown anyone?) will most likely use an internal module, probably on a UART or SPI interface, though could be USB.
AIUI USB wifi dongles tend to rely heavily on software running on the host, so again unlikely and if it did have support, chances are it would only be for a specific chipset.

Thank to all the FLIR E4 has been working great ! I wonder now if the same can be done with the E40 to update the firmware to have the options installed of the FLIR E60 !!!

Has there been any such postings or updates!

Best Regards to All

I'm interested in the possibility of turning the E40 into a E60 with firmware hack too. I'm guessing the hack isn't too much different than the hacking a E4 into a E8.

I'll be in possession of a E40 pretty soon, and I'm willing to do a tear down. I don't really have much in terms of equipment to do direct signal readings or ripping out IC chips. Best I could probably do is just upload detail pictures of the expose PCB and hopefully the IC labels are clear.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 19, 2014, 12:05:00 am
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
The Flir models that have WiFi (teardown anyone?) will most likely use an internal module, probably on a UART or SPI interface, though could be USB.
AIUI USB wifi dongles tend to rely heavily on software running on the host, so again unlikely and if it did have support, chances are it would only be for a specific chipset.

Thank to all the FLIR E4 has been working great ! I wonder now if the same can be done with the E40 to update the firmware to have the options installed of the FLIR E60 !!!

Has there been any such postings or updates!

Best Regards to All

I'm interested in the possibility of turning the E40 into a E60 with firmware hack too. I'm guessing the hack isn't too much different than the hacking a E4 into a E8.

I'll be in possession of a E40 pretty soon, and I'm willing to do a tear down. I don't really have much in terms of equipment to do direct signal readings or ripping out IC chips. Best I could probably do is just upload detail pictures of the expose PCB and hopefully the IC labels are clear.
I'd be pretty surprised if it wasn't possible to hack the Ex0 in a very similar way.
It will certainly be very interesting to compare the internals.
Looking at the specs, the E40,50 and 60 look like the same hardware, but E30 looks like it's  missing the wireless & other hardware
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 19, 2014, 03:27:47 am
...
No. USB via UVC is the only simple way. Hardware conversion from LCD interface wouldn't be too hard though - strap a video DAC on a board plugged into the LCD connector. Just need to check that framerate is something sensible, and maybe need to deal with the 320x240 timings - worst case you'd need a small FPGA to do a simple scan-rate conversion.
And there is the 60fps raw sensor datastream if you're feeling adventurous. Main issue with this is you need to do all the calibration, scaling, noise filtering etc. yourself
Quote

would I be able to adjust some of the settings via the USB? switching between FLIR, normal camera and MSX is the most useful I can think of right now.
Probably - you can certainly generate keystrokes via the console (either vis USB/RNDIS or the UART on the internal connector), there may also be an rset command to select image mode
@Changing mode via USB/Rset -> definately possible and pretty easy - just compare recursive rls output before and after switching :)

.caps.config.ui.fusion.enabled would be one of my first tries

btw...
rset .caps.config.ui.mode.enabled true
rset: not supported

Any ideas on that one - adding it to the e8 config (.caps.config.ui.mode.enabled bool true) doesn't seem to do the job  :-//

EDIT: selected stuff that's changing when switching MSX to IR:

.image.state.current = "FUSION" or "HCF" or "FREEZE" --> "LIVE"
.image.sysimgInstances.main.fusion.fusionMode = 3 --> 1
.ui.state.fusionMode = "HCF" --> "ZOOM"

.image.framegrab.fusion.cmd               "STATE_FREEZE"  -> "GRAB_LIVE"
Note: .image.services.nuc.commit = true ... while dumping MSX... so likely the above is related to NUC



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on January 19, 2014, 08:34:41 am
@tauncher
 I read some pages on the wifi link, from what I understand,  they were talking about fitting a wifi chip inside, which something I wouldnt want to attempt myself.
 Is it possible for the E4 to recognise and use a usb wifi dongle?
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.

Its somewhat easy to check
http://blog.binaryninjas.org/?p=116 (http://blog.binaryninjas.org/?p=116)
This emulates devices connected over USB and checks host response = gives you a list of devices host knows how to enumerate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 19, 2014, 10:28:39 pm
For those who are interested in BFIC application, which can do what Flir Tools cant... New version is out.
This is last echo about new version, since this version will notify you about new version, when you are online.

Whats new ? More palettes to use, faster conversion and interactive editor ! Under development of course :)

You can download on link at footnote bellow. Make copy of your old version in case something will go wrong with new one !

Feel free to comment, share, use ... give ideas ... send me bugs => PM me or email me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on January 20, 2014, 05:17:07 am
For those who are interested in BFIC application, which can do what Flir Tools cant... New version is out.

Getting corrupted image output.

Win7 x64

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=77617;image]https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=77617;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on January 20, 2014, 06:52:52 am
Looks like a width mismatch
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 20, 2014, 09:37:25 am
Thank to all the FLIR E4 has been working great ! I wonder now if the same can be done with the E40 to update the firmware to have the options installed of the FLIR E60 !!!

Has there been any such postings or updates!

Best Regards to All

thats all config files for an old Flir E40 (Version 1, 2012)

\appcore.d\config.d\conf.cfg
Code: [Select]
#
# Generated at 2010-11-12 13:25:47
#
.caps entry
.caps.config entry
.caps.config.name text "E40+"
.caps.config.revision text "0.31"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.downsample bool false
.caps.config.image.settings.resIR int32 320
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 4
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
# ID xxxxxxxxxx

and
ui.d\config.d\conf.cfg
Code: [Select]
#
# Generated at 2011-04-28 17:34:36
#
.caps entry
.caps.config entry
.caps.config.name text "GUI E40"
.caps.config.revision text "0.10"
.caps.config.IIG entry
.caps.config.IIG.enabled bool true
.caps.config.IIG.DC int32 1
.caps.config.IIG.IR int32 1
.caps.config.IIG.canvasSketches int32 0
.caps.config.IIG.IRImageSketch bool false
.caps.config.IIG.DCImageSketch bool false
.caps.config.IIG.textAnnotations int32 1
.caps.config.IIG.videos int32 1
.caps.config.IIG.voiceAnnotations int32 1
.caps.config.IIG.objects int32 5
.caps.config.image entry
.caps.config.image.enabled bool true
.caps.config.image.adjust entry
.caps.config.image.adjust.enabled bool true
.caps.config.image.adjust.auto bool true
.caps.config.image.adjust.interval bool true
.caps.config.image.adjust.above bool false
.caps.config.image.adjust.below bool false
.caps.config.fusion entry
.caps.config.fusion.enabled bool true
.caps.config.fusion.thermal entry
.caps.config.fusion.thermal.enabled bool true
.caps.config.fusion.thermal.auto bool true
.caps.config.fusion.thermal.interval bool true
.caps.config.fusion.thermal.above bool true
.caps.config.fusion.thermal.below bool true
.caps.config.fusion.PIP entry
.caps.config.fusion.PIP.enabled bool true
.caps.config.fusion.PIP.locked bool false
.caps.config.laser entry
.caps.config.laser.enabled bool true
.caps.config.laser.positionMarker bool true
.caps.config.measure entry
.caps.config.measure.enabled bool true
.caps.config.measure.emissivityTable entry
.caps.config.measure.emissivityTable.enabled bool true
.caps.config.measure.externWindow entry
.caps.config.measure.externWindow.enabled bool true
.caps.config.measure.localObjectParams entry
.caps.config.measure.localObjectParams.enabled bool false
.caps.config.measure.screening entry
.caps.config.measure.screening.enabled bool false
.caps.config.mode entry
.caps.config.mode.enabled bool true
.caps.config.mode.program bool false
.caps.config.mode.panorama bool false
.caps.config.mode.video bool true
.caps.config.mode.radiometricVideo bool false
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.presets bool false
.caps.config.save entry
.caps.config.save.enabled bool true
.caps.config.save.simultaneous bool true
.caps.config.save.fastShoot bool false
.caps.config.report entry
.caps.config.report.enable bool true
.caps.config.report.createPdf bool true
# ID xxxxxxx

!!!!!!!!!!!!!!!!!!!!!
Remember that (AIUI) all config files in a folder are scanned, in alpjhabetical order so if you find somewhere that a setting appears to be set, you should be able to override it by adding another rsc file with a later alphabetical name. Remember that RSC files need to have a correct CRC32.

test your config with
Code: [Select]
\FlashFS\system\restartapp.bat
make a backup  :phew: :phew:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 20, 2014, 05:50:39 pm
@tomas123

Thank you for your posting, now I will start looking for a good price on the FLIR E40.

The config all looks very standard ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 20, 2014, 06:44:03 pm
Quick question about the configuration files variables.
I assume that ".image" has to do with image information and ".ui" has to do with user interface... what does ".caps" refer to?  capability?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 20, 2014, 08:15:34 pm
Does any one know ifthe E4 LCD display has any protective cover in front of it?  If you get a scratch/mark on the display, is it actually on the LCD ?
I tried wiping of some finger prints this morning with a tissue, and its left some light scratches on the display, only noticeable at certain angles, and doesn't show with the screen on.But I hate any marks on displays, especially as its been less than a week that I've had the E4.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 20, 2014, 08:42:38 pm
Just to protect the lcd, I cut a piece of plastic food wrap and smoothed it on the display.  It keep the fingerprints off and is easy to replace.
It is kind of a pain to smooth out so there aren't any wrinkles, but if you are careful it will smooth out rather nicely.
I think the lcd panel is what you are touching/scratching and there isn't a separate film or window that can be replaced... no sure, but looking at Mike's teardown video, it doesn't appear to have an extra layer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 20, 2014, 08:47:51 pm
The LCD lives behind the display trim that has E4 marked on it. That is a plastic panel that will prevent impact damage to the actual LCD panel but polishing scratches off of a clear plastic 'window' can be challenging if you want it 'perfect' again. I have done quite a lot of plastic polishing and you can end up with 'spider' swirl effects that are very tiny scratches. Unless the scratches are serious, it may be best to leave well alone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 20, 2014, 08:57:04 pm
@Aurora... so there is a seperate plastic sheet that is not attached to the lcd?  That would be fairly easy to replace with a thin sheet of plexiglas if it was damaged!
Just the process of getting the plate off without a drastic teardown.... will have to investigate.
Thanks!
I agree.... it would be best to NOT try and "clean" the panel as it will scratch further.  I did try a little cleaning and it did start to scratch.. that is why I used a piece of plastic wrap after I cleaned it as best I could.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 20, 2014, 08:58:22 pm
Another thought.... may try cutting a thin piece of glass... very easy to clean and alot more scratch resistant.  Just mounting it may be a challenge, but we ALL like challenges!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on January 20, 2014, 09:05:30 pm
Why not just use an iPhone screen protector and put that on?

Since iPhone screen is larger than E4, cutting the screen protector in half will provide a spare as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 20, 2014, 09:10:54 pm
That would be alot easier than glass/plexiglass!
And ALOT easier to replace.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 20, 2014, 09:35:21 pm
+1 for the screen protector idea. I bought a pair of thick screen protectors that have a slightly matte surface, for my Tom Tom Go classic. That was many years ago and it is still in great shape. Very robust. The clever thong was that, unlike some cheaper types, the screen protector has a gel like adhesive that does not actually glue to the original screen. It was a very clever 'adhesive' layer that could be peeled off, washed and refitted ! The other clever feature was that the 'adhesive' actually fills any small scratches on the original surface and they disappear from view.

Other screen protectors that I have seen use either 'real' adhesive or just the 'stiction' of the film to the screen surface.

I regret that the source of my screen protectors is lost to time but some sellers may state the adhesion method. Just thinking about it, my screen protectors may have come from Expansys.com.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: andy1read on January 20, 2014, 09:40:13 pm
Whats annoying, is that I was intending to cut down a phone screen protector,for the display,  for when I start using it properly at work, only been using it at home at the moment. Didnt expect it to be so delicate.
  I do have to look quite hard to see the marks, and maybe with a screen protector they will show even less. But it will probably still bug me, because I know the scratches are still there.
 I like to try and keep my tools in an, as new condition as long as possible.
 Its good to know there is something in front of the display. I might contact Flir to see if they can supply the part. I might order the plastic cover for the E8 though  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on January 20, 2014, 09:53:49 pm
The thing about iPhone screen protectors (or any iDevice ones) is that they come in two general flavours: matte and glossy.

Matte ones are nicer but they dim the image a bit.

Glossy ones do not dim the image but there's a shininess to them and they bounce more ambient light.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 21, 2014, 07:15:12 pm

Do you know if the E4 serial number is written on the shipping box or inside the hard case?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 21, 2014, 07:31:52 pm
Do you know if the E4 serial number is written on the shipping box or inside the hard case?
I had serial number on invoice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 21, 2014, 07:37:26 pm
That's even better.  Is that the norm?
Did you check if it was written on the box as well?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 21, 2014, 07:39:19 pm
Did you check if it was written on the box as well?
Yes. It is NOT on the box. It is, sorry.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 21, 2014, 07:53:31 pm
Ok, Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 21, 2014, 07:59:52 pm
Did you check if it was written on the box as well?
Yes. It is NOT on the box.

Ok, seems this needs an intervention:
The S/N is in fact written on the white packaging box and usually also tracked by the distributors (see invoice - I bet some "not ITAR, but we'll still watch it closely" agreement).
To locate the SN on the outside box look at the narrow side - it's on the right, vertically written.

Edit: same applies to the inner, black box with photo-print quality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 21, 2014, 08:08:25 pm
Great, nice to know.   Don't know if it is true but I've heard that you can find out the camera's
firmware version by providing the serial number to Flir's website.  Can't wait to find out what
version I will receive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 21, 2014, 10:54:39 pm
Just curious.

How long did it take others to get a response from FLIR when submitting materials (web form) for the promotion? I submitted it four days ago and haven't received an email back from them. Usual or not?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 21, 2014, 10:56:55 pm
And, yes, the screen is unusually sensitive to scratches.

I wiped the screen once *gently* with a microfiber cloth and have multiple fine scratches which are cosmetic only, but annoying. Especially for an industrial quality instrument!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on January 21, 2014, 11:24:08 pm
Great, nice to know.   Don't know if it is true but I've heard that you can find out the camera's
firmware version by providing the serial number to Flir's website.  Can't wait to find out what
version I will receive.

I think you can find out firmware version by installing FLIR tools, I forgot where in the tools I saw it, but i remember it displayed it somewhere.

The S/N is in fact written on the white packaging box and usually also tracked by the distributors (see invoice - I bet some "not ITAR, but we'll still watch it closely" agreement).
To locate the SN on the outside box look at the narrow side - it's on the right, vertically written.

Edit: same applies to the inner, black box with photo-print quality.

The S/N is also written on the FLIR E4 device. Pull out the battery and you will see a sticker on the FLIR Unit saying 'S/N'.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on January 22, 2014, 06:07:01 am
On my E40, went to the web interface, went to service menu, asked for user id and passwd.

I tried what you suggested, tried various combinations with case, no luck.  But this is an E40,
not an E4.

Hope this helps.  If anybody else out there can suggest the uid and passwd, I'll try it on the E40.

Jim

I've been silently following the E4 related threads for some time. Must say, juicy information :)

I don't have an E4 (yet... -  that may change :) ) but I've tried to put together some bits of information that I've found around in this thread. IMHO the simple way to go is using the Web Interface (you can access most, if not all, camera settings from there - including a special Service Menu) - all menus conveniently listed in FlashBFS/system/web/ and sub-folders

..and if you send a <space> to the UART during boot....
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack


As Mike said, if 7) is changed to USB RNDIS (and may be that IP address and subnet mask also need to be set manually and DHCP disabled - if the PC doesn't assign them automatically over USB), the web service can be accessed.

Now, as for the A310 FLIR (the attached PDF with Technical Notes), it must be password protected, but I see that the password is already known: webpasswd "IRCAM"

Therefore (stating the obvious) the login info should be:
Username: flir
Password: IRCAM

Could someone try this?

P.S. With the risk of being Cpt. Obvious, I just want to be involved in this and help if I can do so ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mborotnguy on January 22, 2014, 06:40:30 am
Thank you all for putting this info together.  I got my E4 today and applied the resolution hack and the menu hack within an hour.  It is FREAKING awesome.  The instructions were easy to follow and concise. 

Flir E4
Calibration Date: Dec 13, 2013

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on January 22, 2014, 06:47:12 am
Mike:

Fyi, on the e40, using the windoze ftp client, via the wi-fi connection, not hardwire, the uid of flir and pw of 3vlig works ok.
The www interface for the service menu uses the same uid and passwd as ftp.  Some of the service menues want a password,
3vlig doesn't work on them.  Also, nothing in my service menu about resolution, but lots of other adjustments.

Jim

Correction : FTP login flir / 3vlig does work, but not on all FTP clients - Windows command line FTP works, FTPsurfer doesn't

BTW flir/IRCAM doesn't work on web interface
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 22, 2014, 07:00:42 am
caudex thanks for the info.

Does anybody have handy the dimensions of that "industrial" lcd display...  ?    :)
I am ordering a screen protector as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: twjtwj on January 22, 2014, 02:58:48 pm
I ordered mine last week from TEquipment.Net and it was scheduled to ship today. However, they just updated the ship date to Feb. 19 now.

Ugh..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 22, 2014, 03:10:20 pm
Same here !   >:D
Before I placed the order with tequipment I specifically asked for a shipping time and they told me
"Lead time 1 week"...

valuetesters.com already knew that and they told me from the beginning that they are on a 4-5 week
backorder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: twjtwj on January 22, 2014, 03:13:31 pm
This isn't the only time I've had this false ship date from TEquipment.net. Perhaps they use this just to hold onto your order? I'm starting to lose my faith with them.  I'm cancelling and going elsewhere, even if it's back-ordered other places too. At least they are honest about it.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 22, 2014, 03:19:37 pm
Exactly!

They have also made it extremely difficult for me to make the credit card payment
and they have already reserved the amount from my account before shipping...
(final charge upon shipping).  Finally while they advertise free shipping on orders
over $99, they charged me $15 ground shipping and they are not telling me why...

I am very close to cancelling my order!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: QuadESL63 on January 22, 2014, 03:23:48 pm
Maybe it helps if you know that in the Netherlands we pay 1200 Euros for the E4.... (about US$ 1630).
And no soft-case or any other extras are included!

Jac
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 22, 2014, 03:26:49 pm
Maybe it helps if you know that in the Netherlands we pay 1200 Euros for the E4.... (about US$ 1630).
And no soft-case or any other extras are included!
In all Europe - I think price is not going under 1300$ without any extras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 22, 2014, 05:13:46 pm
Maybe it helps if you know that in the Netherlands we pay 1200 Euros for the E4.... (about US$ 1630).
And no soft-case or any other extras are included!
In all Europe - I think price is not going under 1300$ without any extras.

Not if you have someone in the U.S. order it for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 22, 2014, 05:25:21 pm
Can anybody report the actual dimensions of the E4 screen?
Thanks.

It has a 3" diagonal and from the internet photos I measure a 4:3 screen ratio,
which means that its dimensions are most probably 2.4" x 1.8" inches.

If someone can confirm it, that would be great.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 22, 2014, 06:33:00 pm
Can anybody report the actual dimensions of the E4 screen?
6x7cm would be fine to cut exact shape.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yohann on January 22, 2014, 06:50:28 pm
Hello everyone, Ive been reading since the first post happened and have been following as a guest on and off for a few months to catch up on what is the best
thread I have ever followed in my life.

I bought an E5 back when they came out and shortly after stumbled upon Mikes review. Well like most of you, got fiddling with my new instrument and since then cannot put it down.

I have a few questions about the hacks

I have used other FLIRs to inspect asphalt paving at work and created reports with them no problem.
I guess this is where my main question is: Since I first did the E8.cfg hack, the images I import have a misalignment with the 2 bit layers of the image. As in when I try to see what a temperature is on the image of say a hot pipe, the report software says that the hot spot is lower (about 40 pixels lower).
Now this happens in FlirReport, FlirTools, you name it.

Heres a Picture of a water heaters hot pipes so you can try to see if its my computer or if its the camera. See if everything matches up.
The camera works fine = hotspots match up with hot stuff and cold with cold etc... just that it doesnt work when I want to make a report on my computer. I can fiddle around and eventually find it but its not there where it should be.

I still would like to thank Mikeselectricstuff and Taucher for making me really really enjoying my purchase. 120x90 wasnt too bad for 1595$CAN but I always wanted to buy another camera later... not needed anymore. (oops sory FLIR)

Sorry for the long post but also had another question about the Flirlogo. If there was a way to have it like a faint faint watermark on there of another logo of my choice?



Sincerely, Yohann

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 22, 2014, 07:31:44 pm
I have used other FLIRs to inspect asphalt paving at work and created reports with them no problem.

Could you share one (or part) of those reports? I am curious how you make these reports in different countries, a friend of mine would find this data very usefu.
thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yohann on January 22, 2014, 07:42:15 pm
I have used other FLIRs to inspect asphalt paving at work and created reports with them no problem.

Could you share one (or part) of those reports? I am curious how you make these reports in different countries, a friend of mine would find this data very usefu.
thank you

Id have to make a fake report from scratch because we have client privacy issues in Québec Construction (see: commission Charbonneau) and Id probably get shot for it lol
If I can find a Digital copy of the form ill send one to you.

I had also another question with My setup.
Why are the image numbers keep going up and up and up? I had this problem with an old Kodak DC50

Thanks, Yohann
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 22, 2014, 09:20:19 pm
@yohann,

I just used your image to make a report using FLIR Tools and all appeared to behave normally. I could place the temperature measurement cross hairs on a target area and the correct temperature was displayed. I was able to make it into a report and the measurements remained correct. It would be worth trying another computer to make some reports and see whether you still get the same problem. I am using an E4 enhanced to the E8 configuration and a Sony Vaio netbook running the Tools software.

A Tools report using your image is attached. EDIT:  I have removed this file as Yohann no longer needs it and it contains his cameras full serial number which he may wish to protect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 22, 2014, 09:36:04 pm
Hey Yohann!

I can confirm what Aurora just reported, nothing seems wrong here also.
The measuring area places the hot spot on the "bright white spot" of that area and if I place a measuring spot to match up with the tip of the hot spot arrow, they both show the exact same temperature. Attached is a screenshot to make it more clear.

Is this what you meant?

EDIT: Removed the last three digits of the camera serial number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yohann on January 22, 2014, 09:50:50 pm
Great but not so great news! Yes thats what im talking about, the actual analyzing part. being off.
Thanks @Aurora @stefbeer

I just remembered I cant even check with FlirQuickreport, all the Analyze Tools are greyed out. hmmm what is going on here.
At least its not the camera... hmmm I Wonder If I loaded pics taken with the work FLIR.... and yeppers same thing.
I did reinstall the Flir programs before I installed Beta3, I dont know of any other software thats free to try and analyse my pics.

Should I reinstall again as I recall the alignment being off in a different location (consistantly) before I hacked the menu.

Also I would like to know when I add zoom by changing the e8.cfg file, do I have to do the command prompt thingy with the file and send it in with Filezilla?

Many, many thanks ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yohann on January 22, 2014, 10:13:32 pm
Thanks again for the help, ive read somewhere you have to add to the xml file for the menu 2x 4x 6x 8x. Do I have to do that as well?

Reinstalled everything, no dice... hmm Wonder why flirquickreport is still greying out the analyse part (I get rotate pic though)


Yohann
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 22, 2014, 10:36:13 pm
@Yohann,

Did you uninstall the camera drivers from the computer ? This is more likely to be driver related as different software's produce the same issue. Attempt complete removal of the FLIR driver and download a fresh copy from FLIR's website to install.

The worst case scenario is an incompatibility in your computers software build that causes issues with the FLIR driver.

Good luck
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 22, 2014, 11:40:31 pm
@Yohann,

I have removed the report that I produced using your image as it contained your full serial number. I was not sure whether you would be concerned about its presence here. Please note that your E5( 8 ) image metadata contains your cameras full serial number. I am not too fussed about serial number release, but I know some people are worried about warranty complications.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on January 23, 2014, 02:37:27 am
 Guys.. anyone who has this on back order with us.. its going to ship next week...

Flir missed a few order dates then I got a shipment moved up.  Thanks for the business!
Evan
TEquipment.NET

BTW  free shipping is on web pricing.. we charge a small fee when we quote... the net cost is better
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 23, 2014, 03:34:37 am
Guys.. anyone who has this on back order with us.. its going to ship next week...

Flir missed a few order dates then I got a shipment moved up.  Thanks for the business!
Evan
TEquipment.NET

BTW  free shipping is on web pricing.. we charge a small fee when we quote... the net cost is better

So let me ask whats on everyones mind...what the story with the firmware ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 23, 2014, 06:49:25 am
@Emptech

I haven't got my camera yet, I still following this thread and I am waiting to see the outcome of the E 40 update. I have just found this link from Flir about updating Firmware:

http://support.flir.com/DocDownload/Assets/85/English/T559689 (http://support.flir.com/DocDownload/Assets/85/English/T559689)$000.pdf

No passwords on it but shows updating via SD card or USB for all thermal cameras. Not sure if this helps - maybe Aurora, Mike or Tauchers could let up know if it is useful?


I had an E60 on loan recently. It is a superb camera and the manual focus really allows clear image.

I checked that the service mode can be entered by holding down the right hand key.

The only differences between the Exx series and the Exxbx series is the sensitivity and the temperature range. These are definitely set in firmware as the guy I loaned it from indicated that this (he knew his Flir stuff). So I think must be possible to do an upgrade to the E40, have you tried via USB or SD card?



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 23, 2014, 08:48:10 am
@Emptech
...
No passwords on it but shows updating via SD card or USB for all thermal cameras. Not sure if this helps - maybe Aurora, Mike or Tauchers could let up know if it is useful?
...
The only differences between the Exx series and the Exxbx series is the sensitivity and the temperature range. These are definitely set in firmware as the guy I loaned it from indicated that this (he knew his Flir stuff). So I think must be possible to do an upgrade to the E40, have you tried via USB or SD card?
I do recall reading some posts on E40 already... did you check this thread?

IMHO the temp-range is something hackable in the E4 as well - at least the software does already work with Kelvin internally ;)

@Mike - this could be an interesting thing to check - if you still have sensor output grabable then I'd love to know if the signal maxes out or if there's headroom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on January 23, 2014, 08:49:55 am
Hello folks,

Well, I have spent many hours reading through the 200+ pages of this topic and I am having problems installing the hack. Most likely it is due to my ignorance.

I have done the steps from page 33 including this:

"Install FLIR tools
Go to the install folder\bin
Turn camera on and plug USB in
Run FLIRInstallNet
Browse to your .fif file"

However, the first issue is Flirinstallnet.exe will not connect to the camera. It also gives an error when browsing to the .fif file of "IDS_Illegal_File"

I have checked the .fif file and it contains the dir tree and the camera.cmd files in the renamed zip.

The camera does connect to the flir tools and transfers images and the live video.


Any help would be greatly appreciated.

Regards,
Tom

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 23, 2014, 08:57:36 am
...However, the first issue is Flirinstallnet.exe will not connect to the camera. It also gives an error when browsing to the .fif file of "IDS_Illegal_File"
Any help would be greatly appreciated. ..Tom
DId you compute your CRC01?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on January 23, 2014, 09:29:42 am
What software did you use to zip the files before renaming the file to fif?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 23, 2014, 10:36:58 am
@Bovvy,

Thank you for including me in the prestigieous line up of Mike and Taucher with regard to FLIR camera enhancements. To be clear though, I have had no part in the development of any firmware related enhancements to the Ex series. I am not a coder, just a long term user of the technology in a specific application. Thanks for elevating me to inclusion along side Mike and Taucher in the same sentence though  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 23, 2014, 12:27:24 pm
IMHO the temp-range is something hackable in the E4 as well - at least the software does already work with Kelvin internally ;)

@Mike - this could be an interesting thing to check - if you still have sensor output grabable then I'd love to know if the signal maxes out or if there's headroom.

I would also like to know this.  I ran into the upper bound of the E4's range when checking if an oven heating element was on.  It just displayed ">536dF" once it passed the limit.  It would be great to be able to read into the 800 or 1000dF range.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 23, 2014, 05:31:45 pm
I think the range is limeted from ADC.

My Flir E40 has two temperature ranges.
The cam switch to the the second calibaration value set with another slope of the regression line (digit pro kelvin).

I'm not sure, whether the E40 use a additional shutter (filter) for the extended range (650°C).
There is a click sound while switching the temp. range (like NUC).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 23, 2014, 05:50:17 pm
@taucher, there was something about enhancing the Exx range but I as far as I remember the posters never returned to confirm any results.

@aurora, no problem, you have given me helpful responses and your 'useful thread' does have a link from the front page! Although I don't mean to undervalue others who have produced good work on this project!
You seem to have a selection of thermal cameras in you armoury, what do you do?

@Thomas have you looked at the E40's possibilities?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on January 23, 2014, 06:04:57 pm
...However, the first issue is Flirinstallnet.exe will not connect to the camera. It also gives an error when browsing to the .fif file of "IDS_Illegal_File"
Any help would be greatly appreciated. ..Tom
DId you compute your CRC01?

Hi Taucher,

Yes, I did the CRC per the instructions to the E8.cfg file. I have attached a copy of the .fif file with the extension changed back to .zip to permit attachment.

Do you see anything wrong with it?

Thanks for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 23, 2014, 06:21:28 pm
Hmm, interesting comment in the thread below (post 28) which i guess is from a seller. He seems to indicate that for a price, Fir can update an E40 to an E50 by sending it to the service dept.......

http://www.nachi.org/forum/f58/flir-e4-e5-e6-e8-85400/index2.html (http://www.nachi.org/forum/f58/flir-e4-e5-e6-e8-85400/index2.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on January 23, 2014, 07:12:17 pm
I am reposting this to all who are looking for the FLIR E4 , as TEQUIPMENT Hasn't received there shipment . For those who want it in one day.. GRAINGER.COM Is where I purchased my FLIR E4 in one day at full list of $995.00.  As I always purchase my toys form TEQUIPMENT.COM . 
I didn't want to wait weeks upon weeks..

Just figured I would post this and I checked the website and still In stock!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 23, 2014, 07:12:45 pm

Thanks for the info on Vikuiti CV8 screen protectors a few pages back! Looks interesting. The "repair" function seems a little contrived, but actually covering a fine scratch with a screen protector obviates the scratch and I guess that is all they are really saying. Looks to be worth a try.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on January 23, 2014, 07:58:31 pm
Yes, I did the CRC per the instructions to the E8.cfg file. I have attached a copy of the .fif file with the extension changed back to .zip to permit attachment.

Do you see anything wrong with it?


It is in 7-Zip format, not the 'plain' old standard zip format.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on January 23, 2014, 08:30:35 pm
Yes, I did the CRC per the instructions to the E8.cfg file. I have attached a copy of the .fif file with the extension changed back to .zip to permit attachment.

Do you see anything wrong with it?


It is in 7-Zip format, not the 'plain' old standard zip format.

How do I fix it? Can you advise me what needs to be done? The original directions used 7zip to make the file.

Thanks very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on January 23, 2014, 08:45:40 pm
How do I fix it? Can you advise me what needs to be done? The original directions used 7zip to make the file.

Choose zip for the archive format, not 7z where it defaults to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on January 23, 2014, 09:00:05 pm
How do I fix it? Can you advise me what needs to be done? The original directions used 7zip to make the file.

Choose zip for the archive format, not 7z where it defaults to.

That was it. Wow, thanks so much for the help. It works fine.

Best regards,
Tom
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 23, 2014, 09:07:54 pm
Reference temperature ranges and the possibility of filters/attenuators etc.

My industrial PM5xx and 6xx cameras have two temperature ranges plus the option of a third

Range 1 covers -40C to +120C
Range 2 covers  +80C to +500C
Range 3 covers  +500 to +1500C or +2000C depending on fitted filter/attenuator.         

The change between Range 1 and Range 2 initiates a full auto-recalibration cycle with the NUC shutter engaged. No additional filter or attenuator is inserted in the optical path.

Changing to Range 3 activates the mechanical insertion of a high temperature filter/attenuator to extend the measuring capability to 1500C or 2000C depending upon the filter/attenuator fitted. The camera then carries out a full auto calibration with NUC shutter activated

IIRC the additional filter/attenuator sits between the NUC shutter and the Micro-bolometer. I will upload an image of the PM series optical block so that readers may see the implementation.

Update: Image of PM570 optical block added.

In the image the parts are as follows, from left to right:

Micro-bolometer block / Hi Temp filter & mechanism / NUC shutter & mechanism / Focus Lens / Primary Lens.

The Hi Temp filter mechanism is operated by a motor via the silver disc that has a wire crossing its face. The NUC shutter is operated by a solenoid driven bell crank rotating a horizontal shaft to which the shutter is attached. Hence the loud 'Clunk' when these cameras operate the NUC. These industrial cameras are built to last in extreme conditions so are very much over engineered when compared to something like the Ex series. The NUC shutter is so much simpler in more modern consumer grade cameras ..... hence no loud 'Clunk'  :)  the focus lens is internal to the PM series cameras and controlled via a joystick and motorised linear actuator. The PM695 is the same mechanics but has a 'through the lens' auto focusing capability as well.

Finally..... the 1500C high temperature optional filter is fitted to all PM series cameras when manufactured. It is enabled through a software upgrade. An expensive mechanism to provide in every camera and then not use, but then these cameras cost a great deal of money and the activation of the Hi Temp option was an eye watering cost for just a software setting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 23, 2014, 10:32:05 pm
Thank you Aurora for taking the picture of your camera!  Very interesting how ruggedly built it is compared to the Ex's!
That alone shows the high price and ruggedness of the industrial line of Flirs!  Must add alot to the weight and power consumption also, although the motor and solenoid only operate for a short period.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on January 23, 2014, 11:05:22 pm
Mike:

Fyi, on the e40, using the windoze ftp client, via the wi-fi connection, not hardwire, the uid of flir and pw of 3vlig works ok.
The www interface for the service menu uses the same uid and passwd as ftp.  Some of the service menues want a password,
3vlig doesn't work on them.  Also, nothing in my service menu about resolution, but lots of other adjustments.

Jim

Correction : FTP login flir / 3vlig does work, but not on all FTP clients - Windows command line FTP works, FTPsurfer doesn't

BTW flir/IRCAM doesn't work on web interface




Try username: admin
Password fliradmin
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 23, 2014, 11:15:38 pm
@Pomonabill221,

The FLIR (nee AGEMA) industrial cameras have always been well made and at the forefront of the TIC industry. The case is very strong cast aluminium alloy with milling of areas within. There are two very high density PCB's inside the PM series. They run an MC68340 MCU and a dedicated video processing MCU. Superb quality and thankfully repairable due to the use of 'off the shelf' components and 'at-boot' programmed FPGA's. I would likely not be able to repair an Ex series TIC.... Progress ? Not on the user repair front.

The complete PM695 Camera with internal 13.2V 2.7Ah Ni-Mh battery weighs 2.4Kg (5.3lbs). Battery run time is around 2 Hours. A FLIR battery belt that accommodates four of the battery packs is available. I have these, and they provide nearly 8 hours of run time.

The FLIR E4 is much simpler to use and more comfortable to hold, due to its pistol grip shape and lower weight.

Regretably the E4 would not fair so well in the harsh industrial world of mining that my cameras came from. Each product has its intended application and ruggedness is the PM series middle name.

As an example - One of my PM570 series cameras suffered an unknown, but very severe accident during its working life. Having analysed the deformation to the case, it appears something heavy fell on it whilst it was tripod mounted. The underside of the case is dished in and the topside crushed down where the EVF was forced into the case topside. There is evidence of 'field repair' with a cold chisel being used to push out the top side deformation  :scared: And the camera still works perfectly as an accurate TIC ! FLIR make em tough  :)  Some day I will spend the time carefully straightening the aluminium alloy case but I am prioritising refurbishment of my other PM series cameras higher as they are in very good condition.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: maggiore on January 24, 2014, 12:32:17 am
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 24, 2014, 01:04:06 am
The only known 'issues' with the E4 relate to temperature accuracy, especially at temperatures below 0C and a possible quality issue with some LCD panels. I think we would have discovered any serious design defects by now and a safety recall, such as a battery charging issue, would have gone out to all owners, and not just a dealer. Sounds a bit extreme though as 'return to manufacturer' is in truth likely to be 'return to Estonia' !

I do not see FLIR recalling the whole series due to the user instigated enhancement issue or a minor production issue. It would be best to wait and see if the true situation comes out over the coming weeks. A change in build version should be the first evidence seen.

I somehow don't think I will be returning my E4 to FLIR any time soon  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 24, 2014, 01:08:44 am
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 24, 2014, 01:54:45 am
Once again, thank you Aurora for the explanation about the industrial series and how they are MUCH more rugged than the Ex series.
It seems like (like what you said), an Ex would NOT stand up to the use and abuse that the PM had!  WOW... a cold chisel to straighten out the display?!?!?!? I guess some heavy handed metal worker didn't really know what he was doing and used the tool that he knew about!  OUCH!

All I can say is that for what I am going to use my E4  errrr.8 for will not see this kind of abuse and use, so I don't mind that it is made for "light duty"... NOT cheaply by any means though!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 24, 2014, 06:55:46 am
Hi,

There is a promotion until the 31 of March for FLIR products.

http://www.flir.com/thermography/americas/us/view/?id=62227 (http://www.flir.com/thermography/americas/us/view/?id=62227)

Would it be enough just to fill the online form, or do you need to mail them the actual
proof of purchase?

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 24, 2014, 10:11:08 am
You need to send them a copy of the proof of purchase receipt. I sent it by snail mail. Sadly mine was declined as I bought outside the USA. I preseume they will deliver teh free item to your USA delivery address only.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 24, 2014, 10:11:16 am
Would it be enough just to fill the online form, or do you need to mail them the actual
proof of purchase?

Read the "How to Qualify for and Redeem your Promotion Offer:" part
4. Mail this ORIGINAL completed Redemption Form along with a legible copy of your original invoice (purchase order copies are not acceptable)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 24, 2014, 10:48:56 am
@pomonabill221,

It was worse than that....the chisel was used to straighten the top of the actual camera shell, not the viewfinder  :o  I can only imagine the shock waves that must have passed through the camera electronics and optical block. I am amazed that it survived the initial 'accident' and then the abuse of the person who took a 1" cold chisel to its case. He/She must have partially dismantled the camera to gain access so they were pretty brave or desperate to attempt such a 'repair' rather than returning the camera to FLIR.

The E4 is very nicely built and it is specified to survive a 2m drop which is impressive. I have no complaints about the units ruggedness for operation in a 'normal' low risk working enviroment. The metal cased cameras are for more extreme conditions, but the penalty for such is greater weight. The E4 sits in the hand so well and is so easy to use that it is now my first TIC deployed in a test and I only grab one of the PM series if 60fps or more accuracy is needed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 24, 2014, 12:19:25 pm
Hi,

There is a promotion until the 31 of March for FLIR products.

http://www.flir.com/thermography/americas/us/view/?id=62227 (http://www.flir.com/thermography/americas/us/view/?id=62227)

Would it be enough just to fill the online form, or do you need to mail them the actual
proof of purchase?

Thanks.

I got the ExTech laser distance measurer.  I had no need for it, but it's a pretty nice little tool.  The readings are suspiciously precise (inches down to 3 decimal places), but the thing is fast and its built solid.
Title: Screen protector
Post by: AlainL on January 24, 2014, 01:33:34 pm
First let me thank you all for the hack.
I bought my E4 before knowing about the hack (and nearly bought an E5 instead ... Luckily I didn't  ;) ), but I'm really happy to upgrade it for free !

I read all the posts, and decided to put a screen protector. So I searched in those I already got if one would fit.
I found the perfect one : one for Nintendo DS Lite.
It has exactly the size of the visible part of screen (black border is not covered).
The one I got is very cheap and invisible.
I bought it on dx.com (SKU: 41168)
http://dx.com/p/screen-protector-set-for-ds-lite-2-piece-set-41168 (http://dx.com/p/screen-protector-set-for-ds-lite-2-piece-set-41168)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: maggiore on January 24, 2014, 02:00:19 pm
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

Thanks JLR - I wnet ahead and canceled the order and got one from Grainger. Appreciate it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on January 24, 2014, 02:50:06 pm
Aurora, Daves & Wilheldp Thank you.

I've read the terms but I am asking because they also have the online form.
If you have to send the document by mail, why include an online form as well;...

I am going the for the Laser Meter as well.   Nice to know that it works properly!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 24, 2014, 08:14:23 pm
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

E4 just arrived from Grainger ( within 22 hours of  ordering it)

November 19 2013
Firmware  1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 24, 2014, 08:40:34 pm
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

E4 just arrived from Grainger ( within 22 hours of  ordering it)

November 19 2018
Firmware  1.19.8

Time travel FTW.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 24, 2014, 08:47:31 pm
Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

E4 just arrived from Grainger ( within 22 hours of  ordering it)

November 19 2018
Firmware  1.19.8

Time travel FTW.

Woops..............
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 24, 2014, 09:08:21 pm
@pomonabill221,

It was worse than that....the chisel was used to straighten the top of the actual camera shell, not the viewfinder  :o  I can only imagine the shock waves that must have passed through the camera electronics and optical block. I am amazed that it survived the initial 'accident' and then the abuse of the person who took a 1" cold chisel to its case. He/She must have partially dismantled the camera to gain access so they were pretty brave or desperate to attempt such a 'repair' rather than returning the camera to FLIR.

The E4 is very nicely built and it is specified to survive a 2m drop which is impressive. I have no complaints about the units ruggedness for operation in a 'normal' low risk working enviroment. The metal cased cameras are for more extreme conditions, but the penalty for such is greater weight. The E4 sits in the hand so well and is so easy to use that it is now my first TIC deployed in a test and I only grab one of the PM series if 60fps or more accuracy is needed.
Just reading that someone used something as harsh as a chisel to "repair" the case makes me CRINGE!!!
Hopefully they realized that they were dealing with a precision and expensive piece of equipment!  UGGHH!!
I guess when it comes down to time lost because of an equipment damage, desperate measures are taken... just NOT the ideal tools for the repair!  OUCH!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 24, 2014, 10:11:11 pm
Aurora, Daves & Wilheldp Thank you.

I've read the terms but I am asking because they also have the online form.
If you have to send the document by mail, why include an online form as well;...

I am going the for the Laser Meter as well.   Nice to know that it works properly!

Yes, you do have to snail mail the form and proof of purchase.  They quote 6 to 8 weeks for delivery, but I got the distance meter about 1.5 weeks after I sent the forms in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on January 25, 2014, 05:26:25 am
Does FLIR offer a tripod mount for the e4?  If they do, can somebody send a photo of it?

I had a chance to hold a tripod mount for the e40 and snapped a couple of photos of it.
I didn't like the design, I machined my own, like it much better.  It took a while since I
made it somewhat different than the one from FLIR.  I didn't keep track of the time, but
I'm sure if I made more, wouldn't take as much time.  It stays on the camera all the time,
had to cut some of the foam away in the case for it to fit.

If anybody has some good ideas on a tripod mount, I might try to make one, but I don't have
an e4 to try it on.  Ideas?

Jim

It looks like someone has seen a business opportunity in FLIR Ex series tripod mounts. See attached picture.

It was advertised on eb*y as "Flir E4 E5 E6 E8 Thermal imaging camera tripod adapter"

Looks like it uses clamp screws on the rubber handle  :scared:

I prefer the Georges80 design  :)

Sorry for small size....it was in Google's cache for eb*y.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on January 25, 2014, 06:05:14 am
I installed the trial of FLIR tools + but haven't had a chance to try it yet, 7 days to go on the trial.
Has anybody found a good price on the + version?  I've seen it out there for $300, to me, that's
too much for what I want.  Time running out, registry hack?

Jim

Flir Tools is a great software, but the panorama function is extremely bad if you have more then 4 images (multi row, correction of distortion, cross-fade)

try the free 30 day trial Tools+ (a part from Flir Tools)

here is a sample (stitched from 8 images , see my tutorial https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348715/#msg348715) )

Flir Tools+ (original size)
see the ghosts images at second columns head and the balustrade
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=73923;image)

and the same images resized and converted with the free Panorama Software MS ICE
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=71460;image)

this is a relative good result for FlirTools+ (I shoot the images with tripod)
If you have rotated images like OrBy's engine bay then FlirTools+  :--

Flir want sell cameras with large sensors and not software solutions.
The imprint of the color scale and a logo in an original E4 image with 80x60 sensor pixels is cheating
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 25, 2014, 01:19:51 pm
I provided some useful feedback to FLIR on their 'Tools' software and highlighted its inability to operate correctly on a 1024x600 screen netbook. It works but you loose the save button off the bottom of the screen. FLIR gifted me the activation key for TOOLS+ as a Thank You for taking the time to provide feedback. FLIR appear generous on the reward for feedback front (they have also gifted soft cases for hardware feedback) so I am not keen to slap them in the face by hacking their software. As I am sure you are aware...hacking the registry to overcome a demo time limit is effectively theft, but I am not your conscience and it matters not to me what you do. Be aware that FLIR Tools regularly 'phones home' and does pass data back to FLIR so any hacking of a DEMO version may be detectable  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 25, 2014, 08:01:23 pm
Bargain priced screen protectors from Sainsbury's - on sale

With regard to screen protection:

I visited Sainsbury's (UK) today and had a quick look at the mobile phone screen protectors they sell. I was pleased to find that they sell decent quality protectors. Even better news was that they are selling off the version designed for the Samsung Galaxy SII. A set of 3 screen protectors are normally GBP6 but these particular ones for the SII are now GBP1  :)  I bought 5 packs as these will be handy for protecting my meter displays as well. They appear perfect for the E4 and just need to be trimmed to the correct width.

If you are in the UK, a visit to Sainsbury's could net you a very cheap solution to the screen scratch issue that some are concerned about. Remember, you get 3 protectors in each pack for your GBP1 !

The screen protector pack contains the three protectors, each with layers that are removed from both sides during application, a soft cleaning cloth and a plastic squeegee card for removing bubbles. I believe the protector is gloss as per the E4 screen.

Look for a red pack with "protect your screen" written on it and "Fits Samsung Galaxy SII" at the bottom. Codes on the rear label are:

JDE 215852 and barcode 5 013742 182243  "3 pack screen protector"

Excellent value for money. You can buy a Universal screen protector pack in the same series. That is a larger universal protector that you cut to size before fitting. 3 in a pack for GBP6.

Hope this helps UK owners and remember, these would work well on your FLUKE, Agilent etc meters  :)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on January 25, 2014, 08:24:24 pm
Very good suggestion there, here the cheap screen protectors are under 1 GBP each, for pretty much any size. I would suggest buying the ones for large tablets and using them cut to suit, as you can get quite a few out of the sheet for a 10 inch tablet. They work well, and protect touch screens well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 26, 2014, 12:48:03 am
I have found that any screen protector (glue or static based) will mask the fine scratches you get in these type of soft plastic screens. Before glass capacitive screens were the norm for smartphones I bet a ton of people here remember the feel of grit under your stylus as a fresh scratch was being carved into your PDA's screen... |O

I just finished carving up and applying an old iPhone 4 anti glare protector. The nice thing about the matte finish on it is readability when your outside goes up and fingerprints are less noticeable so you spend less time buffing them out.  :-+
Title: Not possible ADD MENU or ANY update
Post by: Petrlib on January 26, 2014, 07:13:51 pm
Hello my friends,

I did hack couple of weeks ago and everything was OK. I also add menu 2 update with no problem..
But right now - no possible connect to my FLIR E4.

If I try connect and update fif file - Flirinstall will show Timeout connection
If I want use FTP - no chance to connect

Do you know - what could be wrong?? Last time everything was very easy...
Title: Re: Not possible ADD MENU or ANY update
Post by: mikeselectricstuff on January 26, 2014, 07:19:03 pm
Hello my friends,

I did hack couple of weeks ago and everything was OK. I also add menu 2 update with no problem..
But right now - no possible connect to my FLIR E4.

If I try connect and update fif file - Flirinstall will show Timeout connection
If I want use FTP - no chance to connect

Do you know - what could be wrong?? Last time everything was very easy...
Wrong USB mode setting?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on January 26, 2014, 07:25:26 pm
Dear Mike,

I tried everything.. And no success..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 26, 2014, 07:36:22 pm
Could be an issue with the Flir RNDIS driver at the PC end - ISTR someone else has similar issues recently
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 26, 2014, 07:37:15 pm
Can you connect in any way....i.e. to download pictures rather than upload files ? Try different USB sockets as that initiates new USB activation in the driver. Try another PC if you have one. Presume you have done a full 'battery out' reset on the E4 ?

If no joy, I would remove and re-install FLIR PC driver and try again. If that does not work I would look at the lead and socket as possible suspects. Try another USB  data lead.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on January 26, 2014, 07:47:13 pm
Yes,
I can connect and I can download pictures.. But this is all what I can do.  When I change USB mode to RNDIS or etc. no success
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 26, 2014, 07:49:59 pm
As mike suggested, uninstall and reinstall the FLIR RNDIS driver and see if it fixes the problem. Driver may have been corrupted by a Microsoft update ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on January 26, 2014, 07:56:37 pm
Thank you.. I will try and let you know...  Thank you for help..

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 26, 2014, 08:09:52 pm
Also, I have found that I need to disconnect my network cable when connecting my TIC.

  Seems kinda strange that the flir won't connect and I cannot browse (no network connectivity) but when I disconnect the flir BINGO network is back, and when I disconnect the lan cable, BINGO flir is back!

My OS is win7 64 bit, static ip on the network nic.

Why does the combination NOT work????

You might try disconnecting the cable as I have tried just disabling the NIC from windows and the tic still doesn't connect....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 26, 2014, 08:49:35 pm
Also, I have found that I need to disconnect my network cable when connecting my TIC.

  Seems kinda strange that the flir won't connect and I cannot browse (no network connectivity) but when I disconnect the flir BINGO network is back, and when I disconnect the lan cable, BINGO flir is back!

My OS is win7 64 bit, static ip on the network nic.

Why does the combination NOT work????

You might try disconnecting the cable as I have tried just disabling the NIC from windows and the tic still doesn't connect....
Probably because the flir network driver decides to be a bit uppity and messes up your routing table. You can change this behaviour by setting the metric on the flir .

Do you know where that button lives? If not I can google for an explanation. If you know, no need and I can get me some coffee.  ;D

Edit: would this explanation work for you? http://superuser.com/questions/198544/how-does-windows-7-decide-which-route-to-take-if-2-connections-to-an-internet-so (http://superuser.com/questions/198544/how-does-windows-7-decide-which-route-to-take-if-2-connections-to-an-internet-so)

That's not the pointey-clickey path I used to fix it in win7, but hey, if it works it works. :P

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 26, 2014, 08:56:28 pm
Under network adaptor settings/properties/tcpiv4/general/advanced/automatic metric (checked)?
Change this to 3 for the tic? and 1 for the nic and 2 for the wireless.  Does numerical order make a difference?
Thank you Mrflibble!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 26, 2014, 09:07:56 pm
Under network adaptor settings/properties/tcpiv4/general/advanced/automatic metric (checked)?
Change this to 3 for the tic? and 1 for the nic and 2 for the wireless.  Does numerical order make a difference?
Thank you Mrflibble!

Numerical order of metric does matter. Lowest metric gets routed first for a given path. So in the above case the nic gets treated preferentially, then the wireless and last the tic.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sosdd on January 27, 2014, 02:21:09 am
Ok, I have the advanced menu installed, and I've tried several times to install the mod for my E4. Im still getting 80x60 resolution according to the info when I view a photo.


I'm quite computer literate and have no problem connecting to the camera and think I am doing everything right.

Ive seen posts of the e8.cfg file folks have punt together, but most of them are because they are having issues. Can somebody post a completely done e8 file that has worked so I can compare?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on January 27, 2014, 06:41:54 am
Under network adaptor settings/properties/tcpiv4/general/advanced/automatic metric (checked)?
Change this to 3 for the tic? and 1 for the nic and 2 for the wireless.  Does numerical order make a difference?
Thank you Mrflibble!

Numerical order of metric does matter. Lowest metric gets routed first for a given path. So in the above case the nic gets treated preferentially, then the wireless and last the tic.
Thank you Mr Flibble!  I'll give that a try!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrolero on January 27, 2014, 08:00:08 am
Thanks for the post.  I have an order in to Grainger supposedly arriving tomorrow (ordered Jan. 22) and I read a post on some other site about the existence of a 2.0 firmware and I got worried.  I've scanned the latest pages of this thread and didn't see any 2.0.  I will, of course, post mine when it arrives.

Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

E4 just arrived from Grainger ( within 22 hours of  ordering it)

November 19 2013
Firmware  1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 27, 2014, 08:18:40 am
Ok, I have the advanced menu installed, and I've tried several times to install the mod for my E4. Im still getting 80x60 resolution according to the info when I view a photo.

I'm quite computer literate and have no problem connecting to the camera and think I am doing everything right.
Ive seen posts of the e8.cfg file folks have punt together, but most of them are because they are having issues. Can somebody post a completely done e8 file that has worked so I can compare?

Let me guess, you installed the menu hack and assumed it's standalone (yeah, advanced user... ic)
Your personal to-do list:
a) install mike's hack (e8.cfg included there, see post #1), compute CRC01, take care e8.cfg is written lowercase on the camera (sorting order)
b) enjoy already installed menu mod :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 27, 2014, 11:15:26 am
Those wishing to understand more about how their E4 works, and thermal imagers in general, may wish to download and read the following excellent document from FLIR:

http://www.flir.com/uploadedFiles/Thermography/MMC/Brochures/T559243/T559243_APAC.pdf (http://www.flir.com/uploadedFiles/Thermography/MMC/Brochures/T559243/T559243_APAC.pdf)

Nice and easy to digest and a good read.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 11:40:11 am
FLIR appear generous on the reward for feedback front (they have also gifted soft cases for hardware feedback) so I am not keen to slap them in the face by hacking their software. As I am sure you are aware...hacking the registry to overcome a demo time limit is effectively theft, but I am not your conscience and it matters not to me what you do.
What's the juridical difference between hacking a Flir E4 and a Flir trial software?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 27, 2014, 11:43:55 am
FLIR appear generous on the reward for feedback front (they have also gifted soft cases for hardware feedback) so I am not keen to slap them in the face by hacking their software. As I am sure you are aware...hacking the registry to overcome a demo time limit is effectively theft, but I am not your conscience and it matters not to me what you do.
What's the juridical difference between hacking a Flir E4 and a Flir trial software?
E4 is hardware I own.
Software is used under terms of a license.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 11:56:03 am
Software is used under terms of a license.
you are right  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 27, 2014, 12:02:36 pm
E4 Hacked ? Nah, some very clever people enabled latent functionality using public domain information and tools released by FLIR. Such activity would be considered 'tinkering' with ones own property. My industry insiders have advised me that it is NOT an illegal act and FLIR should have protected their latent features to prevent such activation. That is why I am now able to comment in this thread rearding the engancement ( I cannot assist in any 'hacking' though). Changing software to disable a DEMO time limitation and circumvent FLIR's anti piracy on-line registration process is true black hat activity and is considered theft. Such would be considered an illegal act and would potentially cause Dave issues on this forum if it were published here  ;)

I have to agree that activation of latent functionality is a grey area but I understand that it is the manufacturers responsibility to adequately take precautions against such. FLIR failed on the hardware front, but they certainly do so with their software using on-line activation  ;)

The proof of the sitaution is that no one on this forum who has enhanced their E4 is subject to legal action. The same would deinitely not be true of someone publishing or enacting a CRACK on FLIR anti-piracy protected software. Its a strange world and can be very confusing when it comes to enahancements & unlocking Vs hacking. Just look at the jailbreaking of Apple products !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrlib on January 27, 2014, 03:36:11 pm
Thank you.. I will try and let you know...  Thank you for help..

Reinstalled drivers and everything is working! Thank you for help!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on January 27, 2014, 04:08:33 pm
hi all.

This is my first message here, i'm a quite noob in the area of pro testing equipment.
I need some information which i couldn't get easily from flir website, neither i had some recent flir products so i'm asking you.
I would need a Thermal imager for a "budget" embedded project, and the E4 price would be perfect for that.
I would need to record video or images with thermal info included, can E4/hacked E4 do that?
I could attach a "single board" PC to the E4 and use flir tools to record video/pics directly on the PC memory rather than E4. Could it be done? Can i remotely control the E4 with the flir tools? (eg live view, shoot, menu navigation, etc..)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on January 27, 2014, 05:18:40 pm
Bad news, just called two different distributors in Canada.  They do not have any E4 in stock and they told me from what they currently in stocked E5 and E6 they could tell the E4 will be upgraded to the newest firmware which is not hackable. I placed an order with one of the distributor, should I canceled it ? ...........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 27, 2014, 05:20:52 pm
hi all.

This is my first message here, i'm a quite noob in the area of pro testing equipment.
I need some information which i couldn't get easily from flir website, neither i had some recent flir products so i'm asking you.
I would need a Thermal imager for a "budget" embedded project, and the E4 price would be perfect for that.
I would need to record video or images with thermal info included, can E4/hacked E4 do that?
I could attach a "single board" PC to the E4 and use flir tools to record video/pics directly on the PC memory rather than E4. Could it be done? Can i remotely control the E4 with the flir tools? (eg live view, shoot, menu navigation, etc..)
E4 enumerates as a UVC device so can record video with any app that can talk to a webcam. Someone has a recorder running on a Raspberry Pi -earlier in this thread I think (I will find & add link in frst post)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 27, 2014, 05:22:48 pm
Bad news, just called two different distributors in Canada.  They do not have any E4 in stock and they told me from what they currently in stocked E5 and E6 they could tell the E4 will be upgraded to the newest firmware which is not hackable. I placed an order with one of the distributor, should I canceled it ? ...........
We've heard this several times before. Until anyone confirms it, assume it's just a dealer trying to sell what they have in stock.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2014, 05:26:53 pm
Bad news, just called two different distributors in Canada.  They do not have any E4 in stock and they told me from what they currently in stocked E5 and E6 they could tell the E4 will be upgraded to the newest firmware which is not hackable. I placed an order with one of the distributor, should I canceled it ? ...........
We've heard this several times before. Until anyone confirms it, assume it's just a dealer trying to sell what they have in stock.
Ignore dealer. Neeext. So far all similar reports have turned out to be rather unsubstantiated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on January 27, 2014, 05:27:26 pm
Thanks Mike,
If I get a E5, is that the same instruction to "upgrade" it to E8 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 05:29:05 pm
I would need to record video or images with thermal info included, can E4/hacked E4 do that?

Do you mean a 16 bit radiometric video (16 bit un-compressed IR image linear in signal with ancillary calibration data as a *.seq file) or a colored normal video (colored with a color lookup table)?

I explained here, how to decode a 16 bit raw video without flirtools
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.0.html (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.0.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 05:34:33 pm
E4 is hardware I own.
Software is used under terms of a license.

Question: If I make a mistake and set my system date to 2017 before installing the software ;) then the software also make a mistake and give >1000 days trial time after setting the correct time.
Is this a bug or a violation of "terms of a license"?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on January 27, 2014, 05:38:37 pm
Bad news, just called two different distributors in Canada.  They do not have any E4 in stock and they told me from what they currently in stocked E5 and E6 they could tell the E4 will be upgraded to the newest firmware which is not hackable. I placed an order with one of the distributor, should I canceled it ? ...........

I was not planning to have a TIC. But after following this thread for a while, I cannot throw the idea out my head. I placed an order last week. After a week of no any follow up from the dealer, I called them today. I also called other dealer just hoping to have a different answer.  Now, I am thinking to get a E5 just in case if it not hackable, I still have a better imager. It is a really hard decision, but is that make sense ? or I should wait ?

Thanks for any suggestion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 27, 2014, 05:44:46 pm
Until there is concrete evidence, I'd take any report of a firmware fix with a grain of salt. FLIR would be shooting themselves by patching the hack because professional TIC users generally won't hack them.

If worst comes to worst, you could always return the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2014, 05:53:31 pm
Do you mean a 16 bit radiometric video (16 bit un-compressed IR image linear in signal with ancillary calibration data as a *.seq file) or a colored normal video (colored with a color lookup table)?
You mean 16-bit radiometric video on the Ex series? Or the Exx series? If Exx, yeah, I did read about that in the past. But if Ex whowhatwherehow and why did I miss the memo? :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2014, 05:54:34 pm
Question: If I make a mistake and set my system date to 2017 before installing the software ;) then the software also make a mistake and give >1000 days trial time after setting the correct time.
Is this a bug or a violation of "terms of a license"?
Let's call it an honest mistake. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on January 27, 2014, 06:00:09 pm
is there a downgrade firmware option ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 27, 2014, 06:10:51 pm
@tomas123,

Regarding date shifting.......... that is very 'old school' and is normally stopped by the DEMO software. It should log the first start date and not permit a differential in date at each start if it is negative. i.e it stores 27 Jan 2017. Then when it next starts it 'sees' 27 Jan 2014....a negative 3 year error. Same occurs for month shifting. If the DEMO software does not protect itself in this way, its is open season on it  ;) Whether date shifting breaches any software user licence will depend upon the wording of the End User licence. As I stated previously, TOOLS and TOOLS+ phone home, so that could be an issue on a demo version if it date checks with 'home' at installation, and not a local RTC.

Simpler to send FLIR a review on the TOOLS software with comments and recommendations for improvement and see if they send you a TOOLS+ activation key by way of thanks  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 27, 2014, 06:16:06 pm
is there a downgrade firmware option ?
If the purpose of an upgrade is to make it non-hackable, probably not. However until we see anything, nobody can say what will or will not be possible.
Maybe Flir are running down stock of E5/6/8 to re-launch an E8+ at E4 price - unlikely but who knows?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 06:33:54 pm
@tomas123,
 Whether date shifting breaches any software user licenec will depend upon the wording of the licence.
it was only a good old joke to show how low the security level is

Why hardware manufactures like Flir don't write terms of a license for the firmware?

As I wrote here Flir software/firmware is only low secured against hacks (in relations to the hard export limits)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370165/#msg370165 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370165/#msg370165)

Flir must save the sensor limits inside the image processing FPGA
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2014, 07:15:42 pm
Anti fall-between-the-cracks repeat. ;)

@tomas123:
Does the 16-bit radiometric video work on E4? Or was that only on the E40 and up? I recall your posts about the .seq file, but IIRC that was on your E40. But if there is some way to get 16-bit radiometric video on the E4 that would be really neat!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on January 27, 2014, 07:42:53 pm
Maybe this is a silly question, but how to check the firmware version ?  I just find a small dealer selling it, but he do not know the firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 27, 2014, 07:57:36 pm
Quick check method....... get the serial number and compare to the list I have produced in the Useful information thread. The serial number is on a label on the outside of the box.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

If the serial number is before 6391 0xxx it should have the 1.19.8 firmware or earlier  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 08:45:26 pm
Does the 16-bit radiometric video work on E4? Or was that only on the E40 and up? I recall your posts about the .seq file, but IIRC that was on your E40. But if there is some way to get 16-bit radiometric video on the E4 that would be really neat!
Yes, it was a E40. We can only get the radiometric video over usb video and not as a rtsp stream.
The USB video contains multiple "streams" and the USB "Video player" must select the stream (like a usb webcam with multiple resolutions i.e. SD/HD).
The E40 delivers two video formats: a real video with display imprints and a radiometric 16 bit stream (a Flir proprietary format)
I checked it with an USB sniffer...

a interesting flir document (page 7/8)
http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/AXXX_Control_Image_Interfaces.pdf (http://www.workswell.cz/manuals/flir/hardware/A3xx_and_A6xx_models/AXXX_Control_Image_Interfaces.pdf)



I have currently not a Flir E4 to hand.
Can somebody test a video recording with an E4 and Flir Tools+? This flir tools+ format is 16 bit radiometric (*.seq).

P.S.: I wrote here something about saving an internal seq.
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898)
Nobody answered on my post :(
Where are the nerds?
Can somebody test it with an E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sosdd on January 27, 2014, 09:28:26 pm
Ok, I have the advanced menu installed, and I've tried several times to install the mod for my E4. Im still getting 80x60 resolution according to the info when I view a photo.

I'm quite computer literate and have no problem connecting to the camera and think I am doing everything right.
Ive seen posts of the e8.cfg file folks have punt together, but most of them are because they are having issues. Can somebody post a completely done e8 file that has worked so I can compare?

Let me guess, you installed the menu hack and assumed it's standalone (yeah, advanced user... ic)
Your personal to-do list:
a) install mike's hack (e8.cfg included there, see post #1), compute CRC01, take care e8.cfg is written lowercase on the camera (sorting order)
b) enjoy already installed menu mod :)


No I did not assume that at all. In fact I attempted Mike's hack several times with no success long before I did the menu hack.  I was just hoping to see a copy of a properly configured e8.cfg file to compare with my own. I am by no means an expert but not a novice either, (and I can read).

I just cant seem to get it to work although the installation sofware says it installed successfully. I was just hoping for a little help here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on January 27, 2014, 09:40:09 pm
Ok, I have the advanced menu installed, and I've tried several times to install the mod for my E4. Im still getting 80x60 resolution according to the info when I view a photo.

I'm quite computer literate and have no problem connecting to the camera and think I am doing everything right.
Ive seen posts of the e8.cfg file folks have punt together, but most of them are because they are having issues. Can somebody post a completely done e8 file that has worked so I can compare?

Let me guess, you installed the menu hack and assumed it's standalone (yeah, advanced user... ic)
Your personal to-do list:
a) install mike's hack (e8.cfg included there, see post #1), compute CRC01, take care e8.cfg is written lowercase on the camera (sorting order)
b) enjoy already installed menu mod :)


No I did not assume that at all. In fact I attempted Mike's hack several times with no success long before I did the menu hack.  I was just hoping to see a copy of a properly configured e8.cfg file to compare with my own. I am by no means an expert but not a novice either, (and I can read).

I just cant seem to get it to work although the installation sofware says it installed successfully. I was just hoping for a little help here.

Same thing happened to me. I had a incorrect CRC01 number . If you add anything extra to E8.cfg you will get  an incorrect number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2014, 09:45:27 pm
Does the 16-bit radiometric video work on E4? Or was that only on the E40 and up? I recall your posts about the .seq file, but IIRC that was on your E40. But if there is some way to get 16-bit radiometric video on the E4 that would be really neat!
Yes, it was a E40. We can only get the radiometric video over usb video and not as a rtsp stream.
The USB video contains multiple "streams" and the USB "Video player" must select the stream (like a usb webcam with multiple resolutions i.e. SD/HD).
The E40 delivers two video formats: a real video with display imprints and a radiometric 16 bit stream (a Flir proprietary format)
I checked it with an USB sniffer...

Did you also do this check with your E4? I'm guessing no, but can't hurt to double check if I understood that correctly..

Quote
I have currently not a Flir E4 to hand.
Can somebody test a video recording with an E4 and Flir Tools+? This flir tools+ format is 16 bit radiometric (*.seq).
I just did a quick check under linux to try and access another UVC stream. And it just confirms something that I had already noticed before. The Flir implementation is rather non-compliant UVC. I mean, why stop at a non-standard RNDIS implementation when you can rape more standards. Weeeey!  :scared:

Quote
P.S.: I wrote here something about saving an internal seq.
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898)
Nobody answered on my post :(
Where are the nerds?
Can somebody test it with an E4?
Yeah, I read that in the past, but I thought it 1) only applied to the E40 at that time and 2) if not you would surely check your procedure on your E4 as well. Or is the E4 not yours, but from works or something?

At any rate, next time I happen to be in windoze I'll give video from Flirtools (flirtools+ ?) a try. Does that radiometric video feature require a license? So far I haven't really bothered all that much with flirtools, plus or otherwise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 27, 2014, 09:48:05 pm
Hey sosdd!

I was just hoping to see a copy of a properly configured e8.cfg file to compare with my own.

The e8.cfg from the latest hack info (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) (linked in the first post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)) is properly configured. Even the zoom function is already enabled in the latest version. You just have to add your serial number and calculate the correct CRC01 which you append to the e8.cfg file.
Only if the serial number of the file matches the serial number of the device and the correct CRC01 checksum confirms the integrity of the configuration file, the camera will "do as it says".

Hope this helps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2014, 10:46:12 pm
Yeah, I read that in the past, but I thought it 1) only applied to the E40 at that time and 2) if not you would surely check your procedure on your E4 as well. Or is the E4 not yours, but from works or something?

At any rate, next time I happen to be in windoze I'll give video from Flirtools (flirtools+ ?) a try. Does that radiometric video feature require a license? So far I haven't really bothered all that much with flirtools, plus or otherwise.
I can lent a E4 from friend. Privat I only use the better E40.
I had no time to test a *.seq with the E4.

You need the flir tools+ (windows?) to record a 16 bit radiometric stream.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 27, 2014, 10:50:31 pm
You need the flir tools+ (windows?) to record a 16 bit radiometric stream.

Probably only way. I was trying it under VirtualDub. It will show Flir device, connect to it. It knows that resolution is 320x240. But I could not get any video preview.
I was also trying Microsoft live movie maker. Also found flir video device, but could not connect to it. I did not tried Flir+, I am not so interested in video this time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fisher on January 27, 2014, 11:32:50 pm
Thanks for the post.  I have an order in to Grainger supposedly arriving tomorrow (ordered Jan. 22) and I read a post on some other site about the existence of a 2.0 firmware and I got worried.  I've scanned the latest pages of this thread and didn't see any 2.0.  I will, of course, post mine when it arrives.

Hoping someone may have a little more information on what appears to be a recall of sorts for the e series cameras.  I placed an order the other day for a flir e4.  I called midstate instruments today to check the status and was I informed they had to send all of the e4, e5, and e6 cameras back to the manufacturer. Cited problems with the devices. They had to be retrofitted, whatever that means. Seemed like a recent development so I thought someone here might know what exactly the issue was. And if it might be related to the hackability of the current units. Hoping not. Great blog here,  thanks in advance.

I just ordered one from Granger about 4 hours ago and was promised next day delivery. ( Thanks Nazar404 )

E4 just arrived from Grainger ( within 22 hours of  ordering it)

November 19 2013
Firmware  1.19.8

Did you receive the camera? Classic one: what firmware version is it?
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 12:17:52 am
I am a bit curious, i got my E4 running with all the addition, but it self still reports it as a E4 in camera information.
it says:
Model: E4 1.1
Serial: My Serial
Part number: 63901-0101
Software 1.19.8
Is that correct or is it suppose to report itself actually as an E8 ??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 28, 2014, 12:26:19 am
I am a bit curious, i got my E4 running with all the addition, but it self still reports it as a E4 in camera information.
it says:
Model: E4 1.1
Serial: My Serial
Part number: 63901-0101
Software 1.19.8
Is that correct or is it suppose to report itself actually as an E8 ??

No, your hardware still is  "E4 1.1", you should edit that on the EEPROM, you can find how to do that on previous post (tip, use the search box)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 12:44:26 am
I am a bit curious, i got my E4 running with all the addition, but it self still reports it as a E4 in camera information.
it says:
Model: E4 1.1
Serial: My Serial
Part number: 63901-0101
Software 1.19.8
Is that correct or is it suppose to report itself actually as an E8 ??

No, your hardware still is  "E4 1.1", you should edit that on the EEPROM, you can find how to do that on previous post (tip, use the search box)

The Funny part though is that i got 320*240 resolution and all the added menu functions.
That is why i am a bit confused now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sosdd on January 28, 2014, 12:45:35 am
Hey sosdd!

I was just hoping to see a copy of a properly configured e8.cfg file to compare with my own.

The e8.cfg from the latest hack info (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) (linked in the first post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)) is properly configured. Even the zoom function is already enabled in the latest version. You just have to add your serial number and calculate the correct CRC01 which you append to the e8.cfg file.
Only if the serial number of the file matches the serial number of the device and the correct CRC01 checksum confirms the integrity of the configuration file, the camera will "do as it says".

Hope this helps


Thats exactly what Im using, and what Im doing and it still won't work. Ive done it three times exactly as directed. I calculate the same CRC01 each time. It just doesn't work.

I guess I give up
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on January 28, 2014, 12:47:24 am
What text editor are you using?  It might be screwing up the line feed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 12:55:29 am
Is that maybe also the reason why Flir Tools+ does not enable the recording possibility. as my TIC got detected as E4 instead of an E8?
Thanks for everyone's support.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 28, 2014, 12:56:53 am
Is that maybe also the reason why Flir Tools+ does not enable the recording possibility. as my TIC got detected as E4 instead of an E8?

AFAIK recording is not an E4 vs E8 issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 01:01:01 am
Is that maybe also the reason why Flir Tools+ does not enable the recording possibility. as my TIC got detected as E4 instead of an E8?

AFAIK recording is not an E4 vs E8 issue.

Got it, so it might be that actually my FLIR tools is not properly installed or I found another bug.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 28, 2014, 01:02:01 am
Thats exactly what Im using, and what Im doing and it still won't work. Ive done it three times exactly as directed. I calculate the same CRC01 each time. It just doesn't work.
I guess I give up
suggestion: give EZCRC01 a try, ensure you do not pack your ZIP file too deep or copy the e8.conf (lowercase e) by FTP, don't forget battery-re-insert(cold boot)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 28, 2014, 01:07:16 am
Got it, so it might be that actually my FLIR tools is not properly installed or I found another bug.

Reaching a state where flir tools are not installed properly is not all that hard to do. The standard installer is not very robust I noticed. What does help, is getting the .zip (instead of the .exe), then extract it, and take a look at the "prerequisites" directory. You can then run one or more installers from that dir, depending on what failed during automatic install. That did help in my case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 01:12:52 am
Got it, so it might be that actually my FLIR tools is not properly installed or I found another bug.

Reaching a state where flir tools are not installed properly is not all that hard to do. The standard installer is not very robust I noticed. What does help, is getting the .zip (instead of the .exe), then extract it, and take a look at the "prerequisites" directory. You can then run one or more installers from that dir, depending on what failed during automatic install. That did help in my case.

Thanks a lot for your tip. So will give it a try uninstall and try to re-install with the zip file.
I am running it in a Windows XP VM, so not sure if that might be a reason too.
Will keep everyone posted if I find out something.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sosdd on January 28, 2014, 02:02:39 am
Thats exactly what Im using, and what Im doing and it still won't work. Ive done it three times exactly as directed. I calculate the same CRC01 each time. It just doesn't work.
I guess I give up
suggestion: give EZCRC01 a try, ensure you do not pack your ZIP file too deep or copy the e8.conf (lowercase e) by FTP, don't forget battery-re-insert(cold boot)

You sir are awesome. That worked like a charm.

Thank you so much
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrolero on January 28, 2014, 02:27:44 am
Received Flir E4 today from Grainger in Denver.  Took 3 business days to transfer from distribution center to the store.

Firmware:  1.19.8
Calibration Date:  January 7, 2014
S/N: 639117xx

Resolution mod successful!

A hearty thanks to Mike for posting this mod.  The availability of it definitely pushed me off the fence and caused me to buy a TIC.  Flir salesman of the year.

Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on January 28, 2014, 03:38:31 am
Received Flir E4 today from Grainger in Denver.  Took 3 business days to transfer from distribution center to the store.

Firmware:  1.19.8
Calibration Date:  January 7, 2014

Will modify it later, but looks like the firmware is the same as others so should be nbd.

A hearty thanks to Mike for posting this mod.  The availability of it definitely pushed me off the fence and caused me to buy a TIC.  Flir salesman of the year.

Would you be willing to post your partial serial number (with XX in place of last 2 or 3 numbers to hide identity) for reference on Aurora's thread? Yours is the most recent calibration date posted on here yet!
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: Petrolero on January 28, 2014, 04:24:02 am
Received Flir E4 today from Grainger in Denver.  Took 3 business days to transfer from distribution center to the store.

Firmware:  1.19.8
Calibration Date:  January 7, 2014

Will modify it later, but looks like the firmware is the same as others so should be nbd.

A hearty thanks to Mike for posting this mod.  The availability of it definitely pushed me off the fence and caused me to buy a TIC.  Flir salesman of the year.

Would you be willing to post your partial serial number (with XX in place of last 2 or 3 numbers to hide identity) for reference on Aurora's thread? Yours is the most recent calibration date posted on here yet!

Done.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 28, 2014, 06:47:02 am
Hey Tomas, you IM wizard, help me with this:

How can I convert an 8-bit PNG thermal image into a bar-shaped color lookup table? I want to steal some of the pre-release palettes that FLIR hinted at and use them in my images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 08:33:16 am
I did a factory reset on my E4 and even used FLIR's 1.18.7 FW, so it is a clean install.
After that I removed the battery and restarted the CAM.
Was on an original E4 again with all FLIR logo and so on.
Than I proceeded with the e8.cfg, which worked fine too.
After reboot the resolution came back at 320*240, but the Camera information still shows a E4 1.1
not sure if I did something wrong.

Does anyone has a 1.19.8 build Software and can pass it to me, so I can upgrade to the latest FW.
I was not able to download 1.19.8 from FLIR US.
Not sure what I do wrong, but FLIRInstalNet.exe also provides no error.

Below what FLIRInstallNet.exe is showing:

Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding flashfs/system/appcore.d/factory.d/zrndis.rsc
Camera update completed

Ok

Any one any idea???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: H.O on January 28, 2014, 08:59:09 am
Quote
After reboot the resolution came back at 320*240, but the Camera information still shows a E4 1.1
Yes, because the camera IS an E4. Apparently you CAN make it present itself as an E8 by editing the EEPROM but I don't really see the point. You've got the 320*240 resolution, you know it "behaves" like an E8, why is it important for you that it says E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 09:23:21 am
Quote
After reboot the resolution came back at 320*240, but the Camera information still shows a E4 1.1
Yes, because the camera IS an E4. Apparently you CAN make it present itself as an E8 by editing the EEPROM but I don't really see the point. You've got the 320*240 resolution, you know it "behaves" like an E8, why is it important for you that it says E8?

Actually it is not important, just wanted to be sure that I did everything right, as said it should show E8.
Thanks for your input.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: H.O on January 28, 2014, 10:16:56 am
Hi,
I might be wrong but since you've got the 320*240 resolution and it sticks thru power cycles I'm pretty sure you've done everything right related to the original hack by Mike. Where does it say that it should show E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 10:50:06 am
Actually it had been stated in couple post before.
I used the mod provided by Mike, why i try to figure out if it suppose to show or not.
Hi,
I might be wrong but since you've got the 320*240 resolution and it sticks thru power cycles I'm pretty sure you've done everything right related to the original hack by Mike. Where does it say that it should show E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 28, 2014, 01:40:42 pm
New version of BFIC available. Now you can enjoy thermal fusion and thermal opacity/transparency with your E4.

You will find download link at my footer. Any bug report or suggestions to PM or email, please.

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78824;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 02:09:32 pm
Just for everyone who is looking for the recording function with FLIR TOOLS+, I checked with FLIR and got below reply:
Recording is not possible using an E4. FLIR Tools can only display the live image from this camera model. You would need an E40 or higher to enable the recording feature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 28, 2014, 03:46:19 pm
For mac you can use ScreenFlow (select Record Video From) to record video, even if your FLIR tools doesn't detect the camera.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 04:57:40 pm
For mac you can use ScreenFlow (select Record Video From) to record video, even if your FLIR tools doesn't detect the camera.

thanks for your suggestion. will give it a try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 28, 2014, 06:35:28 pm
@tomas123:
Does the 16-bit radiometric video work on E4? Or was that only on the E40 and up? I recall your posts about the .seq file, but IIRC that was on your E40. But if there is some way to get 16-bit radiometric video on the E4 that would be really neat!

ok, I tested all known variants

FlirTools+ can connect the E40 as video or signal (signal = RAW 16 bit)
see pull-down menu on screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78866;image)
there is an corresponding E40 resources key
Code: [Select]
.caps.config.uvcstreaming: (2)
r---r--------- 0 root   root   <b> enabled                     true
r---r--------- 0 root   root   <b> radiometric16               true



FlirTools+ can connect the E4 only as video (a live view)
see screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78868;image)

but you can write with a remote command a (short) E4 raw video stream

first check current status
Code: [Select]
\>rls -r -l .image.services.rtrecord.
.image.services.rtrecord: (6)
rw--rw------1- 0 root   root   <a> action                  "RECORD"
                 ["RECORD" "PLAYBACK"]
rw--rw------1- 0 root   root   <b> active                     false
rw--rw------1- 0 root   root   <i> count                         16
                 [2, 1000]
rw--rw-------- 1 root   root   <a> filename        "\Temp\default.seq"
rw--rw------1- 0 root   root   <d> frequency                     10
                 [0.01, 60]
rw--rw------1- 0 root   root   <b> store                      false

now let's go on:
Code: [Select]
//set file name
rset .image.services.rtrecord.filename \FlashIFS\001.seq
//activate recording to memmory
rset .image.services.rtrecord.active true
//wait a moment while rcording
//now save video to flash
rset .image.services.rtrecord.store true

connect E4 as USB Drive and open the RAW video file 001.seq with Flir Tools+ and you can play the E4 RAW video
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78870;image)



more informations about the RAW video file (out of memory)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898)

how to decode the RAW video with with Exiftool (without FlirTools+)
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html?PHPSESSID=rmdb6aq89be16ms2rrhci3n9a4#msg25567 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html?PHPSESSID=rmdb6aq89be16ms2rrhci3n9a4#msg25567)



split the E4 raw video with this perl script in single frames (see link above)
Code: [Select]
#!/usr/bin/perl
undef $/;
$_ = <>;
$n = 100;
# FLIR camera E40         
$pat="\x46\x46\x46\x00\x00\x00";
# Flir Tools (comment out)
#$pat = "\x46\x46\x46\x00\x43\x41\x50";
for $content (split(/(?=$pat)/)) {
        open(OUT, ">seq" . ++$n . ".fff");
        binmode OUT;
        print OUT $content;
        close(OUT);
}

we get the 16 frames from our settings
Code: [Select]
\>rls -r -l .image.services.rtrecord.count
rw--rw------1- 0 root   root   <i> count                         16
                 [2, 1000]

exiftool list the real frame rate of the E4
Code: [Select]
>exiftool -datetime* seq*.fff
======== seq101.fff
Date/Time Original              : 2014:01:28 19:17:49.808+00:00
======== seq102.fff
Date/Time Original              : 2014:01:28 19:17:50.358+00:00
======== seq103.fff
Date/Time Original              : 2014:01:28 19:17:50.858+00:00
======== seq104.fff
Date/Time Original              : 2014:01:28 19:17:51.190+00:00
======== seq105.fff
Date/Time Original              : 2014:01:28 19:17:51.591+00:00
======== seq106.fff
Date/Time Original              : 2014:01:28 19:17:51.974+00:00
======== seq107.fff
Date/Time Original              : 2014:01:28 19:17:52.375+00:00
======== seq108.fff
Date/Time Original              : 2014:01:28 19:17:52.757+00:00
======== seq109.fff
Date/Time Original              : 2014:01:28 19:17:53.157+00:00
======== seq110.fff
Date/Time Original              : 2014:01:28 19:17:53.558+00:00
======== seq111.fff
Date/Time Original              : 2014:01:28 19:17:53.957+00:00
======== seq112.fff
Date/Time Original              : 2014:01:28 19:17:54.441+00:00
======== seq113.fff
Date/Time Original              : 2014:01:28 19:17:54.842+00:00
======== seq114.fff
Date/Time Original              : 2014:01:28 19:17:55.224+00:00
======== seq115.fff
Date/Time Original              : 2014:01:28 19:17:55.641+00:00
======== seq116.fff
Date/Time Original              : 2014:01:28 19:17:56.125+00:00
   16 image files read
result: 2,38 frames/second

see this tutorial for converting the .fff frames in colored images
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

exiftool can read the *.fff frames
Code: [Select]
>exiftool seq101.fff
ExifTool Version Number         : 9.47
...
Raw Thermal Image Width         : 320
Raw Thermal Image Height        : 240
Raw Thermal Image Type          : TIFF
Raw Thermal Image               : (Binary data 153804 bytes, use -b option to extract)

convert frames with ffmpeg in a coloured video
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 28, 2014, 06:36:45 pm
Hey Tomas, you IM wizard, help me with this:

How can I convert an 8-bit PNG thermal image into a bar-shaped color lookup table? I want to steal some of the pre-release palettes that FLIR hinted at and use them in my images.

For those wondering,

take a grayscale thermal image original.jpg

take a palette image (looks like the blended color stripe on the side of FLIR images) palette.jpg

blank output file output.jpg

type into console after installing ImageMagick

convert -clut C:\pics\original.jpg C:\pics\palette.jpg C:\pics\output.jpg
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 28, 2014, 06:40:31 pm
Hi,
I might be wrong but since you've got the 320*240 resolution and it sticks thru power cycles I'm pretty sure you've done everything right related to the original hack by Mike. Where does it say that it should show E8?

The guy may want to sell his E4 as an E8...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 28, 2014, 06:51:31 pm
Hey Tomas, you IM wizard, help me with this:

How can I convert an 8-bit PNG thermal image into a bar-shaped color lookup table? I want to steal some of the pre-release palettes that FLIR hinted at and use them in my images.
see my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348398/#msg348398 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348398/#msg348398)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 28, 2014, 07:35:32 pm
Hi,
I might be wrong but since you've got the 320*240 resolution and it sticks thru power cycles I'm pretty sure you've done everything right related to the original hack by Mike. Where does it say that it should show E8?

The guy may want to sell his E4 as an E8...
In related news: all mammals are cows! If you read the rest of his posts, I think you'll find that the main reason he's concerned about the E4 vs E8 thing is functionality of Flir Tools based on how said Flir Tools detects the camera.
Title: Re: Developing applications for the E4
Post by: tomas123 on January 28, 2014, 09:15:43 pm
@Taucher
EDIT: Also tested with PocketPC 2003 SDK - works fine too - example exe (hello world - no additional benefit) is attached.
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=74872;image)
You search a nice new menu feature?

Save a short video sequence on a E4 as I am discriped here
Code: [Select]
//set file name
rset .image.services.rtrecord.filename \FlashIFS\001.seq
//activate recording to memmory
rset .image.services.rtrecord.active true
//wait a moment while rcording
//now save video to flash
rset .image.services.rtrecord.store true

or write a fast sequence of images (while the trigger button is pressed) with this (repeated) command
Code: [Select]
store -j \FlashIFS\myfolder\0####.jpgthis needs no RAM as buffer memory and you can write about 10.000 frames until the Flash is full
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 28, 2014, 09:52:37 pm
New version of BFIC available. Now you can enjoy thermal fusion and thermal opacity/transparency with your E4.

You will find download link at my footer. Any bug report or suggestions to PM or email, please.

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78824;image)


I am really  impressed by your software, FLIR should be consider hiring you. This is, in my opinion, as useful as the hack itself, for me this E4+ is just a toy but for many people is the daily tool that potentially can be a real difference.

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 28, 2014, 10:01:51 pm
Consider making it open source!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 28, 2014, 10:08:03 pm
Consider making it open source!
Yes!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 28, 2014, 10:19:10 pm
I am really  impressed by your software, FLIR should be consider hiring you. This is, in my opinion, as useful as the hack itself, for me this E4+ is just a toy but for many people is the daily tool that potentially can be a real difference.

Thank you. For me its also just a toy. And I needed a tool to help me convert set of images. At the beginning Tomas123's flir.php was great help, because I did not know where to start.

I have plans for future development, some of them from people here - make custom layouts for report, overlay logos, enable import and colorize nonflir grayscale jpg, and so on.
I just need to balance time between this and my paid job, family and other things which need to be done too :) I expect new version by the end of this week, so keep tuned.

To be honest... Now BFIC can do much more than I expected when I started. But while I went so far, I would like to do it better than Flir tools can do. And I believe you will help me :)

Edit: About opensource - now the development from me is frequent, so I do not expect to do it opensource now, even though I am maintaining git for tracking the changes. But once I will decide to stop development (or slow it enough), I will comment it well and make it public source. Comments are important, since its based mostly on API calls and GDI+ libraries. Believe or not, but its written in obsolete VisualBasic6 from 1998. And despite of using VB6 its faster than original Flir software :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 28, 2014, 10:25:53 pm
About opensource - now the development from me is frequent, so I do not expect to do it opensource now, even though I am maintaining git for tracking the changes.
But once I will decide to stop development (or slow it enough), I will comment it well and make it public source.
:-+ :-+ :-+ :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 11:11:57 pm
About opensource - now the development from me is frequent, so I do not expect to do it opensource now, even though I am maintaining git for tracking the changes.
But once I will decide to stop development (or slow it enough), I will comment it well and make it public source.
:-+ :-+ :-+ :-+ :-+

:-+:-+:-+:-+:-+:-+:-+
I support this view too and it is really a great tool that daves is providing to everyone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 11:15:36 pm

ok, I tested all known variants

FlirTools+ can connect the E40 as video or signal (signal = RAW 16 bit)
see pull-down menu on screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78866;image)
there is an corresponding E40 resources key
Code: [Select]
.caps.config.uvcstreaming: (2)
r---r--------- 0 root   root   <b> enabled                     true
r---r--------- 0 root   root   <b> radiometric16               true

FlirTools+ can connect the E4 only as video (a live view)
see screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78868;image)

but you can write with a remote command a (short) E4 raw video stream


Thanks Thomes123 that really makes things really clear.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on January 28, 2014, 11:19:03 pm
Hi,
I might be wrong but since you've got the 320*240 resolution and it sticks thru power cycles I'm pretty sure you've done everything right related to the original hack by Mike. Where does it say that it should show E8?

The guy may want to sell his E4 as an E8...
In related news: all mammals are cows! If you read the rest of his posts, I think you'll find that the main reason he's concerned about the E4 vs E8 thing is functionality of Flir Tools based on how said Flir Tools detects the camera.

Thanks mrflibble for helping to clarify this. I am very happy with my E4 as is and do not concern about if it shows a E4 or E8 in the camera details, but rather want to understanding if i performed the E4+ modification correctly.
Really appreciate everyone's great support and great work in modifications.
Title: Re: Developing applications for the E4
Post by: Taucher on January 29, 2014, 12:19:55 am
@Taucher
EDIT: Also tested with PocketPC 2003 SDK - works fine too - example exe (hello world - no additional benefit) is attached.
<IMG of Hello World App>
You search a nice new menu feature?

Save a short video sequence on a E4 as I am discriped here
Code: [Select]
//set file name
rset .image.services.rtrecord.filename \FlashIFS\001.seq
//activate recording to memmory
rset .image.services.rtrecord.active true
//wait a moment while rcording
//now save video to flash
rset .image.services.rtrecord.store true

or write a fast sequence of images (while the trigger button is pressed) with this (repeated) command
Code: [Select]
store -j \FlashIFS\myfolder\0####.jpgthis needs no RAM as buffer memory and you can write about 10.000 frames until the Flash is full

Matter of fact: I've already put that one on my TODO list and my current menu has those commands even in the comments so I don't lose them... but believe it or not - I hadn't a spare hour to hack around for weeks...
... unfortunately also unknown yet: any method how to launch the exe from within the menu itself - of cause it could be added to the startup script... what's already possible is to show a menu with panorama, video etc... but those modes are still non-functioning as the multimedia engine (MediaServer.exe) from the Exx simply crashes when started on the E4 (yes, I've checked DLL deps and brought MP4.dll over, too).

Maybe let's add a brief explanation how the menu system works: It's a frontend to the registry - that's it  ^-^ .
See also (very close match): Model-View-Controller (MVC) programming concept... IMHO Flir did a really nice job in respect to a multitasking data backbone with this registry.  :-+

Well, you'll might ask how the functions switch then etc... that's done by subsystems which run in the background and which can either poll or subscribe to certain registry entries. It's going even so far, that even the image data is stored in a registry key (data-blob) :)

Now as everybody knows such things like video just scream "compress my data or I'll eat up all your free space" - that's what the MediaServer.exe with it's nice little MP4 dll comes into play... unless it's crashing on startup.

A "dirty" hack could be to write an app to watch for "video" mode, then display itself on the GUI and allow to capture output by setting up the image capture sequence (or simply replace the mediaserver by consuming the frames itself and piping them to some ffmpeg routines or similar code) ;)

Heh, while writing this I think about if there are menu-keys projected over the registry... like the main trigger switch...
... ah, but there's that other thing again - no C/C++ includes for the registry yet ... good news is - the DLLs export a sh***load of classes and similar goodies... but OTOH my time is quite constrained right now - so I'd be really glad for some co-op work here.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 29, 2014, 02:01:18 am
Could you possibly write a script that takes something like 9 frames from the camera and automatically stacks them in the memory while the user is just looking at the GUI? Like Testo's SuperResolution.

see registax.org
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 29, 2014, 09:26:24 am
Testos superresolution stitching is a PC software.
The Testo camera takes only 4 images

see my posts for technical details:
- https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363688/#msg363688 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363688/#msg363688)
and
- https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363213/#msg363213 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363213/#msg363213)

if Taucher make a menu point for taking multiple pictures, then you have superesolution on the E4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 29, 2014, 01:15:23 pm
Oh, I was under the impression it was done on board the cam. My bad.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 29, 2014, 02:22:51 pm
I know this is a bit of a touchy subject but I was thinking of it as more of a mental exercise.

There has been talk of the lens is small the the E# series vs the E## and upping the frame rate to 30 or 60 may not be feasible due to that limitation.

But from Mike youtube tear down - is not the sensor just putting out 60fps 320x240 all the time anyway bigger lens or not? The real gatekeeper is the FPGA's processing ability and what it is actually doing with the frames. Is it doing some sort of super resolution magic already on the fly, stacking the 60Hz signal down to 9.5Hz and then applying all the corrections? Or could it just be powerful enough to grab and process 9.5Hz worth of frames and dropping the rest. It has to be powerful enough to at least deal with 60Hz worth of data coming at it at some level to do the decimation down to 9.5Hz.

It may be worth looking into what the FPGA's bin file is actually doing before diving to deep into the super resolution stuff?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 29, 2014, 02:32:13 pm
It may be worth looking into what the FPGA's bin file is actually doing before diving to deep into the super resolution stuff?
Please include a link to the xilinx altera bitstream analysis tool you intend to use for this. ;) The proposed image stacking approach is relatively trivial, the bitstream reverse-engineering is  not.

There's several things you could do in the fpga area, but they are rather time-intensive compared to "just" software.


edit: brainfart, the E4 uses an altera cyclone IV.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 29, 2014, 02:48:56 pm
I know this is a bit of a touchy subject but I was thinking of it as more of a mental exercise.

There has been talk of the lens is small the the E# series vs the E## and upping the frame rate to 30 or 60 may not be feasible due to that limitation.

But from Mike youtube tear down - is not the sensor just putting out 60fps 320x240 all the time anyway bigger lens or not? The real gatekeeper is the FPGA's processing ability and what it is actually doing with the frames. Is it doing some sort of super resolution magic already on the fly, stacking the 60Hz signal down to 9.5Hz and then applying all the corrections? Or could it just be powerful enough to grab and process 9.5Hz worth of frames and dropping the rest. It has to be powerful enough to at least deal with 60Hz worth of data coming at it at some level to do the decimation down to 9.5Hz.

It may be worth looking into what the FPGA's bin file is actually doing before diving to deep into the super resolution stuff?
Yes, the sensor outputs 60fps, at I think 14 bit resolution.
The lens is a major cost item, so if they can reduce signal/noise in the FPGA by avaraging frames, it would be crazy not  to do it.
You can clearly see that the 60fps Ex0 imagers have  a significantly bigger lens.
The FPGA is easily powerful enough to do the avaraging, along with all the other processing.
When I get time I will rig up something to view the raw datastream. I suspect it won't be pretty with the standard lens though.
 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 29, 2014, 03:03:26 pm
Mike - that would be very interesting to see!

mrflibble - yeah I spent all my toy/tool $$$ on the E4 ;) . Another barrier that may side line any research into the bin is if FLIR used any sort of encryption or protection to prevent analysis or modification. Since it's really the heavy lifter it would make sense that they focus their time into protecting it.

My programming and dis-assembly skills never really progressed past basic scripting and batch files. I can get the idea when complex stuff is explained to me but once I start looking at real code my brain goes into idiot mode...

Still finding this forum and all these smart people has to rub off in a good way some how. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 29, 2014, 03:45:01 pm
Since it's really the heavy lifter it would make sense that they focus their time into protecting it.

Well, Flir is company having some employees, usually people doing their job for money. You know, they are paid for get it work. They do not focus on things like security (see how easy was to turn E4 into E8) neither the speed (see - my "amateur" BFIC written in obsolete slow language is faster then their professional software). They do not have motivation like we do. Just get the damn thing working somehow.

Many times programmer can have nice thoughts to do it better way, but there are team leaders, project managers, service owners... They do not want to take responsibility for programmers thoughts, neither they want to care more. This is how almost everything around us works. Always there is someone focused deeply in the one thing, not the employee, who can point out what is done wrong way.

Its similar situation like when you call plumber to fix broken pipes. He will do it fastest and easiest way, which does not mean it is the best way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 29, 2014, 04:18:49 pm
mrflibble - yeah I spent all my toy/tool $$$ on the E4 ;) . Another barrier that may side line any research into the bin is if FLIR used any sort of encryption or protection to prevent analysis or modification. Since it's really the heavy lifter it would make sense that they focus their time into protecting it.
On the bright side, none of the tools required for the reverse-engineering job are commercially available. So lack of toy $$$ should be no problem. ;) All that is required is a nice chunk of time. ;)

And it's not Flir you need to worry about. They probably got their verilog/vhdl verified and shipped it. There's probably no more encryption in there than any other altera fpga based product, with standard protected bitstream. Mainly it's 3 steps. 1) obtain unencrypted bitstream. 2) extract netlist. 3) flush time staring at netlist and/or use netlist decompiler.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jasonc on January 29, 2014, 04:51:52 pm
I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.

Also, I wanted to point out an off-the-shelf option for mounting to tripods and similar: a Bogen Superclamp.   These are big cast metal clamps used for photo lighting equipment.  They attach firmly to round stock like the E4 handle and have both a 1/4-20 thread as well as a socket for a "brass monkey" photo stud as used on lighting stands.  Cost is about $20 ($30 for name-brand), plus whatever you attach it to.  Only downside I see is that the 1/4-20 is at 90 degrees, but that can be fixed with a ballhead, and then you also get full pointing flexibility.     

For instance, I used a superclamp to grab the E4 handle, attached a small ballhead, and then attached that to a "Justin" clamp so I could mount my E4 on a shelf and point it in any direction.  In the attached photos you can see it on a chair.  (The orange cord is a safety line since sometimes Justin clamps aren't so .) 

I'll likely upgrade to a slightly bigger ballhead at some point to get less play/wobble, but it already worked pretty well.  Note that I could also have attached the ball head directly to a tripod.  Now I just need a cable release and interval timer to timelapse. 

I like that these are all reusable, solid metal parts with standard fittings, so if I need to put the camera up 4m in the air I can just fit it on a lightstand and run it up.     

In the US, B&H Photo is my preferred place to get this kind of lighting gear.  But there are countless sources. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on January 29, 2014, 05:01:08 pm
Today there is a new version of Flir tools for mac

https://itunes.apple.com/mx/app/flir-tools/id579348845?l=en&mt=12

Maybe they fixed the issue with connectivity, I will report later.

EDIT: No, FLIR tools 2.1 for Mac still don't connect to the E4 after the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 29, 2014, 05:01:54 pm
The lens is a major cost item, so if they can reduce signal/noise in the FPGA by avaraging frames, it would be crazy not  to do it.

it's possible
see my post to compare the noise between E4 and E40
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342873/#msg342873 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342873/#msg342873)

the noise of the E4 sensor is better, but not the visibility of low details
I don't mean the the missing image sharpness but the visibility of low temperature differences (in large areas)
this is a result of the larger lens of the E40 with better f-number (value is unknown)

calculated sensor size
http://en.wikipedia.org/wiki/Angle_of_view (http://en.wikipedia.org/wiki/Angle_of_view)
Code: [Select]
E4    4,5mm x 3,0 mm  (with focal length 7mm  and FOV 45° x 34°)
E40   6,66mm x 4,44mm (with focal length 18mm and FOV 25° x 19°)

see
What is the relationship between lens f-number and camera performance or NEdT?
http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=341&view=37198 (http://www.flir.com/cvs/cores/knowledgebase/index.cfm?CFTREEITEMKEY=341&view=37198)

... I'm not sure whether I have errors in reasoning (shown NEdT = function(F-number) )
but the visibility of areas with low temperature differences is definite better on E40
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 29, 2014, 07:33:46 pm
daves - not that I disagree with your points but as the 9Hz vs 30/60Hz also messes with ITAR status so some extra thought may have been put into it to cover said managers rears... If some one does fine out that it's something simple like changing a hex value and a check sum and these things start ending up in missiles taking out planes - FLIR is going to have a very bad day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 29, 2014, 07:40:26 pm
daves - not that I disagree with your points but as the 9Hz vs 30/60Hz also messes with ITAR status so some extra thought may have been put into it to cover said managers rears... If some one does fine out that it's something simple like changing a hex value and a check sum and these things start ending up in missiles taking out planes - FLIR is going to have a very bad day.
Ok, and where is the root cause of the problem ? Isnt it a fact that you bought 60Hz capable sensor ? Every big change in history is based on someones bad day :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 29, 2014, 08:09:12 pm
Sure the sensor is outputting 60Hz of some sort of data from what Mike has observed but what that signal actually looks like RAW is anyone's guess at this point.
We know the FPGA is doing deal pixel and lens correction but if the output is poor it could be doing averaging or some other type of corrections that may only give 9 or 15 Hz worth of usable data.
Until we see that signal or have a more clear picture as to what the FPGA is doing to it that data stream it's all just what if's.
I would love for there to be a hack that enables 60Hz output if it looks good! But that's just me in my little bubble. I don't have any nefarious plans currently and hope to keep it that way. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 29, 2014, 08:11:54 pm
@daves,

You are not wrong.......ITAR covers the thermal SENSOR 1st and foremost. It has not been lost on the industry that FLIR appear to be shipping a 320x240 60fps ITAR liable microbolometer in the Ex camera  ;)  I deliberately state "appear to be" as, AFAIK, no one has yet shown a true 60fps image from the microbolometer data stream. It does look possible though. FLIR will not be best pleased that this has been revealed as it may cause some difficult questions to be asked of them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 29, 2014, 08:20:12 pm
@Orby,

If you really want to play with 320x240 pixels at 60fps, keep  an eye out for the BST or Microbolometer based fire fighting thermal cameras that regularly pop up on e*ay. I bought some lovely ISG Talisman Wasps very cheaply ($75 to $120 each) as 'spares or repair in the UK. Worth looking at and you can buy working units for reasonable sums if you hunt around a bit. The down side is that they have few, if any measurement facilities and are often monochrome. The Talisman Wasps have a 2X E-Zoom and can have optical image Fusion though ! The E4 is far more capable but, as you are finding, it has a slow update rate, and is not suited to observing fast moving objects. Few private sellers or scrap dealers selling firefighter cameras realise that they are ITAR regulated. Sellers of scientific and Industrial TIC's are often very aware of ITAR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 29, 2014, 09:31:16 pm
daves - not that I disagree with your points but as the 9Hz vs 30/60Hz also messes with ITAR status so some extra thought may have been put into it to cover said managers rears... If some one does fine out that it's something simple like changing a hex value and a check sum and these things start ending up in missiles taking out planes - FLIR is going to have a very bad day.

Thus, it is logical to assume that if the 30hz/60hz hack is ever discovered, or has been already, that information will not be shared publicly. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 29, 2014, 09:34:34 pm
Indeed  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on January 29, 2014, 09:52:36 pm
Thus, it is logical to assume that if the 30hz/60hz hack is ever discovered, or has been already, that information will not be shared publicly.
Well of course, lets send it as PM  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 29, 2014, 10:05:07 pm
I thought ITAR only covered export regulations, and not users tinkering with their devices?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 29, 2014, 10:07:54 pm
I thought ITAR only covered export regulations, and not users tinkering with their devices?

This has been said before. The only concern is that if FLIR catches wind of this, they will issue firmware making it impossible to hack cameras at all out of fear of violating ITAR. Hence my previous post: keep it to PMs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 29, 2014, 10:36:18 pm
Well if some one were to find any information like that out - I for one would defiantly not want any of it to show up in my PM box. Nope. No Sir. That would be a really bad idea... ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 29, 2014, 11:16:08 pm
I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.
What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 29, 2014, 11:47:14 pm
why so much conspiracy theory?

from the E40 you can by a 9Hz version and a 30/60 Hz version
http://www.flir.com/uploadedFiles/Thermography_Americas/Service_and_Support/E%20Series.pdf (http://www.flir.com/uploadedFiles/Thermography_Americas/Service_and_Support/E%20Series.pdf)

the 9hz version is only limited by known config file (guess, untested)

Code: [Select]
\FlashFS\tmp\prod.log
2013xxxxxxxx   8 Preparation:Image frequency 30
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 30, 2014, 02:09:30 am
Is anyone else wondering what happened to Dave's E8 that he received for review  ? Nothing heard of it since delivery.

It would have been interesting to see its dead pixel map.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fisher on January 30, 2014, 09:56:31 am
I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.
What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

I`m waiting mine too. It shipped out of Estonia on the 24th Jan. I wonder when was it calibrated (?). My hope is that Flir doesn`t want to change the situation, because E4`s are selling really well. Better than they ever imagined, while E5-8-s selling didn`t drop. If they would change "policy" everybody: factory, resellers, users would loose. In case of a change, resellers procuring a bigger stock now would have to deal with a lot of refund requests, because everybody wants "that" camera. I think resellers would never sell these stocks. Actually this is a win-win-win situation. I`d be very surprised if they `d change their policy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: suryaprihadi on January 30, 2014, 05:44:12 pm

Hi All,

I just registered to say AWESOME to Mike and all who contributed to this post....many thanks.
I have an older Extech i5 which is 80 x 80 resolution for personal fun use. Bought it when price hit US$1.6K some months a god but now that can buy a 100 x 100 resolution one ....hick hick hick.

Am thinking to get E4 and mod it, but me poor with IT stuff, but is enjoying this thread a great deal. Two thumbs up.

Again thanks.
SP

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Twitch on January 30, 2014, 07:14:12 pm
This is an awesome thread, thank you all for the great information.

I wanted to say that I ordered an E4 which arrived today.  It was drop shipped directly from FLIR.

It still has the 1.19.8 firmware
Serial is 639129xx
It's calibration certificate is dated January 23rd, 2014.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 30, 2014, 07:31:40 pm
Thanks for the info. I will add it ot my useful information thread.

23rd January......Hmmmm doesn't sound like new firmware release in the latest batch to me  ;)

Good news for people who are awiting delivery of an E4 me thinks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on January 30, 2014, 11:11:41 pm
Just for everyone who is looking for the recording function with FLIR TOOLS+, I checked with FLIR and got below reply:
Recording is not possible using an E4. FLIR Tools can only display the live image from this camera model. You would need an E40 or higher to enable the recording feature.

Look for FLIR IR Camera Player, a free download from FLIR. Latest version v2.33 and it will record video from an E4/E8+.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: maggiore on January 31, 2014, 04:13:34 am
Looking for some guidance. Followed the directions. After selecting run FIF within FLIRInsallNet an error dialog box popped up stating "Flir Cronos Communication" with the option to retry, abort, or ignore. I chose to ignore and had the following script;

Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok

And this is the modified e8.cfg file I used;

#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63911xxx(used actual serial)
# CRC01 5ba1b4b8

Upon unpluging usb, removing the battery and replace it doesn't look like any changes took effect. Any input or guidance would be greatly appreciated
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 31, 2014, 01:07:02 pm
Look for FLIR IR Camera Player, a free download from FLIR. Latest version v2.33 and it will record video from an E4/E8+.

in supplementation to my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)
here the sceenshots from the free FLIR IR Camera Player
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79308;image)
you can only select a live stream display (15 Hz ??)
the E4 delivers no RAW signal (button grayed out)

a live show from your battery status  :D
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79310;image)

P.S.: same results with newer version 2.3.3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 31, 2014, 01:41:54 pm
someone posted here an image how to save the usb port with two drill bits

I use a rubber band
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79312;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on January 31, 2014, 06:20:19 pm
someone posted here an image how to save the usb port with two drill bits

I use a rubber band
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79312;image)

Clever.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fredaj on January 31, 2014, 08:24:30 pm
Looking for some guidance. Followed the directions. After selecting run FIF within FLIRInsallNet an error dialog box popped up stating "Flir Cronos Communication" with the option to retry, abort, or ignore. I chose to ignore and had the following script;

.
.
.

Upon unpluging usb, removing the battery and replace it doesn't look like any changes took effect. Any input or guidance would be greatly appreciated

Hi Maggiore, I had the same problem. In my case, it was because "Word Wrap" was turned on in my text editor when I saved the modified cgf file. Also I used the Win 7 "send to compressed file" function (instead of 7zip), although I didn't check to see if this was the issue instead. Hope this helps!

Fred
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 31, 2014, 08:55:25 pm
you can check with rls, which configuration is loaded

telnet
Code: [Select]
> rls -r -l caps.config
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name            "app E4 1.1 + app E8 1.0"
rw--r--------- 0 root   root   <e> ui   
     

or see here

In which case I will just post the executive summary for people with a non-working hack:

- Start FlirInstallNet
- Do "Get resource" for .caps.config.name
- "app E4 1.0": hack didn't apply. Recheck your CRC01. Still a problem ==>  :-//
- "app E4 1.0 + app E8 1.0": hack did apply, so things should work.  :)
- "app E8 1.0 + app E4 1.0": hack did apply, wrong order. Check the filename for your config. It should alphabetically come after the original config file name.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jasonc on January 31, 2014, 08:59:47 pm
What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

Mine is almost 12500, so you should be fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: maggiore on January 31, 2014, 11:48:39 pm
Well I'm still having a little trouble with the hack, due to my own ignorance I'm sure. Could someone explain the CLRF for me? The end of my e8 file looks like this;

.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63911xxx(used actual serial)
# CRC01 5ba1b4b8

with one line break after the CRC01. Am I screwing this up? THanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 31, 2014, 11:54:01 pm
read the last pages of this thread, you're doing it wrong somewhere - maybe try my ezcrc01 and keep sure e8.conf is lowercase
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 01, 2014, 12:06:40 am
Just a little note on when I "upgraded" my E4... I did try CRC01 and kept getting an error with flirnet (trying to update the fif file).
I used EzCRC01 and it worked great, so I must have been doing something wrong with cRC01.

You do need a CRLF (press the enter key after the #crc xxxxx) but ONLY ONE crlf!!!  and NO spaces either.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cherokeesix on February 01, 2014, 12:47:50 am
I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.
What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

Mine is 12690, just arrived 1/31 from Extech in Peabody MA. Firmware: 1.19.8

Hack worked just fine...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on February 01, 2014, 12:58:35 am
At this pace FLIR would be stupid to update their firmware and block this mod. Every time a new E4 owner makes a post here, that's $1,000 in FLIR's bank account.

That's $1,000 they would have not had if it wasn't for this firmware mod. Surely a sales balance sheet will outweigh paranoia that their higher-end models would stop selling because of it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 01, 2014, 01:31:07 am
And it is also encouragment for others that are following this thread, to actually purchase an E4, rather than procrastinate as to whether or not to buy and E5,6,8.
Makes a sale in other words. (for Filr)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: maggiore on February 01, 2014, 01:47:25 am
read the last pages of this thread, you're doing it wrong somewhere - maybe try my ezcrc01 and keep sure e8.conf is lowercase

Thanks Taucher, that ezcrc01 did the trick. I'm happier than a pig in s hit. Thanks to everyone who put in the time to create this great hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 01, 2014, 02:26:43 am
Ain't it wonderful?!?!?!
Glad to hear that ezcrc did it for you!   I found the same thing as well!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 01, 2014, 08:48:13 am
I've been wondering, does the mod for the E4 increase the refresh rate from 9Hz to 60Hz? Also, does the camera show any difference in the sensitivity? (E4: 0.15C vs E8: 0.05C) How about the sensor, companies usually bin the top-tier performers in the ultra high-end products so do these show any 'weirdness' with the larger resolution?

I'm just trying to make sure before I drop a grand on this thing.

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 01, 2014, 12:39:31 pm
Answers:

1. E4 remains 9fps. This complies with ITAR regulations and there is no public 60fps modification to date. do not buy an E4 expecting that such a modification will be available in the near future.
2. No physical proof of improved thermal resolution, but theories suggest the new 4C span provides the E8 specification of 0.06C.
3. Bad Pixels exist on all consumer grade micro-bolometers. The nominal performance for the sensor used in the Ex series is 99.8% operational pixels. Bad pixel maps from tested E4's show that most (all?) meet this specification. Some are very good indeed, with very few dead pixels. There may be 'on test' selection by FLIR for the E6/E8 but this has not been Proven to date. No weirdness has been seen on the E4 to support its sensor not working normally and within spec at 320x240.
4. I am a user of thermal imaging cameras in industrial environs and can assure you that the E4 is good value at 80x60 for $1000 and a total bargain at 320x240 for the same money. Do not get hung up on the frame rate unless you want fast action observation. As a thermal CAMERA it is excellent. It cannot record moving images internally (at the moment) so any thermal CAMCORDER type of activity will require an external recorder that works with Web Cams. No composite video is available on the Ex series.
5. The performance of the MSX visible image edge fusion is superb !
6. See this thread for more useful information on the E4 and its use:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

Hope this helps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 01, 2014, 07:26:35 pm
Even at 9fps., with the hack ya can't beat the E4 for price and performance!  UNLESS you really need 30/60 fps., then you will have to drop some big $$$'s for another model of Flir that does higher frame rates...
The MSX is awsome (like Aurora said), and you can stream the video over the usb port like any usb web camera!  Very easy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 01, 2014, 09:02:05 pm
It looks like FLIR had gone out of its way to lock down the frame rate. Does ITAR merely say higher FPS cameras are subject to export restrictions, or does it also require companies to take additional steps to prevent people from modifying the hardware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 01, 2014, 09:41:48 pm
Wording is somewhere along the lines of "limitations must not be removeable".

The fps lock-down (limitation) should therefore not be removeable by users or those wishing to convert the unit for higher frame rates.

In theory the Ex series should not make a 60fps image signal or data available to the outside world. From what Mike has found, that may not be the case with the fitted microbolometer as there is the twin ADC data stream carrying image information that appears to be 60fps.  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 01, 2014, 10:33:56 pm
Thanks for clearing that up Aurora. Looking at the videos on Youtube with the E4/E8 in operation. I can't really see too much of a difference between 9Hz and the 60Hz version I have at work (E40).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 01, 2014, 10:41:00 pm
Could the same type of hack be used on an E40 to make it an E60?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 01, 2014, 10:47:50 pm
The thing is that "must not be removable" is open to interpretation. It could range from something as simple as password protection to making hardware that only supports 9 FPS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 02, 2014, 12:15:14 am
Could the same type of hack be used on an E40 to make it an E60?
Almost certainly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 02, 2014, 02:13:02 am
Could the same type of hack be used on an E40 to make it an E60?
Almost certainly.
I don't suppose you would be willing to try it? Provided you could get your hands on an E40 that is. I'll look into the E40's firmware and see if it has the same structure. It may be just as simple as taking what was learned here and applying it to the E40 .cfg file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 02, 2014, 02:18:17 am
@Osiris454 - I guess you want to read the rest of the thread first - as far as I remember there were already E40->E60 reports.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 02, 2014, 02:19:45 am
@Osiris454 - I guess you want to read the rest of the thread first - as far as I remember there were already E40->E60 reports.

I know, but I can't find them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 02, 2014, 02:24:46 am
@Osiris454 - I guess you want to read the rest of the thread first - as far as I remember there were already E40->E60 reports.

I know, but I can't find them.
Ever wondered about the "SEARCH" button in the lower right screen corner here? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 02, 2014, 02:27:17 am
I've tried. I get the usual 'no results found' answer. I'm probably doing something wrong. I'll keep trying though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 02, 2014, 02:33:49 am
I've tried. I get the usual 'no results found' answer. I'm probably doing something wrong. I'll keep trying though.
ok, IC ... even searching for *E40* and ANY does not yield results ... probably this thread has broken all forum limits *G*
alternative method: hit "print" and then strg-f - note that that display does not show quotes and sources - just regular text :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 02, 2014, 04:13:41 am
This is what I found with a quick Google search. Maybe Tomas found the solution for you?

you are right, Flir is not afraid

As I wrote ahead, the hack is not "new"
I hacked my old Flir E40 a year ago.
I used another way, without a CRC Generator

I think, that many engineers found this simple way:

The Exx has a open WiFi.
After connecting to the wifi, you find at address 192.168.64.1.

port 23
a open telnet without password (administrator rights!!)

port 21
ftp with the login flir/3vlig
Flir publiced the ftp login password in a flir manual

port 80 Webserver
http://192.168.64.1/service (http://192.168.64.1/service)
"These web pages are password protected, and only intended for trained personel."
with the same login/password  flir/3vlig
-> now you have activate the highres mode  320x240 px

it's not really hidden...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 02, 2014, 06:31:42 am
I had no luck. I'm terrible with search engines at times. Since I have an E40 at work, I might tinker with it using the information you found. For personal use though. I can't really justify spending $4K instead of $1K for 60Hz, lazer pointer, led lights, WiFi, Bluetooth.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 02, 2014, 07:18:58 am
Could the same type of hack be used on an E40 to make it an E60?
yes, see my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
connect with wifi
use the crc generator and put the config files in the corresponding folders
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 02, 2014, 10:15:06 am
Huh. Interesting. I take it that the procedure is just the same as the E4? Copy files, remove battery and reboot? How do I connect to the camera with WiFi? Couldn't I just use the USB cable instead?

I apologize for all the questions, I'm just trying to get a feel for what needs to be done.

I'm thinking it goes something like this:
1. Connect to the camera over Wi-Fi using an Ad-Hoc connection.
2. Open the camera's internal flash storage in Windows Explorer.
3. I input the the camera's serial number into the "# ID" section of each file replacing the 'xxxx'.
4. Generate a CRC using the CRC program that Mike posted with his E4 hack and input that as "# CRC xxxxxxxx" after each # ID line in each conf.cfg file.
5. Power off the camera.
6. Remove the battery,
7. Reboot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 02, 2014, 03:34:35 pm
2. Open the camera's internal flash storage in Windows Explorer.

no, use FTP (search forum)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 02, 2014, 08:20:52 pm
Ex series do NOT have WiFI or Bluetooth...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 02, 2014, 08:40:30 pm
Ex series do NOT have WiFI or Bluetooth...

He ask for E40 ...

@Osiris454
use winscp and ip address 192.168.64.1

login like here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 02, 2014, 08:46:13 pm
Ex series do NOT have WiFI or Bluetooth...

He ask for E40 ...

@Osiris454
use winscp and ip address 192.168.64.1

login like here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918)
In this post, this is what the question was..

"Huh. Interesting. I take it that the procedure is just the same as the E4? Copy files, remove battery and reboot? How do I connect to the camera with WiFi? Couldn't I just use the USB cable instead?"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 02, 2014, 08:55:07 pm
The most recent part of this thread is on the e40 camera, which does have wi-fi and bluetooth.  The published resolution of the e40 is 160x120 px.  Going into the service menu via the wi-fi interface via a web browser, using the user id of flir with the password of 3vlig, you can see that the number of pixels is 76,800.  Does that surprise you that the product of 320 by 240 is 76,800?  Same as the e60 camera.

When the camera is put in service mode, using the user id and password above, it is noticed that on the camera menu, when you go to zoom, you now have not only x1, x2, but now have x4, but when the camera goes back to its normal mode, the x4 disappears.  I'm assuming that while the camera is in the service mode, it is in the 320x240 mode.

The question is, how do we get the camera to stay in the 320x240 mode when it is out of service mode?

I didn't see anything in the service mode window that gave a resolution setting.

Using ftp, I downloaded the file "conf.cfg."  Looking at it via notepad, I see lots of settings, but nothing that is obvious having to do with resolution, except for two, near the top of the file is are two identical lines, showing ".caps.config.image.settings.resIR int32 160."  Would changing the lines from 160 to 320 do the trick?  The last line is the CRC, in my case the line is # CRC01 59635078.  If I recalculate the new CRC, put it in place of that line, using ftp, writing the file back to the camera, doing a cold boot, pulling the battery, no external power, would that bring me to 320x240?

I haven't seen a straight answer on this subject yet, on the e40.

Thanks in advance for anybody who can help us out on this.  -- Jim


Ex series do NOT have WiFI or Bluetooth...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 02, 2014, 09:12:38 pm
Although you can edit the file, a "safer" way is to create a second file - settings files which are alphabetically later will override any earlier ones.
Obviously it's a good idea to make backups of everything first.

Take the config file, edit the settings. Delete the CRC line and run the CRC util to create a new CRC and add it to the file.
Save that file in the same dir as the original, with a higher alphabetic name (case sensitive), e.g. e60.cfg
Then do a hard reboot
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 02, 2014, 10:02:17 pm
Thanks Mike, and thanks for making all this happen.  I'm 65 and in my earlier days did a lot of reverse engineering, was quite good at it, spent many nights hand dissembling code and adding comments.

Of course, I would always back up any files that could become damaged or missing, but I'm glad you mentioned it for others.

There are other settings in the config file that are set "false."  Would be interesting to go back and play with their settings, AFTER making good backups.

Now I have to go back and find the link for the CRC program that worked best.

Once the mod is complete, I'll report back with my status on the e40, or will it be the e60?

Thanks again -  Jim

Although you can edit the file, a "safer" way is to create a second file - settings files which are alphabetically later will override any earlier ones.
Obviously it's a good idea to make backups of everything first.

Take the config file, edit the settings. Delete the CRC line and run the CRC util to create a new CRC and add it to the file.
Save that file in the same dir as the original, with a higher alphabetic name (case sensitive), e.g. e60.cfg
Then do a hard reboot
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 02, 2014, 10:04:42 pm
Using ftp, I downloaded the file "conf.cfg."  Looking at it via notepad, I see lots of settings, but nothing that is obvious having to do with resolution, except for two, near the top of the file is are two identical lines, showing ".caps.config.image.settings.resIR int32 160."  Would changing the lines from 160 to 320 do the trick?  The last line is the CRC, in my case the line is # CRC01 59635078.  If I recalculate the new CRC, put it in place of that line, using ftp, writing the file back to the camera, doing a cold boot, pulling the battery, no external power, would that bring me to 320x240?

I haven't seen a straight answer on this subject yet, on the e40.
why do you not straight read my posts from the last days?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379973/#msg379973 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379973/#msg379973)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380259/#msg380259 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380259/#msg380259)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
thats all informations, do yo need

I have not enough time to write a "foolproof" step by step tutorial for the E40.
I must understand the background.

try a google search with
Code: [Select]
site:https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown "Flir e40"and you have 20 hits from 3300 posts
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on February 02, 2014, 10:12:18 pm
Hey emptech!

You can find the "original" CRC01-program in Mike's hack-post: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

There's also the EzCRC01-program from Taucher, which is attached here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)
But it's optimized for the Ex-series. You'd have to swap the template.cfg with your own template and rename the final generated file so it fits the Exx-series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 02, 2014, 10:15:15 pm
why write a template if you can simple connect with wifi and ftp?
no necessary switch usb to rndis etc. for connecting with ftp

mike give the hint with the filenames
I wrote here, how to check the configuration
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on February 02, 2014, 10:25:48 pm
I just wanted to show all the possibilities. :)
And there were a bunch of people who had problems with the usage of the original CRC01-program. So I thought a alternative way won't hurt. ;)

But placing the new file via WiFi and FTP is certainly faster than creating a new .fif update-package and running it via FlirInstallNet. Less complicated, fewer sources of error. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 03, 2014, 06:07:13 am
I read back somewhere where people had problems with the crc program. I tried the search feature, no luck at all.  I'm using the crc01.exe that I found on this forum, executed it on the conf.cfg file on my e40, and it comes up with a different crc number than what is listed at the bottom of my text file (opened with notebook).  I am playing with making changes in the conf files, but have a feeling that my basic problem is with the crc.  I read somewhere that if there was a bad crc, the file would be ignored and settings from a previous file would be used?

By the way, I tried both conf.cfg files from Thomas, neither worked for me.  I actually lost the zoom feature entirely, had to reload my original conf files.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 03, 2014, 06:22:13 am
If you get for your original e40 cfg file another crc then you make a mistake:
CR, editor...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on February 03, 2014, 09:35:25 am
Hi everyone!

Is it possible to change the model number (from E4 to E8) in the firmware configuration?

When I transfer the thermal images to my computer & open them in the FLIR Tools it's still says camera model: FLIR E4, also after the 320x240 "E8" hack.


Cheers
Erik
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 03, 2014, 10:40:40 am
Is it possible to change the model number (from E4 to E8) in the firmware configuration?
camera model + search

otherwise this forum will turn in Q&A with same Q and same A.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 03, 2014, 10:53:00 am
I think that this thread ha become such a 'monster' that we will see many questions asked about content already covered. It appears to be the nature of the beast. I considered creating an FAQ in my 'E4 useul information' thread but I just don't have the time at the moment.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 03, 2014, 05:17:07 pm
I downloaded from my e40, the two conf.cfg files.  I backed them up and printed them.  I ran the
crc01 program that Mike wrote and got different crc numbers than what is at the bottom of the files.
I have not altered the files in any way, they have been viewed with notepad but never saved with
notepad.  I'm trying to figure why the crc numbers differ.

The reason I'm asking, I've edited the file/s, trying to get the resolution up to 320x240 and
trying to get the zoom levels increased.  The stock e40 has x1 and x2, I believe if it was at
the higher res, I'd have x4, like the camera has in the test mode. 

I read somewhere on a post that if the crc number isn't correct, the file is not read by the camera
and it uses some previous data.  That seems to be the problem, I don't think my data files are being read.
That's why I suspect the problem is the crc check.

One question though, if I do get the resolution increased, is it that obvious, how will I know for sure?  I
would almost have to look at a test pattern of a sort.  Also, to get a different zoom menu that includes
the x4, that must mean I need a modified gui, otherwise how would the camera know I need that third
check box?

I tried the two cfg files from Thomas, after adding my s/n and creating a new crc, the camera worked so so,
but I actually lost the zoom feature entirely, I had to reload my two original cfg files.  This is fun, but I do
have to get on with my life sooner or later.

I wonder, since this thread is so big, should a new one be started for the e40?  I've tried the search engine
on the forum but it doesn't seem too helpful.  Many of our questions are already answered but it takes a
lot of reading.  I'm up to # 114 right now.  Once in a while I'll start with the latest posts and work back a bit.

I believe in sharing information, hopefully my posts will help others who are doing the same.

Jim

If you get for your original e40 cfg file another crc then you make a mistake:
CR, editor...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 03, 2014, 06:10:29 pm
I ran the crc01 program that Mike wrote and got different crc numbers than what is at the bottom of the files.

Believe me, the E40 use the same CRC like the E4.
I checked it myself (Flir E40 first generation)
If you don't get the same CRC with your original config file, than you always make the same mistakes.

try google with
Code: [Select]
my_search_words site:eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 03, 2014, 06:20:30 pm
Emptech,

If you believe the E40 discussions are likely to derail the E4 thread then a new Exx series dedicated thread is a good idea.

The E4 activity in this thread has slowed down due to the 'enhancement' being pretty much perfected already for the casual user of the unit. Some members are working on releasing even more capability in the little E4 and I hope they will choose to share their work here when able.

I personally have no issue with the discussion of the Exx series here. It is so similar t the Ex series in many respects that its is a bedfellow in such a thread.  :)

An FAQ would assist new arrivals to this thread but the first page gives links to most of the pertinent data and I would recommend reading the whole thread if time permits. This single thread has more information about FLIR thermal camera design than any other single reference piece on the internet  ;)  Also take a look at the other FLIR related pages on this forum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 03, 2014, 06:22:31 pm
Just another thought.....

You never know, one day there may be a 'Technical Manual' written to consolidate all the information discovered in this thread ....... now that would be useful for years to come.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 03, 2014, 06:39:33 pm
...got different crc numbers than what is at the bottom of the files. I have not altered the files in any way...
I suppose you erased the old CRC before computing another one, right ?

I always use http://www.pspad.com/ (http://www.pspad.com/) for editing and programming. It does not alter CR/CRLF/LF endings. It keeps what originally is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 03, 2014, 06:54:16 pm
Again: EzCRC01 simplifies any CRC01 computation...
@slow down: well, this thread is already the single largest one on the EEVblog and would probably even count as a category once split up :)
... IMHO the hack is still not finished... there are still some goodies to be implemented :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 03, 2014, 08:55:46 pm
FLIR is now offering an educational package with an E6 at half price: http://www.tequipment.net/FLIR/E6-EDU (http://www.tequipment.net/FLIR/E6-EDU)

The catch is that it can only be ordered on behalf of an educational institution. Either way, a hacked E4 is still a better deal. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 03, 2014, 09:54:32 pm
I may have created a new problem.  Via wi-fi, I downloaded to the camera, the e60 files that FUNZT had in a zip file.  After a cold boot, the camera no longer shows the wi-fi icon.  It no longer has the zoom menu, and worse of all, in the mode settings, no longer wi-fi settings.  I need to get the backed up files restored to the camera but cannot get into it.  I tried ftp, it connects to the camera but cannot get a welcome message.

Is there a way to use the rndis mode via the usb cable?  I do not get the hidden menu to get to the usb/rndis setting.  I never was, even with the original e40 configuration files.

I installed the usb/rndis drivers to my xp box, but plugging the usb cable in just gets me the usual stuff, download photos and other files on the memory card, not the internal flash.

I'm really stuck here, any ideas?  It's not bricked, but many features are gone.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 03, 2014, 10:33:47 pm
Via wi-fi, I downloaded to the camera, the e60 files that FUNZT had in a zip file.  After a cold boot...
Why do you play around with a 4000$ camera without heeding our advices and require our time more then necessary??

I need to get the backed up files restored to the camera but cannot get into it.  I tried ftp, it connects to the camera but cannot get a welcome message.
...
Is there a way to use the rndis mode via the usb cable?  I do not get the hidden menu to get to the usb/rndis setting.
My last advices:
You can get the hidden menu of E40 like on E4.
Go to camera information site and press the right button of key pad for 10 seconds.
Switch usb to rndis and connect camera with usb.

I don't like to repeat myself but you shouldn't reboot the cameras with test config files.
see here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)

read a few times my post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380296/#msg380296 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380296/#msg380296)

seriously: With FTP access you should  think about what kind of paperweight you want to make from an E40. There is no u-boot loader on the camera!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 03, 2014, 11:06:58 pm
Thomas:

I've made lots of mistakes in my life, some have even taken me close to death, but I'm still alive.

I stuck my neck out here without a parachute.  I've always been able to recover, but I just don't know this time.

When I bring up the camera icon on the settings, I see the camera icon, it momentary s says camera on the top of the screen.
When I hold the right arrow key down (the navigational arrow) it shows thermal camera and digital camera, no longer lists
picture in picture.  After about three seconds, the icons on the left go blank and the camera returns to normal camera operation.
There was a flicker in the screen.  There was no hidden menu that came up.  Before I ever played with files, I was never able
to get the hidden menu up.

Recommendation?

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 03, 2014, 11:55:58 pm
You are in the camera configuration menu aren't you ? You know, the one with settings like date time etc. Tomas123 is referring to the information page within that menu structure.

He is also offering you good advice. It is important to fully understand what you are doing when modifying the configuration of one of these cameras. A good read of the whole thread WILL make this process clear to the reader. As was stated in the threads warnings....changing these settings in a manner that is not correct can brick your camera beyond recovery. Please be careful. Explaining to a FLIR service agent what you were attempting when you killed your camera could be awkward.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 03, 2014, 11:57:52 pm
I suspect you are not pressing the magic button at the right point in the menu... What forum post do you use as your pressey button plan to get to the USB menu? I am too lazy to search for it right now, but no doubt you know the link because you recently needed the USB menu feature. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 04, 2014, 12:09:00 am
the menu I've been using to try to get to the hidden menu, the one with a camera symbol, just above it is the pallet menu, and the one below it is the mode menu, with the wrench and screw driver.  On the one showing a camera, when I use the right nav arrow, it brings up
a choice between thermal and digital camera.  Holding the button for 3 seconds brings the screen back to normal camera mode.

Am I on the right menu?  I don't know what post I found to get to the rndis menu, could have been 3123 or 2231, can't remember.

I know if I have to send this camera in, right, would have a difficult time explaining.

OH, while in the menu that shows the time, date, serial number, part number, rev, the hidden menu came up!!!

I see RNDIS, MSD, UVC, RNDIS and UVC, RNDIS and MSD, UVC and MSD (which is selected), RNDIS, MSD and UVC, followed by several others, which one do I want?

wow
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 04, 2014, 12:18:51 am
You want the one that fits with the plan you have formulated based on a post you read, of course. ;) Failing that you want RNDIS and UVC because it's the least problematic one that gives you ftp capabilities.

Select RNDIS + UVC, then do whatever rescue plan you have involving ftp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 04, 2014, 12:33:26 am
Is it normal for the captured IR image to still show 160x120 (under 'information') even though I applied the 320x240 mod?
This is on an E40 by the way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 12:43:23 am
@emptech,

I am pleased that you found the correct menu in order to access the interface settings.

I hope that your back-up files contain all of the OS files that could be extracted. You will need to take a close look at your camera using an FTP client like Filezilla to assess what you have actually done to it. I advise that you use Filezilla to copy everything possible from the cameras directory into a second back-up folder in case of need (incomplete first back-up etc) If your back-up files are the same as the ones on the camera I would carefully replace each file that you messed with on the camera with your original E40 back-ups. Once the task is complete switch off the camera and remove the battery. With luck when you re-install the battery and switch it on again, it will boot to the original E40  specification as though you had done nothing to it.

Then shut the camera down and place it somewhere very safe. Make a cup of tea/coffee or whatever and settle down for a long read. Now read this thread (speed reading) looking for any post that even mentions the resolution or menu hacks. Once you have read them, you should have a good understanding of what is needed to upgrade your camera. It will take you some time but it is worth the effort. For information, the resolution upgrade is the easier of the upgrades and the e4 menu hack does not apply to your E40 but that upgrade does use FTP mode so will be of interest ?

EDIT: Just search for the posts in this thread that relate to the E4 resolution upgrade. Recent posts from others on the forum trying to assist you may also be worth another read.

Key things to check:

1. Ensure you have an edited E40 configuration file to enable the higher resolution.
2. Ensure that your serial number is the second to last entry in the configuration file.
3. Ensure that there is one Carriage Return (CR) at the end of the file.
4. Generate the CRC checksum for the configuration file that contains your serial number.
5. Enter the CRC checksum in the line under the serial number within the configuration file.
6. Install the file in your camera by whatever means you prefer but note others comments regarding adding this file rather than over writing the original. They have already explained this. The structure is alphabetical. E4 users used e4.cfg e8.cfg. You could use e40.cfg e60.cfg as the configuration file name ?  Mikes upgrade (location detailed on first page) contains a description of the process to create the configuration file. We used an .fif installer routine but with FTP you can just add the file directly to the correct location in the file structure

This is all from memory and I am tired so please check this for yourself.


Hope it goes well for you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 12:50:06 am
Oh and for future reference, I strongly advise against using Wi-Fi links when messing around with important files in an embedded computer....Wi-Fi has its place but it is not as reliable as a nice copper data cable and you don't want any corrupted files causing you issues later. In some cases a firmware update can get trashed due to a drop out in the data link and you end up with an expensive paperweight.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 04, 2014, 01:28:31 am
OK, after messing around for a few hours and checking CRC's, file names, and etc. I can confirm that the E40 will not load another .cfg file other than conf.cfg. If I change conf.cfg and regenerate a new CRC the camera crashes, even though I have done everything correctly. Put the original one back and it's normal again. I even reduced the IR resolution to 80x60 in the e60.cfg file and nothing happened. It simply won't read anything else. This is on one of the 'new' E40's that start with a 645.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 04, 2014, 01:42:53 am
I'm still not out of the woods -

I have the rndis driver loaded on my computer.  I'm using filezilla, but am unable to connect to the computer.  Isn't the
default ip address 192.168.0.2?  Are there other addresses I should try?  When the cam is in the rndis mode, and plugged
into the computer, the computer recognized the need for a driver and found it.  I'm assuming it also uses the uid of flir and
the passwd of 3vlig, correct?

Probably the first thing I'll do when this beast wakes up is to restore it to the original files, then take a breath of air.

Thanks everyone, but still trying to connect.  I will also take the advise to connect in the future to use the usb and
not the wi-fi, that's a weak link so I've learned.  Easy to use, but like walking on thin ice.

OK, after messing around for a few hours and checking CRC's, file names, and etc. I can confirm that the E40 will not load another .cfg file other than conf.cfg. If I change conf.cfg and regenerate a new CRC the camera crashes, even though I have done everything correctly. Put the original one back and it's normal again. I even reduced the IR resolution to 80x60 in the e60.cfg file and nothing happened. It simply won't read anything else. This is on one of the 'new' E40's that start with a 645.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 04, 2014, 01:57:26 am
If I change conf.cfg and regenerate a new CRC the camera crashes, even though I have done everything correctly.

With that - you are likely not editing the file correctly then.

Does the CRC you generate if you change NOTHING but removing the CRC match one one you removed? (if not - ya messed up)
Do you clearly understand what CR, CRLF and LF stand for? (if ya don't - STOP)
What text editor are you using? (if you don't know why this is important - see above)


Your modifying a $1000+ piece of kit with no built in restore method - failure here could mean it has to go back to FLIR to be fixed and likely on your dime for the whole thing. This is not the place for winging it.

I have the rndis driver loaded on my computer.  I'm using filezilla, but am unable to connect to the computer.  Isn't the
default ip address 192.168.0.2?  Are there other addresses I should try?  When the cam is in the rndis mode, and plugged
into the computer, the computer recognized the need for a driver and found it.  I'm assuming it also uses the uid of flir and
the passwd of 3vlig, correct?

When you connect the cam via USB in RNDIS mode it pops up with the info down by the time - just watch and wait. If that is the IP that pops up and you still cannot connect your going to have to check to make sure there are no firewalls interfering and do some reading on windows interface metrics and how to modify them. It's already been covered in this thread so you can Google it like others have already pointed out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 04, 2014, 02:05:58 am
Jesus Tap dancing Christ. It was the CRC. I used UltraEdit instead of PSPad. I couldn't see the carriage returns in PSPad. I fiddled around with the .cfg file unit I could get a match with the default conf.cfg to find out what exactly it was looking for.

Now it's reading 320x240. I made backup's of the entire file structure in case I messed something up while tinkering. I hold on to them 'if' I need to send it back for any warranty reasons. :)

Now I just need to decided on the E4 or the E40 and do this again for myself.  :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 04, 2014, 03:06:26 am
Its ALIVE!

Along from having files installed that had issues, I had other problems.  One, was finding the hidden menu.
What I understood from others was not the right place, a matter of symantecs I suppose.  Once I got the
rndis mode turned on, found that the computer recognized the e40.  I went to device manager and found
that the driver still wasn't all there.  I manually installed the usb driver and was finally able to connect to
the camera and see the directory tree. 

I have replaced all the files with the original files and I'm 100% back now.

I will also stick with the usb communication in the future, more reliable than wi-fi.

Next is to read over what you have put out there to upgrade my e40.

I know I've been a pest but want to pat all of you on the back for helping me out.

Thanks again, now to move on.

Jim here in Kalifornia

I'm still not out of the woods -

I have the rndis driver loaded on my computer.  I'm using filezilla, but am unable to connect to the computer.  Isn't the
default ip address 192.168.0.2?  Are there other addresses I should try?  When the cam is in the rndis mode, and plugged
into the computer, the computer recognized the need for a driver and found it.  I'm assuming it also uses the uid of flir and
the passwd of 3vlig, correct?

Probably the first thing I'll do when this beast wakes up is to restore it to the original files, then take a breath of air.

Thanks everyone, but still trying to connect.  I will also take the advise to connect in the future to use the usb and
not the wi-fi, that's a weak link so I've learned.  Easy to use, but like walking on thin ice.

OK, after messing around for a few hours and checking CRC's, file names, and etc. I can confirm that the E40 will not load another .cfg file other than conf.cfg. If I change conf.cfg and regenerate a new CRC the camera crashes, even though I have done everything correctly. Put the original one back and it's normal again. I even reduced the IR resolution to 80x60 in the e60.cfg file and nothing happened. It simply won't read anything else. This is on one of the 'new' E40's that start with a 645.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 04, 2014, 03:41:11 am
Just a note.... I did ask about the inability to connect in rndis mode, with a network cable plugged in, and was informed to manually set the NIC's metrics.  This didn't seem to make any difference, but I DO know that IF I unplug ALL network cables, wifi, the camera will connect.
Seeing as I don't do this very often, I won't really worry about it, but the camera seems to misbehave with other network connections...
Just my findings and NOT necessarily a common problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 04, 2014, 05:32:13 am
Orby - I just sent you a pm, have a question about crc.  Perhaps you can give me an answer.

Jim

If I change conf.cfg and regenerate a new CRC the camera crashes, even though I have done everything correctly.

With that - you are likely not editing the file correctly then.

Does the CRC you generate if you change NOTHING but removing the CRC match one one you removed? (if not - ya messed up)
Do you clearly understand what CR, CRLF and LF stand for? (if ya don't - STOP)
What text editor are you using? (if you don't know why this is important - see above)


Your modifying a $1000+ piece of kit with no built in restore method - failure here could mean it has to go back to FLIR to be fixed and likely on your dime for the whole thing. This is not the place for winging it.

I have the rndis driver loaded on my computer.  I'm using filezilla, but am unable to connect to the computer.  Isn't the
default ip address 192.168.0.2?  Are there other addresses I should try?  When the cam is in the rndis mode, and plugged
into the computer, the computer recognized the need for a driver and found it.  I'm assuming it also uses the uid of flir and
the passwd of 3vlig, correct?

When you connect the cam via USB in RNDIS mode it pops up with the info down by the time - just watch and wait. If that is the IP that pops up and you still cannot connect your going to have to check to make sure there are no firewalls interfering and do some reading on windows interface metrics and how to modify them. It's already been covered in this thread so you can Google it like others have already pointed out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on February 04, 2014, 09:00:14 am
Hi everyone!

Is it possible to change the model number (from E4 to E8) in the firmware configuration?

When I transfer the thermal images to my computer & open them in the FLIR Tools it's still says camera model: FLIR E4, also after the 320x240 "E8" hack.


Cheers
Erik
You have a PM!

I managed to find the EEPROM fix half an hour before i got the PM, but thanks anyway.  :) People inhere is very helpful.
I also did the Menu hack - Beta 3, so thanks to Taucher also!  :)

Cheers
Erik
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 04, 2014, 09:02:22 am
Just a note.... I did ask about the inability to connect in rndis mode, with a network cable plugged in, and was informed to manually set the NIC's metrics.  This didn't seem to make any difference, but I DO know that IF I unplug ALL network cables, wifi, the camera will connect.
Seeing as I don't do this very often, I won't really worry about it, but the camera seems to misbehave with other network connections...
Just my findings and NOT necessarily a common problem.
Please note there are "intelligent" LAN/WLAN drivers which divers that disable the other interfaces if they are connected - the camera player software comes with the newest/best flir drivers and the camera IP can vary... but it's always the default gateway of the INFRARED "network card". Also sometimes bad front-USB ports (internal cables out of spec) can cause trouble.
Computers always do things in an ordered manner ... it's mostly just the user that fails to detect where something went an unintended/wrong way :)

@CRC01:
Guys... I wrote EzCRC01 to be able to fix any CRC01 - just drag&drop an alternate config file onto it - xxxxxx-replace the CRC and SN to be asked for them.
I can't believe the amount of "chat" happening here about something that got documented since at the start of the hack already.

@Bricking:
As reported by myself I got inquired how to fix a maximally ereased E4 - just appcore.exe and a few other files did stay (protected) ... applying the latest downloadable firmware did solve the problem (even beeing a small downgrade) - I guess it pays out to actually read all those pages here :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 12:24:18 pm
@Taucher,

Thanks for the comment regarding bricking and the solution that was employed. I find it interesting that FLIR have a relatively old firmware version available to download on their site,  but not the latest 1.19.8. I was considering emailing FLIR to ask for the latest firmware but as I would have to provide my already registered serial no. they will know that I am already on 1.19.8.

Does anyone with an earlier firmware version want to ask FLIR for 1.19.8 ? ....it might help the Ex series community to have it available in case of emergency or if it contains useful bug fixes. To date I don't think any differences between the various firmwares have been traced to bug fixes. Probably just tidying up the code a little ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 04, 2014, 01:10:45 pm
Probably just tidying up the code a little ?
I have never seen any company, which would release new firmware with just "tidying up the code" while taking risk of new bugs.
In fact probably I have never seen a company "tidying up the code" :-D

I was working for several big software companies in the past 10 years. No technical leader will put his head for just tidying :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 01:16:03 pm
@daves,

In that case bug fixes look likely and so there MAY be a good reason for owners of earlier firmware versions to upgrade. I say MAY because I am not a supporter of upgrading firmware for no good reason. I wonder if FLIR will tell me what they changed in 1.19.8 ? Its worth a try. I will email them and see what they say. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 04, 2014, 01:24:37 pm
I tried the ezCRC, it ran on my computer but all I wanted was a CRC calc.  As I understand it continues on and creates a zip
file which I believe one would rename to a .fif? file.  Can it be used to simply produce a CRC?

I'm still puzzled as to why I can't create the same crc as my original file has, tried it on different systems, I insist I haven't
modified the file, but who knows, perhaps the system did in the process and I didn't now it.  I was using notepad.

Got to leave for work, only for a while though.

Jim

Just a note.... I did ask about the inability to connect in rndis mode, with a network cable plugged in, and was informed to manually set the NIC's metrics.  This didn't seem to make any difference, but I DO know that IF I unplug ALL network cables, wifi, the camera will connect.
Seeing as I don't do this very often, I won't really worry about it, but the camera seems to misbehave with other network connections...
Just my findings and NOT necessarily a common problem.
Please note there are "intelligent" LAN/WLAN drivers which divers that disable the other interfaces if they are connected - the camera player software comes with the newest/best flir drivers and the camera IP can vary... but it's always the default gateway of the INFRARED "network card". Also sometimes bad front-USB ports (internal cables out of spec) can cause trouble.
Computers always do things in an ordered manner ... it's mostly just the user that fails to detect where something went an unintended/wrong way :)

@CRC01:
Guys... I wrote EzCRC01 to be able to fix any CRC01 - just drag&drop an alternate config file onto it - xxxxxx-replace the CRC and SN to be asked for them.
I can't believe the amount of "chat" happening here about something that got documented since at the start of the hack already.

@Bricking:
As reported by myself I got inquired how to fix a maximally ereased E4 - just appcore.exe and a few other files did stay (protected) ... applying the latest downloadable firmware did solve the problem (even beeing a small downgrade) - I guess it pays out to actually read all those pages here :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 04, 2014, 01:25:20 pm
I have 1.19.8 with all the enhancements here, and it

1) crashes several times with "appcore error" right after boot, in case it turned itself from standby to off previously. Example - use the camera, turn it off (standby), leave it 14 days untouched, it will turn itself to off in meantime. After boot appcore error appears.

2) sometimes freezes while working. It can freeze softly with some mess, noise, ghost, squares on screen. Or It can freeze hardly into black screen. Both needs battery remove. After power on it is ok. Always happened to me under freezing temperatures, never above 0°C.

Both time by time, not frequently.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 04, 2014, 01:30:43 pm
I'm still puzzled as to why I can't create the same crc as my original file has, tried it on different systems, I insist I haven't
modified the file, but who knows, perhaps the system did in the process and I didn't now it.  I was using notepad.

Doing the crc01 on your known to work default config file is indeed a good sanity check. If you do not get the same old CRC01 result back, then you're doing something wrong somewhere. Traditionally something related to CRLF line termination.

When I'm paranoid about finicky files, I sometimes use a hexeditor to check the file contents.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 01:43:39 pm
I note the comment about not having changed the original file. Would that not cause this issue as it will have a CRC entry present at the bottom of the file ? The very presence of the Checksum throws off the CRC calculation. You have to delete the original CRC checksum result from the file then run it through the CRC calculator and create the checksum. Compare this to the one you deleted. they should be the same. Just a thought. Not wanting to insult you at all but are you aware of what the CRC checksum is and how it is produced ? If not, please be aware that a CRC calculator takes EVERY character present in a file and produces a checksum representing that files content. If you have ANY additional characters present in the file it will destroy the checksum validity. Please take a look at the E4 e8.cfg file to see what it should look like at the end. You will see a position for the serial number to be entered, Then CRC is run, then resultant checksum is entered into e8.cfg file at the bottom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on February 04, 2014, 04:26:26 pm
I have 1.19.8 with all the enhancements here, and it

1) crashes several times with "appcore error" right after boot, in case it turned itself from standby to off previously. Example - use the camera, turn it off (standby), leave it 14 days untouched, it will turn itself to off in meantime. After boot appcore error appears.

2) sometimes freezes while working. It can freeze softly with some mess, noise, ghost, squares on screen. Or It can freeze hardly into black screen. Both needs battery remove. After power on it is ok. Always happened to me under freezing temperatures, never above 0°C.

Both time by time, not frequently.

I can confirm both.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on February 04, 2014, 05:52:37 pm
Hi guys, I'm still lurking. Still haven't got a camera yet, but depending upon the outcome of Emtech's E40 upgrade I may be tempted by an E40 myself. Although some questions may be frustrating, please keep on answering because there are others who are interested and your answers may help them. Even though I have read every page, I could quite easily see myself asking a dumb question!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Radget on February 04, 2014, 06:03:43 pm
I have 1.19.8 with all the enhancements here, and it

1) crashes several times with "appcore error" right after boot, in case it turned itself from standby to off previously. Example - use the camera, turn it off (standby), leave it 14 days untouched, it will turn itself to off in meantime. After boot appcore error appears.

2) sometimes freezes while working. It can freeze softly with some mess, noise, ghost, squares on screen. Or It can freeze hardly into black screen. Both needs battery remove. After power on it is ok. Always happened to me under freezing temperatures, never above 0°C.

Both time by time, not frequently.


I've had #1 happen several times and it doesn't take as long as two weeks - just a few days sometimes. Always reversible with battery removal and restart.

Never yet #2 but I haven't done freezing temps with the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 06:45:42 pm
We should track any 'strange behavior. Happy to add it to my useful information thread.

I am running HW1.0 with FW 1.19.8 and Enhancement Beta2A. No crashes or strange behaviour to date and my unit has seen plenty of use. I have had teh unit drop itself down from 'standby' to fully off but consider that an intentional battery management function to avoid teh standby mode creating a discharged battery condition after a period of no use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mzzj on February 04, 2014, 09:04:00 pm
Just did quick sanity check on low  temperature accuracy and results aren't that good:

Measuring melting snow(or ice flakes) at room temperature shows temperatures anywhere between +3 to -7 degrees celsius  :scared:

Also noticed funny drift on measurements, right after turn-on the results are quite(better than 1,0cel)  close to true. But after minute or two the error starts to creep in and measurement results drift lower to anywhere between -4 and -7  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 04, 2014, 09:06:39 pm
Just did quick sanity check on low  temperature accuracy
You can calibrate through calib.rsc (search this thread). I did and now it shows real temperatures outside, even when its freezing. Before calibration it was more then 7°C off.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mzzj on February 04, 2014, 09:13:41 pm
Just did quick sanity check on low  temperature accuracy
You can calibrate through calib.rsc (search this thread). I did and now it shows real temperatures outside, even when its freezing. Before calibration it was more then 7°C off.

Thanks for the hint, this thread is so long that I would have easily missed this.

Only problem is that my readings drift like crazy after startup  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 04, 2014, 10:03:30 pm
New BFIC (version 0.9) available in my footer note. Now there is also support for interior.

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79939;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 04, 2014, 11:20:53 pm
@mzzj,

Please be aware that the microbolometer  in these cameras is not cooled....its heated to 30C .

When the camera is switched on you will see the '~' to the left of the measured temperature. This indicates that the thermo-electric heater is heating the microbolometer to operating temperature.
Until the '~' disappears (indicating correct operating temp) the readings will drift.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ericpi on February 05, 2014, 12:48:00 am
Ordered my E4 from Amazon, and it just arrived today.  Calibration date is January 23, 2014.  Still came with firmware 1.19.8.

I applied the firmware hack, and it worked perfectly!  I thought the resolution (with MSX) was decent before the upgrade, but now with the full 320x240, it looks amazing! 

Thanks to Mike and all who helped put this together  :-+

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 05, 2014, 03:16:03 am
Aurora:

Problem with crc solved!

You are right (of course!), you can't see <crlf> or white spaces, or any hidden, non-visable characters, but they all count
towards the crc, check sum, or whatever method you use to establish file integrity.  I was about to view the
file with a hex editor to verify there was nothing there that shouldn't be there.

The problem was very simple, as most problems and solutions are.  I didn't realize, and I'm sure this has been
mentioned many times, immediately after the last character in the serial number, there should be nothing, nothing
but one blank line below.  To insure that, you can put your curser right after the last character and pound away
on the delete key or use any other method you choose.  Then tap the <enter> key one time.  Then save the file.
There should be no remnants of the # or the previous checksum, nothing.  Again, extremely basic, but looks
like I'm not the only person who got this wrong.  I've seen so many examples where a bunch of xxxxx were put
in instead of the single blank line.

Now on to some fun stuff!

And no, you didn't insult me, believe it or not, I listen to all of you, my hearing may not be too good though.

Thanks everybody who answered my PM's and gave me good advise.

Jim H.

I note the comment about not having changed the original file. Would that not cause this issue as it will have a CRC entry present at the bottom of the file ? The very presence of the Checksum throws off the CRC calculation. You have to delete the original CRC checksum result from the file then run it through the CRC calculator and create the checksum. Compare this to the one you deleted. they should be the same. Just a thought. Not wanting to insult you at all but are you aware of what the CRC checksum is and how it is produced ? If not, please be aware that a CRC calculator takes EVERY character present in a file and produces a checksum representing that files content. If you have ANY additional characters present in the file it will destroy the checksum validity. Please take a look at the E4 e8.cfg file to see what it should look like at the end. You will see a position for the serial number to be entered, Then CRC is run, then resultant checksum is entered into e8.cfg file at the bottom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on February 05, 2014, 04:04:01 am
Yeah, the spacebar issue was mentioned around 150 pages back.

Damn, this thread has gotten long.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on February 05, 2014, 05:55:55 am
@Emptech, has upgrade worked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: carrierlost on February 05, 2014, 09:47:43 am
Greetings from Estonia!

I've been lurking around for a couple of months now and last last week finally decided to buy one.
I'm about  10km from the Flir plant here in Tallinn, unfortunately they dont sell direct :(
Local dealer fortunately had them in stock and I got mine for good price after asking for a quote  :-+

Mine is a 1.1 HW with a serial number 639101xx calibrated on Dec 12, 2013. Firmware 1.19.8

Upgrade to E8+ went smoothly. Thanks guys for the good work  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: carrierlost on February 05, 2014, 10:37:42 am
New BFIC (version 0.9) available in my footer note. Now there is also support for interior.

Good work! Some bugs,comments, suggestions:

1. I accidentally clicked clicked on DVD drive (which was empty) when selecting destination folder, and it decided to give me runtime error 68, device not available and exited.

2. I had some pre-hack E4 shots - it miscalculates the thermal image size incorrectly there and thermal image is shown squished in vertical axis.

3. Would it be possible to automatically detect if min or max measure points were selected when image was taken and add them to the output automatically?

4. Thermal Fusion is an interesting feature. In editor its possible to select internal/external and it works.
In the main windows there is no selection and it defaults to  external only?
Perhaps it could auto-detect the external /internal  somehow ? Based on temperature or presence of min or max cursors? If min cursor was taken its likely its an indoor picture and in case of max cursor outside? If detection is not possible perhaps just a radio-box then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TX Tim on February 05, 2014, 03:26:19 pm
FLIR just posted "FLIR Ex (1.21.0) Update Pack" on their custhelp site. Interestingly, the file "Z3comb_v1.21.0.fif" inside has a timestamp of 2014-01-13.

Has anyone tried this?

I'm another potential purchaser lurking here. Thanks for everyone's great research and contribution to this project!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 03:35:11 pm
Now that doesn't look too good when comments regarding a potentially 'fixed' V1.2 firmware are considered. I would not install that firmware unless I could determine whether it would block or reverse the 'enhancement ' process.

I will be downloading it for a look-see.

Over to the resident experts for their views on its content
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on February 05, 2014, 04:07:40 pm
Does anyone with an earlier firmware version want to ask FLIR for 1.19.8 ? ....it might help the Ex series community to have it available in case of emergency or if it contains useful bug fixes. To date I don't think any differences between the various firmwares have been traced to bug fixes. Probably just tidying up the code a little ?

I tried that, their response was:
Quote
The difference between 1.18.7 and 1.19.8 is production related and therefor not added for manual download.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 04:16:15 pm
@edavid,

Thanks for that information. I asked FLIR service & support  for the release notes on 1.19.8 and a download location. Nothing heard yet. I guess they will direct me towards their all new and shiny version 1.21.0, also supplied without any release notes  :--

I have updated my useful information 'serial number against FW version' page to reflect the new release. As time from production to customer is quite short, we will likley be seeing cameras with FW 1.21.0 installed quite soon.

I downloaded the new firware and have it in pieces all over my desktop. Time to have a good dig around in it. For anyone unaware.... if you wish to look inside the .fif file, just rename it with a suffix of .zip and it may be opened and dismantled.

I am keeping it well away from my E4(8+) and as it has no release notes it is hard to know what, if any, advantage there may be in using it (even if tamed >:D )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nazar404 on February 05, 2014, 04:24:29 pm
Hello All,

Just as a note "TEquipment" has FLIR E4 in stock ... 64 units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 05, 2014, 04:37:06 pm
Apart from the obvious steps of looking at file differences, it might be interesting to try running just the executable from the new update - should be safer than a full update and may indicate if they've changed things like the cal data format, which could be a barrier to downgrading if it proved necessary.
 
Actually, I can think of someone who could try the update without risking the functionality of their  camera as it's already an E8.... Dave?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 05, 2014, 05:37:16 pm
Yes, the e40 camera  is now where I wanted it to be.  I had problems with the CRC and those have now
been resolved.  One of our members edited my conf.cfg files for me, created a proper crc number, the file
was downloaded to the camera, and wow!  I now have 320x320 resolution and up to 8x zoom selection.

I really don't know what else I could ever ask for.

What saved me was getting the rndis/usb to work, I was trying to get the hidden menu from the wrong menu.

Thanks everyone for having the patients to help me.

Jim

@Emptech, has upgrade worked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bovvy on February 05, 2014, 05:41:54 pm
Emptech, is your E40 a pre October 2013 model? Or is it the newer on with MSX?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 05:58:58 pm
FLIR just posted "FLIR Ex (1.21.0) Update Pack" on their custhelp site. Interestingly, the file "Z3comb_v1.21.0.fif" inside has a timestamp of 2014-01-13.
Has anyone tried this?
I'm another potential purchaser lurking here. Thanks for everyone's great research and contribution to this project!
Thanks for hinting!
direct link:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip)

As already reverse-checked (and confirmed by the recent postings quoting Flir support) - firmware 1.19.8 did just change wording and some reporting forms inside the builtin webserver (factory hidden usually) ... so this one will be interesting.

I'll investigate the differences ASAP :)


Title: IMPORTANT
Post by: Taucher on February 05, 2014, 06:18:35 pm
+++ticker+++ticker+++ticker+++

ATTENTION ALL USERS
the new firmware (1.21.0) is likely designed to hinder/stop the hack!


look for yourself - introduction of a new CRC algo ....

Code: [Select]
Applaunch.dat:
# doCRC FlashBFS\system\appcore.exe 1760768 3442989494
# doCRC FlashBFS\system\common_dll.dll 1193984 3567384037
# doCRC FlashBFS\system\progressapp.exe 27648 3868968713
# doCRC FlashBFS\system\defaultusr.exe 5120 784976136
# ID all
# CRC03 aad87665

... do I need to say more?   :palm:

PS: I like the "all" keyword there

EDIT: other noteworthy losses:
- major parts of the webserver got removed
- restartapp.bat got removed (I guess they guessed it's handy)
- rdump: lost helpscreen on switch: -h hash_type ... CRC32 calculation etc (yeah, cleansweep)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 05, 2014, 06:25:23 pm
BOVVY:

I purchased the camera almost two years ago from Mid-State Instruments here in Kalifornia.
The dealer was able to work with me and gave me a small discount from the $4K list price.
I believe the manufacturing date is in 2011.  No, it is not the newer one with MSX.

I was hoping to use it for thermal surveys for customers, but that never happened.  I'd still
like to find a way to have this camera pay for itself.

Some local HVAC companies in their sales pitch offer for a free thermal analysis of people's homes,
I should have it done here to find what they are doing.  I'm not ready to take the $2K course from
the IR Training Center, unless I knew I could at least break even.

Jim

Emptech, is your E40 a pre October 2013 model? Or is it the newer on with MSX?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 06:30:05 pm
Taucher,

Many thanks for the fast work on this. Not totally unexpected though.

Just changing the CRC algo and the passwords would be a significant challenge to most generalist users like me, and I guess that is what they have done ? Not sure if they have changed the '3vlig' password though.

Firmware downgrading will also be an interesting area.... FLIR no longer show the 1.18.7 firmware on their site and I wonder if they have blocked downgrading to earlier FW versions as well.
Title: Re: IMPORTANT
Post by: mikeselectricstuff on February 05, 2014, 06:57:44 pm

Look for yourself - introduction of a new CRC algo ....

I wonder if service mode still stamps the template file with the CRC though..

..and what about updates done to old units which will have old-style CRC01-stamped config files?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on February 05, 2014, 07:00:46 pm
So I am guessing this new update has killed the E4->E8 hack?  Pity as I was just going to grab one with my tax return...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 07:06:07 pm
Update on 1.21.0:
Regarding the questions - the CRC algorithm seems to have gotten 2-stage, with the "doCRC" beeing CRC32 or some derivative
and CRC03 something different (please remember: we have 4! CRC sections inside crc01 source prepared already ... takes some time to check if they fit)

Anway - first a quick overview what changed

NEW:
flashbfs/system/suid.exe   <-------!

REMOVED FILES (from 1.17.8 -> to 1.21.0):
SCROLLBOX:
Code: [Select]
flashbfs/system/cemgrc.exe
flashbfs/system/cerdisp.exe
flashbfs/system/cetlstub.dll
flashbfs/system/clientshutdown.exe
flashbfs/system/cmaccept.exe
flashbfs/system/conmanclient2.exe
flashbfs/system/conmanclient3.exe
flashbfs/system/devicedma.dll
flashbfs/system/dumpcoff.exe
flashbfs/system/edbgtl.dll
flashbfs/system/fmqping.exe
flashbfs/system/fvd.exe
flashbfs/system/i2c.exe   <===========!
flashbfs/system/pmic.exe
flashbfs/system/regsvrce.exe
flashbfs/system/tcpconnectiona.dll
flashbfs/system/tcpipc.dll

flashbfs/system/bit/images/black.bmp
flashbfs/system/bit/images/blue.bmp
flashbfs/system/bit/images/green.bmp
flashbfs/system/bit/images/red.bmp
flashbfs/system/bit/images/white.bmp
flashbfs/system/bitapp.exe
flashbfs/system/camtorrent.exe

flashbfs/system/prodapp.exe
flashbfs/system/prodisapi.dll
flashbfs/system/restartapp.bat
flashbfs/system/torrenterrorcodes.xml
flashbfs/system/torrenterrorcodes.xsd
flashbfs/system/torrenterrorcodes.xsl
flashbfs/system/web/black-240x320.mov
flashbfs/system/web/images/a2.jpg
flashbfs/system/web/images/a320.gif
flashbfs/system/web/images/cross.gif
flashbfs/system/web/images/cross_1.gif
flashbfs/system/web/images/cross_2.gif
flashbfs/system/web/images/cross_3.gif
flashbfs/system/web/images/dotted_16x12.gif
flashbfs/system/web/images/e2.jpg
flashbfs/system/web/images/e3.jpg
flashbfs/system/web/images/fenix.jpg
flashbfs/system/web/images/ghost.gif
flashbfs/system/web/images/infracam.gif
flashbfs/system/web/images/noimage.jpg
flashbfs/system/web/images/p-remote.gif
flashbfs/system/web/images/pt-cam.jpg
flashbfs/system/web/images/redcross_1.gif
flashbfs/system/web/images/redcross_2.gif
flashbfs/system/web/images/redcross_3.gif
flashbfs/system/web/images/t-cam.gif
flashbfs/system/web/images/thermacamp640.gif
flashbfs/system/web/images/z-cam.gif
flashbfs/system/web/images/z3_astra.jpg
flashbfs/system/web/results.css
flashbfs/system/web/results.xsl
flashbfs/system/web/service/calib/accmeas.asp
flashbfs/system/web/service/calib/accmeasmeasure.asp
flashbfs/system/web/service/calib/accmeasprotocol.asp
flashbfs/system/web/service/calib/accmeasremove.asp
flashbfs/system/web/service/calib/accmeasselect.asp
flashbfs/system/web/service/calib/accmeassetobjpar.asp
flashbfs/system/web/service/calib/calibacc.asp
flashbfs/system/web/service/calib/index.asp
flashbfs/system/web/service/calib/syscalib.asp
flashbfs/system/web/service/calib/syscalibactivate.asp
flashbfs/system/web/service/calib/syscalibaddlenscase.asp
flashbfs/system/web/service/calib/syscalibcalculate.asp
flashbfs/system/web/service/calib/syscalibeditlimits.asp
flashbfs/system/web/service/calib/syscalibeditmeas.asp
flashbfs/system/web/service/calib/syscalibenadisa.asp
flashbfs/system/web/service/calib/syscalibfarfocus.asp
flashbfs/system/web/service/calib/syscalibmeasure.asp
flashbfs/system/web/service/calib/syscalibprotocol.asp
flashbfs/system/web/service/calib/syscalibrangeenadisa.asp
flashbfs/system/web/service/calib/syscalibselect.asp
flashbfs/system/web/service/calib/syscalibswitch.asp
flashbfs/system/web/service/calib/transmission.asp
flashbfs/system/web/service/caminfo/accprot.asp
flashbfs/system/web/service/caminfo/calibprot.asp
flashbfs/system/web/service/caminfo/components.asp
flashbfs/system/web/service/caminfo/index.asp
flashbfs/system/web/service/caminfo/opspec.asp
flashbfs/system/web/service/datentime.asp
flashbfs/system/web/service/diag/bit.asp
flashbfs/system/web/service/diag/bitcooler.asp
flashbfs/system/web/service/diag/bitinteractive.asp
flashbfs/system/web/service/diag/bitselftest.asp
flashbfs/system/web/service/diag/highres.asp
flashbfs/system/web/service/diag/index.asp
flashbfs/system/web/service/diag/noise.asp
flashbfs/system/web/service/diag/noisemeasure.asp
flashbfs/system/web/service/diag/noiseresults.asp
flashbfs/system/web/service/diag/post.asp
flashbfs/system/web/service/diag/postlog.asp
flashbfs/system/web/service/diag/servicedue.asp
flashbfs/system/web/service/diag/statistics.asp
flashbfs/system/web/service/eeprom/edcaminfo.asp
flashbfs/system/web/service/eeprom/edcomp.asp
flashbfs/system/web/service/eeprom/edlens.asp
flashbfs/system/web/service/eeprom/index.asp
flashbfs/system/web/service/focus/alignment.asp
flashbfs/system/web/service/focus/alignmentpt.asp
flashbfs/system/web/service/focus/alignmentvisvis.asp
flashbfs/system/web/service/focus/focus.asp
flashbfs/system/web/service/focus/focussd.asp
flashbfs/system/web/service/focus/index.asp
flashbfs/system/web/service/focus/laser.asp
flashbfs/system/web/service/focus/lensdist.asp
flashbfs/system/web/service/imgcorr/activatedigfilters.asp
flashbfs/system/web/service/imgcorr/gainmap.asp
flashbfs/system/web/service/imgcorr/gainmapcalc.asp
flashbfs/system/web/service/imgcorr/gainmapcalcgf.asp
flashbfs/system/web/service/imgcorr/gainmapcold.asp
flashbfs/system/web/service/imgcorr/gainmapresult.asp
flashbfs/system/web/service/imgcorr/gainmapselcase.asp
flashbfs/system/web/service/imgcorr/gainmapwarm.asp
flashbfs/system/web/service/imgcorr/imgcorrselcase.asp
flashbfs/system/web/service/imgcorr/index.asp
flashbfs/system/web/service/imgcorr/operability.asp
flashbfs/system/web/service/imgcorr/operabilitylog.asp
flashbfs/system/web/service/imgcorr/pixkill.asp
flashbfs/system/web/service/imgcorr/shuttermap.asp
flashbfs/system/web/service/imgcorr/staticmap.asp
flashbfs/system/web/service/imgcorr/staticmapcalc.asp
flashbfs/system/web/service/imgcorr/staticmapcold.asp
flashbfs/system/web/service/imgcorr/staticmapprepare.asp
flashbfs/system/web/service/imgcorr/staticmapresult.asp
flashbfs/system/web/service/imgcorr/staticmapwarm.asp
flashbfs/system/web/service/inc/accmeasprottempl.inc
flashbfs/system/web/service/inc/calibprottempl.inc
flashbfs/system/web/service/inc/eepromlock.inc
flashbfs/system/web/service/inc/errorcodes.inc
flashbfs/system/web/service/inc/servicemenu.inc
flashbfs/system/web/service/inc/serviceutils.inc
flashbfs/system/web/service/index.asp
flashbfs/system/web/service/ppr.asp
flashbfs/system/web/service/ppri.htm
flashbfs/system/web/service/tdrift/curcomp.asp
flashbfs/system/web/service/tdrift/index.asp
flashbfs/system/web/service/tdrift/logging.asp
flashbfs/system/web/service/tdrift/sensors.asp
flashbfs/system/web/web-addon/a-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/a-web-addon/index_s.asp
flashbfs/system/web/web-addon/a-web-addon/index_us.asp
flashbfs/system/web/web-addon/a2-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/a2-web-addon/index_s.asp
flashbfs/system/web/web-addon/a2-web-addon/index_us.asp
flashbfs/system/web/web-addon/e-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/e2-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/e3-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/fx-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/g-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/p-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/prem-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
flashbfs/system/web/web-addon/pt-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/x-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/x2-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/z-web-addon/inc/camtype.inc
flashbfs/system/web/web-addon/z3-web-addon/inc/camtype.inc
[/s][/color]

MOVED IN PLACE (STORAGE LOCATION/KIT):

flashbfs/system/resmon.exe
flashbfs/system/syslog.exe


New commands (one time after upgrade):
oneshot.rsc -> main purpose: emptry out FlashFS\system\appcore.d\factory.d



Applaunch.dat:
# doCRC FlashBFS\system\appcore.exe 1760768 3442989494
# doCRC FlashBFS\system\common_dll.dll 1193984 3567384037
# doCRC FlashBFS\system\progressapp.exe 27648 3868968713
# doCRC FlashBFS\system\defaultusr.exe 5120 784976136
# ID all
# CRC03 aad87665


FlashBFS\system\ui.d\facet_Z3.rcc -> JS sections got removed or compressed (needs some more investigation)

appcore.exe:
- a few blocks changed, all end-of-something markers got changed
- new function/class AVCIFCWindow

FPGA.bin:
- inner structure changed totally - but it's obvious it has 4 major segments

MEMO:
new CRC shows significant similarity to nk.crc file employed even in old 1.17.8 firmware
<filename> <size> <CRC32>
keywords: "all" for CRC03, "undefined" as value for CRC32
Title: Re: IMPORTANT
Post by: Taucher on February 05, 2014, 07:13:56 pm
Look for yourself - introduction of a new CRC algo ....
I wonder if service mode still stamps the template file with the CRC though..
..and what about updates done to old units which will have old-style CRC01-stamped config files?

I'm not sure if it's so "new" after all - but I'm pretty sure there could be something buried inside the code telling "convert 01 to 03" and add CRC32 lines...
Just the fact that they "armored" applaunch.dat with a CRC03 and removed hints on CRC calculation from the rdump helpscreen tells me there's something fishy...
On top of this a combination of CRCs got employed (doCRC function).

RIght now I have the gut feeling this is a "mild" measure - but we'll see
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 07:33:22 pm
As many will know....when a patch is issued for a software, it can often be reverse engineered to discover what vulnerability it is protecting from exploitation. Sadly this is a technique used by Black Hats to attack IT that is not kept up to date on its patching.

Now consider the new FLIR firmware and the fact that is is still compatible with Version 1.0 hardware....... I wonder what could be extracted from the changes that FLIR have done  ;)

It is interesting to read that the FPGA code has been changed.

I am wondering if 'defence in depth' is being employed to improve the defences against modification.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 05, 2014, 07:47:16 pm
Hard to describe the feeling now...

You know... usually there is some BUS, which tells IT to prevent it against the hack. So IT SDO will force some PM who will force some TL to develop the antihack.

This forum is FLIRED = well monitored by FLIR.

If you will prove you can hack easily new version, someone will get fired  :-//

So now it will be very well secured    OR    I do not understand it at all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 05, 2014, 07:47:36 pm
Aurora:

Problem with crc solved!

You are right (of course!), you can't see <crlf> or white spaces, or any hidden, non-visable characters, but they all count
towards the crc, check sum, or whatever method you use to establish file integrity.  I was about to view the
file with a hex editor to verify there was nothing there that shouldn't be there.

The problem was very simple, as most problems and solutions are.  I didn't realize, and I'm sure this has been
mentioned many times, immediately after the last character in the serial number, there should be nothing, nothing
but one blank line below.  To insure that, you can put your curser right after the last character and pound away
on the delete key or use any other method you choose.  Then tap the <enter> key one time.

Thanks everybody who answered my PM's and gave me good advise.

Jim H.

I note the comment about not having changed the original file. Would that not cause this issue as it will have a CRC entry present at the bottom of the file ? The very presence of the Checksum throws off the CRC calculation. You have to delete the original CRC checksum result from the file then run it through the CRC calculator and create the checksum. Compare this to the one you deleted. they should be the same. Just a thought. Not wanting to insult you at all but are you aware of what the CRC checksum is and how it is produced ? If not, please be aware that a CRC calculator takes EVERY character present in a file and produces a checksum representing that files content. If you have ANY additional characters present in the file it will destroy the checksum validity. Please take a look at the E4 e8.cfg file to see what it should look like at the end. You will see a position for the serial number to be entered, Then CRC is run, then resultant checksum is entered into e8.cfg file at the bottom.
Just to add my method...
I just "right cursor" and see where the cursor ends up.
If there are more than just an additional line (blank) with NO spaces, I know there is just ONE CRLF.
I use notepad WITHOUT wordwrap turned on.
just a FYI...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 05, 2014, 07:48:33 pm
New BFIC (version 0.9) available in my footer note. Now there is also support for interior.

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79939;image)
That's some SCARY mold!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 05, 2014, 07:52:34 pm
I wonder how hard it will be to reverse-engineer the new algorithm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on February 05, 2014, 08:03:22 pm
Looks like older firmware will be a good seller on Ebay then for a while.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 05, 2014, 08:23:03 pm
Looks like older firmware will be a good seller on Ebay then for a while.
Yeah, its very kind from FLIR to do new firmware hack-proof, since now our tweaked E4 is raising its value :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 08:27:17 pm
So the 10 I have in my garage are now worh about 2K each then  ;D

Just kidding  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rsivan on February 05, 2014, 08:29:37 pm
I have 10 units for sell, old fw.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 08:31:27 pm
The dealers like PASS had better get ready for another mad rush to buy up FW 1.19.8 stock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 05, 2014, 08:33:41 pm
I have 10 units for sell, old fw.

Wow  :)
Let's know how much you will ask for one
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rsivan on February 05, 2014, 08:36:13 pm
Make offers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on February 05, 2014, 08:38:29 pm
I'm just thinking out loud:
You have a hacked E4 with firmware version 1.19.8 or older and for whatever reason you want to install the update.
After installing the update you have the new software on your device. But the configuration files (especially our modified one) should still be the same. I took a short look at the camera.cmd, looks very much like the other ones except some new or removed files. They just move some files from here to there, delete some directorys, check some versions, ...
Now you power up your camera with the new software for the first time. There are two possibilities:

If they really have done something like a plausibility check, the next question is: How do they determine which camera we have? Because it has been stated before that you can change the "E4" in the EEPROM.

And it would be also interesting to talk about ways or measures they could have taken to prevent firmware downgrade. Because Taucher already helped someone bringing a bricked device back to life with a small firmware downgrade. And it didn't seem to have caused any issues with the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 08:46:59 pm
Please calm down and let us check that firmware first (or try on your own) - good things take a moment or two.

Preliminary checks indicate there are some countermeasures in place or they got prepared - but it's no 100% check yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rsivan on February 05, 2014, 08:48:58 pm
I checked stock on distrelec here in Italy, they have 10 units left, I got mine 1 week ago when stock was 16+ and fw is old one I done patch 100% ,price was €995+vat 22% ,also I see on ebay Germany one seller have 80> in stock,and auction claim to be fw 1.19.8.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 08:50:18 pm
I have just emailed Dave at PASS to establish their stock levels for UK buyers.

I will post details here as soon as he responds.

I had a very good buying experience with PASS but you should deal directly with David Atkins as he knows all about the E4 and this Blog. If you really want an E4, you could do a lot worse than ordering one from PASS.

Contact details here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on February 05, 2014, 09:03:29 pm
Update on 1.21.0:
...
FPGA.bin:
- inner structure changed totally - but it's obvious it has 4 major segments

This could be the most interesting part of the update :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 09:05:15 pm
Hmmmm yes .... that was my thought as well. Why change something that is of no consequence. Someone didn't like the FPGA programming...... another vulnerability ?   :-X
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 05, 2014, 09:06:32 pm
So... who's going to be the guinea pig? :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 09:07:11 pm
Update on 1.21.0:
...
FPGA.bin:
- inner structure changed totally - but it's obvious it has 4 major segments

This could be the most interesting part of the update :D

actually not - that code is auto-generated and even a small change could lead to massive deviations in the internal structures
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 05, 2014, 09:16:41 pm
That's some SCARY mold!!!
Indeed. Its taken at 8th floor, humidity going up from lower 7 floors, so its over 70%. And you see, temperature there drops to 12°C (54°F), so its ideal place for mold. There is some problem with the frame insulation.

Good work! Some bugs,comments, suggestions
Thank you for your input. Its still under heavy development, Interior/Exterior switch was "quickly put it there before release" thing. You can override with settings per photo (blue button). Anyway, it will appear also on main screen in next version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 09:16:53 pm
Just a rough check (disregarding compression etc):
1.21.0: strings NK.bin | grep -i crc
# CRC
CRC%d
# doCRC %s %u %u
# doCRC
CRC04
CRC03
CRC02
CRC01
CRC00
CRC32
RCRC
rCrC

For comparison - 1.17.8 firmware:
strings NK.bin | grep -i crc
RCRC
rCrC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 09:20:03 pm
This thread just got very interesting again  :)

I am fortuante enough to already have an E4(8+) but I still find it interesting to see what FLIR have done and their thinking behind the changes.

The problem for our resident code experts, like Taucher, is that they do not have the firmware running 'live' on a platform to see how it behaves. That makes life more challenging for them. I cannot see anyone sane installing this new firmware on an enhanced E4 if it then prevents further enhancement, or worse still, reverts the camera to standard spec.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 10:11:03 pm
Just a small bump for anybody looking how to dissect NK.bin files - look here:
http://www.t-hack.com/wiki/index.php/NK.BIN_toolset (http://www.t-hack.com/wiki/index.php/NK.BIN_toolset)

ViewBin... v1.18.7-NK.bin
Image Start = 0x80100000, length = 0x00A53D54 Start address = 0x80101000
Checking record #190 for potential TOC (ROMOFFSET = 0xFFEE478C)
Checking record #200 for potential TOC (ROMOFFSET = 0x00000000)
NOTICE! Record 200 looked like a TOC except DLL first = 0x4001C001, and DLL last = 0x4063C07B

ViewBin... v1.21.0-NK.bin
Image Start = 0x80100000, length = 0x00A871B0 Start address = 0x80101000
Checking record #195 for potential TOC (ROMOFFSET = 0xFFEB9350)
Checking record #206 for potential TOC (ROMOFFSET = 0x00000000)
NOTICE! Record 206 looked like a TOC except DLL first = 0x4001C001, and DLL last = 0x4063C07C

next stage - extract nb0:
cvrtbin -r -a 0x80100000 -w 32 -l 0x00A53D54 v1.18.7-NK.bin (in own directory (OLD)!)
cvrtbin -r -a 0x80100000 -w 32 -l 0x00A871B0 v1.21.0-NK.bin (in own directory (NEW)!)
# Memo: no warnings should be visible, otherwise offset error likely!

mkdir OLD\dump
mkdir NEW\dump

OLD>dumprom.exe -d dump -v -5 v1.nb0
NEW>dumprom.exe -d dump -v -5 v1.nb0

 ^-^


applauncher.exe is the file containing the new CRC functions (CRC04 CRC03 CRC02 CRC01 CRC00 CRC32) and some debug-messages:
Quote
# CRC
VerifyHash - [CRC error] : done
VerifyHash - [CRC OK] : done
VerifyHash -[CRC%d] : not accepted
# %19s %x
CRC%d
VerifyHash - [CRC not trusted] : done
%S [size]
%S [CRC]
# doCRC %s %u %u
# doCRC
verifyCRC - cannot open %s
Bad Argument(s)! Use "applauncher" for help.

and some additional blocks relating to integrity checking on startup and FAILING if check not passed:
Quote
APPLAUNCHER: Refuses to run launch specification file. Aborting!
FAD call fails:%d hndl:%d err:%d
No integrity check necessary
Integrity: %d
FAD1:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 10:12:12 pm

Mike - I'm convinced it's time to update post #1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 05, 2014, 10:51:52 pm
NK.bin content changes:
applauncher.exe -> MANY changes, grown from 7840b to 18816b - containing new CRC methods (see above)
ceconfig.h -> upgraded tahoma font config
comptab.osimgkit -> added version strings (on top of all up to 1.18.7, 16.0.10, 1.0.13, 1.0.0.7)
      1.18.8, 16.0.10, 1.0.13, 1.0.0.8
      1.19.8, 16.0.10, 1.0.14, 1.0.0.8
      1.20.9, 16.0.12, 1.0.15, 1.0.0.9
      1.20.0, 16.0.12, 1.0.15, 0
default.fdf -> added new driver entry for FADDEV -> faddev.dll (is there a Exx truck charger?!)
faddev.dll -> NEW -> i2c related -> Some strings: IOPortLaserEvent / Failed to create Truck Charger event
nk.exe -> "LOCK BOOTLOADER VERSION" string added, some changes, seemingly one added function and a few short subroutines
tahoma.ttf -> replaced with seemingly some unicode update (size doubled)
 
 
Menu-RCC:
No changes to icons whatsoever - but desktop.qml got extended with this block:
Code: [Select]
         Text {  // Special text displayed in service mode
            anchors.centerIn: parent
            text: "Service mode"
            color: colors.textFocused
            font.pixelSize: fonts.largeSize
            font.family: fonts.family
            visible: greenbox.system.serviceMode
        }

        Rectangle {     // Hide graphics layer
            visible: greenbox.hideGuiLayer
            color: colors.transparent
            width: grid.width
            height: grid.height
        }

 
Conclusion:
The 1.21.0 firmware is designed as hack-stopper (yay, we're important) ... I guess that explains the lack or a changelog - well, we now did it for you *love you Flir, kiss* (it's great fun)
Plus there was a cleansweep to remove anything "extra" (read: reduce hackable binaries, remove helpful stuff)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 05, 2014, 11:09:13 pm
@Taucher,

Thanks for your hard work determining what has been done in the new firmware.

I do not claim to understand much of it but interesting all the same  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 05, 2014, 11:13:30 pm
@Taucher

I can confirm the changes. Flir removed also all the parts to get the high resolution (service) mode:
- removed ProdApp.exe
- removed folder FlashBFS/system/web/service

In old firmwares (tested with Flir Exx) we can get the high resolution by only editing the windows start cmd script (no need of crc)
applaunch.dat
Code: [Select]
# Show intro bootlogo and start progress
progressapp -f \flashbfs\system\bootlogo.bmp -g flashbfs\system\bootlogo_legal.bmp -d
# Start command shell on the RS-232 port
cmd /R
# Register a default user
defaultusr
# Start appcore. Appcore starts other necessary processes
appcore

by adding this lines (or use telnet for testing)
Code: [Select]
#start highres Modus
delay 10
start prodapp
delay 10
rset prod.preparation.command restartHighRes

we get this prod.log file
Code: [Select]
01:40:08  13 Preparation:---------------Command restartHighRes received
01:40:10 Using .image.flow.detector.TFpa to check tempstable
01:40:16  15 Preparation:Restarting in high resolution mode/service mode
01:40:16  16 Preparation:Command restartHighRes, result 0




the password 3vlig is also used for communication between Flir (PC-) Software and camera. Flir doesn't removed it (same result as in 1.18.7):
Code: [Select]
$ for i in $(find . -type f ) ; do echo $i; strings $i | grep 3vlig; done | grep -B1 3vlig
./common_dll.dll
3vlig
--
./kitcrc.exe
3vlig


I wonder if service mode still stamps the template file with the CRC though..
I early used this feature to generate a CRC for my own config files, no troubles with CR/LF  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 05, 2014, 11:31:48 pm
I haven't bought my E4 yet. If this new firmware makes mike's hack invalid, then I'll just not buy the E4. I can't afford a higher res model but I really need it for SMT, and PCB work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wilheldp on February 05, 2014, 11:37:22 pm
It will be really interesting to hear from the Tequipment or PASS reps after the new firmware gets into circulation about how this affects sales of the E4.  Since this is the main place to learn about the hack, and it is already known that the new firmware at least makes the hack harder, I would expect a temporary drop in sales (permanent drop if the brain trust here can't hack the new firmware).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 05, 2014, 11:41:13 pm
It will be really interesting to hear from the Tequipment or PASS reps after the new firmware gets into circulation about how this affects sales of the E4.  Since this is the main place to learn about the hack, and it is already known that the new firmware at least makes the hack harder, I would expect a temporary drop in sales (permanent drop if the brain trust here can't hack the new firmware).
Someone should PM Tequipment here - they have been open about FW versions in the past. If their latest shipment of 64 is old FW, I'm sure they will go quick if they can confirm it. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 05, 2014, 11:46:21 pm
FLIR just dealt a blow to their E4 sales. They must be really proud of themselves.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on February 05, 2014, 11:49:17 pm
And now all the procrastinators come out to cry  |O

I'll be sure to keep my E4+ safely away from any new updates and Flir's website. I'll also be wary of any Flir tools updates (depending on how vindictive Flir decides to be).

cheers,
george.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 12:05:00 am
Oh well, maybe we'll just have to turn attention to that  60FPS raw sensor data stream now. 8)
   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 12:08:46 am
With regard to E4 sales, lets be honest about this.... a number of buyers have bought the E4 with the intention of enhancing its capabilities (me included). In the big scheme of things our purchases may not be that significant and FLIR may not care abour E4 sales if margins are low. They have proved that a decent thermal camera can be offered for under $1K and have the Kudos of that price breakthrough....its has raised their profile over FLUKE etc in that part of the market.

The E4 is still a decent thermal camera even when running in standard rig as it has the very useful and helpful MSX fusion that meets the needs of many for an easily interpretable image that shows areas of different temperature.

We must not forget that FLIR is a big player in the world of professional thermography and industry still happily pays more than $55,000 for a 320x240 industrial camera like the ones I use. That is the big money that FLIR are used to dealing in. It must also be remembered that FLIR effectively bought in the design and technology of the i and E series cameras. They wanted a slice of the consumer/low end TIC market and they got it. I doubt they actually need it to survive, and if it does not perform it will likely be hived off. The i Ex and Exx series are not even made in the same factory as the industrial cameras. I somehow think FLIR will make it work and earn money from it though.

Horrible though it may sound....we, as individuals or small group, are of no consequence to FLIR EXCEPT when 'we' reveal the 'Secrets' within their business model as in the case of the E4 hobbling. That likely caused a little concern, not because we didn't pay for what we got, but rather becuase it didn't look good on the PR front (and possibly some ITAR worries thrown in for good measure) . If FLIR have managed to move the enhancement of an E4 beyond the reach of the average Jo, they will not lose any more sleep over the matter and just treat it as a lessons learnt exercise. Life goes on. For those of us fortunate enough to own enhanced E4's, we owe our thanks to the Team that enabled such on the E4. We are very lucky to have benefitted from their knowledge and persistance. For us, there may even be further capabilty to be released from the E4 platform. For those who did not buy an E4 in the period since release in October 2013, you have my sympathy, but you should have known that the warning signs were there that FLIR would respond sooner or later. The early bird catches the worm and all that. There is still time to get a 1.19.8 version though. Think hard about what you will use it for and whether a bargain 320x240 thermal camera is an opportunity not to be missed. I have industrial TIC's coming out of my ears and I still bought the excellent little E4 due to its ergonomics and excellent MSX mode  ;)

Fot those seeking an E4, but not able to buy yet, I suspect we will be seeing E4's being sold on ebay at a significant mark-up on retail due to 1.19.8 firmware fitted..... they may still represent value for money though.

Here endeth the Epistle   ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chiem on February 06, 2014, 12:18:58 am
I got an email from TEquipment today saying they had 65 in stock, and just ordered one.  They said these should have the older firmware as FLiR hasn't mentioned an update to them, and they would have if these had been updated.  Anyways, fingers crossed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 12:21:21 am
@chiem,

Good call....you will not regret it and even if you decide it isn't what you need, you could sell it for what you paid. or maybe more  ;) Win - Win situation.

(I should have been a salesman  ;D)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 12:32:50 am

We must not forget that FLIR is a big player in the world of professional thermography and industry still happily pays more than $55,000 for a 320x240 industrial camera like the ones I use.
..but how many do they sell..? As much of the Ex R&D came from automotive, could be that higher volume lower cost units like the Ex and  FlirOne may be becoming more significant.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 12:42:27 am
TIC's are becoming far more common in industry these days. They are used in production line environments and as part of security systems. The applications of the industrial cameras are quirte diverse. The profit may not be all in the camera sales margin......calibration may be where the profit really lies, like in car sales Vs car servicing. Audi told me the serious profit was made in the service bays. Having paid Audi sevice fees I can believe that ! Industrial grade products are possibly more likely to be re-calibrated than consumer grade products like the E4 so the E4 earns little for FLIR during its operational life. Some years ago I had an industrial TIC calibrated and serviced and it cost GBP5000 ($7500) for the work :scared:  That was the cost of ownership for a high performance, low noise stirling engine cooled thermal camera. Thank goodness for uncooled cameras that have a lower cost of ownership  :) R&D plus other scientific areas still used cooled cameras as the noise level is so much better combined with greater sensitivity.

Automobile use is a growth area that I believe FLIR will wish to maintain a presence in. Company image is important and having your company name connected with a wide range of applications can only be good. It is interesting that Autoliv is the predominant marketing on the auto applications, with FLIR keeping a low profile.

Only FLIR can know where their greatest income is to be found, but I don't see the E4 sales making or breaking the company  :)

Interestingly, on a news report the other day, it was stated that Apple makes more profit on just its iPhone series than Microsoft make on all of their software portfolio ! That did come as a surprise to me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 06, 2014, 02:26:08 am

A quick question: does the Ex battery have the I2C bus connected to it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on February 06, 2014, 03:17:08 am
Phew, Luckily I caved and got myself a E4 before it it was too late...
Mine is Calibrated Nov 2013.

I'm guessing that they released the firmware however it won't be for another month or 2 before it gets into their E4 mainstream stock.
As being a smart company, they would want to keep atleast 1 month of stock so they don't have issues with shortages.

So if you were thinking of getting a E4, you better do it NOW and hope 'preorders' haven't taken over all the old stock.

Maybe we can focus on more hacking... and unlock the Hz limitation.
Or maybe a hybrid firmware.... e.g. work out the good stuff from the new firmware and mix it down with files from old firmwares.

Would be interesting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on February 06, 2014, 05:02:56 am
Oh well, maybe we'll just have to turn attention to that  60FPS raw sensor data stream now. 8)
 

That'll learn 'em.  ;D ;D ;D  :box: >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 09:03:12 am

A quick question: does the Ex battery have the I2C bus connected to it?
No. There is I2C on the test FFC connector, but as we know I2C isn't (currently) very relevant, though it might be if future firmware needs to be persuaded that it's running on an E8.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on February 06, 2014, 09:51:21 am

applauncher.exe is the file containing the new CRC functions (CRC04 CRC03 CRC02 CRC01 CRC00 CRC32) and some debug-messages:
Quote
# CRC
VerifyHash - [CRC error] : done
VerifyHash - [CRC OK] : done
VerifyHash -[CRC%d] : not accepted
# %19s %x
CRC%d
VerifyHash - [CRC not trusted] : done
%S [size]
%S [CRC]
# doCRC %s %u %u
# doCRC
verifyCRC - cannot open %s
Bad Argument(s)! Use "applauncher" for help.


00011920 - main crc proc
00011998 - this is where config file is loaded and crc calculated?
000119A8 - here it checks which version of CRC signature was used and decides to pass or throw "VerifyHash - [CRC not trusted] : done"??

plenty of spots to blindly start patching conditional jumps, either to always pass crc, or reenable crc01 (if it was in fact disabled)

No. There is I2C on the test FFC connector, but as we know I2C isn't (currently) very relevant, though it might be if future firmware needs to be persuaded that it's running on an E8.
applauncher.exe at 00011DEC does appear to be calling KernelIoControl to maybe read I2C ?

all lame guesswork
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 06, 2014, 02:55:58 pm
Guys didn't I tell you that they were working on locking it?  ...and then went straight and bought one...  :palm:
Smart move...

One thing is for sure.  E4 sales are going downnnn  :--

The camera just arrived and they are going to tell me the serial number soon.
Is there a way to find out the firmware version just from the serial number?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 06, 2014, 03:00:12 pm
Is there a way to find out the firmware version just from the serial number?

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 06, 2014, 03:05:13 pm
Thanks,
So we will actually know for sure when someone tells us the serial number of the new locked version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 06, 2014, 03:32:11 pm
I still do not understand where exactly is the problem. When you will receive 1.21, you can connect to it via FTP, erase complete FLASH and copy 1.19 there. Or am I wrong ? You can see all the appcore.exe and other files, so I expect you can overwrite it with previous version. Sounds so simple.

In fact I did hack the same way. I did not use fif and installator. I just copied config file via FTP.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 06, 2014, 04:13:32 pm
there are CRC changes in applauncher.exe and this is part of the Windows CE Binary image NK.bin
this files you can't simply overwrite with ftp

see NK.BIN_toolset
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382279/#msg382279 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382279/#msg382279)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 04:24:38 pm
I still do not understand where exactly is the problem. When you will receive 1.21, you can connect to it via FTP, erase complete FLASH and copy 1.19 there. Or am I wrong ? You can see all the appcore.exe and other files, so I expect you can overwrite it with previous version. Sounds so simple.

In fact I did hack the same way. I did not use fif and installator. I just copied config file via FTP.
FTP will only work if you can enable RNDIS.

They may have changed the cal data format so cal data from a later unit won't be understood by 1.19.
Anyone checked if the FPGA code has changed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 04:31:03 pm
Taucher indicated that te fw 1.21.0 FPGA program was very different, but that this may not be an issue as small changes in FPGA config cause large changes in FPGA program. I am not familiar with FPGA programming though. My only thought was that FLIR are locking down the FPGA to prevent fps hacking. If so, the E4's that we own may indeed have a fps vulnerablity. Remeber that report I received and commented to you by PM ?  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 04:49:54 pm
Taucher indicated that te fw 1.21.0 FPGA program was very different, but that this may not be an issue as small changes in FPGA config cause large changes in FPGA program. I am not familiar with FPGA programming though. My only thought was that FLIR are locking down the FPGA to prevent fps hacking. If so, the E4's that we own may indeed have a fps vulnerablity. Remeber that report I received and commented to you by PM ?  ;)
You can't infer much from the amount of difference, just that it was different. I can't think of a reason why FPGA code would change to improve hack security other than if there was a fps vuln, however as the FPGA does a lot of signal processing, it's entirely possible that this could have been tweaked to improve performance of for other reasons. 

However it's not out of the question that they could have moved part of some critical function like CRC checking or code signing into the FPGA to make it a  lot harder to reverse-engineer from the code.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bolt on February 06, 2014, 05:00:18 pm
I have 1.19.8 with all the enhancements here, and it

1) crashes several times with "appcore error" right after boot, in case it turned itself from standby to off previously. Example - use the camera, turn it off (standby), leave it 14 days untouched, it will turn itself to off in meantime. After boot appcore error appears.

2) sometimes freezes while working. It can freeze softly with some mess, noise, ghost, squares on screen. Or It can freeze hardly into black screen. Both needs battery remove. After power on it is ok. Always happened to me under freezing temperatures, never above 0°C.

Both time by time, not frequently.

I can confirm both.
I confirm too, happened after one-two days untouched (1) or after cooling (2), and after removing battery works ok.

Today it's happened again, and i try "to freeze" (outdoor temp was -10...-15 C). After turn on i see gray squares on startup, blue background instead IR image, measuring crossbar at upleft corner, and some other malfunction. Removing battery not helps. It turned out, file calib.rsc damaged, some binary data inside of text. Maybe other files too, but after restoring file from backup all works.

(sorry for my english)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 05:26:04 pm
What version hardware is involved with these crashes and what Taucher Menu version is installed ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 06, 2014, 05:29:11 pm
What version hardware is involved with these crashes and what Taucher Menu version is installed ?

1.0, menu 3 with zoom
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: araugh on February 06, 2014, 05:32:56 pm
received mine today, shipped from the lot that TEquipment got yesterday.  Serial number 639136**, Firmware 1.19.8, Calibration date January 29th, 2014


EDIT: Added calibration date
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 06, 2014, 05:42:30 pm
there are only 2 points, where Flir can differ a E4 from a E8 while updating:

both points are hacked but who have the courage to update their E4+ ?  >:D

let's see whether the new firmware has an open (root) FTP access or the internal server accept any *.fif files from FLIRInstallNet 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on February 06, 2014, 05:47:13 pm
FLIR could have stopped this much earlier if they wanted to. They waited until the sales slowed down, then pulled the trigger
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 05:53:17 pm
there are only 2 points, where Flir can differ a E4 from a E8 while updating:
  • the master config file with old crc check in flashfs\system\appcore.d\config.d\ and some entries in GUI files
  • the eeprom entry

both points are hacked but who have the courage to update their E4+ ?  >:D

let's see whether the new firmware has an open (root) FTP access or the internal server accept any *.fif files from FLIRInstallNet
Calibration data?
Model encoding in serial number?

Not that there would be any reason to try, but it would be interesting to see if applying the update to a hacked E4 preserved the hackeness.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 05:55:48 pm
FLIR could have stopped this much earlier if they wanted to. They waited until the sales slowed down, then pulled the trigger

Except we haven't seen any evidence yet that the trigger has actually been pulled, i.e. new FW in production units. They've just taken the safety off... :D

BTW are there any indications of software build dates in the new FW?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 06:23:10 pm
guys... i was looking for a IR camera and got to this thread an after reading few pages... i see a need in hurry to buy to be able to hack....
Can anyone tell me exacly what do  gain with the hacking ? is it FPS or resolution upgrades?
Thanks a lot
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 06, 2014, 06:26:58 pm

Except we haven't seen any evidence yet that the trigger has actually been pulled, i.e. new FW in production units. They've just taken the safety off... :D

I was just about to say the same thing. Hopefully they hold off or at least give the distributors plenty of time to modify their orders so they aren't stuck with 80 units nobody wants or returns after checking the firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 06:30:27 pm
I just had this conversation with the sales department. What do you think ? new version or older ? When was released the new firm
ware ?
[Tequipment] How can I help you today?
[Tiagobaracho] hi
[Tiagobaracho] I want to get one FLIR E4 Thermal Imager with MSX Technology 80 × 60 (4,800 Pixels)
[Tiagobaracho] but i need to know wich firmware version you have in stock... how can i know that ?
[Tequipment] Any units we have in stock would have the latest firmware available.
[Tiagobaracho] we.. it was just released a new firmware.... and i want with the older firmware.... but maybe your stock have the old one
[Tequipment] One moment, please while I check on that for you.
[Tiagobaracho] its important to my decision..
[Tequipment] we have no idea what version firmware is on our units
[Tiagobaracho] someone on stock department can give this info /?
[Tequipment] no..firmware info is on the camera itself..we do not open boxes..we ship our cameras in unopeneed boxes
[Tiagobaracho] can you tell at least how long ago arrived the stock you have today for sale ?
[Tequipment] a week ago
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 06, 2014, 06:37:08 pm
guys... i was looking for a IR camera and got to this thread an after reading few pages... i see a need in hurry to buy to be able to hack....
Can anyone tell me exacly what do  gain with the hacking ? is it FPS or resolution upgrades?
Thanks a lot

Resolution only. From 80x60 to 320x240 thermal resolution. The fps will remain at 9. The Taucher menu adjustment adds nice functionality from the E8 and Exx cameras.

It is well worth the enhancement and is quite easy to do without damaging the device, provided you get the old firmware...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: araugh on February 06, 2014, 06:41:13 pm
Hack was successful and extremely simple.  thank you so much for making this a viable tool, even at 80x60 is was a good deal, but at 320x240 I'd have gladly paid double, and I wasn't really in the market for a TIC before.
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 06:43:11 pm
guys... i was looking for a IR camera and got to this thread an after reading few pages... i see a need in hurry to buy to be able to hack....
Can anyone tell me exacly what do  gain with the hacking ? is it FPS or resolution upgrades?
Thanks a lot

Resolution only. From 80x60 to 320x240 thermal resolution. The fps will remain at 9. The Taucher menu adjustment adds nice functionality from the E8 and Exx cameras.

It is well worth the enhancement and is quite easy to do without damaging the device, provided you get the old firmware...
thats great..... !!
In which latest firmware It can be done  ?
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 06, 2014, 06:52:25 pm
In which latest firmware It can be done  ?

Please read first post on page 1, there is many interesting info you would probably need. 1.19.8 is the last one.

I just had this conversation with ... [Tequipment]

Well they did not help me neither. Finally I bought from PASS.

Anyway, someone here just bought from them and it was 1.19.8. They can also give you serial number (it is on box), so you can see if it could be old firmware.

See:
received mine today, shipped from the lot that TEquipment got yesterday.  Serial number 639136**, Firmware 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2014, 08:53:42 pm
News from PASS (UK) regarding stock....

I have heard back from David at PASS:


Good afternoon xxxxxxxxxxxx


Again thanks for the heads up,

We are pleased to say that we have just received 35 x E4, which are still at the old firmware 1.19.8. These are going very very quick and we only have 18 units left.

I’m more than happy for you to tell people to contact me directly 01642 626142 as always.

Many thanks

David Atkins – Senior Account Manager
Certified Level 1 Infrared Thermographer
Test Equipment & Thermal Camera Sales

Tel: 01642 626142 (Direct Line)

Fax: 0870 143 1869

Mobile: 07792 742265

Email: dave@tester.co.uk


Get them while he has 'old' stock !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 06, 2014, 09:24:51 pm

First - regarding the 1.21.0 firmware I get the strong feeling that I2C is the major reason for the changes.
My strong impression is, that the HW detection solely depends on I2C data - where the basic factory config (hardware, sensor version) got saved (T# stuff).
That's why I can imagine the new "truck charger" driver is not what it seems to be but might be some kind of eeprom-lockdown module.

Mike - any chance for some x-ray images of the Ex-battery?



Before I forget them, here some memos from the last "binary inspection" run :)

Userlist:
   zorro
   anto9
   default
   flir
   3vlig
   root

VERIFIED (UserList is always: flir:3vlig):

   Services\SMBServer\Shares\Bin$      = \FlashBFS -> \\192.168.0.2\Bin$\system
   Services\SMBServer\Shares\Root$     = \FlashFS  -> \\192.168.0.2\Root$
   Services\SMBServer\Shares\images    = \FlashIFS -> \\192.168.0.2\images
   Services\SMBServer\Shares\windows$  = \Windows  -> \\192.168.0.2\windows$
   Services\SMBServer\Shares\temp      = \Temp     -> \\192.168.0.2\temp

WEBSERVER:
Comm\HTTPD\VROOTS\/Ram  = \Temp\   
-> http://192.168.0.2/Ram/ (http://192.168.0.2/Ram/) <- requested action forbidden (INDEX), but file-access works:
Example: http://192.168.0.2/Ram/postlog.txt (http://192.168.0.2/Ram/postlog.txt)

Comm\HTTPD\VROOTS\/Tmp = \FlashFS\tmp\
-> http://192.168.0.2/Tmp/ (http://192.168.0.2/Tmp/) (index forbidden, but files accessible)

Comm\HTTPD\VROOTS\/service = \FlashBFS\system\web\service\ (UserList: flir)
-> http://192.168.0.2/service/ (http://192.168.0.2/service/) -> Service menu

Comm\HTTPD\VROOTS\/Prod = \FlashBFS\system\prodisapi.dll
--> http://192.168.0.2/Prod (http://192.168.0.2/Prod) --> The server encountered an error.

Comm\HTTPD\VROOTS\/, = \FlashBFS\system\web\
-> http://192.168.0.2/ (http://192.168.0.2/) -> Service menu startpage
   
----------------
Other findings:


Restore registry from \Windows\default.fdf
Restore registry from \Windows\Drestore.fdf

\Temp\AutoTempAbsolute\
\Temp\Autosave\
\FlashFS\System\
\FlashFS\System\default_a\
default*.rsc
\FlashFS\System\default_b\
\FlashFS\System\initial.rsc
\FlashFS\System\default_a\initial.rsc
\FlashFS\System\default_b\initial.rsc
\FlashFS\System\ProgressAppLegal.dat

httpd:
AdminUsers
ADMIN
Basic


on first connect the driver assigns a different IP to my PC:
192.168.0.3 / 255.255.255.0 + 192.168.250.3 / 255.255.255.0

Autoload-stuff:
autoload.fif
"SOFTWARE\FLIR Systems\Applauncher
>LaunchFileAlt
\FlashBFS\system\applaunch.dat
eFLIRInstall.exe
,ContinueFile
eFLIRInstall_cont.dat
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 09:52:53 pm
just bought from tequipment using EEVBLOG6 discount code and with overnight shipping  :D
I REALLY hope to get a 1.19.8...... as a friend here from this thread...
Now i will search for the steps to hack it here.
Thanks guys
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 10:14:32 pm
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..
Its funny.. i bout a DS2072a osciloscope that came with 70mhz... a hack in this forum made it go to 300mhz and few other functions , exactly as the 300 mhz model that costs 2570 usd. Now i bought one E4 for 988 and will get E8 in the end  that costs almost 6000 USD ?
Got to say.. this forum is great !
After the hack, is there anything different from the E8 ? or is it exactly the same ?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 06, 2014, 10:17:07 pm
After the hack, is there anything different from the E8 ? or is it exactly the same ?
It has more features than E8. I suggest you to visit first page ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 06, 2014, 10:18:27 pm
After the hack, is there anything different from the E8 ? or is it exactly the same ?
It has more features than E8. I suggest you to visit first page ;-)
But you don't get the additional battery and the front-label still says "E4" ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 06, 2014, 10:21:54 pm

Before I forget them, here some memos from the last "binary inspection" run :)

WEBSERVER:

Comm\HTTPD\VROOTS\/service = \FlashBFS\system\web\service\ (UserList: flir)
-> http://192.168.0.2/service/ (http://192.168.0.2/service/) -> Service menu

Comm\HTTPD\VROOTS\/Prod = \FlashBFS\system\prodisapi.dll
--> http://192.168.0.2/Prod (http://192.168.0.2/Prod) --> The server encountered an error.

I think you mean the old firmware.
in FW 1.21 there is no ProdISAPI.dll and folder \FlashBFS\system\web\service\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 06, 2014, 10:22:04 pm
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..

The sensor is apparently capable of outputting raw 60 FPS data, but so far nobody has found out how to extract useful information from it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 06, 2014, 10:27:55 pm

Before I forget them, here some memos from the last "binary inspection" run :)

WEBSERVER:

Comm\HTTPD\VROOTS\/service = \FlashBFS\system\web\service\ (UserList: flir)
-> http://192.168.0.2/service/ (http://192.168.0.2/service/) -> Service menu

Comm\HTTPD\VROOTS\/Prod = \FlashBFS\system\prodisapi.dll
--> http://192.168.0.2/Prod (http://192.168.0.2/Prod) --> The server encountered an error.

I think you mean the old firmware.
in FW 1.21 there is no ProdISAPI.dll and folder \FlashBFS\system\web\service\

It's just a memo what I found - it's still present in the new firm as well (not necessary to be functional)
NEW-21/strings-registry:1525:Comm\HTTPD\VROOTS\/Ram
NEW-21/strings-registry:1528:Comm\HTTPD\VROOTS\/Tmp
NEW-21/strings-registry:1531:Comm\HTTPD\VROOTS\/service
NEW-21/strings-registry:1536:Comm\HTTPD\VROOTS\/Prod
NEW-21/strings-registry:1539:Comm\HTTPD\VROOTS\/

OLD-17/strings-registry:1525:Comm\HTTPD\VROOTS\/Ram
OLD-17/strings-registry:1528:Comm\HTTPD\VROOTS\/Tmp
OLD-17/strings-registry:1531:Comm\HTTPD\VROOTS\/service
OLD-17/strings-registry:1536:Comm\HTTPD\VROOTS\/Prod
OLD-17/strings-registry:1539:Comm\HTTPD\VROOTS\/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 06, 2014, 10:47:11 pm
... it's still present in the new firm as well (not necessary to be functional)

you are right

a sample from FW 1.21
/FlashBFS/system/web/inc/usermenu.inc
Code: [Select]
menuRow("Service Menu", "/service/index.asp", "mainmenu", selectedMenu == "mnuServiceWeb");but there is no folder service...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 06, 2014, 10:52:13 pm
After the hack, is there anything different from the E8 ? or is it exactly the same ?
It has more features than E8. I suggest you to visit first page ;-)
But you don't get the additional battery and the front-label still says "E4" ;)

ahhahah.. i will not cry for that, paying almost 5000 more !!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 06, 2014, 11:06:21 pm

A quick question: does the Ex battery have the I2C bus connected to it?

Flir connected the eeprom over i2c. As I wrote above the eeprom is the now the dongle for resolution settings.

In new firmware the i2c.exe for manipulating i2c devices is removed https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382118/#msg382118 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382118/#msg382118) :

from old FW:
Code: [Select]
./i2c.exe
Usage: i2c [2] {r|w} <address> <no of bytes if read> <data to write>
       i2c [2] f <filename>
Write example:  i2c w A0 11 22 33 - Write 11h 22h 33h to A0h
Read example 1: i2c 2 r A0 10     - Read 10h bytes from A0h on I2C2:
Read example 2: i2c r A0 10 80    - Write 80h and Read 10h bytes from A0h
Read example 3: i2c r A0 10 80 40 - Write 80h 40h and Read 10h bytes from A0h (16-bit addressing)
File example 1: i2c f vf.txt      - Read command from file

Code: [Select]
./web/service/Diag/BIT.asp
            Response.Write("The Battery test will try to detect the battery via I2C.<br><br>");%>
            Response.Write("The EEProm test will try to detect the EEProm(s) via I2C.<br><br>");%>
            Response.Write("The Temp Sensor test will try to read the temperature sensors via I2C.<br><br>");%>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 11:35:26 pm
Flir connected the eeprom over i2c. As I wrote above the eeprom is the now the dongle for resolution settings.
No major deal to "fix" that then.....

Do you see anything that would prevent i2c.exe being installed via the installer?

The battery has no intelligence - just a 10K thermistor.  It has 3 pins, therefore no I2C
And what would be the point in doing anything with the battery anyway?
A vehicle charger seems a plausible accessory, but not quite sure how it would fit with the current E4 hardware

There is an I2C battery manager, but it's on the board.  I vaguely recall that it does have a small amount of OTP memory. The part number is probably in this thread or the video

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 06, 2014, 11:37:45 pm
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..

The sensor is apparently capable of outputting raw 60 FPS data, but so far nobody has found out how to extract useful information from it.
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 06, 2014, 11:44:31 pm
Flir connected the eeprom over i2c. As I wrote above the eeprom is the now the dongle for resolution settings.
No major deal to "fix" that then.....

Do you see anything that would prevent i2c.exe being installed via the installer?

The battery has no intelligence - just a 10K thermistor.  It has 3 pins, therefore no I2C
And what would be the point in doing anything with the battery anyway?
A vehicle charger seems a plausible accessory, but not quite sure how it would fit with the current E4 hardware

There is an I2C battery manager, but it's on the board.  I vaguely recall that it does have a small amount of OTP memory. The part number is probably in this thread or the video

Well, the firmware seems to be somehow generic for several models/cameras - but I find it a very strange coincidence that there's a big I2C cleansweep done and a I2C-related driver added. The only "truck" charger that I've seen (for Ex) is a car-charger and it's a plain (probably rebranded Chinese) 12V->5V USB adaptor.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 07, 2014, 12:07:21 am
the old procedure to unlock the eeprom and take changes (from my notes)

source: /web/service/inc/eepromlock.inc and /web/service/EEProm/edcaminfo.asp
Code: [Select]
# start prodapp and wait some seconds (the same as >start prodapp )
> rset appl.supv.exec prodapp

#unlock eeprom
> rset system.eeprom.unlock 1235

# write name E8
> rset version.product.name E8

#lock the eeprom
> rset system.eeprom.unlock lock
I am unsure if the prodapp.exe must be started for writing the eeprom
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 07, 2014, 03:30:27 am
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..

The sensor is apparently capable of outputting raw 60 FPS data, but so far nobody has found out how to extract useful information from it.
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on February 07, 2014, 03:37:24 am
;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 07, 2014, 04:11:34 am
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..

The sensor is apparently capable of outputting raw 60 FPS data, but so far nobody has found out how to extract useful information from it.
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects. ;) I suspect that you have bad luck that quite a few of us on here have quite a bit of motivation for high resolution, but a who-the-hell-cares attitude about fps. As in 9 fps is quite enough for all the stuff I do with it. PCBs and assorted other electronics tend to stay put and in focus, soooo...  :-//

I am more motivated to make a linux bootloader, and even that is fairly low on the list.

You probably would have better luck with that on an RC helicopter forum or some such. ;) But then, who's going to put a $1k camera on a crashy copter. :scared:

Anyways, just watch Mike's video again to see how blindingly obvious the todo list is staring you in the face. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Handyman on February 07, 2014, 04:44:10 am
I wanted to say thanks to everyone working on this project from the tear down, firmware, hacks to the BFIC software.
Great job to everyone and thanks and thanks for all your time and effort.

Seeing that the time is running out to grab one of the units without the newer firmware may be running short I went out to my local Grainger store and bought a E4 today after conforming it had the needed firmware.

I got home and backed up all the files on the camera to a folder on my hard drive then installed the hack and all worked as it should. I then added the menu hack and now I have an E4 updated to an E8+

My model is: E4 1.1
Serial# 639125**
Part no. 63901-0101
Software 1.19.8
Calibration date: January 18, 2014

I will say again thanks to everyone's effort to make this project happen. Without the hack I would not have made the purchase of the E4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bolt on February 07, 2014, 08:03:21 am
What version hardware is involved with these crashes and what Taucher Menu version is installed ?

1.0, menu 3 with zoom
Model 1.1, soft 1.19.8, menu 3 with zoom. But IMHO its hardware/OS problem. Many times I saw flash/firmwares corrupted by writing in wrong place after hardware malfunction or without any case, "just because".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 07, 2014, 08:31:24 am
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects.

Ditto. 320x240 - Hell yes. 60fps (noisy, uncalibrated) - Meh.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 07, 2014, 11:44:55 am
For anyone buying in the USA, remember that there is a FLIR free gift promotion active on the Ex series until March.

Take a look at my post here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg362566/#msg362566 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg362566/#msg362566)

Even if you have already purchased your E4, you are eligible  :)

Sadly this is only available for US sales (I tried, and failed, to claim on a UK purchase)
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 07, 2014, 12:21:34 pm
For anyone buying in the USA, remember that there is a FLIR free gift promotion active on the Ex series until March.

Take a look at my post here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg362566/#msg362566 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg362566/#msg362566)

Even if you have already purchased your E4, you are eligible  :)

Sadly this is only available for US sales (I tried, and failed, to claim on a UK purchase)

Fine print: must send in within 30 days of purchase and cannot return item once redeemed. I just reread it, I thought I had til March 31 to redeem. :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on February 07, 2014, 01:47:48 pm
I received my free borescope yesterday. I'm a little annoyed they subbed in the BR70 for the BR80, but hey, free is free.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 07, 2014, 01:59:45 pm
Complain. FLIR seem pretty good on the Customer Relations front.

They may sort it out for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 07, 2014, 02:05:02 pm
@dtbp,

30 days is a decent period of time. I highlighted this offer sevral times in this and teh useful information thread to ensure teh word was out on th eoffer. In my experience teh time limitations on tehse sorts of offers can actually be quite flexible when you speak to teh companies nice customer relatiosn officer. It you have exceed the registration period contact teh customer relations team and plead your case. (very busy, illness, forgot about it whilslt testing the lovely new camera etc)

With regard to not being able to return teh camera.....why is that an issue ? If you receive the camera, test it for a week or so and are happy with it, why would you be wanting to return it ? This caveat is to prevent people deliberately buying an E4 claiming the freebie and then returning the E4 for a full refund. i.e underhand behaviour to fet the freebie for free with a purchase.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on February 07, 2014, 02:23:30 pm
Complain. FLIR seem pretty good on the Customer Relations front.

They may sort it out for you.
Packing slip says "BR70 replaces BR80. BR70 has the same form, fit, and function."

Approximate retail value is the same. Might be that they were out of BR80s. Not really worth the hassle to complain.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 07, 2014, 02:30:34 pm
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects.

Ditto. 320x240 - Hell yes. 60fps (noisy, uncalibrated) - Meh.

I don't think it will do 60Hz - not clearly without a major overhaul or real temp control. I can see it doing 30Hz due to the boot log stating 30Hz is not allowed seeming to indicate that the hardware is capable but I think that 60Hz signal being fed to the FPGA needs the extra 30Hz to clean things up and make them usable. Most of the smaller FLIR stuff seems to max out at 30Hz from what I have been reading.

Looking at what changes that 1.21 has included - updated CRC's and removal of the I2C and web components - that may be the hint as to what is vulnerable. The resolution upgrade depended on the CRC functions but there really has not been much work done that required the use of the I2C/web stuff. I have a feeling that a I2C edit of the eprom may be the only thing standing in the way of unlocking 30Hz functions of the FPGA's output.
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 07, 2014, 02:54:07 pm
@dtbp,

30 days is a decent period of time.

I agree. I don't have a problem with any of the terms of the offer, just giving other people a heads up about the time limits if they were dragging their feet like me. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 07, 2014, 03:29:52 pm
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects.

Ditto. 320x240 - Hell yes. 60fps (noisy, uncalibrated) - Meh.

I don't think it will do 60Hz - not clearly without a major overhaul or real temp control. I can see it doing 30Hz due to the boot log stating 30Hz is not allowed seeming to indicate that the hardware is capable but I think that 60Hz signal being fed to the FPGA needs the extra 30Hz to clean things up and make them usable. Most of the smaller FLIR stuff seems to max out at 30Hz from what I have been reading.

Looking at what changes that 1.21 has included - updated CRC's and removal of the I2C and web components - that may be the hint as to what is vulnerable. The resolution upgrade depended on the CRC functions but there really has not been much work done that required the use of the I2C/web stuff. I have a feeling that a I2C edit of the eprom may be the only thing standing in the way of unlocking 30Hz functions of the FPGA's output.
And then it could look like http://www.mathworks.fr/company/newsroom/FLIR-Speeds-Thermal-Imaging-FPGA-Development-Through-Automatic-HDL-Generation-From-MATLAB.html (http://www.mathworks.fr/company/newsroom/FLIR-Speeds-Thermal-Imaging-FPGA-Development-Through-Automatic-HDL-Generation-From-MATLAB.html) ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 07, 2014, 03:41:12 pm
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects.

Ditto. 320x240 - Hell yes. 60fps (noisy, uncalibrated) - Meh.

I don't think it will do 60Hz - not clearly without a major overhaul or real temp control. I can see it doing 30Hz due to the boot log stating 30Hz is not allowed seeming to indicate that the hardware is capable but I think that 60Hz signal being fed to the FPGA needs the extra 30Hz to clean things up and make them usable. Most of the smaller FLIR stuff seems to max out at 30Hz from what I have been reading.

Looking at what changes that 1.21 has included - updated CRC's and removal of the I2C and web components - that may be the hint as to what is vulnerable. The resolution upgrade depended on the CRC functions but there really has not been much work done that required the use of the I2C/web stuff. I have a feeling that a I2C edit of the eprom may be the only thing standing in the way of unlocking 30Hz functions of the FPGA's output.
There is no evidence seen to date  that the 9Hz isn't nailed into the FPGA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 07, 2014, 06:01:10 pm
is it a possibility in the future to be able to get higher FPS ? or is it the sensor that only can make 9 fps ?... just out of curiosity ..

The sensor is apparently capable of outputting raw 60 FPS data, but so far nobody has found out how to extract useful information from it.
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
Anyone of you guys will try that ?
Sure. Right after I finish the other 43586534535 projects. ;) I suspect that you have bad luck that quite a few of us on here have quite a bit of motivation for high resolution, but a who-the-hell-cares attitude about fps. As in 9 fps is quite enough for all the stuff I do with it. PCBs and assorted other electronics tend to stay put and in focus, soooo...  :-//

I am more motivated to make a linux bootloader, and even that is fairly low on the list.

You probably would have better luck with that on an RC helicopter forum or some such. ;) But then, who's going to put a $1k camera on a crashy copter. :scared:

Anyways, just watch Mike's video again to see how blindingly obvious the todo list is staring you in the face. ;)
]
i was just asking.... i have no real need for high FPS.... resolution, YES !! i will use on PCB for troubleshooting.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 07, 2014, 06:16:10 pm
some notes around eeprom and 9hz, but nothing new informations


Code: [Select]
./i2c.exe
Usage: i2c [2] {r|w} <address> <no of bytes if read> <data to write>
       i2c [2] f <filename>
Write example:  i2c w A0 11 22 33 - Write 11h 22h 33h to A0h
Read example 1: i2c 2 r A0 10     - Read 10h bytes from A0h on I2C2:
Read example 2: i2c r A0 10 80    - Write 80h and Read 10h bytes from A0h
Read example 3: i2c r A0 10 80 40 - Write 80h 40h and Read 10h bytes from A0h (16-bit addressing)
File example 1: i2c f vf.txt      - Read command from file
the address A0h is common to all Serial EEPROM devices (with hard-wired pins A2, A1 and A0 to low)  :)

I think I've now worked out all the I2C devices :
0x92 Temperature sensor
0xD0 Realtime clock
0xAE EEPROM
0xAA BQ27510 battery manager

eeprom address 0xA0
Hmmm. found code that looks for the string "T198389" from I2C address 0XA0, and if found "SB0801 detector   found " else "ULIS detector found"

don't write direct to eeprom...
I have tried changing E4 to E8 in the eeprom with no effect.
I have found code (100033AC for those following along) that reads 16 bytes from the EE, checksums it and if sums OK, stores the EEPROM values somewhere , and if not stores 80 and 60 in the same locations. Still looking at other eeprom related code. I think the 6 near the resoltion data is also significant - seems to correlate with the "downsampling setting" vales displayed at boot.
I only had a very quick try at changing the ee so could be I got the sum wrong.

..use rset or web frontend
> rset version.product.name E8




It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
unfortunately Flir doesn't sale a Ex with higher frame frequency, so surely the firmware doesn't support frequency > 9Hz

for inspiration a snip from a rls -r -l

Flir E4
Code: [Select]
.image.sysimg.basicImgData.distrData: (15)
rw----------n- 0 root   root   <i> imageFreq                      9

Flir E40
Code: [Select]
.image.sysimg.basicImgData.distrData: (15)
rw----------0- 0 root   root   <i> imageFreq                     30

syntax for (rw)
Code: [Select]
rwcdrwcdrwcd0p*1 user group <a> resource_name "value" Explanation:
First rwcd = owner read,write,create,delete rights flags.
Second rwcd = group read,write,create,delete rights flags.
Third rwcd = other read,write,create,delete rights flags.
0p*1 = subscribers, persistance, not default, users counts and flags <a> = node type (ascii/integer/double/index/entry)
For resources with fixed string values, all alternatives are listed as well.

find string "imageFreq" in old FW 1.18
Code: [Select]
./appcore.exe
distrData.imageFreq
--
./appcore_dll.dll
imageFreq
--
./ProdApp.exe
.image.sysimg.basicImgData.distrData.imageFreq

found this post
Maybe it is a language thing, but I am confused right now:
I thought, modifing the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3" will enable 30Hz but in your posting above you say 100ms between each frame = ~9 Hz. Did I miss something or did I understood something wrong? So no 30Hz by changing appcore.exe?
That hex will enable something and rls will report 30 for some values that were formerly at 9. but nontheless the effective framerate will stay under 10Hz.
Anyway the Ex is quick enough so one does not have to wait too long for a new image ... I don't have a big urge to investigate that further :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 07, 2014, 06:28:21 pm
It is blindingly obvious  how to extract the 60fps stream - just needs a bit of work to implement it.
unfortunately Flir doesn't sale a Ex with higher frame frequency, so surely the firmware doesn't support frequency > 9Hz

I suggest re-considering this:
- take a look at the strings inside gethwtype.exe ...
- the fact that the firmware shows obvious similarity to Exx series firmware
- the sensor outputs at 60Hz as measured by Mike
- i2c was not used in our hacks except for cosmetic stuff, but it's removal obviously got much attention in new firm
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KTP on February 07, 2014, 06:59:18 pm
Can anyone with one of these E4 modified cameras point it at a propane tank after some use and tell me if it lets you see the level of the liquid in the tank?  Very curious.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on February 07, 2014, 07:06:13 pm
That will not be a problem, as the liquid level will be quite different to the ambient ( unless you are in the frozen parts of the USA) and will show as a band across the metal. Pouring hot water across the tank will show it up better though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on February 07, 2014, 08:03:27 pm
- i2c was not used in our hacks except for cosmetic stuff, but it's removal obviously got much attention in new firm

Or maybe it's a distraction so you don't see the FPGA changes that make your camera brick itself if it detects an unauthorized RNDIS connection after a particular date.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ericpi on February 07, 2014, 09:55:44 pm
Can anyone with one of these E4 modified cameras point it at a propane tank after some use and tell me if it lets you see the level of the liquid in the tank?  Very curious.

I just tried with my upgraded E4: I was not able to see the level in the propane tank. The entire tank looked uniform color / temperature, with no obvious liquid line.

However, as SeanB notes, I am indeed in the frozen parts of the Northeastern USA (right around 32F / 0C), so this might be the explanation.  I can gladly try again in a few months when it warms up ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Monadnock on February 07, 2014, 10:02:54 pm
Can anyone with one of these E4 modified cameras point it at a propane tank after some use and tell me if it lets you see the level of the liquid in the tank?  Very curious.

I just tried with my upgraded E4: I was not able to see the level in the propane tank. The entire tank looked uniform color / temperature, with no obvious liquid line.

However, as SeanB notes, I am indeed in the frozen parts of the Northeastern USA (right around 32F / 0C), so this might be the explanation.  I can gladly try again in a few months when it warms up ;)

A propane tank that is sitting with its valve closed will have uniform temperature throughout equal to the ambient. It is only when gas is flowing and the liquid propane is vaporizing that you will see a temperature difference since it is the the state change from liquid to gas that is the cooling process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: georges80 on February 07, 2014, 10:33:23 pm
For propane, the trick is to pour some HOT water down the the side of the tank (that's how the LCD indicators work) and the metal tank part above the liquid will stay hotter for longer.

cheers,
george.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 07, 2014, 11:07:15 pm
I suggest re-considering this:
- take a look at the strings inside gethwtype.exe ...

What do you mean?
With 9Hz/30Hz Flir describes only known cameras like "Thermacam E2" = E40 (see /FlashBFS/system/web/images/E2.jpg)
our Flir E4 = "Z3 - ASCO camera"
see below

Code: [Select]
$ strings gethwtype.exe
...
Z3 - ASCO camera
...
Ex - T-Cam, unknown subtype (remote)
E4 - T-Cam, BACT2 AND ULIS detector
E3B- T-Cam, BACT2 AND SB0601 30 Hz detector
E3A- T-Cam, BACT2 AND SB0601 9 Hz detector
E2B- T-Cam, BACT AND SB0601 30 Hz detector
E2A- T-Cam, BACT AND SB0601 9 Hz detector
E1B- T-Cam, BACE rev 04-07 AND SB0401 30 Hz
E1A- T-Cam, BACE rev 04-07 AND SB0401 9 Hz
...


- the fact that the firmware shows obvious similarity to Exx series firmware

I see some differences in firmware/hardware...

info from E4 = FLIR Astra Z3:
/FlashFS/tmp/prod.log
Code: [Select]
2013-12-03 14:58:01 Found detectortype SB320 ISC0901, selecting detector S
2013-12-03 14:58:01 Lens leExFOL7
2013-12-03 14:58:01 Found osimgkit ASCO OS image, selecting Cameratype Z, Web-Addon Z3
2013-12-03 14:58:01 \FlashBFS\system/web/inc is updated for Z3
...
2013-12-03 14:58:07  14 Preparation:Image frequency 9

compare with E40 (Thermacam E2)
Code: [Select]
2013-06-15 01:40:37 Found detectortype SB320 ISC0601, selecting detector S
2013-06-15 01:40:37 Lens leE
2013-06-15 01:40:37 Found osimgkit SLCO OS image, selecting Cameratype E, Web-Addon E2
2013-06-15 01:40:37 /FlashFS/system/web/inc is updated for E2
...
2013-06-15 01:40:43  10 Preparation:Image frequency 30
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 07, 2014, 11:47:55 pm
I would really find it quite funny if the 9Hz limit was actually being imposed by the WinCE side of things and the FPGA was actually outputting 30Hz the whole time... Given the slowness of the UI it's almost feasible but others have mentioned that the use of ?QT? was the most probable cause of the lag there.

*edit - why would the lcdc.dll driver care about the "C.a.m.e.r.a. .F.P.S.:" ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on February 08, 2014, 01:10:17 am
Can anyone with one of these E4 modified cameras point it at a propane tank after some use and tell me if it lets you see the level of the liquid in the tank?  Very curious.

Yes, it's very evident. I've used against little 1lb (454g) camping tanks up to 3000gal (11k L) delivery trucks. Pictured here are three 100lb (45kg) tanks on my porch. On left is one in use (or had been in the last hour), in the middle a full spare, and on the right another full spare that got some sun earlier in the day. Clearly the one on the left will be replaced soon as it's down to ~20%. Outside temp is about -1C. Picture from a modified E4.

Edit 20140209: Added 2nd propane image. This image was taken a few minutes after heating the two full tanks on the right and middle with a torch. The center tank appears to have slightly more than the right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 08, 2014, 02:02:04 am
- i2c was not used in our hacks except for cosmetic stuff, but it's removal obviously got much attention in new firm

Or maybe it's a distraction so you don't see the FPGA changes that make your camera brick itself if it detects an unauthorized RNDIS connection after a particular date.
yeah, "hardware error, please contact support, error code: HKR" ;)

Hm, if I had my E4 already open then I'd probably give it a try and completely disable/desolder the EEprom - just to see if the bootprocess would still work (ftp/telnet).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 08, 2014, 02:32:56 am

Just a small bump for reference

Note on the sensor-naming ( ISC0901B0 ):
I'm pretty sure the first two numbers (09) are the sensor's generation year - deduced from some documents found online where that # went form 98 to 00 to 05 and 09 now... ;) the next pair of numbers beeing the resolution/model and then followed by special features.
Unfortunately "our" ROIC isn't listed here: http://www.flir.com/cvs/cores/view/?id=51948 (http://www.flir.com/cvs/cores/view/?id=51948)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KTP on February 08, 2014, 04:13:00 am
SensorGeek, thank you for the test!

We had been having a discussion on a rv forum about ways to accurately measure the level of propane left in a tank if you could not weigh it and I thought about this camera.

Adding that to the long list of reasons a modded E4 would be cool to own.  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on February 08, 2014, 05:06:42 am
- i2c was not used in our hacks except for cosmetic stuff, but it's removal obviously got much attention in new firm

Or maybe it's a distraction so you don't see the FPGA changes that make your camera brick itself if it detects an unauthorized RNDIS connection after a particular date.
yeah, "hardware error, please contact support, error code: HKR" ;)

Hm, if I had my E4 already open then I'd probably give it a try and completely disable/desolder the EEprom - just to see if the bootprocess would still work (ftp/telnet).

I'd open it if I were you -- the disassembly process is well documented and it's just a SO-8 or SO-6 if I remember correctly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 08, 2014, 07:22:07 am
Hi,

Just received the E4 unit!     Serial Number : 639121xx

Hackable, right  ?  ???     
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 08, 2014, 07:26:53 am
Hi,

Just received the E4 unit!     Serial Number : 639121xx

Hackable, right  ?  ???   

 |O |O |O |O |O |O |O |O (use brain - check firmware version)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 08, 2014, 07:32:44 am
Quote
(use brain - check firmware version)

How?  I don't have the unit in my hands.  It is in the US...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 08, 2014, 07:37:09 am
Hi,

Just received the E4 unit!     Serial Number : 639121xx

Hackable, right  ?  ???   

 |O |O |O |O |O |O |O |O (use brain - check firmware version)
The correct answer would have been "yeah, sure!  :-+".

That'll teach 'm to engage brain. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 08, 2014, 07:47:58 am
Great!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 08, 2014, 07:53:13 am
Quote
(use brain - check firmware version)

How?  I don't have the unit in my hands.  It is the US...

Quote
Just received the E4 unit!     Serial Number : 639121xx

Different kind of "received" then? But never mind, the brain is active now so all will be fiiiiine. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 08, 2014, 11:49:17 am
@hgg

And from my archive of serial numbers it look to have been Calibrated between 7 Jan and 16 Jan. Firmware 1.19.8 fitted.E4 V1.1 Hardware.

Extract from my records:
6391 17xx              07 Jan 14        1.19.8 E4 V1.1
6391 23xx              16 Jan            1.19.8 E4 V1.1
6391 25xx              18 Jan            1.19.8 E4 V1.1


This post may be of interest to you (your question is the reason that I compiled the data) :

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 08, 2014, 12:30:52 pm
Hello Aurora,

Yes, I've checked your post first, but I just wanted to be sure...
That was close ...  :) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on February 08, 2014, 05:15:57 pm
Finally I decided to make my tripod adapter, I hope you find it useful.

(http://farm8.staticflickr.com/7293/12387738414_46c096a729.jpg)

(http://farm8.staticflickr.com/7361/12387219045_d73b454da5.jpg)

(http://farm4.staticflickr.com/3813/12387518864_89d7662840.jpg)


STL files and Links (http://cesarescudero.me/projects/flir-ex-tripod-adapter)



mikeselectricstuff, I have no problem in sending you one, PM me.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 08, 2014, 08:49:44 pm
Finally I decided to make my tripod adapter, I hope you find it useful.

That is awesome! How much would you charge to make me one?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 08, 2014, 09:22:57 pm
You did a very nice job on your adapter, simple is good.  Having not ever touched an e4,
is there any room right above the trigger to attach a custom bracket, like on the e40?

I didn't like the one that flir made, selling for $50.00, so I made a better one, I just leave
it on the camera.



Finally I decided to make my tripod adapter, I hope you find it useful.




STL files and Links (http://cesarescudero.me/projects/flir-ex-tripod-adapter)



mikeselectricstuff, I have no problem in sending you one, PM me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on February 08, 2014, 09:55:15 pm
Finally I decided to make my tripod adapter, I hope you find it useful.

That is awesome! How much would you charge to make me one?

Sorry, I am not selling this (should I?) but I am glad you find my adapter nice enough.

I have never tried this service but it seems to be expensive (from my quote 22 dollars per piece + a $15 Setup)

http://www.seeedstudio.com/service/index.php?r=st/3d (http://www.seeedstudio.com/service/index.php?r=st/3d)

Probably someone here knows a better option.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on February 08, 2014, 10:00:13 pm
You did a very nice job on your adapter, simple is good.  Having not ever touched an e4,
is there any room right above the trigger to attach a custom bracket, like on the e40?

I didn't like the one that flir made, selling for $50.00, so I made a better one, I just leave
it on the camera.


That is indeed a neat adapter, but I am too scary of breaking my E4+ and my Makerbot was gathering too much dust. And from I can remember from Mike's teardown video I dont think there is any room for a bracket ( I mean inside, I was thinking in drilling a hole)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 08, 2014, 10:50:12 pm

Sorry, I am not selling this (should I?) but I am glad you find my adapter nice enough.

Probably someone here knows a better option.

Why not? If you have a 3D printer you can rattle them off pretty quick, I'm sure many on here would Paypal you a few bucks to do it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 08, 2014, 11:04:33 pm
Lunevalley3D in the UK offer an excellent service at very reasonable cost, with no set up fee and at-cost postage.

Take a look at my FLIR Useful Information thread for images and details. The lens adapter for an auxiliary lens cost me only GBP4 ($6) in black ABS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on February 08, 2014, 11:25:15 pm
There you go Lewis, Lunevalley3D it's a better option for you. Shipping from my country to yours would be in the order of 30 USD, yes that expensive. :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 08, 2014, 11:45:33 pm
Thanks guys, I'll check it out...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 09, 2014, 01:41:01 pm
@mrflibble

... I just hoped maybe there was a feature in exiftool that I missed to directly read those .fff files. Because I already had tested the rename to .fff and then run exiftool on that. But all that tells you is that yes it's a FLIR file (based on the FFF signature in the header) and that's it.

see here: http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5538.msg26826.html#msg26826 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5538.msg26826.html#msg26826)

exiftool from version 9.47 can export image ds250C_we_ap_fi_le_static.gan
Code: [Select]
# 5 = GainDeadMap (ref 3)
# 6 = CoarseMap (ref 3)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lignumaqua on February 09, 2014, 10:42:31 pm
Many thanks to all for the stellar work being done here. I've got an E4 with firmware version 1.18.7 on the way to me. Is it possible to upgrade this to 1.19.8 before hacking it? If so, is there a copy of the 1.19.8 code available? (I know it isn't available on the FLIR website any more)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 10, 2014, 12:05:08 am
@lignumaqua,

1.19.8 is not available to download from FLIR or AFAIK anywhere else.

FLIR have stated that the differences between 1.18.7 and 1.19.8 is purely production related with apparently no bug fixes. I asked FLIR for firmware 1.19.8 and have not received a response to date. You will be just fine with 1.18.7  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 10, 2014, 12:33:22 am
Better not try and upgrade as well... leave well enough alone because IF something were to go wrong, you are opening a can of worms, not to mention if you need to return to Flir!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on February 10, 2014, 01:22:01 am
I cannot seem to connect to my E4 using RNDIS.
When I plug it up, i flashed the temp enable RNDIS FIF file.

that worked, and I installed the drivers.

When I do a IP CONFIG it shoes the E4.
So i know it is connected via RNDIS.

However when I attempt to use the web browser on 192.168.0.2  it doesn't work.
The IP address which I was assigned to by the camera is 169.254.160.56

Can somebody post a image of what a "working RNDIS" ipconfig should look like?
Maybe the DHCP isn't working on my E4 so I can manually mirror the settings and it may work.

Any detailed instructions on how to setup and use RNDIS?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 10, 2014, 01:43:54 am
I cannot seem to connect to my E4 using RNDIS.
When I plug it up, i flashed the temp enable RNDIS FIF file.

that worked, and I installed the drivers.

When I do a IP CONFIG it shoes the E4.
So i know it is connected via RNDIS.

However when I attempt to use the web browser on 192.168.0.2  it doesn't work.
The IP address which I was assigned to by the camera is 169.254.160.56

Can somebody post a image of what a "working RNDIS" ipconfig should look like?
Maybe the DHCP isn't working on my E4 so I can manually mirror the settings and it may work.

Any detailed instructions on how to setup and use RNDIS?

I had issue before. Could not remember how I exactly make it work. I think you need restart your computer after install driver.  When you connected E4 to compter, the tool come with the driver should pop you a IP of your E4 at task bar. My camera is 192.168.1.2
Hope this helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 10, 2014, 01:57:07 am
Before I applied the hack, my camera image was very sensitive to the tempertrue different. E.g. it shown dark blue for the spot with 1-2c difference. But, now it shows light blue for the same spot and even hard to notice. Only shown dark when there is a 3-4c difference. Is this normal ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 02:47:33 am
Before I applied the hack, my camera image was very sensitive to the tempertrue different. E.g. it shown dark blue for the spot with 1-2c difference. But, now it shows light blue for the same spot and even hard to notice. Only shown dark when there is a 3-4c difference. Is this normal ?
You should pay more attention to the temperature-gradient shown on screen (auto-scale is default -> unlikely to be exactly repeatable) and the state of unit-heatup (initial drift) - read the manual (I'm serious) - take your time learning the technology - it really helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 02:55:09 am
@RNDIS:
Again - the correct answer to "when does it work" is: When your camera has an IP assigned that you can (at least in theory) ping :)

The driver (to be precise: the Flir system service) can select from several choices.
Somethimes it goes wrong, then just reconnect (might be related to booting the camera already on USB) - but usually after a short while the infrared network "card" will get a default gateway assigned - that's your camera - no matter who writes what.

For this reason if the camera is running on a system with already present 192.168.0.x network, then assigning the same IP to another interface would cause lots of routing errors, dropped packets etc. so the IP has to be able to switch into an unusued segment.

Any reasonable programmer (and the Flir/Microsoft guys do a nice job here) will do something like programatic loop -> "while IP-range in use, try next higher IP-range"

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Handyman on February 10, 2014, 04:32:52 am
Another E4 has sold on eBay for $1,975.00
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160 (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 10, 2014, 05:10:36 am
Another E4 has sold on eBay for $1,975.00
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160 (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160)
Three weeks ago, when I cannot find an E4 with reasonable price in Canada, I got an E5 instead. From my experience, if you like to own a TIC as a toy, E5 is the best choice. Not only many dealers have plenty E5 in stock with old firmware. Even without the hack, the feature (auto hot/cold ) of E5 is good enough for most of non professional job. Although, I cannot stop wondering what is the high reslution looks like and "enhanced" it. Before the "enhancement", I never regret purchase the E5.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 05:21:39 am
Another E4 has sold on eBay for $1,975.00
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160 (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=191058679662&ssPageName=ADME:B:WNA:US:3160)
Three weeks ago, when I cannot find an E4 with reasonable price in Canada, I got an E5 instead. From my experience, if you like to own a TIC as a toy, E5 is the best choice. Not only many dealers have plenty E5 in stock with old firmware. Even without the hack, the feature (auto hot/cold ) of E5 is good enough for most of non professional job. Although, I cannot stop wondering what is the high reslution looks like and "enhanced" it. Before the "enhancement", I never regret purchase the E5.
Actually the combination of resolution-hack + menu-hack delivers an E8+ level camera with more features than any of the stock models gives the user.

The point with the older firmware seems reasonable - but keep in mind that such pricy items are normally kept on low stock levels - and the pricejump to the E4 is significant...
I'd not count on the E5 stock coming with a stone-aged firmware ;)

Summary: take care what you buy (unless you want to donate us a camera for firmware hacking purposes) *G*

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 10, 2014, 12:16:57 pm
Interesting news on Firmware updates - please read.

It would appear that upgrading to V1.21.0 firmware requires your E4 to be returned to FLIR !

This is the response I have just received form them:

-----------------------------------------
Dear xxxxxxxxxxxxxxxx,

Thank you for your e-mail.

At the moment we are implementing even a newer sw version (1.21.9).

I would advise you to wait until the official Flir download site has the latest version of software for downloading. To update the camera to the latest sw, we would need the camera to be sent to Service, however due to a big backlog, unfortunately, we can’t promise short lead-times.
 
No significant differences were made between 1.18.7 and 1.21.9 regarding user experience, however the production process was improved.

Kind Regards,

xxxxx  xxxxxx

Service Technician
-----------------------------------------

From what this email suggests, the E4 needs physical changes to work with V1.21.0. Another reason to not load it !!!!!  Odd that it has warnings about such on the download. Maybe they want to 'adjust' older E4's physically to prevent upgrades ? They will not be getting their paws on mine  :) They claim no change in user experience just improvements in the 'production process' .....that's an interesting term to use for a countermeasure  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 12:29:31 pm
No significant differences were made between 1.18.7 and 1.21.9 regarding user experience, however the production process was improved.
"the production process was improved" ... Lovely!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 10, 2014, 12:36:49 pm
Dear Customers,

Please return your units and we will downgrade them free of charge...       :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 10, 2014, 12:53:05 pm
Interesting news on Firmware updates - please read.

It would appear that upgrading to V1.21.0 firmware requires your E4 to be returned to FLIR !

This is the response I have just received form them:

-----------------------------------------
Dear xxxxxxxxxxxxxxxx,

Thank you for your e-mail.

At the moment we are implementing even a newer sw version (1.21.9).

I would advise you to wait until the official Flir download site has the latest version of software for downloading. To update the camera to the latest sw, we would need the camera to be sent to Service, however due to a big backlog, unfortunately, we can’t promise short lead-times.
 
No significant differences were made between 1.18.7 and 1.21.9 regarding user experience, however the production process was improved.

Kind Regards,

xxxxx  xxxxxx

Service Technician
-----------------------------------------

From what this email suggests, the E4 needs physical changes to work with V1.21.0. Another reason to not load it !!!!!  Odd that it has warnings about such on the download. Maybe they want to 'adjust' older E4's physically to prevent upgrades ? They will not be getting their paws on mine  :) They claim no change in user experience just improvements in the 'production process' .....that's an interesting term to use for a countermeasure  :-DD
Could be  they're updating the bootloader or other hard-to-access stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 10, 2014, 01:22:07 pm
"the production process was improved"  What is that really mean ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 10, 2014, 01:57:08 pm
"the production process was improved"  What is that really mean ?
Just that they cant call it "antihack"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on February 10, 2014, 01:59:49 pm
Interesting news on Firmware updates - please read....snip

I suppose they wouldn't be good enough to divulge at which serial number or date this "improvement" was implemented.    That would be helpful :-\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 10, 2014, 02:02:43 pm
The cost of a recall to service centres is not without significant cost in postage and man hours. FLIR are taking this more seriously than I expected. You can be certain that if your E4 is ever returned to FLIR it will get 'upgraded' to the latest firmware as a matter of policy.

I was interested to read that there is a backlog of units being 'upgraded'... I wonder if this is warehouse stock or whether stock has been recalled from retailers ?

On the topic of V1.21.0 firmware, I cannot believe that FLIR would release it on their web site for download if it was not compatible with earlier builds. Especially as they removed the version 1.18.7 download........ Sooooooo, I deduce that, as Mike suggested, FLIR want to get their paws on parts of the OS or firmware that they cannot access via a firmware update. This could be a 'belt and braces' approach to the countermeasure rollout.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lignumaqua on February 10, 2014, 03:14:10 pm
Thank you, that's very helpful!  :D

@lignumaqua,

1.19.8 is not available to download from FLIR or AFAIK anywhere else.

FLIR have stated that the differences between 1.18.7 and 1.19.8 is purely production related with apparently no bug fixes. I asked FLIR for firmware 1.19.8 and have not received a response to date. You will be just fine with 1.18.7  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 10, 2014, 04:37:50 pm
It would appear that upgrading to V1.21.0 firmware requires your E4 to be returned to FLIR !
hm, nobody yet tested the version 1.21.0

there is a inconsistency - while the update the FW 1.21.0  dosn't overwrite your config file
I see two variants:

I don't think, that the flir updater generates the new crc+ for a upgraded config file ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 10, 2014, 07:57:35 pm
Why would anyone need the "production upgrade" if yours was already produced?
hhmmm.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Primus on February 10, 2014, 08:02:46 pm
I ordered an E4(6391-0101) off of eBay on Saturday, contacted the seller and they got the stock on Feb 6th. It was listed on eBay a firmware 1.18.7 - here's hoping they are correct! Ugh, I hate the anticipation! The 5 of those that they had are now sold out, and the other listings show a delivery backlog of Mar-Apr 1; I'd be surprised if aren't "fixed". I just hope to see "shipped" on my E4 here today or tomorrow, if so, my worry might be alleviated somewhat! :)

Oh, and great work on this hack even if it turns out to be short-lived! I'll be sure to give an update once I receive the unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 10:30:31 pm
It would appear that upgrading to V1.21.0 firmware requires your E4 to be returned to FLIR !
hm, nobody yet tested the version 1.21.0

there is a inconsistency - while the update the FW 1.21.0  dosn't overwrite your config file
I see two variants:
  • you can use furthermore the old crc01 keygen for editing your config file (but flir blocked self settings .caps.config.image.settings.IRwidth and .caps.config.image.targetNoise.targetNoiseMk)
  • you need a new config file with the upgraded crc+ ->  this requires your E4 to be returned to FLIR

I don't think, that the flir updater generates the new crc+ for a upgraded config file ;-)

I'm convinded that if the programmer(s) had to go so far as to write a new CRC algo or two... then the task is very clear: get rid of any chance of hacking - this would for me include a routine to sanity-check the config files before converting them to the new CRC (and even on every loading after that) - and I'd need a "known good" reference for that - at least something like eeprom contents for label, model, SN etc...
... and the next step would be a HW change to stop the eeprom beeing EE and make it a ROM (at least remove (and change) the factory password from the firmware so it needs to be supplied from the outside) - problem solved until somebody decides patching binaries, reversing the CRC again etc. etc. etc.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 10:33:20 pm
Why would anyone need the "production upgrade" if yours was already produced?
hhmmm.....

The answer is "beeing uninformed" or some stupid psychology wanting the "latest and greatest" (which is of cause always the stuff with the highest number... *haha*) :)
... my footer "avoid" summarizes my suggestion how to behave :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 10, 2014, 10:35:50 pm
Could be  they're updating the bootloader or other hard-to-access stuff.

Actually they seem to do so / to have done that - "bootloader"-related strings appeared in context of "locked" ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 10, 2014, 10:59:52 pm
Why would anyone need the "production upgrade" if yours was already produced?
hhmmm.....
..or course the new FW on the Flir site could just be a joke to waste all our time looking at it... :D

I wonder if at some point Flir tools will refuse to work with old FW..?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 10, 2014, 11:02:10 pm
Why would anyone need the "production upgrade" if yours was already produced?
hhmmm.....

The answer is "beeing uninformed" or some stupid psychology wanting the "latest and greatest" (which is of cause always the stuff with the highest number... *haha*) :)
... my footer "avoid" summarizes my suggestion how to behave :)
Yes... I was being sarcastic actually...   :-DD :-DD
true, there are those that HAVE to have the "latest and greatest" for bragging rights, if nothing else!  |O |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 10, 2014, 11:10:25 pm
BTW just wanted to say a quick "Hallå" (Hello)  to all the FLIR people watching this thread -  hope you're enjoying doing all that new work on a project you'd thought was finished and out the door...!
Don't you just hate it when that happens..?
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 10, 2014, 11:34:53 pm
Awwwww Mike that is just plain mean. I have no problem with FLIR employees. They are the people who have made a sub $1K 320x240 thermal imager possible. They could have gone the cheapo route and used some awful 80x60 micro-bolometer but no, they used a quality product.

I thank the design team for their excellent work and hope that they understand that I appreciate their hard work and skills. The software  engineers may actually have enjoyed revisiting the product, as in a game of Chess .... mind Vs mind :) 

They also gave us the E4 in its upgradeable form for a whole 4 months with no silly knee Jerk reaction in that time frame. I can't blame them for what they are believed to be doing, and knowing FLIR, it will be done well, now that they have focussed on the issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 10, 2014, 11:54:32 pm
I'm sure there will always be a way to hack the device. Apple iOS jailbreaking, anyone?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on February 11, 2014, 01:03:04 am
So, basically the situation is even more dire than we thought, and that 60fps hack is probably as easy as pie. Thus, FLIR is now trying to "salvage" the issue as fast as possible before their a$$ gets roasted by the regulators.

Of course the competition probably has their gears turning at the moment, too, because if FLIR did not secure their software, most likely others had failed to do it as well. It's all about cutting production costs and increasing revenues...After all who would even think to hack a TIC, right? :D

The real issue is the idiotic regulation that limits certain features and capabilities, because "terrorists" might use them. Ultimately, it is our collective fault for allowing a small gang of crooks who are in charge to run circles around us, and pull wool over our eyes. Remember folks, "the war on terror will not end in our lifetimes."

But I digress, who's up for that 60fps hack? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 11, 2014, 02:52:26 am
Question about the battery.  Every time I take the battery out, using or without using camera for a while. It smells weird, a little like burning plastic or new plastic,  but not very strong.  The temperature feels okay, even right after using the camera, it does not feel too warm. A 2-3 hours charge could last about 2-3 hours camera time.  The smell is bothering me. Is this an issue or all the flir camera is like that ? 

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 04:34:42 am
Question about the battery.  Every time I take the battery out, using or without using camera for a while. It smells weird, a little like burning plastic or new plastic,  but not very strong.  The temperature feels okay, even right after using the camera, it does not feel too warm. A 2-3 hours charge could last about 2-3 hours camera time.  The smell is bothering me. Is this an issue or all the flir camera is like that ? 

Thanks
I have noticed this also.  I have also checked the temp of the battery and it is cool so I think it's just the plastic outgassing.
I even leave the battery out of the camera just to make sure, and it still has a little odor like "hot plastic" or "hot electronics".  Don't think there is anything to worry about though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 11, 2014, 04:49:13 am
I've never noticed any unusual smells with my e40, but it is a couple years old now.  Somebody mentioned it could be the plastic
out-gassing.  There is a chemical in plastics called a "plasticizer."  A plasticizer is a chemical that keeps a plastic flexible.  It is that
"new car smell."  When a plastic gets old, some of the plasticizer leaves, making the plastic more brittle.

I suspect the smell is from some components over-heating, again, some of that smell may go away with time.  The charge rate of
a lithium-ion battery has to be tightly controlled, often the current/voltage control is on a circuit board within the actual battery, to
keep tight control of the charging current.  Hopefully, it is that "new car smell" and will go away somewhat as the components age.

Cheaper circuit boards use paper-resin, not glass-epoxy and often have that "burning" smell.  I don't know what the pcb material
is in Flir's batteries.

Hope this helps -  Jim

By the way, I thought I came close to bricking my e40, but because I had all the files backed up and was able to restore them to the
camera via RNDIS through the USB, I'm 1000% up.  It now has all the behavior of an e60, even says e60  in the information display.
All I need now is a new label, blue on black, "E60."  The best I can do with my Brother label maker is white on clear.

Jim

Question about the battery.  Every time I take the battery out, using or without using camera for a while. It smells weird, a little like burning plastic or new plastic,  but not very strong.  The temperature feels okay, even right after using the camera, it does not feel too warm. A 2-3 hours charge could last about 2-3 hours camera time.  The smell is bothering me. Is this an issue or all the flir camera is like that ? 

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 11, 2014, 05:25:18 am
FWIW, Successful REZ upgrade on the following E4 Model: 

Ver. No  E4 1.1
S/N of 639137XX
Firmware of 1.19.8
Build date of 1/30/2014
Purchased on Amazon last Friday (they are out now - at the time of my order, they had 13).

Question: A 2nd E4 I bought for my company did not take the hack.  I used Wordpad as the text editor - probably one possible problem (used a freeware text editor and everything went fine for the 2nd camera).  Anyways, on the one that didn't take, it did go through its updated e8.cfg message - just no enhanced resolution.   In making a 2nd attempt, can I just try the hack again -  or should I run the Remove_hack" fif file and then take another stab at it?  It would seem that re-doing the hack is just an update of that e8 config file.

Thanks go out to all you Master Programmers who have come up with - but a thumbs up as well to those providing a tad more explanation (i.e., anti bricking clarification) https://www.eevblog.com/forum/Smileys/default/smiliey_cal.gif (https://www.eevblog.com/forum/Smileys/default/smiliey_cal.gif)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 11, 2014, 05:33:46 am
Question: A 2nd E4 I bought for my company did not take the hack.  I used Wordpad as the text editor - probably one possible problem (used a freeware text editor and everything went fine for the 2nd camera).  Anyways, on the one that didn't take, it did go through its updated e8.cfg message - just no enhanced resolution.   In making a 2nd attempt, can I just try the hack again -  or should I run the Remove_hack" fif file and then take another stab at it?  It would seem that re-doing the hack is just an update of that e8 config file.

As always: read the instructions (again and again) - remember the hack is tied to the serial number so maybe forgot to change it?
... and again: check out EzCRC01 (see my footer) if you have problems computing the correct CRC01

Also: tell us which SW version your camera "to be hacked" has - and keep e8.cfg with lowercase "E".
If you're using RNDIS mode (recommended) then you can FTP the config directly without the need for a .FIF.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 05:54:40 am
I really like the ezcrc!  Asks questions as it runs so it is a little more "fool proof" and guides you as it runs.
Thanks Taucher for that!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Osiris454 on February 11, 2014, 06:18:52 am
Since FLIR seem to be clamping down in the E4 modification, does this have any affect on the E40's? The E40's have been out a few years, is it safe to say that they will not bother this model?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 11, 2014, 06:25:08 am
Since FLIR seem to be clamping down in the E4 modification, does this have any affect on the E40's? The E40's have been out a few years, is it safe to say that they will not bother this model?
I'd expect Exx becoming "hackproofed" as well - the urgency with E4 seems higher due to lower pricepoint.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 06:52:28 am
I had replaced my battery with a higher capacity battery so I decided to unsolder the board in the pack and take some close up shots.
Here ya go.
Lighting was a little tough... sorry for the quality.
There are two fets wired in parallel.
I don't know what the small chip is, but guess it is a regulator?
R3 is a 10k NTC thermistor.
The two fets are upside down because this was the way I could get good lighting, but you can read the number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 11, 2014, 06:56:40 am
I had replaced my battery with a higher capacity battery so I decided to unsolder the board in the pack and take some close up shots.
Here ya go.
Lighting was a little tough... sorry for the quality.
There are two fets wired in parallel.
I don't know what the small chip is, but guess it is a regulator?
R3 is a 10k NTC thermistor.
The two fets are upside down because this was the way I could get good lighting, but you can read the number.
Nice images! - did you capture full PCB shots of both sides?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 07:30:38 am
Sure... forgot to attach it.
This is before I unsoldered it from the battery compartment.
It was a challenge!  :phew:
Here ya go!
Thank you Taucher...
I really didn't get a full image of the top of the board with all the components, but the "overall" picture is the biggest I took... shows almost all of the board though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 11, 2014, 07:35:25 am
What cells did it have inside?  Any specs?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 11, 2014, 07:39:21 am
Question: A 2nd E4 I bought for my company did not take the hack.  I used Wordpad as the text editor - probably one possible problem (used a freeware text editor and everything went fine for the 2nd camera).  Anyways, on the one that didn't take, it did go through its updated e8.cfg message - just no enhanced resolution.   In making a 2nd attempt, can I just try the hack again -  or should I run the Remove_hack" fif file and then take another stab at it?  It would seem that re-doing the hack is just an update of that e8 config file.

As always: read the instructions (again and again) - remember the hack is tied to the serial number so maybe forgot to change it?
... and again: check out EzCRC01 (see my footer) if you have problems computing the correct CRC01

Also: tell us which SW version your camera "to be hacked" has - and keep e8.cfg with lowercase "E".
If you're using RNDIS mode (recommended) then you can FTP the config directly without the need for a .FIF.

It has the firmware ver 1.19.8.  Between the two "enhancement" efforts, I know that the second one that took was with me being much more methodical in each step.  I did have the right serial number, and generated the correct 2nd number, but i may not have left a blank line after that 2nd CRC01 number (did so after the serial number insertion step).  I will also double check that little e in the config file name to see if that was the culprit.

Am now bringing myself up to speed on the use of ftp  and it does seem to be an easier way to replace the camera's modified config files.  Evidently, I will be using ftp for the menu "hack"

[And thanks for weighing in.  Forget to mention this in last post, but when it comes time for us to take over your planet, you will be spared]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 07:39:53 am
What cells did it have inside?  Any specs?
The original cell was an 18650, 2600mAh.
I replace it with an 18650, 3200mAh.
Not a big difference, but I had one.
I don't know if the original was a protected cell or not.
It was a samsung ICR18650-26H so Flir uses good batteries..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 11, 2014, 07:50:19 am
Thanks for the info!  I am planning a similar upgrade.
The length of the battery will be a good indication if it is protected or not.

One of the best 18650s out there are from Panasonic.
http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable (http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable)

How many cells?

What cells did it have inside?  Any specs?
The original cell was an 18650, 2600mAh.
I replace it with an 18650, 3200mAh.
Not a big difference, but I had one.
I don't know if the original was a protected cell or not.
It was a samsung ICR18650-26H so Flir uses good batteries..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 08:16:05 am
Thanks for the info!  I am planning a similar upgrade.
The length of the battery will be a good indication if it is protected or not.

One of the best 18650s out there are from Panasonic.
http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable (http://www.fasttech.com/product/1141104-panasonic-ncr18650b-protected-rechargeable)

How many cells?

What cells did it have inside?  Any specs?
The original cell was an 18650, 2600mAh.
I replace it with an 18650, 3200mAh.
Not a big difference, but I had one.
I don't know if the original was a protected cell or not.
It was a samsung ICR18650-26H so Flir uses good batteries..
Just one cell... that is 99.9% of the battery volume.

I do have a post showing an 18650 standing next to the battery holder for comparison.

Just a FYI... the Flir battery has some double backed tape on it, so when you separate the two halves, the are stuck together by the tape on the battery.

DO NOT SQUEEZE the battery holder!  I did and slightly flattened the original cell... didn't damage it though, but would have if I had squeezed it any more!

The halves are glued together.. I did try Mike's method but it didn't work too well (hitting it with a hard tool).
Tried squeezing to pop the glue seam, but didn't work too well.

Also tried a small, sharp screwdriver.. kinda worked BUT the board is at the top, and the battery is right there, so BE CAREFUL and take your time!

The metal contact strips are spot welded to the battery, but I soldered them back on the new battery... use a HOT iron with a tip that has some mass, get on then off as fast as you can as heat can (will) damage the battery!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 11, 2014, 08:26:02 am
Thanks for the tips!

They are running the E4 on a single cell  ?!?
Crazy.  They should have at least made it removable.
But now they will charge you $50 for a replacement battery, when you can get the best for just $17...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on February 11, 2014, 08:42:37 am
An 18650 has a lot more energy than e.g. an AA battery, although not being that much bigger. Mike measured the power consumption in one of the videos, I can't remember the numbers but it lasts a few hours of continuous use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on February 11, 2014, 08:49:28 am
You can draw more current from the 18650 and have more juice as well.

Why not last double the time and also have removable 18650 batteries?...
Or at least a single removable battery that its easier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 08:51:10 am
I got 4.5 hours of continuous running out of mine before it shut off!
Need to measure the voltage when it shuts off though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 11, 2014, 08:51:30 am
Lunevalley3D in the UK offer an excellent service at very reasonable cost, with no set up fee and at-cost postage.

Take a look at my FLIR Useful Information thread for images and details. The lens adapter for an auxiliary lens cost me only GBP4 ($6) in black ABS.

Unfortunately they can't print the tripod adapter for me because "they are listed under a 'non-commercial' licence". Any further ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 11, 2014, 08:58:24 am
Unfortunately they can't print the tripod adapter for me because "they are listed under a 'non-commercial' licence". Any further ideas?
Ey? How would a private individual wanting to have something printed for private use be a violation of that non-commercial license?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 11, 2014, 10:14:34 am
How would a private individual wanting to have something printed for private use be a violation of that non-commercial license?
Not him, but the company who will print it. Because they print it for money = commercial use. Imho. Anyway stupid.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 11, 2014, 10:42:26 am
How would a private individual wanting to have something printed for private use be a violation of that non-commercial license?
Not him, but the company who will print it. Because they print it for money = commercial use. Imho. Anyway stupid.

That's like going to the copy shop to print a free for non-commercial use document, and then having it refused on the grounds of the above defunct logic.

So, toggle a bit somewhere and tell them it is yours. Then online you attribute it to the original creator, problem solved.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 11, 2014, 12:01:12 pm
Confused !

Which tripod adapter are you printing ? I printed Georges80 adapters without incident. Ask the originator of the STL to make it acceptable for printing so that you can submit it.

I did not realise that such restrictions existed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 11, 2014, 12:07:35 pm
A comment regarding the upgrade of the Lithium battery

The charge management chip in the EXTERNAL charger pod has a safety timer built into it that will stop the charge process after a set period of time even if the battery is not charged fully. I am not aware of the charge management chip used in the E4 itself but if it has a similar timer you may find that a larger capacity cell is not fully charged as a result of a time-out.

Also.... FLIR have used a good quality cell in the OEM battery. One of the challenges for me in the past has been sourcing reasonably priced quality cells. I have been warned that most that come out of China via eBay are basically a case of Russian Roulette.....some OK and some useless ! Where Li-Ion cells are concerned I am very safety conscious as I do not fancy a Li-Ion instigated fire in my house.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 11, 2014, 12:16:03 pm
most that come out of China ... are basically a case of Russian Roulette
Fake ebay batteries 18650 (https://www.youtube.com/watch?v=eOshOXcSkDA#ws)

Buy only proved ones based on some review with capacity measurements. Never buy blindly the cheapest ones.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scutarius on February 11, 2014, 01:55:54 pm
Lunevalley3D in the UK offer an excellent service at very reasonable cost, with no set up fee and at-cost postage.

Take a look at my FLIR Useful Information thread for images and details. The lens adapter for an auxiliary lens cost me only GBP4 ($6) in black ABS.

Unfortunately they can't print the tripod adapter for me because "they are listed under a 'non-commercial' licence". Any further ideas?

Maybe you are talking about my adapter, I changed the licence.
http://www.thingiverse.com/thing:244381 (http://www.thingiverse.com/thing:244381)

Please be careful, it's not a perfect design and it will be holding a lot of money.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 11, 2014, 02:59:32 pm
Since FLIR seem to be clamping down in the E4 modification, does this have any affect on the E40's? The E40's have been out a few years, is it safe to say that they will not bother this model?
I'd expect Exx becoming "hackproofed" as well - the urgency with E4 seems higher due to lower pricepoint.

Wait, you mean I can buy a E40 and make it an E60 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 11, 2014, 03:16:55 pm
Wait, you mean I can buy a E40 and make it an E60 ?

yes, see my (list of contents) post here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380296/#msg380296 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380296/#msg380296)

and read the e40 story from user emptech until February 05, 2014  ::)
https://www.eevblog.com/forum/profile/?area=showposts;u=92207 (https://www.eevblog.com/forum/profile/?area=showposts;u=92207)

user funzt upgraded the E30 with WiFi and Bluetooth to 320x240  :-+
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 11, 2014, 04:14:41 pm
Thank you tomas123 :)

I scored an open box E30 from tequipment.net, 15% discount (but full warranty), a deal !

I just hope I can hack it !...

I'll let you know if I manage to do it.
But from what I read, it should be possible ?
If anyone did it PLEASE send me a PM ! Thanks, it will help me sleep better while waiting for it...

Have a nice day,
uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 11, 2014, 04:28:46 pm
I have it from reliable sources that all the stock tequipment.net has from their Feb 5 shipment is not yet to 1.21.  I know one person had posted their wasn't but I wanted to throw it out there that the 65 (less now obviously) they received are all pre-1.21 firmware from what I understand.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 06:35:34 pm
A comment regarding the upgrade of the Lithium battery

The charge management chip in the EXTERNAL charger pod has a safety timer built into it that will stop the charge process after a set period of time even if the battery is not charged fully. I am not aware of the charge management chip used in the E4 itself but if it has a similar timer you may find that a larger capacity cell is not fully charged as a result of a time-out.

Also.... FLIR have used a good quality cell in the OEM battery. One of the challenges for me in the past has been sourcing reasonably priced quality cells. I have been warned that most that come out of China via eBay are basically a case of Russian Roulette.....some OK and some useless ! Where Li-Ion cells are concerned I am very safety conscious as I do not fancy a Li-Ion instigated fire in my house.
Thank you for your info.
I did tests to make sure the battery is getting fully charged.
First I charged with an external power supply to 3.2V limited to 1.5A.
Then I load tested them.
Then I charged in the Flir.
Load tested again.
The times were the same in both cases.

I have a electronic dummy load that I set at 0.5 amps and 1.5 amps, and had 6 18650 batteries of unknown quality and age, even though they were Samsung and Panasonics.

I discharged them to 3.0volts and monitored the discharge curves with a pen chart recorder to see the curves.
Three of the old samsung batteries ran for about 60 minutes, but I knew that because they were old laptop batteries.

The original Flir battery ran for 90 minutes at 1.5 amps, and the Panasonic ran for 120 minutes.
This proved to me that the Panasonic was genuine.

Those trustfire and ANY battery claiming over 3200 mAh IS FAKE.  THERE IS NO SUCH THING AS A 4000/5000 mAh LiIon!!!  Even those that claim 3200 mAh can be fake as well.

Here is a VERY good website comparing over 22 18650 batteries:
http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html (http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 11, 2014, 07:12:12 pm
You realize when a battery is measured for it's ampere-hour rating, the discharge is not done
continuous but over a 24 hour period, giving the battery a chance to "rest."  Although your method
will give you an idea of the battery's capabilities and give you a benchmark.

From the video, Flour, sure they were not smuggling some other white powder?  Ha ha.

I've always wanted to own a small spot welder, as you know, soldering to a cell is very bad for
the cell and can ruin it.  Right, apply the heat quickly and cool the cell right away.

So, it is believed the battery management circuit is in the camera and not the battery?  If it was in
the battery, the camera would have to have a data link to read the status.  It would be interesting to
find of your new, larger battery, gets fully charged.

Same Pamona, home of Cal-Poly?

Jim


Thank you for your info.
I did tests to make sure the battery is getting fully charged.
First I charged with an external power supply to 3.2V limited to 1.5A.
Then I load tested them.
Then I charged in the Flir.
Load tested again.
The times were the same in both cases.



Here is a VERY good website comparing over 22 18650 batteries:
http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html (http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html)
[/quote]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 07:19:30 pm
You realize when a battery is measured for it's ampere-hour rating, the discharge is not done
continuous but over a 24 hour period, giving the battery a chance to "rest."  Although your method
will give you an idea of the battery's capabilities and give you a benchmark.

From the video, Flour, sure they were not smuggling some other white powder?  Ha ha. waht od uoy mane yb htat????

I've always wanted to own a small spot welder, as you know, soldering to a cell is very bad for
the cell and can ruin it.  Right, apply the heat quickly and cool the cell right away.

So, it is believed the battery management circuit is in the camera and not the battery?  If it was in
the battery, the camera would have to have a data link to read the status.  It would be interesting to
find of your new, larger battery, gets fully charged.

Same Pamona, home of Cal-Poly?

Jim


Thank you for your info.
I did tests to make sure the battery is getting fully charged.
First I charged with an external power supply to 3.2V limited to 1.5A.
Then I load tested them.
Then I charged in the Flir.
Load tested again.
The times were the same in both cases.



Here is a VERY good website comparing over 22 18650 batteries:
http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html (http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html)
[/quote]
Yes same Pomona... and the fairgrounds/NHRA race track ( I can hear them when they are running).

I realize that my tests are not the accurate method, but seeing as all the testing I did was identical for all batteries, I got a good idea of their capacity and "well being".  I just didn't want my testing to drag on for days.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cubitus on February 11, 2014, 07:47:15 pm
I just bought my camera in France (27/12/2013) FW1.19.8; D
The hack worked very well: - +

Do you know a solution for "Flire tools +"?

thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 11, 2014, 08:00:29 pm
Provide a review of your experience with the E4 and the Standard Tools software. Send it to FLIR as feedback and they may give you a FLIR Tools+ activation key for free. That is what they did for me.

Be aware that activation involves the Tools+ being connected to FLIR's computer and Tools/Tools+ phones home regularly  ;) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Primus on February 11, 2014, 08:21:00 pm
An update:

I got both the hacks to work. A note on getting the RNDIS to work for other new people coming in at this point. I had to disable all of my network adapters to get the default gateway to propagate. Also, the usb mode "RNDIS and UVC" did not work for me, I kept getting bad password in my filezilla. Once I switched over to just RNDIS, it worked like a charm.

My default gateway was, like most people, 192.168.0.2.

My camera information is:

Model: E4 1.1
Part #: 63901-0101
Software: 1.19.8

I'm waiting on another camera from eBay with the same part number, so here's hoping it's smooth sailing with that one too! Thanks guys! :)

(http://i85.photobucket.com/albums/k48/kalecgos702/pwn_zpse05ba94a.jpg)

Provide a review of your experience with the E4 and the Standard Tools software. Send it to FLIR as feedback and they may give you a FLIR Tools+ activation key for free. That is what they did for me.

Be aware that activation involves the Tools+ being connected to FLIR's computer and Tools/Tools+ phones home regularly  ;)

Can they force a software update via the tools+ by chance? I haven't had time to read all 244 pages, just the super relevant stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 08:39:02 pm
An update:

I got both the hacks to work. A note on getting the RNDIS to work for other new people coming in at this point. I had to disable all of my network adapters to get the default gateway to propagate. Also, the usb mode "RNDIS and UVC" did not work for me, I kept getting bad password in my filezilla. Once I switched over to just RNDIS, it worked like a charm.

My default gateway was, like most people, 192.168.0.2.

My camera information is:

Model: E4 1.1
Part #: 63901-0101
Software: 1.19.8

I'm waiting on another camera from eBay with the same part number, so here's hoping it's smooth sailing with that one too! Thanks guys! :)

(http://i85.photobucket.com/albums/k48/kalecgos702/pwn_zpse05ba94a.jpg)

Provide a review of your experience with the E4 and the Standard Tools software. Send it to FLIR as feedback and they may give you a FLIR Tools+ activation key for free. That is what they did for me.

Be aware that activation involves the Tools+ being connected to FLIR's computer and Tools/Tools+ phones home regularly  ;)

Can they force a software update via the tools+ by chance? I haven't had time to read all 244 pages, just the super relevant stuff.
I had posted the same problem that I had in getting the camera to connect, and I thought I had read about disconnecting all other network interfaces as well.
Good to see that it wasn't just me.

It was suggested to manually assign the NIC interface's metric manually instead of auto, but that didn't work either (for me).
I have a wired/wireless/flir NIC, and I assigned all of them a unique metric, but didn't work unfortunately.

Also, when you say microsd... I think you meant microUSB?   The E4 doesn't have an SD card/interface.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Primus on February 11, 2014, 08:53:59 pm
Quote
Also, when you say microsd... I think you meant microUSB?   The E4 doesn't have an SD card/interface.

I thought the MSD USB mode was sort of like putting it in a removable storage type mode. I'm far from an expert on this stuff, I just guessed at what it was :). I actually edited it out a bit ago because I wasn't quite sure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 11, 2014, 09:19:42 pm
Confused !

Which tripod adapter are you printing ? I printed Georges80 adapters without incident. Ask the originator of the STL to make it acceptable for printing so that you can submit it.

I did not realise that such restrictions existed.

It was ee.jcesar's one from the bottom of page 239. This one: http://www.thingiverse.com/thing:244381/#files (http://www.thingiverse.com/thing:244381/#files)

edit:

Maybe you are talking about my adapter, I changed the licence.
http://www.thingiverse.com/thing:244381 (http://www.thingiverse.com/thing:244381)

Please be careful, it's not a perfect design and it will be holding a lot of money.

Many thanks ee, I'll give them another try!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 11, 2014, 09:50:59 pm
Quote
Also, when you say microsd... I think you meant microUSB?   The E4 doesn't have an SD card/interface.

I thought the MSD USB mode was sort of like putting it in a removable storage type mode. I'm far from an expert on this stuff, I just guessed at what it was :). I actually edited it out a bit ago because I wasn't quite sure.

Yes when the camera is in MSD USB mode.... it does (or should) appear as another drive and a removable drive, but this is only for getting the still images.
The USB mode is for using it like a web camera.
The RNDIS tries to open a network "adaptor" for telnet/ftp access.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hal2000 on February 11, 2014, 10:20:15 pm
I have been scouring the internet for a while now and found this posting, which may be close enough to help me.  My company is interested in a Flir camera (not sure of model yet, although leaning toward the 4) however we would like to evaluate the software.  I have downloaded it, however it does not come with any sample files.  Can anybody post a sample file for use with the software, or provide a link to where some may be located?  I would be ok with files produced form any Flir camera, not just the 4, as I said, we are not sure what model yet.
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 11, 2014, 10:57:02 pm
I have been scouring the internet for a while now and found this posting, which may be close enough to help me.  My company is interested in a Flir camera (not sure of model yet, although leaning toward the 4) however we would like to evaluate the software.  I have downloaded it, however it does not come with any sample files.  Can anybody post a sample file for use with the software, or provide a link to where some may be located?  I would be ok with files produced form any Flir camera, not just the 4, as I said, we are not sure what model yet.
Thanks.
You better hurry up before they start releasing 1.21.0 on units that ship.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 11, 2014, 11:22:33 pm
Question about the battery.  Every time I take the battery out, using or without using camera for a while. It smells weird, a little like burning plastic or new plastic,  but not very strong.  The temperature feels okay, even right after using the camera, it does not feel too warm. A 2-3 hours charge could last about 2-3 hours camera time.  The smell is bothering me. Is this an issue or all the flir camera is like that ? 

Thanks
I have noticed this also.  I have also checked the temp of the battery and it is cool so I think it's just the plastic outgassing.
I even leave the battery out of the camera just to make sure, and it still has a little odor like "hot plastic" or "hot electronics".  Don't think there is anything to worry about though.

So this seems a common issue for Flir battery ?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 11, 2014, 11:28:56 pm
My E4 has not been used for 2 weeks or more. Battery smells of electronics, likely the odour from inside my nice new E4 adhering to its case. My brand new (but recently charged) spare battery has no noticeable odour but it has been sat in its plastic bag and box, not in the camera. If your battery is not warm/hot , no worries.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 12, 2014, 12:51:52 am
Does anyone know if two e4's purchased at the same time can be added together and applied to the higher tier case/battery/charger reward for the U.S. flir promotion?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 12, 2014, 01:23:09 am
Those trustfire and ANY battery claiming over 3200 mAh IS FAKE.  THERE IS NO SUCH THING AS A 4000/5000 mAh LiIon!!!  Even those that claim 3200 mAh can be fake as well.

Not quite true. Panasonic have a 4.0Ah cell in production for 2014. Minimum order 2,500 units. They also have 3.4Ah.
Tesla are using 3.4Ah in their car, cost less than $3 per unit. I wish they could be bought on eBay at that price, quality reliable 18650 would be great...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 12, 2014, 03:06:26 am
HHmmm.. interesting on the 4Ah capacity!  I would believe Panasonic, but trustfire and ultrafire (black and gold)... NO WAY!
I have a 4Ah ultrafire that I ran on my tests and it lasted 21 minutes at 1.5 amps!!!  NOT a 4Ah battery.

I did confirm my results with the website that I posted a link to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 12, 2014, 03:25:18 am
Hey guys. Thank you all for the hard work you've put into this thread. I've been playing around with my camera and decided to attempt the hack. When I go to transfer my .fif file in Flir tools I get an error pop up in which I have to abort. When I review the error log I have a

"Error in FIF::UVCCommandDispatcher::AddFile(line:565): The system cannot find the path specified.  hr=0x80070003:"

 but not sure what to go to check on this.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 12, 2014, 03:34:56 am
Hey guys. Thank you all for the hard work you've put into this thread. I've been playing around with my camera and decided to attempt the hack. When I go to transfer my .fif file in Flir tools I get an error pop up in which I have to abort. When I review the error log I have a

"Error in FIF::UVCCommandDispatcher::AddFile(line:565): The system cannot find the path specified.  hr=0x80070003:"

 but not sure what to go to check on this.

You've packaged the cmd file but the path inside the archive seems to be wrong

I'd use RNDIS and FTP anyway (simpler)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on February 12, 2014, 03:48:59 am
Quote
Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

From first post this link appears to be dead. Is there another source? Some poking around the search engines didn't yield anything working for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 12, 2014, 04:07:30 am
Quote
Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

From first post this link appears to be dead. Is there another source? Some poking around the search engines didn't yield anything working for me.

Microsoft has some nice RNDIS documentation - I hope you have read this entire thread - there's lots of info buried inside. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on February 12, 2014, 04:14:04 am
Quote
Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

From first post this link appears to be dead. Is there another source? Some poking around the search engines didn't yield anything working for me.

Microsoft has some nice RNDIS documentation - I hope you have read this entire thread - there's lots of info buried inside. :)

Absolutely, at least skimmed every page. Just archiving some of the docs for future reference in case you-know-who manages a take-down of this thread at some point (stranger things have happened.) Couldn't get that file. No big deal as you said. Thanks anyway for your substantial contribution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on February 12, 2014, 04:57:30 am
I have to ask, don't know if this can go into a poll question, how many eX's and eXX's have been modified, upgraded
so far?

Mine went from an e40 to an e60

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on February 12, 2014, 11:01:23 am
Thank you for your info.
I did tests to make sure the battery is getting fully charged.
First I charged with an external power supply to 3.2V limited to 1.5A.
Then I load tested them.
Then I charged in the Flir.
Load tested again.
The times were the same in both cases.

I have a electronic dummy load that I set at 0.5 amps and 1.5 amps, and had 6 18650 batteries of unknown quality and age, even though they were Samsung and Panasonics.

I discharged them to 3.0volts and monitored the discharge curves with a pen chart recorder to see the curves.
Three of the old samsung batteries ran for about 60 minutes, but I knew that because they were old laptop batteries.

The original Flir battery ran for 90 minutes at 1.5 amps, and the Panasonic ran for 120 minutes.
This proved to me that the Panasonic was genuine.

Those trustfire and ANY battery claiming over 3200 mAh IS FAKE.  THERE IS NO SUCH THING AS A 4000/5000 mAh LiIon!!!  Even those that claim 3200 mAh can be fake as well.

Here is a VERY good website comparing over 22 18650 batteries:
http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html (http://lygte-info.dk/review/batteries2012/Common18650Summary%20UK.html)

Are you saying you terminated the charge at 3.2 volts ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on February 12, 2014, 11:44:37 am
He probably meant 4.2; 3.2V for a standard cobalt/manganese cell is "almost empty".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 12, 2014, 12:48:13 pm
@dtbp,

Regarding the FLIR promotion.

Have a read of the conditions of the promotion. They are tiny print but may answer your question. I thought it was the TOTAL receipted transaction that set the level of promotion that you could apply for and not individual item values. So if you bought an E4 plus some optional accessories, your entitlement increases. That sounds logical to me anyway. An email to FLIR C.S. will confirm teh situation for you.

Good luck  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 12, 2014, 12:49:56 pm
HHmmm.. interesting on the 4Ah capacity!  I would believe Panasonic, but trustfire and ultrafire (black and gold)... NO WAY!
I have a 4Ah ultrafire that I ran on my tests and it lasted 21 minutes at 1.5 amps!!!  NOT a 4Ah battery.

I did confirm my results with the website that I posted a link to.

Yeah that's the joke. Panasonic a massive leading battery OEM have only just achieved 4000mAh. And tweet the eBay sellers are already on 5000mAh. Panasonic should hire them...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 12, 2014, 04:26:58 pm
I must be getting old....
I just received my E4 camera.. Its 1.19.8
I have been reading for 1 hour here trying to know how do i do the 320X240 hack and menu hack.. I found the infos on the menu hack on the first page.. but i was not able to find exactly the hack for the 320X240 resolution.... Is it the menu hack that also adds the higher resolution ?
Sorry if i am being stupid.. . but its so much information here that i got lost a little bit....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on February 12, 2014, 04:37:51 pm
I must be getting old....
I just received my E4 camera.. Its 1.19.8
I have been reading for 1 hour here trying to know how do i do the 320X240 hack and menu hack.. I found the infos on the menu hack on the first page.. but i was not able to find exactly the hack for the 320X240 resolution.... Is it the menu hack that also adds the higher resolution ?
Sorry if i am being stupid.. . but its so much information here that i got lost a little bit....

It's not a hack, it's a modification.  ;)

The basic modification includes the 320x240 resolution mod. If you follow the basic instructions at https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) , ending at "Enjoy!" then there is no further action required; the upgraded resolution is automatically enabled.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 12, 2014, 04:42:22 pm
I must be getting old....
I just received my E4 camera.. Its 1.19.8
I have been reading for 1 hour here trying to know how do i do the 320X240 hack and menu hack.. I found the infos on the menu hack on the first page.. but i was not able to find exactly the hack for the 320X240 resolution.... Is it the menu hack that also adds the higher resolution ?
Sorry if i am being stupid.. . but its so much information here that i got lost a little bit....

Try this method - it's simplified (EzCRC01): https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)
If you already enabled RNDIS mode via hidden menu, then you can use FTP instead of creating a .fif file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 12, 2014, 04:57:59 pm
I did all the had using the modified e8.cfg
\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok


I tried to see on menu any info about the new resolution.. but i didnt find.. its ok ? the resolution is visible better... but on system info all are the same. Is it supposed to change something?
Now i do the ADDMENU-BETA1.zip  mod  ? is it the lastest better menu function to add ?
THANKS SO MUCH !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 12, 2014, 05:04:13 pm
I tried to see on menu any info about the new resolution.. but i didnt find.. its ok ? the resolution is visible better... but on system info all are the same. Is it supposed to change something?
Now i do the ADDMENU-BETA1.zip  mod  ? is it the lastest better menu function to add ?
THANKS SO MUCH !

First get RNDIS/Telnet+FTP working, then MAKE A BACKUP - remember to cold boot after adding and overwriting the menu structure - beta 3 is up3date.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stuey on February 12, 2014, 05:12:43 pm
I did all the had using the modified e8.cfg
\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok


I tried to see on menu any info about the new resolution.. but i didnt find.. its ok ? the resolution is visible better... but on system info all are the same. Is it supposed to change something?
Now i do the ADDMENU-BETA1.zip  mod  ? is it the lastest better menu function to add ?
THANKS SO MUCH !
That means it worked, and you should also see a few added features as well.

If you really want to be sure, take a photo, download into Flir Tools, and look at the image as data points in Excel. Before the mod, you would see groups of 16-identical measurements. After the mod, you should see full 320 x 240 grid of measurements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 12, 2014, 05:17:43 pm
I tried to see on menu any info about the new resolution.. but i didnt find.. its ok ? the resolution is visible better... but on system info all are the same. Is it supposed to change something?
Now i do the ADDMENU-BETA1.zip  mod  ? is it the lastest better menu function to add ?
THANKS SO MUCH !

First get RNDIS/Telnet+FTP working, then MAKE A BACKUP - remember to cold boot after adding and overwriting the menu structure - beta 3 is up3date.
MANNN .. MUCH better the resolution....
The 80X80 is... bad.......i know its useful but its sad to use 80x80 i guess.. i will try the menu mode and get back to you guys...
 Thanks..
Just out of curiosity..... Have you guys discovered if its possible in the future to hack it to 30 FPS ? or is hardware locked to 9 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 12, 2014, 05:57:28 pm
Again: Hz hacking is no priority to me as it will hardly give additional functionality, might introduce noise and for sure it would cause ITAR trouble for Flir - something that nobody wants.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 12, 2014, 06:07:08 pm
I hope this wasn't covered before but with the hack it removed the FLIR watermark, is it possible to add your company logo as a watermark in the bottom corner instead? Any help would be appreciated.
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 12, 2014, 06:11:39 pm
guys... menu added as well. !!!
I did not need to change anything to make the zoom works!!!
The functions are great ! And its so easy to do..... I did a mod on my oscilloscope that DS2072A and it was so much harder.... ... this was great!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 12, 2014, 06:18:39 pm
Again: Hz hacking is no priority to me as it will hardly give additional functionality, might introduce noise and for sure it would cause ITAR trouble for Flir - something that nobody wants.
I dont know ITAR.... why changing for 30 hz would give trouble ? ITAR only allows to no military use under 30FPS?
Are you working in something else regarding the E4?
Thank you so much Taucher ! Now i have a nice toy that really worth the 980 USD (and more)..... but with stock resolution.... man... i was a little bit sad, gotta say....
I am used to see big resolution in my area ( arial footage) that is hard to get used to so bad resolution 80x80...I know the use here is completely different.... but still , you wish a better one to please our eyes too, right ?
Thanks again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 12, 2014, 06:34:22 pm
@tiagobaracho

Please look at the 'FLIR E4 Useful information' thread on this forum.

As well as other useful information, it explains the issue with higher frame rates.

It is not illegal for you to increase the frame rate but FLIR are supposed to have prevented such under ITAR Regs !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dudepron on February 12, 2014, 07:32:03 pm
Is there a thread somewhere discussing the best way to do a backup before doing the mod?
I just got mine and I'll post the data for it.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 12, 2014, 07:37:22 pm
Stupid Question, I know, but is the flir server accessible via just using the Host (192.168.0.2), username (flir) and password (3vlig)?  That is, via filezilla without camera hooked up?   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 12, 2014, 08:01:10 pm
He probably meant 4.2; 3.2V for a standard cobalt/manganese cell is "almost empty".
OOPSS.... yes charged to 4.2, discharged to 3.0  old age is setting in!  :palm:

I believe the camera shuts down at 3.2 volts though...
And it does draw about 500 mA when running... I brought out a couple of wires between the battery and the contacts and used an ammeter to measure the current.
It does bounce around when the camera calibrates due to the shutter operating (about 800mA for about a second).
This is why I did a 500mA current test.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cubitus on February 12, 2014, 09:09:27 pm
hello,

I have a problem with Flir Tools.
On my desktop, I have no video. : (
On my laptop, I have the video. :)

Both computers are running Windows 7 x64

What might be the problem?

(http://s14.postimg.org/erji77rjx/flir1.jpg) (http://postimg.org/image/erji77rjx/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 12, 2014, 11:07:38 pm
Stupid Question, I know, but is the flir server accessible via just using the Host (192.168.0.2), username (flir) and password (3vlig)?  That is, via filezilla without camera hooked up?
After it is in RNDIS mode you connect the camera and connect through FileZilla
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 3ricj on February 12, 2014, 11:32:47 pm
Hi there folks,

I've been trying to read up on the 250 someodd pages of this discussion, but I'm sure that I'm out of date.   

 - Aurora on this board turned me onto the E4 camera, which I now own and have hacked to be an E8.
 - I have a specific project in mind - some of you are working on related things - -high res panagraphic images.
 - I have a very long focal length germanium lens (it's somewhere between 1500 and 1700mm focal distance, F1.0)
 - I had gotten it basically working using a pathfindIR, but being unable to disable automatic range/gain on the camera prevented me from doing panos.
 - I have built a very high accuracy rotation stage which can support the weight of this 30 pound lens.

My questions for the group:

 - Has anyone retrofit the lens assembly entirely on their e4?  Is this a reversible prospect? eg: can I just remove the lens and resemble and have any chance of putting it back again?   
 - How does one input the flat field calibration data, or perform this cal? 
 - I may have access to a reference black body for absolute emissivity calibration, but this really isn't that important to me - - seamless stitching is, but having access to this might help.
 - Mildly related, my hacked e4 shows a few pixels being "off".  See attached - three shots of the same wall - - you can see some "spots" on the upper left of the image which read about 1c cooler.
  (this doesn't seem to be related to external muck on the lens or anything.  Has anyone encountered this before?

As this is my first post, I thought I'd share a bit about me:

 - I work with lasers a bunch. No, not "laser pointers".  Sometimes for fun:  http://www.hackerbotlabs.com/2012/08/photonic-beam-results/ (http://www.hackerbotlabs.com/2012/08/photonic-beam-results/)   Sometimes for work: https://www.youtube.com/watch?v=OM6E3f2lT14 (https://www.youtube.com/watch?v=OM6E3f2lT14)
 - Milling, soldering, coding, hacking, etc.
 - photography - -mostly underwater.   http://www.flickr.com/photos/3ricj/ (http://www.flickr.com/photos/3ricj/)
 - I helped make a cookbook.   http://www.modernistcuisine.com/ (http://www.modernistcuisine.com/)

Anyway, I can't express how happy I am to see this community here hacking on this camera.  I've had this project in the works for 3 years trying to make use of this huge lens I have, and now this looks possible.  Super excited, please let me know how I might be able to give back to this community for it's support.

Regards,
-3ric Johanson
 



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 12, 2014, 11:57:28 pm
My questions for the group:

 - Has anyone retrofit the lens assembly entirely on their e4?  Is this a reversible prospect? eg: can I just remove the lens and resemble and have any chance of putting it back again?
Watch the teardown video to see the construction. You may need to use it without the metal shell as this may restrict sensor FOV. If  you make your own replacement to hold the PCB/sensor assembly, you could reassemble.
 
Quote
- How does one input the flat field calibration data, or perform this cal? 
Again, see the teardown - the shutter is a self-contained module. You can issue manual cal commands via the console (telnet or serial) to sync with your picture taking.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 3ricj on February 13, 2014, 12:09:32 am
My questions for the group:

 
Quote
- How does one input the flat field calibration data, or perform this cal? 
Again, see the teardown - the shutter is a self-contained module. You can issue manual cal commands via the console (telnet or serial) to sync with your picture taking.

Ok, I will watch the teardown video.  However, I'm not sure that we are discussing the same "cal"; each model lens for any given camera has different performance - on visible cameras this is things like distortion, gain and vignetting... my crude understanding is that the same is true for thermal cameras as well; the edge of the image may have fewer "counts", and different speed lenses will have different planck bias or somesuch for transcoding sensor values into degrees - but my understanding of this is spotty at best.  I know flir has an internal tool for lens calibration, and some other camera manufactures have end-user tools for "lens calibration" - but I don't understand the details.   

Related: I don't understand why I'm getting bogus readings from some points on the sensor on my e4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 13, 2014, 01:25:18 am
Hey guys. Thank you all for the hard work you've put into this thread. I've been playing around with my camera and decided to attempt the hack. When I go to transfer my .fif file in Flir tools I get an error pop up in which I have to abort. When I review the error log I have a

"Error in FIF::UVCCommandDispatcher::AddFile(line:565): The system cannot find the path specified.  hr=0x80070003:"

 but not sure what to go to check on this.

Not sure what I did to get the CMD file off. I went back and did the transfer over RNDIS instead and everything went perfectly along with the rest of the upgrades. Thanks @Taucher
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 13, 2014, 03:12:43 am
How do I change the threshold temp in "insulation" color mode ? It seems locked at 18.00 C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 13, 2014, 03:59:31 am
Hi guys...After i tested it, i keep on the box and now when i turned on again i got this error....
should i be worried?
I had to hold power for few seconds to turn of and then turn on again to work..
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on February 13, 2014, 04:22:35 am
^ looks like you didn't follow instructions. > Unplug. remove battery
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JockeT on February 13, 2014, 07:20:32 am
My questions for the group:

 
Quote
- How does one input the flat field calibration data, or perform this cal? 
Again, see the teardown - the shutter is a self-contained module. You can issue manual cal commands via the console (telnet or serial) to sync with your picture taking.

Ok, I will watch the teardown video.  However, I'm not sure that we are discussing the same "cal"; each model lens for any given camera has different performance - on visible cameras this is things like distortion, gain and vignetting... my crude understanding is that the same is true for thermal cameras as well; the edge of the image may have fewer "counts", and different speed lenses will have different planck bias or somesuch for transcoding sensor values into degrees - but my understanding of this is spotty at best.  I know flir has an internal tool for lens calibration, and some other camera manufactures have end-user tools for "lens calibration" - but I don't understand the details.   

Related: I don't understand why I'm getting bogus readings from some points on the sensor on my e4

The per-pixel calibration map is available somewhere in the camera, this has been discussed quite a bit. I suspect this is what you need.
Your specks looks to me like dust on the sensor, my E4 was shipped with this feature as well. Easily fixed with a sensor dust blower if you can get the lens off (i took my camera apart to achieve this, but i have since ordered a lens adjustment tool so i can take the lens off without taking the camera apart)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 13, 2014, 08:04:57 am
Hi guys...After i tested it, i keep on the box and now when i turned on again i got this error....
should i be worried?
I had to hold power for few seconds to turn of and then turn on again to work..
Thanks
This seems common error for Menu mod beta 3. It appeared to me several times, even once while charging :)
Few people here have same experience. This happens only during warm boot. To avoid this, turn camera to hard off (press off for longer time).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 13, 2014, 08:15:30 am
Hi guys...After i tested it, i keep on the box and now when i turned on again i got this error....
should i be worried?
I had to hold power for few seconds to turn of and then turn on again to work..
Thanks
This seems common error for Menu mod beta 3. It appeared to me several times, even once while charging :)
Few people here have same experience. This happens only during warm boot. To avoid this, turn camera to hard off (press off for longer time).
Yes, it's still unclear to what it's actually related (I suppose it's happening after a certain mode was in use on shutdown - I had experienced it only once so far) - cold booting (battery removal) helps. If anybody finds out how to consistently reproduce the error, then please post about it :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MozamPete on February 13, 2014, 08:41:32 am
The  Mk2 i7 (the black one) uses a 320x240 microbolometer limited to 140x140 buthe t I have not seen comment on the Mk1 i7 (Blue/grey two tone). The following study refers:

http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf (http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf)

My i3 is black & calibrated this year (2013), so it should be a Mk2, but I can "only" get 120x120 instead of 140x140...  :-//

Here is a timeline from http://www.optimumenergy.com/the-new-flir-i-series/ (http://www.optimumenergy.com/the-new-flir-i-series/)

(http://www.optimumenergy.com/wp-content/uploads/2012/02/flir-i-series-timeline-620px.jpg)

Has anyone managed to upgrade the resolution on a 1st Generation i5 (Blue/Grey version)? 

I have upgraded my 2nd Generation i3 (Black version, manufactured Nov 2012) from 60 x 60  to 120 x 120 resolution and added the additional menus following the instructions given in this thread. But with my 1st Generation i5 (Blue/Grey version, manufactured Nov 2010) I can get the additional menus working but have not managed to get the resolution above the original 80 x 80.

The original \FlashFS\system\appcore.d\config.d\conf.cfg file on my i5 does not include the ".caps.config.image.settings.resIR int32 X" or ".caps.config.image.settings.fpgaResolution.resIR int32 X" lines. I have added then and recalculated the CRC but it doesn't make any difference to the resolution.

Is the 1st Generation i5 resolution upgradeable?

Thanks to all that have contributed to this great thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 13, 2014, 09:24:55 am
Hi guys...After i tested it, i keep on the box and now when i turned on again i got this error....
should i be worried?
I had to hold power for few seconds to turn of and then turn on again to work..
Thanks

A friend of mine who I helped modify got this error the day after we modified.
To the best of my knowledge it never happened again, that was about 2 months ago.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 13, 2014, 09:43:54 am
If anybody finds out how to consistently reproduce the error, then please post about it :)
When I left my camera in soft off few days, so it turns itself to hard off, then in next boot I will receive this error for sure.
I saw this message like seven times or so. But I do not know any direct action to reproduce this immediately yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MozamPete on February 13, 2014, 10:05:30 am
The  Mk2 i7 (the black one) uses a 320x240 microbolometer limited to 140x140 but I have not seen comment on the Mk1 i7 (Blue/grey two tone).

From MicroNews Issue No.90, March 2010 (so before the FLIR Mk2 ix cameras came out)
"This image was taken with the Extech i5 by FLIR, a compact infrared camera that allows for visualization of heat differences. The camera is advertized to have an 80 x 80 pixel image, and a sensitivity of 0.1oC (Chipworks found a 240 x 240 pixel sensor in the camera that we tore down).

So the Blue/Grey 1st Generation i3/5/7 cameras should be upgradable.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 13, 2014, 11:08:58 am
Regarding the error reports. Not very helpful to you, but I can report that Menu Beta2A installed on my camera has not caused this issue for me at any time. It is likely that one of the extra functions in Beta3 is responsible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 13, 2014, 11:16:18 am
Regarding the error reports. Not very helpful to you, but I can report that Menu Beta2A installed on my camera has not caused this issue for me at any time. It is likely that one of the extra functions in Beta3 is responsible.
Quite possible - but It could also be related to the HW version (1.0 vs. 1.1) or the kind of using it (last settings) or even the e8.conf (advanced measurements enabled when better not).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 13, 2014, 11:22:14 am
@ Taucher,

Agreed. No criticism of your hard work on the Beta3 intended by the way ! I suppose when creating new functionality that is not normally active on a platform, there will always be the risk of some weird behaviour, or process conflict that creates an error. It kinda goes with the teritory.

Thanks again for the effort that you put into the Menu's etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 13, 2014, 11:45:38 am
It could also be related to the HW version (1.0 vs. 1.1)
Has been reported on both, 1.0 either 1.1.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 13, 2014, 12:30:04 pm
Hi guys...After i tested it, i keep on the box and now when i turned on again i got this error....
should i be worried?
I had to hold power for few seconds to turn of and then turn on again to work..
Thanks
This seems common error for Menu mod beta 3. It appeared to me several times, even once while charging :)
Few people here have same experience. This happens only during warm boot. To avoid this, turn camera to hard off (press off for longer time).

This should not relate with Menu mod. I was seeing this error couple of times before I did any mod
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 13, 2014, 02:19:51 pm
O/S revision differences rather than Firmware or hardware ?
The other possibility is pretty ugly...an unstable hardware platform.

Maybe I have just been lucky and not had the combination of actions that produce the error  ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dc101 on February 13, 2014, 02:35:00 pm
Just placed an order on Amazon.com, they had 19 left in stock, hoping those are 19 of the 1.19.8 firmware... fingers crossed.  It should be here by next Tuesday, I would have sprung the extra few bucks for overnight, but we're snowed in this week, so doubt it would have made any difference.

Cheers,
-Tim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 13, 2014, 02:38:53 pm
I just spoke to a UK dealer (not PASS) who said that Flir asked for their E4 stock to be sent back to be  "Upgraded". This would explain the backlog that was mentioned.
Get 'em while they're hot!


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 13, 2014, 02:48:30 pm
Oooooo cheeky !   FLIR mean business !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 13, 2014, 04:19:54 pm
I just spoke to a UK dealer (not PASS) who said that Flir asked for their E4 stock to be sent back to be  "Upgraded". This would explain the backlog that was mentioned.
Get 'em while they're hot!

I ordered mine from tequipment.net on 2/8 and it arrives tomorrow (shipped yesterday 2/12).  They have 40+ still in stock so I will report what firmware it's running when it gets here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 13, 2014, 06:01:13 pm
Do you guys think the new firmware will be hack able in the future as well?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 13, 2014, 06:11:39 pm
Do you guys think the new firmware will be hack able in the future as well?
<speculation type="wild">
Sure, why not!  :)
</speculation>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 13, 2014, 06:19:02 pm
Do you guys think the new firmware will be hack able in the future as well?
They seem to be putting a lot of effort in - anything is crackable given sufficient time and resources, but whether anyone will bother is another matter.
I wouldn't be surprised if new units have warranty seals as well.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 13, 2014, 06:44:28 pm
Do you guys think the new firmware will be hack able in the future as well?
They seem to be putting a lot of effort in - anything is crackable given sufficient time and resources, but whether anyone will bother is another matter.
I wouldn't be surprised if new units have warranty seals as well.
Or maybe you have to pry off the trigger?  :scared: :scared:  (cheap shot...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 13, 2014, 06:48:38 pm
Nothing is impossible. Even systems that were designed to be hard to hack (such as Apple's iOS 7 and Texas Instruments' TI-Nspire calculators) have been broken.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 13, 2014, 06:55:44 pm
I am going to laugh if the next series of FLIR's needs an always on internet connection and has same nasty e-fuses built in. :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CecilTheTurtle on February 13, 2014, 08:03:54 pm
Just got mine, ordered Feb 10th.

Model: E4 1.1
Serial: 639136xx
Software: 1.19.8
Calibrated: Estonia
Cal. Date: Jan 29, 2014

Beginning hack now....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CecilTheTurtle on February 13, 2014, 09:01:59 pm
Success!

Before:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=81347;image)
After:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=81349;image)

Still working on the menu hacks, but it'll come I'm sure. Thanks to everyone who contributed to this hack! Wouldn't have bought an E4 or any TIC without it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 13, 2014, 10:30:07 pm
Which would be the best for the money solution to use the camera for PCB work ? If only i change the focus it would be enough? I would prefer a solution that would not need to touch on the focus, to keep it original.. Is there a single lens that you can use that will bring focus close to PCB inspection ?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 13, 2014, 10:32:33 pm
@tiagobaracho

Please read my FLIR E4 Useful information thread. Its all there, including how to mount it.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 13, 2014, 11:53:51 pm
Just noticed PASS/Tester (UK) are offering a free soft case, battery and car charger with the E4

http://www.pass-thermal.co.uk/flir-e4-thermal-imaging-camera (http://www.pass-thermal.co.uk/flir-e4-thermal-imaging-camera)

Also Tequipment appear to have got so tired of people asking about firmware versions they've put it in their FAQ
http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a (http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a)
Note stock has gone from 55 to 19 in  3 days...!

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on February 14, 2014, 12:13:32 am
Tequipment FAQ also says "In order to see the exact version of firmware on an E4, one must register the camera online at Flir's website"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 14, 2014, 12:34:24 am
Mike,

That offer came in a little while after I bought my camera. The USA already had such an offer running at my time of my purchase but PASS advised that UK offers normally trail by a few weeks or so. That is exactly what happened. The US offer was more generous as it also included the external battery charger Pod. Still some nice freebies though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: swperk on February 14, 2014, 01:06:31 am
I had no problem with the FLIR E4 resolution upgrade, but when I tried to do the menu upgrade I couldn't get my PC (Win 8.1) to connect with the E4 (using FileZilla). The PC saw the E4 as a networked device on its own separate network, but refused to connect, even after I confirmed that the IP address and the subnet mask were okay. On a whim, I tried networking to the FLIR on my Win 7 PC and it everything worked easily and flawlessly with FileZilla. I didn't even have to edit any networking parameters on the PC--it "just worked!"

I hope this will help others who are having issues with the menu upgrade process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bluestreak66 on February 14, 2014, 06:54:09 am
Just Received an E4 from "Mega Depot" off eBay $995 free shipping (was going to pick it up locally but taxes would've add another $80.) Has firmware 1.19.8 and applied the software/menu mods without issue. I just want to thank everyone that has worked on the modifications. I think I would have been disappointed with the E4 the way it was from the factory, but with the increased resolution and extra menu feature It is well worth it. The menu options add a ton of functionality It was quite surprising how limited the stock E4 actually is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 14, 2014, 12:26:03 pm
Hello, a Polish reseller seemed to have one in stock,
so I asked if they have could tell me what FW version
they had. They answered that they will have it ready
to ship about 19th of February, and the firmware will
be 1.21.0, mmmh, I should have bought it earlier.

On the bright side, at least now I still have that 1k2
euro in my pocket...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 14, 2014, 12:40:30 pm
Still some UK suppliers and ebay outlets with the old version :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stoffel on February 14, 2014, 12:44:22 pm
Yup, I got mine from conrad.nl yesterday and ordered it this week. Still the old FW and already hacked :)

Thanks to everyone here for their hard work (and to FLIR for making it possible :P ). Absolutely amazing result!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 14, 2014, 07:47:15 pm
Just got my E4 from tequipment.net, ordered on 2/8 - arrived today with firmware 1.19.8.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 14, 2014, 08:29:58 pm
Yup, I got mine from conrad.nl yesterday and ordered it this week. Still the old FW and already hacked :)

Thanks to everyone here for their hard work (and to FLIR for making it possible :P ). Absolutely amazing result!

Do you know if they sent it to you from their de warehouse?
They have a good price here in Italy, and a promo discount for the first order,
but cannot tell what fw they have in stock, they told me they have them ready
to ship from germany warehouse.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Galaxyrise on February 14, 2014, 09:07:21 pm
Also Tequipment appear to have got so tired of people asking about firmware versions they've put it in their FAQ
http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a (http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a)
Note stock has gone from 55 to 19 in  3 days...!

Quote
As of 2/14 at 1pm EST are are sold out of the 55 units we had.  We are waiting for more units and do not know the version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 14, 2014, 09:33:48 pm
Also Tequipment appear to have got so tired of people asking about firmware versions they've put it in their FAQ
http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a (http://www.tequipment.net/FLIRE4.html?readReview=4df87#tab-q_a)
Note stock has gone from 55 to 19 in  3 days...!

Quote
As of 2/14 at 1pm EST are are sold out of the 55 units we had.  We are waiting for more units and do not know the version.

Wow - I'm glad I pulled the trigger when I did then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stoffel on February 14, 2014, 10:43:52 pm
Yup, I got mine from conrad.nl yesterday and ordered it this week. Still the old FW and already hacked :)

Thanks to everyone here for their hard work (and to FLIR for making it possible :P ). Absolutely amazing result!

Do you know if they sent it to you from their de warehouse?
They have a good price here in Italy, and a promo discount for the first order,
but cannot tell what fw they have in stock, they told me they have them ready
to ship from germany warehouse.


I actually gave them a call to see if they really had them in stock or were ordering from FLIR before I ordered, and their customer service rep said that they were going to send the E4 from the DE warehouse.  I don't know if they still have old stock, but I guess you could ask them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 14, 2014, 11:03:48 pm
Does anyone know if a Ex0bx model becomes an E60 after hacking ?

Difference between Ex0bx and Ex0 models : temperature range.
I don't know if it's another software lock or a different sensor ? Any clue ?

Because my E30bx is due to arrive soon... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 15, 2014, 12:55:23 am
Why are Flir moving against this modification? It has surely increased sales massively, and I doubt it has affected professional sales significantly. ITAR or such?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 15, 2014, 01:05:05 am
@tom66.

Only FLIR can answer that question.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 15, 2014, 01:07:19 am
Why are Flir moving against this modification? It has surely increased sales massively, and I doubt it has affected professional sales significantly. ITAR or such?

Most likely because of ITAR and the fact that selling a $995 camera that can easily be made into a $6000 camera isn't really very good for business.  But more likely they really don't want to run afoul of various government agencies.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 15, 2014, 01:25:41 am
No reason to think that  ITAR comes into it. There is no evidence that >9fps is possible, and if it was/is then they are just plain incompetent. Even if it is,  it may well be too noisy to be useful, and hard to fit a bigger lens.
OK they have sold a ton of E4's but will have lost out on the excessive profit margins on the higher end models.
What is slightly puzzling is why they didn't at least do some simple interim countermeasures much earlier, which they could easily have done. Obviously it takes time to develop and test the changes needed for a more robust approach, but they could have easily done some quick, low-risk changes to at least throw up some FUD. Maybe they were just too busy with FlirOne.
I would imagine there are some internal politics involved as well as technical issues, which makes it hard to know what's really going on.

I wouldn't be at all surprised if the FlirOne/Lepton stuff could be a factor in the overall strategy, e.g. maybe E4 becomes Lepton based, with a real 80x60 sensor. 
Maybe they always planned to base the E4 on Lepton but had to use the 320x240 sensor as a stopgap? 
Only time will tell.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 15, 2014, 09:42:48 am
See ebay, people are doing good bussiness of it. This can be reason.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 15, 2014, 12:44:47 pm
Those wishing to have 320x240 pixels with 60fps refresh rate may wish to look at this auction.

http://www.ebay.co.uk/itm/271396455663?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649&autorefresh=true (http://www.ebay.co.uk/itm/271396455663?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649&autorefresh=true)

It is a bit weird in that it uses Win CE on a Compaq PDA as part of the solution. In a way it is an early attempt at what the Mu Optics company proposed using an iPhone.

Its not a bad BST based camera that I considered buying but I already have too many projects  to complete ! The minor fault may put some buyers off or keep  the price reasonable. It ends VERY soon !

The fault should be well within most electronic hobbyists capability.

http://www.palmir250.com/ir400.htm (http://www.palmir250.com/ir400.htm)

http://www.palmir250.com/ir400specifications.htm (http://www.palmir250.com/ir400specifications.htm)

UPDATE: Sold for $897

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on February 15, 2014, 07:32:54 pm
Guys dont forget about your free stuff from flir.. anyone who got an e4 ( I hope from tequipment but its good anywhere )
http://www.tequipment.net/flir-promotions-and-offers/ (http://www.tequipment.net/flir-promotions-and-offers/)

Here is the link to get a free item.. its a decent offer.

Cheers
Evan Cirelli

Tequipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on February 16, 2014, 01:07:54 am
Does that apply to Tequipment orders from outside USA ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 02:00:24 am
Just an E4 from Amazon today that has the 1.19.8.  I must be a simpleton but having trouble with this - I have tried everything at the prompt with no success..  What exactly do you put at the prompt?  Be kind, I am a Mac guy.

At a PC command prompt, run

  CRC01 E8.cfg  (on the edited file)

This will display a line in the form
# CRC01 xxxxxxxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 16, 2014, 02:05:53 am
You have to dig down to your folder containing the E8 file in command. If you aren't familiar how to do this I suggest backing out to the folder you saved the hack files in, hold down shift and right click, from there you should have an option to open in command. Then try running your crc file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 16, 2014, 02:11:00 am
Guys dont forget about your free stuff from flir.. anyone who got an e4 ( I hope from tequipment but its good anywhere )
http://www.tequipment.net/flir-promotions-and-offers/ (http://www.tequipment.net/flir-promotions-and-offers/)

Here is the link to get a free item.. its a decent offer.

Cheers
Evan Cirelli

Tequipment.NET

I purchased a few from you guys earlier this week for my inspection company, havnt been shipped yet...., but do know if rewards stack to get the higher rewards since I bought multiple cameras?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 02:20:49 am
You have to dig down to your folder containing the E8 file in command. If you aren't familiar how to do this I suggest backing out to the folder you saved the hack files in, hold down shift and right click, from there you should have an option to open in command. Then try running your crc file.

Thanks, but I must be doing something tragically stupid.  At the prompt, do you just type in crc01?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 16, 2014, 02:23:37 am
Type it as it shows CRC01 E8.cfg. Then it should give you the crc code in return, which you add to your E8 file
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 02:41:32 am
Type it as it shows CRC01 E8.cfg. Then it should give you the crc code in return, which you add to your E8 file

Still no go - no code.  That was the first thing I tried when I started this. 
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 16, 2014, 04:30:27 am
Type it as it shows CRC01 E8.cfg. Then it should give you the crc code in return, which you add to your E8 file

Still no go - no code.  That was the first thing I tried when I started this.

Try this if you aren't very familiar with MS-DOS commands:

1. unzip/extract the e4hack3c.zip into c:\e4

2. run cmd.exe and type cd\ and the enter key

3. (the prompt should say c:\>) Now type cd\e4 and the enter key

4. (Still in cmd.exe and immediately after typing cd\e4) type CRC01 E8.cfg and the enter key

5. Take the code it gives you and follow Mike's further direction from the readme file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 06:49:46 am
Hey, BIG THANKS!  All is good.  Would also like to thank Mike for this great mod.

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 04:12:29 pm
Well last night is seemed that the mod installed but now this morning, the camera thermal images are still 80x60 :palm:  Not sure what I am doing wrong.  Any ideas?

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 16, 2014, 04:15:46 pm
Use EzCRC from Taucher (it's foolproof ;) )
Check visible resolution while deactivating MSX

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 05:05:05 pm
Use EzCRC from Taucher (it's foolproof ;) )
Check visible resolution while deactivating MSX

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)

I am getting (IDS_FILE_FORMAT_ERROR)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 16, 2014, 05:17:47 pm
I am getting (IDS_FILE_FORMAT_ERROR)

first search in Forum after IDS_FILE_FORMAT_ERROR

I've just trimmed this post down to hide my incompetence.

It's worth mentioning that the error (IDS_FILE_FORMAT_ERROR) may indicate that you have inadvertently put a folder containing the two files inside the zipped folder instead of just the files on their own.

check your zip-file!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 16, 2014, 05:55:54 pm
Yes it was the zip file!  Wow, this is just too cool.  Again, thanks for the help!!!

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stuartk on February 17, 2014, 12:47:05 am
Quote
Does that apply to Tequipment orders from outside USA ?

I doubt it.

I just purchased mine from http://www.optimumenergy.com (http://www.optimumenergy.com) here in Canada.

The free extra goodies are for those in the USA only  :rant:

At least the shipping was free....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 17, 2014, 01:36:47 am
Does anyone know where it is still FW version 1.19?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 17, 2014, 01:46:05 am
Does anyone know if Amazon qualifies as a Flir distributor or affiliate for purposes of the promotion Flir has going?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 17, 2014, 02:57:07 am
Quote
Does that apply to Tequipment orders from outside USA ?

I doubt it.

I just purchased mine from http://www.optimumenergy.com (http://www.optimumenergy.com) here in Canada.

The free extra goodies are for those in the USA only  :rant:

At least the shipping was free....

Three weeks ago this dealer told me all their E4s are out of stock and eta is around last week. Also told me their E4 will get the latest firmware, which pacifically told me it will be unhackable. I talked three different agents just be sure. I am so curious what is their latest firmware ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 17, 2014, 05:23:54 am
Just ordered min from http://www.canadianghosthuntersupplies.ca/ (http://www.canadianghosthuntersupplies.ca/)  .  lol  It was the only place I could find in Canada with them in stock.  Hope its the old firmware.  But my guess is if it was in stock it will be.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 17, 2014, 09:02:30 am
I don't know that it rises to the level of a add on to the upgrade steps, but making sure the battery is got enough of a charge is probably a must.  Would think that a power off during some portion of the process might really lead to some real problems.

Also as a helpful note, holding the right side if the button to get to the secret menu is more like 16 seconds than the 10.  That extra 5 seconds before it kicked in had me starting over thinking was doing it all wrong.  Just saying . . .

Love working in DOS again.  Brings back all those os programs, ms-dos, pc-dos, Dr-dos.  Anyone remember good old CP-M once being the cats meow for the OS? 

Cheers.

Dr
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 17, 2014, 10:24:30 am
Camera takes its power from the host computer when connected by USB. Good practice to have a charged battery though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lu on February 17, 2014, 12:46:08 pm
Just ordered min from http://www.canadianghosthuntersupplies.ca/ (http://www.canadianghosthuntersupplies.ca/)  .  lol  It was the only place I could find in Canada with them in stock.  Hope its the old firmware.  But my guess is if it was in stock it will be.

I chatted  him before, his is old firmware. But, a little pricey. I think he has only one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amigo on February 17, 2014, 03:14:23 pm
I doubt it.

I just purchased mine from http://www.optimumenergy.com (http://www.optimumenergy.com) here in Canada.

The free extra goodies are for those in the USA only  :rant:

At least the shipping was free....

Great, and I bought it across the border and paid USD995 while I see it's CAD995 here, meh.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 17, 2014, 03:21:01 pm
The 1.19 is getting harder to find. Damn people on eBay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 17, 2014, 04:20:14 pm
Just ordered min from http://www.canadianghosthuntersupplies.ca/ (http://www.canadianghosthuntersupplies.ca/)  .  lol  It was the only place I could find in Canada with them in stock.  Hope its the old firmware.  But my guess is if it was in stock it will be.

I chatted  him before, his is old firmware. But, a little pricey. I think he has only one.
I noticed after I ordered it the website changed to say they were out of stock.
Yeah it was the only one in Canada I could find and when I order from US I would pay exchange and taxes and if they ship UPS then I get raped with special UPS FEES usually 1/2 what the value of the product is so UPS across the border is not an option.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 17, 2014, 04:45:20 pm
Interesting that we have not seen a single report of a camera loaded with 1.21.0 yet. I would have expected FLIR to have been shipping them by now. Some retailers order when a customer requests a unit and the shipping time in Europe is very short with overnight services used from Estonia to the Retailer.

New owners of E4's, please post your calibration date, firmware version and partial serial no. so that I may update the details on the 'E4 Useful information" page.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 17, 2014, 05:12:14 pm
Interesting that we have not seen a single report of a camera loaded with 1.21.0 yet. I would have expected FLIR to have been shipping them by now. Some retailers order when a customer requests a unit and the shipping time in Europe is very short with overnight services used from Estonia to the Retailer.

New owners of E4's, please post your calibration date, firmware version and partial serial no. so that I may update the details on the 'E4 Useful information" page.
Tequipment is getting the new 1.21 E4s apparently.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: grego on February 17, 2014, 06:48:44 pm
Interesting that we have not seen a single report of a camera loaded with 1.21.0 yet. I would have expected FLIR to have been shipping them by now. Some retailers order when a customer requests a unit and the shipping time in Europe is very short with overnight services used from Estonia to the Retailer.

New owners of E4's, please post your calibration date, firmware version and partial serial no. so that I may update the details on the 'E4 Useful information" page.

Mine, ordered 2/8 from tequipment.net has a cal date of 1/29/2014 with partial serial of 63913xxx and shipped with 1.19.8.
Title: Re: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 17, 2014, 10:05:39 pm
Use EzCRC from Taucher (it's foolproof ;) )
Check visible resolution while deactivating MSX

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)

Mike, can you add this link to the first page to direct people to the EZCRC by taucher? Maybe that will assist people who aren't familiar with DOS commands.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 18, 2014, 12:19:25 am
It would be an interesting idea to raise some funds to buy Mike a 1.21.0 to try hacking. I'd be open to donating a few pounds to the cause.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on February 18, 2014, 03:11:37 am
Quote
It would be an interesting idea to raise some funds to buy Mike a 1.21.0 to try hacking. I'd be open to donating a few pounds to the cause.

Kickstarter or something similar?

Anyway, in for $100. He saved me 50x that much and proved what we all knew - these sensors don't cost $5k, and the whole marketing strategy is based on lie.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on February 18, 2014, 03:17:34 am
It would be an interesting idea to raise some funds to buy Mike a 1.21.0 to try hacking. I'd be open to donating a few pounds to the cause.


 In for a hundred
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 18, 2014, 03:38:07 am
Interesting that we have not seen a single report of a camera loaded with 1.21.0 yet. I would have expected FLIR to have been shipping them by now. Some retailers order when a customer requests a unit and the shipping time in Europe is very short with overnight services used from Estonia to the Retailer.

New owners of E4's, please post your calibration date, firmware version and partial serial no. so that I may update the details on the 'E4 Useful information" page.


Ordered 2/9/2014 from tequipment.net via Amazon
cal date: 1/29/2014
Model: E4 1.1
Partial Serial:  63913xxx
Software 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on February 18, 2014, 04:19:01 am
Ordered 2/14/2014 from Amazon
cal date: 1/30/2014
Model: E4 1.1
Partial Serial:  63913xxx
Software 1.19.8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 18, 2014, 06:21:57 am
It would be an interesting idea to raise some funds to buy Mike a 1.21.0 to try hacking. I'd be open to donating a few pounds to the cause.
Sorry - too busy with work and a pile of other toys to play with. I'll leave it to someone else to get stuck into it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 18, 2014, 06:52:46 pm
Aww, that's a shame. You probably know the E4 better than any of the rest of us.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 18, 2014, 07:35:02 pm
Quick question related to a quick test. Does anyone happen to have the following Win CE 6.0 files for the E4:

redir.dll
net.exe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 18, 2014, 09:06:15 pm
Quick question related to a quick test. Does anyone happen to have the following Win CE 6.0 files for the E4:

redir.dll
net.exe
I just checked my backup and these files are not on my camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 18, 2014, 11:57:49 pm
Got mine from Amazon 2/14
Firmware 1.19.8
"Calibration certificate" says 1/23/14

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on February 19, 2014, 12:03:13 am
Got mine from Amazon 2/14
Firmware 1.19.8
"Calibration certificate" says 1/23/14

Guys, I'm sorry for the noob question, but I'm trying to find the files to be hacked.  I have seen "e4hack3.zip" referenced, but don't see it anywhere.  Please help.  Sorry again for the noobness.

first page, first post - link to latest hack info
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 19, 2014, 12:43:51 am
Wow.  Sorry about that.  I read almost the entire thread and glossed right over that file link.


Thank you very much everybody.  Hell of a job.  I wonder if FLIR is pissed at y'all or if they are simply enjoying the flood of E4's they've sold as a result of this thread. lol

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dc101 on February 19, 2014, 12:49:10 am
Probably a little of both.  I would imagine there's a few that feel as if they're losing profits, but like someone else already said, it's not like I would have gone out and bought an E8 just because I couldn't reconfigure the E4.

Mine just arrived from Amazon today and it had the 1.19.8, I'm really pleased with all the work everyone has done on this.  I hope I can return the favor to the community once I retire from my full time job and become a stay at home dad.  I noticed that the E4s at Amazon are on backorder with a 2-4 week estimated stock date, no doubt that those will include the new firmware.  Looks like I made it just under the wire.

-Tim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 19, 2014, 12:51:14 am
I bought the E4 when I did specifically because of the 1st post of this thread.  I'm sure FLIR saw a spike in sales when the new firmware was discovered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on February 19, 2014, 12:51:35 am
Wow.  Sorry about that.  I read almost the entire thread and glossed right over that file link.


Thank you very much everybody.  Hell of a job.  I wonder if FLIR is pissed at y'all or if they are simply enjoying the flood of E4's they've sold as a result of this thread. lol

I also see the reference to the "free offer" for a borescope, but only see an old form.  Is that offer good for ones purchased through Amazon, or is it only for the distributor mentioned?

USA authorized dealers. Go to the flir site and look for promotions to find the offer. ( and I would guess pissed)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 19, 2014, 07:50:55 am
I also looked in my backup files for the two Mrflibble wanted... can't find them either.  Sorry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 19, 2014, 09:06:46 am
Wow, that's beautiful.  Thanks for the info guys!  I'm curious to see if there's a way to unlock the E5 and E6 resolution.  I'd like to test various resolutions for future use. 

I'd bet FLIR comes out WAY ahead with this info out there.  Even with the simplicity of the hack, the vast majority of their normal customers wouldn't be able to navigate the steps.  They have sold a minimum of 200 cameras that they otherwise wouldn't have, including some from me.  The cost of production is the same with any model, so the only cost would be the relative few who were going to buy a higher end model but got an E4.  Maybe they can contribute a new E4 to Mike for the new firmware? ;D



Before

(http://rs30.pbsrc.com/albums/c337/canepoker/1392799642.jpg~320x480?t=1392799643) 



After

(http://rs30.pbsrc.com/albums/c337/canepoker/1392799644.jpg~320x480?t=1392799646)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 19, 2014, 01:06:26 pm
Interesting that we have not seen a single report of a camera loaded with 1.21.0 yet. I would have expected FLIR to have been shipping them by now. Some retailers order when a customer requests a unit and the shipping time in Europe is very short with overnight services used from Estonia to the Retailer.

New owners of E4's, please post your calibration date, firmware version and partial serial no. so that I may update the details on the 'E4 Useful information" page.

A pair of fun things talking with resellers:

AFAIK tme.eu received new shipment today, when I asked last week
thay had 1 in stock on their website, but they told me "no stock"
and the new shipment was waited for today with FW 1.21.0,
and on their site today they have 4 in stock.

I asked also conrad.it last week, on 13 or 14 February, they kindly
answered my questions and asked me why I was so interested in
that particular FW version. At the time I asked they had the cameras available,
then on Monday this week they told me that the camera was not available
and the new stock will have "last release" firmware, and that the version
I asked for was not available anymore. And in last few days their site showed
no stock, new stock was waited for 27 or so. Today they have them
in stock again...

Some FW updates on stocked units maybe?

If the new FW version will not be hacked, I'd like to know
what do flir marketing people think about the glitch in monhtly
sales of E4 cameras during these 2 months  ;)

By the way, this thread is dangerous, made a 1k2 euro hole in my pocket...
I'll post data of mine when I will have in my hands.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 19, 2014, 02:06:25 pm
Well I've done it. Almost 2 months later, I have finally read through all 254 pages of this thread during my spare time on my lunch break and I must say - well done guys! It was great reading through it all and following the process of the modifications coming together - and a shame to read about the latest firmware sending people back to square one!

I work for a large thermography company in the UK, so I'll try and provide any input where I can!

@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 02:16:05 pm
Wow, that's beautiful.  Thanks for the info guys!  I'm curious to see if there's a way to unlock the E5 and E6 resolution.  I'd like to test various resolutions for future use. 

Just use the E4 solution, same HW base.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 19, 2014, 02:18:31 pm
@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.

Yes, I did it with my E4, so only tested on E4 images. You can send me your image and I will try to get it work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 19, 2014, 02:19:26 pm
I asked also conrad.it last week, on 13 or 14 February, they kindly
answered my questions and asked me why I was so interested in
that particular FW version. At the time I asked they had the cameras available,
then on Monday this week they told me that the camera was not available
and the new stock will have "last release" firmware, and that the version
I asked for was not available anymore. And in last few days their site showed
no stock, new stock was waited for 27 or so. Today they have them
in stock again...

Some FW updates on stocked units maybe?
One UK dealer has confirmed that Fluir have been pulling stock back from dealers for "Upgrade"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 02:20:04 pm
Just a quick note on 1.21.0:
I've received a private inquiry from somebody who's unit has 1.21.0 - so Mike: the've pulled the trigger.

PS/EDIT: Dave's forum print/search functions do crash on this thread (again) ... this thread has broken all limits :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 19, 2014, 03:41:59 pm
Spoken to a couple of the bigger UK Flir dealers, all awaiting stock at the moment  :--
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 19, 2014, 03:49:18 pm
Just a quick note on 1.21.0:
I've received a private inquiry from somebody who's unit has 1.21.0 - so Mike: the've pulled the trigger.

PS/EDIT: Dave's forum print/search functions do crash on this thread (again) ... this thread has broken all limits :)
We could really do with knowing serial no (and dealer) of any 1.21 units encountered, and also late 1.19.8 units to home in on the cutoff - dealers may not know FW versions but serial nos will be on the box.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 03:55:33 pm
Just checked:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip) < DOWN
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip) < ONLINE
... my guess is a downgrade could maybe work, but might require a small .fif tuning...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 19, 2014, 04:07:54 pm
Just a quick note on 1.21.0:
I've received a private inquiry from somebody who's unit has 1.21.0 - so Mike: the've pulled the trigger.

PS/EDIT: Dave's forum print/search functions do crash on this thread (again) ... this thread has broken all limits :)
We could really do with knowing serial no (and dealer) of any 1.21 units encountered, and also late 1.19.8 units to home in on the cutoff - dealers may not know FW versions but serial nos will be on the box.

My uncle got one last week SN639144xx , old firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 19, 2014, 04:11:05 pm
@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.

Yes, I did it with my E4, so only tested on E4 images. You can send me your image and I will try to get it work.

As attached!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 19, 2014, 04:20:06 pm
I'm also in for a contribution to get Mike a 1.21.X firmware E4 to work on!

I understand where FLIR is coming from, but I think they are missing out by closing off the firmware.  If they simply made it a *little bit* harder, they would keep all the "toy" buyers and still be able to sell higher versions to corporate/business customers.  Hell, the DOS navigation in the CMD step is enough to prevent most people from accessing the necessary files.  Right now it's too easy, but the average customer still won't modify it.  I, for one, am looking at 10+ units of a competitor, but the mod sells me on the E4 instead.  Wake up, FLIR! You are about to close off a big segment of your current buyers!  Just because your dreaded hack is possible doesn't mean most people will do it.  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 04:47:13 pm
I understand where FLIR is coming from, but I think they are missing out by closing off the firmware.  If they simply made it a *little bit* harder, they would keep all the "toy" buyers and still be able to sell higher versions to corporate/business customers.
They just did. :)

I actually hope they made it a lot easier. That would prevent a lot of those "Hi! I don't computer, how firmware wrk?" style posts. :P Although the rigol thread is worse in that regard. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 04:58:48 pm
Quick question related to a quick test. Does anyone happen to have the following Win CE 6.0 files for the E4:

redir.dll
net.exe
I just checked my backup and these files are not on my camera.

I also looked in my backup files for the two Mrflibble wanted... can't find them either.  Sorry

Thanks for checking. :) I probably should clarify ... those files are also not on my E4. I didn't lose them or anything, those are just 2 windows CE files that flir decided not to include in their firmware image. I'd like to use those for a little experiment to add some functionality... And since I avoid windoze development like the plague steer clear of windows development as it's not really my cup of tea, I don't have any relevant SDK's lying around.

I'll give it a bit more time hoping someone comes along with those files or point me to the magic SDK/whatever file containing those, and if not ... plan C it is. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 05:02:27 pm
Quick question related to a quick test. Does anyone happen to have the following Win CE 6.0 files for the E4:

redir.dll
net.exe
I just checked my backup and these files are not on my camera.

I also looked in my backup files for the two Mrflibble wanted... can't find them either.  Sorry

Thanks for checking. :) I probably should clarify ... those files are also not on my E4. I didn't lose them or anything, those are just 2 windows CE files that flir decided not to include in their firmware image. I'd like to use those for a little experiment to add some functionality... And since I avoid windoze development like the plague steer clear of windows development as it's not really my cup of tea, I don't have any relevant SDK's lying around.

I'll give it a bit more time hoping someone comes along with those files or point me to the magic SDK/whatever file containing those, and if not ... plan C it is. :P

redir.dll is no problem - I have several versions of it - but in my experience binary compatibility (architecture,cpu) is quite important.
I've got a CE VNC server thats running but has protocol problems... too little time (none atm) to hack around.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 05:14:46 pm
Just received via PM (Firmware 1.21.0):

Quote
Model: E4 1.1L
Serial (without last two digits) : 639146..
Calibration: Estonia February 7, 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 05:19:02 pm
redir.dll is no problem - I have several versions of it - but in my experience binary compatibility (architecture,cpu) is quite important.
LOL! Obviously.  ;D I also have several redir.dll and net.exe's, unfortunately just not for this platform (Win CE 6.0 on an i.MX27).

Quote
I've got a CE VNC server thats running but has protocol problems... too little time (none atm) to hack around.

VNC on the E4? If so, neat! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 19, 2014, 05:36:17 pm
@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.

Yes, I did it with my E4, so only tested on E4 images. You can send me your image and I will try to get it work.

As attached!
Well, I see 640x480, that would be the problem, because I've designed it for 320x240. Let me see if I can do anything about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 19, 2014, 05:55:26 pm
I understand where FLIR is coming from, but I think they are missing out by closing off the firmware.
The real problem are ebay auctions for E8 with price of E5. That would ruin Ex market. I have to agree with FLIR. And to be honest, I see such E8 all over individual local buy&sell servers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 19, 2014, 05:58:51 pm
@Taucher.

Thanks for the info on the 1.21.0 camera.

I note the Hardware version 1.1L and not 1.2. L for Locked hardware ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 06:03:41 pm
@Taucher.

Thanks for the info on the 1.21.0 camera.

I note the Hardware version 1.1L and not 1.2. L for Locked hardware ?
Had the exactly same thought
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 06:33:55 pm
Just a short info:
Total commander on the E4... http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab (http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab) - this one works on the E4 (I selected the beta version) :)

Code: [Select]
380.416 cecmd.exe
 104.960 ftp.tfx
  13.312 LAN.tfx
  32.256 registry.tfx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 06:53:38 pm
@Taucher.

Thanks for the info on the 1.21.0 camera.

I note the Hardware version 1.1L and not 1.2. L for Locked hardware ?
Had the exactly same thought
In keeping with the riglol thread it's probably the LOL revision. And the joke's on us. Well, on those that didn't buy one in time. :P So maybe now you have to open it up and do some jtagging. :-//

And unrelated.... Thanks Taucher, I just tested that CeGCC toolchain you linked to earlier and that works. :) I used mingw32ce-mk-2012-03-13-i386 on a debian squeeze box, and that compiles just fine. I probably still need the SDK because of other dependencies, but this is a good start. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 07:01:03 pm
...
And unrelated.... Thanks Taucher, I just tested that CeGCC toolchain you linked to earlier and that works. :) I used mingw32ce-mk-2012-03-13-i386 on a debian squeeze box, and that compiles just fine. I probably still need the SDK because of other dependencies, but this is a good start. :)

Actually for the first program you won't need any SDK :)

Hello.cpp:
Code: [Select]
#include <stdio.h>

int main(void)
{
    printf("Hello World!\n");
    return 0;
}

Compile:
arm-mingw32ce-gcc -v -o hello.exe hello.cpp

copy exe to E4 and enjoy ;)
Quote
\FlashIFS\test>hello.exe
Hello World!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 07:02:37 pm
Heh, nice snapshot. That explains your need for VNC. ;)

Alternatively you could try to set PPP_PEER and then use cerdisp -c.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 19, 2014, 07:04:40 pm
Actually for the first program you won't need any SDK :)

I know, hence my earlier "compiles just fine". The hello world compiles & runs fine. :) But hello world doesn't do funky stuff. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 07:24:26 pm
Actually for the first program you won't need any SDK :)

I know, hence my earlier "compiles just fine". The hello world compiles & runs fine. :) But hello world doesn't do funky stuff. ;)
Yes, a <windows.h> include is likely to help a lot :)

PS: http://www.pudn.com/downloads196/sourcecode/embed/detail923332.html# (http://www.pudn.com/downloads196/sourcecode/embed/detail923332.html#) <- cool, seems like cerhost and cerdisp sourcecode :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 19, 2014, 07:55:27 pm
@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.

Yes, I did it with my E4, so only tested on E4 images. You can send me your image and I will try to get it work.

As attached!
Well, fixed for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 19, 2014, 07:59:09 pm
FOUND A WORKING VNC SOLUTION!
http://efonvnc.sourceforge.net/ (http://efonvnc.sourceforge.net/) (big THX!)

Tested with Ultavnc as client on PC.
Note: before you can connect you'll need to run vncconfig and disable PW auth (can be done with the cursor keys).
Then start winvnc via telnet and connect to your E4 over VNC  >:D

Note: The IR-Image will not be displayed as it's an overlay/alpha-key - it shows as BLACK - that's ok

EDIT: Added more screenshots - using windows\control.exe one can rename the camera to a more neutral name :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on February 19, 2014, 10:45:22 pm
Quote
I understand where FLIR is coming from, but I think they are missing out by closing off the firmware.
The real problem are ebay auctions for E8 with price of E5. That would ruin Ex market. I have to agree with FLIR. And to be honest, I see such E8 all over individual local buy&sell servers.

Yes, this would be a problem.  Shouldn't that be illegal?  Modifying for your own use is one thing, but selling the modification should be against the EULAetc.  You'd think FLIR could get ebay to shut that down.

Speaking with retailers, they also think FLIR is dropping the ball by knocking out the hack.  They certainly enjoyed the extra sales too.  There's a way for FLIR to embrace and take advantage of this rather than fight it... must be a pride thing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 19, 2014, 10:54:21 pm
Just a short info:
Total commander on the E4... http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab (http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab) - this one works on the E4 (I selected the beta version) :)

Code: [Select]
380.416 cecmd.exe
 104.960 ftp.tfx
  13.312 LAN.tfx
  32.256 registry.tfx

Did you just use wceload to install that cab?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 19, 2014, 11:11:13 pm
but selling the modification should be against the EULAetc.  You'd think FLIR could get ebay to shut that down.
What EULA?

If someone were to buy something, upgrade it and relabel & resell under their own brand name I'm not sure there's a lot the original maker could do about it - probably depends a lot on local laws. Being covered by export regs might complicate matters
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on February 20, 2014, 01:08:36 am
Another n00b here. Stumbled across the notorious "hack" reference in the review at tequipment.net and followed the hint over to here. I'm one of the "it would be nice to check the hot water heater's insulation but $$$, it would be nice to check the ducting but $$$, etc. etc." gang. I'm definitely a sale that FLIR wouldn't have made if the mod hadn't been available.

The particulars:
FLIR E4 V 1.1, 639128XX 2014-01-21
Cal date 2014-01-22, Estonia
Firmware 1.19.8 and one of the last if not THE last that tequipment.net had from their shipment of 55.

I've only made the resolution mod, so far (RNDIS + FTP to the appropriate config.d), with the e8.cfg built using EzCRC01 (as my tgnyp si dab smoetmies).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 20, 2014, 03:36:31 am
Even with all these sales being made, I contacted a distributor and this is the reply

Quote
Secondly, I am not going to facilitate your hacking of units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 20, 2014, 04:06:57 am
Even with all these sales being made, I contacted a distributor and this is the reply

Quote
Secondly, I am not going to facilitate your hacking of units.
Well boo hoo!  :-DD :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 20, 2014, 04:09:08 am
Even with all these sales being made, I contacted a distributor and this is the reply

Quote
Secondly, I am not going to facilitate your hacking of units.

It's all for political reasons. Officially endorsing the hack probably isn't going to sit very well with FLIR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 20, 2014, 04:52:58 am
Even with all these sales being made, I contacted a distributor and this is the reply
Quote
Secondly, I am not going to facilitate your hacking of units.
Well, what did you expect a dealer to tell you regarding hacking of units? Unofficially they might like the extra sales, but you can hardly expect them to support hacking on the record. :P Presumably because they would like to stay a distributor for Flir. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 20, 2014, 06:07:09 am
Just a short info:
Total commander on the E4... http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab (http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab) - this one works on the E4 (I selected the beta version) :)

Code: [Select]
380.416 cecmd.exe
 104.960 ftp.tfx
  13.312 LAN.tfx
  32.256 registry.tfx

Did you just use wceload to install that cab?
Actually I just unzip the cab (7zip or expand.exe) - then rename the files by educated guess (size, name artefacts) or a quick peek into the .000 file.
Unfortunately the TFX files don't seem to work (registry.tfx seems to be just a renamed .exe) - all you might want is the cecmd.exe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on February 20, 2014, 06:15:59 am
FOUND A WORKING VNC SOLUTION!
http://efonvnc.sourceforge.net/ (http://efonvnc.sourceforge.net/) (big THX!)

Tested with Ultavnc as client on PC.
Note: before you can connect you'll need to run vncconfig and disable PW auth (can be done with the cursor keys).
Then start winvnc via telnet and connect to your E4 over VNC  >:D

Note: The IR-Image will not be displayed as it's an overlay/alpha-key - it shows as BLACK - that's ok

EDIT: Added more screenshots - using windows\control.exe one can rename the camera to a more neutral name :)
Hi Taucher

I also tried the VNC connection.  :)
(https://farm8.staticflickr.com/7421/12649387885_c002aedd97_o.jpg)

Is it possible to kill & replace the appcore.exe with a modified version without completely crashing the camera/making it useless?
This is to test hex value for 30Hz... And of course be able to restore the original appcore.exe file after testing.

I am referring to the text/quote below.
Maybe it is a language thing, but I am confused right now:
I thought, modifing the 4 bytes at 0x001016ec from "05 00 a0 e1" to "01 00 a0 e3" will enable 30Hz but in your posting above you say 100ms between each frame = ~9 Hz. Did I miss something or did I understood something wrong? So no 30Hz by changing appcore.exe?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 20, 2014, 06:24:16 am
Hi Taucher

I also tried the VNC connection.  :)

Is it possible to kill & replace the appcore.exe with a modified version without completely crashing the camera/making it useless?
This is to test hex value for 30Hz... And of course be able to restore the original appcore.exe file after testing.

Read up on the thread, I tried it and it just changed the reported rate to be 30Hz, but not the actual Hz rate (checked with high-speed video).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nersut on February 20, 2014, 06:31:17 am
Hi Taucher

I also tried the VNC connection.  :)

Is it possible to kill & replace the appcore.exe with a modified version without completely crashing the camera/making it useless?
This is to test hex value for 30Hz... And of course be able to restore the original appcore.exe file after testing.

Read up on the thread, I tried it and it just changed the reported rate to be 30Hz, but not the actual Hz rate (checked with high-speed video).

Okey, my bad.  :o
Thanks anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 20, 2014, 09:17:24 am
@Dave, great to see some alternative software out there, but unfortunately it crashes when I try editing any thermograms from our Flir SC640.

Yes, I did it with my E4, so only tested on E4 images. You can send me your image and I will try to get it work.

As attached!

Great stuff, is this implemented in the new version?
Well, fixed for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 20, 2014, 09:33:49 am
Great stuff, is this implemented in the new version?
Sorry, some troubles during release. Try now, should be fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on February 20, 2014, 11:12:29 am
Hello.

I arrived late to this party.>> I talked to an UK seller and told  my that only 1.2 fw was available.

I talked today with an Spanish reseller and told my that the units they had in stock had to be sent back to Flir to correct a security issue, I talked about that security issue... They still had one in Madrid but they can not sell it but sent it back to flir. So I believe the only chance for people like me will be a downgrade "feature" to appear.  Firmware downgrading, sounds like PSP times... But this time seems more legit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -TPi- on February 20, 2014, 12:55:10 pm
I got my E4 and already made resolution upgrade modification. It works fine THANKS A LOT! :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 20, 2014, 04:56:02 pm
Those hoping for a downgrade path need to consider that I was advised by FLIR that my E4 1.19.8 needs to go back to them for upgrade to 1.21.0 ! This would suggest that something beyond a normal firmware upgrade is in play. That difference may make it very difficuly to deploy an older firmware on the V1.1L hardware platform.

I know FLIR dropped the ball with their previously poor configuration security, but if they are anything like the company I believe them to be, they will have had a meeting to draw up a Vulnerabilitiy assessment and Risk list, followed by a risk treatment plan. The result will be a well thought through series of changes to inhibit attempts to 'hack' the unit by any simple means. Closed Case hacking would be high on my list of vulnerabilites that will have been addressed.

Maybe there would be the option to transplant a full OS and 1.19.8 firmware image onto a new 1.21.0 platform, but that may also raise the issue of hard coded serial number checking and CRC checksums.

EDIT: Some comment on hacking removed as of no consequence here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 20, 2014, 04:58:02 pm

Just a quick notice to everybody using FTP to back up stuff:

use root / 3vlig as credentials - the flir user won't see files with root only permissions!

I've just wrote an exe (thanks to http://read.pudn.com/downloads59/sourcecode/embed/207018/WinsockComm/pwinreg.h__.htm (http://read.pudn.com/downloads59/sourcecode/embed/207018/WinsockComm/pwinreg.h__.htm) and http://geekswithblogs.net/BruceEitman/archive/2008/12/23/windows-ce-save-and-restore-the-registry.aspx (http://geekswithblogs.net/BruceEitman/archive/2008/12/23/windows-ce-save-and-restore-the-registry.aspx) ) to dump the whole Ex registry into a file (binary) and the file is not visible by FTP unless logged in as root.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 20, 2014, 05:00:11 pm
... I was advised by FLIR that my E4 1.19.8 needs to go back to them for upgrade to 1.21.0 !...

Well, will you send it in for that great "upgrade"? ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 20, 2014, 05:11:16 pm
No Way !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 20, 2014, 05:16:57 pm
Hrhr, guessed so :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 20, 2014, 06:39:01 pm
Even with all these sales being made, I contacted a distributor and this is the reply
Quote
Secondly, I am not going to facilitate your hacking of units.
Well, what did you expect a dealer to tell you regarding hacking of units? Unofficially they might like the extra sales, but you can hardly expect them to support hacking on the record. :P Presumably because they would like to stay a distributor for Flir. ;)
I simply asked when they received these units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Galaxyrise on February 20, 2014, 08:38:01 pm
I simply asked when they received these units.
That was the approach I took as well.  Bought mine from Zoro Tools (http://www.zorotools.com/g/00065278/k-G5281245/) over the phone on 2/17, and after some digging the fellow said they were received in early January.  At the time, they still had a number in stock.  Their return policy is pretty good, so I took the chance.  Received it today, and it's 1.19.8 :)

I'm another tick in the "wasn't even thinking about buying a TIC until this" column; thank you everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 20, 2014, 09:08:36 pm
I simply asked when they received these units.
That was the approach I took as well.  Bought mine from Zoro Tools (http://www.zorotools.com/g/00065278/k-G5281245/) over the phone on 2/17, and after some digging the fellow said they were received in early January.  At the time, they still had a number in stock.  Their return policy is pretty good, so I took the chance.  Received it today, and it's 1.19.8 :)

I'm another tick in the "wasn't even thinking about buying a TIC until this" column; thank you everyone!
And their price is good also!  Wonder if they are still in stock as they seem to go FAST?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 20, 2014, 09:52:48 pm
Some users on a forum for home inspectors just apparently became aware of this hack: http://www.nachi.org/forum/f58/problems-flir-imager-88918 (http://www.nachi.org/forum/f58/problems-flir-imager-88918)

As usual, people are debating whether the hack is considered "stealing." Either way, it's probably a moot point as FLIR has already patched the hack in the latest firmware. That is, until someone develops a new hack. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Z-mann on February 20, 2014, 09:55:14 pm
Hey Guys,

here my short report:
Flir E4 bought at conrad (Austria, not Australia ;) ) online store.
S/N: 6391 47XX
Firmware: 1.21.0
HW: 1.1L
Cal. date: 14. Feb. 2014

This unit will go back, sadly....  :(

Greetings Mr. Z

###Modified: Added cal. date
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 20, 2014, 10:22:05 pm
Calibration date please. It's on a card in the box.

Cheers

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on February 20, 2014, 10:32:59 pm
Looks like the party is over....
Phew, Luckily I caved and bought my E4 in Mid Jan....

Looks like the price of E4 with old firmware will soar on eBay lol.....

I am guessing they might have chnaged some of the hardware to make the memory LOCKED and only changable via their own software which uses some sort of encryption key. Might be back to the times where you need to solder on a mod chip....
Title: US buyers eligible for free gift... from *any* US distributor
Post by: galstaf on February 20, 2014, 10:57:00 pm
Sorry rest of the world, but for those of us in the US get a laser range finder! woohoo! ;-) The link to that other company is this form with their logo sneekily put into the corner.

http://distributoraccess.com/promotions/forms/FLIR-Q1-2014-Redemption-Form.pdf (http://distributoraccess.com/promotions/forms/FLIR-Q1-2014-Redemption-Form.pdf)


BTW.. thanks to all the fine lovely peeps on this forum for the hack. I love my E4++ !
(I also would have not bought one without these nice updates).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 20, 2014, 11:23:31 pm
Hey Guys,

here my short report:
Flir E4 bought at conrad (Austria, not Australia ;) ) online store.
S/N: 6391 47XX
Firmware: 1.21.0
HW: 1.1L

This unit will go back, sadly....  :(

Greetings Mr. Z
Any evidence of a warranty seal?
Any obvious new functionality (e.g. does the image browser now show time/date?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Z-mann on February 20, 2014, 11:59:54 pm
Hey Guys,

here my short report:
Flir E4 bought at conrad (Austria, not Australia ;) ) online store.
S/N: 6391 47XX
Firmware: 1.21.0
HW: 1.1L

This unit will go back, sadly....  :(

Greetings Mr. Z
Any evidence of a warranty seal?
Any obvious new functionality (e.g. does the image browser now show time/date?)

Hi mike!
I gave the TIC a try, the menu is slow as a wet week ;)
No added features (against your yt review), no the image browser still doesn't show time/date

The debugmessages (at startup) have been "cleaned" - they are only shown as long the flir logo is visible.
After that the TIC does the slow startup and shows the thermal image, but you can see they moved the debugmessages behind the progressbar on the bottom (you can see one or two pixels (height of progress bar) of changing text chars)

There are absolutly no broken warranty stickers (where is one?), the torx screws on the bottom doesn't look to be removed.
My guess is that this TIC I got wasn't orderd back from Flir, this a stock unit with 1.21.0.

FYI: I added the cal. date to my first post. It's the 14th Feb. 2014

Greetings Mr.Z
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 21, 2014, 12:33:41 am
Great stuff, is this implemented in the new version?
Sorry, some troubles during release. Try now, should be fine.

Shaping up really nice! Suggestion - can the option to output to PNG format be added so we can have lossless output?  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 21, 2014, 02:41:55 am
Hi
Hey Guys,

here my short report:
Flir E4 bought at conrad (Austria, not Australia ;) ) online store.
S/N: 6391 47XX
Firmware: 1.21.0
HW: 1.1L
Cal. date: 14. Feb. 2014

This unit will go back, sadly....  :(

Greetings Mr. Z

###Modified: Added cal. date

Did you try the hack ?

Make a backup of the filesystem before sending it back ! It would be interesting to see what kind of CRC they use (I heard there is support for many different CRC types in the newest firmware)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 21, 2014, 03:27:07 am
Just a short info:
Total commander on the E4... http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab (http://tcce.s3.amazonaws.com/b3/ce2/cecmd.arm.cab) - this one works on the E4 (I selected the beta version) :)

Code: [Select]
380.416 cecmd.exe
 104.960 ftp.tfx
  13.312 LAN.tfx
  32.256 registry.tfx

Did you just use wceload to install that cab?
Actually I just unzip the cab (7zip or expand.exe) - then rename the files by educated guess (size, name artefacts) or a quick peek into the .000 file.
Unfortunately the TFX files don't seem to work (registry.tfx seems to be just a renamed .exe) - all you might want is the cecmd.exe

May be a bit late but got the reg editor to work!

I just dumped all the extracted/renamed files (like you said) into the \Program Files\ folder under \Total Commander\ and opened the plugins folder just by double clicking on it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 21, 2014, 06:45:33 am
May be a bit late but got the reg editor to work!
I just dumped all the extracted/renamed files (like you said) into the \Program Files\ folder under \Total Commander\ and opened the plugins folder just by double clicking on it.

Big thanks!
Had totally overlooked the \\PLUGINS directory that had appered in TC - the place where one puts the whole stuff does not matter as long as the tfx files are in the same directory with the cecmd.exe.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ErchAngel on February 21, 2014, 09:20:24 am
Hi Guys,

Just received my E4 yesterday, ordered it Wednesday last week from a dealer in Ireland via Ebay. Did the "hack" and the menu modification and everything works wonderfully. Had to use a Win 7 computer though for the menu mod, as the TIC in RNDIS mode didn't work well with Windows 8.1.

Camera info:
Model: E4 1.1
Serial: 6391 44xx
Software: 1.19.8
Calibration: 5th February (Estonia)

Thanks to all of you guys for the hard work that have made this possible  :-+ :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 21, 2014, 10:24:57 am
It's a fine reg-editor... long click on HKLM etc. for COPY menu ... hit "tree", then select flashIFS ... registry branch dumped :)

There's information on the device-startup-sequence (Exx users: this might be interesting to compare -> touch, wlan, bt)
I've roughly collected the driver infos and annotated them as an overview.
Note: "!>" denotes non-generic Windows CE stuff (Flir specific)
Code: [Select]
Driver order (HKLM\Drivers\Active):
01 -> -NA-  -> drivers\builtin (busenum.dll)
02 -> -NA-  -> drivers\builtin\Error Reporting (DwXfer.dll) "Dump File Transfer" # Dw.Exe, UploadClient, System\ErrorReporting\DumpSettings, System\ErrorReporting\DumpFiles, \Windows\ExtraDumpFiles, ExtraFilesDirectory, \Windows\DumpFiles
03 -> I2C1: -> drivers\builtin\i2c1 (i2c.dll) # WritePacket, ReadPacket, ProcessPacket -> CEDDK.dll, CSPDDK.dll
04 -> I2C2: -> drivers\builtin\i2c1 (i2c.dll) # +> I2C_Close I2C_Deinit I2C_IOControl I2C_Init I2C_Open I2C_PowerDown I2C_PowerUp I2C_Read I2C_Seek I2C_Write
05 -> -NA-  !> drivers\builtin\CSPDDK (cspddk.dll) # Chip Support Package / GPIO / CLOCK / DMA stuff ## Check DLL strings!
06 -> NFY0: -> Notify (notify.dll) #Eventhandling: AC-(Dis)Connect, RNDIS, Wakeup, Network events, Sync, on Timechange
07 -> SSP0: -> drivers\builtin\NTLMSPP_SVC (ntlmssp_svc.dll) "NTLMSSP_SVC" # RC4, MD4, MD5, RSAenh.dll
08 -> DSK1: -> drivers\builtin\NAND_FLASH (flashmdd.dll+flashpdd_nand.dll) "Freescale NAND Flash Driver" [Startblock: 160/0x0A0 | BlockCount: 128/0x080] # MSFLSH60
09 -> SPI1: !> drivers\builtin\CSPI1 (cspi.dll) #camera/core serial programming interface -> SPI: Init,Open,Read,Write,Close -> requires cspddk.dll for I/O, DMA, CLK
10 -> GPT1: -> drivers\builtin\GPT1 (gpt.dll) # General Purpose Timer (Serial interface) -> High precision timer
11 -> DSK2: -> drivers\builtin\NAND_IFLASH (flashmdd.dll+flashpdd_nand.dll) "Freescale NAND FLASH Driver for Images" [Startblock: 608/0x260 | BlockCount: 0]
12 -> DSK3: -> drivers\builtin\NAND_BFLASH (flashmdd.dll+flashpdd_nand.dll) "Freescale NAND FLASH Driver for Binaries" [Startblock: 288/0x120 | BlockCount: 320/0x140]
13 -> COM2: !> drivers\builtin\COM4 (csp_serial.dll) "unimodem" -> zeus_serial.dll (Debugconsole or WLAN-UART?)
14 -> CRD0: -> drivers\builtin\credsvc (credsvc.dll) "CredentialManager" #numcreds: 0
15 -> CAM1: -> drivers\builtin\VCAM (vcam.dll) [Visual Camera Interface] -> MT9T111 -> Standby On/Off, 2MP Camera (needs, I2C for control) -> OV7740_Init
16 -> FMQ0: -> drivers\builtin\FMQ (FMQ.dll) -> ????? maybe ethernet switch driver ?????
17 -> CSI1: !> drivers\builtin\Camera (csi.dll, camera.dll{"CamBufferManager.cpp"}) ->  see VCAM, needs I2C for control
18 -> PIN1: -> DirectX\DirectShow\Capture (camera.dll)
19 -> NBT1: -> drivers\builtin\Netbios (netbios.dll)
20 -> SDC1: -> drivers\builtin\SDBusDriver (SDBus.dll) # generic SD card stuff -> SD I/O
21 -> NDS0: -> drivers\builtin\NDIS (NDIS.dll)
22 -> UFN1: -> drivers\builtin\UFN (usbfn.dll) #USB Functions, OTG support set to 0, "USB PMIC", not starting when KITL debug active (\Drivers\USB\FunctionDrivers)
23 -> UFC1: -> Drivers\USB\FunctionDrivers\CompositeFN ==> USBfn
24 -> -NA-  -> Drivers\USB\FunctionDrivers\RNDIS
25 -> -NA-  -> Drivers\USB\FunctionDrivers\Video_Class
26 -> PMI1: !> drivers\builtin\PMIC (pmicPdk_da9021.dll) # power management, battery charger, needs USB events (insert/remove on UFN1:) # Powercharge: 1300mA - else: 500mA # http://www.dialog-semiconductor.com/docs/site-pdf/dialog_pb_da9022.pdf?sfvrsn=2
27 -> -NA-  -> drivers\builtin\AFD (afd.dll)  # Mostly name resolution - IP stuff: DNS, PPP/ppp_peer, WINS, DhcpV6DNS, Netbios -> AfdRas -> Dppp.dll, TcpIp6.dll,
28 -> IPD0: -> TCPIP\IPDevice (tcpstk.dll "IP Stack")
29 -> TCP0: -> TCPIP\TCPDevice (tcpstk.dll "TCP Stack")
30 -> WSS1: -> Ws2Serv -> LSP -> NSPM -> (ws2instl.dll) # Winsock2: Bluetooth, IrDA, Tcpip:[TCP/IPv6][UDP/IPv6][TCP/IP][UDP/IP] [RAW/IP]
31 -> BAT1: !> drivers\builtin\Battery (battdrvr.dll) -> Batt: IOCTL_BATTERY_FLASHFILE, BATT:ReadFlirInfo, BATT:ReadFuelGuageFWVersion , needs I2C, maybe smart attery relic?
32 -> -NA-  -> Services (servicesEnum.dll)
33 -> HTP0: -> Services\HTTPD
34 -> FVD1: -> Drivers\FVD (fvd.dll) "FPGA" -> \flashfs\system\fpga.bin
35 -> TEL0: -> Services\TELNETD (telnetd.dll) "Telnet"
36 -> FTP0: -> Services\FTPD (ftpd.dll) "FTP"
37 -> UCS0: -> Services\UCS (ucs.dll) "UVC Command Service"
38 -> FIS0: -> Services\FIS (fis.dll) "Flir IP Service"
39 -> SMB0: -> Services\SMBServer
40 -> ??
41 -> Tel1: -> Services\Telnetd\NewSession
 
Code: [Select]
HKLM\IDENT -> Bootloader Date+Time: May 6 2013, 11:14:42
           -> Bootloader Version 16.03 (DEC)
   -> BSP: Z3   <---(Board Support Package)!
   -> NAME: IRCAM<Last4digits>

HKLM\Platform   -> MX25 Platform

Security providers: schannel.dll, ntlmssp.dll, kerberos.dll, spnego.dll, credssp.dll
Credential Providers: 65538: ntlmssp.dll, 65542: credprov.dll, 65544: credprov.dll, 65546: credprov.dll

Webserver:
Vroots: /prod -> prodisapi.dll
Adminusers: ADMIN
NTLM: 1

System accounts:
[HKEY_LOCAL_MACHINE\Comm\Security\UserAccounts\flir]
"NT"=hex:\
  01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,0a,\
  00,00,00,66,00,6c,00,69,00,72,00,00,00,01,68,00,00,10,00,00,00,10,00,00,00,\
  57,3b,c8,23,d1,5d,7c,21,a3,f7,b6,f3,bc,e7,bb,7b,00,00,00,00,04,80,00,00,10,\
  00,00,00,10,00,00,00,8f,83,0d,bc,19,4a,78,88,81,03,77,92,63,88,a9,05,10,00,\
  00,00,d4,7a,1d,88,91,a8,c8,af,01,3b,ef,4f,26,89,d8,67,14,00,00,00,2d,54,7d,\
  b7,7e,0e,65,a5,80,e9,06,c4,cc,ec,e1,48,6d,a6,86,5b

[HKEY_LOCAL_MACHINE\Comm\Security\UserAccounts\root]
"NT"=hex:\
  01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,0a,\
  00,00,00,72,00,6f,00,6f,00,74,00,00,00,01,68,00,00,10,00,00,00,10,00,00,00,\
  18,f8,ca,0b,37,51,ad,6b,cd,4a,be,ec,58,17,db,f8,00,00,00,00,04,80,00,00,10,\
  00,00,00,10,00,00,00,2f,38,12,8b,1c,98,d3,45,56,33,a5,1e,b8,df,a2,36,10,00,\
  00,00,85,29,c4,8f,09,55,1d,39,52,17,95,a4,db,ac,42,27,14,00,00,00,ba,d1,17,\
  20,43,0f,49,c2,30,77,1c,5a,f9,0e,fb,34,28,97,c4,2c
Note: It seems the Ex ist a based on a Freescale i.MX25 V2 SoC - one can find helpful infos there... esp. regarding SoC security features.

Edit: Keyword "MCIMX25WPDK"
see also:
http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=IMX25_SW (http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=IMX25_SW)
http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=IMX25PDK (http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=IMX25PDK)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 21, 2014, 03:22:16 pm
If you look at the serial no. Vs calibration date list on the Useful Information thread something becomes apparent. Production appears to have slowed between 29 Jan and 5 Feb.

6391 44xx              29 Jan            1.19.8 E4 V1.1
6391 44xx              05 Feb            1.19.8 E4 V1.1

The production rate was pretty good up to that point, then stalled.

Firmware 1.21.0 appeared on FLIR's web site 5 Feb and in an E4 camera on 7 Feb. I have to wonder if the slow down in production was due to preparations for the change in Hardware build V1.1L ?

For potential E4 buyers, I recommend that you not risk buying a camera with a serial number later than 6391 4400 unless you can pre-confirm the firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Z-mann on February 21, 2014, 03:26:16 pm
Hi
Hey Guys,

here my short report:
Flir E4 bought at conrad (Austria, not Australia ;) ) online store.
S/N: 6391 47XX
Firmware: 1.21.0
HW: 1.1L
Cal. date: 14. Feb. 2014

This unit will go back, sadly....  :(

Greetings Mr. Z

###Modified: Added cal. date

Did you try the hack ?

Make a backup of the filesystem before sending it back ! It would be interesting to see what kind of CRC they use (I heard there is support for many different CRC types in the newest firmware)

Of course, not   ;)
Sorry, the unit is on the way back, no time for the backup (i also don't know how to make the backup of the filesystem)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dudepron on February 21, 2014, 03:33:36 pm
bought 1/30/14
E4 1.1
SN 63912xxx
SW 1.19.8
Calibration 1/23/14 Estonia
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 21, 2014, 03:34:25 pm
Well, example files with CRC03/CRC04 could help (probably via PM as SN included).

I expect the hack NOT to work with new firmware, just based on the cold analysis of the new firmware.

BTW: I'd love to get the microsoft CE emulator to load the NK.bin - but I guess there's too much HW stuff involved - all I get is a seemingly stuck emulator, no vga or console output... might needs some more tweaking - any hints (like "use this offset..." are welcome :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 21, 2014, 05:18:21 pm
i only bought the Flir E4 because of this mod....
But flir is not happy that sold few more E4 because of it..
FLIR is a huge company... that makes a lot of money....
they dont care too much if they sold 200....400 units more because of this... first of all,  they are well established and  dont want to be known as a company that everyone is hacking its devices...
They also dont want everyone knowing that the same cost they have on E4 they have on E8... So We know now that at least they do , above the profits on e4, moe :  6000 usd - 950 = 5050 USD on the E8 units... plus the profits on the e4 units.. If they do like 450 USD profits... its 5500 USD profits on each e8 units...
So if they didnt sell like... 20 units of the e8 because people saw the hack and bought ee, its 20*5050 = 101.000 USD of pure profits.. and insted got 20*450 = 9000 USD on the E4...
Sure on pure math in the end they might have earn more money with the E4 hack.... but they are not like me and you that the incoming is low..... They make millions.... so... 1 or 2 millions more and the name associated to be hacked... sure they dont like.

(sure i am discarding the reseller profits on those calculations just to exemplify)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on February 21, 2014, 05:23:28 pm
The design, development and tooling costs will have been spread over the whole E range.

Its imposable to look at the profit from just an E4 or just an E8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 21, 2014, 05:37:25 pm
The design, development and tooling costs will have been spread over the whole E range.

Its imposable to look at the profit from just an E4 or just an E8

i don't agree..
If they sell the E4 for 980....
You can be sure they are making money...
So they do make it much cheaper... and the same hardware for the E8 means the same costs and much larger profits....
They large scale that they build  the hardware used in all other models that use the same hardware, mean a less cost of production on the large scale.  But in the end the price per unit is the same.... so..... sure we can do this math... they would never sell it for 980 if it costs to build 1000 or 2000....
I think it makes a lot of sense
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: London Lad on February 21, 2014, 05:43:12 pm
The design, development and tooling costs will have been spread over the whole E range.

Its imposable to look at the profit from just an E4 or just an E8

i don't agree..
If they sell the E4 for 980....
You can be sure they are making money...
So they do make it much cheaper... and the same hardware for the E8 means the same costs and much larger profits....
They large scale they do the hardware include the other models that use the same hardware..  But in the end the price per unit is the same.... so..... sure we can do this math... they would never sell it for 980 if it costs to build 1000 or 2000....
I think it makes a lot of sense

Its not as simple as that. Design, development and tooling costs are huge. You cant just look at the build cost and sale price of one unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on February 21, 2014, 07:53:38 pm
Why do we have to repeat the same discussion over and over again?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 21, 2014, 07:54:31 pm
Why do we have to repeat the same discussion over and over again?
I'll explain it to you: you have read the thead, they did not ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 21, 2014, 08:12:22 pm
The design, development and tooling costs will have been spread over the whole E range.

Its imposable to look at the profit from just an E4 or just an E8

i don't agree..
If they sell the E4 for 980....
You can be sure they are making money...
So they do make it much cheaper... and the same hardware for the E8 means the same costs and much larger profits....
They large scale they do the hardware include the other models that use the same hardware..  But in the end the price per unit is the same.... so..... sure we can do this math... they would never sell it for 980 if it costs to build 1000 or 2000....
I think it makes a lot of sense

Its not as simple as that. Design, development and tooling costs are huge. You cant just look at the build cost and sale price of one unit.
I know that... but you are not getting my point.
The final price of production per unit (incluiding the design, tooling and everything else muts be under the final price right ?
They cannot be selling for 980 for example, and the costs were 1000... SURE that at 980 USD they are making profits..... SO.. exactly the same unit just under another configuration and another name, have the same costs per unit as the other one that they sell for 980 usd. but now they sell this other one for 6000usd
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 21, 2014, 08:27:11 pm
Why do we have to repeat the same discussion over and over again?
talking to me ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 21, 2014, 09:10:03 pm
If you look at the serial no. Vs calibration date list on the Useful Information thread something becomes apparent. Production appears to have slowed between 29 Jan and 5 Feb.

6391 44xx              29 Jan            1.19.8 E4 V1.1
6391 44xx              05 Feb            1.19.8 E4 V1.1

The production rate was pretty good up to that point, then stalled.

Firmware 1.21.0 appeared on FLIR's web site 5 Feb and in an E4 camera on 7 Feb. I have to wonder if the slow down in production was due to preparations for the change in Hardware build V1.1L ?

For potential E4 buyers, I recommend that you not risk buying a camera with a serial number later than 6391 4400 unless you can pre-confirm the firmware version.
Found a dealer with a 6391408x serial that they got yesterday, do you think Flir updated it or do you think its still 1.19.8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 21, 2014, 09:22:26 pm
Since flir appears to be asking distributors to return old stock to them to be "updated", the list of serial numbers vs firmware version may lose accuracy over time. They most likely won't be issuing new serial numbers to cameras after changing the software.

You will want to verify their return policy just in case. Nobody here can tell you the firmware you will receive with absolute accuracy.

Caveat emptor.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 21, 2014, 09:37:45 pm
applauncher.exe -> MANY changes, grown from 7840b to 18816b
default.fdf -> added new driver entry for FADDEV -> faddev.dll
faddev.dll -> NEW -> i2c related -> Some strings: IOPortLaserEvent / Failed to create Truck Charger event

Did I mention that applauncher.exe now contains a hardcoded reference to a FAD1: device... and the string "ThöR" (new PW?)
FAD1: requires access to the I2C2: device... my gut-feeling still tells me that's a new, somehow hidden protection mechanism.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on February 21, 2014, 10:26:16 pm


I know that... but you are not getting my point.
The final price of production per unit (incluiding the design, tooling and everything else muts be under the final price right ?
They cannot be selling for 980 for example, and the costs were 1000... SURE that at 980 USD they are making profits..... SO.. exactly the same unit just under another configuration and another name, have the same costs per unit as the other one that they sell for 980 usd. but now they sell this other one for 6000usd

It maybe E4 is meant to be using the rejected sensor which internal cost is close to zero.  If the sale is too good, the equation is thrown off the course.  Or the yield of sensors has become too good.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 21, 2014, 11:01:27 pm
Allmost all E4 microbolometers, that have been tested, meet the 99.8% finctional pixel spec. The higher priced Ex series cameras may indeed have microbolometers that are selected for performance, but do not think the E4 has a sub-standard sensor fitted as this is not the case  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on February 22, 2014, 12:34:44 am
Why do we have to repeat the same discussion over and over again?
talking to me ?

Yes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 22, 2014, 12:59:18 am
Why do we have to repeat the same discussion over and over again?
talking to me ?

Yes.
you have to understand... some of us like to came here once in while and read just few pages..... you guys that are always in this thread knows what have been spoken or not....
This is a problem that always will  happen in forums..... I will not read 260 pages before i post anything... does not make sense..... Its part of being a member of a forum..
And  I read a lot when i was doing the hack ...... but i didnt see any discussion on this subject....
This things happens in real life too.... people are together talking and someone arrives and ask again same thing someone already did.... So now we have to record our conversation and give the gay that arrived later the recorder so he can playback and then he can talk about thing not being repetitive ?
life is like that... its not a prison

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 22, 2014, 04:48:02 am
Got mine...  Trying to do the Hack but I can't seem to get the command to run it...  So I click the start menu and search CMD the black screen comes up and I type "CRC01 E8.cfg" exactly and it says. CRC01 is not recognized as an internal or external command,
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 22, 2014, 05:21:52 am
Got mine...  Trying to do the Hack but I can't seem to get the command to run it...  So I click the start menu and search CMD the black screen comes up and I type "CRC01 E8.cfg" exactly and it says. CRC01 is not recognized as an internal or external command,
you have to be on the same folder as the crc01 exe is on the command prompt too....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 22, 2014, 05:23:34 am
Quote
To install Taucher's menu hack:

1. Install the RNDIS drivers on your PC. (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe))
2. Turn on RNDIS on the camera via the hidden menu (Settings>Device Settings>Camera Information - Press <right> for 10 seconds, select "USB Mode" then select "RNDIS")
3. Connect camera to PC via USB.
4. FTP to camera (eg. with FileZilla): Normal logon type, Host "192.168.0.2", user name "flir", password "3vlig"
5. Make a back-up of the files on your camera (copy files from camera to your computer into a back-up directory of your choice)
6. Copy the ADDMENU-Beta files over the files in the camera (eg. unzip the files to your computer then copy the folder "FlashBFS" from your computer over the folder "FlashBFS" in the camera - overwrite files)
7. Power-down the camera, remove battery and USB cable.
8. Re-insert battery and turn on.
9. Enjoy!  :D

Re: menu hack: 
Issue 1:  I made it to step 5 (above).  I selected ALL the folders/files on the camera (to backup everything) and during the transfer there are about 139 failed transfers.  I tried this on 2 different computers with similar result. 

Issue 2:  The FlashBFS\system folder in the 'ADDMENU-BETA3' mod has 1 folder and 5 files, however the same folder in the camera has 9 folders and a lot of files.  I'm guessing this means overwrite the 1 folder and 5 files, but KEEP all other files in the cameras "FlashBFS" folder as is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 22, 2014, 05:30:36 am
Got mine...  Trying to do the Hack but I can't seem to get the command to run it...  So I click the start menu and search CMD the black screen comes up and I type "CRC01 E8.cfg" exactly and it says. CRC01 is not recognized as an internal or external command,
you have to be on the same folder as the crc01 exe is on the command prompt too....
Ok I can't seem to figure out how to do that.
I'm using Windows 7 thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 22, 2014, 05:54:24 am
Got mine...  Trying to do the Hack but I can't seem to get the command to run it...  So I click the start menu and search CMD the black screen comes up and I type "CRC01 E8.cfg" exactly and it says. CRC01 is not recognized as an internal or external command,
you have to be on the same folder as the crc01 exe is on the command prompt too....
Ok I can't seem to figure out how to do that.
I'm using Windows 7 thanks.


I think this is what you need to do:
in command prompt,

type:  cd/
press enter
type:  cd foldername/foldername2/etc     (replace foldername, foldername2, and etc with the file path you saved the CRC01 E8.cfg file to)
press enter
type:  CRC01 E8.cfg
press enter
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 22, 2014, 07:03:44 am
Just got the menu mod Beta 3 to work!

The temperature scale lock or the dual max/min indicators are extremely useful.  The stock E8 doesn't even have this?

Just curious, were ALL of these extra features already in the unit waiting to be unlocked or did Taucher create some of these?
Very impressed either way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 22, 2014, 07:15:50 am
Just got the menu mod Beta 3 to work!

The temperature scale lock or the dual max/min indicators are extremely useful.  The stock E8 doesn't even have this?

Just curious, were ALL of these extra features already in the unit waiting to be unlocked or did Taucher create some of these?
Very impressed either way.

Existing dormant, just not enabled (.conf) and not reachable (menu XML) - so even an E8 can be "upgraded" ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 22, 2014, 07:18:08 am
Thanks guys.  I got it.   Part number 63901-0101   software 1.19.8 serial number 63909959
This was the last one from Canadian Ghost hunters.  Only one I could find in stock in Canada.... Hoping for the 1.19.8 firmware. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 22, 2014, 10:21:46 am
@Arlo1,

If the camera has not been sent back to FLIR for an upgrade in the last couple of weeks, it will be running Firmware 1.19.8 and will have been calibrated between 9 and 12 December 2013. See below from my collected data in the 'E4 Useful Information' thread.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

6390 9758              09 Dec            1.19.8 E4 V1.1
6391 01xx              12 Dec            1.19.8 E4 V1.1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: makisa81 on February 22, 2014, 12:25:06 pm
Hello,

Ordered mine 2/10/2014 from UK supplier
Calibration date: 2/5/2014 Estonia
Model: E4 1.1
Partial Serial:  639144xx
Software 1.19.8

Thanks for great hack!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 22, 2014, 03:47:00 pm
@Arlo1,

If the camera has not been sent back to FLIR for an upgrade in the last couple of weeks, it will be running Firmware 1.19.8 and will have been calibrated between 9 and 12 December 2013. See below from my collected data in the 'E4 Useful Information' thread.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

6390 9758              09 Dec            1.19.8 E4 V1.1
6391 01xx              12 Dec            1.19.8 E4 V1.1
Uhm...  Ok so it should say a calibration date?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 22, 2014, 04:23:05 pm
Calibration certificate is included with the cameras documents.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 22, 2014, 04:44:57 pm
Why do we have to repeat the same discussion over and over again?
talking to me ?

Yes.
you have to understand... some of us like to came here once in while and read just few pages..... you guys that are always in this thread knows what have been spoken or not....
This is a problem that always will  happen in forums..... I will not read 260 pages before i post anything... does not make sense..... Its part of being a member of a forum..
And  I read a lot when i was doing the hack ...... but i didnt see any discussion on this subject....
This things happens in real life too.... people are together talking and someone arrives and ask again same thing someone already did.... So now we have to record our conversation and give the gay that arrived later the recorder so he can playback and then he can talk about thing not being repetitive ?
life is like that... its not a prison

I feel like I being baited to feed the trolls but if I understand you correctly - your saying we should just delete all but the last two pages of the thread and dedicate all of our time replying to questions that have already been answered from memory just because you feel like your too important to spend some time reading, on a forum who's primary method of communication is text? Please pass along what ever your on because your living in a awesome little world there.  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 22, 2014, 07:26:46 pm
Why do we have to repeat the same discussion over and over again?
talking to me ?

Yes.
you have to understand... some of us like to came here once in while and read just few pages..... you guys that are always in this thread knows what have been spoken or not....
This is a problem that always will  happen in forums..... I will not read 260 pages before i post anything... does not make sense..... Its part of being a member of a forum..
And  I read a lot when i was doing the hack ...... but i didnt see any discussion on this subject....
This things happens in real life too.... people are together talking and someone arrives and ask again same thing someone already did.... So now we have to record our conversation and give the gay that arrived later the recorder so he can playback and then he can talk about thing not being repetitive ?
life is like that... its not a prison

I feel like I being baited to feed the trolls but if I understand you correctly - your saying we should just delete all but the last two pages of the thread and dedicate all of our time replying to questions that have already been answered from memory just because you feel like your too important to spend some time reading, on a forum who's primary method of communication is text? Please pass along what ever your on because your living in a awesome little world there.  :rant:

I prefer to just help the guy(s) out that doesn't want to read the entire thread and be done with it.  Trying to get everyone to read the entire thread will never happen and we end up with even more clutter in our attempt to reduce it.  Maybe they don't deserve a easy answer and maybe we deserve a cookie for reading the whole thread, but in the end being positive and helpful seems to be a quicker, less cluttered solution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 22, 2014, 07:30:14 pm
Just curious,  Is there a "Show your FLIR images" topic?  Should we start one?  I'm curious to see what results people are getting with these mods, external lenses etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 22, 2014, 07:54:15 pm
Maybe they don't deserve a easy answer and maybe we deserve a cookie for reading the whole thread, but in the end being positive and helpful seems to be a quicker, less cluttered solution.

Ignoring lazy questions is pretty quick and non-cluttered as well. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on February 22, 2014, 08:30:24 pm
Why do we have to repeat the same discussion over and over again?
talking to me ?

Yes.
you have to understand... some of us like to came here once in while and read just few pages..... you guys that are always in this thread knows what have been spoken or not....
This is a problem that always will  happen in forums..... I will not read 260 pages before i post anything... does not make sense..... Its part of being a member of a forum..
And  I read a lot when i was doing the hack ...... but i didnt see any discussion on this subject....
This things happens in real life too.... people are together talking and someone arrives and ask again same thing someone already did.... So now we have to record our conversation and give the gay that arrived later the recorder so he can playback and then he can talk about thing not being repetitive ?
life is like that... its not a prison

I feel like I being baited to feed the trolls but if I understand you correctly - your saying we should just delete all but the last two pages of the thread and dedicate all of our time replying to questions that have already been answered from memory just because you feel like your too important to spend some time reading, on a forum who's primary method of communication is text? Please pass along what ever your on because your living in a awesome little world there.  :rant:
If you are that angry unhappy person you can understand like that.... If you are not.. you can understand that you do not need to reply anyone that was talking to someone else, not you.... and not get edgy ok ?
To help the thread i will end this discussion here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 22, 2014, 08:51:51 pm
Sure would be nice if the print function would work again.
I did this a while ago and saved the thread, but now that it has grown, the print doesn't do anything but open an empty page.
I am using firefox 27.0.1 win7 64...
Saving the page would make searching for a string MUCH easier than using the forum's search function, plus you have a local copy of the complete thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 22, 2014, 08:59:41 pm
Sure would be nice if the print function would work again.
I did this a while ago and saved the thread, but now that it has grown, the print doesn't do anything but open an empty page.
I am using firefox 27.0.1 win7 64...
Saving the page would make searching for a string MUCH easier than using the forum's search function, plus you have a local copy of the complete thread.
Yes, the fix applied last time seems not to have worked permanently.... this thread grows: 3900
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 22, 2014, 09:07:44 pm
Sure would be nice if the print function would work again.
I did this a while ago and saved the thread, but now that it has grown, the print doesn't do anything but open an empty page.
I am using firefox 27.0.1 win7 64...
Saving the page would make searching for a string MUCH easier than using the forum's search function, plus you have a local copy of the complete thread.
Yes, the fix applied last time seems not to have worked permanently.... this thread grows: 3900
Good to hear that I am not the only one with this problem... wish it would get fixed!  I'm sure it will eventually though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 22, 2014, 11:10:19 pm
All the loooong threads have the same problem on this forum. Quite possibly a crappy sql query somewhere that is to fix. Then again, tradition dictates that it's some custom features slapped on later with convoluted logic as mandatory ingredient. And as such less easily fixed. Who knows.  :-//

In the meantime, googling for site:www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown something works fairly well when looking for something in this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCE56 on February 23, 2014, 02:47:44 am
Ok I got my E-4 SW version 1.19.8 Calibrated Jan 22 2014. I made the e8.cfg added my SN then did the CRC and added that number to the .cfg  I then made a zip file with the file path included in the zip so what am I doing wrong? The instal says "(IDS_FILE_FORMAT_ERROR)(IDS_FILE_FORMAT_ERROR)" Can someone please straighten me out. My first training on IR was in the Army we used the AN/PSN7 originally designed for night vision in Vietnam combat. I have used the old one for surveying power lines looking for I2R hot spots. At my last job which I left in the summer we had a FLIR camera and we would use them for all kinds of things from inspecting MCC buckets to verifying the oil level in xfrmrs. My pc use personally for the last few has been mostly Mac so using a new pc with windoze 8 has been challenging. Any help will be greatly appreciated. For me I'm confused on what files have to be in the zip-fif is it both the camera.cmd and the config or just the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Galaxyrise on February 23, 2014, 02:55:48 am
Any help will be greatly appreciated. For me I'm confused on what files have to be in the zip-fif is it both the camera.cmd and the config or just the camera?

You need both:
Create a zip file containing the flashfs folder tree and camera.cmd

This is what mine looks like
Code: [Select]
Archive:  E8.fif
 Length  Method   Size  Ratio   Date    Time   CRC-32     Name
 ------  ------   ----  -----   ----    ----   ------     ----
   6281  Defl:N     859  86%  02-20-14  22:10  4badf02c   Flashfs/system/appcore.d/config.d/E8.cfg
     52  Stored      52   0%  11-02-13  21:23  149e1f79   camera.cmd
 ------          ------  ---                              -------
   6333             911  86%                              2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 23, 2014, 03:01:19 am
this came up before. related to zip file. You could google this:

site:www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown IDS_FILE_FORMAT_ERROR
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 23, 2014, 03:55:38 am
Are the files in the FlashBFS and FlashFS folders the only ones being modifed for the menu/rez mods? 

Reflects my being still somewhat unclear about restoring the camera to stock condition.  Is this simply a function of replacing those two folders with the same folders I backed up via Filezilla (BkUp was performed by downloading (copying) root directory to PC)?   I have been reading through most of this thread, but the BkUp restore process doesn't seem to have the clarity or conciseness of the menu/rez mod instructions (. . . and as I made clear in an earlier post,  when it comes times to take over your planet, Mike and Taucher shall be spared)   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCE56 on February 23, 2014, 05:28:09 am
Ok I got the thing to work but it seems like no difference to me should the info screen say E-8 or will it continue to say E-4 ? How can I tell the update worked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 23, 2014, 06:20:41 am
Ok I got the thing to work but it seems like no difference to me should the info screen say E-8 or will it continue to say E-4 ? How can I tell the update worked?

There are two kinds of upgrades:  resolution enhancement (320x240) and menu enhancements.  The resolution mod will present a much clearer picture if you have done it right (far less grainy image).  The menu mod will have the words SPECIAL EDITION under the word Flir at the bootup screen. 

No E8 will appear after these upgrades. 



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCE56 on February 23, 2014, 07:04:28 am
No I looked at the images and they are the same resolution before and after running the hack. I my firmware is 1.19.8  the camera is a E4 1.1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on February 23, 2014, 07:30:38 am
It will continue to say E4 unless your change the setting in the EEPROM.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on February 23, 2014, 07:32:20 am
No I looked at the images and they are the same resolution before and after running the hack. I my firmware is 1.19.8  the camera is a E4 1.1

That means that you did not apply the "upgrade" properly. After the upgrade the resolution and the menu should be enhanced a lot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCE56 on February 23, 2014, 07:53:03 am
Yes I kids figured that out. Can I get someone to email me their zip file so I can see what I'm doing wrong? Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fredda on February 23, 2014, 08:45:52 am
No I looked at the images and they are the same resolution before and after running the hack. I my firmware is 1.19.8  the camera is a E4 1.1

Have you looked at the thermal resolution in Flir Tools?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mister_rf on February 23, 2014, 09:59:56 am
Yes I kids figured that out. Can I get someone to email me their zip file so I can see what I'm doing wrong? Thanks
Zip file name="ZIPMYCONTENTS", ->  ZIPMYCONTENTS.zip, rename to ZIPMYCONTENTS.fif
----------------------------
File content folders:

flashfs/system/appcore.d/config.d/e8.cfg
camera.cmd
................
e8.cfg content:
#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool true
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool true
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool true
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool true
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool true
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled true
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool true
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID XXXXXXXX
# CRC01 YYYYYYYY

................
Please note
XXXXXXXX = your camera serial number
YYYYYYYY = the unique crc obtained using the camera serial number and EzCRC01.exe (by Taucher)
...................
camera.cmd content:
addfile flashfs/system/appcore.d/config.d/e8.cfg
_________________________
I have attached my camera zip  file, but the serial and crc file  last two digits were modified.
Please remember the  final action= cold boot your cam (battery removal)   ;)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mister_rf on February 23, 2014, 02:00:32 pm
In theory there's more than one way to do it, still in practice, as we can see here,  there are  too many errors related to the file editor we use… That’s why  EzCRC01.exe (by Taucher) is the perfect solution IMO.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 23, 2014, 06:05:55 pm
Regarding the search error - what exactly problem you have ? I just tried to search "IDS_FILE_FORMAT_ERROR" and it works well.
Did I missed something ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on February 24, 2014, 01:39:03 am
Just curious,  Is there a "Show your FLIR images" topic?  Should we start one?  I'm curious to see what results people are getting withttps://www.eevblog.com/forum/Themes/default/images/bbc/url.gifh these mods, external lenses etc.

Yep...

https://www.eevblog.com/forum/chat/show-us-your-interesting-thermal-images (https://www.eevblog.com/forum/chat/show-us-your-interesting-thermal-images)!/msg325713/#msg325713
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 05:10:54 am
Edit:   Just trying to get the files to transfer for the extra fetures for beta3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 06:54:33 am
Damn I cant get the files to overwrite it says
"Response:   552 Exceeded storage allocation (for current directory or dataset).
Error:   File transfer failed"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 24, 2014, 02:40:41 pm
@freak_ge - Maybe he's not an advanced user and just ADDED the files incl. subdir until the flashBFS partition went full.

Damn I cant get the files to overwrite it says
"Response:   552 Exceeded storage allocation (for current directory or dataset).
Error:   File transfer failed"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 05:52:55 pm
@freak_ge - Maybe he's not an advanced user and just ADDED the files incl. subdir until the flashBFS partition went full.

Damn I cant get the files to overwrite it says
"Response:   552 Exceeded storage allocation (for current directory or dataset).
Error:   File transfer failed"
That's the question. A screenshot from his action would help. As he is a novice the conversation turns out tough.
  I was thinking that but I am trying to follow the instructions perfectly and it says copy the fold over...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 06:27:01 pm
Damn I cant get the files to overwrite it says
"Response:   552 Exceeded storage allocation (for current directory or dataset).
Error:   File transfer failed"
How do you connect to your camera?
USB cable
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 24, 2014, 06:40:25 pm
Well that explains it then. You should have used the other well known way of connecting to the E4.  ::)

Alternatively: could you give a bit more useful answer? Such as ftp client / whatever you use. Or preferably a screenshot. Screenshots don't make assumptions. ;) Apart from screenshotbuttonpresser bias.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 07:05:43 pm
LOL fileZilla 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 24, 2014, 07:10:03 pm
LOL fileZilla
I give him a Trollcount++;
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 24, 2014, 07:12:39 pm
Off the hacking topic - for those interested in auxilliary lenses

My Inframetrics 3X telephoto germanium lens arrived today. It took a bit longer to get to the UK than expectd, but was worth the wait.

The lens was designed to sit in front of the Inframetrics 525 thermal camera internal lens so is perfectly suited to duties as an auxilliary lens for my FLIR PM series cameras and maybe even the E4 !

The lens does have a fault in that the focus ring was stuck. In order to free it I had to dismantle the lens, which gave me the opportunity to see what lives inside the barrel. It was very simple to disassemble the two barrel sections. One barrel moves inside the other for focus adjustment. I found that one of three small spring loaded plugers had sheared off and jammed the focus ring. The plungers engage in the focus ring and apply equal outward pressure to ensue a nice smooth action. It will make more sense when I post the pictures.

Once the lens barrels were separated I could see the lens configuration. It has at least four complex lens elements and it is most definitely not a lens that you can reproduce using simple 'off the shelf' singlet lenses. I am not able to dismantle the lens groups further as they are solidly fixed in place to protect them and to prevent them working loose whilst in use. A set of four lenses looks likely anyway.

Sorry to those who had hoped that a half decent X2 or X3 lens could be made with two simple ZnSe singlet lenses (that was my hope too).
I bought my lens 'as seen' for $150, which is a bargain for such a high quality unit. These cost several thousand Dollars to buy new and even today you need a second Mortgage to buy a modern version.
   
The X3 lens has a transmission figure of better than 80% and the lenses are of a decent size. The lens looks to have been very well cared for in its working life, but I suspect the lens case was dropped and the impact, combined with the weight of the heavy outer barrel, sheared off the sprung loaded plunger, jamming the focus. An expensive drop ! Their loss was my gain.

I will make a new plunger assembly on my other new 'toy', a 7x12 mini lathe. I knew it would come in handly soon ! 

Pictures to follow.

Pictures attached

Aurora

Update,

Now I have the lens in a state where I can focus it, I attached it in front of my E4 for a quick check. Hmmm a small issue has arisen.... the lens produces an inverted image ! I shall have to check out the lenses backfocus distance and, if needed, add one of my Plano Concave ZnSe lenses to sort things out. At least I have the quality optics that are hard to source. All good fun  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 24, 2014, 08:28:05 pm
Bought a flir with a serial number that should have 1.19.8 based on Aurora's thread but the dealer didn't get it in stock till Thursday so ill update on whether flir had it sent back to be updated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 08:41:16 pm
LOL fileZilla
I give him a Trollcount++;
Me... ?   No I'm just under the weather a bit and not thinking normally.   But in my defence I'm new to the Flir E4.   As well the question was kind of vague.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 24, 2014, 08:54:08 pm
Amusingly enough I also almost gave him the troll++ for that usb cable. But oh well, benefit of the doubt .. let's ask him for some clarification. Now "LOL filezilla" with no attempt at further clarification .. .yeah, that'll work. :P

We'll just wait until you are feeling a bit better and the ole brain is in 100% tip top condition. Then you can post information where you are a bit proactive about solving your problem. No rush. :) After all, my E4 works just fine, so no problem waiting a few more days. :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 09:01:10 pm
I posted a screenshot but I'm not sure what other info to post.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 09:14:23 pm
Ok so this is what I get before trying to over right.  And here is the screen shot after as well.
Not interested in trolling..  I just don't understand what I've missed.
Code: [Select]
Status: Connecting to 192.168.0.2:21...
Status: Connection established, waiting for welcome message...
Response: 220 Service ready for new user.
Command: USER flir
Response: 331 User name okay, need password.
Command: PASS *****
Response: 230 User logged in, proceed.
Command: SYST
Response: 215 Windows_CE version 6.0.
Command: FEAT
Response: 500 Syntax error, command unrecognized.
Status: Server does not support non-ASCII characters.
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/".
Command: TYPE I
Response: 200 Command okay.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,192,0).
Command: LIST
Response: 125 Data connection already open; transfer starting.
Response: 226 Closing data connection.
Status: Directory listing successful
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 24, 2014, 09:35:06 pm
Arlo1 never seen that error before - it almost looks like your trying to upload the right files to the wrong place or your trying to recursively upload some folders. I would start from scratch and try to take things step by step - and remember this stuff is BETA - it should work but it could also crash or kill things if done wrong.

*edit - your screenshot seems to have /FlashFS/FlashFS/FlashFS/ if I am reading that right - that does not look right to me - perhaps start there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 24, 2014, 10:05:04 pm
Arlo1 never seen that error before - it almost looks like your trying to upload the right files to the wrong place or your trying to recursively upload some folders. I would start from scratch and try to take things step by step - and remember this stuff is BETA - it should work but it could also crash or kill things if done wrong.

*edit - your screenshot seems to have /FlashFS/FlashFS/FlashFS/ if I am reading that right - that does not look right to me - perhaps start there.
Thanks and Yes I'm aware of the warnings lol   I cleaned up the folders.  Im just about there....  Just can't get the zoom to work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bentimage on February 24, 2014, 10:13:51 pm
Hi Guys
I am new here.
I just ordered 2 new Flir E4's today. I asked what firmware was on them. He hesitated and said the latest. I will assume it's 1.21.0, My question, is it possible for me to install an older firmware if they are the 1.21.0 versions?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ron on February 24, 2014, 10:28:09 pm
My question, is it possible for me to install an older firmware if they are the 1.21.0 versions?

No one has reported trying.  Let us know when you get yours.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 24, 2014, 10:30:33 pm
@Bentimage,

Highly unlikely and potentially a bricking situation for the new Hardware V1.1L. Note well the L suffix. The effect of this hardware change is not yet known but is related to the countermesures in some way as it appeared with FW1.21.0.

The only sure way to upgrade an E4 at this point in time is to buy an E4 with firmware 1.19.8 or earlier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 24, 2014, 10:37:04 pm
Some one needs to get a 1.1L with the newer firmware and compare it to mike's tear-down. Until that happens that question will go unanswered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 24, 2014, 11:00:28 pm
Bought a flir with a serial number that should have 1.19.8 based on Aurora's thread but the dealer didn't get it in stock till Thursday so ill update on whether flir had it sent back to be updated.
Well I paid for it and asked them if they could open it to see what firmware it was now that it was purchased, they said 1.19.8. They received this unit from Flir on 2/20 so I'm surprised Flir did not update the old stock in this case. Again its a 6391408x serial number so production was around 1/30 or so. This was the only one the dealer got in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FrankenPC on February 25, 2014, 02:44:09 am
Hey all.  New to this thread. 

I see that the sensor is 60hz capable.  Has anyone succeeded in upgrading the refresh rate of the unit?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sparky on February 25, 2014, 02:50:38 am
Oh, crickey!  This thread is becoming hilarious, and/or a "bag of hurt!" All those "I'm new here" people with < 40 posts on the forum should be required to read the thread before being allowed to post!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 25, 2014, 02:57:48 am
Hey all.  New to this thread. 

I see that the sensor is 60hz capable.  Has anyone succeeded in upgrading the refresh rate of the unit?

Here is your answer: http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 25, 2014, 03:04:54 am
Hey all.  New to this thread. 

I see that the sensor is 60hz capable.  Has anyone succeeded in upgrading the refresh rate of the unit?

Here is your answer: http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz)
That's absolutely brilliant. However, I would advise you not ask that type of question. IR lenses at 30Hz and above are considered "weapons" by the US and are therefore export restricted. If a hack does surface, than rest assured that not only Flir will put out a firmware patch, but ITAR will force them to use different hardware and CERTAINLY make this all end.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FrankenPC on February 25, 2014, 03:15:42 am
Hey all.  New to this thread. 

I see that the sensor is 60hz capable.  Has anyone succeeded in upgrading the refresh rate of the unit?

Here is your answer: http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz)
That's absolutely brilliant. However, I would advise you not ask that type of question. IR lenses at 30Hz and above are considered "weapons" by the US and are therefore export restricted. If a hack does surface, than rest assured that not only Flir will put out a firmware patch, but ITAR will force them to use different hardware and CERTAINLY make this all end.

That is a pretty hilarious snark post.  I need to spank a few people with that.  Thanks for the info on ITAR. Did not know that.  I figured the main reason would be due to limits of on board image processing capabilities. But seeing how Fluke just slams the high end hardware in these, it's probably ITAR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 03:27:36 am
So..... Yes I should have put it away for a couple days. My E4 is shows the Flir start up screen but then nothing.  I saw the post on page 198 but the link to the flir software is broken.   I tried to clean up folders in the camera using FileZilla which is what I was using to transfer files.   And I deleted to many FlashBFS files.  Now FileZilla won't communicate with it but FLIRInstalNet.exe does communicate with it but only wants fif files and I can't seen to do anything to transfer the FlashBFS files back in...   Anyone have any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 25, 2014, 03:55:48 am
So..... Yes I should have put it away for a couple days. My E4 is shows the Flir start up screen but then nothing.  I saw the post on page 198 but the link to the flir software is broken.   I tried to clean up folders in the camera using FileZilla which is what I was using to transfer files.   And I deleted to many FlashBFS files.  Now FileZilla won't communicate with it but FLIRInstalNet.exe does communicate with it but only wants fif files and I can't seen to do anything to transfer the FlashBFS files back in...   Anyone have any ideas?

I remember some one else screwed up fairly big time with their E4 and had to try and fix it.

If there was only some way to search for an answer.... like http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+un-brick (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+un-brick) ;)

As for the software - since it's FLIR's - re-hosting may be a bit of a no no. If you ask around a forum member may still have a copy of the flir_ex_pn639_v1.18.7_update_pack.zip on their hard drive they could arrange to send you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 04:17:48 am
Ok I thought I had all the files saved.   I tried putting them back in after setting temporary RNDIS mode and getting FileZilla to communicate with it... I think Im close but something is still not accepting.   This is part of what the fileZilla was spitting out.
Code: [Select]
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\service\imgcorr\gainmapwarm.asp
/service/tdrift

Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/fx-web-addon
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\g-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/g-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/g-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/fx-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/g-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/fx-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/g-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,37).
Command: STOR /FlashBFS/system/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,38).
Command: STOR /FlashBFS/system/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\p-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/p-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\prem-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/p-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/p-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/p-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,39).
Command: STOR /FlashBFS/system/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,40).
Command: STOR /FlashBFS/system/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\pt-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/pt-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\x-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/x-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/pt-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/x-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/pt-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/x-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/pt-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/x-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/pt-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/pt-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,41).
Command: STOR /FlashBFS/system/system/web/web-addon/pt-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,42).
Command: STOR /FlashBFS/system/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\x2-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/x2-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/x2-web-addon
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\z-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/z-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/z-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/x2-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/x2-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/z-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/x2-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/z-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/x2-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,43).
Command: STOR /FlashBFS/system/system/web/web-addon/x2-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,44).
Command: STOR /FlashBFS/system/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\z3-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/system/system/web/web-addon/z3-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\prem-web-addon\service\inc\servicemenu.inc
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/z3-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon/service
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/z3-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/z3-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD system
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/z3-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/z3-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,45).
Command: STOR /FlashBFS/system/system/web/web-addon/z3-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 227 Entering Passive Mode (192,168,0,2,193,46).
Command: STOR /FlashBFS/system/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 04:38:58 am
So..... Yes I should have put it away for a couple days. My E4 is shows the Flir start up screen but then nothing.  I saw the post on page 198 but the link to the flir software is broken.   I tried to clean up folders in the camera using FileZilla which is what I was using to transfer files.   And I deleted to many FlashBFS files.  Now FileZilla won't communicate with it but FLIRInstalNet.exe does communicate with it but only wants fif files and I can't seen to do anything to transfer the FlashBFS files back in...   Anyone have any ideas?

I remember some one else screwed up fairly big time with their E4 and had to try and fix it.

If there was only some way to search for an answer.... like http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+un-brick (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+un-brick) ;)

As for the software - since it's FLIR's - re-hosting may be a bit of a no no. If you ask around a forum member may still have a copy of the flir_ex_pn639_v1.18.7_update_pack.zip on their hard drive they could arrange to send you.
Lol I did find page 198 but the link to the needed files is Not working..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on February 25, 2014, 04:55:37 am
Hey all.  New to this thread. 

I see that the sensor is 60hz capable.  Has anyone succeeded in upgrading the refresh rate of the unit?

Here is your answer: http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+60hz)
That's absolutely brilliant. However, I would advise you not ask that type of question. IR lenses at 30Hz and above are considered "weapons" by the US and are therefore export restricted. If a hack does surface, than rest assured that not only Flir will put out a firmware patch, but ITAR will force them to use different hardware and CERTAINLY make this all end.

Lol they already pretty much certainly made all this end already with their new Firmware and getting retailers to send in all their stock to get it upgraded.

If its configurable to 30fps, couldn't we just configure it to 29fps and avoid ITAR? LOL!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 06:02:22 am
Damn.   Ok so a couple very nice people sent me basically the same file.   But Trying to follow the instructions and The eFLIRinstall.exe  will not work on my computer.

SO then I tried the FlirInstallNet.exe and loaded the fif file but there is about 1/2 hour of clicking ignore on the warnings.

I tried again with the FileZilla and it loads about 2/3 of the FlasBFS file then has a bunch or errors as well..    There is files that it just cant tank back.
The forum wont let me load all the warnigns but her is some of them.

Here is a couple screenshots and some of the warnings from filzilla
Code: [Select]
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/fx-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/fx-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,105).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,106).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/fx-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\g-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\p-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,107).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/g-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,108).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/p-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\prem-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\pt-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,109).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 227 Entering Passive Mode (192,168,0,2,193,110).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/pt-web-addon/inc/camtype.inc
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\x-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\x2-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,111).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/x-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 227 Entering Passive Mode (192,168,0,2,193,112).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/x2-web-addon/inc/camtype.inc
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\z-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\z3-web-addon\inc\camtype.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc/camtype.inc
Response: 227 Entering Passive Mode (192,168,0,2,193,113).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/z-web-addon/inc/camtype.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 227 Entering Passive Mode (192,168,0,2,193,114).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/z3-web-addon/inc/camtype.inc
Status: Starting upload of C:\Users\Arlin\Documents\FlashBFS\system\web\web-addon\prem-web-addon\service\inc\servicemenu.inc
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web
Response: 250 Requested file action okay, completed.
Command: MKD web-addon
Response: 550 File unavailable (e.g., file not found, no access).
Command: MKD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: CWD /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc
Response: 550 File unavailable (e.g., file not found, no access).
Command: SIZE /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 500 Syntax error, command unrecognized.
Command: MDTM /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 500 Syntax error, command unrecognized.
Command: PASV
Response: 227 Entering Passive Mode (192,168,0,2,193,115).
Command: STOR /FlashBFS/FlashBFS/system/web/web-addon/prem-web-addon/service/inc/servicemenu.inc
Response: 550 File unavailable (e.g., file not found, no access).
Error: Critical file transfer error
Error: Disconnected from server: ECONNABORTED - Connection aborted
Error: Disconnected from server: ECONNABORTED - Connection aborted
Error: Disconnected from server: ECONNABORTED - Connection aborted
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 25, 2014, 06:08:48 am
Command:   MKD /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc

Wrong folder. Try removing a level of "FlashBFS" there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 07:17:48 am
Command:   MKD /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc

Wrong folder. Try removing a level of "FlashBFS" there.
Luckly I made back ups.   I part way un-bricked.  It turns on and I get all the menus.  It will run the normal camera but in themal or MSX its mostly a blue screen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 25, 2014, 08:38:45 am
Command:   MKD /FlashBFS/FlashBFS/system/web/web-addon/e3-web-addon/inc

Wrong folder. Try removing a level of "FlashBFS" there.
Luckly I made back ups.   I part way un-bricked.  It turns on and I get all the menus.  It will run the normal camera but in themal or MSX its mostly a blue screen.
May I add that I've just also read about /FlashBFS/system/system/ <- those "double" folders indicate clear misunderstanding on what is beeing transferred where (very basic computer skills) - it does make a difference whether one copies the FOLDER into the other folder or the CONTENTS into the other folder... or the FOLDER into the parent target folder (that whould be fine) ... "OVER(write)", not "INTO" :)

Regarding the update - arlo1 - you seem to have absolutely no clue about computers nor interest in reading this thread ... if you would have read anything, then you'd know where to find flirnetinstall (that tool is used for the firmware FIF files).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 25, 2014, 01:43:13 pm
For the serial database:

E4 v1.1
6391 44xx
Cal 5 Febr. Estonia
FW 1.19.8

Edit: I've seen that there is another camera listed
on Aurora's serial database, with a serial similar to
mine, and that is one of the last 1.19.8 known, so
le'ts pinpoint better the serial number, without
declaring my whole serial, lets put so:

I'm the owner of one of the last 4 units with the serial
6391 444x

Thank you all for the great work done!

Forgot to mention: received today from UK Ebay seller.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 02:45:17 pm
I knew the folders should be in order.  When I read "copy over the folder" in the instructions I thought it would overwrite.  I have been watching this thread for about 6 months I tried to read the whole thing  but its the longest thread I've ever seen.

Ok so does anyone have the flashFS and flashBFS files?  Saved so I can look at theirs?   I might not have saved mine correctly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 02:51:13 pm


Regarding the update - arlo1 - you seem to have absolutely no clue about computers nor interest in reading this thread ... if you would have read anything, then you'd know where to find flirnetinstall (that tool is used for the firmware FIF files).
I was using the flirnetinstall tool and I read over 100 pages.  Sure I did not read the whole thread but I read about 100 pages of it.
I used the FlirNetInstall.exe tool for the first hack.   
Im sorry I look like a retard but I would rather look dumb and fix my camera then keep my pride and waste $1167
Im just about there I just need to get the FlashFS and FlashBSF files strait.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on February 25, 2014, 02:58:45 pm
Speaking of backups ...

I stumbled across the E4 info by purest luck and managed to get one of the last 1.19.8 units from TEquipment.net. Resolution mod is working great and I think that I managed to make enough of a backup of the file system using RNDIS and FileZilla. Lots of errors reported during the copy, however; presumably, these were FS locked files, so no problem?

Anyway, by the time I opened the box, the FLIR site only had the 1.21.0 "update pack" on their site. The good lord willin' and the creek don't rise, I'll never need to reflash the unit with 1.19.8 but...    Is there any archive out there that has the 1.19.8 firmware for a just-in-case backup?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 25, 2014, 03:06:44 pm
Is there any archive out there that has the 1.19.8 firmware for a just-in-case backup?

Nope. http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+1.19.8+download (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+1.19.8+download)

Does anyone with an earlier firmware version want to ask FLIR for 1.19.8 ? ....it might help the Ex series community to have it available in case of emergency or if it contains useful bug fixes. To date I don't think any differences between the various firmwares have been traced to bug fixes. Probably just tidying up the code a little ?

I tried that, their response was:
Quote
The difference between 1.18.7 and 1.19.8 is production related and therefor not added for manual download.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 25, 2014, 03:16:10 pm
Ok I got it all running again and Im back to the first hack. 
I'm sorry for looking stupid.  I was a bit grogy from neo-citren (cold medicine) but that's no excuse.

All I have left is the beta 3 advanced features to add.

Thanks to all on the forum who helped me...  Even when you made fun of me you pointed out obvious shit I overlooked and I knew better.
I have worked with stuff like this in the past and got it figured out.  programing DIY car ECUs and pickit3 stuff etc.   But I'm more of a newb then I thought.   Hope I can pay it forward someday. :)
Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 25, 2014, 03:18:03 pm
@RAWEB,

FLIR never releasd 1.19.8 in a downloadable format. They DID release 1.18.7 though.

Since 1.21.0 was released they have removed 1.18.7 from their site, but many of us have already archived a copy in case of need.

FLIR have not detailed the differences between 1.18.7 and 1.19.8 except to say they were production changes that are invisible to the user. What this actually means is anyones guess as hardware V1.0 was used for 1.18.7 and 1.19.8.

At least one person bricked their E4 and resurrected it from the dead using the 1.18.7 download. If you ever need it, I feel sure it can be made available to you. I do not expect FLIR to EVER release firmware 1.19.8 for download and they will push users to use 1.21.0.....I wonder why  ;) They declined to supply me with 1.19.8 and instead wanted me to return my E4 to them for a special free 'Upgrade'. I suppose that is one word for software and hardware hobbling !

Aurora 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 25, 2014, 05:46:10 pm
A report of a retailer stating he will not accept returns due to firmware version and apparently making false statements regarding FLIR TOOLs compatability with older firmware.

https://www.eevblog.com/forum/testgear/flir-e4-with-pc-software/msg394848/#msg394848 (https://www.eevblog.com/forum/testgear/flir-e4-with-pc-software/msg394848/#msg394848)

Retailers may start to get a little tough on people asking for old firmware versions. Confirm the returns situation before buying.

One retail company in the UK (ARGOS) has a very tough returns policy on digital cameras....they will not refund, only exchange for an identical model or repair if unavailable. This was apparently to stop people buying the cameras, using them for weddings etc and returning them for a refund. ARGOS was making a huge loss as they cannot sell the 'used' cameras as new, and so disposeof them at a loss. We could start seeing similar with E4 sales as the value of the item is high and retailers are aware that people want the older firmware. Do not try the 'its faulty' returns excuse as the retailer has the option to return the camera to FLIR for inspection or providing another an identical replacement unit. A refund could prove elusive !

I recommend potential buyers obtain the serial number of a unit and check my 'E4 Useful inofrmation thread' S/N Vs FW version list, then ask the retailer whether the stock has been returned to FLIR at any time. That is about as much as you can do without opening the box. The remianing older stock is likely to be in small retailers where you will likley pay full retail, or even skightly more, but you get a camera that may be upgraded. I have seen 1.19.8 E4's advertised on e*ay at standard retail price so that may also be an option. Do check out the seller though as these will be favourtes for scammers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 25, 2014, 08:25:33 pm
Another before/after comparison:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on February 25, 2014, 08:54:39 pm
For the serial database:

E4 v1.1
6391 16xx
Cal 7 Jan. Estonia
FW 1.19.8

Got it from Zoro for < $850

Mod completed successfully for resolution only.

Many thanks to all the really smart folks on this list. You are amazing!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 25, 2014, 11:01:47 pm
A report of a retailer stating he will not accept returns due to firmware version and apparently making false statements regarding FLIR TOOLs compatability with older firmware.

https://www.eevblog.com/forum/testgear/flir-e4-with-pc-software/msg394848/#msg394848 (https://www.eevblog.com/forum/testgear/flir-e4-with-pc-software/msg394848/#msg394848)

Retailers may start to get a little tough on people asking for old firmware versions. Confirm the returns situation before buying.

One retail company in the UK (ARGOS) has a very tough returns policy on digital cameras....they will not refund, only exchange for an identical model or repair if unavailable. This was apparently to stop people buying the cameras, using them for weddings etc and returning them for a refund. ARGOS was making a huge loss as they cannot sell the 'used' cameras as new, and so disposeof them at a loss. We could start seeing similar with E4 sales as the value of the item is high and retailers are aware that people want the older firmware. Do not try the 'its faulty' returns excuse as the retailer has the option to return the camera to FLIR for inspection or providing another an identical replacement unit. A refund could prove elusive !

I recommend potential buyers obtain the serial number of a unit and check my 'E4 Useful inofrmation thread' S/N Vs FW version list, then ask the retailer whether the stock has been returned to FLIR at any time. That is about as much as you can do without opening the box. The remianing older stock is likely to be in small retailers where you will likley pay full retail, or even skightly more, but you get a camera that may be upgraded. I have seen 1.19.8 E4's advertised on e*ay at standard retail price so that may also be an option. Do check out the seller though as these will be favourtes for scammers.

The newer version of the E4 retail packaging means you can open and check the camera firmware without breaking any seals.
Check the laws carefully but I'm fairly sure that in the UK the Distance Selling Regulations mean you can send back an item within 7 days.

The argos example given may indicate an exception so do check carefully.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmiller on February 25, 2014, 11:07:25 pm
A report of a retailer stating he will not accept returns due to firmware version and apparently making false statements regarding FLIR TOOLs compatability with older firmware.


The newer version of the E4 retail packaging means you can open and check the camera firmware without breaking any seals.
Check the laws carefully but I'm fairly sure that in the UK the Distance Selling Regulations mean you can send back an item within 7 days.

The argos example given may indicate an exception so do check carefully.

Maybe the new packaging would be a clue not to get the new software?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 25, 2014, 11:19:51 pm
I helped someone set up theirs that was bought at the start of Feb, it was in a different packaging than my own that I bought in December. Both had old firmware.
The old one is a standard cardboard box with a seal, the new one is a sleeve that fits over the case.
The carry case is the same  rugged type.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 25, 2014, 11:39:24 pm
Ref distance selling regs....not sure how Argos get around this but take a look at this web page. At the bottom there is additional information. In that section it specifically excludes the camera from the money back guarantee. When I bought a camera from them it was even on the check-out and receipt.

http://www.argos.co.uk/static/Product/partNumber/1023828.htm (http://www.argos.co.uk/static/Product/partNumber/1023828.htm)

Text reproduced here:

-----------------------------------------
Additional Information

Please note that this product is excluded from our 30 Day Money Back Guarantee. This does not affect your statutory rights.
-----------------------------------------

It may not be enforcable though as I note the comment on statutory rights.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on February 26, 2014, 12:12:10 am
Distance Selling Regs are now part of 'statutory rights', meaning that anything can be returned if bought online, for any reason, within 7 days of purchase. Suppliers cannot wriggle out of it, although they may try. Does NOT apply to business customers though.

Yes, yadda yadda, it's more complicated than like, like everything else involving business in the UK. http://www.oft.gov.uk/shared_oft/business_leaflets/general/oft913.pdf (http://www.oft.gov.uk/shared_oft/business_leaflets/general/oft913.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 26, 2014, 12:20:46 am
I see someone appears to have sold about 7 of these upgraded units on Ebay.  Selling about 1 a day for the past 3 days too.  Total profit looks to be up to $6300.00 USD!  Some were "Best offer accepted" so can't determine exact numbers.

I bet some dealers would be tempted to mod these and sell out the Ebay back door.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 26, 2014, 12:52:14 am
I see someone appears to have sold about 7 of these upgraded units on Ebay.  Selling about 1 a day for the past 3 days too.  Total profit looks to be up to $6300.00 USD!  Some were "Best offer accepted" so can't determine exact numbers.

I bet some dealers would be tempted to mod these and sell out the Ebay back door.
Idiots like these ruined our fun.  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 26, 2014, 01:01:02 am
Contrary to what many of us expected, I've also seen professional users claiming to hack their E4's. That may be what prompted FLIR to patch the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hypernova on February 26, 2014, 01:01:05 am
I see someone appears to have sold about 7 of these upgraded units on Ebay.  Selling about 1 a day for the past 3 days too.  Total profit looks to be up to $6300.00 USD!  Some were "Best offer accepted" so can't determine exact numbers.

I bet some dealers would be tempted to mod these and sell out the Ebay back door.
Idiots like these ruined our fun.  :palm:

To fair it was:
a) Inevitable
b) Equally inevitable that FLIR would plug the hole, ebay or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on February 26, 2014, 01:06:11 am
ARGOS was making a huge loss as they cannot sell the 'used' cameras as new

tough titties, poor "UK's largest high street retailer online", where is my UK's smallest violin when I need one

Do not try the 'its faulty' returns excuse as the retailer has the option to return the camera to FLIR for inspection or providing another an identical replacement unit. A refund could prove elusive !

why would anyone want to lie when returning camera?

I recommend potential buyers obtain the serial number

Why bother? Just buy it, check firmware and if its the new one SHIP IT BACK with a note saying 'thanks but no thanks'

http://europa.eu/youreurope/citizens/shopping/shopping-abroad/returning-unwanted-goods/index_en.htm (http://europa.eu/youreurope/citizens/shopping/shopping-abroad/returning-unwanted-goods/index_en.htm)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on February 26, 2014, 01:07:14 am
@RAWEB,

FLIR never releasd 1.19.8 in a downloadable format. They DID release 1.18.7 though.

Since 1.21.0 was released they have removed 1.18.7 from their site, but many of us have already archived a copy in case of need.

FLIR have not detailed the differences between 1.18.7 and 1.19.8 except to say they were production changes that are invisible to the user. What this actually means is anyones guess as hardware V1.0 was used for 1.18.7 and 1.19.8.

At least one person bricked their E4 and resurrected it from the dead using the 1.18.7 download. If you ever need it, I feel sure it can be made available to you. I do not expect FLIR to EVER release firmware 1.19.8 for download and they will push users to use 1.21.0.....I wonder why  ;) They declined to supply me with 1.19.8 and instead wanted me to return my E4 to them for a special free 'Upgrade'. I suppose that is one word for software and hardware hobbling !

Aurora

Roger that, Aurora. Thanks!  :-+  If I ever do turn it into a rather ineffective plastic hammer, I'll holler.

I do suffer from compulsive pack-rat-itis and hate not having an archive of everything, though. I'm pretty sure I've still got a set of Digital Group DiskMon O/S 8" floppies around somewhere...  I guess I'll have to resist the temptation to fiddle with it too much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: martinv on February 26, 2014, 01:09:59 am
I see someone appears to have sold about 7 of these upgraded units on Ebay.  Selling about 1 a day for the past 3 days too.  Total profit looks to be up to $6300.00 USD!  Some were "Best offer accepted" so can't determine exact numbers.

I bet some dealers would be tempted to mod these and sell out the Ebay back door.
Idiots like these ruined our fun.  :palm:
  Seems like the creators of the 'upgrade' should at least get a commission :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 26, 2014, 01:58:10 am
I see someone appears to have sold about 7 of these upgraded units on Ebay.  Selling about 1 a day for the past 3 days too.  Total profit looks to be up to $6300.00 USD!  Some were "Best offer accepted" so can't determine exact numbers.

I bet some dealers would be tempted to mod these and sell out the Ebay back door.
Idiots like these ruined our fun.  :palm:
  Seems like the creators of the 'upgrade' should at least get a commission :)
>:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on February 26, 2014, 02:19:18 am
Another before/after comparison:
Wow.... how you do that ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 26, 2014, 04:18:20 am
I'm new here, can someone explain each step of the upgrade?

. . . Just kidding.

No but really, I do have a question. Has anyone ever tried using their backup to return the camera back to stock E4 settings?  I have read every post about backups and i don't see anyone having actually done this.   If you have, maybe you can weigh in on the experience.

Hope this is not just a theoretically possibility.  An earlier post about a lot of file transfer errors occurring during an FTP backup process got me thinking about it. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 26, 2014, 04:53:58 am
- I have made a backup.
- I have verified that removing the E8.cfg file restores it to pre-hack state.
- Removing the E8.cfg file is equivalent with "restore previous file state" in my case. Does not apply when also doing menu hack. Feel free to now have the diabolical urge to have to ask about "but what if that thing with menu hack as well?". (*)
- The recent posts about ftp errors translate to PEBCAK.

Does that answer the question?



(*) You predictable monkey you! ;) ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 26, 2014, 07:32:13 am
I did read every one of the 30 posts that mentions the word BACKUP  and looked at other forums before I threw out the backup questions.  Just saying that none of those posts mention having gone thru an undo process, or how that worked out for them. 

And sure, user error probably a way to characterize getting file transfer errors, but it is of interest to those of us following  file backup procedures common to FileZilla but still getting those file transfer errors.  Ive used that backup method to back up web site files without these kind of errors.

Maybe someone else can comment..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on February 26, 2014, 07:54:31 am
I thought I read several posts back, that if you log into the camera from filezilla as "root" and "3vlig" instead of "flir", you can access the locked files for backup?
Is this correct?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 26, 2014, 08:12:18 am
I thought I read several posts back, that if you log into the camera from filezilla as "root" and "3vlig" instead of "flir", you can access the locked files for backup?
Is this correct?

You need to know that Windows CE has "ROM" files and can mix read/write files with ROM files (even overlay them) - that's to conserve space and allow some fancy IT-tricks.
I suggested using root as login as it can see root owned files while flir can't - whether your Ex has such files will show after you did a backup using root and a backup using flir, then compare those backups (I didn't do that yet).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 26, 2014, 08:24:11 am
I did read every one of the 30 posts that mentions the word BACKUP  and looked at other forums before I threw out the backup questions.  Just saying that none of those posts mention having gone thru an undo process, or how that worked out for them. 

And sure, user error probably a way to characterize getting file transfer errors, but it is of interest to those of us following  file backup procedures common to FileZilla but still getting those file transfer errors.  Ive used that backup method to back up web site files without these kind of errors.

Maybe someone else can comment..

Well, then check out "restore" or "de-brick"  ... I personally guided a de-brick (remote connection) - the backup files were needed to restore config data after a full "delete" where just basic components (undeleteable) had survived.

The read errors just happen with ROM files - Windows assumes you won't need to copy them as they are not changing and disallows copying them -> one has to use extraction techniques to snoop into them :) ... fortunately they are included in the firmware file anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 26, 2014, 05:25:53 pm
Thanks for heading me to those posts for a re read. I had read all de bricking posts but guess i was missing out on any gems about the backup process.

I suspect that a reversion to stock E4 condition (rez and menu hacks), is a little more than simply replacing or overwriting the two camera folders that contained mods for the two enhancements.  That logic does have some appeal.

I did read somewhere on FileZilla forums that 550 file transfer errors occur with both locked server files as well as with files that dont exist, and was thinking this to be the case becuz so many camera folders are empty.  But closer look at the file error strings does indicate those are files that are locked out.  Will try the root/ vlig method,

Will be doing more thorough reading on this topic before posting again.  Not looking for a tutorial or anything along those lines.  Probably many viewers interested in this aspect of the teardown. I suspect more posts will come to light about the BK and restore process as warranty work is sought in the future.

But its all good stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on February 26, 2014, 11:24:21 pm
And sure, user error probably a way to characterize getting file transfer errors, but it is of interest to those of us following file backup procedures common to FileZilla but still getting those file transfer errors.
User error is indeed how I characterize getting file transfer errors due to using incorrect paths like ".../FlashBFS/FlashBFS/...". ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on February 27, 2014, 08:04:58 am
And sure, user error probably a way to characterize getting file transfer errors, but it is of interest to those of us following file backup procedures common to FileZilla but still getting those file transfer errors.
User error is indeed how I characterize getting file transfer errors due to using incorrect paths like ".../FlashBFS/FlashBFS/...". ;)

Agreed, but the Filezilla backup process makes that somewhat impossible if using conventional filezilla backup methods. 

Will try doing a backup using Pomonnabills suggestion of replacing "flir" with "root" and will also dig around in some of those unbricking posts to see if those 550 file transfer errors go away during the FTP backup.

I was hoping the reversion to e4 stock condition would be an easier process that say, going through a hand wringing unbricking process.  But if thats what it takes, we all  potentially face that prospect if warranty work should be required.   It is what it is, no doubt.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 27, 2014, 01:17:39 pm
Warranty work ?  .... only if you don't mind reverting back to a standard E4 with little prospect of returning to 320x240. It has always been FLIR policy to install the latest firmware version during a repair. They MAY obey as instruction to not do so, but I would not count on it. Probably better to buy another E4 with 1.21.0 and use it as a parts donor to fix a 1.19.8 version  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 27, 2014, 02:17:00 pm
It would be really nice to see if there have been any visible hardware changes from 1.0 to 1.1 to 1.1L.

How FLIR would go about stopping a 1.21 to 1.18/1.19 re-flash would likely be in the boot ROM some where. Could that be overwritten out of band some how and allow the newest units to be unlocked is a question we wont even have a chance to answer till we have some data to compare them with.

New hardware needs to be sacrificed to the gods of Phillips and JTAG. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 27, 2014, 02:29:17 pm
It would be really nice to see if there have been any visible hardware changes from 1.0 to 1.1 to 1.1L.

How FLIR would go about stopping a 1.21 to 1.18/1.19 re-flash would likely be in the boot ROM some where.
The return-to-base stuff would suggest something like bootloader changes. I would also not be surprised to see some kind of warranty seal.
Quote
Another way that downgrading could be hindered is to make changes to the way the cal data works, and maybe format of eeprom data - I don't recal what happens if the current version sees a bad checksum on eeprom data.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 27, 2014, 07:56:49 pm
Changes to software in the E4 is fraught with risk unless the coder knows exactly what countermeasures are in play. FLIR could easily include checksum countermeasures to counter attempts to modifiy the build in any way except via legitimate ugrade paths and content. Finding someone willing to risk their E4 becoming an expensive brick is part of FLIRS countermeasure ! Very few, if any, new E4 owners will want to take such a risk with $1000+ without some idea of the risk thay are taking.

One option would be for a group of people who want a 320x240 E4 to get together and share the cost of a sacrificial new E4 with 1.21.0 loaded. The unit may then be experimented upon by persons with the required coding abilities. Hopefully the experimental E4 would still be in useable condition after the investigation is completed. It may then be sold on an auction site and the funds divided between the 'investors' to put towards their purchase of a new E4. There is the very real possibility that the 4 cannot be 'cracked', in which case the exoerimental unit may be sold and some of the investment recovered for the investors. Sometimes you have to take a risk and invest in order to reap the rewards. There would also be the possibility that the 'investors' could offer the experimental E4 to the skilled coder as payment for the time that the investigation will take and the capability that will be released in terms of upgrading other E4 units.

The challenge would be finding someone with the skill set needed for the investigation who has the amount of time that would be needed for such. Mike, Taucher and the others in the E4 upgrade 'Team' have been very generous with their time already and likely have day jobs to pay the bills.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 27, 2014, 08:34:29 pm
I think the new cameras most likely use some kind of code signing. This allows them to accept future firmware updates from FLIR while disallowing unofficial modifications. The signing key could probably cracked with a community effort if it isn't stronger than 768-bit RSA. If all else fails, there are always modchips. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 27, 2014, 09:25:47 pm
I think the new cameras most likely use some kind of code signing. This allows them to accept future firmware updates from FLIR while disallowing unofficial modifications. The signing key could probably cracked with a community effort if it isn't stronger than 768-bit RSA. If all else fails, there are always modchips. ;)
Navigation devices took this approach with their maps etc... result: firmwares "need" a patch and then a keygen with known private key will allow any map the user gets his hands on.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 27, 2014, 10:01:31 pm
I've said it before, I think a kickstarter would work for this.
The investment idea seems too complex, just have many people donate £10 to £20 each and you'll have an E4 in no time...
The E4 can be sold on, and funds donated to a worthy charity, or it can be kept, for future experimentation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 27, 2014, 10:56:25 pm
I've said it before, I think a kickstarter would work for this.
The investment idea seems too complex, just have many people donate £10 to £20 each and you'll have an E4 in no time...
The E4 can be sold on, and funds donated to a worthy charity, or it can be kept, for future experimentation.
Maybe, but I'd expect either KS to reject or Flir's lawyers to pressure them to do so.
There's also the issue of what the deliverable would be - it could easily be nothing. Maybe something for  Indiegogo then  8)
 
I have considered the idea of a KS to buy something for teardown, but not yet come up with anything with a suitable interestingness-to-cost ratio.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 27, 2014, 11:21:32 pm
You could always have the funds managed by a trusted member of the community instead.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 27, 2014, 11:33:12 pm
I know there were a few people who said they would donate 100 Dollars/Euros. I would also donate $100.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on February 28, 2014, 12:52:46 am
Post 4000! Wow this is a huge thread. That is all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macnasien79 on February 28, 2014, 12:54:44 am
I would donate another US$100.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 28, 2014, 12:55:40 am
I bought one last week from Bell NW that has firmware 1.19.8. They still have 1 more left. Let the fight ensue.  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pwherry on February 28, 2014, 12:59:59 am
I'm one of the folks who bought an E4 as a result of this thread and was able to easily and successfully modify it; I'm very grateful to the folks who made this possible.

I want to state that I'm in for $100 (as a simple donation, not some sort of "investment") if the project moves forward to acquire/hack a unit with firmware 1.21. I understand there's a substantial risk of failure in this endeavor and am nonetheless willing to contribute.

Since FLIR has shown at least some willingness to engage in an arms race with the hacker/enthusiast community, it's my expectation that the unit purchased for this endeavor might be useful in dealing with future firmware updates, too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 28, 2014, 01:08:48 am

Recalling that some less ethically thinking folks did some buy-hack-sell jobs on ebay and made a multiple of the original investment - and that they didn'share back with the community - well, that gives me motivation not to help them in their efforts. If anybody should donate money for a "hack me"-cam, then those guys.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 28, 2014, 01:12:30 am
@Taucher,

Totally agree with you but sadly they are the 'takers' in life, and likely want the new E4's to remain imune to user upgrade so that the can continue to sell earlier firmware models at even greater profit margins.  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on February 28, 2014, 01:26:20 am
@Taucher,

Totally agree with you but sadly they are the 'takers' in life, and likely want the new E4's to remain imune to user upgrade so that the can continue to sell earlier firmware models at even greater profit margins.  :(
... in case that they manage to get hold of them - who's willing to sell a hacked/hackable E4 to them? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Arlo1 on February 28, 2014, 01:39:11 am
I don't even have the option for a Ebay flip I bought the last hackable E4 I could find in Canada. 
But I would also be in for some sort of donation even though I agree the guys on ebay should be on the hook for most of it considering they are making big coin on this for about 1 hour work!
But I was wondering I edited the boot logo but I can only get the logo to change that the camera flashes from a hard boot.  The other one stays the same no matter what.   Anyone know if that main logo can be replaced?  I have a feeling it can't because when I bricked my camera it was the only thing still there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on February 28, 2014, 02:08:18 am
I've said it before, I think a kickstarter would work for this.
The investment idea seems too complex, just have many people donate £10 to £20 each and you'll have an E4 in no time...
The E4 can be sold on, and funds donated to a worthy charity, or it can be kept, for future experimentation.
Maybe, but I'd expect either KS to reject or Flir's lawyers to pressure them to do so.
There's also the issue of what the deliverable would be - it could easily be nothing. Maybe something for  Indiegogo then  8)
 
I have considered the idea of a KS to buy something for teardown, but not yet come up with anything with a suitable interestingness-to-cost ratio.

If Mike or Taucher or those who have shown work on the E4 just put up a campaign even with no deliverable, people here know what to do.  I can bet the amount coming shall way exceed a few E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on February 28, 2014, 02:19:22 am
I've said it before, I think a kickstarter would work for this.
The investment idea seems too complex, just have many people donate £10 to £20 each and you'll have an E4 in no time...
The E4 can be sold on, and funds donated to a worthy charity, or it can be kept, for future experimentation.
Maybe, but I'd expect either KS to reject or Flir's lawyers to pressure them to do so.
There's also the issue of what the deliverable would be - it could easily be nothing. Maybe something for  Indiegogo then  8)
 
I have considered the idea of a KS to buy something for teardown, but not yet come up with anything with a suitable interestingness-to-cost ratio.

Ah, but it's not a Flir E4 for hacking... it's for an obscure parametrised analysis of the product with a video camera, serial terminal and scope... ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on February 28, 2014, 04:12:15 am
Hi,

I received my new E4 today, and am already at work hacking! I understand that I need to edit E8.cfg, but I can't for the life of me find that file. I have looked in the folder directly when I hook it up using USB, and have gone into Windows Command prompt and have it show all hidden files, with no luck. Am I missing something really obvious? I can assure you the firmware is 1.19.8.

edit: problem resolved!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 28, 2014, 09:25:58 am
Hello,
i tried searching the tread for the question I'm about to ask,
but I was unable to find :
is it possible to set the transparency of the text and/or
box that reports the temperature values (for example
for "auto min max" cursor mode)?

Also a pointer to the files that set these porperties
or to the relevant posts talking about this is welcome.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 28, 2014, 09:28:50 am
For the record I have no interest in spending time looking at the new version - I got what I wanted, a 320x240 cam, and am pleased that others have also benefited from it.
I have way too much other stuff to play with to be spending any time on this!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on February 28, 2014, 02:44:08 pm
Here one of these ebay auctions
eBay auction: #http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=121284117066&ssPageName=ADME:B:SS:ES:3160
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

My camera arrived today!! I'm so excited!!! Hope I manage to upgrade it, im quiteee nonskilled.

The quality of the images out of the box is a bit deceiving. What I liked less i the massssive compresion of the jpg, I assume that the thermal data goes appart attached and is not pixel based, otherwise.... The images feel like a cheap screen capture.

I'll see how it improves. I'm really willing to try the panorama app I've seen in this thread. Looks like the best way to achieve a hi-res thermal image, not so hard to do a 4x and 4y photos to achieve a decent resolution, for facades certaily is the way to go.

When "calibrating" text is shown the image seems to freeze for a sec or so, anoying.

The framerate makes it unusable for night vision FPV on my hexacopter, but for what I've read its non an easy task to get these 60fps the sensor can achieve. May be redirecting the data stream to a phone and process the data in there?? may be that is too much.. whatever. the 320 hack makes this came a super toy!!. THanks!!! I can contribute providing any data from my cam, file backup or watever simply PM or ask here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 28, 2014, 03:20:17 pm
Welcome to the E4+ club  :)

The image freeze during calibration is unavoidable unless the Non Uniformity Correction (NUC) is disabled. The NUC routine places a shutter over the microbolometer and equalises the output from the pixels to produce a 'flat' image. Sadly Microbalometer arrays drift at unequal rates during use and this necessitates some form of NUC in the design. Some shutterless designs are available but not in the 'budget' Ex series. Whilst the NUC shutter is activated, the camera presents the last captured image which is believed to be more useful than a blank screen, which is the alternative.
The good news is that NUC opertion frequency drops to around once every 2 minutes when the camera has stabilised at operating temperature. In  case you are not aware, the microbolometer in the E4 is actually heated to 30 Degrees C and stabilised at that temperature. Whilst it is warming up you see the Tilda (~) symbol to the left of the measured temperature. This indicated that the camera temperature measurement is not calibrated yet as the required 30 degree C operating temperature has not been reached. A Thermo-electric (peltier) cooler built inside the microbolometer carries out the heating and cooling to maintain accurate sensor temperature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pingo on February 28, 2014, 05:53:06 pm
Does anyone know if it is possible to have the E4 work with FLIR ResearchIR MAX software?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 28, 2014, 06:33:38 pm
FLIR's documentation suggests not. The nearest model that can use it is stated as the Exx series.

PDF attached

http://support.flir.com/DsDownload/Assets/T198209_en_51.pdf (http://support.flir.com/DsDownload/Assets/T198209_en_51.pdf)

You can download a free 30 day trial to test it though  :)

Other software datasheets are to be found here:

http://support.flir.com/DsDownload/App/DsDownload.aspx?LANG=en&c_id=543&ID=6#21 (http://support.flir.com/DsDownload/App/DsDownload.aspx?LANG=en&c_id=543&ID=6#21)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 28, 2014, 07:25:34 pm
I know someone said they e-mailed Flir and asked if two orders could be combined for rebate but I never saw a response so I called them and they said each purchase must have a separate rebate sent in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on February 28, 2014, 08:37:52 pm
Hello,

I´m a new owner of a E4 TIC, but i get the new firmware. :-\

Is there any possibility to downgrade or patch the hack? Or can i help with some information about my E4-TIC?
Here some information about my E4-TIC:

Model E4 1.1L
Serial-No. 63914752
Part-No. 63901-0101
SW-Version 1.21.0

10 seconds right-button works

USB-Modes: MSD; UVC;RNDIS; RNDIS & UVC; RNDIS & MSD; UVC & MSD (preset); RNDIS & UVC & MSD
Version-Information:
IRDM 0.0.1.0
POLLUX 0.1.0.0
POLLUX_FPGA 8.1.25.0
camcore T198304-01-63813808
detector *-*-*
mainboard T198283-11-20136016
appkit 1.0.16
confkit E41.1L
osimgkit 16.0.12
prodkit 0
AppCore 22.0.0.1
AppServices 22.0.0.1
Bootloader 16.1.5.0
ResMon 22.0.0.1
WinCE 6.0.0.0
appcore_dll 1.9.0.1
common_dll 1.9.0.7
facet_core 22.0.0.1
facet_ui_qml 22.0.0.1
fvd 16.0.47.0

If you press the right button on any item for 10 Secods, there ist one more menue. But it is empty.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on February 28, 2014, 08:52:26 pm
I know someone said they e-mailed Flir and asked if two orders could be combined for rebate but I never saw a response so I called them and they said each purchase must have a separate rebate sent in.

I ordered two cameras for my company, but were on the same invoice. They allowed me to do the higher rebate. I'm not sure about two separate orders.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on February 28, 2014, 08:59:35 pm
Someone on another forum is claiming that FLIR Tools can detect "upgraded" E4's, and that FLIR could take legal action against hackers: http://www.nachi.org/forum/showthread.php?t=89207 (http://www.nachi.org/forum/showthread.php?t=89207)

Thoughts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 28, 2014, 09:14:10 pm
I call B*LLSH*T on that rumour.

I have contacts in the industry who have confirmed that a user changing the configuration of a FLIR E4 is not acting illegally. The fact that the camera is able to be upgraded by a user is FLIR's error and responsibility. This is why I suspeect the new lock-down will be well thought through and effective against many attack vectors.

To act illegaly, a user would need to hack the E4 into a >9fps TIC and send it to another country  without a licence.

It is well known that FLIR Tools 'phones home' and the picture metadata does contain the cameras serial number, so a 320x240 thermal image on a serial number that should be 80x60 would be easy to detect. They can only attempt a countermeasure, not pursue legal action agaiinst the user.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 28, 2014, 09:20:36 pm
10 seconds right-button works
USB-Modes: MSD; UVC;RNDIS; RNDIS & UVC; RNDIS & MSD; UVC & MSD (preset); RNDIS & UVC & MSD
That's a bit of a surprise...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 28, 2014, 09:50:33 pm
Hi,

I hacked my e30bx into e60.
However, the e30bx seems to be lacking the Wifi and BT hardware unfortunately.

I was able to increase the max temp from 120 to 650 degrees by activating a "case" in the web server.
Then I did "star calibration" on the new case, and then I rebooted... and voila, 650 degrees max temp !

And unbelievably the camera webpage even lists a calibration date and data for the 650 degrees option, so they calibrate all the temperature ranges at factory and then disable the 650 degrees range if needed, just like the resolution

I would be grateful if anyone with an E40 or better can supply a screenshot of the EEPROM page holding the hardware revisions, part numbers and serial numbers (you can hide those). On my e30bx it says * * * and I'm not sure it's because the HW is not there or because it's just not activated, so I'd like to put the EEPROM values and see if it works.

For the record : I have a camera P/N 490xxxxxx and FW version 2.23.14 (downloaded today from the FLIR website).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 28, 2014, 10:08:18 pm
Is there any possibility to downgrade or patch the hack? Or can i help with some information about my E4-TIC?

Noone have tried yet.
Just try it !!!

Also please tell us what kind of CRC the config files use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on February 28, 2014, 10:20:49 pm
Or can i help with some information about my E4-TIC?

As uski already wrote, it would be very interesting to see the file /FlashFS/system/appcore.d/config.d/conf.cfg

But the first thing that pops into my mind: Is it safe (or possible at all) to really activate RNDIS, connect to the camera via FTP and download that file?
I can't stop thinking about some kind of self-destruct-mechanism as soon as you log in via FTP. Or it might be possible that I watch too much action movies... ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on February 28, 2014, 11:17:06 pm
People. THANK YOUUUU!!!!!!!!

I've updated my cam in resolution and in the menu. Converted it from a cool thermometer into an amazing camera!!

The difference is BRUTAL!.  Infinite thanks for sharing the info.

I used the Filezila method, really straightforward. I updated the resolution and menu at the same time.
_____________________________

All newbies (like me) I recommend the Filezila method.
Tha txt of the hack, when says all stuff must go in caps, it  does not reffer to the generated key tu to the first part of the string :   # CRC01
Dont forget to rename the E8.cfg to e8cfg

After setting the usb mode for connecting via FTP don't forget to switch back otherwise no way to see the images and lot of tension like did I screw it up?!?!!?

While doing the backup some files did not get copied, probably this is normal, don't remember reading anything on this. It took my 1-2 hours, rereading everything... better safe than sorry :-+
___________________________
Probably it is documented in teh manual but did not read yet, if you press the photo button continuously it take photos continuously, GREAT feature to stick the cam on a multicopter or plane. ( with a zip or simply duck tape. or for doing timelapses...
___________________________

I'll be posting images in the other thread...

infinite thanks!!! :clap:
_____________________________
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on February 28, 2014, 11:26:13 pm
About FLIR modifying our cameras.
Us modifying OUR cameras for OUR usage will hardly be a legal issue. FLIR modifying OUR cameras without permision to do so, that yes would be a serious legal issue for them, specially in the US. If I was flir I would start offering higher res to proffesionals and the E8 like features to mortals, as it is clear that we're ready to pay for that level of tech.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 28, 2014, 11:50:06 pm
Anyone more of a visual learner I uploaded a tutorial:
Resolution hack:
Flir E4 320x240 Resolution Hack (https://www.youtube.com/watch?v=rYd8Jv8Kz3k#ws)
Menu hack:
Flir E4 - E8 Plus Menu Hack Thermal Imaging (https://www.youtube.com/watch?v=iZVzwOMHiFQ#ws)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 01, 2014, 12:11:12 am
I can't stop thinking about some kind of self-destruct-mechanism as soon as you log in via FTP. Or it might be possible that I watch too much action movies... ;D
Any form of active "destruct" functionality would be very stupid, as they'd just get a load of pissed off customers returning them as faulty.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 01, 2014, 12:48:56 am
Anyone more of a visual learner I uploaded a tutorial:
Resolution hack:
<vid>
Menu hack:
<vid>
Neat ... just a small hint: the resolution hack can be done over RNDIS too, no need for zipping and flirnetinstall then - just drop the e8.conf into the right place by FTP - works just like the .fif version :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 01, 2014, 01:24:43 am
I think this would be roughly equivalent to a jailbreak of an iPhone -- Apple may explicitly forbid it in the EULA  (no reverse engineering or modifications permitted) but whether that is legally enforceable or not is an entirely different question.

I imagine Flir would easily detect firmware changes like this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 01, 2014, 01:30:15 am
I know in the E4 firmware you can make the FLIR logo transparent so that it does not display in the saved JPG pictured.
Does anyone remember where this logo is stored ? I did try to search the forum but I couldn't find it
The reason for asking is that I would like to do the same for my [strike]E30bx[strike] E60.

For the record, I tried replacing the bootlogo.bmp file by another one, but the boot logo did not change. So I suspect the bootlogo on the Exx models is hardcoded somewhere.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dtbp on March 01, 2014, 01:43:11 am
I just wanted to share something I discovered today. After disassembling the camera and stupidly (DO NOT unseat this camera if you can help it) removing the spring clip that holds the visual camera in place,  the MSX was significantly off vertically upon reassembly. No amount of reseating of the visible camera could line up the images, it's almost like it wasn't seated properly at the factory before calibration... After toying with adjusting the calibration files for the new paralax, I ended up just placing a sliver of paper under the lip of camera as a shim. Problem solved with my favorite kind of engineering! I don't deserve nice things.... :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 01, 2014, 01:43:34 am
Anyone more of a visual learner I uploaded a tutorial:
Resolution hack:
<vid>
Menu hack:
<vid>
Neat ... just a small hint: the resolution hack can be done over RNDIS too, no need for zipping and flirnetinstall then - just drop the e8.conf into the right place by FTP - works just like the .fif version :)
Like this :D
http://youtu.be/Ci2a_zjWUiQ (http://youtu.be/Ci2a_zjWUiQ)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 01, 2014, 02:23:27 am
Great news.

We found the necessary exif values for the calculation of atmosphere transmissivity influence in Flir Images.

see my post with an Excel sample here
 http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)

the excel calculated temperature is 100% identical with a Flir Tools csv temperature file
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caudex on March 01, 2014, 03:48:22 am
I can't stop thinking about some kind of self-destruct-mechanism as soon as you log in via FTP. Or it might be possible that I watch too much action movies... ;D
Any form of active "destruct" functionality would be very stupid, as they'd just get a load of pissed off customers returning them as faulty.

Would be funny though if they added in functionality which when it detects a unauthorised cfg file has been added or changed... it will put the camera into lock down and every time you attempt to turn it on it will freeze and display a image saying "CAMERA DISABLED ATTEMPTED HACK <file name> DETECTED"......

haha it would clearly piss off alot of people ,but they cannot send it back and claim warranty since it isn't broken because of FLIR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 01, 2014, 06:32:19 am
I can't stop thinking about some kind of self-destruct-mechanism as soon as you log in via FTP. Or it might be possible that I watch too much action movies... ;D
Any form of active "destruct" functionality would be very stupid, as they'd just get a load of pissed off customers returning them as faulty.

Would be funny though if they added in functionality which when it detects a unauthorised cfg file has been added or changed... it will put the camera into lock down and every time you attempt to turn it on it will freeze and display a image saying "CAMERA DISABLED ATTEMPTED HACK <file name> DETECTED"......

haha it would clearly piss off alot of people ,but they cannot send it back and claim warranty since it isn't broken because of FLIR.

it would only piss off FLIR, as it is legal to return goods WITHOUT ANY REASON in EU within 7 days of receiving your mail order
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 01, 2014, 09:03:32 am
it is legal to return goods WITHOUT ANY REASON in EU within 7 days of receiving

Partially true. In our country it is 14 days, BUT it must be in ORIGINAL CONDITION, so any sing of trying hack is reason to not accept the return.

If there will be any problem with Flir tools in future, just DO NOT USE it :-D Use BFIC (See my footnote and try windows version).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 01, 2014, 09:49:24 am
I can't stop thinking about some kind of self-destruct-mechanism as soon as you log in via FTP. Or it might be possible that I watch too much action movies... ;D
Any form of active "destruct" functionality would be very stupid, as they'd just get a load of pissed off customers returning them as faulty.

Would be funny though if they added in functionality which when it detects a unauthorised cfg file has been added or changed... it will put the camera into lock down and every time you attempt to turn it on it will freeze and display a image saying "CAMERA DISABLED ATTEMPTED HACK <file name> DETECTED"......

haha it would clearly piss off alot of people ,but they cannot send it back and claim warranty since it isn't broken because of FLIR.
Nothing to do with warranty - in the UK at least, the liability for "faulty" goods is with the seller, and it would be down to them to prove the goods had been damaged.
 "Dunno mate it just came like that..." 
"The fragile USB socket just fell off..."
etc. etc.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 01, 2014, 12:41:38 pm
Here some stuff for you:
File-upload.net-Link

FLIR_BACKUP.zip (http://www.file-upload.net/download-8669033/FLIR_BACKUP.zip.html)

http://www.file-upload.net/download-8669033/FLIR_BACKUP.zip.html (http://www.file-upload.net/download-8669033/FLIR_BACKUP.zip.html)

uploadarea.de
(same archive, i don´t know anything, how long the archive will be online)

(http://www.uploadarea.de/upload/q1qxlm3i7fz5hb5y11zfv2u2z.html) (http://www.uploadarea.de)

http://www.uploadarea.de/files/kqqgiclbm7jur37u6g729r6ku.zip (http://www.uploadarea.de/files/kqqgiclbm7jur37u6g729r6ku.zip)


Inside the zip is an office-file with the full protocol of the fillezilla-FTP-Transfer and all Data i can backup in this way.
Hopefully, it helps to patch the new firmware.

Setting in TIC is: USB Option only RNDIS an stay in the Menue before selection(in display is: USB-Mode, Export and Version-Information selectable)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 01, 2014, 01:51:16 pm
Well, the look of that config file is a bit unexpected... :o At least for me.
And only after opening the configuration file for like three or four times, I noticed the different file name "conf.cfc". Just stating the obvious: the second c most certainly stands for crypted.
I'm not huge into hex or crypto stuff but I cannot recognize anything in that file...

Also, the only logfile in the backup /Temp/postlog.txt hasn't anything useful in it (at least as far as I can see).

Any ideas on how to start?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 01, 2014, 02:04:06 pm
Well, the look of that config file is a bit unexpected... :o At least for me.
And only after opening the configuration file for like three or four times, I noticed the different file name "conf.cfc". Just stating the obvious: the second c most certainly stands for crypted.
I'm not huge into hex or crypto stuff but I cannot recognize anything in that file...

Also, the only logfile in the backup /Temp/postlog.txt hasn't anything useful in it (at least as far as I can see).

Any ideas on how to start?

the file has a #CFC near the end and some binary stuff after that ... I'd say that's a start
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 01, 2014, 02:42:21 pm
Here some stuff for you:
thanks, but you uploaded all your privat images from folder FLIR_BACKUP\FlashIFS\DCIM\FLIR_100 !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 01, 2014, 02:55:11 pm
common DLL:

Code: [Select]
CCfc::initSignature(CCfc::CFC_SIGNTYPE_T)                           .text 0000000000105150 00000070 R . . . . . .
CCfc::CCfc(void)                                                    .text 000000000010523C 00000020 R . . . . . .
CCfc::CCfc(CCfc::CFC_SIGNTYPE_T)                                    .text 0000000000105264 00000028 R . . . . . .
CCfc::CCfc(CCfc::CFC_SIGNTYPE_T,CCfc::CFC_PLTYPE_T)                 .text 000000000010528C 00000028 R . . . . . .
CCfc::calcSign(void *,long)                                         .text 00000000001054FC 0000012C . . . . . . .
CCfc::setSignatureType(CCfc::CFC_SIGNTYPE_T)                        .text 00000000001057C8 00000020 . . . . . . .
CCfc::getSignature(bool &,int *)                                    .text 00000000001057E8 00000028 . . . . . . .
CCfc::setSuid(unsigned __int64)                                     .text 0000000000105810 0000000C . . . . . . .
CCfc::setPltype(CCfc::CFC_PLTYPE_T)                                 .text 000000000010581C 00000020 . . . . . . .
CCfc::signatureSize(void)                                           .text 000000000010583C 00000010 . . . . . . .
CCfc::cfcheader(void *,CCfc::CFC_SIGNTYPE_T *,CCfc::CFC_PLTYPE_T *) .text 000000000010584C 000000BC . . . . . . .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 01, 2014, 03:33:52 pm
they removed all parts to get the High Resolution Service Mode (especially prodapp.exe)

removed binaries
Code: [Select]
./FlashBFS/system/bitapp.exe
./FlashBFS/system/camtorrent.exe
./FlashBFS/system/cemgrc.exe
./FlashBFS/system/cerdisp.exe
./FlashBFS/system/clientshutdown.exe
./FlashBFS/system/cmaccept.exe
./FlashBFS/system/conmanclient2.exe
./FlashBFS/system/conmanclient3.exe
./FlashBFS/system/dumpcoff.exe
./FlashBFS/system/fmqping.exe
./FlashBFS/system/fvd.exe
./FlashBFS/system/i2c.exe
./FlashBFS/system/pmic.exe
./FlashBFS/system/prodapp.exe
./FlashBFS/system/regsvrce.exe

added binaries
Code: [Select]
./FlashBFS/system/suid.exe
For the calibration Flir activate furthermore the high res mode.
see
Code: [Select]
$ exiftool ./FlashFS/system/maps/ds250C_we_ap_fi_le_static.gan
ExifTool Version Number         : 9.53
...
Gain Dead Map Image Width       : 320
Gain Dead Map Image Height      : 240
Gain Dead Map Image Type        : TIFF
Gain Dead Map Image             : (Binary data 153804 bytes, use -b option to extract)

good news: your sensor is 320x240  :)

also see unchanged FlashFS/system/service/appcore.d/config.d/conf.cfg


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 02, 2014, 01:06:47 pm
If you want to test something, you can send me a zip-file and some instructions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 03, 2014, 02:50:05 am
Just a quick statistics analysis for the conf file - comparing .cfg and .cfc
Green is count of byte from 0x00 (left) to 0xFF (right) - red is the same count, just sorted by count descending.
Size indicates it's not compressed.

PS: Histograms were made with bytehist: https://www.cert.at/downloads/software/bytehist_en.html (https://www.cert.at/downloads/software/bytehist_en.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on March 03, 2014, 03:16:33 am
Just a quick statistics analysis for the conf file - comparing .cfg and .cfc
Green is count of byte from 0x00 (left) to 0xFF (right) - red is the same count, just sorted by count descending.
Size indicates it's not compressed.

PS: Histograms were made with bytehist: https://www.cert.at/downloads/software/bytehist_en.html (https://www.cert.at/downloads/software/bytehist_en.html)

That look srather strange, not like real encryption. Notice the "notch" in the .cfc bytes green plot, whereas the "peak" in the .cfg is just after that. All in all not that random. Woul be interresting to see some more .cfc files from new cams, and compare them. Who knows, maybe just some silly XOR or bit-rotationg using the cam's serial (or whatever) number. After all, it's  a rather small processor in there that is already struggling with providing a fluidly working UI, so burdening it with heavy encryption may be a no-go.

Oh, and has anyone tried to still feed it regular plain-text .cfg files? I mean, who says that the choice between .cfc and .cfg is mutually exclusive?

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PlatonicSolid on March 03, 2014, 03:33:50 am
I just happened to be looking for a thermal imaging camera at the same time Flir was upgrading their firmware. I ended up placing 3 online orders. Cancelled the first 2 as they were on back order (as that would guarantee new firmware). Gambled that if the vendor had stock (order date 2/24/14) it would be the old firmware. Camera arrived 2/28 with old firmware. Carefully followed Mikes instructions and the resolution is now great! Thank you - Thank you - Thank you Mike (and contributors).

It's worth mentioning that I would not have purchased this item without the ability to achieve the higher resolution. The difference really is night and day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 03, 2014, 09:24:41 am
maybe just some silly XOR or bit-rotationg using the cam's serial (or whatever) number
I bet so. Since we have original and the crypted one, it should not be to hard to find out the encryption key.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 03, 2014, 10:52:32 am
Quote from my first post:

Model E4 1.1L
Serial-No. 63914752
Part-No. 63901-0101
SW-Version 1.21.0
 :-+

If you need any further data of my TIC, please let me know about and i will do so.

@ the german "developers": Ich wohne in Berlin und kann gern auch mal persönlich mit der TIC irgendwo hinkommen, falls das hilft.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amyk on March 03, 2014, 12:20:25 pm
common DLL:

Code: [Select]
CCfc::initSignature(CCfc::CFC_SIGNTYPE_T)                           .text 0000000000105150 00000070 R . . . . . .
CCfc::CCfc(void)                                                    .text 000000000010523C 00000020 R . . . . . .
CCfc::CCfc(CCfc::CFC_SIGNTYPE_T)                                    .text 0000000000105264 00000028 R . . . . . .
CCfc::CCfc(CCfc::CFC_SIGNTYPE_T,CCfc::CFC_PLTYPE_T)                 .text 000000000010528C 00000028 R . . . . . .
CCfc::calcSign(void *,long)                                         .text 00000000001054FC 0000012C . . . . . . .
CCfc::setSignatureType(CCfc::CFC_SIGNTYPE_T)                        .text 00000000001057C8 00000020 . . . . . . .
CCfc::getSignature(bool &,int *)                                    .text 00000000001057E8 00000028 . . . . . . .
CCfc::setSuid(unsigned __int64)                                     .text 0000000000105810 0000000C . . . . . . .
CCfc::setPltype(CCfc::CFC_PLTYPE_T)                                 .text 000000000010581C 00000020 . . . . . . .
CCfc::signatureSize(void)                                           .text 000000000010583C 00000010 . . . . . . .
CCfc::cfcheader(void *,CCfc::CFC_SIGNTYPE_T *,CCfc::CFC_PLTYPE_T *) .text 000000000010584C 000000BC . . . . . . .
Let's hope that this isn't some sort of public-key crypto, or some patching will be needed...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2014, 03:00:54 pm
WINDOWS VERSION GUI  (No need PHP)

DOWNLOAD ----> http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip) (about 12MB - it contains utils)

Hi Daves,

you program give me an error message.
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=83814;image)

We found the necessary exif values for the calculation of atmosphere transmissivity influence in Flir Images.

see my post with an Excel sample here
 http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)

the excel calculated temperature is 100% identical with a Flir Tools csv temperature file


I checked the 4x4 radiometric Image (4x4-0m.jpg) with BFIC and I get a wrong temperature range (-12,1°C ... +125,4°C)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=83816;image)

Flir Tools gives -15,059 ... +129,157 (see exported 4x4-0.csv.txt )

As Attachment a Excel Sheet with all necessary calculations.
further informations see here http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on March 03, 2014, 03:10:13 pm
FLIR Systems’ Customer Survey 2014 - E-series

I think they got several feedbacks like this (see attachment).... Thanks again taucher and mike.

I can´t for the final page with field "general comments" or so.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 03, 2014, 03:36:53 pm
you program give me an error message
Damn stupid message ! Please ignore it, I will remove it in the next release together with some minor bug fixes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2014, 03:59:19 pm
you program give me an error message
Damn stupid message ! Please ignore it, I will remove it in the next release together with some minor bug fixes.
Please check my excel sheet, the calculations with atmosphere transmissivity are a great improvement.

furthermore the current cersion of exiftool readout the measuring points ( a great hack from Phil Harvey  :-+ )
Code: [Select]
>exiftool -meas* FLIR0232-Tools.jpg
Meas 1 Type                     : Spot
Meas 1 Params                   : 152 111
Meas 1 Label                    : Sp1
Meas 2 Type                     : Line
Meas 2 Params                   : 181 157 291 149
Meas 2 Label                    : Li1
Meas 3 Type                     : Area
Meas 3 Params                   : 211 5 40 27
Meas 3 Label                    : Ar1
Meas 4 Type                     : Ellipse
Meas 4 Params                   : 105 177 151 177 105 153
Meas 4 Label                    : El1
Meas 5 Type                     : Difference
Meas 5 Params                   : 2 1 2 3 1 2
Meas 5 Label                    : Dt1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 03, 2014, 05:54:01 pm
Please check my excel sheet, the calculations with atmosphere transmissivity are a great improvement.
...
furthermore the current version of exiftool readout the measuring points ( a great hack from Phil Harvey  :-+ )

Sure, I have it on todo list. But these are more complex things, requiring more time to implement. So it will not appear in the next release.
I spent many hours on BFIC, so now I need to push other projects a bit too. Then I will get back to BFIC again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on March 03, 2014, 06:11:06 pm
Hi, I feel as if my photos where out of focus, specially the normal camera. What do you think?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 03, 2014, 06:55:07 pm
Hi, I feel as if my photos where out of focus, specially the normal camera. What do you think?

Your doing very wide far away outdoor shots with a camera that has a very low resolution when compared to even a cheap cell phone now a days. It's not going to look great. Try a closer subject to see if you can get more detail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 03, 2014, 07:28:19 pm
Please check my excel sheet, the calculations with atmosphere transmissivity are a great improvement.

Are these improvements able to be made available in your flir.php as well or is to complex for that method or needs to be done another way?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2014, 08:19:02 pm
exiftool can decode this new tags since two days
I will complete the flir.php the next days...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 03, 2014, 09:25:37 pm
exiftool can decode this new tags since two days
I will complete the flir.php the next days...

Very good news!  :-+

I look forward to comparing the differences.
I also noticed that the the v2 of your script does not include the panoramic fixes that you posted about here:

I changed flir.php from
Code: [Select]
exec($convert." raw.png -fx \"($B/ln($R1/($R2*(65535*u+$O))+$F)-$Smin)/$Sdelta\" ir.png");
to
Code: [Select]
// check RAW value > |Planck Offset|
// x?y:z  Imagemagick ternary conditional expression, returns value y if x > 0, otherwise z
exec($convert." raw.png -fx \"($B/ln($R1/($R2*((65535*u+$O)?(65535*u+$O):1))+$F)-$Smin)/$Sdelta\" ir.png");

Does this fix make the images some how inferior to the method in your v2 script?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on March 03, 2014, 09:46:43 pm
Quote
Your doing very wide far away outdoor shots with a camera that has a very low resolution when compared to even a cheap cell phone now a days. It's not going to look great. Try a closer subject to see if you can get more detail.

Would you please check these closer ones. The normal camera really looks super cheap.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 03, 2014, 10:31:30 pm
Would you please check these closer ones. The normal camera really looks super cheap.

Looks like mine does. I think your fine.
Keep in mind - there are no auto focus optics in the E4 visible light camera like many cell phones have. It's a single focus 640x480 camera like many old web cam's. It's just there to provide extra MSX definition to the even lower spec'ed thermal camera. At 640x480 it has 4 times the pixels then the "upgraded" E4 thermal sensor. If that's not enough it may be time to look into a E40 or better unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2014, 10:40:45 pm
I also noticed that the the v2 of your script does not include the panoramic fixes that you posted about here:

you are right, the flir.php is only a template for own adaptations (proof of concept)
... but I collect all infos in my "changes and enhancements"
reading radiometric image with Exiftool + ImageMagick (without flir tools)

changes and enhancements
  • see this post for invalid RAW values
    https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356008/#msg356008 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356008/#msg356008)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 03, 2014, 10:53:31 pm
I also noticed that the the v2 of your script does not include the panoramic fixes that you posted about here:

you are right, the flir.php is only a template for own adaptations (proof of concept)
... but I collect all infos in my "changes and enhancements"
reading radiometric image with Exiftool + ImageMagick (without flir tools)

changes and enhancements
  • see this post for invalid RAW values
    https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356008/#msg356008 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356008/#msg356008)

Good to know! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yama13 on March 04, 2014, 01:04:00 am
First post.  I recently bought an E4.  I enjoy reading about the incredible things you guys are doing with the model – kudos to all.

In my case, I don’t plan to hack it (at least for now), because I tried it out as received, and feel it’s good enough for my use (again, for now), which is just to check things around the house – the MSX feature makes it easy to figure out what I’m looking at versus a bunch of fuzz bunnies.  I purchased it knowing it may end up being a 1.21 unit, but I felt it was a good deal anyway.

I just wanted to contribute the info for mine to the “database.”  I ordered it online on February 19.  It was shipped on the 20th (there was no backorder, so it obviously came from existing stock), and I received it on the 25.

To my surprise, here is the info:

Serial 6391 1xxx
E4 1.1
Firmware 1.19.8
Calibration 1/24/14

I do have one question.  I have not hooked it up to Flir Tools as yet, and I have read it phones home when you hook the camera up.  I assume the software doesn’t “force” an update in any way, does it?  I assume if anything, it just notifies me that an update is available, but gives me the option?  I’m not going to do the hack now, but want to keep options open.

KEEP UP THE GREAT WORK! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 04, 2014, 02:09:27 am
In my case, I don’t plan to hack it (at least for now), because I tried it out as received, and feel it’s good enough for my use (again, for now), which is just to check things around the house – the MSX feature makes it easy to figure out what I’m looking at versus a bunch of fuzz bunnies.  I purchased it knowing it may end up being a 1.21 unit, but I felt it was a good deal anyway.

The resolution mod is so safe you really ought to do it. Use Taucher's EZCRC01 tool to create one file, e8.cfg, and upload it to the right config directory on the E4 and yer in.

There is a new version of FLIR Tools up (4.1.14052.1001) as of late February, so it may be safest to go the RNDIS route?

Hmmm... Noticed on the FLIR home page at that there's a picture of an E4 inspecting an electrical enclosure. That image on its screen looks awfully clear to be only 80x60. Would FLIR use an "enhanced" E4 on their web page?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jkrump on March 04, 2014, 02:17:26 am
I feel like I've arrived late to the party! I just got my E4, and it will serve my purposes but the higher res sure would've been nice to look at! I'll stay subscribed here just in case anyone posts a breakthrough on 1.21. For posterity's sake, here are the details:

Model: E4 1.1L 63901-0101
Serial: 639149XX
Purchased: 2/20/14 via Amazon
Received: 3/4/14
Programmed: 2/17/14 in Estonia
Version: 1.21.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yama13 on March 04, 2014, 02:52:42 am
@RAWebb.

About the image of the panel, it looks like what I see when I look at my panel - the MSX pretty much negates (for me, and for now) the need to increase the thermal resolution, as I can readily make out what I'm looking at.  You can tell it's still the 80x60 because of all the pixelation of the background (esp in the blue areas) which you wouldn't get with the higher rez thermal image.

I also notice the ambient lighting also makes a big difference in how everything looks.  The dimmer the ambient lighting, the more pixelated the thermal part looks - and obviously the less detail MSX is able to pick up and integrate.  It appears that the "regular" cam side is not the best at picking up detail at lower ambient light levels.  This would probably be the one reason to make me switch - when the lighting is low, the combined image isn't that great, so a higher rez thermal image from the getgo would definitely make a difference.  And yet, I haven't really found it necessary in my use to be concerned with lower light levels - it's just when playing to learn the limits.

I may end up doing at least the rez mod eventually though - that's why I want to make sure that plugging it in to Flir Tools will not force any kind of updating.

I feel I really lucked out with the 1.19 considering how "late" in the game I was, so don't want to lose that option.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 04, 2014, 05:23:17 am
If you want to test something, you can send me a zip-file and some instructions.
try to copy the attached file e8.cfg to /FlashFS/system/appcore.d/config.d/
reset -> any changes?

I think the menu-hack should work, except zoom.

Sometimes the easy way is the easiest way.

i have tested, but no changes in any option:

first i put the e8cfg in the folder, reset to factory-> no changes
next i delete the old conf.cfc-file, reset to factory->no changes

Should it work, when i put the removed binaries in the TIC?(thomas123 said so)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 04, 2014, 06:22:21 am
try to copy the attached file e8.cfg to /FlashFS/system/appcore.d/config.d/
reset -> any changes?
it's nice, that you generate a valid cfg for his serial number  :)

but...
first i put the e8cfg in the folder, reset to factory-> no changes
next i delete the old conf.cfc-file, reset to factory->no changes

Should it work, when i put the removed binaries in the TIC?(thomas123 said so)

don't play around with delete/reset - you can seriously brick your camera !!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 04, 2014, 06:41:28 am
Should it work, when i put the removed binaries in the TIC?(thomas123 said so)

better idea,

Can you login to telnet?
Try this with binary from old fw
Code: [Select]
\FlashBFS\system>i2c.exe r AE FF
Open I2C device
I2C read command 57 FF returned: FF FF F9 99 40 1 F0 0 0 1 0 0 0 0 0 0 0 0 30 3 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0 46 4C 49 52 20 45 34 ....
and post the result

save your registers and post the zipped rls.txt
no panic, wait a minute
Code: [Select]
> rls -r -l > /FlashIFS/rls.txt

furthermore copy prodapp.exe to /FlashFS/system and try this
Code: [Select]
// start the service mode app
> start prodapp
// wait some seconds and check process list
> ps
// if you see something like
// Process prodapp.EXE     ( 3 threads), id 0x0552005E, loaded at 0x00010000
// try high resolution mode
> rset prod.preparation.command restartHighRes

post your terminal output

post files from FlashFS/tmp like
prod.log
Quote
14:17:32 Log restart ProdApp built:Mon Sep 16 13:56:38 2013 by:upalmer@SE-BRYGG5/ALPHA_1.9, build:15,  Detector:*
14:17:33 Found detectortype SB320 ISC0901, selecting detector S
14:17:33 Lens leExFOL7
...
14:17:38 ProdSpec:     0.4X
14:17:39 WARNING: Sensor system.tempsens.TShutterDigFilt2 is indicating 0 K
14:17:41  11 Preparation:All tasks reporting ready
14:17:41  12 Preparation:Image frequency 9
14:17:44 Using .image.flow.detector.TFpa to check tempstable
14:22:33 WARNING: Sensor system.tempsens.TShutterDigFilt2 seems to be frozen at 0
and with successful command restartHighRes you get the 320x240 resolution
Quote
01:40:08  13 Preparation:---------------Command restartHighRes received
01:40:10 Using .image.flow.detector.TFpa to check tempstable
01:40:16  15 Preparation:Restarting in high resolution mode/service mode
01:40:16  16 Preparation:Command restartHighRes, result 0

I missed this folder in your FLIR_BACKUP

!! don't delete/change original files !!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 04, 2014, 07:21:44 am
I will check this today (when i'm back from job)

Good to know about bricking my TIC in this way. This Device has some trouble sometimes with flipping/rotating display after start with usb-cord on it or after pressing power for longer than a click(right before i was activating the Network-Mode for the first time) So i will play around a while with this device a send it back on next Weekend.

If there is a solution to see for hack, i change to a new one. Else i want my money back and look for an hackable one.

How does telnet works on the device? Do i need any special software for the Win7-PC?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 04, 2014, 09:04:58 am
I don't believe, that restartHighRes works.
This command generates a "high resolution" config file from a template with an old CRC01 checksum...

for telnet use putty.exe
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html)

step by step

This Device has some trouble sometimes with flipping/rotating display after start with usb-cord on it or after pressing power for longer than a click
this is certainly not a hardware defect
make a photo from this
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 04, 2014, 12:26:24 pm
I will check this today (when i'm back from job)

Good to know about bricking my TIC in this way. This Device has some trouble sometimes with flipping/rotating display after start with usb-cord on it or after pressing power for longer than a click(right before i was activating the Network-Mode for the first time) So i will play around a while with this device a send it back on next Weekend.

If there is a solution to see for hack, i change to a new one. Else i want my money back and look for an hackable one.

How does telnet works on the device? Do i need any special software for the Win7-PC?
Telnet is not installed by default in Win7 but it can be enabled - don;t recall how but googling telnet win7 should find it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 04, 2014, 12:30:22 pm
Please check my excel sheet, the calculations with atmosphere transmissivity are a great improvement.

Are these improvements able to be made available in your flir.php as well or is to complex for that method or needs to be done another way?
done  :phew:

download new flir.php script here https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

as attachment my two "flir radiometric jpg" 4x4 Pixel samples with 0m and 100m distance to object

Output for Distance = 0m
Code: [Select]
.\php\php flir.php --resize 640x480 -i 4x4-0m.jpg -o result_0m.jpg
...
wrote "result_0m.jpg" with Temp-Range: -15.1 / 129.2 degree Celsius

for 100m with overwritten distance
Code: [Select]
>.\php\php flir.php --resize 640x480 --dist 100 -i 4x4-0m.jpg -o result_100m.jpg
...
wrote "result_100m.jpg" with Temp-Range: -18.0 / 134.4 degree Celsius

or with 100 m embedded distance 
Code: [Select]
>.\php\php flir.php --resize 640x480 -i 4x4-100m.jpg -o result_100m.jpg
...
wrote "result_100m.jpg" with Temp-Range: -18.0 / 134.4 degree Celsius

see here for further informations about calculations
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)

now flir.php calculations are 100% identical with Flir Tools temperature csv export
we need 15 parameters for temperature calculations
Code: [Select]
$ exiftool -Atm* -Planck* -Object* -Emis* -Reflected* -Relativ* 4x4-100m.jpg
Atmospheric Temperature         : 20.0 C
Atmospheric Trans Alpha 1       : 0.006569
Atmospheric Trans Alpha 2       : 0.012620
Atmospheric Trans Beta 1        : -0.002276
Atmospheric Trans Beta 2        : -0.006670
Atmospheric Trans X             : 1.900000
Planck R1                       : 14168.402
Planck B                        : 1386
Planck F                        : 2.5
Planck O                        : -7363
Planck R2                       : 0.026881648
Object Distance                 : 100.00 m
Emissivity                      : 0.95
Reflected Apparent Temperature  : 30.0 C
Relative Humidity               : 50.0 %
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on March 04, 2014, 12:32:00 pm
Control Panel / Programs and Features / Turn Windows Features On or Off / Tick Telnet Client.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 04, 2014, 08:10:46 pm
Should it work, when i put the removed binaries in the TIC?(thomas123 said so)

better idea,

Can you login to telnet?
Try this with binary from old fw
Code: [Select]
\FlashBFS\system>i2c.exe r AE FF
Open I2C device
I2C read command 57 FF returned: FF FF F9 99 40 1 F0 0 0 1 0 0 0 0 0 0 0 0 30 3 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0 46 4C 49 52 20 45 34 ....
and post the result

save your registers and post the zipped rls.txt
no panic, wait a minute
Code: [Select]
> rls -r -l > /FlashIFS/rls.txt

furthermore copy prodapp.exe to /FlashFS/system and try this
Code: [Select]
// start the service mode app
> start prodapp
// wait some seconds and check process list
> ps
// if you see something like
// Process prodapp.EXE     ( 3 threads), id 0x0552005E, loaded at 0x00010000
// try high resolution mode
> rset prod.preparation.command restartHighRes

post your terminal output

post files from FlashFS/tmp like
prod.log
Quote
14:17:32 Log restart ProdApp built:Mon Sep 16 13:56:38 2013 by:upalmer@SE-BRYGG5/ALPHA_1.9, build:15,  Detector:*
14:17:33 Found detectortype SB320 ISC0901, selecting detector S
14:17:33 Lens leExFOL7
...
14:17:38 ProdSpec:     0.4X
14:17:39 WARNING: Sensor system.tempsens.TShutterDigFilt2 is indicating 0 K
14:17:41  11 Preparation:All tasks reporting ready
14:17:41  12 Preparation:Image frequency 9
14:17:44 Using .image.flow.detector.TFpa to check tempstable
14:22:33 WARNING: Sensor system.tempsens.TShutterDigFilt2 seems to be frozen at 0
and with successful command restartHighRes you get the 320x240 resolution
Quote
01:40:08  13 Preparation:---------------Command restartHighRes received
01:40:10 Using .image.flow.detector.TFpa to check tempstable
01:40:16  15 Preparation:Restarting in high resolution mode/service mode
01:40:16  16 Preparation:Command restartHighRes, result 0

I missed this folder in your FLIR_BACKUP

!! don't delete/change original files !!

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------

Hello tomas


telnet was fine:
copy i2c and get this back:
Code: [Select]
\FlashBFS\system>i2c.exe r AE FF
Open I2C device
I2C read command 57 FF returned: CA 54 31 39 38 32 38 33 0 0 0 32 30 31 33 36 30 31 36 0 0 31 31 0 0 0 0 0 0 0 0 ED 9C FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF A F4 3C 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 46 F4 54 31 39 38 33 30 34 0 0 0 36 33 38 31 33 38 30 38 0 0 30 31 0 0 FF FF FF FF FF FF F2 9F 50 0 3C 0 0 1 0 0 0 0 0 0 0 0 8C 1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0 46 4C 49 52 20 45 34 0 0 0 0 0 0 0 0 0 0 0 0 0 36 33 39 30 31 2D 30 31 30 31 0 0 0 0 0 0 36 33 39 31 34 37 35 32 0 0 32 30 31 34 2D 30 32 2D 31 33 0 0 30 31 0 0

(is in attached i2c.txt)

next i do this rls-thing. file is attached rls.txt

last i do your prodapp-instructions an after a couple of minutes, there was a new tmp-folder with the log-File.
Quote
2014-03-04 20:38:40 Log restart ProdApp built:Mon Sep 16 13:56:38 2013 by:upalmer@SE-BRYGG5/ALPHA_1.9, build:15, Core:63813808, Detector:*
2014-03-04 20:38:40 Found detectortype SB320 ISC0901, selecting detector S
2014-03-04 20:38:40 Lens leExFOL7
2014-03-04 20:38:40 Found osimgkit ASCO OS image, selecting Cameratype Z, Web-Addon Z3
2014-03-04 20:38:40 WARNING Failed to update \FlashBFS\system/web/inc for Z3
2014-03-04 20:38:40 ERROR: No Configuration name found. Bad camera serial number ??[64]
2014-03-04 20:38:40 Configuration name: ""
2014-03-04 20:38:41 Deleted 0 \FlashIFS\tmp\*.fff files
2014-03-04 20:38:41
2014-03-04 20:38:41 FLIR E4       63901-0101     63914752 
2014-03-04 20:38:41 --- Software combinations ---
2014-03-04 20:38:41 swcombination    1.21.0
2014-03-04 20:38:41 appkit           1.0.16     10-Jan-2014
2014-03-04 20:38:41 confkit         E4 1.1L     25-Oct-2013
2014-03-04 20:38:41 osimgkit        16.0.12     2013-11-26
2014-03-04 20:38:41 prodkit               0     12-Feb-2014
2014-03-04 20:38:41 --- Software components ---
2014-03-04 20:38:41 AppCore         22.0.0.1     01-Dec-2013      upalmer@SE-BRYGG5/ALPHA_1.9   
2014-03-04 20:38:41 AppServices     22.0.0.1     23-Apr-2013      upalmer@SE-BRYGG5/ALPHA_1.9   
2014-03-04 20:38:41 Bootloader      16.1.5.0     -                FLIR                         
2014-03-04 20:38:41 ResMon          22.0.0.1     23-Apr-2013      upalmer@SE-BRYGG5/ALPHA_1.9   
2014-03-04 20:38:41 WinCE            6.0.0.0     2005             Microsoft                     
2014-03-04 20:38:41 appcore_dll      1.9.0.1     23-Apr-2013      upalmer@SE-BRYGG5             
2014-03-04 20:38:41 common_dll       1.9.0.7     10-Jan-2014      upalmer@SE-BRYGG5             
2014-03-04 20:38:41 facet_core      22.0.0.1     25-Nov-2013      upalmer@SE-BRYGG5/ALPHA_1.9   
2014-03-04 20:38:41 facet_ui_qml    22.0.0.1     25-Nov-2013      upalmer@SE-BRYGG5/ALPHA_1.9   
2014-03-04 20:38:41 fvd            16.0.47.0     Oct  8 2013      upalmer@SE-BRYGG4             
2014-03-04 20:38:41 --- Firmware components ---
2014-03-04 20:38:41 IRDM             0.0.1.0     -                -                             
2014-03-04 20:38:41 POLLUX           0.1.0.0     20-Sep-2013      FLIR                         
2014-03-04 20:38:41 POLLUX_FPGA     8.1.25.0     -                FLIR                         
2014-03-04 20:38:41 --- Configuration ---
2014-03-04 20:38:41                       
2014-03-04 20:38:41 ProdSpec:     0.51
2014-03-04 20:38:41 Calibration:  1.22 2014-02-07 11:18:55
2014-03-04 20:38:41 Torrent version:
2014-03-04 20:38:41 Release: 22
2014-03-04 20:38:41
2014-03-04 20:38:41 No \FlashFS\system\prodresult.rsc found
2014-03-04 20:38:41 No ResLogList found
2014-03-04 20:38:41 Information: Unable to Open ".prodSpec.general.config.PPrDir" retcode ab010008
2014-03-04 20:38:41 WARNING: Sensor system.tempsens.TShutterDigFilt2 is indicating 0 K
2014-03-04 20:38:46  13 Preparation:All tasks reporting ready
2014-03-04 20:38:46  14 Preparation:Image frequency 9
2014-03-04 20:38:50 Using .image.flow.detector.TFpa to check tempstable
2014-03-04 20:39:53  15 Preparation:---------------Command restartHighRes received
2014-03-04 20:39:53  16 Preparation:Target noise set to 0
2014-03-04 20:40:00  17 Preparation:Restarting in high resolution mode/service mode
2014-03-04 20:40:00  18 Preparation:Command restartHighRes, result 0
2014-03-04 20:43:40 WARNING: Sensor system.tempsens.TShutterDigFilt2 seems to be frozen at 0
2014-03-04 20:57:30 Battery: 34 % remaning, Charging off

 Last thing: i shot a thermal foto with full 320x240 :-+ , but lost the MSX-Option
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 04, 2014, 08:36:56 pm
One thing I noticed in the prod.log:
Quote
2014-03-04 20:38:40 ERROR: No Configuration name found. Bad camera serial number ??[64]
2014-03-04 20:38:40 Configuration name: ""

@ Rainer: Did you put the original conf.cfc back or is it still missing? Maybe that's why the MSX option is missing.
Or does it only disappear after you enable high resolution mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 04, 2014, 08:41:38 pm
conf.cfc is right in place.

MSX-Option was working fine until to the high-Res-Mode activation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 04, 2014, 08:51:18 pm
Anyone interested in getting an E4 with the 1.19.8 firmware in the US, I just got one today (shipped immediately when ordered) please PM me.  I don't want to post a link, because people have started to buy them all up and then resell them on eBay for a profit, and that makes me angry  :wtf:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 04, 2014, 09:04:35 pm
Last thing: i shot a thermal foto with full 320x240 :-+ , but lost the MSX-Option

Well ain't that a wee little kick in the junk?  :-DD

Mind posting a shot?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 04, 2014, 11:39:36 pm
Last thing: i shot a thermal foto with full 320x240 :-+ , but lost the MSX-Option

It is hardly believable that is was so simple
please post an image

in the next step we can edit your startup script applaunch.dat
please wait patiently until I saw an image

unfortunately i2c.exe dumps only the first 256 Byte from EEPROM
Code: [Select]
$ cat i2c.txt | gawk '{for(i=1; i <=NF; i=i+1) {tmp="00"$(i);tmp=sprintf ("%s",substr(tmp,length(tmp)-1)); printf " %s", tmp }}'| xxd -r -p | hexdump -C -v
00000000  ca 54 31 39 38 32 38 33  00 00 00 32 30 31 33 36  |.T198283...20136|
00000010  30 31 36 00 00 31 31 00  00 00 00 00 00 00 00 ed  |016..11.........|
00000020  9c ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000040  ff 0a f4 3c 00 00 00 00  00 00 00 00 00 00 00 00  |...<............|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 46  |...............F|
00000060  f4 54 31 39 38 33 30 34  00 00 00 36 33 38 31 33  |.T198304...63813|
00000070  38 30 38 00 00 30 31 00  00 ff ff ff ff ff ff f2  |808..01.........|
00000080  9f 50 00 3c 00 00 01 00  00 00 00 00 00 00 00 8c  |.P.<............|
00000090  01 ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
000000a0  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
000000b0  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
000000c0  00 46 4c 49 52 20 45 34  00 00 00 00 00 00 00 00  |.FLIR E4........|
000000d0  00 00 00 00 00 36 33 39  30 31 2d 30 31 30 31 00  |.....63901-0101.|
000000e0  00 00 00 00 00 36 33 39  31 34 37 35 32 00 00 32  |.....63914752..2|
000000f0  30 31 34 2d 30 32 2d 31  33 00 00 30 31 00 00     |014-02-13..01..|


but we see the changes in format with a I2C dump from FW 1.19
Code: [Select]
>cat 1.txt | awk "{for(i=1; i <=NF; i=i+1) {tmp=sprintf (\"%s \",\"0x\"$(i)); printf \"%c\", strtonum(tmp) }}" | hexdump -n
00000000: 40 01 F0 00 00 01 00 00 - 00 00 00 00 00 00 30 03 |@             0 |
00000010: FF FF FF FF FF FF FF FF - FF FF FF FF FF FF FF FF |                |
00000020: FF FF FF FF FF FF FF FF - FF FF FF FF FF FF FF FF |                |
00000030: FF FF FF FF FF FF FF FF - FF FF FF FF FF FF FF 00 |                |
00000040: 46 4C 49 52 20 45 34 00 - 00 00 00 00 00 00 00 00 |FLIR E4         |
00000050: 00 00 00 00 36 33 39 30 - 31 02 0D 30 31 30 31 00 |    63901  0101 |
00000060: 00 00 00 00 00 36 33 39 - 30 30 30 30 30 00 00 32 |     6390xxxx  2|
00000070: 30 31 33 2D 31 31 2D 30 - 30 00 00 30 31 00 00 E1 |013-11-xx  01   |
00000080: D4 54 31 39 38 32 38 33 - 00 00 00 31 39 39 35 30 | T198283   1995x|
00000090: 30 30 30 00 00 30 39 00 - 00 00 00 00 00 00 00 F9 |xxx  09         |
000000a0: AD FF FF FF FF FF FF FF - FF FF FF FF FF FF FF FF |                |
000000b0: FF FF FF FF FF FF FF FF - FF FF FF FF FF FF FF FF |                |
000000c0: FF 0B 15 7D 00 00 00 00 - 00 00 00 00 00 00 00 00 |   }            |
000000d0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 88 |                |
000000e0: 15 54 31 39 38 33 30 34 - 00 00 00 36 33 38 30 30 | T198304   6380x|
000000f0: 30 30 30 00 00 30 31 00 - 00 FF FF FF FF FF FF F9 |xxx  01         |
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 04, 2014, 11:50:33 pm
unfortunately i2c.exe dumps only the first 256 Byte from EEPROM
From memory I think i2c.exe doesn't know about eeproms specifically, so you need to use a write+read operation to write the address first before reading the data - if you just do a read it may be reading a random page.
I don't recall the syntax but it's fairly obvious from the /? help
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 05, 2014, 12:32:30 am
if you just do a read it may be reading a random page.
Oops!  :-[

if I compare the output ... then you have right, its only a offset

@Rainer
after activating the high res mode there are some new files in folder
/Temp
/Temp/appcore.d
please post this files

did you have a folder \mod\servicemode\appcore.d\ ??




first check of your rls
differences to FW 1.19
Code: [Select]
.caps.config: (3)
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name                          ""    // empty configuration name!!!

.caps.config.image.settings: (4)
r---r--------- 0 root   root   <i> IRheight                      60 //no high res mode
r---r--------- 0 root   root   <i> IRwidth                       80

.caps.config.image.targetNoise: (2)
r---r--------- 0 root   root   <b> enabled                    false
r---r--------- 0 root   root   <i> targetNoiseMk                  0 //where is the noise generator?

.dump: (6)
rw--r---r----- 0 root   root   <b> commit                     false
rw--r---r----- 0 root   root   <a> file            "\mod\servicemode\appcore.d\factory.d" //a new folder

.registry.system: (2)
rw-dr---r----- 0 registry factory <a> usbmode                "UVC_MSD"  // RNDIS

.version: (8)
r---r---r----- 0 root   root   <a> SUID            "2A4BD5020080241B"  // this is a new number
did you saved this file before you gone to the service mode?
odd


PS: If you are right with successful activated resolution 320x240 (send an image):
Copy the e8.cfg to folder "FlashFS/system/service/appcore.d"
and then try to start the highres mode. (don't delete conf.cfg in this folder)
...check msx function



My guess is a bad news:

you have no valid configuration file,
your resolution is furthermore 80x60,
but you killed the noise generator and the image looks better

Code: [Select]
2014-03-04 20:38:40 ERROR: No Configuration name found. Bad camera serial number ??[64]
2014-03-04 20:38:40 Configuration name: ""

good news: you started binaries from an old version -> let's wait of a hack from Taucher

step-by-step (please send the requested files)

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 05, 2014, 07:18:27 am
Now i'm fully confused?¿

Have a look to my pictures in FLIR_BACKUP. The Thermal-Fotos are already in 320x240? Did the TIC store the 80x60 in a higher resolution? Or is this a side-effect of the rotating-display?

There are some newer files. I will post them later today(i'm at work now).

EDIT:

I did all the things in the way you instructed me. So i do the rls right before copy and run the prodapp.exe. Today afternoon, i want to make a second rls-textfile after prodapp and check the resolution in the TIC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on March 05, 2014, 08:29:10 am
Now i'm fully confused?
Perfectly normal. It's the human condition.

Quote
The Thermal-Fotos are already in 320x240? Did the TIC store the 80x60 in a higher resolution?
Also perfectly normal. A standard E4 will also save the image at 320x240 resolution. Even when only 80x60 thermal pixels are available. This behavior is probably described somewhere in the manual that I didn't read.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 05, 2014, 08:38:36 am
The saved .jpg file has always a resolution of 320 x 240 pixels (at least with the Ex-series). Crucial is the resolution of the embedded thermal image.

The easiest way to tell the real thermal resolution: Turn your TIC on, open the gallery, open a saved image, open the menu and choose "Info" (english: "Information"). There should be a line that says "Infrarotauflösung" (english: "Thermal resolution"). Please tell us what it says :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2014, 10:58:24 am
The issue of how the E4 generates its 80x60 thermal image for display at 320x240 was disscussed way back in this thread and is likely well buried by now.

The Ex series cameras are calibrated at 320x240 with all microbolometer pixels active. The 320x240 pixel microbolometer output is then processed by the platforms chipset to produce the specific models resolution. In the case of the E4, it is believed that the chipset carries out a 4x4 pixel clustering and averaging function, effectively using 16 true pixels to produce 1 'E4 pixel' for display on the camera. This technique would also make it possible to use microbolometers that have many dead pixels as the 4x4 pixel averaging could use the remaining good piixels in a 'cluster' to produce a meaningful output. From what I have seen, most E4 microbolometers meet the manufactureers 99.8% functional pixels spec so this is less of an issue for us anyway.

The Ex series will always produce a 320x240 output image no matter what thermal resolution it is producing after pixels clustering.

Why didn't FLIR just use the central 80x60 pixels of the Microbolometer ? Well that makes life difficult on the hardware front. It is very likely that the same thermal lens is used on all models. As such, the lenses illumination of the microbolometer remains the same with all 320x240 pixels 'in play'. If only the central 80x60 pixels were used, it would produce an electronic zoom like function and the resulting Field of View for the camera would change. All Ex series cameras have the same field of view and FLIR realised that processing the 320x240 thermal image to produce lower resolution images eneabled them to use a single lens rather than different lenses for each model. For FLIR it was also offereing the benefit of a single hardware platform that could be configured to any specification, purely through software with only labelling differences. A pretty good business model for the 'bean counters'.

With the arrival of the 'FLIR One' and its new imaging chip, future FLIR low resolution cameras may sadly use the same low resolution chip, making an upgrade no longer viable due to hardware limitations rather than software lock-downs. The E4 cameras are likely to be the best 'bang per buck' cameras to have ever been produced, as a direct result of the common hardware platform and ease of upgrade. I doubt we will see such a 'mistake' again in future models. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 05, 2014, 04:00:03 pm
1. : I checked the old pictures  :-- (80x60)

2. : I delete them, made a hard reset(with battery) and after that, i delete the prodapp in the FlashFS/system
3. : I copied the prodapp in FlashBFS/system,
4. : I call rls to make the rls1.txt
5.: I start the prodapp in FlasBFS ->ps says prodapp is running with 18 threads
6.: I call rls to make the rls2.txt
7.: I made a thermal foto, but is only in 80x60
8.: I check the sensor resolution with telnet ->80x60

------------------------------------------------------------------------
Now i go on to the next level

Welcome to the Windows CE Telnet Service on IRCAM4752
Code: [Select]
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>set PATH=\windows;\FlashBFS\system\;
Bad command or filename

\>set PATH=\windows;\FlashBFS\system\;
Bad command or filename

\>set PATH=\windows;
\>set PATH=\windows;\FlashBFS\system\;

\>rset .watchdog.enable false
rset: .watchdog.enable: bad data

\>rset .watchdog.enable false
rset: .watchdog.enable: bad data

\>rset .services.log.active false

\>ps -k uicore
\>ps -k Gui
\>ps -k Prod
\>ps -k prod
\>ps -k MediaServer
\>ps -k appcore
Failed to terminate process 0x4D20002 (170)

\>ps -k AppServices
Successfully terminated process 0x76E0002

\>ps -k Resmon
Successfully terminated process 0x79A0002

\>ps -k Bit
\>ps -k syslog
\>ps -k Cam
\>ps -k cam
\>ps -k geni
\>ps -k dig
\>ps -k Dig
\>ps -k watch
\>ps -k Watch
\>ps -k RTP
\>ps -k fwa
\>ps -k progress
\>ps -k Med
\>ps -k appcore

\>start appcore19.exe

\>ps
Process NK.EXE          (64 threads), id 0x00400002, loaded at 0x80100000
Process udevice.exe     ( 2 threads), id 0x01510002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x015E0002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x01F20002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x03230002, loaded at 0x00010000
Process servicesd.exe   (14 threads), id 0x03820002, loaded at 0x00010000
Process ChargeApp.exe   ( 1 threads), id 0x046E0002, loaded at 0x00010000
Process cmd.exe         ( 1 threads), id 0x04C50002, loaded at 0x00010000
Process CMD.EXE         ( 1 threads), id 0x08EF002E, loaded at 0x00010000
Process appcore19.exe   (35 threads), id 0x05050036, loaded at 0x00010000
Process AppServices.exe (15 threads), id 0x04DF0166, loaded at 0x00010000
Process Resmon.exe      (14 threads), id 0x0778000A, loaded at 0x00010000
Process ps.EXE          ( 1 threads), id 0x082E019A, loaded at 0x00010000

\>start prodapp

\>ps
Process NK.EXE          (64 threads), id 0x00400002, loaded at 0x80100000
Process udevice.exe     ( 2 threads), id 0x01510002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x015E0002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x01F20002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x03230002, loaded at 0x00010000
Process servicesd.exe   (14 threads), id 0x03820002, loaded at 0x00010000
Process ChargeApp.exe   ( 1 threads), id 0x046E0002, loaded at 0x00010000
Process cmd.exe         ( 1 threads), id 0x04C50002, loaded at 0x00010000
Process CMD.EXE         ( 1 threads), id 0x08EF002E, loaded at 0x00010000
Process appcore19.exe   (36 threads), id 0x05050036, loaded at 0x00010000
Process AppServices.exe (15 threads), id 0x04DF0166, loaded at 0x00010000
Process Resmon.exe      (14 threads), id 0x0778000A, loaded at 0x00010000
Process prodapp.EXE     (18 threads), id 0x096802F6, loaded at 0x00010000
Process ps.EXE          ( 1 threads), id 0x096C0302, loaded at 0x00010000

last thing: i start prodapp and set the prodapp-parameter

Code: [Select]
\>rset prod.preparation.command restartHighRes

\>rls -l .caps.config.image.settings
.caps.config.image.settings: (4)
r---r--------- 0 root   root   <i> IRheight                      60
r---r--------- 0 root   root   <i> IRwidth                       80
r---r--------- 0 root   root   <b> allowForcedCase            false
r---r--------- 0 root   root   <b> enabled                     true

------------------------------------------------------------------------------------------

Oops, i copied the e8.cfg in the wrong folder. Next try:

Code: [Select]
Welcome to the Windows CE Telnet Service on IRCAM4752
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>set PATH=\windows;\FlashBFS\system\;
Bad command or filename
\>set PATH=\windows;\FlashBFS\system\;
Bad command or filename

\>set PATH=\windows;

\>set PATH=\windows;\FlashBFS\system\;

\>rset .watchdog.enable false
rset: .watchdog.enable: bad data

\>rset .watchdog.enable FALSE
rset: .watchdog.enable: bad data

\>rset .services.log.active false

\>ps -k uicore
\>ps -k Gui
\>ps -k Prod
\>ps -k prod
\>ps -k MediaServer
\>ps -k appcore
Failed to terminate process 0x4D20002 (170)
\>ps -k AppServices
Successfully terminated process 0x71C000A
\>ps -k appcore
\>ps -k Resmon
Successfully terminated process 0x75B000A
\>ps -k Bit
\>ps -k syslog
\>ps -k Cam
\>ps -k cam
\>ps -k geni
\>ps -k watch
\>ps -k Watch
\>ps -k dig
\>ps -k Dig
\>ps -k RTP
\>ps -k fwa
\>ps -k progress
\>ps -k Med

\>start appcore19.exe
\>start prodapp

\>ps
Process NK.EXE          (64 threads), id 0x00400002, loaded at 0x80100000
Process udevice.exe     ( 2 threads), id 0x01510002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x015E0002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x01F20002, loaded at 0x00010000
Process udevice.exe     ( 1 threads), id 0x03230002, loaded at 0x00010000
Process servicesd.exe   (16 threads), id 0x03710002, loaded at 0x00010000
Process ChargeApp.exe   ( 1 threads), id 0x046E0002, loaded at 0x00010000
Process cmd.exe         ( 1 threads), id 0x04C50002, loaded at 0x00010000
Process CMD.EXE         ( 1 threads), id 0x06912D2A, loaded at 0x00010000
Process appcore19.exe   (35 threads), id 0x0342003A, loaded at 0x00010000
Process AppServices.exe (15 threads), id 0x07FB0016, loaded at 0x00010000
Process Resmon.exe      (14 threads), id 0x06920016, loaded at 0x00010000
Process prodapp.EXE     ( 7 threads), id 0x06830636, loaded at 0x00010000
Process ps.EXE          ( 1 threads), id 0x096304D2, loaded at 0x00010000

\>rset prod.preparation.command restartHighRes

\>rls -l .caps.config.image.settings
.caps.config.image.settings: (4)
r---r--------- 0 root   root   <i> IRheight                      60
r---r--------- 0 root   root   <i> IRwidth                       80
r---r--------- 0 root   root   <b> allowForcedCase            false
r---r--------- 0 root   root   <b> enabled                     true

\>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 05, 2014, 06:09:36 pm
thanks for good work

now all informations make sense.

Code: [Select]
.caps.config: (3)
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name                "app E4 1.1"

I think your last rls from this post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg399587/#msg399587 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg399587/#msg399587)
Code: [Select]
.caps.config: (3)
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name                          ""    // empty configuration name!!!
runs without the conf.cfc file.
next i delete the old conf.cfc-file, reset to factory->no changes

you generated a nice "E4 self signed" config file in  \Temp\appcore.d\config.d\conf.cfg with old CRC01 key  :'(

some notes:
(1) don't start prodapp.exe (service mode) after appcore19.exe. This was one step to much.
(2) please make a rls with running appcore19.exe
(3) Works the camera GUI with appcore19.exe in process list fine? (take image, msx ..)

I have currently no new ideas but I think a downgrade is nearby
see this post
Un-Bricking an Ex + Version differences HW 1.0 <-> HW 1.1
but do nothing!! wait on Taucher
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2014, 06:57:41 pm
Please do not forget that the new E4 version is not HW1.1, it is 1.1L. I don't think the differences between HW 1.1 and 1.1L have been established yet. It was of concern to me that FLIR advised that I should not just install their 1.21.0 firmeware update, but rather, return the camera to them for a special upgrade ! We all know what the result of that action would have been, and FLIR would love to 'upgrade' my camera for me  ::)

The question has to be....has FLIR done something to the hardware platform to sabotage any attempt to increase resolution in firmware or OS ? It is also a possibility that the HW1.1L change is not about a resolution upgrade countermeasure, but rather a frame rate upgrade countermeasure  ;)

It would be very useful to compare images of Mike's V1.0 camera PCB and the newer V1.1 and  V1.1L PCB.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 05, 2014, 07:24:25 pm
Has anyone actually tried applying the original hack to the new cameras? I don't imagine it'll work, but I'm still curious as to what actually happens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 05, 2014, 07:26:58 pm
Ok, first off I strongly suggest to take a second look at my comparison old-new where I listed differences etc.

Any attempt to successfully modify a new firmware version would have to take a serious look at the NK.BIN - especially the contained applauncher.exe and anything FAD related!
There have been changes to the common_dll.dll (seems to contain all relevant classes) where the CFC stuff got added.

Regarding the SUID:
Suid.exe is just reading the SUID as HEX-Code (8 byte to hex / printf("%16.16llX")) from FAD1: (read 30 bytes) and printing it - my guess is it's either a serial number or some camera specific key to be used for encryption.
Note: if a SUID was not found then the exe shall return "00000000000000000000000000000000" (printf("%16.16llX",0)).

Also there's a ressource tree entry .version.SUID (thx to Thomas123 for pointing it out) ... so the suid.exe seems to be just for convenience.

@Applauncher - just take a look at the strings:
Code: [Select]
# CRC
VerifyHash - [CRC error] : done
VerifyHash - [CRC OK] : done
VerifyHash -[CRC%d] : not accepted
# %19s %x
CRC%d
VerifyHash - [CRC not trusted] : done
%S [size]
%S [CRC]
# doCRC %s %u %u
# doCRC
verifyCRC - cannot open %s
Bad Argument(s)! Use "applauncher" for help.
APPLAUNCHER: Not starting duplicate cmd.exe
%[^
cmd
%[^ #
%[^#
APPLAUNCHER: Refuses to run launch specification file. Aborting!
FAD call fails:%d hndl:%d err:%d
No integrity check necessary
Integrity: %d
FAD1:
Failed to open the launch specification file. Aborting!
cmd.exe
APPLAUNCHER: Usb charging finished
APPLAUNCHER: Starting usb charge App
ChargeAppFinished
ChargeApp.exe
Bad Argument! Use "applauncher" for help.
LaunchFileAlt
LaunchFile
Failed to open registry settings. Aborting!
SOFTWARE\FLIR Systems\Applauncher
%[0-9]
Usage: applauncher [options]
-f <filename> Execute commands in file <filename>
-r Execute file specified by registry setting.
(number) Automatic mode (OS internal).
CRC04
CRC03
CRC02
CRC01
CRC00
CRC32
AshIrV:
ZeP0a_K
RSDS
Those are most interesting to me:
AshIrV:
ZeP0a_K
RSDS
FAD1:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 05, 2014, 07:28:16 pm
Has anyone actually tried applying the original hack to the new cameras? I don't imagine it'll work, but I'm still curious as to what actually happens.
I think some of the the last posts were exactly on that topic- just read them a bit :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 05, 2014, 07:32:20 pm
All Tests with my TIC are tests with the 1.1L.

@tomas:
Quote
but do nothing!! wait on Taucher
This is not my best fortitude/strength... >:D

I do all the steps again but without the prodapp and generate a new rls for you.

The camera works fine with the appcore19. All normal E4-Options doing there job, but there are no extra menues or something like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 05, 2014, 07:54:58 pm
All Tests with my TIC are tests with the 1.1L.

@tomas:
Quote
but do nothing!! wait on Taucher
This is not my best fortitude/strength... >:D

I do all the steps again but without the prodapp and generate a new rls for you.

The camera works fine with the appcore19. All normal E4-Options doing there job, but there are no extra menues or something like that.
you can try the menu hack - it will not show all functions due to crippled caps - but extra colors should show.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2014, 08:03:49 pm
OK, I am about to show my ignorance of this platforms configuration so please be gentle with me.

If I am presented with two similar (near identical) embedded computers, one 'protected' from change, one not, I would look at a complete firmware and OS transplant to overcome the protection systems in the firmware. Now this would not be simple if there were calibration settings and CRC's in play but it would be a start.

In a perfect world the approch would be:

1. Take a complete firmware and OS image from an unprotected E4 (data donor)
2. Overwrite the protected firmware and OS on a protected E4 with the unprotected E4 image.
3. Change all the CRC's to match the protected cameras serial number or clone the serial number from the donor unprotected E4 camera.
4. Deteremine where the Calibration data is held in the E4 and transplant the correct calibration data from the protected E4 firmware/OS into the newly installed unprotected firmware/OS.
5. Correct the CRC in the file that contains the calibration data. 
6. Enjoy a previously protected camera that is running an unprotected image  :)

Life is rarely this simple though and I expect challenges with CRC's hidden in files structures and also likley countermeasures in the new Version 1.1L hardware to prevent such an attack vector.

The approach would also be very much 'open case' and requiring IC programming tools.

No harm in blue sky thinking though  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 05, 2014, 08:14:50 pm
Please do not forget that the new E4 version is not HW1.1, it is 1.1L. I don't think the differences between HW 1.1 and 1.1L have been established yet. It was of concern to me that FLIR advised that I should not just install their 1.21.0 firmeware update, but rather, return the camera to them for a special upgrade ! We all know what the result of that action would have been, and FLIR would love to 'upgrade' my camera for me  ::)

The question has to be....has FLIR done something to the hardware platform to sabotage any attempt to increase resolution in firmware or OS ? It is also a possibility that the HW1.1L change is not about a resolution upgrade countermeasure, but rather a frame rate upgrade countermeasure  ;)

It would be very useful to compare images of Mike's V1.0 camera PCB and the newer V1.1 and  V1.1L PCB.
There is one very specific thing I'd like to compare if we can get pics of a 1.1L
If you've seen the teardown, you may be able to guess what it is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 05, 2014, 08:20:30 pm
Please do not forget that the new E4 version is not HW1.1, it is 1.1L. I don't think the differences between HW 1.1 and 1.1L have been established yet. It was of concern to me that FLIR advised that I should not just install their 1.21.0 firmeware update, but rather, return the camera to them for a special upgrade ! We all know what the result of that action would have been, and FLIR would love to 'upgrade' my camera for me  ::)

The question has to be....has FLIR done something to the hardware platform to sabotage any attempt to increase resolution in firmware or OS ? It is also a possibility that the HW1.1L change is not about a resolution upgrade countermeasure, but rather a frame rate upgrade countermeasure  ;)

It would be very useful to compare images of Mike's V1.0 camera PCB and the newer V1.1 and  V1.1L PCB.
There is one very specific thing I'd like to compare if we can get pics of a 1.1L
If you've seen the teardown, you may be able to guess what it is.
My gut feeling tells me it's that FLIR would add a SUID entry to the I2C prom (when @factory) ... and encrypt the config while DIY-upgrades would probably just have SUID = 0 set.
Also please note from the version info that the L comes from confkit (if I remember correctly) and probably has little to do with the read HW :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 05, 2014, 08:24:09 pm
OK, I am about to show my ignorance of this platforms configuration so please be gentle with me.

If I am presented with two similar (near identical) embedded computers, one 'protected' from change, one not, I would look at a complete firmware and OS transplant to overcome the protection systems in the firmware. Now this would not be simple if there were calibration settings and CRC's in play but it would be a start.

In a perfect world the approch would be:

1. Take a complete firmware and OS image from an unprotected E4 (data donor)
2. Overwrite the protected firmware and OS on a protected E4 with the unprotected E4 image.
3. Change all the CRC's to match the protected cameras serial number or clone the serial number from the donor unprotected E4 camera.
4. Deteremine where the Calibration data is held in the E4 and transplant the correct calibration data from the protected E4 firmware/OS into the newly installed unprotected firmware/OS.
5. Correct the CRC in the file that contains the calibration data. 
6. Enjoy a previously protected camera that is running an unprotected image  :)

Life is rarely this simple though and I expect challenges with CRC's hidden in files structures and also likley countermeasures in the new Version 1.1L hardware to prevent such an attack vector.

The approach would also be very much 'open case' and requiring IC programming tools.

No harm in blue sky thinking though  ;)
Depends on what level you can access the filesystem. You can't copy the NAND flash chip directly as the bad-block map will be different.
If you can access the filesystem just above the bad-block mapping level, probably doable, but it may depend on what they've done. They could do something at bootloader level - I don't know enough about WinCE and this processor to know how the bootloader process works, but it probably starts at a lower level than the main filesystem, and may be difficult to transfer as chances are it's in a dedicated area of flash seperate from the main filesystem. It may be that a newer bootloader will refuse to boot old firmware.

There does appear to be a fairly low-level firmware programming mechanism via the serial debug port - it may be that this happens before anything that Flir (is likely to) have written runs (e.g. binary blob provided by WinCE), but you'd need to know what sort of file it's expecting.
IMO the most likely reason for the RTB "Upgrade" is to update the bootloader. There may be a secondary reason that may be apparent from pictures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 05, 2014, 08:25:02 pm
So, tauchers BETA3 is installed:

1) colors: special palettes (8) working fine
2) temperature scale: manual fixing of the scale works fine(all options)
3) measure spot:
                   working: normal modes(Center spot on/off)
                   not working: special options(hot/cold etc) dont work and camera system freeze(you have to restart the TIC)
4) Image mode: no changes
5) settings:
                 working is: new focus fine tuning,ambient relative humidy, device settings new usb-Mode,
                 not working: condensation-menues
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 05, 2014, 08:27:07 pm
Also please note from the version info that the L comes from confkit (if I remember correctly) and probably has little to do with the read HW :)
My guess is that the HW version is used by firmware to know what HW environment it is running on, so if they change something that matters (e.g. sensor), the same firmware can run on multiple hardware variants
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 05, 2014, 08:30:59 pm
So, tauchers BETA3 is installed:

1) colors: special palettes (8) working fine
2) temperature scale: manual fixing works fine(all options)
3) measure spot: normal modes(Center spot on/off) doing fine, special options dont work and camera system freeze
4) Image mode: no changes
5) settings: new focus fine tuning,ambient relative humidy, device settings new usb-Mode, not working: condensation-menues
I am really surprised that they haven't locked this down more than they could have - RNDIS menu still there, same FTP password etc.
One of the main reasons the original hack was possible was how easy it was to gather lots of information about how it all worked!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 05, 2014, 08:57:32 pm
Code: [Select]
\FlashBFS\system>i2c.exe r AE FF
unfortunately i2c.exe dumps only the first 256 Byte from EEPROM
From memory I think i2c.exe doesn't know about eeproms specifically, so you need to use a write+read operation to write the address first before reading the data - if you just do a read it may be reading a random page.
I don't recall the syntax but it's fairly obvious from the /? help


My gut feeling tells me it's that FLIR would add a SUID entry to the I2C prom (when @factory) ... and encrypt the config while DIY-upgrades would probably just have SUID = 0 set.
Also please note from the version info that the L comes from confkit (if I remember correctly) and probably has little to do with the read HW :)

I haven't an E4 within reach...
Can anybody post a terminal sequence to read out the hole EEPROM?


Code: [Select]
Usage: i2c [2] {r|w} <address> <no of bytes if read> <data to write>
       i2c [2] f <filename>
Write example:  i2c w A0 11 22 33 - Write 11h 22h 33h to A0h
Read example 1: i2c 2 r A0 10     - Read 10h bytes from A0h on I2C2:
Read example 2: i2c r A0 10 80    - Write 80h and Read 10h bytes from A0h
Read example 3: i2c r A0 10 80 40 - Write 80h 40h and Read 10h bytes from A0h (16-bit addressing)
File example 1: i2c f vf.txt      - Read command from file
File syntax: {r|w} <address> <no of bytes if read> <data to write>
             d <delay ms>

Have been playing around with i2c.exe, it is a bit scary not knowing what it is actually doing on the bus. Especially when it comes to the read/write option and the effect it has on the read/write flag on the address byte being sent out. The read/write flag on the DS1388 Real time clock is inverted!!!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 05, 2014, 08:57:54 pm
So, tauchers BETA3 is installed:

1) colors: special palettes (8) working fine
2) temperature scale: manual fixing of the scale works fine(all options)
3) measure spot:
                   working: normal modes(Center spot on/off)
                   not working: special options(hot/cold etc) dont work and camera system freeze(you have to restart the TIC)
4) Image mode: no changes
5) settings:
                 working is: new focus fine tuning,ambient relative humidy, device settings new usb-Mode,
                 not working: condensation-menues

You could edit the menu to remove the crashing functions/parts - that way you'd at least have a somehow "extended" E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 05, 2014, 10:12:15 pm
I am really surprised that they haven't locked this down more than they could have - RNDIS menu still there, same FTP password etc.
One of the main reasons the original hack was possible was how easy it was to gather lots of information about how it all worked!

My guess is they are still needed for post sales calibration and servicing unless they want to tear down every unit every time they get sent back and put them on a programming rig further risking calibration issues. Also does the FIF installer use those mechanisms to update devices? If so it would need to be updated with some sort of alternate method if they changed them. (witch could be then RE'ed) It could also be that the bean counters flipped their lids and demanded something be done but the engineers didn't feel the same vibe and did a "good enough". ;)

Also looking back at my days with WinCE PDA's, DRM was never really that extensive in the applications never mind the hardware itself. They likely realized where there is a will - there is a way and didn't want to invest that deeply into it. I would more expect a 1.2 hardware variety is being spun with a hardware limited 80x60 senor ala the FLIR One that no level of hacking will be able to bypass and they are just stop gapping till thoes get in the supply chain.

What I think would be really interesting is getting a factory fresh 1.21 FW unit and some how scanning the free space to see if there have been production related goodies that may have been deleted that differ from the ones that the 1.21 updater deletes from the pre 1.21 units. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 05, 2014, 10:23:34 pm
Hi guys,

I got late in the party and just received an E4 with "upgraded" firmware (calibration from Feb 14 in Estonia).
I am still wondering whether to return it (being in Europe I have the usual 8 days), but while I weight options I suppose I could try and help with anything you suggest.

I did activate RNDIS mode via the right key, and after installing all relevant FLIR drivers on an old Windows XP laptop I could connect. Unfortunately the laptop crashed while in an ftp session, so I won't provide much info for now. All I can say is
- when connecting to the web server, the service menu is gone (that is, the link is there, it asks for the authentification and flir/vl3g works, but then I get "page not found")
- as mentionned earlier in the thread, the 1.1L appears to be linked to one of the software components (it can be seen without the computer, just looking at the info which is provided in the hidden service menu: in the "version information" submenu, one has e.g. appkit 1.0.16 and then confkit E4 1.1L and this is the only place where 1.1L is to be seen)

I will provide a zip of what I get through ftp tomorrow, when the darn laptop finishes verifying the FAT partition (I actually tried to connect to a mac with an RNDIS driver for android devices, but it did not work, I get to see the new interface but do not seem to communicate with it. So I guess I am stuck with windoze....).

If I am provided with clear instructions, I can play guinea pig #2, at least until the week-end. I am reluctant to brick a $1000 device, but I did brick and unbrick phones and wifi routers (I do like/know bsd/linux stuff better than WinCE, I am afraid....).

And thanks to all valuable contributors to this thread, took me a while to read most of it but I enjoyed it, despite being stuck with the low resolution (for now ? I would like to be optimistic but it's reasonable to assume they modified the bootloader).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on March 06, 2014, 12:23:09 am

I haven't an E4 within reach...
Can anybody post a terminal sequence to read out the hole EEPROM?


I2C.exe is still not making sense, correct me if i am wrong on any of this:

As Mike says you need to perform a selective read by writing the address byte first, otherwise you will start at a random address (where the last operation finished).

The following will read the first 256 (100h) bytes  from i2c address AEh, starting at 00h

Code: [Select]
\FlashBFS\system>i2c.exe r AE 100 00
Open I2C device
I2C read command 57 100 returned: 46 4C 49 52 20 45 34 0 0 0 0 0 0 0 [snip]

The "57h" i2c slave address byte makes sense:
From the CAT24C02 EEPROM data sheet:

Code: [Select]
57h = 1010111x (x=read/write flag)

MSB 1 - Fixed
--- 0 - Fixed
--- 1 - Fixed
--- 0 - Fixed
--- 1 - Address bit 2
--- 1 - Address bit 1
--- 1 - Address bit 0
LSB x - R/W Presumably this bit is tagged on (being toggled by the "r" or "w" switch for a read or write operation) and it is sent out on the bus.

Even if you specify a larger number of bytes to read, the command always returns "I2C read command 57 100 returned" which means it will only return 256 byte at a time, even when telling it to read more.

Also, if you specify a different start address, (say 33 bytes in) it will indeed start reading out from the 33rd byte in, but wrap around at address 256 and start spitting out bytes from the beginning.

There is more on the i2c bus at address AAh and 92h.

I'm guessing 92h is the temperature sensor as this ties in with an LM73 from Texas Instruments has a package marking of "T730" (Clearly shown in Mike's video) as i get some replies back from that address too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 06, 2014, 01:43:50 am
Quick question:

My E4 has a dead LCD pixel.  I don't see it when I download the images, just on the built in LCD.  From my quick searching this seems common on the E4, yes?  (I apologize if I missed a post somewhere about this).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on March 06, 2014, 01:48:27 am

Yes, my LCD has one dead pixel.

It is not visible on any of the images, only the LCD.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 06, 2014, 04:00:16 am

Yes, my LCD has one dead pixel.

It is not visible on any of the images, only the LCD.

Ah.  Thanks for the fast response.  That makes me feel a bit less annoyed by it then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 06, 2014, 04:15:32 am
Funny my E4 doesn't have a dead pixel. This thread might actually reach 5k replies.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 06, 2014, 04:46:51 am
Do you habe some instructions for the i2c-usage? Then i will do one more try to get the data from the TIC for a new 1.21-solution.

And what do you think,@taucher, is the target of a full patched 1.21-device near?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Viss on March 06, 2014, 07:16:17 am
I just got my E4 today.
Sadly, it's also running the new 1.21 firmware.
I'm up for trying a variety of things - I'd prefer not to brick it, but I'd love to know if theres a way to downgrade the firmware!
Any help would be appreciated!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 07:26:51 am
Actually, if somebody with a copy of the last downloadable firmware which was known to work can provide a link to it (google did not help, looks like nobody is mirroring it), I am willing to see what happens when trying to downgrade (no expectation it will work, but we might learn something in the process)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 09:32:49 am
Here is a link to a zip with a backup of my E4 with 1.21 firmware. I didn't change anything prior to backup.

http://en.file-upload.net/download-8685956/BACKUP-FLIR-E4.zip.html (http://en.file-upload.net/download-8685956/BACKUP-FLIR-E4.zip.html)

the zip also contains (at the root) the filezilla logfile of the transfer. Several files cannot be copied (be it with flir or root as ftp login), as Rainer noticed earlier.

I suppose one could try and see which files are unit specific between his backup and mine ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 10:03:01 am
So, a "diff -qr" of the two trees from the 1.21 backup archives (mine and Rainer's) yields these files as being different:

/FlashFS/system/appcore.d/config.d/conf.cfc
/FlashFS/system/calib.rsc
/FlashFS/system/default.rsc
/FlashFS/system/default__services.rsc
Only in FLIR_BACKUP Rainer/FlashFS/system: default_a
/FlashFS/system/journal.rsc
/FlashFS/system/journal.rsc.old
/FlashFS/system/journal__services.rsc
/FlashFS/system/maps/ds250C_we.crs
/FlashFS/system/maps/ds250C_we_ap_fi_le_static.gan
/FlashFS/system/maps/ds_we_ap_fi_leExFOL7_LCFMap.fff
/FlashFS/system/maps/ds_we_ap_fi_le_LCFMap.fff
/FlashFS/system/services.d/config.d/conf.cfc
/FlashFS/system/torrent.d/err_checkpoint.rsc
/FlashFS/system/ui.d/config.d/conf.cfc
/FlashIFS/FLIRVers.rsc
/Temp/postlog.txt
/Windows/FTPD.tmp
/Windows/System.mky
/Windows/default.mky
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 12:12:40 pm
diff FW "1.21.0"  vs.  "1.19.8"

Code: [Select]
>diff -y \FlashIFS\FLIRVers_FW1.21.rsc" \FlashIFS\FLIRVers_FW1.19.rsc  | grep -e "|\|<\|>"
# Generated at 2014-03-06 10:17:40                            | # Generated at 2014-01-16 17:54:59
.version.SUID text "xxxxxxxxxxxxxxxxx"                        <
.version.hw.camcore.serial text "6381xxxx"                    | .version.hw.camcore.serial text "6380xxxx"
.version.hw.mainboard.revision text "11"                      | .version.hw.mainboard.revision text "09"
.version.hw.mainboard.serial text "2009xxxx"                  | .version.hw.mainboard.serial text "1995xxxx"
.version.kits.appkit.date text "10-Jan-2014"                  | .version.kits.appkit.date text "9-Oct-2013"
.version.kits.appkit.minor int32 16                           | .version.kits.appkit.minor int32 14
.version.kits.appkit.ver text "1.0.16"                        | .version.kits.appkit.ver text "1.0.14"
.version.kits.confkit.ver text "E4 1.1L"                      | .version.kits.confkit.ver text "E4 1.1"
.version.kits.osimgkit.build int32 2                          | .version.kits.osimgkit.build int32 1
.version.kits.osimgkit.date text "2013-11-26"                 | .version.kits.osimgkit.date text "2013-09-02"
.version.kits.osimgkit.minor int32 12                         | .version.kits.osimgkit.minor int32 10
.version.kits.osimgkit.ver text "16.0.12"                     | .version.kits.osimgkit.ver text "16.0.10"
.version.kits.prodkit.date text "12-Feb-2014"                 | .version.kits.prodkit.date text "16-Sep-2013"
.version.kits.prodkit.major int32 0                           | .version.kits.prodkit.major int32 1
.version.kits.prodkit.ver text "0"                            | .version.kits.prodkit.ver text "1.0.0.8"
.version.product.date text "2014-02-13"                       | .version.product.date text "2013-11-29"
.version.product.serial text "6391xxxx"                       | .version.product.serial text "6390xxxx"
.version.sw.AppCore.build int32 1                             | .version.sw.AppCore.build int32 5
.version.sw.AppCore.date text "01-Dec-2013"                   | .version.sw.AppCore.date text "09-Oct-2013"
.version.sw.AppCore.time text "Sun Dec 01 23:01:32 2013"      | .version.sw.AppCore.time text "Wed Oct 09 13:04:43 2013"
.version.sw.AppCore.ver text "22.0.0.1"                       | .version.sw.AppCore.ver text "22.0.0.5"
.version.sw.Bootloader.intermediate int32 1                   | .version.sw.Bootloader.intermediate int32 0
.version.sw.Bootloader.minor int32 5                          | .version.sw.Bootloader.minor int32 3
.version.sw.Bootloader.ver text "16.1.5.0"                    | .version.sw.Bootloader.ver text "16.0.3.0"
.version.sw.common_dll.build int32 7                          | .version.sw.common_dll.build int32 1
.version.sw.common_dll.date text "10-Jan-2014"                | .version.sw.common_dll.date text "23-Apr-2013"
.version.sw.common_dll.time text "Fri Jan 10 17:19:29 2014"   | .version.sw.common_dll.time text "Tue Apr 23 10:24:48 2013"
.version.sw.common_dll.ver text "1.9.0.7"                     | .version.sw.common_dll.ver text "1.9.0.1"
.version.sw.facet_core.date text "25-Nov-2013"                | .version.sw.facet_core.date text "12-Aug-2013"
.version.sw.facet_core.time text "Mon Nov 25 17:14:31 2013"   | .version.sw.facet_core.time text "Mon Aug 12 13:50:28 2013"
.version.sw.facet_ui_qml.date text "25-Nov-2013"              | .version.sw.facet_ui_qml.date text "12-Aug-2013"
.version.sw.facet_ui_qml.time text "Mon Nov 25 17:15:00 2013" | .version.sw.facet_ui_qml.time text "Mon Aug 12 13:51:04 2013"
.version.swcombination.fullver text "os16.0.12_appkit1.0.16_p | .version.swcombination.fullver text "os16.0.10_appkit1.0.14_p
.version.swcombination.ver text "1.21.0"                      | .version.swcombination.ver text "1.19.8"

E4 1.1L = hw.mainboard.revision 11
see new Bootloader.ver = 16.1.5.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 12:24:59 pm
Actually, if somebody with a copy of the last downloadable firmware which was known to work can provide a link to it (google did not help, looks like nobody is mirroring it), I am willing to see what happens when trying to downgrade (no expectation it will work, but we might learn something in the process)

1.19.8 was never downloadable
you need flir_ex_pn639_v1.18.7_update_pack.zip
can anybody upload this file?

Just checked:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.18.7_update_pack.zip) < DOWN
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip) < ONLINE
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 12:34:05 pm
My point in saying "the last downloadable firmware" rather than 1.19.8  ;D
Hopefully someone uploads it !

So, anyway, indeed there are two different ".version.SUID" text strings in the 2 available 1.21 trees (I did not pay attention to the FLIRVers.rsc files which were different)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 12:42:35 pm
Hopefully someone uploads it !
http://en.file-upload.net/download-8686493/flir_ex_pn639_v1.18.7_update_pack.zip.html (http://en.file-upload.net/download-8686493/flir_ex_pn639_v1.18.7_update_pack.zip.html)

read pdf inside or try
Install FLIR tools
Go to the install folder\bin
Turn camera on and plug USB in
Run FLIRInstallNet
Browse to your .fif file

Click Run FIF

the FIF is a zip file
NK.bin is the Windows CE part see for  NK.bin Toolset https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382279/#msg382279 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382279/#msg382279)

camera.cmd is the update script - see inside !
I can't find a downgrade lock

only HW check
Code: [Select]
#old kit without gethwtype. Use os name for identify
type \windows\osimgkit.rev
[NAME ASCO*][$GOTO isOScorrect]
$FAIL "Update is intended for FLIR Z3-Series - not this camera - aborts install"
$GOTO end

your string in \windows\osimgkit.rev is "ASCO OS image"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 12:47:48 pm
Thanks for the upload. I will try and see what happens tonight (I don't have the camera at hand, only the files from the zip).

On the other hand, the binary strings that follow the CFC in the conf.cfc files are the same in the 2 files

000018b0: 4346 4300 0300 1000 9918 0000 0200 0000  CFC.............
000018c0: 0a                                       .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 12:55:46 pm
Actually, while we are at it, do you have a copy of the old FLIR tools ? (it makes sense to go and try with these, not the recent version, even if I expect the firmware to flatly refuse downgrading)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 01:05:06 pm
try FlirTools from your CD - its surely the old version  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 01:27:51 pm
Actually there is nothing on the CD, just a bunch of pdf files which send you back to their web site. Anybody with old FLIR tools around ? (not to mention that at the moment I certainly do not want to register to get the current ones....)

edited: I did find older FLIR tools (3.1), will see what happens...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yama13 on March 06, 2014, 01:47:41 pm
Could this be a source?

http://flir-tools.software.informer.com/versions/ (http://flir-tools.software.informer.com/versions/)

edit: nevermind it's not
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on March 06, 2014, 02:12:59 pm
I took a look at the .cfc files from Rainers backup and yes, they are XORed. I attached the "decrypted" files and the extracted key.

But nothing special here, compared to mine they just differ in creation time, HW-version, ID (obviously) and CRC03 being used instead of CRC01.

The trailing 16 bytes at the end of the files starting with "CFC" contain some constants and the size of the original file. But the input files are also padded with some bytes prior to xor and I don't know if this is just junk or somehow important.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 06, 2014, 02:21:59 pm
I attached the "decrypted" files and the extracted key.

I expect now is time to change resolution to 320, put CRC03, crypt via this key and enjoy again ;-)

PS: keep an eye on Flir updates, we would be on right path when new version will came out  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 02:33:04 pm
CRC03 its a task for Taucher
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 02:34:21 pm
@tomas123: yes, that's where I got my 3.1 tools. I'll grab the 4.0 anyway, thanks !

@schdiewen: impressive  ;D, care to share how I can reproduce on mine ?

at any rate, even if we can change the config file, we still have to move over older binaries which have disappeared to set the higher resolution, am I right ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 06, 2014, 02:35:45 pm
Fp said, there are no difference between the conf.crc from my TIC and his TIC. Did they use the same fix xor to crypt?

And somebody said, there are some binaries missing. Is this the reason for the difficulties with some parts of the Beta3-Menues?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 02:45:48 pm
Actually, I said that there was no difference in the binary strings that followed the CRC characters at the end of the file. But the rest surely is different, which means the key is different. I have no time right now to brute force my xored file, but it looks like nowadays there are smarter tools, will look into it later. Hopefully with 2 different keys we might get a clue as to how they are produced ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on March 06, 2014, 03:17:51 pm
For those who want to get their own keyfile:

Attached you find a quick-and-dirty octave (or matlab) script, which tries to extract your personal key.bin if you feed it your conf.cfc and a plain conf.cfg (e.g. from my previous zip) for comparison.

Usage:
getkey('conf.cfc', 'conf.cfg');

All files have to be present in the current working folder, the resulting key.bin is also written there.

Edit: Of course you should use the ~6kb conf.cfc found in the appcore.d tree  ;)

Edit 2: I should note, that this script silently assumes that the key length and structure of conf.cfc is constant for all cams and just chooses the most common values after XORing the input files. So the written key can as well be complete nonsense, if those assumptions are wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 06, 2014, 03:28:07 pm
For those who want to get their own keyfile:

Attached you find a quick-and-dirty octave (or matlab) script

If someone will collect cfc files (at least 3) and post them, I can decode the key and try to make decoder and encoder app.
Anyway, we would need the CRC03 to give a try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 03:36:49 pm
@daves: not sure what you meant, but here is a zip file which contains the 3 cfc files from my tree (hence, presumably encoded with the same key). I will try Schdiewen's script later.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on March 06, 2014, 04:44:01 pm
Hi guys!  The "E8" is working great.  I have a couple questions... Is there a way to connect this to an ipad to transfer pics, or do you have to step up to the Exx series with the wifi?  Also, has anybody performed the "hack" on an E30 to make it an E60? 

Any help is greatly appreciated.  Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 04:53:06 pm
Is there a way to connect this to an ipad to transfer pics, or do you have to step up to the Exx series with the wifi?

read https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370551/#msg370551 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg370551/#msg370551)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 06, 2014, 04:57:49 pm
so, i´m at home now and can play around a little more with my TIC.

Is there any reason to do the i2c-thing? or is it obsolete with the decoding of the config-file?

the cofig is decrypted or not? can anybody give me a patched config to test? and what is the crc?

is there any solution with the missing binaries? can anybody upload them? then i try to test them with telnet... 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 06, 2014, 05:09:11 pm
Blimey, I don't visit this thread for a few hours and suddenly there are people crcaking open the CFC file  :)   :-+

Well done to those rising to this challenge, it makes facinating reading.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on March 06, 2014, 05:27:03 pm
@tomas123: Great howto  :-+ Didn't know Octave for Windows requires cygwin

to do
(1) @taucher: crc03 keygen
(2) hack the tail https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg400616/#msg400616 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg400616/#msg400616)
(3) check key SUID in /FlashIFS/FLIRVers.rsc
Don't forget about those padding bytes, the crypted files aren't just "input xor key + trailer", there are some non-zero bytes added between the EOF and CFC-trailer, possibly for increasing the file size to multiples of 32. The trailer itself looks easy, the differing bytes seen in your post are the file size before padding+trailing is applied (conf.cfc: "99 18" -> 0x1899 -> 6297 Byte).

But since we saw Rainer accidentally booting his cam OK (?) with a misplaced conf.cfc, maybe we can just hexedit the padding and see if the cam still uses the config. Then it's most likely junk (uninitialized buffer etc.) and can be zeroed.

PS: Nice to see there is a ready-to-use python script for XORing  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsg on March 06, 2014, 05:45:08 pm
wow, what an effort guys!
I purchased my camera today, hopefully will be able to help when I get it.
I wouldn't want to lose the warranty just jet by modding it but it is good to have the tools up our sleeve ;)
Keep up the good effort
TSG
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 06, 2014, 05:55:29 pm
tsg, you can post the next(third) full-backup for analysis.

Just install the filezilla and the flir-network-driver on your pc,

then go in TIC in the hidden menue(Settings->device-settings->camera-information->10 seconds right and activate in the usb-menue the RNDIS-option)
(later you can do in the same way to reset to the UVC and MSD-option)

If RNDIS is on, connect  with filezilla to 192.168.0.2, user: flir, pass: 3vlig and dowload and zip all files.

Then post the zip here und give some information about your cam (you find the data in the camera-information-menue)

all this operations don´t touch any warranty

here is the driver:
http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)


I have done the i2c again:

first, i build a little txt for the i2c.exe to scan the bus:

Existing Adresses:
00, 01 only reading, error 1d when writing the start-zero
and
92, 93, AA, AB, AE, AF, D0, D1

Code: [Select]
\FlashBFS\system>i2c.exe r 00 100
Open I2C device
I2C read command 0 100 returned: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r 01 100
Open I2C device
I2C read command 0 100 returned: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r 92 100 00
Open I2C device
I2C read command 49 100 returned: 16 CC FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r 93 100 00
Open I2C device
I2C read command 49 100 returned: 16 D0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r AA 100 00
Open I2C device
I2C read command 55 100 returned: 23 1 0 0 FF FF 9E B CD E 38 1 ED 6 16 B 47 6 70 A 7A 0 FF FF 8 2 FD FF 84 8A C0 FC 74 0 C0 15 CE 1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r AB 100 00
Open I2C device
I2C read command 55 100 returned: 23 1 0 0 FF FF 9D B C8 E 38 1 ED 6 16 B 47 6 70 A 80 0 FF FF 8 2 FD FF 84 8A C0 FC 74 0 C0 15 E4 1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

\FlashBFS\system>i2c.exe r AE 100 00
Open I2C device
I2C read command 57 100 returned: 46 4C 49 52 20 45 34 0 0 0 0 0 0 0 0 0 0 0 0 0 36 33 39 30 31 2D 30 31 30 31 0 0 0 0 0 0 36 33 39 31 34 37 35 32 0 0 32 30 31 34 2D 30 32 2D 31 33 0 0 30 31 0 0 DE CA 54 31 39 38 32 38 33 0 0 0 32 30 31 33 36 30 31 36 0 0 31 31 0 0 0 0 0 0 0 0 ED 9C FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF A F4 3C 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 46 F4 54 31 39 38 33 30 34 0 0 0 36 33 38 31 33 38 30 38 0 0 30 31 0 0 FF FF FF FF FF FF F2 9F 50 0 3C 0 0 1 0 0 0 0 0 0 0 0 8C 1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0

\FlashBFS\system>i2c.exe r AF 100 00
Open I2C device
I2C read command 57 100 returned: 46 4C 49 52 20 45 34 0 0 0 0 0 0 0 0 0 0 0 0 0 36 33 39 30 31 2D 30 31 30 31 0 0 0 0 0 0 36 33 39 31 34 37 35 32 0 0 32 30 31 34 2D 30 32 2D 31 33 0 0 30 31 0 0 DE CA 54 31 39 38 32 38 33 0 0 0 32 30 31 33 36 30 31 36 0 0 31 31 0 0 0 0 0 0 0 0 ED 9C FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF A F4 3C 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 46 F4 54 31 39 38 33 30 34 0 0 0 36 33 38 31 33 38 30 38 0 0 30 31 0 0 FF FF FF FF FF FF F2 9F 50 0 3C 0 0 1 0 0 0 0 0 0 0 0 8C 1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0

\FlashBFS\system>i2c.exe r D0 100 00
Open I2C device
I2C read command 68 100 returned: 16 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 16 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 16 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 16 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82

\FlashBFS\system>i2c.exe r D1 100 00
Open I2C device
I2C read command 68 100 returned: 25 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 25 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 25 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82 25 15 21 4 6 3 14 B3 0 2 0 4 0 30 40 0 10 80 0 0 0 0 98 8 0 14 0 2 0 0 40 10 90 0 0 0 0 80 0 30 0 4 11 0 4 40 0 0 20 0 0 0 0 10 0 0 4 40 4 8 6 21 24 82


Maybe is the xor-key in it anywhere?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 09:31:30 pm
Hi guys,

bad news, I now have a very expensive paperweight: downgrading went fine (well, except for a couple of complains here and there but not of them looked that bad. didn't think to copy/paste the log before hitting "reboot"....) and then, upon reboot of the unit, I got a FAT partition mounted on my laptop with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has

FLIR cam boot
MSDcmd 1.3
ASCO


and then 2 serial (including the one from the unit) and the ethernet MAC of the unit. The unit itself just displays the FLIR logo.

I suppose my best bet is to return it, unless somebody has any brilliant ideas ? (don't feel sorry. Gambling implies losses...)

So there *is* something lurking at the firmware level, I would say...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 09:41:21 pm
no FTP/Telnet access?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 09:45:23 pm
No. It appears to just behave like an sd card.the volume is name ASCO, and its size is 25 MB.

So, most likely the other stuff is there, but not accessible nor booting.

I was honestly not expecting things to work, but I wasn't expecting to be left with a brick with no warning ? Ah well. Interesting discussion ahead with the retailer...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 06, 2014, 09:50:28 pm
[...] upon reboot of the unit, I got a FAT partition mounted on my laptop with 2 files [...]

If you've been able to see those partitions, I assume you left the TIC connected to your computer during reboot.
Stupid question: Did you try to reboot it without the USB connection present? If I remember correctly somebody posted about issues during booting while connected to a computer.
And have you been able to see any other USB device from the TIC? Like the network device, a UVC device, a serial port or anything else besides the mass storage device?
Could you also tell us how big those partitions are? Have you looked for any hidden files on those partitions?
One last question: Is FLIRInstallNet able to see / discover the TIC?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2014, 09:56:23 pm
you have been warned but the Flir Service can restore the firmware

from "How to Update your FLIR Exx series.pdf"
Quote
Important note
The camera may be damaged if power or USB communication is interrupted during the update. Do not turn off the camera, or remove or disconnect the power source, or the USB cable.
If the update is not completed successfully and the camera becomes inoperable, the camera has to be sent to a FLIR service representative.

I think, there is a urloader (like u-boot)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 06, 2014, 10:05:04 pm
Either they can restore / reflash the firmware or they just swap the unit when you send it to their service.
But the fact that the unit puts it's serial number and MAC address in this file sounds like some kind of "Hello! This is me. FEED ME!" to me.
I'm sure there's some way of unbricking it. Maybe it's waiting for some files to be put on those partitions?
@fp: I'm just thinking out loud, I'm not saying you should put anything there :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 06, 2014, 10:11:13 pm
No. It appears to just behave like an sd card.the volume is name ASCO, and its size is 25 MB.

So, most likely the other stuff is there, but not accessible nor booting.

I was honestly not expecting things to work, but I wasn't expecting to be left with a brick with no warning ? Ah well. Interesting discussion ahead with the retailer...

USB VENDOR and DEVICE ID?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 10:12:36 pm
Oh yes, I am not complaining  ::)

and
- I only see this FAT partition.
- Flir Tools/FlirInstallNet does not see the TIC (I could update Flir Tools, but I don't think it will make a difference. I did install the OSX version of it on another laptop, it is the latest version from January but it does not see anything either).

I don't see how I could see a serial line there, over the USB cable, but any suggestion are welcome (before I ship it back).

I am somewhat sceptical that they have to tear it open to fix the firmware, tho. There has to be a way to get a low level connection....

and yes, the info that is left on the FAT partition strongly suggests it !


(ah, @Taucher, wait a minute, I need to re-open the case and connect it again)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 10:17:11 pm
FLIR Removable Disk:

  Product ID:   0xffff
  Vendor ID:   0x09cb
  Version:    0.00
  Speed:   Up to 480 Mb/sec
  Manufacturer:   FLIR Systems
  Location ID:   0xfa130000 / 6
  Current Available (mA):   500
  Current Required (mA):   500
  Capacity:   25,2 MB (25 165 824 bytes)
  Removable Media:   Yes
  Detachable Drive:   Yes
  BSD Name:   disk2
  Partition Map Type:   Unknown
  S.M.A.R.T. status:   Not Supported
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 06, 2014, 10:18:05 pm
try putting the update files onto the fat drive - there was some autoexec mechanism on the supplied .exe
edit: need to check if it was eFLIRInstall.exe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 06, 2014, 10:23:29 pm
I don't see how I could see a serial line there, over the USB cable, but any suggestion are welcome (before I ship it back).

One possibility on windows (as far as I know) would be to open the windows device manager and look for any device that might be from the unit. But that is a bit tricky because you have to expand every single category.

On a Linux machine you could make use of the "lsusb" command. You wrote you had a laptop with OSX, a quick google search lead me to this: http://www.tekkie.ro/mobile-development/osx-list-usb-devices-lsusb-equivalent/ (http://www.tekkie.ro/mobile-development/osx-list-usb-devices-lsusb-equivalent/)
Maybe you could provide us with that information :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 06, 2014, 10:31:17 pm

@FPGA experts: I'm guessing the FPGA has a factory deployed serial number - my guess is it's the new GUID code
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 06, 2014, 10:38:26 pm
I was wondering indeed if dropping the update files there could be a good move. Well, it won't hurt at that point, right ? Although I suppose I should probably put the latest firmware rather than the older...

Anyway, there is an eFLIRInstall.exe in the zip. Runing strings on it yields a bunch of interesting stuff, like

"About to destroy boot config to force TFTP download on next boot"

and all sorts of other fun things like

Usage: flash [cmd]
  -e <eboot.nb0>    Flash bootloader
  -n <nk.bin>       Flash OS Image file
  -n <fs.bin>       Flash file system image file(s)
  -b <bitmap.bmp>   Flash boot bitmap
  -c bitmap         Clear boot bitmap
  -f [<part>]       Create flash file system image file
  -nomount          Do not remount file system after file generation
  -k                Keep file system(s) mounted (caution)
                    This flag can be combined with any of the commands
  -l                No partition limit check when writing binary (caution)
  -destroy          Destroy boot config to force TFTP download on next boot


bit late to do anything, will wait until tomorrow morning !
Thanks for the hints
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 06, 2014, 10:46:24 pm
I was wondering indeed if dropping the update files there could be a good move. Well, it won't hurt at that point, right ? Although I suppose I should probably put the latest firmware rather than the older...
Anyway, there is an eFLIRInstall.exe in the zip. Runing strings on it yields a bunch of interesting stuff, like
"About to destroy boot config to force TFTP download on next boot"
and all sorts of other fun things like
Usage: flash [cmd]
  -e <eboot.nb0>    Flash bootloader
  -n <nk.bin>       Flash OS Image file
  -n <fs.bin>       Flash file system image file(s)
  -b <bitmap.bmp>   Flash boot bitmap
  -c bitmap         Clear boot bitmap
  -f [<part>]       Create flash file system image file
  -nomount          Do not remount file system after file generation
  -k                Keep file system(s) mounted (caution)
                    This flag can be combined with any of the commands
  -l                No partition limit check when writing binary (caution)
  -destroy          Destroy boot config to force TFTP download on next boot


bit late to do anything, will wait until tomorrow morning !
Thanks for the hints
I should add that it's a WindowsCE exe ... and it's obviously at least good for exchanging the hardcoded BOOT-Logo  >:D
And of cause put it extracted onto the drive ... BTW: I have confirmed eFlirInstall.exe / and *.fif are contained in gui_common_handlers.dll.strings ...

PS: still checking for the location of the mentioned error.txt - where it's defined there will probably be more stuff to discover.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on March 06, 2014, 11:10:23 pm

I have done the i2c again:


The addresses 92h & 93h, AAh & ABh, AEh & AFh, D0h & D1h are the same as each other, the only difference between the pairs being the read/write flag which seems to be (luckily!) overwritten by the "r" or "w" argument.

The first 7 bits of the address byte are the address itself, the last bit being the read/write flag.

You can see this in your command output, 92h and 93h produce "read command 49" in both cases.

Some more i2c trivia:

Address 68 (D0h / D1h) is the DS1388 Real Time Clock.

Code: [Select]
\FlashBFS\system>
\FlashBFS\system>i2c.exe r d1 07 00
Open I2C device
I2C read command 68 7 returned: 20 46 21 4 6 3 14

\FlashBFS\system>

20 - Hundredths of seconds
46 - Seconds
21 - Minutes
04 - Hour
06 - Day
03 - Month
14 - Year
etc...

More interestingly there are two banks of 256 byte EEPROM in the RTC, but i can't find a way to read them directly. You should be able to read from address D3h for the first page, and D5h for the second page. However all i get is an error, looks like i2c.exe isn't able to output the sequence required to perform an EEPROM read on that slave, it's like shooting in the dark.

Anyway, back to your scheduled program :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrSquirrel on March 06, 2014, 11:36:44 pm
no FTP/Telnet access?

If it were mine at this point i'd hook up to the serial port - it's no doubt spitting out all sorts of helpful info.

Serial output in Mike's video:
https://www.youtube.com/watch?feature=player_detailpage&v=NtqUE67BUDI#t=2546 (https://www.youtube.com/watch?feature=player_detailpage&v=NtqUE67BUDI#t=2546)

And don't forget what happens when you press the internal "load" button:

So if you hold the 'load' button down during startup.....
Quote
Bootloader 16.3 for ASCO (May  6 2013 11:41:42)
PMIC wake up: R5=40h E_SEQ_RDY  R6=1h E_nONKEY
PMIC status:  R1=1h nONKEY  R2=a0h COMP_DET GP_FB2
Fuel gauge check: res=1, voltage=3704
Reset reason (0x00000000): Power ON

Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel.

Initiating image update in 0 seconds.
Launching flash image  ...
+InitSpecifiedEthDevice
INFO: Trying to initialize the built-in USB/MSD...
MSD:: initialization
MSD: USB initialization completed

..and if you then plug it into the PC
Quote
USB Attach: High speed
Appears as a drive, but just a couple of uninteresting text files - probably looking for a firmware file to be saved



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 06, 2014, 11:55:54 pm
A collection of EXE strings might come handy (taken from .21 firm):

appverif.exe
ChargeApp.exe
Dw.Exe
eFLIRInstall.exe
emulatorstub.exe
imjp31m.exe
rapiclnt.exe
rapisrv.exe
RegExp.exec
repllog.exe
rnaapp.exe
Running Etcha.exe
servicesd.exe
sync.exe
udevice.exe
\Windows\Dw.exe
\Windows\peghelp.exe
---------
appcore.exe
appservices.exe
\eFlirInstall.exe
gethwtype.exe
kitcrc.exe
resmon.exe
supv.exe
syslog.exe
taskmgr.exe
t\FlashFS\system\wlanconfig.exe
wzctool.exe

==================================
OLD firm:

appcore.exe
appservices.exe
CamTorrent.exe
CEMGRC.EXE
clientshutdown.exe
cmaccept.exe
conmanclient2.exe
eDbgTL.exe
\eFlirInstall.exe
fmqping.exe
gethwtype.exe
kitcrc.exe
resmon.exe
supv.exe
syslog.exe
taskmgr.exe
t\FlashFS\system\wlanconfig.exe
wzctool.exe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 07, 2014, 12:22:55 am
I wonder if dropping the NK.bin file from th 1.21 update onto that partition then using something like option 5 from the serial debug port:
..and if you send a <space> to the UART during boot....
<quote>
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)

ACTIONS:
S) Save configuration
D) Download image now
L) Launch existing flash image now
R) Launch existing flash image now in SAFE (restricted) mode
E) Erase flash file system area
B) Erase OS Image area
</quote>
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack - unfortunately I've lost the email I had about that.
Safe mode doesn't do anything interesting

would be the best way to get it back up and running?

I would at least try dropping that nk.bin on there and rebooting the camera to see if anything happens and if you want to try taking it apart - try pressing the load button like suggested above.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 07, 2014, 12:42:51 am
... with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has
FLIR cam boot
MSDcmd 1.3
ASCO

and then 2 serial (including the one from the unit) and the ethernet MAC of the unit.

Just a short notice: I failed to quickly find "ERROR", "TYPEINFO" or "NK from NOR" anywhere in the firmware update files.
Btw - I'm wondering what MAC that might be - RNDIS "MAC", FPGA "MAC", SUID (maybe MAC with some static garbage to obfuscate it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 07, 2014, 12:59:24 am
... with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has
FLIR cam boot
MSDcmd 1.3
ASCO

and then 2 serial (including the one from the unit) and the ethernet MAC of the unit.

Just a short notice: I failed to quickly find "ERROR", "TYPEINFO" or "NK from NOR" anywhere in the firmware update files.
Btw - I'm wondering what MAC that might be - RNDIS "MAC", FPGA "MAC", SUID (maybe MAC with some static garbage to obfuscate it?

The MX257 has a 10/100 Ethernet MAC intergrated but the E4 lacks the ?PHY? to connect it. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 07, 2014, 01:02:08 am

@FPGA experts: I'm guessing the FPGA has a factory deployed serial number - my guess is it's the new GUID code
Not sure what you mean... The FPGA is loaded from a file at startup - it wouldn't have any device-unique data. Some FPGAs (e.g. Spartan 3) do have a factory-set unique serial number - not sure if the one in the Ex does but easy enough to look up. Not sure how this would be useful in this application though - I think it's mostly about copy protection.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 07:52:53 am
I'll try to drop stuff on the partition and see what happens, but I am not over-optimistic about it; I don't feel confident enough to tear it open at that point, although I agree it would be interesting to connect to serial...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 08:24:11 am
So, copying the eFlirInstaller.exe and the fif on the FAT partition does not produce anything: actually, it does, files are erased upon restart. Any file (other than the ones that got their in the first place) is erased, for that matter, and nothing happens.

At that point, I cannot do more until I get it fixed/exchanged and then I will be more cautious.

Hopefully by the time I come back to the forum there will be progress  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 07, 2014, 08:47:35 am
I would at least try dropping that nk.bin on there and rebooting the camera to see if anything happens [...]

@ fp: Could you try that? I don't think the bootloader can handle the .fif-"Package". Worst case is that it also gets deleted upon reboot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 09:19:50 am
just dropped nk.bin there. Same result: gets erased on cold reboot.

Both updater scripts (1.18 and 1.21) have some failure handling at the end (past asking for reboot). So obviously what happened was beyond that. In retrospect I was careless, I should have stopped before rebooting and tried to play with telnet. Oh well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 07, 2014, 10:27:26 am
This may have just been an unfortunate accident but we should not dismiss the possibility that FLIR considered the old or modified firmware upload vulnerability and decided that the response should be system erasure ! Pretty extreme but it will ensure that the unit is not in a useful condition for hacking and it can be restored to operation by FLIR Service Techs. This may be another reason why firmware 1.18.7 was removed from the FLIR web site. This may also tally with the reason for returning a 1.19.8 camera to FLIR for 'upgrade'.... adding a countermeasure against any form of unofficial or old firmware upload attack vector.  I have seen this type of countermeasure used on secure systems......its a form of agressive IDS that responds by making the host a non operational paperweight and so protecting against further hacking or probing.  Sadly it then effectively becomes a denial of service attack !

We should not forget that this technology is ITAR liable and the normal etiquette for not disabling a product if hacking is attempted may not apply. If there is any risk of an E4 being upgradeable to >9 fps it would be a legitimate countermeasure to disable the product to ensure that it is returned to FLIR for investigation and potential reporting of a hacking attempt against the platform. The regulations clearly state that a TIC's lock-down should not be removable.

Be careful out there !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 11:05:20 am
is there any possibility to do a normal complete 1.21-firmware-update-process?

or if you compare the downloadable 1.21-image with your backup, is there a special config-file in the Windows-folder?



Next question for crypting and decrypting the config.cfc:

If the encryption use a "special information"  from TIC-HW, which information is in the update-image? Flir need the encryption for locking the TICs with old 1.19-firmware.

Do flir give an uncrypted config-file to the TIC-system and crypt this on the TIC while update-process?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 07, 2014, 11:47:24 am
Hi all

I've just joined up, and only wish I had seen this site prior to purchasing the E4,  (1.21 firmware) Although its well made.
I am seriously disappointed with the Camera. other versions are way out of my price range and I’ve gotta say if anyone is looking to get one (An E4) don’t bother unless Flir decide to allow it again or an unlock method is found by you guys on here.

Although I understand basic electronics (Very basic) reading some of the replies has already got me confused.!!!!!!! But I am hoping there is a way to crack it, even if it is by spreading the word just how basic these are in its Standard E4 format.

I’ve spent a few hours pressing and holding buttons in various order and discovered to “hidden” one that has the USB RNDIS screen, but haven’t a Scooby doo clue how to then copy the software etc.

Hope I ain’t being too numb, maybe one of you guys could explain how.

Have fun guys


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 11:53:18 am
tsg, you can post the next(third) full-backup for analysis.

Just install the filezilla and the flir-network-driver on your pc,

then go in TIC in the hidden menue(Settings->device-settings->camera-information->10 seconds right and activate in the usb-menue the RNDIS-option)
(later you can do in the same way to reset to the UVC and MSD-option)

If RNDIS is on, connect  with filezilla to 192.168.0.2, user: flir, pass: 3vlig and dowload and zip all files.

Then post the zip here und give some information about your cam (you find the data in the camera-information-menue)

all this operations don´t touch any warranty

here is the driver:
http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)

...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 07, 2014, 12:00:34 pm
Thanks Rainer, I will have a go later, I'm supposed to be working right now so will be back on later. Is it possible that what ever they have done could be so so so simple, that it would be so hard to spot???? if that makes sense.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 07, 2014, 12:09:10 pm
To balance the post from Chorleybloke,

Thermal Imaging Cameras have been out of the financial reach of mere mortals for decades. They used sophisticated technology that was not available for DIY or budget builds. Many experimented with simple slow scan pyro thermometers and received pretty poor reults as a consequence.

FLIR have produced many models of TIC over the years and are experts in the field. For reasons not known to me, they decided to venture outside the industrial world in which they operated and into consumer products.

Their latest series, the Ex, offers consumers levels of image clarity and performance not previously seen at the price point. Depending upon the application, the E4 80x60 pixel low resolution can either be adequate or useless. If you are looking at switch gear, fuses and buildings, the low resolution should not be an issue. If you are looking at SMD components on PCB's it will be found wanting in the thermal image clarity realm. That is just the 'you get what you pay for' situation.

The MSX visual camera feature should not be underestimated. It provides the target outline detail that gives an image context. I used to need higher resolution 'thermal only' images to achieve the same contextural information. Whilst thermal image resolution is definitely important, it is less so when you just need to know what area of an image is warmer of cooler and in what context. i.e where exactly is the hot spot on the target....such as a motor bearing. You do not necessarily need an amazing resolution to know that a motor bearing or circuit breaker is getting too hot !

Whilst it is true that the upgrades that I performed on my E4 completely transformed its performance (especially the resolution and manual range control upgrades) I would not say that the standard E4 was poor value for money or useless at the $1000 price point. Those who do not agree should study the history and prices of thermal imaging cameras before judging the E4 too harshly.   

For info only. As I have stated before, my FLIR PM695 320x240 industrial cameras cost over $55,000 each  :o That was in 2007 and the new equivalents still cost that sort of money today. Suddenly $1000 for one quarter of the resolution does not seem such bad value for money.

And do not forget that the E4 lens focus may be easily changed for close up work using either a lens adjustment tool or a $30 ZnSe auxilliary lens. The thermal image detail improves the closer you get to the target due to equivalant pixel size.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yama13 on March 07, 2014, 12:35:11 pm
+1 Auroroa.

I only registered to keep up to keep up with this thread and post the info on mine for the database.  Although I modify and work on audio circuits, this is out of my realm.  I bought my E4 late, so knew there was a possibility it would be the 1.21 version - but felt in the end it didn't matter if it was (I lucked out and got a 1.19).

At this price point, the base features/quality/warranty/useability - especially with the MSX - is unheard of until now.  I have wanted a TIC for years now, but could not justify it because of the cost for my use (just checking stuff around the home - not electronic monitoring, though I have used it for that as well).

Now that I have it I have actually decided to use it as is (for now) because the MSX shows me everything I need.  This is a great TIC and incredible value at this price point.  Before, the closest I could find was the i3 @$1500, which is the same 80x60 WITHOUT the MSX.  When I looked at the sample images at the time, I thought "meh, not worth $1500."

The E4, however, with the MSX and $500 less blows the i3 away (to me).  Plus they have that special going til the end of this month where you can get a rebate in the form of your choice of one of 3 test equip (meter, video borescope, and I forget what else), each valued at about $130.  That makes it an INSANE value (I think the rebate stuff is US only).  It's like getting the E4 for $870.00 - almost half the cost of the i3 just a short while ago!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 07, 2014, 01:06:27 pm
Hi Aurora,

I fully understand what you say and I don’t want to slate the E4 as being totally pants, I use it for Building work. Having used others, I knew what to expect from an E8 but would NEVER have purchased one, but was willing to get an E4 and do the unlock. Unfortunately FLIR stopped this whilst I was awaiting delivery, hence the extended delay in it arriving.

Although the E4 is as you say a good purchase at just below £1k, regardless of its value its is still a pretty basic image compared to the full 320 x 240.  Obviously I’m sulking that I cannot upgrade my E4 to the full resolution, and if I had know when I placed the order that I couldn’t upgrade, I’d have just cancelled the E4 order, yet also would not have waited or saved the cash to splash out to get the E8 either.

It’s all irrelevant to Flir now as they still got my sale regardless of “unlock ability” ?. But even if I had known that FLIR had stopped the firmware upgrade it doesn’t change that I could not afford or warrant the cost of the E8 in my circumstances.

Maybe it was deliberate from FLIR to allow so many out that could be unlocked, after all I purchased one in the hope it could, and that’s because when searching for a Thermal Camera initially it was the publicity that the E4 was getting that drew me to order. Maybe those FLIR guys are not that daft after all and It was just some elaborate marketing campaign to increase awareness that ultimately has worked, FLIR must have had an increase in sales surely?

I I’m not for one minute taking anything away from the fantastic work you guys are doing, I only wish I a 10th of what you guys know or can do when it comes to stuff like this, but I just wanted to know that even for the Bargain price the E4 is, I am still disappointed with it.

I’m hoping you guys can find out just what they did………


Good work guys,,,,,,,,Chorleybloke
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 07, 2014, 01:50:39 pm
Hate to say this guys, but it looks like the camera may now be hack proof - or at least incredibly difficult to re-hack!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 07, 2014, 01:59:47 pm

FLIR have produced many models of TIC over the years and are experts in the field. For reasons not known to me, they decided to venture outside the industrial world in which they operated and into consumer products.

Their latest series, the Ex, offers consumers levels of image clarity and performance not previously seen at the price point.

I'd hardly call the Ex a consumer model - it's clearly aimed at professionals in the HVAC, building and  and electrical markets.
professional thermographers may scoff at it but I suspect at least some of that is fear that their clients will buy one and stop calling them.

FlirOne is of course clearly aimed at the consumer
 
Quote
Whilst it is true that the upgrades that I performed on my E4 completely transformed its performance (especially the resolution and manual range control upgrades) I would not say that the standard E4 was poor value for money or useless at the $1000 price point. Those who do not agree should study the history and prices of thermal imaging cameras before judging the E4 too harshly.   
Absolutely - even without the hack, the E4 is by a fair way the best price/performance TIC available, and apart from very close-up PCB work, the MSX makes a huge improvement in useability over what would otherwise be a borderline-unuseable low resolution thermal image.
I would however argue that the E8 looks very poor value compared to the competition, including the lower Ex0 models.
[/quote]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 07, 2014, 02:18:18 pm

I'd hardly call the Ex a consumer model - it's clearly aimed at professionals in the HVAC, building and  and electrical markets.
professional thermographers may scoff at it but I suspect at least some of that is fear that their clients will buy one and stop calling them.

FlirOne is of course clearly aimed at the consumer

I sincerely hope thermographers are not using the E4 for building inspections, bearing in mind the standards state you need at least a 320x240 detector size.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 07, 2014, 02:23:05 pm
So, copying the eFlirInstaller.exe and the fif on the FAT partition does not produce anything: actually, it does, files are erased upon restart. Any file (other than the ones that got their in the first place) is erased, for that matter, and nothing happens.

At that point, I cannot do more until I get it fixed/exchanged and then I will be more cautious.

Hopefully by the time I come back to the forum there will be progress  ;D

just dropped nk.bin there. Same result: gets erased on cold reboot.

Both updater scripts (1.18 and 1.21) have some failure handling at the end (past asking for reboot). So obviously what happened was beyond that. In retrospect I was careless, I should have stopped before rebooting and tried to play with telnet. Oh well.

Sounds like that partition is some sort of service ramdisk used to bring the unit up after it's manufactured. Turn the thing on - connect it up - read the files (no error file for everything booted ok and the other file to give the prep PC something to prepare the initial firmware load with) then write the firmware issuing a command from the serial console to flash or maybe that hidden load button. I don't think your going to be able to restore that E4 without connecting to the debug serial header and mabe some special files/software that FLIR is unlikely to give out. :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 07, 2014, 02:25:03 pm
Mike,

Its a little like  the comparison between the compact fully-auto digital snapshot camera and a highly sophisticated, Auto/Manual Pro SLR. A professional can use either and likely take good pictures with both BUT when asked which is aimed at the consumer market, there would be little doubt that 'Consumer' described the Compact better than the very sophisticated, complex and expensive SLR ..... I suppose its all relative really  :)

To me, as a user of the more complex cameras, I see the E4 as a relatively simple camera which is easy to use, but limited in functionality, especially in that it has no manual control over span and centre temperature. So for me it is the Fully Auto 'Compact' of the thermal imaging world  :) After upgrade, it becomes a far more 'professional' camera in terms of capabilities and I like it a lot. It's only negative throwback to its original form is the small fixed focus lens that cannot be easily changed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 07, 2014, 02:37:50 pm

I'd hardly call the Ex a consumer model - it's clearly aimed at professionals in the HVAC, building and  and electrical markets.
professional thermographers may scoff at it but I suspect at least some of that is fear that their clients will buy one and stop calling them.

FlirOne is of course clearly aimed at the consumer

I sincerely hope thermographers are not using the E4 for building inspections, bearing in mind the standards state you need at least a 320x240 detector size.
There are plenty of building applications outside producing formal inspection reports.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on March 07, 2014, 02:52:09 pm
There are plenty of building applications outside producing formal inspection reports.
Indeed. Like informally checking the house for any huge thermal differences for fun and isolation material induced profit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 03:46:05 pm
@OrBy: you are most likely right. What is slightly ennoying is that we are probably heading toward the point where we realize that xoring the config files was the easy stuff, and that the nasty one is in the bootloader. This being said, I understand from earlier messages in the thread that even the new version can do the better resolution when calibrating or something. If it can do it for its own purposes, no reason that it couldn't be forced to do it for *our* purposes.

@tomas123: I'll decode my own cfc files and tell you if your version is faster than the matlab one  >:D

@aurora&mike: enlightening discussion you guys are having. I am not a professional, and such a tool is still quite a bit above the price range I would shell out under normal circonstances. Still, I needed one for various reasons and indeed, even with the low resolution, the MSX is quite good at providing a clear picture. On the long run, I suppose that even if we defeat the current hack, they will come up with better and better solutions. How often should such a toy be recalibrated by a professional ? (I mean, this recalibration is what gives them the edge, at the end, because you get a choice of "enhanced" abilities or good calibration...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 03:52:28 pm
Today, i unzipped the 1.21-FW-Upgrade-Package from FLIR, rename the fif to zip and clicking thru the files.

All the files are marked as CRC-32 instead of CRC-03 in the crypted config-file.

And there is an nk.crc-Textfile:
Code: [Select]
FILE NK.bin 10463367 720767253What is the usage of this numbers in the update-package?

And FLIRLaunch.dat-Textfile:
Code: [Select]
# Optional check - HW type. HW type indicates camera the same
# way as resource .version.hwtype (or camera cmd "gethwtype")
TargetHwType:Z3

# Optional info - update type  (combination, OS, kit, option...)
UpdateType:swcombination

# Optional info - version of this update
TargetVersion:1.21.0

# Optional internal consistency check command[s]
CheckIntCommand:battPercent:20

# Optional external check command[s] (of type 0)
CheckExtCmd0:kitcrc -m \FlashIFS\FLIRUpdate\Z3comb_v1.21.0 -c NK.crc:Consistency check - OS crc error
CheckExtCmd0:kitcrc -m \FlashIFS\FLIRUpdate\Z3comb_v1.21.0 -c FlashBFS\system\kits.d:Consistency check - filekits crc error

# Commands that will be run in specified order provided that all
# CheckIntCommand and/or CheckExtCmdX has indicated OK
# (and CRC32 of this file is OK)
Command:\FlashIFS\FLIRUpdate\eFLIRInstall -c \FlashIFS\FLIRUpdate\Z3comb_v1.21.0\eFLIRInstall_MSD.dat

# The checksum below (including #) has been added by fixcrc on this file.
# Parser (AppServices or "gui") should verify this checksum initially and
# possibly report error; typically "remount launcher checksum error"
# CRC32 23b08a6e


and in system/appcore.d/factory.d are some textfiles

But there is no config-File anywhere. Is it possible, that flir create this file in the system? And when all systems(E4 to E8) are on the same hardware, how do they separate them to set the correct factory settings? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 04:31:09 pm
the crc are there for consistency checks before starting the upgrade. Like you don't want to flash a file that has been corrupted over transfers.

As for your other question (where do they differentiate between E4 -> E8), I was wondering myself but I did not look very deeply into the fif.

I think answering this question might shed some light on various issues. I understand that in the previous firmware, basically all the functionnality was there, and some were crippled through the config files. This time, some binaries where removed, so understanding how the corresponding functions are performed for the higher end models could be interesting ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 05:53:57 pm
...
To me, as a user of the more complex cameras, I see the E4 as a relatively simple camera which is easy to use, but limited in functionality, especially in that it has no manual control over span and centre temperature.

Espacially the manual temperature span works absolutely fine since the Beta3 on the 1.21-E4. And Temperature analysis in the full Image can be done after download the files to pc. The only thing, i think could be handy is: to auto-spot the hottest or coldest point in the Thermal field and show the temperature of the spot. Next to this, i think, it could be handy to snapshot 3 files, a clean thermal image, a digital image and a textfile or csv with all the in-picture-data(scaling, spot temperature and Pixel-coordinates of hottest and coldest points with its temperature) 

So for me it is the Fully Auto 'Compact' of the thermal imaging world  :) After upgrade, it becomes a far more 'professional' camera in terms of capabilities and I like it a lot. It's only negative throwback to its original form is the small fixed focus lens that cannot be easily changed.
But with the running Beta3 on the 1.21-E4, you can modify the linear shift between digital and thermal an so, you can use the device easy for the most of the jobs like a good 75mm-equivalent on SLR. Here just two things: some serial commands over usb could be fine to Power up a LED-Foto-Light without open the TIC. And the second thing is a tripod-connector(somebody has already done this modification with the battery) 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 05:59:50 pm
the crc are there for consistency checks before starting the upgrade. Like you don't want to flash a file that has been corrupted over transfers.

As for your other question (where do they differentiate between E4 -> E8), I was wondering myself but I did not look very deeply into the fif.

I think answering this question might shed some light on various issues. I understand that in the previous firmware, basically all the functionnality was there, and some were crippled through the config files. This time, some binaries where removed, so understanding how the corresponding functions are performed for the higher end models could be interesting ?

I think, when they have a crc-32-checkroutine in the cam, why should they use an other crc for files, they create on the system?

The question about separating the different TICs could be a question about an other way to get the new functions. If you reflash a premodified update-container, you can get a crypted, closed, unhackable but full functional E4-device  :-+ ( or a brick |Ok)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 07, 2014, 06:10:17 pm
But there is no config-File anywhere. Is it possible, that flir create this file in the system? And when all systems(E4 to E8) are on the same hardware, how do they separate them to set the correct factory settings?

up to now, config files are untouched while firmware update
Flir wrote this files while calibration of camera
-> in this case E4/E5/E6 gets the same update files

I several times ask in this forum what happens if a user makes a manual update from 1.19 to 1.21.
We know, that 1.21 boots successful without conf.cfc in native mode (80x60 without msx)
first i put the e8cfg in the folder, reset to factory-> no changes
next i delete the old conf.cfc-file, reset to factory->no changes
Code: [Select]
.caps.config: (3)
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name                          ""    // empty configuration name!!!

.caps.config.image.settings: (4)
r---r--------- 0 root   root   <i> IRheight                      60 //no high res mode
r---r--------- 0 root   root   <i> IRwidth                       80

It's possible, that a manual update without new conf.cfc from 1.19 to 1.21 results in a slightly bricked cam (80x60 without msx) and the TIC needs a flir service  ;D

Anybody knows, whether Flir Tools offers a (automatic) update from  1.19 to 1.21. for the E4/E5?
I do not expect it...


There are many hackable Flir TIC on the market (we know ix, Ex, Exx and possibly more series like Kxx).
Flir until now never delivers upgrades for old series.
Let's wait and see the strategy. Ebay will push the old cams  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 07, 2014, 07:00:20 pm
So if what I'm reading is correct, applying the original hack to the newer cameras will brick them?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 07:02:48 pm

There are many hackable Flir TIC on the market (we know ix, Ex, Exx and possibly more series like Kxx).
Flir until now never delivers upgrades for old series.
Let's wait and see the strategy. Ebay will push the old cams  :)

You give up? :--

What did "Taucher" said to the CRC-03?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 07:03:47 pm
So if what I'm hearing is correct, applying the original hack to the newer cameras will brick the device?

I have a "half-hacked" device, which working fine
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 07, 2014, 07:36:14 pm
@Rainer: btw, I was wondering exactly what config you are running now ? the old UI binary with the added menus ? or the added menus only which work with the new binaries ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 07:59:01 pm
@Rainer: btw, I was wondering exactly what config you are running now ? the old UI binary with the added menus ? or the added menus only which work with the new binaries ?

I run a E4-FW1.21

I tested the e8.config, but it didn´nt work. Then i deleted my crypted config with no effect and restored them.

Later i tested the i2c.exe and the prodapp.exe from the old FW1.19 to sample some information for cracking the crypted files. All the things i have done for tomas as he instructed me working fine, but no HighResMode was possible.

Then i tested the old appcore. This also working fine on my TIC.

Later i installed the BETA3 from Taucher and now, i have a couple of new options, which makes a significant upgrade in usability.




I found in the backup of my TIC two interesting files. There a two parameters behind each file-entry. Did flir precalculates the CRCs? Or did the TIC check them anyways?
Quote
# prodkit.rev
# This file contains revision information for all loaded
# files in a kit
# Do not edit

NAME prodkit
VERSION 0
DATE 12-Feb-2014

# format: FILE <filename> <size> <CRC32>
#     or: FILE <filename> undefined
FILE flashbfs\system\combtabs.d\combtab.prodkit 2705 2812783919
FILE flashbfs\system\kits.d\prodkit.rev undefined
FILE flashbfs\system\web\ctrlcam.asp 4298 2777764764
FILE flashbfs\system\web\images\flirtrans.gif 9560 3471597168
FILE flashbfs\system\web\inc\camtype.inc undefined
FILE flashbfs\system\web\inc\restree.inc 4596 441201453
FILE flashbfs\system\web\inc\sitewidgets.inc 3239 2505186734
FILE flashbfs\system\web\inc\usermenu.inc 717 1894527103
FILE flashbfs\system\web\inc\versions.inc 2092 419951093
FILE flashbfs\system\web\index.asp 6601 2223685810
FILE flashbfs\system\web\rtp.asp 4043 3107314533
FILE flashbfs\system\web\smallcam.asp 4183 713538584
FILE flashbfs\system\web\styles\flirweb.css 5565 1492719729
FILE flashbfs\system\web\sysinfo.asp 6601 2223685810
FILE flashbfs\system\web\webcam.asp 901 922760025
FILE flashbfs\system\web\webpopup.asp 4043 3480063023
Quote
# appkit.rev
# This file contains revision information for all loaded
# files in a kit
# Do not edit

NAME appkit
VERSION 1.0.16
DATE 10-Jan-2014

# format: FILE <filename> <size> <CRC32>
#     or: FILE <filename> undefined
FILE flashbfs\system\appcore.d\factory.d\default_params.rsc 1472 2185293074
FILE flashbfs\system\appcore.d\factory.d\ui_archive.rsc 284 623741465
FILE flashbfs\system\appcore.d\factory.d\ui_control.rsc 467 2239378611
FILE flashbfs\system\appcore.d\factory.d\ui_display.rsc 191 3867561398
FILE flashbfs\system\appcore.d\factory.d\ui_fusion_always.rsc 111 1935031912
FILE flashbfs\system\appcore.d\factory.d\ui_pipfusion.rsc 512 2840232353
FILE flashbfs\system\appcore.d\factory.d\ui_remove_uicore_gui.rsc 273 2790243335
FILE flashbfs\system\appcore.d\factory.d\ui_start_facet.rsc 818 3146439369
FILE flashbfs\system\appcore.exe 1760768 3442989494
FILE flashbfs\system\appcore_dll.dll 686592 3206292197
FILE flashbfs\system\applaunch.dat 544 4248174058
FILE flashbfs\system\appservices.exe 325120 131577177
FILE flashbfs\system\battery.icons\battery_frame.bmp 77878 4000596581
FILE flashbfs\system\battery.icons\flash_graybackground.bmp 2086 1990763675
FILE flashbfs\system\battest.exe 5120 2251393597
FILE flashbfs\system\bootlogo.bmp 77878 4263985570
FILE flashbfs\system\bootlogo_legal.bmp 77878 3836861670
FILE flashbfs\system\bt.exe 8192 4071575274
FILE flashbfs\system\bw.pal 3192 1681767566
FILE flashbfs\system\cecompat6.dll 4608 4045365591
FILE flashbfs\system\chargeapp.exe 32768 3564829563
FILE flashbfs\system\combtabs.d\combtab.appkit 2705 2812783919
FILE flashbfs\system\common_dll.dll 1193984 3567384037
FILE flashbfs\system\dbtest.exe 24576 1092980507
FILE flashbfs\system\defaultusr.exe 5120 784976136
FILE flashbfs\system\distmap.fff 1480 3055981799
FILE flashbfs\system\facet_core.dll 1257472 2511314107
FILE flashbfs\system\facet_exe.exe 5120 1233506562
FILE flashbfs\system\facet_ui_qml.dll 1472000 621186924
FILE flashbfs\system\fpga.bin 632704 1351741304
FILE flashbfs\system\freeze.exe 9728 936245703
FILE flashbfs\system\ftest.exe 41984 1024639405
FILE flashbfs\system\fvd.dll 106496 1515716869
FILE flashbfs\system\gethwtype.exe 19456 3088389631
FILE flashbfs\system\imageformats\qgif4.dll 33792 3417464108
FILE flashbfs\system\iron.pal 3112 2828306868
FILE flashbfs\system\kitcrc.exe 301056 3540060692
FILE flashbfs\system\kits.d\appkit.rev undefined
FILE flashbfs\system\kits.exe 7168 632656675
FILE flashbfs\system\level.exe 9728 2628187395
FILE flashbfs\system\nuc.exe 10240 2610821507
FILE flashbfs\system\palette.exe 10752 464184973
FILE flashbfs\system\progressapp.exe 27648 3868968713
FILE flashbfs\system\qtcore4.dll 2864640 1978210823
FILE flashbfs\system\qtdeclarative4.dll 3403264 334871801
FILE flashbfs\system\qtgui4.dll 5570560 724646993
FILE flashbfs\system\qtnetwork4.dll 516608 2292488155
FILE flashbfs\system\qtscript4.dll 1650688 203428169
FILE flashbfs\system\rainbow.pal 3093 2536627832
FILE flashbfs\system\rclone.exe 9216 2084543743
FILE flashbfs\system\rcreate.exe 10752 164634856
FILE flashbfs\system\rdelete.exe 9728 1668963676
FILE flashbfs\system\rdump.exe 10240 1070406349
FILE flashbfs\system\recall.exe 11264 2982293392
FILE flashbfs\system\resmon.exe 188928 3444402641
FILE flashbfs\system\restree.dll 40960 536197024
FILE flashbfs\system\rfind.exe 10752 1267375240
FILE flashbfs\system\rls.exe 14336 1413714667
FILE flashbfs\system\rotationmapccw.fff 1480 1632318203
FILE flashbfs\system\rotationmapcw.fff 1480 395212282
FILE flashbfs\system\rpatch.exe 10240 2548461096
FILE flashbfs\system\rreload.exe 8704 4201028577
FILE flashbfs\system\rset.exe 13824 408260706
FILE flashbfs\system\rverify.exe 9216 1383441815
FILE flashbfs\system\services.d\factory.d\dcf.rsc 118 2354299725
FILE flashbfs\system\services.d\factory.d\dcim.rsc 119 4038415784
FILE flashbfs\system\services.d\sql.d\default.sql 8781 149868454
FILE flashbfs\system\services.d\sql.d\defaulttextfield.sql 1015 1102409983
FILE flashbfs\system\span.exe 9728 3398018886
FILE flashbfs\system\sqlite.dll 423936 4250343061
FILE flashbfs\system\stopapp.bat 304 2940831057
FILE flashbfs\system\store.exe 22528 4280939406
FILE flashbfs\system\suid.exe 3584 221334787
FILE flashbfs\system\supv.exe 9728 240560634
FILE flashbfs\system\syslog.exe 73728 1044482548
FILE flashbfs\system\taskmgr.exe 22016 1515231995
FILE flashbfs\system\tprls.exe 8192 152830205
FILE flashbfs\system\treeproxy.dll 84480 2464225402
FILE flashbfs\system\ui.d\design_ui_z3.xml 31678 2143429451
FILE flashbfs\system\ui.d\facet_z3.rcc 206587 3061843404
FILE flashbfs\system\ui.d\fonts\gulim.ttf 119696 4124050443
FILE flashbfs\system\ui.d\fonts\mingliu.ttf 167904 3264670505
FILE flashbfs\system\ui.d\fonts\msgothic.ttf 103768 3656814746
FILE flashbfs\system\ui.d\fonts\simsun.ttf 126448 4072330505
FILE flashbfs\system\ui.d\languages\strings_cs.qm 37425 3797833529
FILE flashbfs\system\ui.d\languages\strings_da.qm 36531 940902589
FILE flashbfs\system\ui.d\languages\strings_de.qm 38735 2009213114
FILE flashbfs\system\ui.d\languages\strings_el.qm 39393 1110818361
FILE flashbfs\system\ui.d\languages\strings_en.qm 35999 2585439826
FILE flashbfs\system\ui.d\languages\strings_es.qm 38621 2531747438
FILE flashbfs\system\ui.d\languages\strings_fi.qm 36777 2410128193
FILE flashbfs\system\ui.d\languages\strings_fr.qm 38843 1667692400
FILE flashbfs\system\ui.d\languages\strings_hu.qm 37522 1947279460
FILE flashbfs\system\ui.d\languages\strings_it.qm 38567 3452599217
FILE flashbfs\system\ui.d\languages\strings_ja.qm 30692 205294168
FILE flashbfs\system\ui.d\languages\strings_ko.qm 30290 4041748703
FILE flashbfs\system\ui.d\languages\strings_nb-no.qm 36767 3806744485
FILE flashbfs\system\ui.d\languages\strings_nl.qm 38131 3178141702
FILE flashbfs\system\ui.d\languages\strings_pl.qm 37819 4188141756
FILE flashbfs\system\ui.d\languages\strings_pt.qm 38209 2950374436
FILE flashbfs\system\ui.d\languages\strings_ru.qm 38426 3463078458
FILE flashbfs\system\ui.d\languages\strings_sv.qm 36407 4057731832
FILE flashbfs\system\ui.d\languages\strings_tr.qm 36688 825758328
FILE flashbfs\system\ui.d\languages\strings_zh-chs.qm 28366 2850435286
FILE flashbfs\system\ui.d\languages\strings_zh-cht.qm 28602 899181547
FILE flashbfs\system\ui.d\retailmodeimages\building\building.png 233457 4087367693
FILE flashbfs\system\ui.d\retailmodeimages\building\building2.png 233457 822441740
FILE flashbfs\system\ui.d\retailmodeimages\building\building3.png 233457 1211929052
FILE flashbfs\system\ui.d\retailmodeimages\building\building4.png 233457 1901681265
FILE flashbfs\system\ui.d\retailmodeimages\building\building5.png 233457 1387997691
FILE flashbfs\system\ui.d\retailmodeimages\building\building6.png 233457 3053286244
FILE flashbfs\system\ui.d\retailmodeimages\building\building7.png 233457 4142162705
FILE flashbfs\system\ui.d\retailmodeimages\building\building8.png 233457 3719195114
FILE flashbfs\system\ui.d\retailmodeimages\building\building9.png 233459 4106347948
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical.png 233457 3561065053
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical2.png 233457 3624618999
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical3.png 233457 3150106711
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical4.png 233457 3171029511
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical5.png 233457 2189150432
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical6.png 233457 2651767234
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical7.png 233457 4214428961
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical8.png 233457 2159425733
FILE flashbfs\system\ui.d\retailmodeimages\electrical\electrical9.png 233459 4106347948
FILE flashbfs\system\ui.d\toolbar-config_z3.xml 1121 2108642323
FILE flashbfs\system\usbpower.bat 240 2721728187
FILE flashbfs\system\version.exe 13312 3974754876
FILE flashbfs\system\zeromap.fff 1480 2529221937
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 07, 2014, 08:43:53 pm
You give up? :--

What did "Taucher" said to the CRC-03?
no,
I'm also waiting on Taucher and the results from ida disassembler ...

you asked for many details, which are already decoded
sorry for my short answer

p.s.: I hove no hope, that a correct crypted conf.cfc with key
.caps.config.image.settings.IRwidth int32 320
works fine. The E4 will ignore in 1.21 this key like already all keys for setting the frequency
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 07, 2014, 08:54:59 pm
@waiting: I'm currently very very busy with other stuff - will take some time - plus I'm not the greatest IDA/ASM guy -> maybe TNT can help out?
@XOR - I took some looks at the "key finder" and were a bit puzzled by the keysize and the fact that the config date is the same ... I'd check for known ".conf." parts and use them for computing a key... but again - way too little time ATM.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 07, 2014, 09:04:56 pm
Hi all, forgive my lack of tech know how, but I have E4 with 1.21.0. I can get to various screen just with button presses, I have managed to get to a screen <Version information. This lists the following:

IRDM                       0.0.1.0
POLLUX                   0.1.0.0
POLLUX_FPGA         8.1.25.0
camcore                  T198304-01-63813827
detector                  *-*-*
mainboard               T198283-11-20127538
appkit                      1.0.16
confkit                      E4 1.1L
osimgkit                   16.0.12
prodkit                      0
Appcore                    22.0.0.1
AppServices              22.0.0.1
Bootloader                16.1.5.0
ResMon                     22.0.0.1
WinCE                       6.0.0.0
appcore_dll               1.9.0.1
common_dll               1.9.0.7
facet_core                 22.0.0.1
facet_ui_qmi              22.0.0.1
fvd                             16.0.47.0


I can scroll down any of the above and hold right key for about 10 seconds then it takes you to a blank screen headed as per selection.

Not a clue if any of that helps, just thought I would throw it in.

Chorleybloke




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 07, 2014, 09:38:56 pm
In "Settings/Device Settings/Camera Information/Software/" is the hidden menue(10s right-Button) with "USB-Mode", "Export information" and "Version information".

In "USB-Mode" you can select the RNDIS and now the cam has a USB-Virtual Network Interface. You need the driver and then you can do some networking things(Filezilla-FTP for upload and download, Putty-telnet for remote control, network device instead of USB-Device for the picture-Filesystem)

Device-Mount is an option of the flir Network-Driver. You can only access to the IFS-Folder

For FTP call 192.168.0.2 with user: flir and pass: 3vlig. Here you get access to the complete filesystem.
Please make a complete download and zip and upload it here. Attention on your private fotos in the IFS-Folder. And have a look to "Taucher´s" Beta3. There is a couple of good working Menues like manual scale setting and the flir logo becames invisible.

For Telnet call 192.168.0.2 and you get a WIN CE-Prompt on the TIC .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 08, 2014, 12:20:11 am
I'm not the greatest IDA/ASM guy -> maybe TNT can help out?

I found the post
I'm the one that reverse engineered the CRC01 function and wrote CRC01.

wow, I thought you wrote CRC01  :-[

unfortunately is TNT since November 18, 2013 offline  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 08, 2014, 01:01:32 am
I'm not the greatest IDA/ASM guy -> maybe TNT can help out?

I found the post
I'm the one that reverse engineered the CRC01 function and wrote CRC01.

wow, I thought you wrote CRC01  :-[

unfortunately is TNT since November 18, 2013 offline  :(
My contributions were mainly the menu-"hack" (just re-adds dormant functions, method to edit RCC files) and later on EzCRC01 (got fed up by ppl asking for how to press enter (CRLF) in an editor + wanted to have someting to quickly re-generate the CRC01 - due to time constraints the whole .exe didn't reach my internal goal of a really foolproof one-click-to-fixup-.conf-tool, but got stuck in a rather "hacky" state (anyway - 80% is better than 0%) ... it's basically the original crc01 exe with some additional code to detect and cut away portions that don't belong into the computation of the crc01 (removing the not-to-checksum bytes seemed to be the hardest part for newbies - not everyone does instal a hex-ed as one of his first tools to a new machine *G*).

Also there's the whole part of early analysis of the 1.21.0 firmware where my toolset of unpacking, diffing, string-extraction and some IDA work went into.
But I won't risk my good old E4+ by doing something stupid like "upgrading" it to 1.21.0 ... that's the reason why the CFC mechanism went undetected in the first analysis.
The greatest thing would be a way to emulate the NK.bin file ... but my attempts to use the MS emulator failed (unfortunately like expected) without any logs etc.

 @CRC01: I was a bit amazed how precise TNT's code solved the algo-problem... there's a lot of computational "goodness" that I can just imagine to be horrible when looked upon in ASM... my IDA skills are present, but not to an extend of complex decompilation (note difference to disassembly). Note to myself: lookup where the CRC01 is actually residing inside the old firmware

Well, gotta get some sleep - this night will be very short for me (again)...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 08, 2014, 10:58:41 am
@CRC01: I was a bit amazed how precise TNT's code solved the algo-problem... there's a lot of computational "goodness" that I can just imagine to be horrible when looked upon in ASM

Sylvain Munaut <tnt@246tNt.com> used this code as template
https://code.google.com/p/aarni/source/browse/tags/0.1.5/ripemd160.cpp?spec=svn5&r=5
but only the "minor changes" are incredible to find
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 08, 2014, 02:09:40 pm
I disassembled 1.21 appcore earlier in the thread and found few places where it looks like it checks CRC sig version and does goto fail (:P) when its not high enough, It would be trivial to put a nop in there , or change bne to beq/b
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: equinoxe on March 08, 2014, 08:37:53 pm
I disassembled 1.21 appcore earlier in the thread and found few places where it looks like it checks CRC sig version and does goto fail (:P) when its not high enough, It would be trivial to put a nop in there , or change bne to beq/b


Most often I am just lazy and I never call the checking subroutine or put a return on the first line of the routine in that call, this works on most x86 programs, but should work with arm equally well.

Just played with the new IDA Pro demo for mac, wow, that has evolved big time, the graphical flow add-on (proximity view) is awesome!
*Checks price for full version.. Nope, ain't going to happen..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ebnelson on March 09, 2014, 02:23:44 am
So if what I'm reading is correct, applying the original hack to the newer cameras will brick them?

The 1.21.0 firmware seems to just ignore the original hack fif.  I think I read on this thread that it falls back to the original 1.21 configuration.  It happens so fast it seems like a normal boot.  I'm not aware of any loss in functionality from my failed attempt to enable full resolution.  Luck of the draw when purchasing the camera I guess.  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 09, 2014, 04:12:22 am
im the way to go is to
-xor old crc01 config with recovered xor key
-upload patched appcore with nop'ed crc version check (it first reads checksum and then later checks if its high enough  version of crc routine)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 09, 2014, 12:18:36 pm
-upload patched appcore with nop'ed crc version check (it first reads checksum and then later checks if its high enough  version of crc routine)

don't forget, since 1.21 in applaunch.dat are checksums for major binaries
Code: [Select]
# Show intro bootlogo and start progress
progressapp -f \flashbfs\system\bootlogo.bmp -g flashbfs\system\bootlogo_legal.bmp -d
# Start command shell on the RS-232 port
cmd /R
# Register a default user
defaultusr
# Start appcore. Appcore starts other necessary processes
appcore

# doCRC FlashBFS\system\appcore.exe 1760768 3442989494
# doCRC FlashBFS\system\common_dll.dll 1193984 3567384037
# doCRC FlashBFS\system\progressapp.exe 27648 3868968713
# doCRC FlashBFS\system\defaultusr.exe 5120 784976136
# ID all
# CRC03 aad87665

but you can kill the appcore.exe and start a patched  appcore1.exe over a new menu entry in Tauchers menu system :-)

a sample
Code: [Select]
> rset appl.supv.exec "cmd /c date /T"
Sat 2/15/2014

//the same as script
> echo date /T > \flashifs\1.cmd
> rset appl.supv.exec "cmd /c \flashifs\1.cmd"
    \>date /T
    Sat 2/15/2014

in this way we don't need a crc03 keygen and any patched original files with the risk of building a paperweight

ps: I haven't checked, whether a cmd-script (shell) started over the menu state machine survive a "ps -k appcore".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 09:07:39 am
I had tested it under your guidance: you have to kill the AppServices first. Else you get a message "appcore is in use" or somthing like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 10, 2014, 10:51:11 am
Hello
3D parts for E4:

I contacted lunevalley3d for a quote on the parts, their price is
very good but they told me that now print exclusively in PVA edit: see below, and
will not print in abs.
I've read that some forum members had the parts printed by lunevalley,
what kind of plastic did they use?

I dont like PVA since afaik it's unstable and moisture sensitive,
anyone knows a good 3d printing service with decent prices
that prints in abs?

Thanks.

Edit: it was a misunderstanding, they meant PLA and not PVA, that's
better.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 10, 2014, 11:28:24 am
I had tested it under your guidance: you have to kill the AppServices first. Else you get a message "appcore is in use" or somthing like that.

ok, see my post here
Code: [Select]
ps -k appcore
ps -k AppServices

and your log

\>ps -k appcore
Failed to terminate process 0x4D20002 (170)

\>ps -k AppServices
Successfully terminated process 0x76E0002

\>ps -k Resmon
Successfully terminated process 0x79A0002

A minor change. I wrote about a untested concept...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 12:26:47 pm
@ Rainer

Maybe you want to give this a try:

The attached ZIP file contains a modified configuration file for
"FlashFS\system\appcore.d\config.d\conf.cfc". What has been
modified:

- Serial Number of Rainer's E4 (of course)
- All settings adjusted according to the "E4->E8" hack
- "CRC03" adjusted
- Hash adjusted
- "Scrambled" using the SUID of Rainer's E4 (I won't call this XOR stuff encryption)

I don't know if this will work or if this will break anything but so far it is what
I think might be the new way to protect the configuration.

If you want to try it out please make a backup copy of your old conf.cfc and
replace it with the new one from the ZIP file. Cold-start your E4 and see what
happens.

Again, please note that I can't give you a guarantee what will happen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 12:49:24 pm
@Rainer: If you really want to try out the .cfc-file from ds, please backup all logs you can find after booting with the new .cfc-file. Especially the prod.log from the /Temp directory.

@ds: Are you willing to share some background information on how you did that? :) I thought the CRC03 checksum hasn't been "cracked" yet?


EDIT: @Rainer: The config file from the zip file needs to be renamed, it is still called "conf.cfg"!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 01:05:51 pm
@stefbeer

Those Windows CE executables are not that hard to "read" if you have some
experience in reverse engineering.

I think I understand how the "CRC03" is calculated and how the configuration
file is protected, if I apply this knowledge to the three plain, decoded "conf.cfc"
files of Rainer's E4 I get the same "CRC03" and also the identical protected
configuration file.

However if changing the configuration is enough to enable the higher resolution
is something else, maybe there are additional protection mechanisms. The modified
configuration also contains changes like enabling "Zoom", the effect of this should
be verified too.

Before releasing more details I would like to have some confirmation that it
actually works, otherwise it would confuse more than it helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 01:25:28 pm
@ds: That's the experience I'm missing. ;) Of course, I understand that. Thank you for that insight! :)

I tried to decode your generated config file with the php script from tomas123: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg401244/#msg401244 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg401244/#msg401244)
But I noticed some issues with the file. I'm not sure if it's the php script not working correctly or me doing something wrong. I just thought I'd share my findings.

At the end of line 6 there's a $ instead of a "
On lines 49 and 63 is a "ETX" (end of text) control character before the LF (and no CR).
On line 111 is a "VT" (vertical tab) control character before the LF (and also no CR).
Line 124 just seems to be junk.

Can you prove / disprove this?


EDIT: My fault, I didn't generate the correct key, thus the decoding didn't work properly. See: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg402854/#msg402854 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg402854/#msg402854)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 10, 2014, 01:31:51 pm
The modified
configuration also contains changes like enabling "Zoom", the effect of this should
be verified too.
great idea to verify the crc03
the test is without risk


We know, that 1.21 boots successful without conf.cfc in native mode (80x60 without msx)
first i put the e8cfg in the folder, reset to factory-> no changes
next i delete the old conf.cfc-file, reset to factory->no changes
Code: [Select]
.caps.config: (3)
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name                          ""    // empty configuration name!!!

.caps.config.image.settings: (4)
r---r--------- 0 root   root   <i> IRheight                      60 //no high res mode
r---r--------- 0 root   root   <i> IRwidth                       80

@ Rainer
check the loaded configuration with
Code: [Select]
rls -rl .caps.config
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 10, 2014, 01:51:01 pm
However if changing the configuration is enough to enable the higher resolution
is something else, maybe there are additional protection mechanisms.
Remember that one early discovery on the original hack was that it appears to use the eeprom to communicate the resolution, either to something early in the boot process, or possibly the FPGA itself.  The exact mechanism, or reason for doing it wasn't really explored.
An I2C bus analysis of the new FW might be interesting
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 02:14:14 pm
your mistake:
You must generate the key.bin with a the original conf.crc file from E4!!
The edited config from user ds has to many differences to get a valid key...

You're right, that was my bad. After adapting the template file the decoded file looks much better. Except the "junk" from line 124 is still there. But that might be because of the hash or scrambling.
I should stay out of territories I'm not familiar with... Sorry if I caused any confusion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 02:35:54 pm
@tomas123

The tail of the protected configuration file contains the original size of the plain
configuration. The other values are fixed in the few samples I have seen, they
are some kind of flag to indicate for example how the XOR stream is generated.

Please note that there is also an additional MD5 hash with a few "secret" bytes
to further protect the configuration.

Regarding the XOR keystream: I did not yet try the tools posted here but use the
way how it is done in the firmware, basically the SUID determines the XOR keystream.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 03:26:41 pm
How can i do this i2c-exploration? Because, i had scanned the whole bus and posted all data i found.

To the patched file: Is there any trouble with the file? you said, there are wrong characters in it?

There are many conf.crc in my TIC:
FlashFS\system\ui.d\config.d\  352 Byte
FlashFS\system\services.d\config.d\ 352 Byte
FlashFS\system\appcore.d\config.d\ 6,18 KByte

Which on i have to change?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 03:34:02 pm
To the patched file: Is there any trouble with the file? you said, there are wrong characters in it?

That was my own fault, I didn't generate the correct key for decryption. That's why my decrypted file showed some errors.


There are many conf.crc in my TIC:
FlashFS\system\ui.d\config.d\  352 Byte
FlashFS\system\services.d\config.d\ 352 Byte
FlashFS\system\appcore.d\config.d\ 6,18 KByte

Which on i have to change?

The original hack only changed (or added, to be more correct) a file in flashfs/system/appcore.d/config.d/. I'd say that's the one. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 04:57:58 pm
I´m happy now, and @Taucher: You can modify your signature now :-DD

Get an impression:

The humidy-option is now working:
(http://up.picr.de/17611875su.jpg)

Two new Picture-Modes(PIP)
(http://up.picr.de/17611809aw.jpg)

New Measurement spotting(Menue was already in Beta 3, but did not work. Now it does work)
(http://up.picr.de/17611783wv.jpg)

New Temp-Scaling(same as in the Beta3 i patched before)
(http://up.picr.de/17611781ud.jpg)

New Color palettes(Red above, Condensation, Insulation and Interval are new since Beta 3)
(http://up.picr.de/17611779ti.jpg)

New zoom option:
(http://up.picr.de/17611732tv.jpg)

And the Best at the end:
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
Thermal resolution:
(http://up.picr.de/17611724ca.jpg)

The txt-Files shows the -caps.config-Parameters.
alter_Zustand ist the old setting with Beta 3, but without the new config
neuer_Zustand is the new settings after this patch


All Options working absolutely fine
I´m very happy now. How can i help to patch all the other 1.21-TIC´s to say "Thank you" at all the supporters here?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 10, 2014, 05:09:36 pm
Great work  :-+

Hopefully this will pull the rug from under the guys profiteering on 1.19.8 E4's on e*ay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 10, 2014, 05:13:11 pm
I´m happy now, and @Taucher: You can modify your signature now :-DD

Congrats!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jakamil on March 10, 2014, 05:16:18 pm
Quick question. It is possible to use the hack on camera - Flir E5?
Thank you for your response.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 05:19:51 pm
It should be the same hardware in the E5. so why not.

But there are some difficulties with the firmware to clear. This Patch for the 1.21-Firmware is a special option for me atm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jakamil on March 10, 2014, 05:22:49 pm
verze firmware je 1.19.8


It should be the same hardware in the E5. so why not.

But there are some difficulties with the firmware to clear. This Patch for the 1.21-Firmware is a special option for me atm.
Quick question. It is possible to use the hack on camera - Flir E5?
Thank you for your response.
[/quote]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 10, 2014, 05:37:29 pm
Rainer - lets see a pic of the non-MSX output! Show that upgraded puppy off. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jakamil on March 10, 2014, 05:39:45 pm
For sure the camera before buying it. I ask again.
Quick question. It is possible to use the hack (ADDMENU-BETA3) on camera - Flir E5? firmware version is 1.19.8
Thank you for your response.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 10, 2014, 05:43:34 pm
Nice!! So how long has this taken to hack? From release of firmware about a month ago to being beaten?
How long til Flir release 1.22.0 with more countermeasures :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 05:49:50 pm
@Rainer

Great to hear that my configuration file worked for you !
I am surprised that even the resolution change worked and they
did not protect this harder.

I would like to do one or two more tests, could a user
with an E4 and the new firmware post the configuration
file "FlashFS\system\appcore.d\config.d\conf.cfc" here ?
(Please not more than two, this should be enough for
further testing).

I am thinking of how to proceed, either use the SUID (can
be displayed by suid.exe and also by other means) or try
to get the SUID from the "conf.cfc" file directly (this is possible
as long as the first few bytes of the configuration are the same
as it is right now).

The first method is more general, the second one is more convenient.
Probably I will take the second one if further tests work too, for the
next change by FLIR to defeat this most certainly the first method will
not work either.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hgg on March 10, 2014, 05:52:32 pm
Very Nice !     :-+ :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 05:54:10 pm
Nobody said to me, i have to upgrade to a 1.22-FW. So for me, it´s fine to have a hacked 1.21 and a 1.22 didn´t have response to me...

But the way is shown and the next hack will be possible anyways
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on March 10, 2014, 05:56:31 pm
wooooooooooaaaaaah!!!!!  :clap:  :scared: :clap:  :scared: :clap:

impresive!!!  :-+

I agree with Aurora, I'm to get 5 flirs and sell them +30€ for the shipping costs and  and credit the blog to explode unfair trading in ebay.
//////////////////////////////////////////////////////////////////////////////////////////////

I was reading and did not whant to interrupt the high level discusion that was going on, but wanted to share a thing.

I "discovered"  probably its known, that stainless steel acts as a perfect mirror for the ir band. Its impressive, If you take an snap of a boiling water stainless steel pot, it simply reflects the temperature of the surrounding elements.

Also its funny how the visible light is so much affected by scratches and the thermal is not.

I wonder if this could be used to build a mirror like lens.
http://img268.imageshack.us/img268/446/mirrornn.jpg (http://img268.imageshack.us/img268/446/mirrornn.jpg)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 10, 2014, 06:14:52 pm
 E4 and the new firmware conf.cfc here
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 10, 2014, 06:48:35 pm
Thermal resolution:
Have you confirmed this looking at the actual image? - bear in mind resampling is done in the FPGA, and you could have a situation where the software thinks it's 320x240 but actually isn't

Images of sharp diagonal lines are a good way to judge
   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 10, 2014, 07:11:32 pm
Wow that was fast. 1.21 hacked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 10, 2014, 07:32:42 pm
Just wondering if Flir is watching this thread to see how good their "locked" firmware is and how fast it gets hacked!
Yes, I know they are watching.... just would like to know if they are testing "us" to see what they need to do to create the next "unhackable" firmware/hardware!
Would give almost anything to be a fly on Flir's walls!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 08:00:26 pm
@Artemio

Thanks for the file.

Appended is a ZIP file with your modified config file. It has the
same "E4->E8" changes like the ones in Rainer's modified file.

Please replace the file "FlashFS\system\appcore.d\config.d\conf.cfc"
with the new file, do a cold-start and report the results. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on March 10, 2014, 08:28:30 pm
I "discovered"  probably its known, that stainless steel acts as a perfect mirror for the ir band. Its impressive, If you take an snap of a boiling water stainless steel pot, it simply reflects the temperature of the surrounding elements.

I did a similar experiment a while ago, it took lots of convincing for some people! https://www.eevblog.com/forum/blog/eevblog-401-lecroy-9384c-oscilloscope-repair-part-2/msg173654/#msg173654 (https://www.eevblog.com/forum/blog/eevblog-401-lecroy-9384c-oscilloscope-repair-part-2/msg173654/#msg173654)

Regarding the new hack, AWESOME work. Does the new prototype hack completely upgrade the E4 to an E8? If so, I might try upgrading the firmware on my E4+ to unlock some additional functionality!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 09:37:05 pm
For your knowledge: i had install the beta3 from Taucher before i changed the Configfile!


I take a "thermal-only"-pic of my LCD-Monitor-Edge while i hold the cam in about 45°-angle.
(http://up.picr.de/17615332tr.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 10, 2014, 09:38:20 pm
For your knowledge: i had install the beta3 from Taucher before i changed the Configfile!


I take a foto of my Monitor-Edge while i hold the cam in about 45°-angle.
(http://up.picr.de/17615332tr.jpg)

Was that with MSX turned off?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 10, 2014, 09:40:16 pm
Yes, i switched it off for a real "thermal-only"-Pic, like Mike requested
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 10, 2014, 09:46:14 pm
Yes, i switched it off for a real "thermal-only"-Pic, like Mike requested

That looks better then 80x60 to me then.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Wann on March 10, 2014, 09:56:53 pm
Nice!! So how long has this taken to hack? From release of firmware about a month ago to being beaten?
How long til Flir release 1.22.0 with more countermeasures :)

Flir pulled the plug on 1.21.0 in their download section and upped to 1.22.0

Just in case if you haven't already:
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.21.0_update_pack.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 10, 2014, 09:58:37 pm
Haha... and I thought I was kidding.
This looks like it could be a fun arms race to watch. I think I'm going to hold back though for now; don't really have a grand to blow on a TIC, yet...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on March 10, 2014, 10:07:40 pm
Wow, fantastic stuff! Although i don't have TIC (and actually no need for one either), i'm following this thread closely.

@ds: Nice work figuring this stuff out! Hopefully the fine folks here can have a peek at some code of yours soon ;)

All in all, goes to show what happens if "encryption" or "protection" is just an afterthought (or badly implented to boot, like in other things). I think that companies more often than not (still?) underestimate the power that communities on the 'net can have.

Fascinating stuff here, keep on going!

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: veetee on March 10, 2014, 10:18:28 pm
Quote
I would like to do one or two more tests, could a user
with an E4 and the new firmware post the configuration
file "FlashFS\system\appcore.d\config.d\conf.cfc" here ?
(Please not more than two, this should be enough for
further testing).

Attached conf.cfc from new firmware cam.  Great work everyone.

On a side note can anyone tell me how to ftp to the cam in osx10.9, had to use my windows7 vm to grab the config. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 10, 2014, 10:36:16 pm
I've not been able to update my conf.cfc file, since I've not been able to reestablish an ftp connection to my flir e4.

FLIRInstallNet sees the device, but always times out.

MSD works if changed from the camera.

I had run the Set_RNDIS_permament.fif and cold booting hasn't helped, any ideas on what I should do to restore ftp access?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 10:41:54 pm
Flir pulled the plug on 1.21.0 in their download section and upped to 1.22.0

Unbelievable... I really couldn't believe it until I saw it with my own eyes...
http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip)

Is it possible that they waited for somebody to hack the 1.21.0 until they release the 1.22.0 ? Or is it just some kind of tidying up?

I compared the two .fif packages and the only "important" change seems to be an updated fpga.bin . The other files are just adjusted version numbers and checksums because of the adjusted version numbers.
Is it a good sign that the fpga.bin got a bit smaller?
The jump in the timestamp of the fpga.bin seems to be a bit big. Did they forgot something? Or did they really prepare it and save it for a second hit?


@Artemio: Do you see the network device of the camera? Has the default gateway of the network device changed? Did you also reboot your computer?
You could also try to reinstall the FLIR network driver, I think that did the job for somebody a while back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 10, 2014, 10:44:09 pm
Is it a good sign that the fpga.bin got a bit smaller?
You can't read anything useful into the size of the fpga file. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on March 10, 2014, 10:45:10 pm
Great to see that I did not brick in vain  ::)
Congratulations to all !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 10, 2014, 10:52:51 pm
Just curious, how hard is it to reverse-engineer an FPGA binary file?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 10, 2014, 10:53:40 pm
@veetee

Here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 10, 2014, 11:01:47 pm
Just curious, how hard is it to reverse-engineer an FPGA binary file?
Near impossible.
Format is very undocumented, and even if you could extract the logic, it would be very hard to figure out the high level functionality from it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 10, 2014, 11:09:03 pm
@stefbeer No luck reconencting to my camera here =/ The IP address changes every time, so I guessed the network configuration was bad. I reinstalled drivers, no good. I also used a completely different machine and did eveything from scratch, and it is no good either. I am always getting a different IP address in the network adapter for the Flir device form the PC.

I attach a screenshot.

I did manage to get 192.168.0.2 once, and it responded to ping, however it did not connect via ftp of the FLIRInstallNet.exe even then, from this machine or from the one I just set up. Rebooted the camera and machines several times. Any ideas?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 10, 2014, 11:30:36 pm
Hi,

I did manage to get 192.168.0.2 once, and it responded to ping, however it did not connect via ftp of the FLIRInstallNet.exe even then, from this machine or from the one I just set up. Rebooted the camera and machines several times. Any ideas?

I did have this issue too, but only on my laptop.
I work with the camera on another computer inside a Win 7 x64 virtual machine and it works well

The laptop is Win 7 x64 too so I have no idea what is wrong with it, it doesn't receive any packet from the camera exactly like you describe.

I would suggest you try with another computer, I spent hours troubleshooting this issue and I couldn't find any reason why it wouldn't work on that particular computer. Just try another one.

Hope this helps.....
uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 10, 2014, 11:34:13 pm
Hi

Just wondering if Flir is watching this thread to see how good their "locked" firmware is and how fast it gets hacked!
Yes, I know they are watching.... just would like to know if they are testing "us" to see what they need to do to create the next "unhackable" firmware/hardware!
Would give almost anything to be a fly on Flir's walls!!!!

Speaking of myself I have absolutely, really absolutely no moral problem with this hack.
I was misinformed by the FLIR website itself when purchasing a Exx series camera a few weeks ago.
I contacted FLIR about it so that we could try to find a solution and they didn't want to do anything.
They just didn't care. They sold another TIC and it's all what matters for them. They have bad business practices.

This hacks allows me to get some justice in the end.

But we're not going to start this discussion all over again...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 10, 2014, 11:35:39 pm
@Artemio: One possibility would be to disable or disconnect every network connection of your machine and only reconnect the camera. Then the camera should setup it's default IP address.
Another possibility is to do things step by step.
- Enable RNDIS via the hidden menu
- Connect the camera to the computer
- Look for the FLIR network interface
- Look at the details of the FLIR network interface, especially its default gateway. This is the address you have to connect to. I've never paid attention to the IP address of my computer but I think it's possible that it changes, but that doesen't matter. You only need the address of the default gateway. Maybe you could post a screenshot of the network interface details.
- Try to connect to the default gateway from one step earlier. I've never tried to ping the camera so I have no idea if it's even possible.

The fact that FLIRInstallNet shows the camera as "Local Area Connection 6" is a bit confusing. Also the IP range shown in your screenshot doesen't look right. 169.254.109.244 seems to be an automatic assigned address by the client because it didn't receive an IP address from the DHCP server. Maybe some security software blocking the communication?
And do you have FLIRInstallNet opened while you try to connect via FTP? I also never tried that, so I don't know if it works or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 10, 2014, 11:37:36 pm
Hi,

@Artemio: One possibility would be to disable or disconnect every network connection of your machine and only reconnect the camera. [...]

I suspect it will not work. On some computers there is no communication through the RNDIS link.
If you look at the packet count, received packet count stays at zero.
This means no DHCP replies and no IP setup.

I tried putting an IP address manually (192.168.0.1) and I couldn't ping the camera either.

Really, when that happens, try with another computer.

uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: veetee on March 10, 2014, 11:53:10 pm
@veetee

Here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.

Looks good, I don't have all the menu's Rainer does but all I did was swap config.  Will get some pics up soon for verification. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 12:13:45 am
@stefbeer

- Disabled Windows firewall completely
- Disabled all network adapters, I only had one
- Removed the Flir device drivers
- rebooted
- reinstalled device drivers
- Enabled RNDIS from hidden menu
- rebooted FLIR
- connected camera to computer
- Got the following (attachment)
- FLIRInstallNet gave the same results, detected a device in 169.254.221.255 but Get Versions times out.

I've tried having the FLIRInstallNet opened and closed, but since I can't even get the gateway I guess it doesn't matter.


I will be moving to a different machine as @uski suggests, aside form the different one I already tried before.

What a *great* moment for this to happen =(

thanks for the help
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 11, 2014, 12:15:22 am
You have to install the Beta3 from Taucher to get the full functionallity
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: veetee on March 11, 2014, 12:20:14 am
@Rainer - looking into Beta3

Here are current thermal only, non-MSX pics

security
(http://i.imgur.com/obxvit0.jpg)

tv box
(http://i.imgur.com/dT4nY80.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 11, 2014, 12:32:08 am
If you can't get 192.168.0.2 to work, turn IPv6 off in the adapter settings for INFRARED.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 12:46:26 am
No luck, disabled ipv6, tested in 4 machines. I got the same in all of them.

I came back to the main machine to try the ipv6 thing, and I it finally gave me the 192.168.0.2 gateway via DHCP... however nothing is working networking wise. I still can't connect via ftp, I cannot connect via FLIRInstallNet , it always times out.

It seems I am out of luck here... what could have gone wrong? I only used the fif files for RNDIS...

What can I do now?

PS. I can ping 192.168.0.2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 11, 2014, 12:47:28 am
No luck, disabled ipv6, tested in 4 machines. I got the same in all of them.

I came back to the main machine to try the ipv6 thing, and I it finally gave me the 192.168.0.2 gateway via DHCP... however nothing is working networking wise. I still can't connect via ftp, I cannot connect via FLIRInstallNet , it always times out.

It seems I am out of luck here... what could have gone wrong? I only used the fif files for RNDIS...

What can I do now?
Check the subnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 11, 2014, 12:49:14 am
What a *great* moment for this to happen =(

Assuming that you have RNDIS enabled from the E4's hidden menu and the RNDIS drivers installed on the PC:

Disconnect the E4's USB cable and all network connections. Check that the network is really gone (e.g., ipconfig from a command prompt). Turn OFF the FLIR. Connect the USB cable between the E4 and the PC. Then, turn the E4 ON.

When I was having problems getting the RNDIS network to enumerate properly, I tried it as described and immediately got a good 192.168.0.1 IP from the camera and then was off and running with FileZilla. Give it a try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 12:50:24 am
@echen1024 It is 255.255.255.0

This is the log I get when pushing Get versions, since I need to run the fif for enabling ftp
Code: [Select]
2014-03-10 18:52:48,0153 005700 * Commander::GotoExitState sending EV_GOTO_NEXT
2014-03-10 18:52:48,0169 005700 * Commander::PostMessageA 3024 4 0
2014-03-10 18:52:48,0169 005700 * FIF::FIFInstallerEngine::PostMessageA 3024 4 0
2014-03-10 18:52:48,0169 005700 * Commander::OnCmdEvent (4,0)
2014-03-10 18:52:48,0169 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->5
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::StateExitState
2014-03-10 18:52:48,0185 005700 * Close TELNET link
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::OnStateChange from 5 to 0
2014-03-10 18:53:11,0553 005700 * FIF::FIFInstallerEngine::OnStateChange from 0 to 1
2014-03-10 18:53:11,0553 005700 * FIF::FIFInstallerEngine::Execute posting  EV_GOTO_NEXT thread id: 5700
2014-03-10 18:53:11,0553 005700 * Commander::OnCmdEvent (4,5700)
2014-03-10 18:53:11,0569 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:53:11,0569 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->1
2014-03-10 18:53:11,0569 005700 * FIF::FIFInstallerEngine::StateReadyState ENTER
2014-03-10 18:53:11,0569 005700 * Connecting to: 192.168.0.2
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::OnStateChange from 1 to 3
2014-03-10 18:53:11,0585 005700 * Commander::SetCommandState changing stat from 0 to 0
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::StateReadyState waiting for connection.
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::StateReadyState LEAVE
2014-03-10 18:53:12,0599 005700 * TELNET link established
2014-03-10 18:53:17,0669 005700 * Connection timeout
2014-03-10 18:53:19,0104 005700 * FIF::FIFInstallerEngine::OnStateChange from 3 to 5
2014-03-10 18:53:19,0104 005700 * Operation aborted

2014-03-10 18:53:19,0119 005700 * Commander::GotoExitState sending EV_GOTO_NEXT
2014-03-10 18:53:19,0119 005700 * Commander::PostMessageA 3024 4 0
2014-03-10 18:53:19,0119 005700 * FIF::FIFInstallerEngine::PostMessageA 3024 4 0
2014-03-10 18:53:19,0119 005700 * Commander::OnCmdEvent (4,0)
2014-03-10 18:53:19,0135 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:53:19,0135 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->5
2014-03-10 18:53:19,0135 005700 * FIF::FIFInstallerEngine::StateExitState
2014-03-10 18:53:19,0135 005700 * Close TELNET link
2014-03-10 18:53:19,0151 005700 * FIF::FIFInstallerEngine::OnStateChange from 5 to 0

@RAWebb Thanks for the feedback, I will hold to the one I just got while I can. Although I cannopt access it via any means but ping.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 11, 2014, 01:24:17 am
There is an E4 running 1.19.8 on eBay right now at £1,100. I wonder if it will go higher now 1.21.0 is apparently hackable.
http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f (http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 01:27:59 am

Assuming that you have RNDIS enabled from the E4's hidden menu and the RNDIS drivers installed on the PC:

Disconnect the E4's USB cable and all network connections. Check that the network is really gone (e.g., ipconfig from a command prompt). Turn OFF the FLIR. Connect the USB cable between the E4 and the PC. Then, turn the E4 ON.

When I was having problems getting the RNDIS network to enumerate properly, I tried it as described and immediately got a good 192.168.0.1 IP from the camera and then was off and running with FileZilla. Give it a try.

No luck either, it gives me my IP address but not the gateway.

I ran a port scanner on 192.168.0.2, and all ports are closed. Any other options I have?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on March 11, 2014, 01:29:47 am
In Filezilla do not use a password or a username and try it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 11, 2014, 01:34:14 am
@Artemio

Can you run an

ipconfig /all

from the console so we can see if there is any adapter IP assignment conflict?

I suspect this is probably down to something like the order the virtual adapter driver is loaded or something more convoluted but maybe its something simple?

For anyone in the know, i have a question, are the current stock E4s loaded with the v1.21 firmwares?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on March 11, 2014, 01:37:13 am
There is an E4 running 1.19.8 on eBay right now at £1,100. I wonder if it will go higher now 1.21.0 is apparently hackable.
http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f (http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f)

The problem is on several fronts. One is that, for now, .21 is only "apparently" hackable. .22 is out already. Next is that there is a _huge_ amount of bozos out there on eBay, who will pay ridiculous money for stuff. Last but not least, there are those who like to have something better, for a low price, but are unable to do the hacks on their own (or fear to fail doing it and getting into trouble), and thus are willing to pay a premium.

There will always be leechers who benefit from the work of others, no way around it. Not that i think it is OK that folks sell hacked stuff for a huge premium on eBay, but such is life.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 11, 2014, 01:39:10 am
I had the same thing with the network at my start with the E4. Disable all Networks, cold start the TIC and use (while network driver is installed) another usb-port. Then the TIC will prompt and a few minutes later, the driver works.

on the clock-side of the Windows-Bar is a little sign from the network-driver.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on March 11, 2014, 01:58:46 am
So my new e4 with 1.21.0 is sitting here staring at me. i have gone back through a couple of times but am having difficulties following everything that was done to rainer's camera so that I can duplicate it on mine. I deserve the abuse but would it be possible (and I am likely not gonna be the only one to ask) for a step by step rundown even if it just says this is what we did that worked (go find it...) I appreciate all the efforts of everyone concerned in advance. I figure if this is done ds won't get about a million pm's with requests. And it could then be pinned to the original post.

Thanks,

I know enough to know I don't know enough...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 01:59:36 am
@Artemio

Can you run an

ipconfig /all

I did, only the FLIR was active =/

I had the same thing with the network at my start with the E4. Disable all Networks, cold start the TIC and use (while network driver is installed) another usb-port. Then the TIC will prompt and a few minutes later, the driver works.

on the clock-side of the Windows-Bar is a little sign from the network-driver.

Just tested this, and no luck either. i tried three machines that didn't have any FLIR software installed, from scratch. They give me the correct IP and gateway, but FLIRInstallNet  fails in teh exact same way. it times out, so I cannot run the file to enable FTP again. Thanks

In Filezilla do not use a password or a username and try it.

No good, the port is closed. Thanks

In the current state I believe something happened that caused the FLIR to not be able to start the services. Flir tools doens't see the camera either. MSD and web cam mode work fine. Is there a way to reflash the firmware not involving flir tools (it doesn't recognize the camera), or a reset other than the one in the menu?

Otherwise, it seems I will be stuck the way I am.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on March 11, 2014, 02:04:55 am
You said the port is closed does that mean you tried it or are just using portscan info? If you click on my name and then view my posts and answers that where given you may find the answer to your problem.  Whatever you try after each time pull the battery and reconnect the usb cable before you try something else or you will miss whatever it is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 11, 2014, 02:07:04 am
Do you use the RNDIS-only setting or the combined MSD_UVC_RNDIS-Mode? The combined Mode don´t work well and can cause your problem. Best is to use the RNDIS-only-Mode and in the driver, you can set the TIC-Storage(the IFS-PArt) as a network-Drive.

In the TIC-Menue(Storage Settings) you can set the TIC back to Factory-Settings.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Viss on March 11, 2014, 02:25:55 am
I'm exited! I applied the beta3 hack (or at least part of it? I don't have the condensation stuff yet).
I'd like to apply this new patch - should I post something for ds to run scripts on, or can someone whip up a xda-forums style howto for those of us that wants that sweet sweet 320x240 goodness?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 11, 2014, 03:26:20 am
ds is the only one with the new CRC formula and file format details, the files he has posted are custom to the cameras/users he made them for so wont work on anyone elses camera from what i understand.

I think ds is waiting for a few confirmations that the files he has created are working before releasing his code/tool.

I'd be happy to port the formula/tools to .NET UI application if that would be of any benefit and with ds's permission once the dust settles.

I'm currently holding off ordering my own E4 until the result of this new method are confirmed by a few people. Paying an extra £200+ for a 1.19 version E4 isn't that appealing if 1.21 can be unlocked also, but more people need to apply the patches ds creates and confirm before we know for certain.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Viss on March 11, 2014, 03:39:36 am
Right - I'm aware of the logistics - it's why I asked whether ds prefers more people posting configs to try, or if he's ready to post his method.
I'm happy with either :)

here's my conf.cfc, in the event it's the former.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 11, 2014, 04:58:51 am
@stefbeer No luck reconencting to my camera here =/ The IP address changes every time, so I guessed the network configuration was bad. I reinstalled drivers, no good. I also used a completely different machine and did eveything from scratch, and it is no good either. I am always getting a different IP address in the network adapter for the Flir device form the PC.

I attach a screenshot.

I did manage to get 192.168.0.2 once, and it responded to ping, however it did not connect via ftp of the FLIRInstallNet.exe even then, from this machine or from the one I just set up. Rebooted the camera and machines several times. Any ideas?

Thanks
One thing that might be affecting network connectivity.... make SURE NO other nic is active... I always had this problem, and the only way to connect the TIC is to unplug my network cable and turn off the wireless.
I know others have said to force a NIC metric on all the interfaces, but that didn't work for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 11, 2014, 04:59:55 am
@Artemio: One possibility would be to disable or disconnect every network connection of your machine and only reconnect the camera. Then the camera should setup it's default IP address.
Another possibility is to do things step by step.
- Enable RNDIS via the hidden menu
- Connect the camera to the computer
- Look for the FLIR network interface
- Look at the details of the FLIR network interface, especially its default gateway. This is the address you have to connect to. I've never paid attention to the IP address of my computer but I think it's possible that it changes, but that doesen't matter. You only need the address of the default gateway. Maybe you could post a screenshot of the network interface details.
- Try to connect to the default gateway from one step earlier. I've never tried to ping the camera so I have no idea if it's even possible.

The fact that FLIRInstallNet shows the camera as "Local Area Connection 6" is a bit confusing. Also the IP range shown in your screenshot doesen't look right. 169.254.109.244 seems to be an automatic assigned address by the client because it didn't receive an IP address from the DHCP server. Maybe some security software blocking the communication?
And do you have FLIRInstallNet opened while you try to connect via FTP? I also never tried that, so I don't know if it works or not.
OOPS... ya beat me to it!  plus I didn't read the whole thread... thanks for verifying this for me also!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 11, 2014, 07:09:34 am
Anybody checked the changes in version 1.22.0?

http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)

FLIR Ex (1.22.0) Update Pack   
Last Updated: March 10, 2014

if Flir can fast update the version, we should wait some time before publish the new hack

edit:
winmerge differences in new version see here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403163/#msg403163 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403163/#msg403163)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cboles on March 11, 2014, 07:10:07 am
Here is another conf.cfc along with its xor'd version from a 1.21 E4 I just picked up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 11, 2014, 08:01:55 am
Big question is: is the new firmware done for disable the new patched firmware or is this done for some new features and bugfixing? It is possible to get a new hardwarebased encryption method, but: i have sometimes a rotating display when startup with usb on the device. So i think, if this is a software-bug, this could happen to many other users of this new Firmware and flir changed some startup-setting in the fpga-"display-unit" to fix this.


(since the actual patch, i had this effect not anymore. But i tested only one day...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 11, 2014, 08:07:53 am
So far there are two confirmations that the modified config files work.
I would like to have two more, just to be sure, before releasing
the code.

@Viss

Here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 11, 2014, 08:09:02 am
@cboles

And here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 08:10:23 am
You said the port is closed does that mean you tried it or are just using portscan info? If you click on my name and then view my posts and answers that where given you may find the answer to your problem.  Whatever you try after each time pull the battery and reconnect the usb cable before you try something else or you will miss whatever it is.

I did both, and on several machines. Now including the one at home that makes it 4, and three of them were new installations, the last one tested with no network connection at all.

Every time reconnecting and taking the battery away, this last time for several hours.

I am afraid it is simply that the camera is not starting any network service.


Do you use the RNDIS-only setting or the combined MSD_UVC_RNDIS-Mode? The combined Mode don´t work well and can cause your problem. Best is to use the RNDIS-only-Mode and in the driver, you can set the TIC-Storage(the IFS-PArt) as a network-Drive.

In the TIC-Menue(Storage Settings) you can set the TIC back to Factory-Settings.

Yes, rndis-only, I ended up testing the other modes out of desperation.

I did access the reset that is under "Settings->Device Settings->Reset Options->Reser device settings" and it does nothing to help me out. I can't find a storage settings option, where is that located?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cboles on March 11, 2014, 08:21:11 am
It works! The resolution change was immediately noticeable. Is there anything else you would like me to check specifically?

@cboles

And here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Artemio on March 11, 2014, 08:28:00 am
It worked!

I finally got ftp running again. After writing the last post, I did a reset again, rebooted teh camera and changed the USB mode to RNDIS+MSD, and it recognized it and worked again!

I updated and finally can see the resolution change, thanks a lot for your help.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 11, 2014, 09:32:09 am
@cboles

Thanks for trying it out, I think if the resolution change worked everything
else should be fine.

-----------------------------------------------------------------------

Appended is a ZIP file with the tools (source code plus Windows binaries)

The tools are for Windows and have to be used from the command line.

First of all there is no guarantee and you have to know what you
are doing. Please also be aware that I won't give support for any
problems you might have when trying it out or if it does not work
for you.

The ZIP file contains tnt's slightly modified CRC tool to calculate
the new CRC03. There is another tool to "unprotect" and "protect" the
configuration file.

Here are the steps:

- "unprotect" the protected configuration file:

   ftool.exe -d conf.cfc conf_plain.txt

   You will get the plain config file in "conf_plain.txt". The tool
   will display the SUID, you will need it later for protecting
   the plain config again. The output looks like this (this is just
   an example):

  SUID: 0x181A8800 0x02D54B2A 


- Apply any modification you need to the plain config file "conf_plain.txt".

  If you don't know what to modify you could use the configuration template
  "conf_template.cfg" from the ZIP file and replace "xxxxxxxx" with the ID
  of your device.
 

- Calculate the new CRC03, be sure to first remove the last line in
  "conf_plain.txt" beginning with "# CRC03" before calculating the new
  CRC03:

  crc03.exe conf_plain.txt

  The output looks like this:

  Add the following line to the .cfg file :
  # CRC03 a78cd4f5

  Add the new CRC03, be sure to take care of the final CR+LF.


- Protect the modified config file, you need the SUID displayed when
  unprotecting the original config file:

  ftool.exe -e conf_plain.txt conf_new.cfc 0x181A8800 0x02D54B2A   

  Be sure to take your SUID displayed when unprotecting your configuration
  file and not the one above, it won't work otherwise.

  Rename the new, protected config file "conf_new.cfc" to "conf.cfc",
  and replace "FlashFS\system\appcore.d\config.d\conf.cfc", cold-start
  and you are done.


If anyone wants to take the source code and create a more user-friendly
GUI tool feel free to do so. The code of the (un)protection tool is not optimized
or especially cleaned up to make it more readable, however there are some comments
inside and it should not be too hard with some C knowledge to understand how it
works.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Viss on March 11, 2014, 10:04:14 am
Worked like a champ!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsg on March 11, 2014, 10:24:10 am
wow! You guys are cool.
I am still waiting for my 1.21(suposed to be delivered today/tomorrow) but guess there is no need for additional data..
FLIR guys must be chewing their hats
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: informer on March 11, 2014, 12:40:59 pm
Hello everyone,

please keep in mind, that the user JAKAMIL is one of cunning boys which benefits from this hack. His name is Kamil Psenicka (alias Jakamil) www.termoelektro.cz (http://www.termoelektro.cz), from the Czech republic. He takes about 730 EUR (1013 USD) for this 5 min modification and it is for him a big business. Is possible to add a license agreement, that this hack is only for personal and non-commercial use?
It is sad that someone such benefits from the knowledge of anyone else who provides free hack. Have a nice day,

John
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 11, 2014, 12:43:45 pm
Regarding the new 1.22.0 firmware:

If you compare (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403163/#msg403163) the 1.21.0 and the 1.22.0 , the only major difference is the fpga.bin . As mike stated (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403180/#msg403180) earlier, it's not really a possibility to reverse engineer the file. So what would be the easiest thing to do? Just trying it out and see what it does.

My initial thought was to take a camera with firmware 1.21.0 and just switch the fpga.bin . But then I remembered that FlashBFS/system/kits.d/appkit.rev contained the size and a CRC32 checksum of the file. So that file also needs to be adjusted.
And now, while writing this, I also noticed something. The appkit.rev from above also contains the file size and a CRC32 checksum of FlashBFS/system/ui.d/facet_z3.rcc which we already modified for Tauchers menu hack. And nothing complained about the non-matching size or checksum. So maybe this could be ignored?

Anyway, my question is now: Would it be safe to take a camera with firmware 1.21.0 and switch the fpga.bin to the one from firmware 1.22.0, reboot the thing and check if the hack still works?
I hardly know anything about FPGAs, so I don't know what it could do (like modifying the bootloader, setting a flag in the EEPROM, ... Might sound a bit exteme but I really don't know or understand much about the internal structure). And would it be possible to switch back to the original one if it doesn't behave as we expected?


@ds: Really awesome work!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 11, 2014, 12:51:36 pm
Don't really see the problem with people doing this for money.
Just make it as easy and fast as possible so people can cut out the middlemen.
If they want to pay these middlemen that's their prerogative.

Alternatively, if a bootloader/applauncher mod is required, forcefully include a link to eevblog forum and "Easy/Free E4 hacking by <authors>"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 11, 2014, 01:40:02 pm
Regarding the new 1.22.0 firmware:


Anyway, my question is now: Would it be safe to take a camera with firmware 1.21.0 and switch the fpga.bin to the one from firmware 1.22.0, reboot the thing and check if the hack still works?
I hardly know anything about FPGAs, so I don't know what it could do (like modifying the bootloader, setting a flag in the EEPROM, ... Might sound a bit exteme but I really don't know or understand much about the internal structure). And would it be possible to switch back to the original one if it doesn't behave as we expected?

Hard to say without knowing what the differences are. IMO any permanent issues are unlikely.
Bear in mind that most of what the FPGA is doing is signal processing of the image data, and as we know that it is being loaded by the processor at boot time, so it is not doing anything that would stop it booting, however the firmware will be interacting with it to some extent, and it is probable that it will be doing a version check for compatibility, and apart from that, if the interface to the host has changed it may fail to work or crash. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: informer on March 11, 2014, 01:50:52 pm
Alternatively, if a bootloader/applauncher mod is required, forcefully include a link to eevblog forum and "Easy/Free E4 hacking by <authors>"

Yes, this is certainly one way - to highlight the deceived people paying for something that is free. Maybe other forum members can find more effective ways out of the game these immoral people.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsg on March 11, 2014, 02:10:44 pm
I would suggest that modding tools are not to be put on the open thread.
I would setup a MOD group that could supply the files for each camera on request against a donation/fee that would benefit the forum or the MOD group. That way any commercial activity can be identified and dealt with at MOD's discretion.

I can only speak for myself and I am not associated with any of the developers on this forum or FLIR nor I am involved in sale of FLIR devices.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on March 11, 2014, 02:18:28 pm
I'm not sure what the final outcome but was, but wasn't there someone who got a unit bricked while helping out? I think they should get a few donations if they cant get their unit repaired under warranty.

Also agree those that put in the work should have some form of recognition or at least a means whereby people can chip in a donation to them or their chosen charity.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on March 11, 2014, 02:24:38 pm
I think that the easyest way to destroy the thermal upgrade business in ebay is that we massively post adds  "selling" the info posted in the offer at 1ct. Pointing to this thread or forum and explaining that they can upgrade their cams by investing 1-3 hours.  Explaining that if they buy a 2000€ thermal upgraded e4 once sent for recalibration will be downgraded  etc...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 11, 2014, 02:30:47 pm
It's free to list on eBay below £1.00 so that could work, but eBay might frown upon it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 11, 2014, 02:44:03 pm
There's nothing anyone can do about some guy on the street offering the upgrade for a fee to someone who doesn't know any better. I strongly disagree with being deceptive and charging people for a service you know is free and simple, but if they're not being dishonest and everyones aware and they still want to do it for a small fee, don't see the issue.

Restricting access to the tools and information will if anything breed a "for a fee" upgrade business. The info and tools will leak but less people will have access to avoid the "for a fee". It would also make the accomplishments achieved in this thread more difficult or impossible.

I don't really see why this is the forums concern either. This forum seems to be based on the principle of helping get information out there, publicly available and its members helping each other. Based on everything i've seen in this thread that's exactly what is happening and its great to see such an open helpful community achieving such great things.

@ds
Looked at your code, seems pretty straight forwards to port to me. Regarding the
Code: [Select]
#define XOR_SECRET  "Any probable_VAL!" Is this of no consequence or should some constant val be inserted here before compilation?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 11, 2014, 02:55:38 pm
Hi,

For those of you with an E30(bx) (not E4) PN 40xxx-xxxx with firmware 2.23.14, you can add Bluetooth by :
- Adding a cheap USB bluetooth dongle (there's the bluetooth USB driver in the OS), see the attached picture
- Modify the \FlashFS\system\services.d\config.d\conf.cfg to enable Bluetooth :

--------------------
#
# Appservices wlan configuration
#
.caps entry
.caps.config entry
.caps.config.name text "srvs E60"
.caps.config.revision text "0.10"
.caps.config.wlan entry
.caps.config.wlan.enabled bool true
.caps.config.bluetooth entry
.caps.config.bluetooth.enabled bool true
# ID 49xxxxxx
# CRC01 xxxxxxxx
--------------------

And voila it should work. I say it should because I don't have any MeterLink compatible device to test. But it shows the Bluetooth icon, allows me to turn it off/on and the LED pattern on the Bluetooth dongle changes accordingly, and I can start a scan.
The Bluetooth feature allows you to link some MeterLink compatible meters to add data directly into the IR images OSD (current, humidity, ...). http://www.extech.com/meterlink/ (http://www.extech.com/meterlink/)

About Wifi ? Well I found out that the chipset used must be 88W8688 (it's a combination bluetooth/wifi chip).
The bad news is that it's SDIO only, which means a module most be soldered onto the PCB. I didn't open the camera yet but I suspect the module is not there (or if it's there it's disabled either by hardware of software).

If I have an opportunity to open the camera, I'll try to see if the module is there and if no, I'll try to find where to buy it.
I think it's extremely likely that FLIR is using an off the shelf module.

---

Another option is to add the driver of a USB Wifi dongle. Several manufacturers publish compatible drivers. But I'm not familiar with WinCE enough to do that. Can anyone help me out with this ? Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on March 11, 2014, 03:07:16 pm
....

Restricting access to the tools and information will if anything breed a "for a fee" upgrade business. The info and tools will leak but less people will have access to avoid the "for a fee". It would also make the accomplishments achieved in this thread more difficult or impossible.

I don't really see why this is the forums concern either. This forum seems to be based on the principle of helping get information out there, publicly available and its members helping each other. Based on everything i've seen in this thread that's exactly what is happening and its great to see such an open helpful community achieving such great things.


First, it is not a small Fee.

And is it ok or not, is not for you or me to say.  It is for those who have put in the time and efforts doing the hack to say.  And they have spoken loudly. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on March 11, 2014, 03:15:37 pm
It's free to list on eBay below £1.00 so that could work, but eBay might frown upon it.
Who the hell cares, I frown upon ebay. Perfect symmetry. I like the idea. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on March 11, 2014, 03:16:12 pm
From the teardowns the module is not there, but the footprints for it are, so it will be easy to just get a compatible one and solder it in and have it work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 11, 2014, 03:19:28 pm
@Nemonic

Don't change the content of XOR_SECRET, its the value
used to generate the XOR keystream. This string value is
not my invention, its from the firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 11, 2014, 03:24:20 pm
....

Restricting access to the tools and information will if anything breed a "for a fee" upgrade business. The info and tools will leak but less people will have access to avoid the "for a fee". It would also make the accomplishments achieved in this thread more difficult or impossible.

I don't really see why this is the forums concern either. This forum seems to be based on the principle of helping get information out there, publicly available and its members helping each other. Based on everything i've seen in this thread that's exactly what is happening and its great to see such an open helpful community achieving such great things.


First, it is not a small Fee.

And is it ok or not, is not for you or me to say.  It is for those who have put in the time and efforts doing the hack to say.  And they have spoken loudly.

Fair point, those who published their work should rightly have say over how it is used, but i am also not sure how correct this is in regards to a crack. Surely trying to control the usage of software/information which circumvents and alters the usage of another which is also most likely under license a rather strange position? Cake and eat it situation?

In any case i don't want to debate the morality about it, just to say that the information should be free and made available. Any attempt to prevent it through restriction or license will most likely just make things worse and hobble the community with matters it probably shouldn't be worrying about.

What the contributors choose to do is entirely up to them, and i respect that, but i just wanted to share my thoughts on it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 11, 2014, 03:49:26 pm
Great work guys !

I was few days out and I see you just did it :-D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 11, 2014, 03:52:12 pm
Hi,

From the teardowns the module is not there, but the footprints for it are, so it will be easy to just get a compatible one and solder it in and have it work.

You've seen a teardown of an E30(bx) ?
Not the same hardware as an E4 - I thought of creating another thread for that Exx serie but as the OS is so similar to the E4 and the hacking info is the same, I think it's better to post it here and share (after all the menu hack uses files from the Exx series)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 11, 2014, 03:59:14 pm
For those of you with an E30(bx) (not E4) PN 40xxx-xxxx with firmware 2.23.14, you can add Bluetooth by :
- Adding a cheap USB bluetooth dongle (there's the bluetooth USB driver in the OS), see the attached picture
- Modify the \FlashFS\system\services.d\config.d\conf.cfg to enable Bluetooth
...
Another option is to add the driver of a USB Wifi dongle.

curious,
user funzt upgraded the E30 with WiFi and Bluetooth to 320x240 (without a dongle)
E30 has same components inside, WLAN and bluetooth is on board!!!
So it regognize my WLAN android hotspot,


edit:
we talked about this topic on February 12 ???
Thank you tomas123 :)
....
I just hope I can hack it !...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on March 11, 2014, 04:27:55 pm
I agree with Nemonic. The ebay sellers are providing a value added service and charging for it. In a free market economy potential buyers can decide for themselves if they wish to pay for the modification or not: a quick google of 'Flir E4 hack' brings this thread pretty close to the top, and any buyers can make their own decision whether they wish to chance the hack themselves or buy from a seller with a known hacked unit. The ebay sellers alleviate some of the risk for the buyer which comes at a price.

If I was one of those ebay sellers (which I'm not) then I would be worried about warranty claims and further repercussions down the line, but there should be nothing to 'stop' entrepreneurial types making a quick buck from otherwise free information. Let customers decide for themselves how to proceed.

Having said all that, I wasn't involved in producing the hack, so those involved may differ in opinion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on March 11, 2014, 05:16:09 pm
.....The ebay sellers are providing a value added service and charging for it. In a free market economy potential buyers can decide for themselves if they wish to pay for the modification or not.......

From your records, most likely your are not a e4-8 seller on ebay.  I think you have been misled by those who are.  Those selling on e4-8 are not been out front.  The premise of free market is not there. They are the ones forcing the hands of FLIR to stop the hack.  Eevblog or hackaday buyers for e4 are almost a nett gain to FLIR and their resellers as they would not buy a more expensive version or might not have bought a E4 without the hack.  The hacked e4-8 on ebay with the inflated price are reaching out to those who could have bought more expensive version.  The ebay e4-8 represented a Recorded, Loud, and lost sale to FLIR.  It is very difficult for FLIR not to react when people are selling hacked e4-8 on a worldwide online market like EBAY or Amazon at a very high price. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: solarbot on March 11, 2014, 05:22:37 pm
Hi All,

I have been looking around to see if it is possible to enable locking the MIN/MAX temp range on the E4 Hacked version - at the mo the two options are auto and locked.  I believe the E8 has this option so hopefully it is possible?

Anyone had any luck with this?

Cheers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on March 11, 2014, 05:28:39 pm
They are the ones forcing the hands of FLIR to stop the hack..........It is very difficult for FLIR not to react when people are selling hacked e4 on a worldwide online market like EBAY or Amazon at a very high price.

That is actually a very good point :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 11, 2014, 05:39:35 pm
@solarbot,

If the 'Taucher' menus are added you get, amongst many other usefiul options, the selection of upper and lower temperatures and teh ability to move a set temperature 'window' up and down in terms of centre temperature. You also get a very useful Electronic Zoom feature.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 11, 2014, 06:38:05 pm
It is very difficult for FLIR not to react when people are selling hacked e4-8 on a worldwide online market like EBAY or Amazon at a very high price.

it is trivial for flir to block those listings as counterfeits
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 11, 2014, 06:51:06 pm
They aren't counterfeit. They are just E4 which have been "performance upgraded".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 11, 2014, 06:54:25 pm
They aren't counterfeit. They are just E4 which have been "performance upgraded".
Depends on how they are described - using the original manufacturer's name for a modified product could be regarded as "passing off".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 11, 2014, 08:42:13 pm
It is very difficult for FLIR not to react when people are selling hacked e4-8 on a worldwide online market like EBAY or Amazon at a very high price.

it is trivial for flir to block those listings as counterfeits

It's not trivial to stop someone else's listings on eBay.  As a long-time eBay buyer/seller I've had experience with this.  I've reported fraudulent listings etc., it takes eBay forever to do anything about it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 11, 2014, 09:11:58 pm
They aren't counterfeit. They are just E4 which have been "performance upgraded".

so what exactly is the problem? are you all jelly or something ? ;)
I saw couple E4 sold as E8 on bay earlier, those would definitely fall under counterfeit.
There are tons of 'unlocked' Rigol scopes listed, not to mention unlocked phones. Even cars with reflashed ECU.

It's not trivial to stop someone else's listings on eBay.  As a long-time eBay buyer/seller I've had experience with this.  I've reported fraudulent listings etc., it takes eBay forever to do anything about it.

non trivial when you are nobody, too easy if you are a corporation
http://pages.ebay.com/help/policies/programs-vero-ov.html (http://pages.ebay.com/help/policies/programs-vero-ov.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 11, 2014, 09:30:30 pm
They aren't counterfeit. They are just E4 which have been "performance upgraded".

so what exactly is the problem? are you all jelly or something ? ;)
I saw couple E4 sold as E8 on bay earlier, those would definitely fall under counterfeit.
There are tons of 'unlocked' Rigol scopes listed, not to mention unlocked phones. Even cars with reflashed ECU.

It's not trivial to stop someone else's listings on eBay.  As a long-time eBay buyer/seller I've had experience with this.  I've reported fraudulent listings etc., it takes eBay forever to do anything about it.

non trivial when you are nobody, too easy if you are a corporation
http://pages.ebay.com/help/policies/programs-vero-ov.html (http://pages.ebay.com/help/policies/programs-vero-ov.html)

I think you greatly overestimate the ability of large corporations to get things done in a timely manner.  Thanks for calling me a nobody btw  :'(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 11, 2014, 09:49:58 pm
They aren't counterfeit. They are just E4 which have been "performance upgraded".

so what exactly is the problem? are you all jelly or something ? ;)
I saw couple E4 sold as E8 on bay earlier, those would definitely fall under counterfeit.
There are tons of 'unlocked' Rigol scopes listed, not to mention unlocked phones. Even cars with reflashed ECU.

It's not trivial to stop someone else's listings on eBay.  As a long-time eBay buyer/seller I've had experience with this.  I've reported fraudulent listings etc., it takes eBay forever to do anything about it.

non trivial when you are nobody, too easy if you are a corporation
http://pages.ebay.com/help/policies/programs-vero-ov.html (http://pages.ebay.com/help/policies/programs-vero-ov.html)

I think you greatly overestimate the ability of large corporations to get things done in a timely manner.  Thanks for calling me a nobody btw  :'(

Hey, you are a nobody .. compared to rolex or gucci :) try listing fake rolex and see how long it takes bay to ban your account.
Vero works similar to Youtube "dmca" takedowns. Big corp says jump, and they jump as high as they can.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 11, 2014, 10:03:37 pm
try listing fake rolex and see how long it takes bay to ban your account.
True. I was not listing any watches or cameras, but anyway I get my auction down in few hours. Luckily not banned account.
Just by using "wrong" words in my description. I guess its done by some automatic mechanism.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on March 11, 2014, 10:33:12 pm
Hi,

Many thanks for the hack, I would never have bought a TIC otherwise!

With regard to the high eBay prices, I think it has little to do with the value added by selling the unit hacked.  The prices went up due to very limited availability of hackable units (firmware < 1.21, whether supplied hacked or unopened and factory fresh).

Now 1.21 has been hacked, the prices should go back down again until supply of 1.21 units dries up and they release the next unhacked firmware.

Cheers!
Paul

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 11, 2014, 10:51:54 pm
try listing fake rolex and see how long it takes bay to ban your account.
True. I was not listing any watches or cameras, but anyway I get my auction down in few hours. Luckily not banned account.
Just by using "wrong" words in my description. I guess its done by some automatic mechanism.

Yet eBay is filled with fakes (including Rolex).  Apparently you weren't putting the "right" (wrong?) words in your title + description ;)

Anyhoo, the E4-E8 "upgraded" cameras aren't pretending to be something they aren't.  I'm nore sure how VeRO applies in this case, because it's not a copy.

I'm not saying FLIR couldn't do something about it, but if I were them I wouldn't want to pay someone to scout eBay all the time to find the ones that slipped by (assuming there were lots listed--there are not).  Better to make sure new cameras are more difficult to hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 11, 2014, 11:39:51 pm
OK! First off, just signed up after watching this forum (this thread in particular) for quite some time now! Id like to add my 2 and a half cents to the mix. Id like to thank all the brilliant minds here who have created the "patch" for the e4. I never would have bought one if it wasn't for their hard work, the spoils of which i have enjoyed very much, again, thanks guys!!!!! Now i feel obligated to put a bit of calm to the panic. Apologies if you gents arent getting the same vibe that i am at the moment. Now quite a few people feel that there are sensitive issues at play here. That is surely not the case, i will try to get to most of them and i will do my best not to strike any nerves... In regard to the issue of FLIR being "taken" by those of us who are enjoying the extra features enabled by this "patch", If FLIR was paying close attention..... what they really aught to do is add more complex features to the higher line cameras and let the good community "have this one" on good faith. Afterall, i dont think anyone here can rightfully say they haven't learned something here. Besides, if you buy a brand new Chevy does the manufacturer get upset if you paint it a new color? Do they get upset if you rip out the motor and put in one that performs better? More appropriate.... Do the manufacturers get upset when you upgrade the ram, hard disk, graphics card, operating system, on your computer?? No, they don't! This is exactly the case here, users of the hardware have merely found a way to  "unlock included hardware features." If the good people at FLIR didn't want or intend this to happen, i say "oops!"  Do you think the folks at the Chevy dealership will void their manufacturers warranty if you have a new paint color, different set of rims and tires, and a new stereo? I think not! FLIR should probably at this point call it a wash because there have been "ABSOLUTELY NO LAWS BROKEN HERE!!!" International law states that it is the manufacturers position to provide a product that can not be used for harmful or destructive purposes, i highly doubt any of the cameras in the e series could be used for such unless you used one to hit yourself on the head. Even then, they are actually made pretty soft and comfortable!!
Lets look at the sales facts for a second shall we!
1000 dollar camera upgraded to a 6000 dollar camera purchased by someone who can afford 1000 = no loss to FLIR
1000 dollar camera sold on ebay for "eeehhh mayyyy beee  too much" = No loss to FLIR
1000 dollar camera sold by FLIR for 1000 = no loss to FLIR
1000 dollar camera sold by FLIR without the patch = no loss to FLIR
6000 dollar camera sold by FLIR that people wouldn't normally buy or be able to afford = no real loss to FLIR taking into account sales to business that would normally not care about the price (right off!! = freebie)
We should remember that these aren't available at your local wal mart, all of these cameras come from FLIR distributers,  there is no money being lost here, only gained. With that said, its ALL LEGAL fellas!!! Now if someone is advertising a FLIR e4 as an e8, yes that's a problem. If it is advertised as what it actually is.... buyer makes the choice.
Having laid out my position on the matter i look forward to the rest of the ee's and the like here keeping up the good work!!

Cheers to all of us!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: granz on March 11, 2014, 11:55:01 pm
...
1000 dollar camera upgraded to a 6000 dollar camera purchased by someone who can afford 1000 = no loss to FLIR
1000 dollar camera sold on ebay for "eeehhh mayyyy beee  too much" = No loss to FLIR
1000 dollar camera sold by FLIR for 1000 = no loss to FLIR
1000 dollar camera sold by FLIR without the patch = no loss to FLIR
6000 dollar camera sold by FLIR that people wouldn't normally buy or be able to afford = no real loss to FLIR taking into account sales to business that would normally not care about the price (right off!! = freebie)
We should remember that these aren't available at your local wal mart, all of these cameras come from FLIR distributers,  there is no money being lost here, only gained. With that said, its ALL LEGAL fellas!!! Now if someone is advertising a FLIR e4 as an e8, yes that's a problem. If it is advertised as what it actually is.... buyer makes the choice.
Having laid out my position on the matter i look forward to the rest of the ee's and the like here keeping up the good work!!

Cheers to all of us!!

It disturbs their projected sales to each market segment (or perhaps they believe it could).  Makes the marketing folks upset  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 12, 2014, 12:00:18 am
I would bet their projected sales of the e4 have gone off the paper! Again, FLIR hasn't lost a penny on this one. In fact, they have probably made more that i do in 10 years of hard work! My personal property (the e4) is happily doing what id like it to! Hope FLIR has no issues with that. ??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on March 12, 2014, 12:07:11 am
My Problem with the ebay sales since the beginning is the title and description on a lot of the ads are a bit misleading to the general public. E-4 -E8 in the title etc. I mean after all a real e-8 comes with an extra battery and a warranty.But like they say a fool and his money....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 12, 2014, 12:14:25 am
Agreed! Sadly there is no good way to prevent it. Those of us here have only noticed the case at hand, there are many more that exactly follow suit! I formally apologize if i threw this thread off track as that was not my intention. If it ends here, so be it, but i sincerely hope that's not the case! If i can help out in any way i am more than willing!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on March 12, 2014, 02:03:03 am
Uski:

You mentioned you didn't have a device to check the bluetooth with.  When I first got my camera I
had no idea as to how the camera communicated with other devices, FLIR's documention sucked at
the time, they have improved it.  If you have a bluetooth headset, you can link to it, that's how you
add voice annotations to your pictures.  That should tell you the bluetooth is working or not.

By the way, since mine was born an e40, which has bluetooth and wifi, does the e30 not have those
features?  As we have learned, it wouldn't make since for FLIR to make different boards for each of
the eXX models, so you would think all versions of the series would have the same chips.

Jim

Hi,

For those of you with an E30(bx) (not E4) PN 40xxx-xxxx with firmware 2.23.14, you can add Bluetooth by :
- Adding a cheap USB bluetooth dongle (there's the bluetooth USB driver in the OS), see the attached picture
- Modify the \FlashFS\system\services.d\config.d\conf.cfg to enable Bluetooth :

--------------------
#
# Appservices wlan configuration
#
.caps entry
.caps.config entry
.caps.config.name text "srvs E60"
.caps.config.revision text "0.10"
.caps.config.wlan entry
.caps.config.wlan.enabled bool true
.caps.config.bluetooth entry
.caps.config.bluetooth.enabled bool true
# ID 49xxxxxx
# CRC01 xxxxxxxx
--------------------

And voila it should work. I say it should because I don't have any MeterLink compatible device to test. But it shows the Bluetooth icon, allows me to turn it off/on and the LED pattern on the Bluetooth dongle changes accordingly, and I can start a scan.
The Bluetooth feature allows you to link some MeterLink compatible meters to add data directly into the IR images OSD (current, humidity, ...). http://www.extech.com/meterlink/ (http://www.extech.com/meterlink/)

About Wifi ? Well I found out that the chipset used must be 88W8688 (it's a combination bluetooth/wifi chip).
The bad news is that it's SDIO only, which means a module most be soldered onto the PCB. I didn't open the camera yet but I suspect the module is not there (or if it's there it's disabled either by hardware of software).

If I have an opportunity to open the camera, I'll try to see if the module is there and if no, I'll try to find where to buy it.
I think it's extremely likely that FLIR is using an off the shelf module.

---

Another option is to add the driver of a USB Wifi dongle. Several manufacturers publish compatible drivers. But I'm not familiar with WinCE enough to do that. Can anyone help me out with this ? Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on March 12, 2014, 02:05:33 am
I think FLIR is much wiser, and can see through the cost and benefits.  It maybe some competitors throwing a spanner here. 

BUT this "1000 dollar camera sold on ebay for "eeehhh mayyyy beee  too much" = No loss to FLIR" is disturbing.  It shall depend on the margin of the set.  Appearing on ebay already not a good thing for FLIR, even if it of little margin for the seller.  Because it makes FLIR very difficult to answer, and to justify, to E6 and E8 buyers.  And if the margin is huge, the buyers are those who may have bought the more expensive models.

Enjoy the hack quietly :-) Don't force the hands of FLIR by pushing them into a corner, and likely they would not mind free ideas and improvement coming out from here, and more sales from here. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Short Circuit on March 12, 2014, 02:15:08 am
...
Appended is a ZIP file with the tools (source code plus Windows binaries)
...

Another happy E4 1.1L / 1.21 owner!  :-+ :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 12, 2014, 05:33:49 am
OK! First off, just signed up after watching this forum (this thread in particular) for quite some time now! Id like to add my 2 and a half cents to the mix. Id like to thank all the brilliant minds here who have created the "patch" for the e4. I never would have bought one if it wasn't for their hard work, the spoils of which i have enjoyed very much, again, thanks guys!!!!! Now i feel obligated to put a bit of calm to the panic. Apologies if you gents arent getting the same vibe that i am at the moment. Now quite a few people feel that there are sensitive issues at play here. That is surely not the case, i will try to get to most of them and i will do my best not to strike any nerves... In regard to the issue of FLIR being "taken" by those of us who are enjoying the extra features enabled by this "patch", If FLIR was paying close attention..... what they really aught to do is add more complex features to the higher line cameras and let the good community "have this one" on good faith. Afterall, i dont think anyone here can rightfully say they haven't learned something here. Besides, if you buy a brand new Chevy does the manufacturer get upset if you paint it a new color? Do they get upset if you rip out the motor and put in one that performs better? More appropriate.... Do the manufacturers get upset when you upgrade the ram, hard disk, graphics card, operating system, on your computer?? No, they don't! This is exactly the case here, users of the hardware have merely found a way to  "unlock included hardware features." If the good people at FLIR didn't want or intend this to happen, i say "oops!"  Do you think the folks at the Chevy dealership will void their manufacturers warranty if you have a new paint color, different set of rims and tires, and a new stereo? I think not! FLIR should probably at this point call it a wash because there have been "ABSOLUTELY NO LAWS BROKEN HERE!!!" International law states that it is the manufacturers position to provide a product that can not be used for harmful or destructive purposes, i highly doubt any of the cameras in the e series could be used for such unless you used one to hit yourself on the head. Even then, they are actually made pretty soft and comfortable!!
Lets look at the sales facts for a second shall we!
1000 dollar camera upgraded to a 6000 dollar camera purchased by someone who can afford 1000 = no loss to FLIR
1000 dollar camera sold on ebay for "eeehhh mayyyy beee  too much" = No loss to FLIR
1000 dollar camera sold by FLIR for 1000 = no loss to FLIR
1000 dollar camera sold by FLIR without the patch = no loss to FLIR
6000 dollar camera sold by FLIR that people wouldn't normally buy or be able to afford = no real loss to FLIR taking into account sales to business that would normally not care about the price (right off!! = freebie)
We should remember that these aren't available at your local wal mart, all of these cameras come from FLIR distributers,  there is no money being lost here, only gained. With that said, its ALL LEGAL fellas!!! Now if someone is advertising a FLIR e4 as an e8, yes that's a problem. If it is advertised as what it actually is.... buyer makes the choice.
Having laid out my position on the matter i look forward to the rest of the ee's and the like here keeping up the good work!!

Cheers to all of us!!

Another interpretation is that it is stealing.  They didn't want you to have it, and you took it anyway.

FLIR may not make much money on the E4, it could be a loss leader, more likely, the margin is small enough that they aren't a very viable business without the higher end sales.  Hacking efforts devalue their higher end units no matter what you say or think about it. 

Would I hack one of these?  Sure I would?  But I'm a bad person. At least I can admit I am stealing, cheating, and committing an immoral act that is harming others.  Maybe not illegal, but definitely wrong.  Rationalizing the hack is stupid and a waste of peoples time.  Explaining how FLIR should WANT to be violated in this way is simply embarrassing.

You can flame me and argue all you want, but if you can't tell me that these actions make the employees of FLIR feel good and happy about these efforts then you are doing harm to those employees, harming the business, and probably getting some poor engineers fired or at least in a lot of trouble.

Lucky for me I'm a bad person and a hypocrite!

Now, let's see 1.22 fully cracked open!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsg on March 12, 2014, 06:53:25 am
all new E4 stock ships with 1.22
I received mine yesterday. I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.
Stuck at airport. Flight delayed 2h :(

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on March 12, 2014, 07:28:17 am
I think it's really interesting how Flir have managed (probably accidentally) to have a great forum as this to do a portion of their R&D for them. Not only teaching them how to (try and) hack proof their products but also the user information on applying ideas and schemes to the software, a great resource on the likes/dislikes of the operational side of things for the marketing department, etc.

This could actually be a good business plan... How many R&D Krona saved over how many *real* E5-8 sales lost.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 12, 2014, 09:33:09 am
@tsg: Why didn´t do some "engineering" on the 1.22? I think, the new software is not for kicking us off from their system or hack-proof or anything other like this. There are some minor bugs in 1.21, like the rotating display with my TIC.


If Flir use this thread to get new ideas on their products: The most useful option, they should support out of the box is the manual scale setting. All other features of the hacked TIC are great, but when i didn´n want to hack, the manual scaling makes the difference. On the other side, some extra Palettes and the zoom-feature can improve the E8.

@Flirs business plans, when they didn´t want to sold out the E8-hardware to the price of E4, why did they do that? Nobody can force them, to sold a TIC without profit or with a "negative profit". If they do so, its their decision.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 12, 2014, 10:43:39 am
all new E4 stock ships with 1.22
I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.

The only difference between 1.21 and 1.22 is the binary file \FlashBFS\system\fpga.bin
FW 1.22 is not a countermeasure against new hack. Flir can't react so quickly.

I think, they forgot something, like reading the hardware version (=resolution) from EEPROM.
There is a real change, that this file can be changed with Version 1.21



... or Flir changed additional the hardware and fixed the resolution on motherboard
That would be my low cost solution - a solder strap under the FPGA package

Don't forget, the market knew from the upgradable FLIR TICs since 4 years and nobody saled until now Flir++ TICs.

http://chipworks.force.com/catalog/ProductDetails?sku=FLI-S0185582&viewState=DetailView (http://chipworks.force.com/catalog/ProductDetails?sku=FLI-S0185582&viewState=DetailView)
Publish Date: Nov-09

march 2010, see page 3 in  www.i-micronews.com/upload/Micronews/Micronews_90.pdf (http://www.i-micronews.com/upload/Micronews/Micronews_90.pdf)
Code: [Select]
Extech i5 by FLIR
The camera is advertized to have an 80 x 80 pixel image, and a sensitivity of 0.1oC
(Chipworks found a 240 x 240 pixel sensor in the camera that we tore down).


the flir hack is not new, but nobody published the hack yet (avoid closing the vulnerability)
I hacked my Flir E40 a year ago, after I read something about the the Flir i3/i5/i7 sensor (documents from year 2010)

The Flir i3/i5/i7 sensor size is 320x240 pixel
see http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/ (http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/)
(http://www.i-micronews.com/upload/Image/FLIR_Micro-bolometer.jpg)
and page 3 in  www.i-micronews.com/upload/Micronews/Micronews_90.pdf (http://www.i-micronews.com/upload/Micronews/Micronews_90.pdf)

nice blog http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135 (http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135)
(http://postfiles4.naver.net/20100313_3/sgyee_1268425726119Mlqs5_png/flir3-c-cw_sgyee.png?type=w3)

http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)
Quote
The sensor used in the i3 has 20 times more pixels than necessary, and four times more pixels than the i7. Incidentally, the same sensor can be used in more expensive cameras.
...
Each pixel is composed of a thin resistance in vanadium oxide (VOx) covered with an absorber in silicon oxide which absorbs the infrared ray. The temperature of the SiO2 layer is proportional to the temperature of the IR radiation, and the value of the resistance VOx is proportional to the temperature of the absorber. A measurement of the resistance provides the temperature.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 12, 2014, 11:12:46 am
@tsg Where did you buy from? Was it someone that that says "Direct from Flir" ?

I am not sure if these guys make orders from FLIR directly/warehouse while others keep their own stock for a discount.

I'll have my E4 within 2 hours so will know for certain by then. I shall try the hack and see how it goes even if i have a 1.22 unit.

@ds I have created a GUI editor that allows direct opening/editing/saving of the cfc file. Suid is extracted from the file with your FTool source ported to C# and i've also ported the crc03 source so its self contained project. I would like to attach prominent attribution information to yourself and the developer of the crc03 module. Would you have any information on the crc03 developer and yourself you would like me to include before i upload it? I would also like to add my .exe + *.cs source code to your zip and upload that so all tools in one zip, would that be ok?

On save i just trim any end new lines, empty lines, CRC03 lines and insert the new CRC03 line. The saved files appear to be identical with files processed by the command line tools, but will test it on my own camera shortly to confirm it works.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on March 12, 2014, 11:19:15 am
I doubt Flir are making a loss on the E4.
With most products like this, you might expect to sell 20,000 units total.
So your NREs are quite significant, on the sensor and on the unit itself.

Selling 10 E4s probably just about makes up for the profit on E8s, but they may not see this. They'll still sell E8s to the industry, but many of the smaller thermography businesses might use hacked E4s (though maybe calibration is important?)

The FPGA at £45 is pricey. The SOC probably costs £15. The sensor is probably most significant.

Looking at Mike's teardown though, it's remarkably simple. I'm guessing the micromachined array is the expensive part, but I don't know how much that actually costs to make.  I'd take a punt though that it costs near the same as an 80x60 sensor of the same size.

If Flir can afford to stick a 320x240 sensor in each camera, they aren't losing money.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 12, 2014, 01:31:20 pm
@ Nemonic

Great that your GUI editor is already done.

I am fine if you leave my original source code in the full
package and a reference to the Blog message where I
released it (maybe in the Readme).

I have adjusted the original CRC01 code of tnt which was
posted early somewhere in the thread to support the new
CRC03. I can't speak for tnt but I guess its OK if the complete
source code is included because the CRC module contains a
copyright notice.  To be sure you should ask him.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsg on March 12, 2014, 02:14:00 pm
@ Rainer

done nothing to it: set it to RNDIS mode via menu>Hold and connected on ftp to "Backup" the filesystem and put it back in the box.
I have another E4 1.19.8 :) which I am happy to play with. been busy with work lately..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 12, 2014, 02:15:26 pm
@ds Thanks, i'll try post something later with the info added.

In other news i can confirm new E4's are shipping with 1.22 already install.

I can also confirm the tools provided by ds also work on the 1.22 versions.

Update:
These pictures aren't doing it justice, i will upload some better ones later.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 12, 2014, 02:32:48 pm
Good day. I want to buy E4 1.21.
I do not understand the instructions, "unprotect" the protected configuration file:

Where can I find the file conf.cfc? The camera via FTP?

There is an error in the "cfg" txt? - The output looks like this:

   Add the Following line to the. Cfg file:
   # CRC03 a78cd4f5

I do not code - CRC03 a78cd4f5-insert into conf_plain.txt?

Thank Sofia
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on March 12, 2014, 02:53:57 pm
Good day. I want to buy E4 1.21.
I do not understand the instructions, "unprotect" the protected configuration file:

Where can I find the file conf.cfc? The camera via FTP?

There is an error in the "cfg" txt? - The output looks like this:

   Add the Following line to the. Cfg file:
   # CRC03 a78cd4f5

I do not code - CRC03 a78cd4f5-insert into conf_plain.txt?

Thank Sofia

Best send a PM to user Jakamil. No doubt by now he will have written a guide on this to benefit the group. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 12, 2014, 03:40:59 pm
Good day. I want to buy E4 1.21.
I do not understand the instructions, "unprotect" the protected configuration file:

Where can I find the file conf.cfc? The camera via FTP?

There is an error in the "cfg" txt? - The output looks like this:

   Add the Following line to the. Cfg file:
   # CRC03 a78cd4f5

I do not code - CRC03 a78cd4f5-insert into conf_plain.txt?

Thank Sofia

Best send a PM to user Jakamil. No doubt by now he will have written a guide on this to benefit the group. :)

Thank you for your help :)
This help me, but it did not help :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on March 12, 2014, 03:54:55 pm
I received the configuration files from an E4 with
firmware 1.22 and can confirm that the protection
mechanism and CRC03 are the same as in version 1.21.

And as Nemonic wrote, the resolution upgrade seem
to work in V 1.22 too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 12, 2014, 04:21:41 pm
all new E4 stock ships with 1.22
I received mine yesterday. I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.
Stuck at airport. Flight delayed 2h :(

I take it that you tried the 1.21 hack on your device, and it didn't work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 12, 2014, 04:42:50 pm
all new E4 stock ships with 1.22
I received mine yesterday. I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.
Stuck at airport. Flight delayed 2h :(

I take it that you tried the 1.21 hack on your device, and it didn't work?

It does work! v1.21 AND v1.22 are both able to be unlocked to the full potential 320x240 IR. I have an E4 1.1L v1.22fw sat infront of me with full 320x240 IR res. I have no idea what the fpga.bin changes are, but they do not seem to stop the unlocking of the IR res.

Also the beta3 menu options for zoom, pip etc all seem to work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hepe on March 12, 2014, 04:44:05 pm
Today got My E4

Model E4 1.1L
Serial Number 639178xx
Part Number 63901-0101
Software 1.22.0

5 mins work and everything seems to be crystalclear. And the new menus..  :-DD  >:D

Thank you everyone on this forum for your great work.

Sofia, FTP to your camera and find folder flashfs\system\appcore.d\config.d   - there is your conf.cfc. and "decrypt" it with ftool, remember those SUID codes for crypting your conf after modifications... You can use that example config from tools1.zip just add your device-id (from decrypted conf file) and create new CRC03 for that file and add it bottom of your file... then crypt it back with ftool using SUID got before, then you can ftp that file back to device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on March 12, 2014, 05:10:41 pm
So I am still happily rocking a hacked E4 with firmware 1.18 or something like that -- is there a changelog for what is new in 1.19, 1.21, and 1.22? (Apart from anti-hacking measures... I mean any new functionality or bug fixes)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on March 12, 2014, 05:12:56 pm
hi all, congrats for the wonderful hack work !

one question: with a "patched" E4 (=E8) what can i do about remote screen viewing?
i mean, while connected to a pc with USB, can i see TIC screen real time with flir tool? Is it possibile with full resolution or lower? How much lag?

Thanks for any1 replying  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 12, 2014, 05:16:11 pm
Discount from UK Supplier of E4

I have just spoken to David Atkins at PASS in the UK.

David advised that they currently have 35 E4's in stock and that they are still willing to offer members of the EEVBlog Forum a discount. I have found PASS to be a reliable company with which to do business but it is important that you talk to David in order to secure the discount and obtain the best possible service.

Davids direct contact details are to be found here:

 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110)

David Atkins is not just some generic sales person, he is a trained thermographer and knows his topic. The Company Director of PASS is Barry Atkins and the Company Secretary is Ms Catherine Atkins ;) This appears to be a family run company, rather than some large faceless combine. These family run companies are the ones that I like to do business with.

I am not connected with PASS in any way and just want to keep EEVBlog mebership aware of available discounts in the UK so that they may benefit.

To claim the discount, just contact David and let him know that you are a member of this forum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 12, 2014, 05:25:58 pm
all new E4 stock ships with 1.22
I received mine yesterday. I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.
Stuck at airport. Flight delayed 2h :(

I take it that you tried the 1.21 hack on your device, and it didn't work?

It does work! v1.21 AND v1.22 are both able to be unlocked to the full potential 320x240 IR. I have an E4 1.1L v1.22fw sat infront of me with full 320x240 IR res. I have no idea what the fpga.bin changes are, but they do not seem to stop the unlocking of the IR res.

Also the beta3 menu options for zoom, pip etc all seem to work.

That's nice to know.

Mike, it might be a good idea to mention on the first post that the hack works on 1.22.0 devices as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 12, 2014, 05:37:50 pm
hi all, congrats for the wonderful hack work !

one question: with a "patched" E4 (=E8) what can i do about remote screen viewing?
i mean, while connected to a pc with USB, can i see TIC screen real time with flir tool? Is it possibile with full resolution or lower? How much lag?

Thanks for any1 replying  ;)

see my posts
Look for FLIR IR Camera Player, a free download from FLIR. Latest version v2.33 and it will record video from an E4/E8+.

in supplementation to my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)
here the sceenshots from the free FLIR IR Camera Player
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79308;image)
you can only select a live stream display (15 Hz ??)
the E4 delivers no RAW signal (button grayed out)

a live show from your battery status  :D
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79310;image)

P.S.: same results with newer version 2.3.3

and
@tomas123:
Does the 16-bit radiometric video work on E4? Or was that only on the E40 and up? I recall your posts about the .seq file, but IIRC that was on your E40. But if there is some way to get 16-bit radiometric video on the E4 that would be really neat!

ok, I tested all known variants

FlirTools+ can connect the E40 as video or signal (signal = RAW 16 bit)
see pull-down menu on screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78866;image)
there is an corresponding E40 resources key
Code: [Select]
.caps.config.uvcstreaming: (2)
r---r--------- 0 root   root   <b> enabled                     true
r---r--------- 0 root   root   <b> radiometric16               true



FlirTools+ can connect the E4 only as video (a live view)
see screenshot
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78868;image)

...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 12, 2014, 07:50:38 pm
So I am still happily rocking a hacked E4 with firmware 1.18 or something like that -- is there a changelog for what is new in 1.19, 1.21, and 1.22? (Apart from anti-hacking measures... I mean any new functionality or bug fixes)?

From what I understand 1.19 was made to support the new 1.1 version of the hardware but "fixed" nothing. If you have 1.18 then you probably have a 1.0 hardware unit. I think both 1.21 and 1.22 are also targeting the 1.1 platform so I would not risk it.

Something else to keep in mind - we have only made changes to screen res and features - things that are not ITAR regulated. FLIR's updates to the FPGA code may be locking down the FPS rate it can output to make sure that it cannot be changed and cause them to have to re-classify the E# series that may hurt international sales. By upgrading your unit you may be limiting your ability to further unlock the device down the line if some one decides to try and unlock that FPS of theses units as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 12, 2014, 08:15:48 pm
Hi

curious,
user funzt upgraded the E30 with WiFi and Bluetooth to 320x240 (without a dongle)

For some reason the wifi/bt definitely doesn't work natively on mine.

I've checked funzt's files and his serial number starts by 490xxxxxx according to his config files ID field so I'm not sure what's going on, we should have the same HW.
Maybe I am unlucky and my E30 doesn't have the wifi/bt stuff inside, maybe I got another software revision that disables it (EEPROM ?), maybe something else.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 12, 2014, 08:26:40 pm
Hi

Uski:

You mentioned you didn't have a device to check the bluetooth with.  When I first got my camera I
had no idea as to how the camera communicated with other devices, FLIR's documention sucked at
the time, they have improved it.  If you have a bluetooth headset, you can link to it, that's how you
add voice annotations to your pictures.  That should tell you the bluetooth is working or not.

By the way, since mine was born an e40, which has bluetooth and wifi, does the e30 not have those
features?  As we have learned, it wouldn't make since for FLIR to make different boards for each of
the eXX models, so you would think all versions of the series would have the same chips.

Jim

If I enable the Wifi and BT menu, and I don't put any USB device :
- When I enable wifi it says it's enabled, but it does not see any access point
- When I enable BT, it says it's enabled for like 3 seconds then it disables itself

If I connect a USB bluetooth dongle, I can enable the BT and it stays enabled. So my conclusion is that there is no BT chipset on board.

As I have seen the driver for the 88W8688 which is a combined BT/Wifi chipset, it makes sense to say it's either not there or disabled somehow.

uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on March 12, 2014, 09:30:46 pm
Thomas, regarding the IR player
I change the usb mode to UVC

Then the player detects teh camera

and a prompt windows appears asking me about ffdsho. Whatever option I choose I get no image.

"cannot render graph" mesage is shown.

Any clues?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 12, 2014, 10:13:51 pm
As regards fixes/enhancements in later FW versions I don't think anyone has noticed anything significant. The only things I'm aware of that could be regarded as bugs are (1) debug messages at startup if a key is pressed and (2) There is no way to see the time & date of an image when browsing saved images on the unit.
I think I've seen mention that (1) is fixed or improved in 1.2x
Unless (2), which is such an obvious problem, and very easy to change, is fixed I think it's reasonable to assume there aren't any other useful improvements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 13, 2014, 12:02:47 am
i think, the last option could be a good feature for a new "Tauchers Beta4".

it could be a good deal to merge some data displayed(or not) in the TIC-Screen in a additional txt-file or in the jpg-Metadata. For example the temperatures of the 3 spots, the focus and humidy settings, the thermal reflection coeff., the internal temp. reference and of course the RTC-timestamp.

with an extra file, i think, it is not a great task to show this data in the Player-Section or make an option in the settings for storing this file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on March 13, 2014, 12:59:10 am
Something else to keep in mind - we have only made changes to screen res and features - things that are not ITAR regulated. FLIR's updates to the FPGA code may be locking down the FPS rate it can output to make sure that it cannot be changed and cause them to have to re-classify the E# series that may hurt international sales. By upgrading your unit you may be limiting your ability to further unlock the device down the line if some one decides to try and unlock that FPS of theses units as well.

Mike was seeing 60Hz data out of the sensor _in front of fpga_, not behind
the only thing they could do is maybe instruct sensor using some i2c init code to lower fps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 13, 2014, 03:10:37 am
Mike was seeing 60Hz data out of the sensor _in front of fpga_, not behind
the only thing they could do is maybe instruct sensor using some i2c init code to lower fps

I realize that. No one (at least that is talking about it) has gone one record as to what the FPGA is outputting to the Freescale CPU. I remember reading some where in this thread that at a trade show some one has seen a E5 that was running at 15Hz or 30Hz witch would indicate that the hardware platform that all the Ex's are based off of are capable of supporting a higher frame rate. I have a theory that the early firmware's may have the FPGA outputting at 15Hz or 30Hz and then the 9Hz limit is being imposed by the display/UVC driver at the very last step. With the newer releases I believe that FLIR may have moved that limit also into the FPGA code itself as a CYA move since dis-assembly or modification of that code is much more advanced. I doubt that a usable 60Hz signal is possible from the Ex platform given the lens but I don't think they would have under powered it enough to only be able to get 9Hz out of it. They likely had a target of at least 15Hz to give some headroom for manufacturing variances then put the limit in place so that it would pass ITAR regs and they could mass market it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 13, 2014, 12:42:19 pm
It could be that MSX runs at a higher framerate than thermal, but 15 would be a peculiar rate ir the thermal data was 9Hz - 18, 27 or 36fps would be far more likely.
ISTR seeing 15FPs somewhere - may have been when I fed UVC data into Virtualdub, but it is clearly wrong, as it plays back at the wrong speed when viewed at 15fps. Could just be that15 was the closest commonly-supported rate to 9
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 01:44:26 pm
Wow guys, ive been away working, checked in and it appears you've cracked it !!!!!!! Fantastic.

Now at the risk of sounding totally stupid, I have managed to bring up the list on Filezilla, its has some files/folders that seem to be PC related. I can see the 3 flash files amongst them.

A, how do I back them up? as a whole (including the PC looking files/folders) or just the 3 Flash files.
B, How do I find the Thread to Tauchers Beta Menu mods and load them
3, How do I  install the modified file for the resolution upgrade.

Sorry if its all basic stuff, Ive just not had chance to read the updated threads yet.

Also, I noticed a few who have mentioned Lune Valley 3d printing. I'm not a million miles from them and if me calling in with my camera helps out with some of your prototyping just let me know. its the least I can do as a massive thanks.

Chorleybloke
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 13, 2014, 01:48:24 pm
Wow guys, ive been away working, checked in and it appears you've cracked it !!!!!!! Fantastic.

Now at the risk of sounding totally stupid, I have managed to bring up the list on Filezilla, its has some files/folders that seem to be PC related. I can see the 3 flash files amongst them.

A, how do I back them up? as a whole (including the PC looking files/folders) or just the 3 Flash files.
B, How do I find the Thread to Tauchers Beta Menu mods and load them
3, How do I  install the modified file for the resolution upgrade.

Sorry if its all basic stuff, Ive just not had chance to read the updated threads yet.

Also, I noticed a few who have mentioned Lune Valley 3d printing. I'm not a million miles from them and if me calling in with my camera helps out with some of your prototyping just let me know. its the least I can do as a massive thanks.

Chorleybloke

Read thread post #1 and the linked posts there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 01:53:16 pm
 :-+

Thanks again!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 02:13:14 pm
Sorry to be a pain again guys, when i do a backup, some files are not copied, (failed to transfer) is this an issue as far as a backup is concerned. I noticed that one of the files was FlashIFS/flir.db.

Just wanted to check before I carry on.

Chorleybloke
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 13, 2014, 02:18:54 pm
Flir E4 Menu + EzCRC01: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326292/#msg326292 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326292/#msg326292)
Firmware update warning: AVOID Flir Ex firmware 1.21.0
Time to upgrade footnote then ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 02:34:25 pm
Im struggling guys, in filezilla, i tried to overwrite the FlashBFS but every file fails to transfer?? am i  missing the obvious?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 13, 2014, 03:15:17 pm
For the ones with optical knowledge:
would it be possible to use the cheap ZnSe lenses
from ebay (one or perhaps two combined) to obtain
a narrow angle field lens for E4 ? A sort of tele-lens.
What combination of focal lengths could give best results?

The narrower the field the better, focus at infinity for objects
5-10meters away.

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 13, 2014, 03:50:51 pm
Hi,

I am not sure about that lens material, and i am no expert on the optics but i can tell you i once had a 8x4 thermal sensor array to which i tried to place a Fresnel lens in front of to narrow the FOV. There are online lens calculators and simulators that help you pick a focal length and see what distances they need to be placed and there are formulas to calculate the FOV from such a combination.

I might take my E4 and fresnels later and see what i get.

From my experiments i found placing the lens did work, however due to it absorbing a lot of thermal energy in the process i would also need a rather large diameter objective lens to gather enough thermal "light". The same issue you get with too small an objective on traditional optical telescopes/binoculars, the image is dim.

Note: Fresnel made from PTFE.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 13, 2014, 03:53:59 pm
Thomas, regarding the IR player
I change the usb mode to UVC

Then the player detects teh camera

and a prompt windows appears asking me about ffdsho. Whatever option I choose I get no image.

"cannot render graph" mesage is shown.

Any clues?

I have no trouble with the E4 live stream

USB: RNDIS and UVC

Flir Camera Player / select FLIR USB VIDEO / don't use ffdshow
Flir Tools / Device / the flash symbol: conect with live stream
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on March 13, 2014, 04:00:17 pm
Im struggling guys, in filezilla, i tried to overwrite the FlashBFS but every file fails to transfer?? am i  missing the obvious?


https://www.youtube.com/watch?v=iZVzwOMHiFQ (https://www.youtube.com/watch?v=iZVzwOMHiFQ)

https://www.youtube.com/watch?v=rYd8Jv8Kz3k (https://www.youtube.com/watch?v=rYd8Jv8Kz3k)

these are for the old upgrade, but I think they will help .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 13, 2014, 04:01:08 pm
Has anybody tried an E4 update  from 1.19 to 1.22 ?

Flir Tools doesn't provide an "automatic" update for the E4 (I recent checked it)

I think a manual update with
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)
bricks the E4 (missing the new config files).

good news for the second hand market: Flir doesn't touch the old TICs with uncrypted config files :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 13, 2014, 04:02:16 pm
@muvideo,

Please see my post here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg394322/#msg394322 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg394322/#msg394322)

It should be possible to make a simple telescope just like adding a telescope auxilliary lens to a normal optical camera. BUT the problem is in finding the correct lens elements with the required focal lengths. Do some Googling on "simple telescope" and you will discover what I mean. You will need a nice large (say 50mm diameter) biconvex or plano convex front lens with a long focal length of approx 200mm. This lens will then feed the image to a second smaller biconvex or plano convex lens with a shorter focal length (say 50mm).

This should produce a useable telescope lens but in truth it will likely be pretty poor in terms of performance unless you don't mind a very long lens ! The Inframetrics lens contains at least 4 lens elements and none look to be the type that you can buy off of the shelf easily or cheaply. Bear in mind that teh Inframetrics telescope used Germanium optics and cost several thousand Dollars. If there were a nice cheap way to achievw the same performance, I think we would have seen alternatives available over the years.

Links:

http://galileo.rice.edu/lib/student_work/astronomy96/mtelescope.html (http://galileo.rice.edu/lib/student_work/astronomy96/mtelescope.html)

http://www.ifa.hawaii.edu/users/mickey/ASTR110L_S04/simplescope.html (http://www.ifa.hawaii.edu/users/mickey/ASTR110L_S04/simplescope.html)

http://www.space.com/24114-how-to-build-a-telescope-science-fair-projects.html (http://www.space.com/24114-how-to-build-a-telescope-science-fair-projects.html)

http://amasci.com/amateur/teles.html (http://amasci.com/amateur/teles.html)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on March 13, 2014, 04:07:14 pm
Does anyone have a working email address for Lune Valley? I've tried to order the 3D parts a couple of times with no luck.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 04:53:06 pm
Im struggling guys, in filezilla, i tried to overwrite the FlashBFS but every file fails to transfer?? am i  missing the obvious?


https://www.youtube.com/watch?v=iZVzwOMHiFQ (https://www.youtube.com/watch?v=iZVzwOMHiFQ)

https://www.youtube.com/watch?v=rYd8Jv8Kz3k (https://www.youtube.com/watch?v=rYd8Jv8Kz3k)

these are for the old upgrade, but I think they will help .


Ive done exactly as the video for the menu upgrade, I have 1.20.0 Firmware, is this the problem???? It appears to copy all the files but they fail every time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on March 13, 2014, 05:47:13 pm
Im struggling guys, in filezilla, i tried to overwrite the FlashBFS but every file fails to transfer?? am i  missing the obvious?


https://www.youtube.com/watch?v=iZVzwOMHiFQ (https://www.youtube.com/watch?v=iZVzwOMHiFQ)

https://www.youtube.com/watch?v=rYd8Jv8Kz3k (https://www.youtube.com/watch?v=rYd8Jv8Kz3k)

these are for the old upgrade, but I think they will help .


Ive done exactly as the video for the menu upgrade, I have 1.20.0 Firmware, is this the problem???? It appears to copy all the files but they fail every time.

I think you are the first confirmed owner of a 1.20 firmware
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 06:14:30 pm
That would be 1.21.0 then

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 07:36:35 pm
Hi guys, i am having problems getting the File to overwrite, it appears to do everything, but ends with 17 files that fail to transfer (shown in the failed to transfer tab)

After watching the video as per links above, Does the Beta 3 Menu hack work on 1.21.0??????


Any ideas on what the problem is, hardware, pc, me ???

Any help would be appreciated. Is anyone else having/had the same problem
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 13, 2014, 08:03:01 pm
Hi,

Works on 1.21.

You're able to connect via FTP and download files but just overwrite doesn't work?

What FTP client are you using?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on March 13, 2014, 08:11:41 pm
...but ends with 17 files that fail to transfer...

Are you trying to make a backup or are you trying to replace the files on the E4?
Because when you are trying to put the 'upgraded' files back on the E4 no way there's going to be 17 or more...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 08:19:19 pm
Hi,

Works on 1.21.

You're able to connect via FTP and download files but just overwrite doesn't work?

What FTP client are you using?


Hi,

i'm using fileZilla

It just doesn't seem to work correctly, if i try to do a backup it doesn't copy all the files, I just did another after turning off all other network connections. It copied most but left 140 files as failed transfers?

I'm slowly going mad!!!

If there is anyone in Lancashire who could help I can drive over.

Chorleybloke
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 08:25:14 pm
...but ends with 17 files that fail to transfer...

Are you trying to make a backup or are you trying to replace the files on the E4?
Because when you are trying to put the 'upgraded' files back on the E4 no way there's going to be 17 or more...

Ive tried bqacking up, by highlighting all the files that appear to be on the device (remote site) then downloading to desired folder on PC, it then rolls through all the files, some copy some won't.

If I then select the beta3 system file and drop it onto the FlashBFS folder on the device (remote site) it then appears to copy, but i end up with some files (17) in the failed to transfer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on March 13, 2014, 08:55:20 pm
Ive tried bqacking up, by highlighting all the files that appear to be on the device (remote site) then downloading to desired folder on PC, it then rolls through all the files, some copy some won't.

You can't backup files that are in use, so that is perfectly normal.

Quote
If I then select the beta3 system file and drop it onto the FlashBFS folder on the device (remote site) it then appears to copy, but i end up with some files (17) in the failed to transfer.

If you select only one file ( 'If I then select the beta3 system file') for transfer how can you end up with 17 failed files?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 09:24:23 pm
Ive tried bqacking up, by highlighting all the files that appear to be on the device (remote site) then downloading to desired folder on PC, it then rolls through all the files, some copy some won't.

You can't backup files that are in use, so that is perfectly normal.

Quote
If I then select the beta3 system file and drop it onto the FlashBFS folder on the device (remote site) it then appears to copy, but i end up with some files (17) in the failed to transfer.

If you select only one file ( 'If I then select the beta3 system file') for transfer how can you end up with 17 failed files?  :-//


So is it not possible to do a complete backup as the TIC always has some files in use?

Sorry its the FlashBFS system folder from the Bta3 download ADDMENU,  if I drop this onto the FlashBFS folder in fileZilla on the device it will not copy all the files contained within it. It has however copied the files for the additional colour palettes, over but these are 0kb

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 13, 2014, 09:31:54 pm
.... but these are 0kb

You probably copied the files in a subfolder as well - thereby filling up the drive -> files can be created but not filled due to DRIVE FULL.
Solution: remove the added duplicates
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on March 13, 2014, 09:35:01 pm
Sorry its the FlashBFS system folder from the Bta3 download ADDMENU,  if I drop this onto the FlashBFS folder in fileZilla on the device it will not copy all the files contained within it. It has however copied the files for the additional colour palettes, over but these are 0kb

It's been a while since I looked at the addmenu files so I had a quick look again, and it looks like there are 17 files in there. If you get 17 faillures then it did not transfer anything. Does the error message tell you anything about why it failed?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 09:56:04 pm
.... but these are 0kb

You probably copied the files in a subfolder as well - thereby filling up the drive -> files can be created but not filled due to DRIVE FULL.
Solution: remove the added duplicates



 :palm: Taucher, your 100% spot on. It was so obvious once you had pointed it out. How silly do I now feel.

Thanks again,
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 10:07:48 pm
OK,

Now for the biggy (for me anyway)

To get the resolution fix, what do i do.

Do I just download a copy of the config file from an earlier thread and replace it as per the instructions or do i need to modify it with my serial number first i have read that many posts i'm still spinning.

I'm not as daft as i am acting on here at the moment, honestly!!!!

I'm just scared to death of having a very expensive door stop. I'm slightly worried that i am also messing up this thread, with all my rubbish. Is it worth me deleting it after i am sorted out (if I can that is)

Thanks in advance guys.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 13, 2014, 10:17:00 pm
@ Chorleybloke:
If your camera has firmware version 1.21.0 (and not the probably non-existing 1.20.0 which was stated earlier) you have to do the following:
- Download the file FlashFS\system\appcore.d\config.d\conf.cfc from your camera (or copy the one from your backup)
- Follow these steps: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)

If I remember correctly the camera should still work with a faulty / non-existing config file but it's always recommended to be careful and best to double-check everything :)

EDIT: Just to be clear: Since firmware version 1.21.0 you not only need to put your own serial number in the config file but you also need to protect / crypt the file with your device specific SUID. And the "easiest" way is saving it when unprotecting / decrypting your own original config file in the process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 13, 2014, 11:00:39 pm
@ Chorleybloke:
If your camera has firmware version 1.21.0 (and not the probably non-existing 1.20.0 which was stated earlier) you have to do the following:
- Download the file FlashFS\system\appcore.d\config.d\conf.cfc from your camera (or copy the one from your backup)
- Follow these steps: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)

If I remember correctly the camera should still work with a faulty / non-existing config file but it's always recommended to be careful and best to double-check everything :)

EDIT: Just to be clear: Since firmware version 1.21.0 you not only need to put your own serial number in the config file but you also need to protect / crypt the file with your device specific SUID. And the "easiest" way is saving it when unprotecting / decrypting your own original config file in the process.

I wouldnt even know where to start im not sure how to edit or use those tools. Im sure its not hard but i would not know where to start.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 14, 2014, 12:10:56 am
Hi again,

Any tips would be greatly appreciated, i'm sure with a little guidance i will be fine. how do i open the file/edit it with ftools.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 14, 2014, 02:27:59 am
Hi again,

Any tips would be greatly appreciated, i'm sure with a little guidance i will be fine. how do i open the file/edit it with ftools.

ds's ftool "decrypts" the conf.cfc file and also tells you your SUID. You edit the file it outputs which by example is 'conf_plain.txt'.

You can open conf_plain.txt in notepad or other text editor. You need to edit it so its like the template.cfc, (mainly you're interested in the lines with IRwidth and IRheight for the moment) and delete the #CRC03 line at the end, BUT make sure there is a single empty line at the end. Then save it and follow the rest of ds's instructions.

Start with that and follow ds's instructions carefully and let us know if you get stuck.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zeegerd on March 14, 2014, 11:40:27 am
Hi, newbie here, so before I STFU & RTFM, please let me give two first impressions / questions:

- great tool (and gadget), even more thanks to the guys providing the hacking possibilities! My firmware was 1.18.8, asked the supplier explicitly to not send above 1.19.8 (they still have enough in store, for those interested, in NL). I tried the hack and it worked right away, even though the first post in this forum states the hack only works with 1.19.x (did I run a risk there?  :-[ ). I wonder if it is worthwhile and possible to upgrade to 1.19.8 (or even higher), also regarding the hack possibilities that should obviously remain.

- the only thing that kind of negatively struck me is the readings below zero degrees Celsius. In the evening it was about -2 dC, definitely not colder. See the photo stating the house should be around -12 dC. At least 10 dC from the true temp although, perhaps even 15. E=0.95, if this is important. I noticed more posts about this issue in the forum and will look if there are options to improve (although for me it's not a major issue). I wondered, is this issue present in E4 or (only) in hacked E4's? Hopefully not the latter. I only measured after hacking.

Thanks & have a good day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 14, 2014, 01:26:27 pm
the only thing that kind of negatively struck me is the readings below zero degrees Celsius. In the evening it was about -2 dC, definitely not colder. See the photo stating the house should be around -12 dC.
Thats pretty normal, you have to recalibrate it. Its written in this forum, but probably lost :)
EDIT: See links in this post: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/?topicseen#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/?topicseen#msg342072)

After calibration it gives real numbers and I am very happy with it (I just slightly modified the one posted there).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 14, 2014, 02:06:18 pm
Does anyone know if its possible to make the camera output png by default? The 20KB JPG files are pretty bad with compression artifacts due to compression and i cant find any setting for jpg compression quality. Using the 'store -n' to save png results in a much nicer image. I was hoping perhaps Taucher or someone might have noticed something in the menu hacks to change capture format?

Would anyone with a 1.18/1.19 firmware be willing to zip up FlashBFS and send to me? I'm interested in the removed files and alterations since update to 1.21 and would like the files to compare.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 14, 2014, 02:48:24 pm
Does anyone know if its possible to make the camera output png by default? The 20KB JPG files are pretty bad with compression artifacts due to compression and i cant find any setting for jpg compression quality. Using the 'store -n' to save png results in a much nicer image. I was hoping perhaps Taucher or someone might have noticed something in the menu hacks to change capture format?

Would anyone with a 1.18/1.19 firmware be willing to zip up FlashBFS and send to me? I'm interested in the removed files and alterations since update to 1.21 and would like the files to compare.

tomas123's PHP script can be used with Exiftool and ImageMagick to output some very nice PNG files from the thermal data contained with in the E4's JPG files. Please do some reading @ https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072) for more info. You can also from telnet/putty make some changes in the way the E4 saves. https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330282/#msg330282 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg330282/#msg330282)

As for comparisons between 1.18/1.19 and 1.21 there have already been quite a few if you just read back a bit in this thread starting at page 233 or so. https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/3480/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/3480/)

Google search is your friend! Goto google.com and paste in "site:www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/" followed by your search term. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 14, 2014, 03:16:43 pm
Thanks!

I had thought i scanned over most of this thread and hadn't seen it mentioned, must have missed it. Thanks!

Regarding the previous version files, i had found a few posts with links to backup zips but the files were taken down. I will go back and crawl the thread see what i missed.

In the mean time, if i fail to find, it would be great if someone could share the old 1.19 /FlashBFS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 14, 2014, 04:24:33 pm
I don't think the 1.19.8 firmware was ever made available for download. The latest previous version that was on the FLIR website was 1.18.7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 14, 2014, 04:45:28 pm
I don't think the 1.19.8 firmware was ever made available for download. The latest previous version that was on the FLIR website was 1.18.7.

Yea, the links to the older installers on FLIR are down so cant get the files that way either, but someone with a 1.19/1.18 can just FTP to their camera, download the files and zip it. Im mainly interested in the binaries, *.dll/*.exe for analysis and comparison. I don't expect to find anything more than what the guys here have already found, but i got a couple of hunches i might investigate.

Also i think the web service files were ripped from newer firmwares, so if those are included i might see if they can be added back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 14, 2014, 04:50:33 pm
Afternoon all,

Well a massive thanks again to all that helped out. I managed to fumble my way through the resolution fix, with the ftools, not hard but ha to work out how to do it from scratch.

I now have additional menus and also what appears to be 320 x 240 pretty amazing. The manual colour shift is a massive bonus too.

Ive come across a few glitches with my camera though.

The center spot does not work.
When taking an image it only saves the IR, the Jpeg is blank/black.
Alignment distance select option scrolls but when selecting reverts to zero. Yet the focus distance fine tuning works.
MSX option has vanished.

I used the conf.cfc (download from off this thread) downloaded mine from camera, copied all the text from the modified version, so its not something I miss typed.

Although after taking a good look around the file, it seems some are listed as false.

Any idea what to tweak??

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 14, 2014, 06:29:44 pm
That sounds like a broken config file to me. I also don't think you have full resolution.

I used the conf.cfc (download from off this thread) downloaded mine from camera, [...]
What do you mean by thtat?
You cannot "reuse" a config file from another user. You have to use your own config file and the tools provided by ds.

Can you briefly explain what you did? I think something went wrong along the way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Twitch on March 15, 2014, 12:41:48 am
Hi folks,

I have an issue with the MSX image alignment.  It seems the distance / fine tuning only adjusts the image up and down.  I have an issue with the MSX outline image being offset to the right.  The further away I am, the more drastic the ghost image is off center. 

Do any of you know of a way to calibrate this or adjust the camera image back to the left so it's on center? 

This is a 1.19.8 camera upgraded to the E8+ so I really don't want to send it in to FLIR. 

Any help would be appreciated.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 15, 2014, 01:01:45 am
PM your email address to me, I will send my FlashBFS folder to you! FW 1.19.8, HW 1.0
Here you can dl the file flir_ex_pn639_v1.18.7_update_pack.zip (http://en.file-upload.net/download-8686493/flir_ex_pn639_v1.18.7_update_pack.zip.html (http://en.file-upload.net/download-8686493/flir_ex_pn639_v1.18.7_update_pack.zip.html)).

Thanks, i've tried a few times and two methods to send a PM with the details, if you don't have it i will just post my address here anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 15, 2014, 10:48:15 am
Hello all, after swapping the conf file to the new version then back again, whichever way i do it, either with mine altered or the template with the tools, or even a modified version of the thread. Im getting the same results, when upgraded i loose msx and a few other options as mentioned previously.

The upgraded image looks much better but im sure still has the lower res but much less noise giving the appearance of a higher quality. I noted that in the conf file there is a lie relating to noise. old figure 135 while he upgrade is  only 5.

Is it that its just a reduction in noise and not more res?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 15, 2014, 11:06:23 am
The first image seems to have no radiometrical data in it but to my eye that still looks like 80x60.
The second image looks like a "normal" E4 image, 80x60 resolution, radiometrical data and MSX.

I think your camera is not accepting your new config file. In the old config file there is a noise of 135 (whichever unit that may be) added. The new one is not valid or not accepted, so the camera probably assumes a noise value of 0.
Functions like the spot measurement and MSX or saving the radiometrical data in the JPG are enabled via the config file. Invalid config file -> those functions don't get enabled.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 15, 2014, 12:03:05 pm
The first image seems to have no radiometrical data in it but to my eye that still looks like 80x60.
The second image looks like a "normal" E4 image, 80x60 resolution, radiometrical data and MSX.

I think your camera is not accepting your new config file. In the old config file there is a noise of 135 (whichever unit that may be) added. The new one is not valid or not accepted, so the camera probably assumes a noise value of 0.
Functions like the spot measurement and MSX or saving the radiometrical data in the JPG are enabled via the config file. Invalid config file -> those functions don't get enabled.

Hi Stefbeer, the first image (with no radiometrical data) is as it came brand new from the factory, hence my initial comment a while back that it was rubbish. The second image is much improved yet the resolution is not. If i take an image and view the image info, it does say that it is 320 x 240, yet its obviously not.

Have you any idea of what I can do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 15, 2014, 12:39:12 pm
With "the first image" I meant the one with the filename FLIR0281.jpg, and the second one with file name FLIR0282.jpg .
If you look at the image info in for example Windows Explorer, you only see the resolution of the JPG file, which is always at 320x240. But crucial is the thermal resolution which you only can see in the FLIR Tools software or on the camera when you open up the gallery, open a picture, push the center button and choose "Information". Then a box appears which shows some information about the picture (especially the thermal resolution). But I'm pretty sure for the file FLIR0281.jpg you won't see the thermal resolution becaus it does not contain any thermal information.

I tried to PM you but it doesen't seem to have worked.
You could upload your own original (EDIT: the one from your initial backup, that came with your camera) conf.cfc here and I'll do the modification of the file for you. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 15, 2014, 02:00:23 pm
Hi folks,

I have an issue with the MSX image alignment.  It seems the distance / fine tuning only adjusts the image up and down.  I have an issue with the MSX outline image being offset to the right.  The further away I am, the more drastic the ghost image is off center. 

Do any of you know of a way to calibrate this or adjust the camera image back to the left so it's on center? 

This is a 1.19.8 camera upgraded to the E8+ so I really don't want to send it in to FLIR. 

Any help would be appreciated.

Look back onto the first page of the thread for Mike's teardown video and you'll see how the visible-light camera is installed in the body of the E4. Apparently yours was misaligned a bit during assembly but from the video it looks like it should be fairly easy to reposition.

Getting down to the visible-light camera isn't that difficult but do not follow Mike's example step-by-step -- there's an access to one screw that will make you cringe but right after that he demonstrates how to get to it without the errrr... brutality of his initial attempt.

Observe normal ESD precautions, work in a clean area, avoid cat hairs, etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 15, 2014, 03:36:03 pm
Don't disassemble!

Edit the calibration values for the camera...

Code: [Select]
$ exiftool -offset* FLIR0230.jpg
Offset X                        : -4
Offset Y                        : +21

see my post here for details
http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=4898.msg24156#msg24156 (http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=4898.msg24156#msg24156)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Twitch on March 15, 2014, 06:00:46 pm
Don't disassemble!

Edit the calibration values for the camera...

Code: [Select]
$ exiftool -offset* FLIR0230.jpg
Offset X                        : -4
Offset Y                        : +21

see my post here for details
http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=4898.msg24156#msg24156 (http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=4898.msg24156#msg24156)

I'm not sure I understand.  How do I locate the offset values to change them?  Where are these values in the camera's firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 15, 2014, 06:14:44 pm
edit the calibration file and calc a new CRC32

Code: [Select]
$ cat /FlashFS/system/calib.rsc | grep fusion.leExFOL7
.calib.visual.fusion.leExFOL7 index
.calib.visual.fusion.leExFOL7.C0X double -0
.calib.visual.fusion.leExFOL7.C0Y double 8.3035752
.calib.visual.fusion.leExFOL7.C1X double -11.721635
.calib.visual.fusion.leExFOL7.C1Y double 6.5931212
.calib.visual.fusion.leExFOL7.C2X double 0
.calib.visual.fusion.leExFOL7.C2Y double 0
.calib.visual.fusion.leExFOL7.C3X double 0
.calib.visual.fusion.leExFOL7.C3Y double 0
.calib.visual.fusion.leExFOL7.CT double 0
.calib.visual.fusion.leExFOL7.T0 double 304.34131
.calib.visual.fusion.leExFOL7.fixFusionDistance double 3
.calib.visual.fusion.leExFOL7.isMeasured bool true
.calib.visual.fusion.leExFOL7.magnQuote double 1.3050345
.calib.visual.fusion.leExFOL7.mathVersion int32 100
.calib.visual.fusion.leExFOL7.minPanX double 0
.calib.visual.fusion.leExFOL7.minPanY double 0
.calib.visual.fusion.leExFOL7.minZoom double 1
.calib.visual.fusion.leExFOL7.rotAngle double -0.21724635
.calib.visual.fusion.leExFOL7.type int32 100
.calib.visual.fusion.leExFOL7.visualFocus int32 0

check with
Code: [Select]
$ exiftool -offset* FLIR0230.jpg
Offset X                        : xxx
Offset Y                        : yyy

and report here your resolution of problem (excel ?) ...



see here for CRC32 keygen


Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc

Have you checked this with any of the files?

Yep, I tried it on several of the .rsc files. Just have to delete the existing CRC line before using.

check your crc32 algorithm against a known *.rsc ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 15, 2014, 06:23:34 pm
With "the first image" I meant the one with the filename FLIR0281.jpg, and the second one with file name FLIR0282.jpg .
If you look at the image info in for example Windows Explorer, you only see the resolution of the JPG file, which is always at 320x240. But crucial is the thermal resolution which you only can see in the FLIR Tools software or on the camera when you open up the gallery, open a picture, push the center button and choose "Information". Then a box appears which shows some information about the picture (especially the thermal resolution). But I'm pretty sure for the file FLIR0281.jpg you won't see the thermal resolution becaus it does not contain any thermal information.

I tried to PM you but it doesen't seem to have worked.
You could upload your own original (EDIT: the one from your initial backup, that came with your camera) conf.cfc here and I'll do the modification of the file for you. :)



Many thanks Stefbeer :-+

I now have a super E4, sorry for all the posting, but it just proves even simple folk with very little experience can do great things. Although i'm fully aware that a little knowledge can be dangerous.!!!!

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 15, 2014, 07:07:51 pm
a crc32 sample on command line

Code: [Select]
// count lines
$ wc -l FlashFS/system/calib.rsc
     801 FlashFS/system/calib.rsc

//print last line
$ tail -n1  FlashFS/system/calib.rsc
# CRC32 ef8f7e0e

//calc a new crc32 for 801-1=800 lines
$ crc32 <(head -n 800 FlashFS/system/calib.rsc)
ef8f7e0e

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Twitch on March 16, 2014, 12:21:25 am
tomas123 - Thank you, that partially fixed the issue. 

I changed line:
.calib.visual.fusion.leExFOL7.minPanX double 0
to
.calib.visual.fusion.leExFOL7.minPanX double 9.8

This now aligns perfectly on 1x zoom 

The strange thing is if I zoom to 2x, 4x or 8x it one again shows the ghost image offset to the right just as it did on 1x.  But if I go back to 1x the image is centered.   Any ideas on how to fix the 2x, 4x and 8x settings?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 16, 2014, 12:54:36 am
you changed the wrong parameter - minPanX is not a calibration value

only change values, which are unequal to zero:

Code: [Select]
$ cat /FlashFS/system/calib.rsc | grep fusion.leExFOL7
.calib.visual.fusion.leExFOL7 index
.calib.visual.fusion.leExFOL7.C0X double -0
.calib.visual.fusion.leExFOL7.C0Y double 8.3035752
.calib.visual.fusion.leExFOL7.C1X double -11.721635
.calib.visual.fusion.leExFOL7.C1Y double 6.5931212

see here for details

For a given userDistance z the shift d ((x,y)panVal = floor(d)) between visual and thermal image is calculated by

Code: [Select]
d(z) = c1 + c0/z                        (1)
with c0 and c1 being constant values that are factory calibrated into your cam. d, c0 and c1 are 2-dimensional (x,y), units are [px] for d and c1, [m] for z and [px*m] for c0. The coordinate system starts with (0,0) in the upper left corner, d is the shift of the visual image relative to the thermal image (see below for example).

The constants c0 and c1 are provided by \FlashFS\system\calib.rsc, here are mine:

Code: [Select]
...
.calib.visual.fusion.leExFOL7.C0X double -0
.calib.visual.fusion.leExFOL7.C0Y double 8.1835451
.calib.visual.fusion.leExFOL7.C1X double -8.0483421
.calib.visual.fusion.leExFOL7.C1Y double -2.2975248
...

There are more parameters important for MSX (zoom, rotation, ...), but I didn't need to touch them. So I'm only covering horizontal and vertical shift here.

You have at least two options to calculate new constants for your calibration file:

1) You could set these four parameters to zero, copy the resulting file with a new CRC32 back to the cam, overwriting the original one (keep a backup!) and reboot the E4. To recalculate new values for c0 and c1 you need to get at least two MSX images A and B with some distance between them, determine dA(zA) as well as dB(zB) and solve the system of linear equations to:

Code: [Select]
c0 = (dA - dB)/(1/zA - 1/zB)            (2)
c1 = (dA*zA - dB*zB)/(zA - zB)          (3)

Hint for the sign of d: if your visual image appears 5px to the top and 3px to the left of your thermal image, then d = (-3px, -5px).
Note that you don't need to configure z in the cams settings for this, with c0=c1=(0,0) while measuring, (x,y)panVal will be 0 for all z as well.

2) I found it easier to use rset to modify xpanVal and ypanVal (see Tauchers post) on my connected E4, until my MSX images looked the way I wanted. You may want to temporarily disable auto calibration while doing this or wait for the cam to settle.
I started with a very distant object, in my case it was a street light about 50m away, a building front with windows will also work. Now you already have c1, because c1 = d for large z. Then you need a second image of a nearby object, it should be small and centered in your image to minimize error. I used my doors peep hole at about 25cm away and adjusted (x,y)panVal and the distance to get a proper fit. Now you can use equation (1) to get c0.

My new calibration file obtained by 2) worked great, at least indoors, distant objects were still off by 3px. Reason: the configurable userDistance in the cams settings ends with ">3" (cam uses z=3m then), which makes it impossible to reach c1 for infinity. I decided to overcorrect my parameters and used my obtained c1 as if it were dA at zA=3m and calculated new constants with (2) and (3). Now I have perfect MSX even for great distances, while indoors my actual z slightly differs from the configured userDistance. However, I think it would be a better solution to have additional menue entries for greater distances (e.g. ">10").

Another thing worth mentioning: The cam doesn't round() the result for (x,y)panVal, it just chops off everything following the decimal point. So if your dy results to 5.99px at z=3m you'll end up with a 5px shift being used. You may want to adjust the constants to avoid this and could use rls .image.fusion to see the actual values the cam is using.

and here is the link to tauchers post (variant 2)
Query MSX distance from console:

EDIT - Adjusting MSX once somebody played too much with the camera: ;)
fist backup all old values
-> rls .image.fusion
-> write them down, pipe them to file, back them up etc...!
then measure the distance between your camera and some testpattern in cm - set that as MSX distance value
check congruency for the image center AND check if the corners align as well, if not
then adjust xpanVal until the error (if any) is symmetric (keep distance fixed)

zoomFactor and ypanVal should only be touched if you realy understand what you're doing and have to touch them :)
Never touch the Alpha value, you'll need to powercycle the cam to restore MSX as the value will be auto-zeroed if changed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Twitch on March 16, 2014, 01:22:40 am
tomas123 - The info helped a lot, I've got it centered at all zoom levels now. 

Thank you very much for the help, I really do appreciate you taking the time to explain everything for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 16, 2014, 01:38:55 am
 My pleasure! :)

In my first post I forgot the post from user schdiewen.
This thread is a pain.

See my tag
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
for a collection of the "best of tutorials"

you can now go to the temperature calibration values ;-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kff on March 16, 2014, 02:28:53 am
Hi all. Got an E4 camera a few days ago and really happy with it so far. One thing I noticed is that after the camera has been on for a few minutes, a small bright spot (maybe 2-3C temperature difference) appears in one part of the image. There is also a similarly sized dark spot nearby. I think someone in this thread mentioned that it might be a speck of dust on the sensor, although I am not sure why the spots only appears after a few minutes. I also noticed that there is a bit of banding in the image -- slightly off-color "stripes" that make the image non-uniform. What I am wondering is how common these problems are. It's pretty easy for me to exchange the camera, but should I expect  the new camera to be any better? Do you find that the image on your camera is close to perfect, or are these minor spots / bands expected in this price range? Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on March 16, 2014, 04:20:02 am
Does anyone know if the MSX feature can be added to an e40?  I've already upgraded my e40 to an e60, upped the resolution and added more features.  MSX seems to be the difference between the eXX models and the eXXbx models.  Looks like just an additional s/w tool.  All the hardware is there, just another way to manipulate the IR and visible light photos.  I see the eX series has that feature, seems reasonable some of the files would work on the e40.  Is it in the beta3 stuff?

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 16, 2014, 10:59:50 am
If you have a Exx without MSX (year 2012) you can activate the MSX menu but you only see a live real image on the LCD.
If you take a picture, then you save a normal MSX jpg on your SD card.

I think, the MSX code is embedded in the windows CE binaries but not in the fpga code.

You can take PiP images and convert then with Flir Tools to MSX images.

Or see my footnote for other program code for converting RAW images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chorleybloke on March 16, 2014, 11:22:35 am
Hi all. Got an E4 camera a few days ago and really happy with it so far. One thing I noticed is that after the camera has been on for a few minutes, a small bright spot (maybe 2-3C temperature difference) appears in one part of the image. There is also a similarly sized dark spot nearby. I think someone in this thread mentioned that it might be a speck of dust on the sensor, although I am not sure why the spots only appears after a few minutes. I also noticed that there is a bit of banding in the image -- slightly off-color "stripes" that make the image non-uniform. What I am wondering is how common these problems are. It's pretty easy for me to exchange the camera, but should I expect  the new camera to be any better? Do you find that the image on your camera is close to perfect, or are these minor spots / bands expected in this price range? Thanks!

Hi,

I have a similar situation, very very faint vertical bands and a ghost spot center bottom, with the vast improvement i now in performance (thanks to all the help on here ;D) I'm not too concerned. I expect that it is possible its down to a spec, that, as the unit warms up become more noticeable due too temperature differential??? The spot and lines are only visible when the temperature is almost uniform, say a wall that has an even temp. all over.

It wasn't possible for me to see before upgrade as my image was full of noise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 16, 2014, 01:08:49 pm
There was quite a bit of discussion regarding image banding, the reason for noise generation, and the bright or dark spots on an image. Sadly those 'conversations' are burried somewhere in this massive thread  :(

In precis, AFAIK, the microbolometers in the Ex series are all the same but there MAY be some 'binning' of units depending upon the number of failed pixels and/or arifacts detected. I say may, as most microbolometers that have been tested for dead pixels passed the required 99.8% active specification for such a FLIR sensor array. It may well be that the E8 gets the very best performing sensor as its higher resolution may show artifacts more etc. No proof of that though.

In standard E4 rig, any issues with the microbolometer are effectively countered by the averaging and processing ofr the 4x4 pixel clusters used to create an 80x60 image. When you release the cameras full potential you may see issues that were previously not visible. This is a potential penalty for running the E4 beyond its specs but such occurances appear to be so minor or rare as to be of no consequence for most users.

The issue of bright and dark spots on an image have been diagnosed as dust on the sensor in many cases. Some users have blown the dust off of the sensor but I advise some caution here..... removing the lens (using the correct tool!) DOES give you access to the microbolometer faceplate on which the dust resides, but using an air duster to blow on it is a risk if done carelessly. An appropriate coated optics rated air duster that does not contain agressive chemicals should be used (if its designed for cleaning computer keyboards...its not likely suitable for coated optics use !) and consideration should be given to the risk of making matters worse by disturbing more dust particles sitting around the optical block and the sensor with the jet of air. You could end up with a 'snow storm' on the sensors face ! Normally it is best to dismantle the camera and remove the parts that surrond the microbolometer in order to give it a proper optical clean using filtered dry air at an angle rather than direct into the face of the sensor. It should also be considered that firing a powerful air duster directly at a thin optical window structure can break it   :o so avoid any high pressure air lines as used for workshops ! Dismantling the E4 optical block is not for the faint hearted especially if you do not do such activities for a living.

If there are dust spots visible on the microbolometer at 320x240, but not at 80x60, you cannot use dust contamination of the microbolometer sensor as the reason for exchange when returning a unit (think about it  ;) )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on March 16, 2014, 05:53:59 pm
Perhaps someone has already asked that, but I can not find the answer.
Is it possible to upgrade the camera Flir E40 to 320x240?
If so, whether this is done the same way as the E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 16, 2014, 06:17:05 pm
Why newbies don't use a search before asking?

so here the E60 files I used for my E30, pw funzt666

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379973/#msg379973 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379973/#msg379973)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380259/#msg380259 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380259/#msg380259)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
thats all informations, do you need

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on March 16, 2014, 06:20:51 pm
Why newbies don't use a search before asking?
Enabled spoon feeding is far lazier. Duh.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 16, 2014, 06:50:24 pm
@Aruora...
I totally agree about "blowing" off the microb. with canned air!

Also, if you watch mikeselectricstuff's video on the teardown, he shows a closeup of the microb. and the EXPOSED bond wires!!!!

If you were to use canned air at the wrong angle, you could move/bend the bond wires around and either short a few together, or actually break them or rip them off their bond pads!

This could easily be done as they are NOT "potted" and are just "flappin' in the breeze".  Even using a camera brush would be a BIG no-no!

So EXTREME caution MUST be used to clean the microb.!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 16, 2014, 11:07:22 pm
Perhaps someone has already asked that, but I can not find the answer.
Is it possible to upgrade the camera Flir E40 to 320x240?
If so, whether this is done the same way as the E4?
Yes- method is very similar to the (pre 1.2x) E4
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve69163 on March 17, 2014, 04:10:01 am
I have reviewed the instruction of how to hack the e4 firmware 1.21, but I do not really understand 100% of how to begin the change. Can anyone put it in a youtube for more visual instruction. Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on March 17, 2014, 04:35:49 am
If you have a Exx without MSX (year 2012) you can activate the MSX menu but you only see a live real image on the LCD.
If you take a picture, then you save a normal MSX jpg on your SD card.

I think, the MSX code is embedded in the windows CE binaries but not in the fpga code.

This is my conclusion too from my attempts to enable MSX on my "old" E30bx.

And I'm very unhappy at FLIR for not pointing out there are different models.
When I bought their website was clearly stating that the Exx series all had MSX.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on March 17, 2014, 05:03:13 am
When FLIR advertises a product line, they highlight the features of the top end model, in the case of
the eXX series, all you will hear about is the e60.  When you try to sell a product, you start at the top
and go down, never at the bottom.  It does not become obvious that the lower models don't have
the top features until you look at a comparison chart.  I think the reason I chose the e40 over the
 e30 is because of the resolution and I think blue tooth/wi-fi.  To spend more for the e50 and e60 just wasn't worth it to me, but we all know now, the cameras, at least the e40 - e60 are really
 the same camera.

Is is determined that the e30 does NOT have any wireless?

There is a product called Eye-Fi, I believe it is an sd memory card but has wi-fi built in.  I wonder
what would happen if it was inserted into an e30 or any of the eX series.  It seems the issue would
be drivers.  Since the memory card is made to transmit data from cameras in general, I have to
wonder if it would work with a FLIR camera.  I sent the company an e-mail a couple days ago asking
if it would work, they have not responded, doesn't surprise me.  Their website doesn't say much.

Jim

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 17, 2014, 05:18:45 am
And you here about the base model price.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 17, 2014, 05:33:31 am
I have reviewed the instruction of how to hack the e4 firmware 1.21, but I do not really understand 100% of how to begin the change. Can anyone put it in a youtube for more visual instruction. Thank you.

Wow talk about spoon feeding!  Why do people hate to read so much.

Since this was your first post.  It would be great if you would read some of the thread, write up a tutorial (or follow the existing ones in the thread) and ask for help filling in the specific parts you don't understand.  THEN YOU can produce a youtube and it would be a huge contribution to justify all of the free work and knowledge you are getting to leverage.  What a bargain!! and you'll learn a ton like we all did reading every page.

So, just to be sure, did you read this post https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480) which is listed at the beginning of the 1st page of the thread?

The more I think about it the more I think it's a great idea for you to create that youtube video.  It will be awesome.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 17, 2014, 10:33:44 am
Perhaps someone has already asked that, but I can not find the answer.
Is it possible to upgrade the camera Flir E40 to 320x240?
If so, whether this is done the same way as the E4?

I saw that you hacked succesfull your E4 and have now a E40.

Some user had seriosly trouble with WLAN.
Better use RNDIS and FTP

My suggest:

(1) Download config file here:
so here the E60 files I used for my E30, pw funzt666

(2) use the tutorial for the i3 (see attached pdf from user nersut - compressed < 1000kb )
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 17, 2014, 12:35:08 pm
On the topic of the earlier 'non MSX' Exx series.... there was a question on the official FLIR support site asking if an earlier Exx may be sent to a FLIR service centre for the MSX function to be added. FLIR responded saying that it was not possible to retofit MSX to the earlier model Exx units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 17, 2014, 04:43:24 pm
@muvideo,

Please see my post here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg394322/#msg394322 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg394322/#msg394322)

It should be possible to make a simple telescope just like adding a telescope auxilliary lens to a normal optical camera. BUT the problem is in finding the correct lens elements with the required focal lengths. Do some Googling on "simple telescope" and you will discover what I mean. You will need a nice large (say 50mm diameter) biconvex or plano convex front lens with a long focal length of approx 200mm. This lens will then feed the image to a second smaller biconvex or plano convex lens with a shorter focal length (say 50mm).

This should produce a useable telescope lens but in truth it will likely be pretty poor in terms of performance unless you don't mind a very long lens ! The Inframetrics lens contains at least 4 lens elements and none look to be the type that you can buy off of the shelf easily or cheaply. Bear in mind that teh Inframetrics telescope used Germanium optics and cost several thousand Dollars. If there were a nice cheap way to achievw the same performance, I think we would have seen alternatives available over the years.



Hello,
nice lens you scored, did you try it with E4?
I'd like to see results.

I finally found a little time to make a fast research on the topic.
Grossly simplifying the topic :
for a simple compound lens system of 2 lenses, total focal length f is

1/f=1/f1+1/f2-d/(f1*f2)

where f1 is first lens focal length, f2 is second and d is
distance between elements.
Required focal length for imaging an object on a sensor:

f=(Dtot*Simg)/(Sobj+Simg)

where Dtot is object distance, Sobj is object size and Simg
is object's size projected on the sensor.

Assumptions:
Simg=5mm
Sobj=50mm
Dtot=6000mm
f1=6mm E4 lens
f2=50mm auxiliary lens
gives
f=545mm
d=55mm

So a 50mm lens mounted 55mm from E4 front lens shoud
give 545 equivalent FL, is it possible?

For an auxiliary lens of 25mm FL (the minimum for cheap
ebay ones) d is about 30mm.

Unless I screwed up totally the numbers...
does all this makes sense at all?
It should be easy enough to try.

By the way: ebay's ZnSe lenses are plano-convex or biconvex?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on March 17, 2014, 05:44:04 pm
Tomas:

I believe it was me, months ago having problems converting my e40 to an e60.
I was afraid I had bricked the camera, I didn't.  I was using the wi-fi to transfer the files via ftp.
I didn't see a reason to use RNDIS at the time since wi-fi did the trick, until I messed up some
files and wi-fi stopped.  I was then forced to use RNDIS to restore my backed up files, worked
fine.  I ended up using the files from funtz as a basis for my config file.  I made some changes
from that file and was able to meet my objective.

I know we have all heard this, but my biggest problem is the time was the CRC calc, once I
cleared that up everything went slicker than snot. 

There are probably some features I could still turn on but haven't.  I have not verified the
temperature accuracy, not my priority.

I believe it was you who flamed me for trying to turn a $4K camera into a paperweight.  I
think all of us are taking somewhat of a chance, but are willing to stick our noses out a
little.

The most important thing is that we help eachother and row this boat in the same direction.

Yes, people need to pay their dues, it took me hours to read all the posts.  Would be nice
if somebody was to distill the important posts down to a minimum.

Jim


I saw that you hacked succesfull your E4 and have now a E40.

Some user had seriosly trouble with WLAN.
Better use RNDIS and FTP

My suggest:

(1) Download config file here:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 17, 2014, 06:09:11 pm
@muvideo,

Yes it is a very nice quality lens.....but the story does not end there.....

I bought the Inframetrics 525 TIC X3 telescope lens for $150 and then saw another X3 telescope designed for the slightly later Inframetrics 600 series camera. I did a deal with the seller and managed to get that one for $100. It is pretty much the same Telescope but with a bayonet mount as opposed to the 525's screw thread. I did some research and these X3 telescopes normally cost around $6000 each  :o 

Now the bad news. When the Telescope is placed in front of the E4 it produces an image, BUT it is inverted. This did not make sense to me as they are auxilliary lenses designed to sit in front of the thermal cameras built in lens. There are no 'invert image' requirements to use these telescopes with the cameras so I am left with the likelihood that this is down the the E4 lens not being at the correct focal point. Having looked at the 525 TIC cutaway diagram, I suspect that I have the E4 too close to the telescope rear lens. I need to do some experimentation and maybe use an intermediary ZnSe lens to sort out the focal point etc. Sadly I am battling illness so have not been able to experiment with the lens properly. I also need to make a new 'spring loaded plunger screw' for the focus ring. The 600 series lens is on its way to me from the USA at the moment but I expect the same inverted image issue. The quality of these X3 lenses certainly makes the effort to convert them for use on a PM570, PM695 or E4 worthwhile. $12000 of lenses for $300  :)

Now some warnings for those considering buying Thermal Camera lenses for experimentation.....be careful or you will waste a lot of money.

My PM570 and PM695 cameras are microbolometer LONGWAVE cameras. The earlier PM550 was a SHORTWAVE Stirling Engine Cooled camera. Many older thermal cameras that used Liquid Nitrogen or a Stirling cooler are SHORTWAVE. Why is this an issue ? Well a lens that is designed for use with a Shortwave TIC has a different AR coating suited to use from 1um to 5um. The Shortwave coating behaves like a mirror when viewed by a Longwave camera. A Shortwave lens is totally useless for applications involving the Longwave FLIR E4. And no, the AR coating cannot be removed, Even if possible, Germanium performs very badly without the coating with less than 40% transmission, as opposed to 98% with the correct AR coating.

I was very lucky to find Telescopes that were designed for Longwave use. The detector in the Liquid Nitrogen Cooled Inframetrics 500 and 600 series cameras are unusual in that they are Longwave.

Also please note that many older thermal cameras with removeable lenses used a system where the front lens assembly could be changed, yet the rear part of the lens assembly was fixed in the cameras chassis. This lowered the manufacturing costs of the lenses as less Germanium was used in them. Such a lens, as fitted to the AGEMA 870 and 880, will not work with an E4 as half the lens structure is missing ! (its inside the 8xx camera)

With regard to the ZnSe lenses sold out of China for CO2 laser use. I have found that the lenses with a FL greater than 50mm are Bi-Convex. FL 50mm or less are Plano Convex. I have also found some 15mm Plano Concave lenses on e*ay at good prices. It is not unusual to see a ZnSe lens being used in a sophisticated thermal lens system that contains both Germanium and ZnSe optics.  They are very versatile with a decent transmission spec.

With regard to the design of a telescope, I am no expert on such so the information provided by the internet is your best guide.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MindBender on March 17, 2014, 09:24:08 pm
Thanks for all the great work, guys! It's really awesome.

I've been using a FLIR A40 for board bring-up so far, but it has always been a hassle, setting it up, hooking it up to a monitor or network. This E4 a lot more convenient to use and your hack made me decide to get one. It works beautifully!

Not pretending to have discovered hot water: Did you guys found the E4 embedded website already? It's accessible from its IP address with USB in RNDIS mode. The FTP user/pass will get you in. I didn't activate service mode yet, but the service pages seem a wealth of information, including dead pixel info and it even offers a couple of tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 17, 2014, 09:50:32 pm
Yes, people need to pay their dues, it took me hours to read all the posts.  Would be nice
if somebody was to distill the important posts down to a minimum.

I hacked my E40 long time before this thread starts and I helped for fun.
I'm interested in the reverse engineering of the exif header.
see my long post: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
 
Why do you don't write a nice tutorial for the Exx upgrade?
Mike links a good post on the first site.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 17, 2014, 11:42:46 pm
Did you guys found the E4 embedded website already? It's accessible from its IP address with USB in RNDIS mode.

Probably some have already seen this
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=69184;image)

yeah, it's been discussed before. The unlock password is 1235.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 18, 2014, 12:24:08 am

Now the bad news. When the Telescope is placed in front of the E4 it produces an image, BUT it is inverted. This did not make sense to me as they are auxilliary lenses designed to sit in front of the thermal cameras built in lens.
Maybe those cameras have a software option to un-invert?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on March 18, 2014, 02:56:41 am
Oh, crickey!  This thread is becoming hilarious, and/or a "bag of hurt!" All those "I'm new here" people with < 40 posts on the forum should be required to read the thread before being allowed to post!

Oh, and you have far more posts?  :palm: Looky here mate, if you knew who I was are were was been...

ah dern it, doesn't matter anyway....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on March 18, 2014, 04:29:14 am


Why do you don't write a nice tutorial for the Exx upgrade?
Mike links a good post on the first site.

I'll try to put something together, I'll share it with you before I put it out, can't do it right now,
but it is now on my list -

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 18, 2014, 06:35:24 am

I'll try to put something together, I'll share it with you before I put it out, can't do it right now,
but it is now on my list -

Jim

great, the pdf for the ix hacking is a good starting point
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)

add a conf.cfg as template

damned last CR/LF:
Use EzCRC from Taucher as keygen (it's foolproof ;) )
Check visible resolution while deactivating MSX

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)

... and copy the conf.cfg from tauchers subfolder with ftp (WLAN or USB/RNDIS) to the Exx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 18, 2014, 04:21:25 pm
As of now, is there any recommendation as to which specific eBay lens seeme to be of the highest quality and the best for the Flir E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 18, 2014, 06:00:54 pm
As of now, is there any recommendation as to which specific eBay lens seeme to be of the highest quality and the best for the Flir E4?

I can't attest to highest quality but I followed Aurora's lead in purchasing a couple of eBay item #321078811086 and they work great, modulo my limited experience with IR in general. There are drop-downs to select the material, diameter, and focal length. I went with 20mm dia and 50, 100 focal lengths.

ZnSe is transparent at optical wavelengths, which is probably why the eBay picture looks like it has a mottled surface; you're seeing through to the foam behind it. The lenses arrived in individual paper packets, so no worries about them grinding against the foam during transit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nvana on March 18, 2014, 08:25:04 pm
First of all: great work modders / tweakers.  I am amazed about how such a prosumer product comes to live within the modding / tweaking community  8)

Quick question: Is a FLIR E4, with firmware 1.21.0 and hardware revision 1.1L still moddable to 320x240 ?

I find alot of postings about the 1.21.0 being moddable with the new CRC3 calculator, but nothing about the 1.21.0 / 1.1L combo.

Arno
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 18, 2014, 08:37:01 pm
@nvana,

Hardware 1.1L only came into existance with Firmware 1.21.0 so the answer is YES, FW 1.21.0 or 1.22.0 and HW 1.1L can be modded to 320x240 + menu additions, Zoom function etc  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 19, 2014, 02:21:47 am
As of now, is there any recommendation as to which specific eBay lens seeme to be of the highest quality and the best for the Flir E4?

After some research we ordered one of these:
http://www.ebay.com/itm/230838327998?var=530072348308&ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649 (http://www.ebay.com/itm/230838327998?var=530072348308&ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649)

ZnSe 50.8mm focal distance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on March 19, 2014, 03:40:45 am
As of now, is there any recommendation as to which specific eBay lens seeme to be of the highest quality and the best for the Flir E4?

I can't attest to highest quality but I followed Aurora's lead in purchasing a couple of eBay item #321078811086 and they work great, modulo my limited experience with IR in general. There are drop-downs to select the material, diameter, and focal length. I went with 20mm dia and 50, 100 focal lengths.

ZnSe is transparent at optical wavelengths, which is probably why the eBay picture looks like it has a mottled surface; you're seeing through to the foam behind it. The lenses arrived in individual paper packets, so no worries about them grinding against the foam during transit.

Which focal length do you find more useful?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on March 19, 2014, 04:07:27 am
As of now, is there any recommendation as to which specific eBay lens seeme to be of the highest quality and the best for the Flir E4?

I can't attest to highest quality but I followed Aurora's lead in purchasing a couple of eBay item #321078811086 and they work great, modulo my limited experience with IR in general. There are drop-downs to select the material, diameter, and focal length. I went with 20mm dia and 50, 100 focal lengths.

ZnSe is transparent at optical wavelengths, which is probably why the eBay picture looks like it has a mottled surface; you're seeing through to the foam behind it. The lenses arrived in individual paper packets, so no worries about them grinding against the foam during transit.

Which focal length do you find more useful?
Probably 50 for PCB work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 19, 2014, 05:43:03 am
I got a Flir with 1.21 firmware and hardware 1.1L

I tried the steps for the 1.21 hack and it didn't seem to work

I also have lost "MSX" under image modes

Any idea what I need to do next?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 19, 2014, 05:47:21 am
I got a Flir with 1.21 firmware and hardware 1.1L

I tried the steps for the 1.21 hack and it didn't seem to work

I also have lost "MSX" under image modes

Any idea what I need to do next?
my quess would be some error in the .conf - related to something containing "FUSION" ... "ENABLE" and "FALSE"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 19, 2014, 05:58:55 am
I attached my conf file before I re-ran ftool on it.   I did set the values to true based on the 1.19 conf file that I downloaded.

Also the resolution didn't seem to have changed at all, so something didn't take

I did replace the file using rdnis and ftp after I re-ran ftool -e on it with the values I got after running ftool -d.  I have checked my line feeds and believe I did the CRC03 correctly

Any help greatly appreciated!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 19, 2014, 06:08:30 am
I attached my conf file before I re-ran ftool on it.   I did set the values to true based on the 1.19 conf file that I downloaded.

Also the resolution didn't seem to have changed at all, so something didn't take

I did replace the file using rdnis and ftp after I re-ran ftool -e on it with the values I got after running ftool -d.  I have checked my line feeds and believe I did the CRC03 correctly

Any help greatly appreciated!

.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool trueb  <- b too much at the end ... maybe that's the whole error
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ivan7enych on March 19, 2014, 07:07:11 am
Can anyone tell me, is it possible to adjust horizontal shift (not vertical, which is corrected by menu) between visible and thermal image? Is there any settings in config file (I have 1.19 unlocked device) for that?

I have slightly misaligned images, and wand to fix it. But I don't like the idea to disassemble the camera and tilt visible camera physically.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schdiewen on March 19, 2014, 07:17:15 am
@Ivan7enych:

Someone else had a similar problem only 3 days ago, see this and the following posts from tomas123 for a solution:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406311/#msg406311 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406311/#msg406311)

You only need to determine/adjust the values for X if you're happy with vertical shift.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ivan7enych on March 19, 2014, 07:48:51 am
Thank you! :) I've missed that discussion.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 19, 2014, 12:25:22 pm
Which focal length do you find more useful?

If I had to choose only one, I'd go with the 100 mm (4 inch) focal length. The 50 shows more detail but has to get so close to the board that the camera face is occasionally bumping up against heat sinks or connectors. Plus the field of view is smaller so there's a bit more scanning around required. With the 100 you can see more of the board and then use the digital zoom to get "closer" to individual components. That trades resolution for magnification, of course.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 19, 2014, 02:55:49 pm
+1 for 100mm FL ZnSe lens.

The 100mm is my most used focal length and the 50mm is used when I need to get up close and analyse an SMD chip or similar. As has been said, I find the 50mm can cause issues with things like heatsinks, chassis parts etc. getting in the way.There is a 75mm FL lens I believe, that may be a happy medium ? Personally I recommend having two adapters, one with the 100mm and one with the 50mm FL. The 3D printed adapter cost me GBP4 each and the lenses were around GBP20 each. Not a massive expense for the aditional capability that they provide for PCB work.

Note that the depth of field is quite small when using these lenses so a steady hand or tripod mount adapter is recommended for good still image captures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 19, 2014, 03:19:26 pm
E4 Partial Serial Numbers and Dates of Calibration -
Data collection continues


My thanks to all those E4 owners who have already submitted their E4 camera details for inclusion in the 'E4 Useful information' thread. By keeping a log of partial serial numbers, calibration dates and fimware versions it helps the Forum track changes and extrapolate useful information on production, countermeasure releases etc.

For those who have not provided their details, I would appreciate the data. Worry not, I do not want your full serial number or ANY persnal information. A serial number containing all except the last 2 numbers is enough for our purposes here.

It will be posted here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

Please provide the following:

Partial Serial Number 6390 NNxx or 6391 NNxx  (N= your E4 numbers. xx is place holder only)
Calibration Date (On a card in the E4 box)
Firmware (1.18.7, 1.18.8, 1.19.8, 1.21.0, 1.22.0)
Hardware (1.0, 1.1, 1.1L)

Please send this information by PM to me to avoid clogging up this thread.

This information will be posted on this forum as part of the Useful information thread and will not be used for any other purposes.

For those unaware, please also be aware that the .jpg images produced by the E4 camera contain lots of metadata, including your full serial number. Even when a photographic data removal tool is used, the serial number can often still be read in FLIR Tools ! If releasing your full serial number in public is a concern to you, be very careful if you post images to web sites as you may unknowingly provide that data, and in doing so confirm that your camera has been 'upgraded' if the thermal image is 320x240 on an E4  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 19, 2014, 03:34:20 pm
Another question regarding ZnSe lens holder:
makes any difference having it turned in Al and anodized?
I'm thinking to use it to protect the front of the camera
from hot air from a small reflow hot plate, better than
PLA plastic , I suppose.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 19, 2014, 04:09:50 pm
@muvideo,

A good question. I am intending to make some aluminium and/or nylon adappter plates to position larger lenses in front of the E4. In theory the shiny rear to the metal adapter could cause heat reflection issues back towards the camera lens but I have not seen such when using metal plates in front of the E4.

I personally selected ABS for the ZnSe adapters as I do not like PLA.

Be aware that you must not use any acidic adhesives to secure a ZnSe lens into its mount. ZnSe reacts badly with acids...see the materials safet sheet.

With regard to your specified usage with a radiant heat source, I recommend you consider fitting the ZnSe lens inside an adapter, metal or plastic, and then using thermal insulator stand-off's to mount a heat shield just in front. The Heat shield should be nice and shiny on the front to reflect the radiated heat away from the camera. For this reason I recommend that a polished aluminium plate be used that extends beyond the dimensions of the E4's head. The viewing hole in the heatshield should be sized to accomodate the field of view and not too large. Do not be tempted to fit a Germanium window in the heat shield as Germanium becomes opaque to thermal energy as its physical temperature rises ! i.e. its transmission performance decreases at higher temperatures. Anything near to 100 Degrees C is bad news.  ZnSe is not effected in this way so the close-up lens will actually protect the E4's lens somewhat.

Info is to be found here:

http://www.tydexoptics.com/materials1/for_transmission_optics/germanium/ (http://www.tydexoptics.com/materials1/for_transmission_optics/germanium/)

and here:

http://www.alkor.net/germanium_windows_and_lenses.html (http://www.alkor.net/germanium_windows_and_lenses.html)

Also, remember that the E4 'tops out' at +250 Degrees C, so that may be a limiting factor where soldering temperatures are involved.

Aurora
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 19, 2014, 05:34:41 pm
@Taucher thank you so much, I feel like an idiot, the typo should do it
Title: Re: EzCRC01
Post by: lightsgo on March 19, 2014, 05:53:17 pm
EzCRC01
I took the liberty and made a simplified version of CRC01 - called EzCRC01
Just extract the attached zip archive, doubleclick EzCRC01.exe and follow the on screen instructions
edit3: To complete the process your e8.conf (lowercase "e" important) needs to be placed on the camera (via .FIF or RNDIS+FTP) - then cold boot your cam (battery removal)

It's intended as supplement to Mikes files and as a codebase for an in-place-crc01-updater.

EDIT2: Replaced with static version (64 bit)

Hello,
I have been pouring through the forum and can't seem to find a solution. I know Im a first time poster and trust me, I tried to find the answer by searching a few hours.
When I run EzCRC01 in the EzCRC01-V01-static folder Through VM Ware with Windows XP I get an error saying it is not a valid Win32 Application. Do I need to run this on Windows 7??
I have tried to run the CRC03 through CMD and I get a [!] Unable to open input file error.
I hope that I can be pointed in the right direction. Maybe its as simple as needing Windows 7?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 19, 2014, 08:57:37 pm
I have two machines, one running vmware and xp pro and one running windows 7. Just tried your method and got the same results! Ran the same on the windows 7 machine with zero problems. I am not a computer expert but i suspect the virtual machine is causing the problem. Without testing on a straight up windows xp machine i can't know for sure. If you have the ability to run it on a different machine i would try that.

On another note, has anyone been able to capture an image with the e4 zoom function turned on? I did read some previous posts that mentioned the zoom has image enhancement to bump it to 320x240 but did not hear of anyone trying to capture a zoomed image. My camera automatically exits the zoom after a trigger pull and stores a 1x image. Might be the way it is supposed to work, not sure! I would think capturing a zoomed image would be the point to having the zoom function.
My e4 is running 1.19.8 with 1.1hw (non L version). Any input would be appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on March 19, 2014, 09:31:12 pm
On another note, has anyone been able to capture an image with the e4 zoom function turned on? I did read some previous posts that mentioned the zoom has image enhancement to bump it to 320x240 but did not hear of anyone trying to capture a zoomed image. My camera automatically exits the zoom after a trigger pull and stores a 1x image. Might be the way it is supposed to work, not sure! I would think capturing a zoomed image would be the point to having the zoom function.
My e4 is running 1.19.8 with 1.1hw (non L version). Any input would be appreciated.

Mine does the same thing.

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iDevice on March 19, 2014, 09:37:10 pm
+1 for the 100mm lens.
I have both a 50 and a 100. I first bought the 50 and instantly discovered that it was too short as I was bumping all the time in heatsinks and even tall lytics.
So I bought the 100 and almost never use the 50 anymore except for special occasions, but if I should only own one lens and holder, it would be the 100 that fits most needs perfectly.
Title: Re: EzCRC01
Post by: tomas123 on March 19, 2014, 09:45:49 pm
When I run EzCRC01 in the EzCRC01-V01-static folder Through VM Ware with Windows XP I get an error saying it is not a valid Win32 Application. Do I need to run this on Windows 7??
I have tried to run the CRC03 through CMD and I get a [!] Unable to open input file error.
I hope that I can be pointed in the right direction. Maybe its as simple as needing Windows 7?

I can confirm this. (see german error message)

CRC01.exe from first post runs under Win XP
see screenshot below
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85815;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 19, 2014, 09:51:05 pm
Regarding the saving of zoomed images.......

You have to select the zoom level (X2, X4, X8) and then press the navigation pad centre to confirm the selection and exit the menu. You can then see the zoomed image and save it as normal using the trigger. The saved image is that seen in the zoomed mode.

If you do not exit the Menu, operating the trigger makes the camera return to its last settings, i.e. no zoom, or last correctly selected zoom setting.

I am running a FW 1.19.8 / HW 1.0 E4 with Version Beta 2B (My version of Tauchers excellent 'master' file) menu configuration (not Beta 3)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on March 19, 2014, 10:27:53 pm
Aurora, that just makes way too much sense…  and it works.  Thanks

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lightsgo on March 19, 2014, 10:41:58 pm
Thanks for confirming! Im just tankful that I didn't miss a prior post.
Is there a know solution for those running VM ware on a mac with either Windows XP or 7 that is know to work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 19, 2014, 10:44:56 pm
Ditto! Thanks Aurora! I was selecting the zoom level (ie 4x) with the center button but leaving the menu bar up.
Exiting the menu functions totally before the camera acknowledges it does make sense. Just plain missed it!!
Title: Re: EzCRC01
Post by: Taucher on March 19, 2014, 10:51:06 pm
When I run EzCRC01 in the EzCRC01-V01-static folder Through VM Ware with Windows XP I get an error saying it is not a valid Win32 Application. Do I need to run this on Windows 7??
I have tried to run the CRC03 through CMD and I get a [!] Unable to open input file error.
I hope that I can be pointed in the right direction. Maybe its as simple as needing Windows 7?

I can confirm this. (see german error message)

CRC01.exe from first post runs under Win XP

Well, you COULD install WinXP 64 bit ... there it (EZCRC01) would work - just as with any other X86 based 64-bit Windows.
Anyway the sourcecode is included for anybody wanting to re-compile or modify it - like for CRC03 etc.
Title: Re: EzCRC01
Post by: lightsgo on March 19, 2014, 10:59:45 pm
When I run EzCRC01 in the EzCRC01-V01-static folder Through VM Ware with Windows XP I get an error saying it is not a valid Win32 Application. Do I need to run this on Windows 7??
I have tried to run the CRC03 through CMD and I get a [!] Unable to open input file error.
I hope that I can be pointed in the right direction. Maybe its as simple as needing Windows 7?

I can confirm this. (see german error message)

CRC01.exe from first post runs under Win XP

Well, you COULD install WinXP 64 bit ... there it (EZCRC01) would work - just as with any other X86 based 64-bit Windows.
Anyway the sourcecode is included for anybody wanting to re-compile or modify it - like for CRC03 etc.
Thanks so much for clarifying!
I have Windows 7 64bit on its way! I just wanted to see if that threw up a flag, and it has! Im not to the level of editing source code and I only use the VM ware for the rare occurrence of needing to interact with a device that isn't mac compatible (my brother P touch).
Thanks so much for your contribution to the whole thing!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Baya73 on March 20, 2014, 01:05:33 am
Hi Guys, has anyone found a way to keep the temperature scale settings from going back to automatic when powering down the camera ? The auto-scale is nice but most of the time I would like to keep the scale in manual with fixed temperatures so I can compare images taken at different intervals. All of the other menus keep the last feature: Image mode, Measurement, color palette even the new "zoom" feature keeps the last setting.

Thanks !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 20, 2014, 01:10:09 am
Hi Guys, has anyone found a way to keep the temperature scale settings from going back to automatic when powering down the camera ? The auto-scale is nice but most of the time I would like to keep the scale in manual with fixed temperatures so I can compare images taken at different intervals. All of the other menus keep the last feature: Image mode, Measurement, color palette even the new "zoom" feature keeps the last setting.

Thanks !
sure, you just need to add another .conf file to setup the corresponding registry settings as you like.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 20, 2014, 03:29:11 am
I am still having problems with my e4 on 1.21 and I fixed my conf_plain to not have typos

I added the crc03, and then re-ran ftool, re-uploaded to the right directory and still have lost thermal msx and don't have higher resolution

Any idea on what to try?  Factory reset?  Something else?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FrankenPC on March 20, 2014, 04:53:13 am
Does the E4 hack drive down the thermal sensitivity to <0.06°C like the E8?

I did a search on the forum and only saw a few posts asking the same question.  I didn't see any responses.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 20, 2014, 05:02:12 am
I am still having problems with my e4 on 1.21 and I fixed my conf_plain to not have typos

I added the crc03, and then re-ran ftool, re-uploaded to the right directory and still have lost thermal msx and don't have higher resolution

Any idea on what to try?  Factory reset?  Something else?

I was working on this a few hours ago.  Your CRC03 looks right, maybe you did the ftool incorrectly?  There isn't much to making this work right.  It sounds like it is completely rejecting your config file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 20, 2014, 05:10:03 am
@Gallymimus I will try doing the ftool again, although it seems pretty straightforward

ftool -d to decode, ftool -e to re-encode with the SUID output. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 20, 2014, 05:49:40 am
question about ftool and the 1.21 hack

do I need to have the original conf.cfc from my camera to generate the right suid?

If yes and I blew this away and lost it, is there any way to re-generate it?

I downloaded one of the posted conf.cfc's and used the tool on that, modified and re-uploaded but no luck

many thanks for any help as I have totally lost MSX from my device
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ivan7enych on March 20, 2014, 05:52:26 am
Does the E4 hack drive down the thermal sensitivity to <0.06°C like the E8?

I did a search on the forum and only saw a few posts asking the same question.  I didn't see any responses.
I see, that thermal image show significantly less noise after modification. Less noise = better sensitivity.
To make a numerical comparison, ideally one need to make 2 shots in RAW format, and compare standard deviation values on part of image with uniform color.

I've added 2 image examples from my camera, both with almost the same thermal range (~10degree). Unmodded camera has much worse noise, and I can't imagine any physical explanation of that. Dounsampling the resolution of the image (averaging 4x4 rectangle of pixels into 1 pixel) should make noise 4 time lower. Simple downsampling (taking only one pixel from 4x4 rectangle) should make noise the same, not larger.

May be flir adds some noise  :-\ to a good image for low range cameras?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 20, 2014, 06:11:55 am
question about ftool and the 1.21 hack

do I need to have the original conf.cfc from my camera to generate the right suid?

If yes and I blew this away and lost it, is there any way to re-generate it?

I downloaded one of the posted conf.cfc's and used the tool on that, modified and re-uploaded but no luck

many thanks for any help as I have totally lost MSX from my device

uh oh, you might be in trouble.  YES you ARE supposed to use the original conf.cfc to get the right SUID.  I'm not sure if it can be recreated.  Hopefully it's just generated algorithmically but I wouldn't know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 20, 2014, 06:15:10 am
oy it was not clear in the instructions to use the original SUID

Who could help me with how to re-generate it?

If I delete it and restore to factory defaults does it regenerate it?

Is there another way to figure out the right SUID for my device or another file I can decode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svflir on March 20, 2014, 06:40:26 am
thank god there was another conf.cfc encrypted the same way on the device I could get the SUID from!

1.21 hacked

Lessons learned: backup files before messing with them
read all forum posts before trying 1.21 hack
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 20, 2014, 08:44:18 am
Does the E4 hack drive down the thermal sensitivity to <0.06°C like the E8?

I did a search on the forum and only saw a few posts asking the same question.  I didn't see any responses.
We don't know - the supposedly improved spec on the E8 is a bit of a mystery. Could be down to calibration, sensor selection or just marketing fakery, i.e. all units may actually have the same sensitivity, they just make it look worse on the cheaper models
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 20, 2014, 09:58:37 am
We don't know - the supposedly improved spec on the E8 is a bit of a mystery. Could be down to calibration, sensor selection or just marketing fakery, i.e. all units may actually have the same sensitivity, they just make it look worse on the cheaper models
As I said before - when you take photo of uniform temperature, you will see always about 13°C scale. Scale has 224 levels. 13/224=0.058°C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 20, 2014, 10:24:47 am
Hmmmm, regarding the thermal differential sensitivity of a thermal camera........

The only way to truly know what the thermal differential sensitivity of the camera would be to test it in a calibration jig designed for the purpose.

In my experience there is a lot of confusion surrounding the "Sensitivity" specification. In simple terms it is best to think of it as visible contrast. The ability to detect a diffference in temperature. The SPAN used on a thermal camera can effect visible difference displayed to the user BUT the camera actually captures the full thermographic range and displays only the segment selected by the user. This is why you can import an image into FLIR Tools and adjust the center temp and span in the software using the cameras RAW thermographic data.

With this in mind, the user selected span cannot influence a cameras true thermal differential sensitivity. That remains fixed no matter what the user does with the span that is displayed via the screen.

FLIR do use an artificial noise generator in the E4. There are various thoughts on why they do this, some considered it a way of improving the images appearance (video processing) whilst others consider it a way of artificially degrading the image on lower end cameras. The Noise generator was originally set to 135mK but was reduced to 5mK by Mike as he correctly identified that the inserted noise had a detrimental effect on the image when so much was inserted. I am very pleased with the 5mK setting that is part of Mike's config file.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 20, 2014, 10:28:07 am
I wrote here something about the possibility to change the thermal sensitivity with the parameter targetNoiseMk (the unit is MilliKelvin)

Quote
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
It could actually be noise reduction or shaping - maybe this is a threshold to decide when to apply noise reduction, i.e. adjust filter until noise is below the target value.  "Mk" - mask? Perhaps something like a hysteresis function?

targetNoiseMk is a noise generator in mK (conforming with NETD/ thermal sensitivity in Flir Datasheets of the selected cam)
Formerly I stacked some noisy images with Registax or AviStax  to subtract out the randomly noise and it works great!!

after setting targetNoiseMk to zero, stacking of images don't improve results  :(

here a sample from a Flir E40 (old cam hacked formerly from 160x120 to 320x240)
in service menu I can measuring the noise

Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  60 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      61.28      12.13
Row Noise        14.84      2.94
Column Noise     13.67      2.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      25.69      5.09
Row Noise         7.08      1.40
Column Noise      7.82      1.55
Uniformity      198.23     39.25

Total noise        MilliKelvin      Digital Units
Pixel Noise       67.01     13.27
Row Noise          9.71      1.92
Column Noise      10.10      2.00


and now without noise (cam temperature is 25 Grad):
Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  0 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      19.85      3.93
Row Noise         6.39      1.26
Column Noise      8.64      1.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      18.98      3.76
Row Noise         4.70      0.93
Column Noise      5.54      1.10
Uniformity      210.23      41.63

Total noise        MilliKelvin      Digital Units
Pixel Noise      28.96      5.73
Row Noise         5.76      1.14
Column Noise      7.66      1.52


see the differences (NETD is 0,03 °C @ 25°C)

Quote
http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters (http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters)
Uncooled infrared cameras systems are typically a little noisier, in the range of 30 - 120mK. Noise in an image can be spatial or temporal.
Spatial noise is noise across the image at any given point in time. It is perceived as an unchanging fixed pattern on top of the image.
Temporal noise is noise at any point in the image over time. It is perceived as the static that moves in an image.
NETD is typically the measure of both these noise types.

remarkably Flir dont't disable the noise generator at the top cams of a serie (Flir E4 -> E8 , Flir E30 -> E60)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 20, 2014, 11:01:44 am
A useful explanation of thermal sensitivity is to be found here:

 http://irinformir.blogspot.co.uk/2012/05/what-does-sensitivity-netd-mean-when.html (http://irinformir.blogspot.co.uk/2012/05/what-does-sensitivity-netd-mean-when.html)

A helpful page here as well:

http://www.infraredcamerasinc.com/Thermography-FAQ/Infrared-icons/Thermal-Camera-Thermal-Sensitivity-NETD.html (http://www.infraredcamerasinc.com/Thermography-FAQ/Infrared-icons/Thermal-Camera-Thermal-Sensitivity-NETD.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 20, 2014, 11:20:12 am
thank god there was another conf.cfc encrypted the same way on the device I could get the SUID from!

1.21 hacked

Lessons learned: backup files before messing with them
read all forum posts before trying 1.21 hack

Glad you got it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 20, 2014, 05:58:10 pm
In this thread was repeatedly told that the sensor is heated (and cooled??) to 30°C
(E4 shows an asterisk on display while heating to 30°C).

The sensor will heated only because of the simple calibration?

I think this is bad for the NETD and reduce the sensitivity for low temperatures  |O

P = s*T4 -> http://en.wikipedia.org/wiki/Stefan%E2%80%93Boltzmann_law (http://en.wikipedia.org/wiki/Stefan%E2%80%93Boltzmann_law)

sample: air temp = -10°C and sensor temp = +30°C -> (263/303)4 = 0.56
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 20, 2014, 06:24:33 pm
If you mirroring the TIC at glass-windows or any other IR-reflecting surface, you can see and measure the bolometer-temperature. :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 20, 2014, 07:22:56 pm
All of my microbolometer cameras, including the professional PM series have a microbolometer that is temperature stabilised at +30 Degrees Celcius. I have also confirmed this with my E4 looking at the PM695 microbolometer.

The microbolometers are temperature stabilised on VoX FPA's to establish a set operating temperature point for the purposes of calibration and response prediction. I cannot say why 30 Degrees C was chosen. It may be related to efficiency or intrinsic properties of the microbolometer.

This web page does comment on TEC stabilised microbolometers and non TEC based units.

http://www.sofradir-ec.com/wp-uncooled-detectors-achieve.asp (http://www.sofradir-ec.com/wp-uncooled-detectors-achieve.asp)
(corrected the link ooooops. Thanks Tomas123)

For low noise, high sensitivity thermal imaging I used the Stirling Engine Cryo cooled PM550 that had the semiconductor FPA running at something like -190 Degrees Celcius ! The image produced by that camera made the microbolometer based cameras look very noisy indeed, espcially at small temperature spans of 2 Degrees. The down side of such cooling is the need for a mechanical cooler or Liquid Nitrogen. The Stirling Engine cooler is VERY expensive at several thousand US$ and the FPA is integral to it as a 'cold finger' connects the stirling engine to the FPA in a vacuum chamber.

Some thermal cameras used a peltier TEC pile to cool the FPA to -70 Degrees Celcius. The performance was not as good as the Cryo cooled types, and IIRC predated the microbolometer general release. Specific FPA types were needed for opertion at the relatively warm -70C. TEC's can draw a lot of current and the ability to cool to the required temperature is very dependant upon the pile design.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 20, 2014, 07:47:48 pm
thanks for clarification
the correct link: http://www.sofradir-ec.com/wp-uncooled-detectors-achieve.asp (http://www.sofradir-ec.com/wp-uncooled-detectors-achieve.asp)

here is a Flir technical note
http://www.flir.com/uploadedFiles/Eurasia/Cores_and_Components/Technical_Notes/uncooled%20detectors%20BST.pdf (http://www.flir.com/uploadedFiles/Eurasia/Cores_and_Components/Technical_Notes/uncooled%20detectors%20BST.pdf)

Exx =  vanadium oxide sensor (VOx)
source http://www.flir.com/cs/emea/en/view/?id=54684 (http://www.flir.com/cs/emea/en/view/?id=54684)
Quote
The FLIR E30 is equipped with a state-of-the-art uncooled Vanadium Oxide microbolometer detector
and
ix =  vanadium oxide sensor (VOx)
http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)
Quote
FLIR microbolometer ISC0601B and the i7:
Each pixel is composed of a thin resistance in vanadium oxide (VOx) covered with an absorber in silicon oxide which absorbs the infrared ray. The temperature of the SiO2 layer is proportional to the temperature of the IR radiation, and the value of the resistance VOx is proportional to the temperature of the absorber.

BUT I don't think the E4 contains a VOX detector (I think it is Amorphous silicon)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 20, 2014, 08:06:50 pm
I must admit that I am not certain of the microbolometer technology used in the E4. It does not have the usual vacuum containment and very much looks like an Amorphous Silicon type that can be manufactured more cheaply as per a normal semiconductor die and the vacuum is truly tiny in size and located between the substrate and the front window of the device. The ADC forms part of the die and the TEC forms part of the chips substrate structure. All very compact and mass produceable. This technology originated in the FLIR car thermal night vision work stream as cost reduction was being pursued. I believe I posted some comment on this in Mike's thread on Audi and BMW thermal cameras. There was a document detailing the technology that I uploaded. I will find it and add it to this post. 

UPDATED:

AutoLiv document attached. Chapter 3 details the imaging FPA design.....looks awfully similar to that found in the E4. The lens design and material is also very familiar  ;)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 20, 2014, 08:07:59 pm
Is the microbolometer optimized to a specific temperature range, or
probably the same E4 microbolometer is used for higher temperature imaging ?
If it's optimized for low range, is it possible to damage it  imaging a too hot object?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 20, 2014, 08:20:14 pm
Flir never said that the E4 is a VOx sensor (you're certainly right that e4 has the cheapest sensor)

I found this  ;D
http://www.infrapuna.ee/files/E4%20Broshure%20English.pdf (http://www.infrapuna.ee/files/E4%20Broshure%20English.pdf)
Flir ThermaCAM E4
Quote
Using the world's best uncooled infrared detector material, vanadium oxide, the E4 delivers unmatched temperature measurement accuracy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 20, 2014, 08:42:38 pm
@muvideo,

I have not seen different microbolometers for differing temperature ranges. The normal approach to enabling higher temperature measurement is for the insertion of attenuators and wavelength filters in the optical path to control the thermal energy reaching the microbolometers surface.

The PM695 has options for a 1500C and 2500C. These are filters/attenuators fitted indside the camera on a moving filter holder.

Obviously when a camera has different temperature measurement ranges it will need to have appropriate calibration tables for each. When I select a different range on my PM series, the camera immediately carries out a comlete recalibration routine, not just NUC.

I am not aware of the maximum temperature that the E4 microbolometer can cope with but the Exx appears to be capable of over 600C, and I do not think it needs an attenuator or filter to achieve this.

Modern microbolometers are stated as being "Sun Safe", meaning that they cannot be damaged by being aimed at the Sun (much of the energy is 'out of the lens bandpass'). It would be hard to overload such a sensor to the point of damage, unless you were very determined to do so and directed in-band energy at the sensor at very high levels causing overheating of the pixels and eventual oxidation or melting of such. In the domestic environment or even the workshop I would not expect such conditions to exist.

Flame filters for live furnace inspections are explianed in this FLIR document:

http://www.flir.com/cs/emea/en/view/?id=41800 (http://www.flir.com/cs/emea/en/view/?id=41800)


High temperature filters are not cheap to buy though .... take a look here:

http://www.netzerotools.com/testo-885-2-infrared-camera-high-temp-filter (http://www.netzerotools.com/testo-885-2-infrared-camera-high-temp-filter)

US$1619  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 20, 2014, 09:05:23 pm
Afternoon all,

Well a massive thanks again to all that helped out. I managed to fumble my way through the resolution fix, with the ftools, not hard but ha to work out how to do it from scratch.

I now have additional menus and also what appears to be 320 x 240 pretty amazing. The manual colour shift is a massive bonus too.

Ive come across a few glitches with my camera though.

The center spot does not work.
When taking an image it only saves the IR, the Jpeg is blank/black.
Alignment distance select option scrolls but when selecting reverts to zero. Yet the focus distance fine tuning works.
MSX option has vanished.

I used the conf.cfc (download from off this thread) downloaded mine from camera, copied all the text from the modified version, so its not something I miss typed.

Although after taking a good look around the file, it seems some are listed as false.

Any idea what to tweak??
I ran into the same problem and I cannot seem to figure it out. Is this the correct information for the config file?

EDIT:Thanks to stefbeer for helping out! Ended up being I forgot a space between # and CRC and also forgot the final empty line at the end.
Code: [Select]
#
# Generated at 2013-10-25 09:37:31
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
[ID HERE(REMOVED)]
[CRC HERE(REMOVED)]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 20, 2014, 10:05:18 pm
I'm not convinced there is a TEC in the Ex - I think more likely just a heater - would be easy enough to check by looking at power draw at different ambient temps.
It would be not too unreasonable for a device like this to not be specced to perform optimally above an ambient of 30 deg.C
I can't immediately find an operating temp spec

A thought on the sensitivity thing - does the E8 have the high-contrast pallette as standard? Could it be as simple as that?
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 20, 2014, 10:42:58 pm
Anyone more of a visual learner I uploaded a tutorial:
1.19.8 Resolution hack:
Flir E4 320x240 Resolution Hack (https://www.youtube.com/watch?v=rYd8Jv8Kz3k#ws)
1.19.8 Menu hack:
Flir E4 - E8 Plus Menu Hack Thermal Imaging (https://www.youtube.com/watch?v=iZVzwOMHiFQ#ws)
Res and Menu Hack all through RNDIS (https://www.youtube.com/watch?v=Ci2a_zjWUiQ#ws)
Uploaded a video for the 1.21 and 1.22 Hack
Flir E4 1.21 and 1.22 Resolution and Menu Hack (https://www.youtube.com/watch?v=oXJYv_MxIHw#ws)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 20, 2014, 11:18:58 pm
great work

suggest: collect the links for your four E4 video tutorials in one post and let Mike set a link to your post on the top of this thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 20, 2014, 11:36:20 pm
great work

suggest: collect the links for your four E4 video tutorials in one post and let Mike set a link to your post on the top of this thread
I've linked to the post above from the thread start - DaveWB please edit that post if there are any updates. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 21, 2014, 12:47:27 am
Mike,

Optemp range is -15C to +50C

It would be a first for a TIC to use a heater for the temperature stability of a microbolometer and FLIR tend to be traditionalists and have fitted TEC's to their microbolometers since day 1. It is a trusted and reliable way of taming the microbolometers bad habits of being sensitive to its environs.

I recall certain Fire Fighting TIC manufacturers that used BST FPA's poking fun at a competitors product because it contained a new fangled microbolometer. At the time the microbolometer was considered a very poor choice in the application because of its inability to cope with changes in temperature within the camera. It is fair to say that a microbolometer is inferior in this respect to a BST FPA as it has a very non liner response to die temperature change and one that is not predictable across all pixels. In truth the microbolometer cameras did cope OK with use in Fire Fighting situations as the FPA was directly coupled to a TEC driven by a closed loop controller to keep the module chassis at +30C. The two options available today are TEC temperature stabilisation or no temperature stabilisation at all. In the latter case a different microbolometer technology is used that has a very predictable behaviour at differing die temperatures. As the Ex range is 'budgret' I would not expect a non-TEC microbolometer to be used.

IMHO a 'heater only' solution would make a pretty poor job of taming the microbolometer as it would rely upon passive cooling in an overshoot situation. Unlike a OCXO ther is no insulation around the module to help slow Delta T effects. The camera would also be inoperable above an ambient of +30C as all temperature stabilisation would cease.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on March 21, 2014, 01:50:16 am
Hey Guys,
Im playing around with my camera and the res worked great. I am attempting to do the menu hack but when I enter RNDIS my flir drivers in the corner pops up with trying to connect then about a minute later comes back with could not configure device. Im not sure what to troubleshoot on this. Ive uninstalled and reinstalled the drivers and I've used a second laptop and I've used my other camera and all of which have the problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 21, 2014, 01:56:50 am
Hey Guys,
Im playing around with my camera and the res worked great. I am attempting to do the menu hack but when I enter RNDIS my flir drivers in the corner pops up with trying to connect then about a minute later comes back with could not configure device. Im not sure what to troubleshoot on this. Ive uninstalled and reinstalled the drivers and I've used a second laptop and I've used my other camera and all of which have the problem.
Don't try the "triple" option - all 3 modes together won't work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 21, 2014, 01:57:26 am
Make sure you select RNDIS only and not the other rndis (with) other mode. I did the same a while back with the same problem. put the camera in rndis only and it came right up. Not to say that isn't how you tried it but i had the same issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: slpettus on March 21, 2014, 02:10:46 am
I have only used the RNDIS only mode. I've plugged and unplugged and tried my other camera and laptop. I have the same problem on both camera's and both laptops.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 21, 2014, 02:18:17 am
I have only used the RNDIS only mode. I've plugged and unplugged and tried my other camera and laptop. I have the same problem on both camera's and both laptops.
cold boot your FLIR cam, use the drivers supplied with the "player" and check if you have additional software running (security stuff) or didn't grant permissions as adminsitrator during driver installation .... also check if your windows services list the Flir service (FLIR Systems Camera Monitor = C:\Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\sysx64\T3Srv.exe)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 21, 2014, 09:08:59 am
IMHO a 'heater only' solution would make a pretty poor job of taming the microbolometer as it would rely upon passive cooling in an overshoot situation.
Unlike a OCXO there is no insulation around the module to help slow Delta T effects
Why would it overshoot? It's in a fairly stable envrionment, in a metal frame moderately insulated from the outer case, so isn't going to see any sudden temperature load change.
Quote
The camera would also be inoperable above an ambient of +30C as all temperature stabilisation would cease.
Would it be inoperable, or just less accurate, or need more frequent shutter calibrations? It produces perfectly useable images from cold before it's heated up.
I don't know much about the physics of TECs, but after the microbolometer, ADC, vacuum chamber and window, there doesn't seem to be a lot of space in there for a TEC as well.
However as that sensor is also used for automotive applications, these would be specced over a wider temp range, though in that application you don't really care about absolute temp accuracy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 21, 2014, 10:01:40 am
Mike,

I have asked my friends at FLIR for comment  ;)

We will see if they are able to confirm temperature stabilisation and microbolometer type (VOX or aSi)

A response usually takes a couple of days.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 21, 2014, 10:30:40 am
Having just re-read the Autoliv research document it is apparent that they were experimenting with an ALTERNATIVE to VOX and a-Si microbolometers. They were using a MEMS manufacturing technology to simplfy production and lower cost. It is conceivable that the Ex series contains this type of 'budget' microbolometer. No detail is given of the temperature stabilisation requirements beyond commenting that it may not need to be stabilised.  :-//

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jshishilla on March 21, 2014, 11:16:25 am
I have an E4 1.0 and am looking to sell it, it have 1.18.7 on it.  Where would be a good place to sell it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 21, 2014, 11:40:07 am
I have an E4 1.0 and am looking to sell it, it have 1.18.7 on it.  Where would be a good place to sell it?

This is obvious, but Ebay is probably your best bet.

Craigslist, or used test equipment companies are also options but I tend to see best sale prices on Ebay.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve69163 on March 21, 2014, 05:22:18 pm
Can anyone tell me where I can download ADDMenu-BETA 3, and RNDIS driver? Is the RNDIS driver simply to change the E4 setting to RNDIS, or do I need to look into the Flir web to download its RNDIS driver also? Please advise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 21, 2014, 05:29:13 pm
Can anyone tell me where I can download ADDMenu-BETA 3, and RNDIS driver? Is the RNDIS driver simply to change the E4 setting to RNDIS, or do I need to look into the Flir web to download its RNDIS driver also? Please advise.

the beta 3 menu is linked from the first page of the forum!!!

The RNDIS driver is from FLIR's website.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve69163 on March 21, 2014, 05:38:49 pm
Thank you.
Also, on DaveWB's youtube 1.21 hack instruction, which program was he using? microsoft words? I am sorry, I am bad with this.
Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 21, 2014, 06:03:26 pm
Thank you.
Also, on DaveWB's youtube 1.21 hack instruction, which program was he using? microsoft words? I am sorry, I am bad with this.
Thanks again.
That is just notepad
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 21, 2014, 06:04:26 pm
Can anyone tell me where I can download ADDMenu-BETA 3, and RNDIS driver? Is the RNDIS driver simply to change the E4 setting to RNDIS, or do I need to look into the Flir web to download its RNDIS driver also? Please advise.
If you click on the video and go to the youtube site, all the links are in the description.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve69163 on March 21, 2014, 08:26:31 pm
Thanks,
I now encounter that I try to the command prompt, I followed the instruction, but it said "can not find the path specified" . Did I do something wrong? I typed in the same pathway where I saved the files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: steve69163 on March 21, 2014, 08:41:01 pm
I got it. Thank you very much Dave. One last question, if I want to resort it back to original factory setting, do I just push restore on the e4 menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 21, 2014, 09:05:45 pm
I got it. Thank you very much Dave. One last question, if I want to resort it back to original factory setting, do I just push restore on the e4 menu?

If you read the instructions on the forum linked from page one it explains that you should make a backup of your files on the FLIR before making changes.  I am pretty sure that you can't put it back without removing the files manually or overwriting them with the originals.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 22, 2014, 02:27:03 am
While i´m reading thru my config-file, i see some more measurement-options set to "false". so my question is: has anybody the configfile of an E60bx (the one for building applications)?

Did the special options of the Ebxx meet the isotherm-options set to false in the E8-config?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 22, 2014, 09:22:33 am
user uski own an e30bx
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg397343/#msg397343 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg397343/#msg397343)

Do you compared your settings with my config file?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: flir-ID10T on March 23, 2014, 06:19:32 am
Hi,  I received the flir E4 this past Friday.   I have read and watched the resolution upgrade video, and tried to install the resolution upgrade.  when I install the tools1 conf.cnc, I get the high resolution, but I lose the center spot, the MSX, and the picture (photo) is black.  I have looked and found that It may be due to not unplugging and pulling the battery.  I re installed the original resolution, and tried again this time unplugging and pulling the battery.  I keep getting the same issue with the center spot, no msx and no digital camera.  Their is no zoom.   the resolution is excellent on the upgrade, but for my work, I need the other features.

I have the menu upgrade via the ADDMENU Beta3, and all but a few of the additional features work fine with the original resolution; I have msx, digital photo, and center spot.   I think a few functions do not work, but I am not too concerned with them; some measurement tools, the delta T...)

I have a flir e4 1.21.0  e4 1.1L.
here is the conf.cnc template:

# Generated at 2013-10-25 09:37:31
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 6391xxxx
# CRC03 8071xxxx
 

Any help would be most appreciated.

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 23, 2014, 08:26:30 am
If msx and digital-cam didn´t work, there is a problem with your patched/generated config-file. The TIC has a "fail-safe"-mode, if the configFile is corrupt(checksum, last CR-LF-Charakter, ID etc.)

Tauchers BETA do not touch the config. So his special menue-option will work partly(some options working "stand-alone" and some options are in the FLIR-System and need the patched e8-config)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 23, 2014, 08:57:41 am
user uski own an e30bx
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg397343/#msg397343 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg397343/#msg397343)

Do you compared your settings with my config file?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)

I compared my config with your file. Your config has some differences.

special parameters of your E40-TIC:

.caps.config.image.sensor entry
.caps.config.image.sensor.enabled bool true

.caps.config.image.settings.downsample bool false
.caps.config.image.settings.resIR int32 320


special parameters, which are only in E8 and not in your E40-TIC:

.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240

.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0

.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
@mike: is there any HW-Option for a micro-SD in the TIC?


The set-to-false-parameters, in both config-files are:

.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0

.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0

.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1

.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0

.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0

.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0

.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0

.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0

My question is, what options are "behind" this parameters? are there some extras in the TIC? In the datasheet of the e60bx are "insulation performance alarm", "scaleable or moveable PIP-IR-selection" an rotation of the picture (if you use the TIC lateral or upside-down). And the rotation-option i had in my TIC too, but in a "SW-bug"-condition
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 23, 2014, 12:04:31 pm
Exx

I'm not a feature junkie. So I tested only functions, which I'm interested in.

I only found the rotation option in the hidden menu. It's not public.

Here are the data sheets for the E60bx

old version 2012:   http://www.mrtestequipment.com/getfile.php?s=FLIR+E60bx+Thermal+Camera+Data+Sheet.pdf (http://www.mrtestequipment.com/getfile.php?s=FLIR+E60bx+Thermal+Camera+Data+Sheet.pdf)
new version 2013: http://www.flir.com/uploadedFiles/Thermography_USA/Products/Product_Literature/flir-e-series-bx-datasheet.pdf (http://www.flir.com/uploadedFiles/Thermography_USA/Products/Product_Literature/flir-e-series-bx-datasheet.pdf)

this is interesting
If you have a Exx without MSX (year 2012) you can activate the MSX menu but you only see a live real image on the LCD.
If you take a picture, then you save a normal MSX jpg on your SD card.

I think, the MSX code is embedded in the windows CE binaries but not in the fpga code.

You can take PiP images and convert then with Flir Tools to MSX images.
with my config files I can change the PiP size smooth over the touch screen
if required: as workaround for MSX I zoom the PiP to fullscreen, then takes the PiP images and convert the image with flir tools to a MSX image
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 23, 2014, 01:46:32 pm
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 23, 2014, 06:01:09 pm
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.
Nice work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 23, 2014, 06:04:57 pm
Thanks for your detailed work and screenshots!
I know not ALL the people that are trying to "improve" their Ex's find the procedure 'easy" or "familiar", so when someone explains the procedure or creates a video or a script to help out, it is very much appreciated!

Thanks again to all that have helped out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 23, 2014, 06:11:28 pm
@pomonabill221
Just curious how you made out with the resizing of the measurements box waayyyy back on page 163!
I would like to do the same thing and was curious what your results were. And yes, i agree, great work on the GUI
version!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: flir-ID10T on March 23, 2014, 07:21:28 pm
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.


stefbeer,

Thank you So much.  I ran your zip tool under post (« Reply #4548 on: Today at 12:46:32 AM »). 

I ran your zip tool,  installed the easily generated conf.cfc, ran it into the flir, unplugged, pulled battery, and restarted.  Everything works.  All options appear to be working; center spot, camera, MSX, as well as  pip, zoom, humidity setting..... 

Thank you so much, and it definitely worked on my flir e4 1.21.0  e4 1.1L.   # ID 639168xx.

I can't begin to thank you enough.  I spent two days reading post, watching videos, and could not get it to work. 

you are Awesome!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: preacher on March 24, 2014, 06:31:32 am
I made the upgrade and camera seems to work fine. However, I don't seem to be able to connect again in filezilla with the given ftp info(i.e. IP, name, and password). Any ideas for me? I get a timeout.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 24, 2014, 08:48:36 am
I made the upgrade and camera seems to work fine. However, I don't seem to be able to connect again in filezilla with the given ftp info(i.e. IP, name, and password). Any ideas for me? I get a timeout.
Did you try a coldboot on the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 24, 2014, 11:33:39 am
Information direct from FLIR on the E4 microbolometer

As I previously posted, I wrote to FLIR regaring temperature stability. Today I received a very helpful response to my questions. I asked them if the microbolometer in the E4 is temperature stabilised with a TEC and whether the camera will cope with an ambient temperature of 50 Degrees Celcius. I further asked what type of microbolometer was installed.

The response surprised me. As ever FLIR were very helpful on the tech side, but I was not expecting what was stated in the comments. I reproduce the response here:


There is nothing particular about 30?C besides the fact that most cameras happen to be running at 30-35?C during the production process. It is very probable that they will produce good accurate readings under such conditions. The assumption that they must deteriorate under other conditions is perhaps likely, but definitely not always true. It all depends on how fast and well the temperature drift stabilization math copes with the changed conditions. In Ex, a standard compensation is being used, and it will work better in some cameras and worse in others.

Since the Ex cameras do not contain any germanium optics (which starts to get dim at about 50?C), nothing drastic is expected to happen with the accuracy above 50?C. But, you are then using the camera outside of the specification limits.

To answer your questions: The Ex detector is not stabilized in any way. Neither heated nor cooled. The Ex detector is made of Vanadium Oxide.


So there you have it, from the people who know, the E4 is running bareback without ANY temperature stabilisation of the microbolometer. From a TIC design point of view this is interesting as I was aware that maths could be used to remove the need for the TEC but I was not expecting it in the E4. The comment on the issues of Germanium optics was very interesting. I was already aware that Germanium lenses start to lose transmission efficiency at 100 Degrees Celcius and above. As we know the Ex series uses the Chalcogenide-Glass lens material that obviously does not suffer such effects, or less so anyway. Without testing, I cannot say how well the maths algorithms map the microbolometer drift but FLIR are experts in the field so it may do a half decent job on SOME cameras.

My thanks to FLIR for responding on these questions so fully, so that I have a better understanding of my E4 cameras limitations. If I am working in high temperature environments, I will use the PM695's.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 24, 2014, 12:40:38 pm
I'm finally about to get my E4 and was reading about the hack and was wondering if Tauchers Menu Hack is still used/needed?  I see it added PIP, color tables, and some other stuff and most that do the hack on the newer units mention these features being useable already.  Is this menu hack now included in the template files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 24, 2014, 12:56:18 pm
I'm finally about to get my E4 and was reading about the hack and was wondering if Tauchers Menu Hack is still used/needed?  I see it added PIP, color tables, and some other stuff and most that do the hack on the newer units mention these features being useable already.  Is this menu hack now included in the template files?
Taucher's menu hack still works on the 1.21 and 1.22, I believe you also have to do the resolution hack for all the menu hack features to work. If you're looking to order one I got mine from calright instruments (calright.com) and he gave me a discount. The menu hack is not in the template files, you just transfer the system folder in FlashBFS in filezilla to the FlashBFS folder on the cam to overwrite the existing system folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on March 24, 2014, 02:26:37 pm
So I've sent like 6 emails at least to LuneValley3D trying various methods, the contact form and the direct email address with never a reply back.  I also tried sending from different email addresses in case on was getting flagged as spam.  Quite frustrating.  Shapeways wants like $30 to print the lens holder.  I did try to PM a forum member who said he'd print them for $5+ship, but still no word back from him after many days.

Does anyone know of a place that can print the lens holder for me at a reasonable cost?  Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on March 24, 2014, 02:29:36 pm

lunevalley3d answered pretty fast to me on the second try, the first attempt
was ignored. Maybe they have some strong antispam or other email problems.ù
I'm waiting their prints to arrive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 24, 2014, 02:59:04 pm
So I've sent like 6 emails at least to LuneValley3D trying various methods, the contact form and the direct email address with never a reply back.  I also tried sending from different email addresses in case on was getting flagged as spam.  Quite frustrating.  Shapeways wants like $30 to print the lens holder.  I did try to PM a forum member who said he'd print them for $5+ship, but still no word back from him after many days.

Does anyone know of a place that can print the lens holder for me at a reasonable cost?  Thanks!

Scratch that, printer is currently on its mood swing.  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brickmaster on March 24, 2014, 04:18:23 pm
I made the upgrade and camera seems to work fine. However, I don't seem to be able to connect again in filezilla with the given ftp info(i.e. IP, name, and password). Any ideas for me? I get a timeout.
Did you try a coldboot on the camera?
I am struggling with the same problem.  I was able to log in to the first screen just twice in 50+ attempts, always hanging up and timing out.  Is there another way to go about this without using filezilla?  While this is quickly humbling me, I had hoped the process would be simpler as greater minds than mine have seemed to grasp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 24, 2014, 05:10:26 pm
some basic networking knowledge might be helpful/needed.

Make sure the network adapter that is created when you have RNDIS mode turned on is present under network settings in control panel.  Make sure that the IP address is set properly (probably 192.168.0.1).  I think that the IP address auto sets after some time, but explicit setting might be more effective and reliable.

also before connecting with filezilla see if you can ping the camera (from a command prompt: ping 192.168.0.2).  If you can't ping it, you won't be able to connect to it with FTP.

I had a few problems getting it working and it was always related to basic networking problems, but the hiccups were pretty minor.

BTW, I didn't verify that my memory of the right IP addresses above are in fact the correct ones.  I'll update this if I got them wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on March 24, 2014, 05:16:14 pm
I helped a friend modify at the weekend, we had connection issues until we figured 192.168.1.2 was the IP in use by the E4.
Was a laptop running some version of Windows 7, E4 was v1.22.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 24, 2014, 06:05:04 pm
@pomonabill221
Just curious how you made out with the resizing of the measurements box waayyyy back on page 163!
I would like to do the same thing and was curious what your results were. And yes, i agree, great work on the GUI
version!!
Hi HB!
  Yes, it did work out pretty well, but there is a "bug" so to speak.... when going from delta T or delta S to center/hot/cold setting, the window defined by the bounding box is only half as tall as it should be, but re-selecting the same setting loads the correct window height.  Strange!

Changing from any other setting to C/H/C doesn't show this problem, so for me it is not an issue and is an easy fix.

This only seemed to happen when the box was over a certain size as the original size worked fine.

The first pic (pic1) shows the delta T box, the second pic shows the C/H/C selected and the problem (note the lower two bounding corners are half height), and the third pic shows AFTER re-selecting C/H/C and pressing the center button (if you just "esc" out of the menu, the problem isn't fixed).  The upper left bounding box does overlay the temp display, but I wanted the larger box size

Also, I find that after a cold boot, the default menu selection is the temperature scale, but after a warm boot, the last menu selection is still selected.  I would imagine that there is a setting for default menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brickmaster on March 24, 2014, 07:42:57 pm
Okay, with a few deep breaths, re-reading through everything, and another cold boot - IT WORKS!  Thank you so much to everyone.  Now I need to learn to interpret the output, and use it to it's best abilities.

By the way, Firmware is 1.22.0, Serial #: 639171xx.

Special thanks to DaveWB for the video and StefBeer for the GUI. :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 24, 2014, 08:17:36 pm
@pomonabill221
Just curious how you made out with the resizing of the measurements box waayyyy back on page 163!
I would like to do the same thing and was curious what your results were. And yes, i agree, great work on the GUI
version!!
Hi HB!
  Yes, it did work out pretty well, but there is a "bug" so to speak.... when going from delta T or delta S to center/hot/cold setting, the window defined by the bounding box is only half as tall as it should be, but re-selecting the same setting loads the correct window height.  Strange!

Changing from any other setting to C/H/C doesn't show this problem, so for me it is not an issue and is an easy fix.

This only seemed to happen when the box was over a certain size as the original size worked fine.

The first pic (pic1) shows the delta T box, the second pic shows the C/H/C selected and the problem (note the lower two bounding corners are half height), and the third pic shows AFTER re-selecting C/H/C and pressing the center button (if you just "esc" out of the menu, the problem isn't fixed).  The upper left bounding box does overlay the temp display, but I wanted the larger box size

Also, I find that after a cold boot, the default menu selection is the temperature scale, but after a warm boot, the last menu selection is still selected.  I would imagine that there is a setting for default menu?


Pomonabill221!
 Thanks for the reply! I am assuming you had to change the box dimensions in the .rsc file for each of the menu items? By that i mean, hot spot, cold spot, center/hot/cold, etc, .rsc files. If you didn't maybe that is where the glitch is coming from?? I also am guessing you went the telnet route to get it done. How great would it be to just be able to use the keypad up, down, left, and right to re-size the box in real time!!! Wish i had the coding skills for that!!!
In tauchers post about where in the file to find the box dims it looked like there was an option to place its x and y origin as well. Assuming that is the center of the box you might be able to bump yours over a bit to the right to get it away from the measurement display on the left! (If it bugs you that is) 
Another huge thanks to Taucher for helping with this one!!  Is there anything that guy doesn't know how to do with this camera? I am a tad jealous of his ninja like skills! Glad that worked out for you! Maybe a little fine tuning and those dreaded bugs will go away! Please keep me posted if you decide to go further with it, i would appreciate it very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrRedHat on March 24, 2014, 08:51:31 pm
I got a 1.21.0 firmware version one today. Calibration date is 3-11-2014. I tried the hack and I think it is working. When I went to Camera information it still says it’s an E4, not sure if it’s supposed to change.

I will have to play around with it some more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 24, 2014, 09:03:56 pm
It will always say E4 in the cameras info screen. If you look back  in the thread quite a way it shows how change the model.
Keep in mind it will only show the change in flir tools, not on the cam itself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 24, 2014, 09:36:44 pm
@freak_ge
I did change mine in the eeprom but it does not change  it in the camera. However.... i did not know about changing it in the flashFS confkit.rev file!! Thanks for the info!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 24, 2014, 09:53:28 pm
@heavybarrel... from what I remember, yes it was the x/y values for the box... don't remember the particulars right now, but I will take a look and even try "nudging" the values so the frame doesn't overlay the text boxes.
It might be a while as I am doing other things, but I will let you know!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iDevice on March 24, 2014, 10:21:28 pm
So I've sent like 6 emails at least to LuneValley3D trying various methods, the contact form and the direct email address with never a reply back.  I also tried sending from different email addresses in case on was getting flagged as spam.  Quite frustrating.  Shapeways wants like $30 to print the lens holder.  I did try to PM a forum member who said he'd print them for $5+ship, but still no word back from him after many days.

Does anyone know of a place that can print the lens holder for me at a reasonable cost?  Thanks!
Lunevalley3D was responsive on my first order, a few month ago.
But I needed to have several mail exchanges before they actually shipped, I guess they were beginning to crawl under too many orders already.
But on my second order a couple of weeks later, they became very unresponsive.
After a while and several mails reminders, Dale eventually apologized, arguing that they were indeed overwhelmed and that they were installing new printers.
I eventually got my second order but it was not of the same quality as the first one though.

Still, they provided me with excellent quality 3d prints for an incredibly low price, so it was worth some patience.
But I'm afraid, reading this, that what I suspected at that time is still true: it seems to be a one guy business.
I guess he bought a 3D printer and decided to monetize it by offering a printing service but without thinking about the logistics.

But that doesn't change the fact that I'm a happy customer, so I would say, try again and be patient...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 24, 2014, 10:28:26 pm
@freak_ge
I did change mine in the eeprom but it does not change  it in the camera. However.... i did not know about changing it in the flashFS confkit.rev file!! Thanks for the info!!
Where is 'in the camera'? What screen should display 'E8'?

In the settings/device settings/camera information. First line shown is Model________ E41.1
Im pretty sure that is where the other gentleman was looking for it to say E8. When you change it to E8 in the eeprom flir tools recognizes it as an E8 when it tags the photos, as well as the resolution being 320x240. I am convinced without even having tried it yet that modifying the confkit file will change it in the camera info screen.  It is laid out with the hardware id in the file exactly as it is shown on the info screen. I will not be scared off by the "DO NOT EDIT" comment at the beginning of the file!!!!

@ponomabill 221
Very good! I am curious to see what affect the nudging of the x/y values does. That might be a winner!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 24, 2014, 10:57:50 pm
That's precisely why i don't think changing the 4 to an 8 will have any negative effects. Kudos for pointing out where the change needs to be made! Much appreciated and thanks for the great advice you have provided! This might just be the best thread in history!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 24, 2014, 11:46:27 pm
@Taucher: Did you use a good QT-Dev-Tool for modifiying the menues? Then i will do some modifications on your BETA for my TIC and fix some minor things


And i have some special ideas and a long list of wishes for the next BETA  (and i will help to realize them, if it is possible and if there is an handy tool for this)

Code: [Select]
- separate the settings-menue in "Measurement_Settings", "Device_Settings" and "Device_Info"
      - "Measurement_Settings":  Material, Distance(with smaller steps), Refl. Temp, Humidy and the "Alarms"(Insulation, Condensation, Diff-Reference, Intervall-Min and Intervall-Max)
      - "Device_Settings": Region, Clock, Power, x- and y- parallax-Correction, rotation of the display, Save-Options, USB-Mode etc.
      - "Device_Info": Memory usage, % of Battery, USB-Mode(Charging/UVC activ /RNDIS activ), internal Temp-Sensor, Version-Info

      - if it is possible, 3 Pictures to store:
            - IRonly(320x240), CAMonly(640x480) and selected_View(MSX,PIP,Zoom etc) with spots and meters
            - more selections in "Save_Options" for: digital t/f, IR t/f, Screen t/f and meters t/f)
     
      - if it is possible: send simple signals via usb for an usb-microcontroller(Arduino/RasperryPi...)  to have some external options(LED-Flashlight, external display for temperature values

      - cut all the redundant options and the demo-modes, fix the condensation-setting

- a new Picture-Mode with histogramm (the Pictogramm for digital-camera-mode will suggest such a function in the TIC)

- some new Measure-Modes:
      - new measure modes "cold spot-spot", "cold spot-temp" and "hot-cold-delta"
      - new measure-modes "average in the box", "spot-average", "cold spot-average","hot spot-average"
      - new measure-mode "average and standard-deviation"
      - delete the empty-"box"-line in hot/cold/center-Meter or in Diff-Meter to get more visible screen

      - in all box-measure-modes make the box bigger (to the edge of scales and meters) and resizing the measure-box with zoom
      - when select a pip-mode, make the box as big as the pip-screen is

- remove the "reset scale" option (by the way, there is auto, manual and fixed) and make a new "preset-scale", with setable values in the Measurement-Settings

- a new pallette "Standard-Deviation" with selectable Sigma and a lightgray mask over all Pixels outside of the selected standard-deviation(like the "interval", but inverse and set to sigma-factor)

- some special short-keys in the Main-Screen/TIC-mode:
      - short tip to Powerkey for a command to a external Light or Laserspot
      - hold the selection-key and tipping the trigger set the zoom to 1x->2x->4x->8x
      - hold the trigger-key start video or a series of pictures
      - press the return-key start a calibration
      - hold the return-key for 5 seconds to reset the parameters
      - short tip to cursors to set the ref-values if some of them in screen (Condensation, Insulation, Diff-Measure-Ref-Temp)
      - long tip to cursors:
                - to move the spot in MSX/IR-Modes with spot
                - to move the Measure-Box in MSX/IR-Modes with Measurebox visible (and the spot moves too and will be in the center of the box anyways)
                - to move the PIP-Box in PIP-Modes (and the measurebox will have the same borders like the PIP-Box and the spot will be in the center of the box)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 25, 2014, 12:29:13 am
@Taucher: Did you use a good QT-Dev-Tool for modifiying the menues? Then i will do some modifications on your BETA for my TIC and fix some minor things

Nope - just Notepad++, Strings.exe, a hex-editor, Linux, GCC+QT (for RCC reversing) and my brain
Some diffing to Exx firmware helped also.

A remark on resizing the delta-measurements: there's some strange mechanism that's using the presets for delta-stuff to populate the registry values, but it also seems to be cached. I consider the delta modes somehow "cosmetic" as the real value lies in thermal resolution.

And i have some special ideas and a long list of wishes for the next BETA  (and i will help to realize them, if it is possible and if there is an handy tool for this)

- separate the settings-menue in "Measurement_Settings", "Device_Settings" and "Device_Info"
      - "Measurement_Settings":  Material, Distance(with smaller steps), Refl. Temp, Humidy and the "Alarms"(Insulation, Condensation, Diff-Reference, Intervall-Min and Intervall-Max)
      - "Device_Settings": Region, Clock, Power, x- and y- parallax-Correction, rotation of the display, Save-Options, USB-Mode etc.
      - "Device_Info": Memory usage, % of Battery, USB-Mode(Charging/UVC activ /RNDIS activ), internal Temp-Sensor, Version-Info
That should mostly be possible - but I'm fine with the current setup
      - if it is possible, 3 Pictures to store:
            - IRonly(320x240), CAMonly(640x480) and selected_View(MSX,PIP,Zoom etc) with spots and meters
            - more selections in "Save_Options" for: digital t/f, IR t/f, Screen t/f and meters t/f)       
that's limited to the options already available via registry (firmware) - I remember seeing such settings - even to store PNG files... but the current "hybrid" image is quite perfect as one can extract the data later and use the post-processing-tools.
      - if it is possible: send simple signals via usb for an usb-microcontroller(Arduino/RasperryPi...)  to have some external options(LED-Flashlight, external display for temperature values
IMHO the only usable E4 putput is USB -> RNDIS+Video ... there's a thread to record the E4 data to a RPI  -check it out.
RNDIS gives your access to a serial console -> something that allows full "remote" control.

You could of cause also tap the real serial console or I2C bus ... but it won't be fun - if you really NEED a flashlight or external display, then get a more advanced model or re-thing what you really NEED - many ideas tend to be complicated while the simplest solution seems to be even too trivial to consider - like using your hand to switch on and/or hold a flashlight.
PS: most often you don't need stuff - measuring a spot value -> get a cheap (<20€) IR thermometer.


      - cut all the redundant options and the demo-modes, fix the condensation-setting
@cut redundant stuff: you can always modify your config to remove entries that "bore" you.
@condensation: what's wrong with it?

- a new Picture-Mode with histogramm (the Pictogramm for digital-camera-mode will suggest such a function in the TIC)
get a DSLR or write a post-processing tool to display histogram over USB-videodevice ;)

- some new Measure-Modes:
      - new measure modes "cold spot-spot", "cold spot-temp" and "hot-cold-delta"
      - new measure-modes "average in the box", "spot-average", "cold spot-average","hot spot-average"
      - new measure-mode "average and standard-deviation"
      - delete the empty-"box"-line in hot/cold/center-Meter or in Diff-Meter to get more visible screen

      - in all box-measure-modes make the box bigger (to the edge of scales and meters) and resizing the measure-box with zoom
      - when select a pip-mode, make the box as big as the pip-screen is
3-spot mode does hot-cold etc...
BOX mode -> "crashy" implementation and not funny... if you have way too much time: mock around with advanced measurement rset.
@standard-deviation ... WTF? -> use post-processing tools
@delete the empty-"box" -> try mocking around with the settings/presets

all incl. the wishes sound like "featuritis" - my wish is just a way to execute a .exe from the menu/keyboard (prio #1)

- remove the "reset scale" option (by the way, there is auto, manual and fixed) and make a new "preset-scale", with setable values in the Measurement-Settings
that's commenting out one line - but the option can save a click ... so I left it there.
- a new pallette "Standard-Deviation" with selectable Sigma and a lightgray mask over all Pixels outside of the selected standard-deviation(like the "interval", but inverse and set to sigma-factor)
feel free to contribute it - one can load any .pal file over telnet for testing
- some special short-keys in the Main-Screen/TIC-mode:
      - short tip to Powerkey for a command to a external Light or Laserspot
      - hold the selection-key and tipping the trigger set the zoom to 1x->2x->4x->8x
      - hold the trigger-key start video or a series of pictures
      - press the return-key start a calibration
      - hold the return-key for 5 seconds to reset the parameters
      - short tip to cursors to set the ref-values if some of them in screen (Condensation, Insulation, Diff-Measure-Ref-Temp)
      - long tip to cursors:
                - to move the spot in MSX/IR-Modes with spot
                - to move the Measure-Box in MSX/IR-Modes with Measurebox visible (and the spot moves too and will be in the center of the box anyways)
                - to move the PIP-Box in PIP-Modes (and the measurebox will have the same borders like the PIP-Box and the spot will be in the center of the box)
sorry, stopped reading at laser...
You can try digging into the RCC - there are some keyboard bindings and scripts defined - I currently don't have spare time to play with my E4 menu... and unless there's some nice contribution to my BTC account (https://blockchain.info/address/1DsaYDGWXEYhEKLrfrbFyYsehaAtfBWawf) I'll have to spend time earning a living.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 25, 2014, 12:41:06 am
PS @Delta modes:
I figured that the original box-size was quite "small" with a purpose - to allow the user to aim at a certain part/area during inspection work - then the auto function would optimizie the "aiming" in order to find the hot/cold peak.

This might be less relevant when wanting to inspect a room - but usually it's pretty usable just "as is" so I left it at the Flir presets.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: preacher on March 25, 2014, 12:50:52 am
I made the upgrade and camera seems to work fine. However, I don't seem to be able to connect again in filezilla with the given ftp info(i.e. IP, name, and password). Any ideas for me? I get a timeout.
Did you try a coldboot on the camera?
I tried the cold boot, tried multiple IP as suggested in other posts - no luck. Did not get ping on the IP's I tried. Still searching.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 25, 2014, 01:16:05 am
@Taucher:

I´m totally fine with my TIC.

I´m just playing around and looked into the files on it and have some ideas. Because, its funny to see the difference between the TIC in the package and now.
You are right and i should go to sleep instead of playing with the TIC :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 25, 2014, 01:39:49 am
Did i read someone mention a setting to invert/flip the display upside down in a hidden menu?

I've ordered a couple of lenses and printed a lens tube/attachment to play around with adding some magnification. I've gone for a simple two lens approach to test the idea but this will result in an inverted image. If there was an option it would simplify the lens construction if the prototype works out. If there is not setting to invert the display, then a 3rd erector lens needs to be added and while testing with optical lenses it was a challenge to get a good image, so ideally a soft solution would be best if there is one.

If anyone's interested i've ordered the 25mm and 101mm ZnSe 18mm dia lenses which should result in a 4x scope. Having printed the lens holder the FOV looks very narrow and i am sceptical how well it will work, we shall see.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 25, 2014, 07:28:58 am
Hello,
please help. Trying to change the name to E8.
First Open the website is slow. This probably indicates a problem. It takes about 1 minute. Then I see this in the picture. Unlock deal. After entering the code "1235" appears in the same picture.

What is the problem? Thank you for your help.

unlocked E4 - 1.19.8.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 25, 2014, 08:05:21 am
And i have some special ideas and a long list of wishes for the next BETA  (and i will help to realize them, if it is possible and if there is an handy tool for this)

- some special short-keys in the Main-Screen/TIC-mode:
      - hold the trigger-key start video or a series of pictures
a month ago I asked taucher how to add this nice feature but yet we don't implement this

Here some notes:

take a RAW video seq with E4
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)

sample for using rset to start a script:
Code: [Select]
> rset appl.supv.exec "cmd /c date /T"
Sat 2/15/2014

//as script
> echo date /T > \flashifs\1.cmd
> rset appl.supv.exec "cmd /c \flashifs\1.cmd"
    \>date /T
    Sat 2/15/2014

there is a interesting comment out code segment in the state machine menu ( setResource = rset )
facet_z3.rcc /Desktop.xml
Code: [Select]
        // Debug code - testing set/get of resources
//        else if (event.key === Qt.Key_1) {
//            greenbox.setResource(".image.sysimg.measureFuncs.mbox.1.active", "true")
//        }
//        else if (event.key === Qt.Key_2) {
//            greenbox.setResource(".image.sysimg.measureFuncs.mbox.1.active", "false")
//        }


a special rset command for setting a value  (used in Tauchers menu)
/FlashBFS/system/ui.d/*.xml the generic type="SettingValueItem"
 
Code: [Select]
   <ui_model_item type="SettingValueItem" ID="IDhackSetAlarmRelAirHumidity" label="Condensation: Current rel. hum (0.5)" valueType="humidity" min="0.1" max="1.0" step="0.1" sort="down" stepAcceleration="false" resource=".image.sysimg.alarms.humidity.1.relAirHumidity"/>


another experiment:

download the firmware for the Flir Exx (with movie function)
flir_exx_pn645_pn646_v3.12.7_update_pack.zip
extract the toolbar-config_e2.xml
Code: [Select]
<?xml version="1.0" encoding="utf-8"?>
<ToolBars>
  <ToolBar name="archive">
    <ToolBar name="archive_edit"/>
    <ToolBar name="archive_text_annotation"/>
    <ToolBar name="archive_voice_annotation">
      <ToolBar name="archive_voice_annotation_play" />
      <ToolBar name="archive_voice_annotation_record" />
      <ToolBar name="archive_voice_annotation_delete" />
    </ToolBar>
    <ToolBar name="archive_info"/>
    <ToolBar name="archive_delete"/>
  </ToolBar>

  <ToolBar name="archiveVideo">
    <ToolBar name="archive_video_play"/>
rename to toolbar-config_Z3.xml and copy to E4

now you have the Exx GUI on the E4
here is a screenshot from the E4
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=81442;image)
but the video function doesn't work - need a working media server to convert RAW to MOVIE
see ADDMENU-BETA3.zip\ADDMENU\Extras-for-manual-use\FlashBFS\system\MediaServer.exe (stolen from Exx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 25, 2014, 10:18:17 am
First Open the website is slow. This probably indicates a problem. It takes about 1 minute.

I can confirm this error.
You have a (Flir) driver problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 25, 2014, 10:37:33 am
Today in the evening, i will check with "rls" for some new options and will do a complete template(there are not all possible options in the  e8-config.)

for example: there are some video-parameters set to false as default in .caps.ui
maybe that will activate this features "out of the box"

Other theme is the frame-rate: My mention is, the framerate on internal display is higher than the framerate on the uvc. and also the rate is higher in "flir-tools-live-access" then in my video-tools using the TIC as a webcam. Did flir use a special(non-uvc) protokoll for this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 25, 2014, 10:45:18 am
@Rainer,

There was some discussion on the UVC frame rate plus FLIR's protocol in the following thread.

https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/ (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/)

It may answer your questions ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 25, 2014, 12:54:09 pm
First Open the website is slow. This probably indicates a problem. It takes about 1 minute.

I can confirm this error.
You have a (Flir) driver problem.

And can it be repaired? Tested on a PC with XP and the same result.

Thank you for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: egmiii on March 25, 2014, 01:09:49 pm
My v1.22 E4 should arrive in the mail today. Can the resolution upgrade and menu hack be done from a 32bit Windows XP machine or is 64bit Windows 7 required?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 25, 2014, 01:16:47 pm
And can it be repaired? Tested on a PC with XP and the same result.
With one of my PCs (a Win7x64 Host) I have the same problem.
As workaround I installed a clean Win7 virtual machine and connected the E4 (USB 2.0) with the VM and all works fine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brickmaster on March 25, 2014, 03:11:55 pm
FWIW, I used Win 7, 64 bit.
Title: help
Post by: mitwis on March 25, 2014, 03:17:36 pm
Hello, please help
My Flir E4 is bad after the upgrade there is no resolution and no menu too.  |O |O |O
firmware 2.21
I will be very glad if you help
Title: Re: help
Post by: Taucher on March 25, 2014, 03:34:03 pm
Hello, please help
My Flir E4 is bad after the upgrade there is no resolution and no menu too.  |O |O |O
firmware 2.21
I will be very glad if you help
1.21 I assume ... you should have read this forum - the solution for your question is inside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 25, 2014, 04:50:34 pm
Another hour - but I've caught up at last (for now!). Great to see you have rehacked the E4 (after it was meant to be made a lot more difficult to hack). I bet Flir is absolutely loving all this exposure! Just seems a bit of an annoyance for anyone who bought an E8.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: homestea on March 25, 2014, 10:33:16 pm
Hello guys, have any of you tried using Flir Tools+ with the hacked E4 yet? Im using the 30 day trial and can get the live video feed, but it doesnt give me the option to record the stream or do any analysis on the live feed (graphs, etc). is there any way to enable this content or perhaps to trick Flir tools that a E60, etc is attached?   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 25, 2014, 11:04:45 pm
Don't quote me on this but if you purchase the full version those features might be available. Sometimes trial software is limited
even when it says fully functional. They make you aware of features but don't allow you to use them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmurray14 on March 26, 2014, 04:58:20 am
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 26, 2014, 07:13:20 am
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?

As he wrote Taucher - You should have read this forum.  The solution for your question is inside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 26, 2014, 09:51:20 am
Hello guys, have any of you tried using Flir Tools+ with the hacked E4 yet? Im using the 30 day trial and can get the live video feed, but it doesnt give me the option to record the stream or do any analysis on the live feed (graphs, etc). is there any way to enable this content or perhaps to trick Flir tools that a E60, etc is attached?

see my posts about *.seq video (RAW video) with E4
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)
record with Flir camera player
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg378926/#msg378926 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg378926/#msg378926)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78866;image)

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=78868;image)

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=79308;image)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmurray14 on March 26, 2014, 11:40:02 am
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?

As he wrote Taucher - You should have read this forum.  The solution for your question is inside.

I've read almost 50 pages of this thread. Why the need to be like that? Can't you point us in the right direction?

It's extremely hard to filter out the relevant info from such a huge thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 26, 2014, 11:43:58 am
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?

As he wrote Taucher - You should have read this forum.  The solution for your question is inside.

I've read almost 50 pages of this thread. Why the need to be like that? Can't you point us in the right direction?

It's extremely hard to filter out the relevant info from such a huge thread.
Start from the end, your prob's solution is quite recent.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on March 26, 2014, 11:52:54 am
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?

As he wrote Taucher - You should have read this forum.  The solution for your question is inside.

I've read almost 50 pages of this thread. Why the need to be like that? Can't you point us in the right direction?

It's extremely hard to filter out the relevant info from such a huge thread.

If you followed the instructions and have sufficient knowledge, should not be a problem.
Beware if you do not have sufficient knowledge, you can make the camera a brick!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 26, 2014, 01:34:26 pm
Newbies Please Read

The upgrade of the E4 thermal camera has been a very popular topic on this forum and as a result this thread has grown to mammoth proportions. There has been a lot of discussion on how the E4 may be reconfigured and plently of other very useful information relating to the camera design and improvement.

There are several very clever people who have created the capability to upgrade the Ex series, both prior to, and after, FLIR tried to stop the upgrade path. Theses people have provided their time free of charge and have documented the process in the thread. The first page contains many links to directly access the required information.

As has been stated several times in this thread, the upgrade of Menus is for the experienceduser  only and is NOT a simple operation for those unfamiliar with FTP transfer tools.  It IS possible to brick your E4 if you get the process very wrong. Since FLIR released Firmware 1.21.0 and 1.22.0, the upgrade process has become more complicated as the user is effectively carrying out a hack againat an encryption countermeasure. Failure to get the 'hack' right appears to result in a camera that does not give the higher resolution and loses the MSX functionality.  Panic not...... this appears to be a 'default' condition when an invalid configuration file is found. The correctly encrypted configuration and CRC is all that is needed to correct the situation. This issue and the process to correct it is contained in more recent Posts. Please read them.

Why are people getting annoyed when Newbies ask for help ? Well we were all newbies at one time or another but my view is as follows........ If given the opportunity to significantly upgrade a product for free due to the very hard work of very generous people, I would accept that I might have to 'pay' for that upgrade by carefully reading ALL available information prior to asking questions about the upgrade process or issues with such. I would also back-up all my files to prevent loss, and I would ensure that I was competetent to carry out the required tasks before attempting a hack. Failure to take these basic steps can lead to a pretty chilly response from forum members....that is just life. We are not unfriendly but many of us regularly receive requests to 'spoon feed' people with information on how to hack the E4 or other items that we have posted messages about.

I hope newbies can appreciate that this is not a personal attack when they ask for help but it does get a bit tiring to see the same "my hack went wrong" or "how do I do it" questions again and again, just adding to noise in thread.

May I make a suggestion.....those who are having trouble with the hack process should start a separate thread and effectively form a self-help group to aid eachother in the process. One of the more knowledgeable members of this thread MAY be willing to assist that group on a one-off basis and the process may then be documented in that groups thread for other Newbies to follow. This may avoid the upset that some newbies feel when they get a sharp response to a request for help ? Just a thought.

Also please be very aware that when the new countermeasure firmware was released by FLIR, some persons, including at least one member of this forum, chose to exploit the situation for financial gain. They took an upgrade process that was freely given to the wider community and sold upgraded FW 1.19.8 E4 cameras via e*ay for significant profit as the marketplace panicked when news of the FW 1.21.0 countermeasure became known. This action has been considered poor form by many members of this thread as no information was provided in the auctions stating that the upgrade was freely available on this forum, and no attibution was made to EEVBLOG or the creators of the upgrade. The sales may also have irritated FLIR more than woudl have been the case if the upgrade was being done for personal ise only.

It is known that some persons joining this forum have done so only in order to obtain help in upgrading E4 cameras so that they may sell them for profit on auction sites to persons without the knowledge to do the hack themselves, or who are not aware of the free nature of the hack process.  Sadly this means that many Newbies will be treated with suspicion. Especially if you come from the Czech Republic !      

Fraser (aka Aurora)
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmurray14 on March 26, 2014, 02:11:55 pm
Hi guys,

I just got a new E4 today and it came with 1.21. I've read through most of the thread and followed the guidance (here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)) for the hack. Everything went fine, it boots up with "special edition" but the resolution looks the same and I get LESS menu items (MSX is gone). Any ideas?



As he wrote Taucher - You should have read this forum.  The solution for your question is inside.

I've read almost 50 pages of this thread. Why the need to be like that? Can't you point us in the right direction?

It's extremely hard to filter out the relevant info from such a huge thread.

If you followed the instructions and have sufficient knowledge, should not be a problem.
Beware if you do not have sufficient knowledge, you can make the camera a brick!


Well, I got it to work, but I have no idea why. I used stefbeer's utility and it worked on the first try. For some reason, that utility came up with a different CRC checksum than the one I got. Diff'ing the files, absolutely nothing is different, so I'm very confused - but happy it is working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 26, 2014, 02:16:15 pm
On the topic of new E4 owners visiting this thread.......

Has anyone else noticed the dramatic slow down in camera serial No., FW version and cal date submissions to my Useful information thread ?

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

The early 'Pioneers' of E4 upgrades were very generous with this data to benefit the community. Partial serial numbers avoided warranty issues etc. Since the countermeasured firmware release, I have had very little data sent to me. So either very few people are carrying out the upgrade since the countermeasure, or they are a different sort of person to the 'Pioneers'. The world is full of givers and takers and I would have hoped that persons benefitting from the upgrade infpormation would have considered the provivion of their cameras pertinent data fair exchanger for the benefits achieved. The data is only being collected in order to help other future purchasers of the E4. The information enables users to know which camera serial numbers and firmwares they are about to buy and the implications of such. It is likley that FLIR will release more firmware revisions with different challenges to the upgrade. It would be good to track such events and serial number sequences.

My contribution to this little E4 community was the 'E4 Useful Information' thread as a little 'thank you' to all who contributed and those who will contribute in the future.

Badly paraphrasing an old statement:

Ask not what this forum can do for you, but rather, what you can do for this forum  ;)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on March 26, 2014, 02:32:44 pm
I can only speak for myself, i tend to keep information that may possibly come back to bite me under close wraps, but i'm the paranoid type. I will share the following

Mode: E4 1.1L
Serial: 6391 7XXX
Software: 1.22.0
Location: UK
Shop: testers.co.uk
Purchased Date: March 2014.
Calibration Date: March 2014.

It came with v1.22 installed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmurray14 on March 26, 2014, 02:34:16 pm
Newbies Please Read

The upgrade of the E4 thermal camera has been a very popular topic on this forum and as a result this thread has grown to mammoth proportions. There has been a lot of discussion on how the E4 may be reconfigured and plently of other very useful information relating to the camera design and improvement.

...

Completely understand. In fact, I think in general most of the folks in this thread have been very good at organizing the information and making it easier for newbies. I am glad to have found this community in general, and I'm glad the E4 led me here.

I just always get frustrated when the very people who were once newbies themselves clutter the thread with "you should have read" instead of either keeping their mouth shut or helping.

Regarding the last part - ironically, in most of these hacking communities the eastern bloc are usually the ones you have to worry about soaking up all the info you have to give and reselling it without giving anything back. Same in the auto technology hacking community.

Anyway, thanks for all the help here - its a great forum and great resource.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 26, 2014, 03:42:42 pm


Well, I got it to work, but I have no idea why. I used stefbeer's utility and it worked on the first try. For some reason, that utility came up with a different CRC checksum than the one I got. Diff'ing the files, absolutely nothing is different, so I'm very confused - but happy it is working.

Most likely it was the CR/LF at the end of the file that you had wrong.  This might now show up in a diff if the diff tool doesn't look for white space or control characters.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 26, 2014, 05:24:58 pm
@Nemonic,

Fully agree with your stance on posting information on the internet. That is why I only ask for a partial serial number as a full serial could potentially have warranty implications, though personally I doubt such.  I have previously warned about Metadata in images for this reason. The .jpg fies that the E4 produces are not your average jpg in that they contain a lot of camera related data, including the full serial number  :o If posting images on a forum, and not wishing to reveal your cameras serial number, a check should be made with FLIR Tools to see what it can still extract from the files metadata. Many sanitisation applications do not remove the embedded serial number data. Also, please be aware that FLIR Tools regularly phones home with your camera data  ;)

I do understand that the new upgrade route for firmware 1.21.0 & 1.22.0 may be considered more of a true 'Black Hat' hack than the previous upgrade method as it deliberately defeats the manufacturers specific countermeasures that were intended to prevent such upgrades. As such I also understand that some users will be very cautious about releasing information on their upgraded camera, for fear of FLIR action against them. I am aware of the legal position on the first upgrade path (totally legal) but do not know the legal position on the latest upgrade using true hacking methodology. As such I have reconsidered my position. If users do not wish to provide a serial number or any other data, fair enough, I do understand your position. BUT please note my comments above as well.

To all Newbies to the forum, please do not take my coments as being a view of you all.....it is the few who sometimes ruin things for the many. As has been stated, every one of us was a Newbie in some area, at some time. Most on this EEVBlog forum are very patient and friendly persons. Long may that be the case. Welcome  :)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 26, 2014, 06:37:32 pm
I think the best solution that could make everyone happy is, as has been suggested, to separate the technical development thread from the Q/A and new user thread.  That would be easy enough for everyone to control and would simply require diligence in not answering questions in the technical thread, and veterans spending time answering questions in the Q/A thread.  Some forum moderation to keep it in check would be nice but probably not required.

Really though it shouldn't be too much to ask for people to read the whole thread.  Yeah it takes HOURS but it saves THOUSANDS and most importantly you learn a TON.  I think that is what puts off a lot of people who have figured this out without asking questions.  When someone says "I read 3 pages and it was to much, tell me how to do it" that's annoying when you've read 300 pages.  It comes across as "I want something for free AND I want someone to do the thinking and work for me".

Granted this stuff requires a decent amount of technical knowledge.  Not understanding command lines, basic linux, basic networking, FTP and other technical but common tools and domains can make it very hard, but the technical development thread really isn't the place to ask or learn about those things.  EEVBLOG forums is a great place to ask these questions but they should be in separate threads.

Just my take on it....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 26, 2014, 08:08:23 pm
On the topic of new E4 owners visiting this thread.......

Has anyone else noticed the dramatic slow down in camera serial No., FW version and cal date submissions to my Useful information thread ?

I think one likely explanation is that most people aren't aware of the updated hack yet. Plenty of other websites acknowledge that the original hack doesn't work on newer cameras, but so far none of them mention the new 1.21.0 hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 26, 2014, 08:29:22 pm
When i was a newbie, the Thread was already at 260-270 pages. So if newbies want to get knowledge about hacking the 1.21.0 or 1.22.0, they just have read the last pages. And if they do so, they will get a quick programmed but good working tool for the job.

So i feel with taucher or tomas123, when they want to have the next good challenge. it is frustrating to answer the same questions all the time, espacially when there are good working tools exists. So for this users: why you didn´t buy a ready-hacked TIC?

and @mike: Can you link direkt to the page with the Hacking Tool? And as a fallback,( if there goes something wrong ) to the instructions for recover the SUID with the alternative cfc-Files?

@Aurora: At me, i just quickly buy my TIC (a few weeks ago) with hope to get one of the last 1.19.8. In reallity, i wanted to buy Fluke or a cheaper Infrared-Tool and take the E4 because of their good potential for future use. Now this thought is obsolete because the 1.21.0 is hackable too (and the last "hacked"1.19.8-E4 in ebay are sold out.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 26, 2014, 08:55:32 pm
@Aurora

Sorry! I really should have given this to you much earlier, i have been on pain meds for a bum knee for a month or so and i tend to forget things here and there. You have been very helpful so its the least i can do.

E4 1.1
sn. 63912XXX
v. 1.19.8
purchased march of 2014.
I can't really say who it was purchased through! I had my purchasing guy at work source it for me but i will ask him and give you an update if you'd like.

Thanks for all the help!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 26, 2014, 09:00:19 pm
Thanks for the data  :)

No need for retailer information.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mutha101 on March 26, 2014, 10:33:24 pm
Hi,
 
Model:          E4 1.1L
Serial:          63917xxx
Software:     1.22.0
Location:      UK
Purchased :  March 2014
Calibration:  March 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on March 27, 2014, 12:14:20 am
@Aurora...
I got a chuckle out of.... "It IS possible to brick your E4 if you get the process very wrong. "  Although the same could be said for process even a LITTLE wrong!
It only takes a fat fingered entry to brick the camera sometimes!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: harry h on March 27, 2014, 12:50:08 am
I have to be honest, I joined this forum to learn how to upgrade my E4 but as a newbie, I did read every page before asking what I did wrong and since have been following this thread among other threads to expand my very limited knowledge in what is a new language to me.  I find it a challagne to face new territories and have started to know just enough to be dangerous..  There may be some who swoop in, grab what they need and disappear but I will be tagging on for a while to learn from some very talented people.

Harry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 27, 2014, 02:36:11 am
If you guys just block out the last number instead of the last 3(thats a range of 1000 units which could span over a good amount of time) that would be alot more effective for Aurora and seeing the production process at FLIR. If you just block out your last number it still leaves 10 different possibilities and it would be illegal for FLIR to use that information.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on March 27, 2014, 03:07:27 am
I read every page of this thread while I waited for my e4 to arrive. Three additional things happened from this thread 1: I had been a linux user since 1998 but had stopped a few years back because of my business and have since added a linux box to my home again. 2: I was reading in other threads here on multi meters and was in the market for a sturdy one and found out about Klein Meters and ordered one. 3: I read a thread on hacked Oscilloscopes and bought a new Rigol. I love my E4 and have talked two friends into buying one before the newest firmware came out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 27, 2014, 09:11:21 am
Best way would probably be to start a wiki page.
...
But linking to a single url for the wiki page is less work than finding an old post in this rather large thread. 2600+ bloody hell.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 27, 2014, 03:05:48 pm
Got my tracking today, camera will be here tomorrow!  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 27, 2014, 03:40:13 pm
I'm new here and would just like to say how impressed I am with you guys, and hope you can answer a few quick questions.

I'm getting ready to purchase one and need to know:

difference between 1.21 and 1.22
I am fairly savvy with computer software/networking, but if something should go wrong, is t possible to totally brick the thing with no recourse?
I am getting a brand new model just in stock today - any chance that hardware changes have been made on these rendering the hack impossible?  Should I ask about a specific model number?

I have read through a ton of this stuff and found answers to all  questions but these.

thanks 4 your help!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 27, 2014, 04:18:49 pm
I'm new here and would just like to say how impressed I am with you guys, and hope you can answer a few quick questions.

I'm getting ready to purchase one and need to know:

difference between 1.21 and 1.22
I am fairly savvy with computer software/networking, but if something should go wrong, is t possible to totally brick the thing with no recourse?
I am getting a brand new model just in stock today - any chance that hardware changes have been made on these rendering the hack impossible?  Should I ask about a specific model number?

I have read through a ton of this stuff and found answers to all  questions but these.

thanks 4 your help!

I haven't seen a clear indication of differences between 21 and 22 other than a change to FPGA.bin.  It wasn't clear what that DID though.
You can absolutely brick your camera.  Delete or move the wrong files can break it.  You can back up many things and be careful what you are doing.  I would consider the risk to be low to moderate not high... BUT you can absolutely ruin the camera!
It's unlikely that you would have problems hacking the camera unless there were a firmware in the wild past 1.22 with new protection.  I don't think a model number info will help you as the firmware is independent, serial number might help ID which firmware you will get though..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 27, 2014, 06:14:21 pm
Just to be on the safe side, I ended up going with a 1.21.0 unit since it seems like a safer bet.  It's 2 week old stock so there's no chance of any hardware crippling.  I'll let you all know how the upgrade goes.  Thanks so much for the input. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dmt001 on March 28, 2014, 02:55:56 am
Hi.

Read 90+% of this thread.
Very impressed with the knowledge level of some participants.

I jumped in and ordered an e4. I live and ordered in Canada.
Now I am nervous:
Ordered 2 weeks ago. Was supposed to take 1 week.
Called in today and the new delay is 2 to 3 additionnal weeks.
I can still cancel the order.

Would this be enough time for Flir to seriously lock the e4 to the point where real hw hack is needed to unlock a new version? Or.. Am i getting a bit paranoid ?

Any others seeing those types of delays like the ones a change in production would induce?

Thanks

Dan.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 28, 2014, 03:23:23 am
Hi.

Read 90+% of this thread.
Very impressed with the knowledge level of some participants.

I jumped in and ordered an e4. I live and ordered in Canada.
Now I am nervous:
Ordered 2 weeks ago. Was supposed to take 1 week.
Called in today and the new delay is 2 to 3 additionnal weeks.
I can still cancel the order.

Would this be enough time for Flir to seriously lock the e4 to the point where real hw hack is needed to unlock a new version? Or.. Am i getting a bit paranoid ?

Any others seeing those types of delays like the ones a change in production would induce?

Thanks

Dan.

Several vendors here won't have stock til mid April.  That said, you are asking people to pull a guess out of their butts as to what and when FLIR might do something.  It's kind of silly to ask don't you think!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 28, 2014, 03:27:58 am
Hi.

Read 90+% of this thread.
Very impressed with the knowledge level of some participants.

I jumped in and ordered an e4. I live and ordered in Canada.
Now I am nervous:
Ordered 2 weeks ago. Was supposed to take 1 week.
Called in today and the new delay is 2 to 3 additionnal weeks.
I can still cancel the order.

Would this be enough time for Flir to seriously lock the e4 to the point where real hw hack is needed to unlock a new version? Or.. Am i getting a bit paranoid ?

Any others seeing those types of delays like the ones a change in production would induce?

Thanks

Dan.
I wouldn't be too worried, I would however look around for places that do have them instock if you can and order from them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 28, 2014, 03:30:24 am

@ the Future

Well, hacking hardware can be like an arms race - as soon as one side takes a step that's too much for the other, the efforts put into development increase (stakes getting higher...).

One can easily iterate the whole race in advance ... up to a point where it would be similar to pay-tv smartcards and game-consoles... just like music and DRM ;)
In consoles (as reported with the X-box) there's even encryption on the internal high speed busses ... and that didn't help much against all sorts of hacking - it just wasted ressources and (for example) when looking at the X-box 1 that money/time would have been much better invested into thermal design in order to prevent massive damage, rework etc.

Something sImilar happened to the music industry - MASSIVE amounts of money were spent on DRM and lobbying - grandmothers and toddlers got sued ...
... until the industry realized (they are still learning it) that selling massive amounts at more reasonable prices is better than overprotecting and selling at a premium - effectively hindering it from beeing sold *G* (economies of scale).

Nobody can tell how the future will look like - but one thing is sure - there's a demand for better image quality (see digital cameras or your phone (yeah, the pocket camera with SMS and speech-capability... and games... and compass.... and and and ... ).

I'd really like see the whole IR-evolution turn into a volume-direction:
Just imaginge the fun one could have with a hobbyist 120x120 sensor module for sub-150$ ...
... how many Arduinos have been sold yet? ;)
... IMHO it's just a matter of time when somebody smart at marketing ( :-DD) realizes the potential

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 28, 2014, 05:35:33 pm
Hello all,

Got my camera today, got in the first attempt with Filezilla, used the tool to generate the file and added the menubeta.  Now I can not connect at all with Filezilla, I get "no route to host" and "connection refused" every time.  Any ideas?  I've been searching and seen others have had this problem but haven't really found the solution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 28, 2014, 08:45:24 pm
Hello all,

Got my camera today, got in the first attempt with Filezilla, used the tool to generate the file and added the menubeta.  Now I can not connect at all with Filezilla, I get "no route to host" and "connection refused" every time.  Any ideas?  I've been searching and seen others have had this problem but haven't really found the solution.

What have you tried to do to fix it? As you have already said - others have had the error and posted how they addressed it - what have you done?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 28, 2014, 09:06:31 pm
The IP address might have changed. See: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg412224/#msg412224 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg412224/#msg412224)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 28, 2014, 10:12:10 pm
Well I figured it out.

I was able to see the camera in device manager with RNDIS mode activated and it would come up as "FLIR Camera Network Device #7" under "Network Adapters" but I could not connect to the standard 192.168.0.2 or any variation I have seen in this thread.

I did stumble upon someone mentioning the FLIRInstallNet.exe file which shows the IP address of the camera if the driver is working.  This file is located in "Program Files (x86)/FLIR Systems/FLIR Tools/bin".  I attempted to use the given IP address from the tool with no luck in FileZilla or WINSCP.  The IP address was 169.254.216.16, I believe you can also get this number by using command prompt and entering "ipconfig /all", I am not sure though as of now the command prompt gives me 169.254.216.15 and FLIRInstallNet gives me 169.254.216.16 still.

After still failing to connect, I researched some more and read about disabling all network devices/connections so I went back to device manager and disabled everything under "Network Adapters" except the camera, I tried FileZilla again but it still wouldn't work.

I restarted the computer with the camera disconnected, off and battery removed.  When the computer came back up, I put the battery back in and plugged it into the computer while off and turned it.  I then used the FLIRInstallNet program to get the IP address and then was able to use that in FileZilla to connect.  After finishing the changes, I went back into device manager and enabled all of the past disabled devices.




Also, from my experience with doing this.  You can not simply copy the "system" file when doing the MENU hack.  When I did that, I did not get all of the new features.  I had to copy the full FLASHBFS folder over before I got the dialog box that allowed me to overwrite files and now I have all of the color palettes and other features.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 28, 2014, 11:19:08 pm
Also, from my experience with doing this.  You can not simply copy the "system" file when doing the MENU hack.  When I did that, I did not get all of the new features.  I had to copy the full FLASHBFS folder over before I got the dialog box that allowed me to overwrite files and now I have all of the color palettes and other features.
Are you copying the system file into the FlashBFS folder to overwrite the existing FlashBFS folder to overwrite the existing system folder? You may have copied the system folder over the old system folder which in reality puts the system folder you are transferring into a subfolder within the original system folder instead of overwriting it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 29, 2014, 12:37:12 am
Also, from my experience with doing this.  You can not simply copy the "system" file when doing the MENU hack.  When I did that, I did not get all of the new features.  I had to copy the full FLASHBFS folder over before I got the dialog box that allowed me to overwrite files and now I have all of the color palettes and other features.
Are you copying the system file into the FlashBFS folder to overwrite the existing FlashBFS folder to overwrite the existing system folder? You may have copied the system folder over the old system folder which in reality puts the system folder you are transferring into a subfolder within the original system folder instead of overwriting it.

I copied the System folder into FLASHBFS like it said and I did not get everything.  Watching the video, the screen did not come up asking me if I wanted to overwrite or anything so I copied the entire FLASHBFS folder into the level above FLASHBFS and it worked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mutha101 on March 29, 2014, 12:44:41 am
Just wanted to say thanks to all who made this possible.

Just turned the camera back on and whoa!

Excellent stuff  :clap:
Title: Original FlashBFS file for 1.22 available?
Post by: Onion on March 29, 2014, 10:39:36 am
I followed ds's instructions to hack my model  E4 1.1L , software:1.22.0 , but MSX is not working now. In fact, the digital camera is not working fuctioning properly. There is no color digital camera file saved when saving a pic in thermal mode. When I take a pic in color cam mode (I can see a full color preview) I get a pop-up that says Application error- Application appcore.exe encountered a serious error and must be shut down.

I applied the menu hack but have no crosshairs, no MSX, do have most of the extended color palletes but not the ones involving color camera functions, no zoom and others missing that are showing on successfully hacked cams.

I made a backup of my conf.cfc file , but forgot to back up my original Flash.BFS file. Does anyone have a copy that I can use to regain the factory settings (at least for the menus)? I'd like to try the mod again, but at this point the camera is not very useful.

Also, the info on thermal pics I take states only 1 parameter: Digital resolution          320x240  ! No other info for the thermal image!!?

No problem en/decrypting conf.cfc. 

I read most of everything here and have not found any hints or ideas toward what might be my problem.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 29, 2014, 12:58:16 pm
Onion,
If you could give something a try that i have been curious about! Since you don't have the original file, i have been wondering
if it is possible to run the firmware update from flir. Your cam already had 1.22 on it but if there is a corrupt or missing file the update may repair it???? If that works there are quite a few people that have had the same issue. It may all be for not if the firmware update just looks at the current version info and stops there but its worth a shot!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 29, 2014, 02:21:15 pm
I have had absolutely no issues with my camera. I am just curious if running flirs update will fix a non working camera.
Being that mine is tip top i have not run any updates. Sadly the 1.19.8 firmware was taken down from flirs site before i was able to grab it. If i decide to do any messing around and it goes wrong i do have the 1.21 and 1.22 firmwares. Does anyone have a zip of 1.19.8 they could link? My unit came with 1.19.8 and patching it was almost as easy as powering it up!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 29, 2014, 02:45:28 pm
Sadly the 1.19.8 firmware was taken down from flirs site before i was able to grab it. [...] Does anyone have a zip of 1.19.8 they could link?

As far as I know the 1.19.8 firmware has never been available for download at FLIR's site. When 1.19.8 was the latest firmware, you could only download the 1.18.7 from their site. And then the 1.21.0 was published. And now the 1.22.0 .
But a few (hundred) pages back Taucher helped somebody with a bricked TIC with firmware 1.19.8 to unbrick it and they used the 1.18.7 firmware. So at that time a downgrade was possible.
User fp tried to do a firmware downgrade with his 1.21.0 TIC to 1.18.7 (I think) and he bricked his device. So with the newer firmwares a downgrade isn't possible anymore.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 29, 2014, 02:59:20 pm
@ All newbies: Is it so hard to copy files from one directory to another?
It is as same as on computer from drive c: to drive d:.
For the E4 hack of 1.21/1.22 firmware it is so easy with the cfc_generator.
But you have to rename the resulting file conf_new.cfc to e8.cfc and then to copy it to the FlashFS\system\appcore.d\config.d\ subdir.
There is nothing to delete, just copy into this directory besides the conf.cfc.
The files for the menu hack it's the same, just copy to the same directories.
The directory 'presets.d' with its files are new in FlashBFS\system\ui.d\

What you just said for the main hack is completely different from about every thing else in the thread.  Naming it to e8.cfc would not overwrite the old conf.cfc and even though I believe I read it will grab the first file alphabetically (may be wrong) that file is further down anyway.

With the menu hack, I did exactly as the video and many people said.  Drop system onto FlashBFS, not into the folder itself along side the old system and it should have overwritten everything but I only got 2-3 color palettes and 1 pip and none of the scale options or extra menus like the USB one or the condensation items.  Those did not show up until I took the whole FLASHBFS folder and dragged it onto the directory above FLASHBFS and I think this is an issue related to FileZilla because when doing it the second time it asked what I wanted to do with the files, the first time using system folder it just did whatever.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 29, 2014, 03:04:44 pm

With the menu hack, I did exactly as the video and many people said.  Drop system onto FlashBFS, not into the folder itself along side the old system and it should have overwritten everything but I only got 2-3 color palettes and 1 pip and none of the scale options or extra menus like the USB one or the condensation items.  Those did not show up until I took the whole FLASHBFS folder and dragged it onto the directory above FLASHBFS and I think this is an issue related to FileZilla because when doing it the second time it asked what I wanted to do with the files, the first time using system folder it just did whatever.

It sounds pretty clear that you simply copied the FlashBFS folder to the wrong location on the camera.  It's probably not an issue with filezilla.  No offense but you didn't understand where you were putting the files when you were doing the copy.  Are you able to confirm that you have extra files in the wrong place on your camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 29, 2014, 03:16:09 pm

With the menu hack, I did exactly as the video and many people said.  Drop system onto FlashBFS, not into the folder itself along side the old system and it should have overwritten everything but I only got 2-3 color palettes and 1 pip and none of the scale options or extra menus like the USB one or the condensation items.  Those did not show up until I took the whole FLASHBFS folder and dragged it onto the directory above FLASHBFS and I think this is an issue related to FileZilla because when doing it the second time it asked what I wanted to do with the files, the first time using system folder it just did whatever.

It sounds pretty clear that you simply copied the FlashBFS folder to the wrong location on the camera.  It's probably not an issue with filezilla.  No offense but you didn't understand where you were putting the files when you were doing the copy.  Are you able to confirm that you have extra files in the wrong place on your camera?

No...I copied FlashBFS into the folder above it which I believe is just "/" which would cause it overwrite the entire FlashBFS folder.  The first time I put "system" onto FlashBFS instead of placing it inside of FlashBFS.  Yes, I did understand where I was putting the files and how to do it but something did not happen correctly when placing system on FlashBFS and was not corrected until I did it with the FlashBFS folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 29, 2014, 03:16:21 pm
As far as I know the 1.19.8 firmware has never been available for download at FLIR's site. When 1.19.8 was the latest firmware, you could only download the 1.18.7 from their site. And then the 1.21.0 was published. And now the 1.22.0 .
But a few (hundred) pages back Taucher helped somebody with a bricked TIC with firmware 1.19.8 to unbrick it and they used the 1.18.7 firmware. So at that time a downgrade was possible.
User fp tried to do a firmware downgrade with his 1.21.0 TIC to 1.18.7 (I think) and he bricked his device. So with the newer firmwares a downgrade isn't possible anymore.
[/quote]

Thanks Stefbeer! That's good info! I do have a copy of 1.18.7, i actually have read every page here and not surprisingly don't
remember the info about the downgrade. Oh boy, time to re-read this monster!! Taucher has been extremely helpful with resolving problems and he deserves some thanks! Regarding the 1.19.8 firmware, you could be correct, maybe it was never available. I seem to remember (again a few hundred pages back)( Aurora i believe) had some links to all the available firmwares. I thought 1.19.8 was linked but when i looked at it the link was dead. That's when i assumed it was "taken down".
If there is a copy of the 1.19.8 out there i would like to make an attempt at reloading it to my camera then re-patching. My TIC is in perfect working order so it may not be an accurate test but if it does get "restored" to factory that could eliminate some of the "please help!" posts. I make absolutely no claims of being an expert on this stuff so i may be barking up the wrong tree.

Edit: The above quote didn't show up right, proving its real easy to mess things up! https://www.eevblog.com/forum/Smileys/default/smiley_laughing.gif (https://www.eevblog.com/forum/Smileys/default/smiley_laughing.gif)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 29, 2014, 03:47:52 pm

No...I copied FlashBFS into the folder above it which I believe is just "/" which would cause it overwrite the entire FlashBFS folder.  The first time I put "system" onto FlashBFS instead of placing it inside of FlashBFS.  Yes, I did understand where I was putting the files and how to do it but something did not happen correctly when placing system on FlashBFS and was not corrected until I did it with the FlashBFS folder.

Hehe, okay, well you either did something wrong, OR you found a major bug in filezilla and should file a bug report with filezilla.org.

anyway I'm glad you got it working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 29, 2014, 06:48:12 pm

With the menu hack, I did exactly as the video and many people said.  Drop system onto FlashBFS, not into the folder itself along side the old system and it should have overwritten everything but I only got 2-3 color palettes and 1 pip and none of the scale options or extra menus like the USB one or the condensation items.  Those did not show up until I took the whole FLASHBFS folder and dragged it onto the directory above FLASHBFS and I think this is an issue related to FileZilla because when doing it the second time it asked what I wanted to do with the files, the first time using system folder it just did whatever.



It sounds pretty clear that you simply copied the FlashBFS folder to the wrong location on the camera.  It's probably not an issue with filezilla.  No offense but you didn't understand where you were putting the files when you were doing the copy.  Are you able to confirm that you have extra files in the wrong place on your camera?

No...I copied FlashBFS into the folder above it which I believe is just "/" which would cause it overwrite the entire FlashBFS folder.  The first time I put "system" onto FlashBFS instead of placing it inside of FlashBFS.  Yes, I did understand where I was putting the files and how to do it but something did not happen correctly when placing system on FlashBFS and was not corrected until I did it with the FlashBFS folder.
Post a screenshot here from filezilla with the entire directory tree. We will see what's wrong.

Already been fixed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Onion on March 29, 2014, 06:59:27 pm
Onion,
If you could give something a try that i have been curious about! Since you don't have the original file, i have been wondering
if it is possible to run the firmware update from flir. Your cam already had 1.22 on it but if there is a corrupt or missing file the update may repair it???? If that works there are quite a few people that have had the same issue. It may all be for not if the firmware update just looks at the current version info and stops there but its worth a shot!

Thanks heavybarrel for the suggestion. I installed the update and no, it did not stop because my current version info. It did install/change a bit of files.

Now I have a stock E4 without the digital camera recording pics and no MSX! No crosshair/temp measurements,  Hmmmmmm!!? The update did not help.
fyi - I used the Addmenu-beta3 files
What next?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 29, 2014, 07:12:00 pm
if this is happen, the TIC has a problem with the config.cfc. Pick on of the other cfc-files or your backup and make the hack for a second time. Attention: The Beta you have to install in the FlashBFS and the hack you have to install in the FlashFS.

@freak_ge: With tomas123 i had tested the old appcore-Exe on my new 1.1L-HW. And i had tested the prodapp-Exe from the 1.19.8. Both Executables are working. So i think, it is not completly impossible to downgrade. And the downgraded TIC of "fp" was not fully bricked. The bootloader was working, as i remember his last posts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 29, 2014, 08:00:35 pm
@Onion
Sorry that didn't help! Now i know that the updates don't replace all of the files on the cam. Rainer mentioned grabbing one of the other config.cfc files. They are on your cam, there isn't just the one you messed with. I don't remember the page number but a little way back in this thread that is talked about. It will tell you where to find one that will work. Hope you get it working! It will take some tinkering but you'll get it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 29, 2014, 08:33:24 pm
if this is happen, the TIC has a problem with the config.cfc. Pick on of the other cfc-files or your backup and make the hack for a second time. Attention: The Beta you have to install in the FlashBFS and the hack you have to install in the FlashFS.

@freak_ge: With tomas123 i had tested the old appcore-Exe on my new 1.1L-HW. And i had tested the prodapp-Exe from the 1.19.8. Both Executables are working. So i think, it is not completly impossible to downgrade. And the downgraded TIC of "fp" was not fully bricked. The bootloader was working, as i remember his last posts.
Hi Rainer, wie gehts?
Yes of course, the appcore.exe from 1.19 is working on 1.22.
Since 1.21 the webaccess (192.168.0.2) is not completely. It is no more possible to change the EEPROM ('E4' to 'E8'), and service mode is no longer available.
But with old appcore.exe running as appcore1.exe the EEPROM access and the service mode working very well.
I have already the 4th E4 cracked, now the firmware 1:22. More and more friends be convinced by me and the superior performance of the E8+. I am then getting the patcher.

I am going to be getting a 1.21 1.1L on Thursday.  Are you saying that service mode will be unavailable, and what exactly does that mean?  I don't recall service mode even being discussed.  Would upgrading to 1.22 be a wise choice before doing the hacks?  Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on March 29, 2014, 09:04:18 pm
Has anyone tried to replace the battery in your Ex?
In the middle of the cell li-ion 18650. It is also about 2 "little shit"  >:D who can not "see" the newly listed batteries.
Probably in soft are also some security.
  Let's do something about it, if someone tried?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on March 29, 2014, 09:09:02 pm
Has anyone tried to replace the battery in your Ex?
In the middle of the cell li-ion 18650. It is also about 2 "little shit"  >:D who can not "see" the newly listed batteries.
Probably in soft are also some security.
  Let's do something about it, if someone tried?

What?  I don't understand what you are saying.

I think it is unlikely that there is security on a 3 terminal Li-Ion battery, 3rd terminal is usually thermistor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 29, 2014, 09:26:00 pm
if this is happen, the TIC has a problem with the config.cfc. Pick on of the other cfc-files or your backup and make the hack for a second time. Attention: The Beta you have to install in the FlashBFS and the hack you have to install in the FlashFS.

@freak_ge: With tomas123 i had tested the old appcore-Exe on my new 1.1L-HW. And i had tested the prodapp-Exe from the 1.19.8. Both Executables are working. So i think, it is not completly impossible to downgrade. And the downgraded TIC of "fp" was not fully bricked. The bootloader was working, as i remember his last posts.
Hi Rainer, wie gehts?
Yes of course, the appcore.exe from 1.19 is working on 1.22.
Since 1.21 the webaccess (192.168.0.2) is not completely. It is no more possible to change the EEPROM ('E4' to 'E8'), and service mode is no longer available.
But with old appcore.exe running as appcore1.exe the EEPROM access and the service mode working very well.
I have already the 4th E4 cracked, now the firmware 1:22. More and more friends be convinced by me and the superior performance of the E8+. I am then getting the patcher.

I am going to be getting a 1.21 1.1L on Thursday.  Are you saying that service mode will be unavailable, and what exactly does that mean?  I don't recall service mode even being discussed.  Would upgrading to 1.22 be a wise choice before doing the hacks?  Thanks.
It makes no difference whether 1.21 or 1.22.
Look at attached files, this is the service mode!
But beware, you can make a lot of broken.


OK, I remember seeing that a few times, but don't recollect anyone mentioning that it is unavailable as of 1.21 +.  This is troubling.  Is it possible to edit these menu item parameters via config files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 29, 2014, 09:50:37 pm
@kansas19

The Ex battery is a standard 'dumb' design with a 10k thermistor connected to the 3rd terminal. There is no 'intelligence' in the battery. At least one member of this forum has fitted a higher capacity Li-Ion cell into teh battery case without issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 29, 2014, 10:02:55 pm

OK, I remember seeing that a few times, but don't recollect anyone mentioning that it is unavailable as of 1.21 +.  This is troubling.  Is it possible to edit these menu item parameters via config files?
Service mode is needed the webfiles (FlashBFS\system\web\) from a 1.19 camera. In a 1.22 camera I had seen these files are missing.

So will copying files from a 1.19 or 1.18 fix it? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 29, 2014, 10:39:40 pm

OK, I remember seeing that a few times, but don't recollect anyone mentioning that it is unavailable as of 1.21 +.  This is troubling.  Is it possible to edit these menu item parameters via config files?
Service mode is needed the webfiles (FlashBFS\system\web\) from a 1.19 camera. In a 1.22 camera I had seen these files are missing.

So will copying files from a 1.19 or 1.18 fix it?

You need also the prodapp.exe and the dll.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Onion on March 30, 2014, 12:14:32 am
if this is happen, the TIC has a problem with the config.cfc. Pick on of the other cfc-files or your backup and make the hack for a second time. Attention: The Beta you have to install in the FlashBFS and the hack you have to install in the FlashFS.

@freak_ge: With tomas123 i had tested the old appcore-Exe on my new 1.1L-HW. And i had tested the prodapp-Exe from the 1.19.8. Both Executables are working. So i think, it is not completly impossible to downgrade. And the downgraded TIC of "fp" was not fully bricked. The bootloader was working, as i remember his last posts.

Thanks for the replies guys! I successfully modded my 1.1L 1.22.0 ! I was able to restore to factory settings after pasting the factory conf.cfc. After I tried the mod again, success!
This will be an indispensable tool  in my construction business!
Thank you all for the hard work and effort put into this project!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on March 30, 2014, 01:09:59 am
Congrats Onion! Told you you would get it! Just for the record please post the file path to the conf file that you used!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 01:58:32 am
if this is happen, the TIC has a problem with the config.cfc. Pick on of the other cfc-files or your backup and make the hack for a second time. Attention: The Beta you have to install in the FlashBFS and the hack you have to install in the FlashFS.

@freak_ge: With tomas123 i had tested the old appcore-Exe on my new 1.1L-HW. And i had tested the prodapp-Exe from the 1.19.8. Both Executables are working. So i think, it is not completly impossible to downgrade. And the downgraded TIC of "fp" was not fully bricked. The bootloader was working, as i remember his last posts.

Thanks for the replies guys! I successfully modded my 1.1L 1.22.0 ! I was able to restore to factory settings after pasting the factory conf.cfc. After I tried the mod again, success!
This will be an indispensable tool  in my construction business!
Thank you all for the hard work and effort put into this project!!!

Are you able to enter and use service mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on March 30, 2014, 02:51:11 am
@Gallymimus & Aurora


Thermistor?
I'm afraid that you may not be right in this case.
When I connect a new battery, the display of the camera is the empty battery symbol crossed (battery broken). Approx. 1 - 2 sec. and the camera turns off.
In the picture two little sh.t in battery ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on March 30, 2014, 05:13:27 am
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: marculito on March 30, 2014, 06:33:47 am
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O

Yeah :P I have 1.21 and mine has been "hacked". Works great! Especially with all the new menus :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fisher on March 30, 2014, 06:59:06 am
Has anyone received recently the free gift for the E4 purchase?
I`ve sent my request early in March, they requested me the invoice around the 15th of March,and since then I have no feedback.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 07:41:52 am
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O

Yeah :P I have 1.21 and mine has been "hacked". Works great! Especially with all the new menus :P

I'm glad to hear that.  So service mode is also completely functional as well?  I can't seem to get an answer on this.  Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 30, 2014, 08:56:10 am
@Gallymimus & Aurora


Thermistor?
I'm afraid that you may not be right in this case.
When I connect a new battery, the display of the camera is the empty battery symbol crossed (battery broken). Approx. 1 - 2 sec. and the camera turns off.
In the picture two little sh.t in battery ;)

see discussion here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg385379/#msg385379 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg385379/#msg385379)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg385395/#msg385395 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg385395/#msg385395)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=80887;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on March 30, 2014, 10:10:26 am
@ Fisher

Yes, the turn-around time was only one week from the time I mailed the receipts until it arrived via UPS. I went with the laser rangefinder, since I already had a cheap but good enough borescope. Good enough to find missing cat toys under the refrigerator, at least.

I included a copy of everything that seemed relevant: a printout of the email confirmation from the vendor, the invoice from the web page, and the packing list from the shipment of the camera. The order number tracked all the way through all three pieces of paper, so they could see that I ordered it, paid for it, and received it plus verify that it was a genuine UPS tracking number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 30, 2014, 10:37:41 am
@Gallymimus & Aurora


Thermistor?
I'm afraid that you may not be right in this case.
When I connect a new battery, the display of the camera is the empty battery symbol crossed (battery broken). Approx. 1 - 2 sec. and the camera turns off.
In the picture two little sh.t in battery ;)
That pic shows 2 FETs and a control chip - standard lithium protection circuit.
There is a battery management chip on the main board, which does gas-gauging to estimate battery state - it probably does some reality checks on the voltage and thermistor value. 
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 11:45:48 am
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O

Yeah :P I have 1.21 and mine has been "hacked". Works great! Especially with all the new menus :P

I'm glad to hear that.  So service mode is also completely functional as well?  I can't seem to get an answer on this.  Thanks.
If you have a 1.21, then you can test the service mode and give us an answer on this question.
I hope, you have had a backup of your camera before hacking. Plz. check the subdir FlashBFS\system\web\
How many files are in it?
Or go in RNDIS mode, connect to PC and call 192.168.0.2 in browser. If web interface shown, klick on service mode.

I do not have the camera yet.  It is on the way.  I purchased it because there were no indications that I could see that said anything about a problem after the hack was announced.  So far you're the only person who has mentioned a problem with service mode as far as I can tell, which is why I am asking others to tell me their experiences with regard to this.  I read through everything here, and your revelation comes as a shock and huge disappointment to me and I don't understand why others haven't brought this up.   I would have expected some notice about this in the information thread as well.  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on March 30, 2014, 11:46:40 am
@ freak_ge: i have a 1.21-TIC. The web/service-folder ist empy(or a couple of files and empty folders in it, but not the "index.asp") So there is no web-based service mode.

In the battery are two serial FETs, one in charge and one in discharge-direction. This is a standard application of the Li-Ion-protection-ics. And a little 6-pin-SOT23 "Battery protection IC" to control the fets. Most of these protection-IC´s have two pins for measure voltage of the cell, two pins as output for switching the fets and one pin for measure the current (with the Rdson as shunt). The sixth pin is sometimes for special purposes and sometimes sometimes not in use(like the microchip units). These chips are important for the safety of the battery, but not for any application in the  TIC. When the TIC switched of, after modification of the battery, it might possible, that the protection ic switched of the discharge-Fet.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 11:51:14 am
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O

Unless there is some workaround, I am going to be very disappointed

Yeah :P I have 1.21 and mine has been "hacked". Works great! Especially with all the new menus :P

I'm glad to hear that.  So service mode is also completely functional as well?  I can't seem to get an answer on this.  Thanks.
If you have a 1.21, then you can test the service mode and give us an answer on this question.
I hope, you have had a backup of your camera before hacking. Plz. check the subdir FlashBFS\system\web\
How many files are in it?
Or go in RNDIS mode, connect to PC and call 192.168.0.2 in browser. If web interface shown, klick on service mode.

I do not have the camera yet.  It is on the way.  I purchased it because there were no indications that I could see that said anything about a problem after the hack was announced.  So far you're the only person who has mentioned a problem with service mode as far as I can tell, which is why I am asking others to tell me their experiences with regard to this.  I read through everything here, and your revelation comes as a shock and huge disappointment to me and I don't understand why others haven't brought this up.   I would have expected some notice about this in the information thread as well.  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on March 30, 2014, 12:08:51 pm
[...] So far you're the only person who has mentioned a problem with service mode as far as I can tell, which is why I am asking others to tell me their experiences with regard to this.  I read through everything here, and your revelation comes as a shock and huge disappointment to me and I don't understand why others haven't brought this up.   I would have expected some notice about this in the information thread as well.  :(

It has been stated here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382118/#msg382118) and here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382081/#msg382081). And most certainly a few other times.
What exactly is "a shock" and "huge disappointment" about a missing service mode that has been hardly used anyway? It's still hackable. Is an E8+ for the price of an E4 worth nothing?
I really don't see an issue...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 12:14:41 pm
So, has the 1.21/1.22 firmware been defeated?

If so, high five! Suck it, FLIR!

If not...  ::) :-/O

Unless there is some workaround, I am going to be very disappointed

Yeah :P I have 1.21 and mine has been "hacked". Works great! Especially with all the new menus :P

I'm glad to hear that.  So service mode is also completely functional as well?  I can't seem to get an answer on this.  Thanks.
If you have a 1.21, then you can test the service mode and give us an answer on this question.
I hope, you have had a backup of your camera before hacking. Plz. check the subdir FlashBFS\system\web\
How many files are in it?
Or go in RNDIS mode, connect to PC and call 192.168.0.2 in browser. If web interface shown, klick on service mode.

I do not have the camera yet.  It is on the way.  I purchased it because there were no indications that I could see that said anything about a problem after the hack was announced.  So far you're the only person who has mentioned a problem with service mode as far as I can tell, which is why I am asking others to tell me their experiences with regard to this.  I read through everything here, and your revelation comes as a shock and huge disappointment to me and I don't understand why others haven't brought this up.   I would have expected some notice about this in the information thread as well.  :(
Would you tell us something?

Tell you what?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: marculito on March 30, 2014, 12:21:44 pm
To something completely else. Wonder if it's possible by interpolation to have the camera save the photos in 640x480 instead of 320x240? Just as the photos taken in "camera mode".

And btw, does the E4 or any of the Ex series have built-in Wi-Fi and Bluetooth? Just wondering since there are references in the config files that you can turn on wifi and bluetooth :P Probably no chip in the E4.. but still want to check if someone have tested it :P

Cheers!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 01:03:02 pm
[...] So far you're the only person who has mentioned a problem with service mode as far as I can tell, which is why I am asking others to tell me their experiences with regard to this.  I read through everything here, and your revelation comes as a shock and huge disappointment to me and I don't understand why others haven't brought this up.   I would have expected some notice about this in the information thread as well.  :(

It has been stated here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382118/#msg382118) and here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg382081/#msg382081). And most certainly a few other times.
What exactly is "a shock" and "huge disappointment" about a missing service mode that has been hardly used anyway? It's still hackable. Is an E8+ for the price of an E4 worth nothing?
I really don't see an issue...

Well, I must have missed the exact part about the service mode being crippled.  I asked if there is a workaround for that but didn't get an answer.  It appears to have a great deal of functionality, but for all I know, maybe it was designed for their service techs for in the shop.  I have no idea.  Thanks for your input.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on March 30, 2014, 01:05:04 pm

Tell you what?
You have quoted your own post without adding anything.

I have no idea how that got there!  Very peculiar.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on March 30, 2014, 03:11:27 pm
Has anyone received recently the free gift for the E4 purchase?
I`ve sent my request early in March, they requested me the invoice around the 15th of March,and since then I have no feedback.

It took them about 3 weeks to ship mine.  You can find out the status by calling FLIR Sales at 800-464-6372.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 30, 2014, 03:39:01 pm
Kansas19,

As I stated, the E4 battery pack is the standard 'dumb' type, without any gas guage battery mangement within (unlike laptop batteries that use BQxxxx chips. The components that you can see are, as others have stated, related to the mandatory Li-Ion technology safety systems to prevent overcharge and discharge. As you likely know, Li-Ion cells have a habit of exploding and/or catching fire if abused during charge or discharge. The Power MOSFETS cut the charge or discharge path if the safety monitoring chip detects an excursion outrside acceptable parameters. This includes an overdischarged or faulty cell

A Li-Ion cell must not be overdischarged. Doing so permanently changes its internal chemistry and can lead to unstable/unsafe operation in extreme cases. The safety chip measures the cell voltage, and if it drops below a set threshold, it disconnects the cell from the outside world using the MOSFETS, both charge and discharge are prevented.

Unlike many laptop batteries that are 'intelligent', the safety chip does not normally do a non user reversible 'lock-out'. (With BQ chips, that are password protected, you can unlock them but the software is expensive and you need the password). It is often possible to recover an overdischarged Li-Ion cell with sort charging pulses until the cell voltage rises to the safety threshiold, the cell input and output MOSFETS are then reactivated for a normal charge process. The cell recovery process can take many forms, one of which is to open the plastic cell container and either temporarily bypass the the MOSFETS, then charge normally, or another is to directly charge the cell for a few seconds from an external PSU, set to say 4.2V, current limited to 500mA. Note my warning regarding an overdischarged Li-Ion cell. Slight overdischarge is OK in many cases, but not severe over discharge.

I am surprised at your situation though. The battery should not suffer undervolt protection unless it was faulty or discharged to the normal low battery charge threshold of an E4, and then suffered natural discharge that took it below the safety threshold. That usually takes several months of non use. If a new battery was faulty, why mess around with it ? Just return it for warranty replacement. You do not need to return the camera.  Why did you cut the battery pack open and waste $50 :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 30, 2014, 04:21:22 pm
Newbie help thread

I note that Gallymimus has created a Newbie help thread for those who are having problems with the upgrade process, or who have questions.

https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/ (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)

It would be great if that thread gets used and supported in order to provide answers to the common issues that regularly appear on this thread. It could become a very useful 'self-help' resource ?

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jlr134 on March 30, 2014, 04:38:28 pm
Has anyone received recently the free gift for the E4 purchase?
I`ve sent my request early in March, they requested me the invoice around the 15th of March,and since then I have no feedback.

My first one came in about a week.My second one took 8 weeks .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nem on March 30, 2014, 06:52:50 pm
CFC editor GuiTool

Simple text editor for CFC files out of v1.21 and v1.22. Allows you to simply open, edit and save the CFC files from your camera. No external dependencies on other binaries are needed, command line options and will run on 32bit windows.

Requires .NET 4 - Link for download included in readme file if you don't already have it.

Credits give to ds and tnt for the included crmd160 and ftool source code which has been ported to C#. I've also included all source code and links to this forum as a way of giving a little back for all the information and help this topic has provided.

I hope the tool proves useful in some way.

Thank you to EEVBLOG and all members of this thread!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 30, 2014, 07:05:04 pm
TL;DR :
30th Mar 2014.
New production units are shipping with 1.21 or 1.22 firmware, and hardware version 1.1L It is not known what the L means. Very few if any 1.19.x units remain in the distribution chain.
1.2x has countermeasures against the original hack, however  1.21  and 1.22 have now been successfully hacked, and confirmed by several users.
Jan 29rd 2014 is the latest reported manufacture date we have seen with 1.9.8 firmware.
This post will be updated with any developments. Things are moving fast so always check the end of the thread for any very recent updates.

Newbie help thread - please use for issues relating to known firmware versions up to and including 1.21 (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)

1.21/1.22 firmware hack info  (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)

DaveWB's video tutorials for old and new firmware versions (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787)

Link to old firmware hack info for all versions below 1.2x (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

Link to Taucher's menu hacks (Beta - for advanced users) (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024) These enable extra features not even available on the E8 like manual temperature mode, additional pallettes and measure modes, and digital zoom.

Link to Nersut's detailed guide to hacking the i series (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg348174/#msg348174)
Link to older i3 hack info (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)

Tomas123's links on post- processing and measurements using E4 images (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

Jolly's raspberry Pi E4 video recorder (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918)

Links to useful files and documents :
Aurora's Useful  information thread, including log of versions and serial numbers (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)
 
Flir Tools http://www.flir.com/thermography/americas/us/view/?id=54865 (http://www.flir.com/thermography/americas/us/view/?id=54865)

Direct (non-registration required) link to Flir RNDIS driver http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)

Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

Info on console commands etc. http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)


There is  lots of other useful info in this thread so well worth a read.

Yes, it has a 320x240 60fps sensor - same as the £4700 E8 model and even more expensive Ex0 series
FLIR E4 Thermal Imaging Camera teardown (https://www.youtube.com/watch?v=NtqUE67BUDI#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pts on March 30, 2014, 07:11:24 pm
Quote
Tech notes documenting network modes using RNDIS
http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf (http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf)

Returns Not found.

Any second source ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 30, 2014, 07:29:48 pm
The FLIR E8 (and the hacked FLIR E4 by extension) and the FLIR T4x0 both have the same resolution, yet the sample images from the latter (http://www.tequipment.net/FLIRT440.html) seem to be much sharper. Are there any other factors besides the lens and frame rate that affect the quality of a thermal image?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 30, 2014, 08:09:50 pm
The optics in the E4 are about as cheap and simple as can be deployed in a thermal camera, and still achieve an acceptable image. More advanced cameras use much larger and higher performance optics. You get what you pay for. This is another reason why the E8 isn't great value....it uses the same cheap optical block as the E4. The new MSX function effectively inserts the target edge detail that is lost by the relatively low thermal resolution and optical performance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on March 30, 2014, 08:33:19 pm
Can someone explain to me why the max temperature in the frame is not the top of the scale but if you put the hot point follower on it does record an accurate high temp?


See here - http://i.imgur.com/BeLXggi.gif (http://i.imgur.com/BeLXggi.gif)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 30, 2014, 09:27:59 pm
The optics in the E4 are about as cheap and simple as can be deployed in a thermal camera, and still achieve an acceptable image. More advanced cameras use much larger and higher performance optics. You get what you pay for. This is another reason why the E8 isn't great value....it uses the same cheap optical block as the E4. The new MX function effectively inserts the target edge detail that is lost by the relatively low thermal resolution and optical performance.

That makes sense. Speaking of which, I noticed some of the pictures on that page are actually from the FLIR T6x0. It's definitely a little deceptive, if you ask me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 30, 2014, 10:50:28 pm
@tjb1

As you will know, the E4 in Auto span mode selects the most appropriate span and centre temperature for a 'pretty picture'. That is not to say that the auto setting provides the most useful span or centre temp. In the world of thermal imaging the user normally selects the span window and centre temp to suit the needs of the situation. The camera is actually seeing its full temperature capability at the Microbolometer output. The temperature span is just the 'window' of the display within that range of thermal data. It is not unusual for and Autospan maximum temperature to fall below the target scene highest temperature point. At such a point the thermal palette just shows the highest temperature available. On industrial cameras there is another colour such a Grey that denotes areas that exceed the present span coverage. When using a temperature marker, the camera reads the raw thermal data and provides a true digital value for that pixel or pixel Group. The marker is independent of any span or centre temp settings as it does not use the display data stream, it works with the full thermal microbolometer data set.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: benst on March 31, 2014, 03:33:17 pm
Thank you all for the great work! I have just upgraded my E4 (1.21.0 / 1.1L / serial 639147xx) with the resolution and menu hack and it worked flawlessly.

Very impressed by all your detective work and special thanks to Mike for getting the ball rolling.

Kind regards,
Ben
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ivan7enych on April 01, 2014, 09:58:30 am

Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc

Hello, my note about generating CRC sum for calib.rsc file.
Above mentioned python script doesn't work on win7 x64 (generates wrong CRC)

With little modification it works well (open files in bynary mode - 'rb' not simple 'r' )
Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'rb') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc

This allows me to fix misalignment of visual and thermal images. Thanks tomas123 for the explanation!
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406402/#msg406402 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406402/#msg406402)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 01, 2014, 05:23:11 pm
FYI: FLIR is reducing the price of the E4 to $750 for a limited time only!

TEquipment.NET has more information about the promo: http://www.tequipment.net/FLIRE4.html (http://troll.me/images/slowpoke/april-fools.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on April 01, 2014, 06:28:13 pm
FYI: FLIR is reducing the price of the E4 to $750 for a limited time only!

TEquipment.NET has more information about the promo: http://www.tequipment.net/FLIRE4.html (http://troll.me/images/slowpoke/april-fools.jpg)
asshole!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on April 01, 2014, 06:57:00 pm
Nah, it was a pretty good gotcha. Worth a smile for sure. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on April 01, 2014, 08:10:46 pm
@cboles

Here are the steps:

.....

Just tried (over and over) the above with my just arrived E4 1.22 with no success  :wtf:
i can only see some extra menu after installing the ADDMENU-BETA3 package, although not fully functional, some of them just freezes camera, like multi temp measure, but i think it's due to the main hack not working.

BTW apart a supposely better looking picture on screen, where am i supposed to see the full resolution? Camera info maybe? or some new menu which lets me to choose resolution? Sorry i'm completely new to this cameras.. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on April 01, 2014, 08:45:59 pm
[...] but i think it's due to the main hack not working.

If you don't have MSX and the center measuring spot is missing, then something went wrong along the process of generating the new .cfc-file. Your current file is invalid.

Take a look at these posts:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg416195/#msg416195 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg416195/#msg416195)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505)

This might help :)

You can see the resolution in the image info. You have to open an image in the gallery and select "image info" in the menu. Then the camera will tell you the thermal resolution and the digital resolution (from the digital camera). But because of the invalid config file you're running right now, the thermal image won't be saved and you won't see the line "thermal resolution" in the image info.


EDIT: I just realized now that this "discussion" should have taken place here: https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/ (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nihil on April 01, 2014, 11:32:55 pm
Apologies in advance if this is old news. My searching for a Linux based way to connect to the E4 only turned up some frustrated sounding posts with no success stories.

It seems the E4 does indeed use a modified DHCP/RNDIS that doesn't play well without the FLIR tools installed, and manually configuring your interface to the expected 192.168.0.0 or 192.168.1.0 range fails as expected.

However, if you fire up your favorite sniffer very quickly after the device is created, you'll see that it initially sets itself up at 192.168.250.2, making things easy (mine came up on eth4):

Quote
# ifconfig eth4 192.168.250.1 netmask 255.255.255.0
# ping 192.168.250.2
PING 192.168.250.2 (192.168.250.2) 56(84) bytes of data.
64 bytes from 192.168.250.2: icmp_req=1 ttl=128 time=5.29 ms
64 bytes from 192.168.250.2: icmp_req=2 ttl=128 time=1.06 ms
^C
--- 192.168.250.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 1.064/3.181/5.298/2.117 ms

# ftp 192.168.250.2
Connected to 192.168.250.2.
220 Service ready for new user.
Name (192.168.250.2:nihil): flir
331 User name okay, need password.
Password:
230 User logged in, proceed.
Remote system type is Windows_CE.
ftp> ls
229 Entering extended passive mode (|||49152|).
125 Data connection already open; transfer starting.
01-01-98  12:00       <DIR>          FlashFS
01-01-98  12:00       <DIR>          FlashIFS
01-01-98  12:00       <DIR>          FlashBFS
04-02-14  03:21                 4096 Printer.swap
04-01-14  19:21       <DIR>          profiles
04-01-14  19:21       <DIR>          Documents and Settings
04-01-14  19:21       <DIR>          My Documents
04-01-14  19:21       <DIR>          Program Files
04-01-14  19:21       <DIR>          Temp
04-01-14  19:21       <DIR>          Windows
226 Closing data connection.
ftp>

Again, apologies if this is old news, I didn't read through this entire thread. I just saw the posts found in a search that did not look like anyone got anywhere.


Edit: I also compiled the CRC03 and ftool utilities native without any modification.

g++ crmd160.cpp crmd160.h main.cpp -o crc03
and
g++ main.cpp md5.cpp md5.h -o ftool

Thanks to all for the hard work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on April 02, 2014, 07:20:04 am
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.

Hi stefbeer, link to .zip file is broken! Can you upload again?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on April 02, 2014, 07:53:57 am
Has anyone received recently the free gift for the E4 purchase?
I`ve sent my request early in March, they requested me the invoice around the 15th of March,and since then I have no feedback.

It took them about 3 weeks to ship mine.  You can find out the status by calling FLIR Sales at 800-464-6372.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on April 02, 2014, 07:59:16 am
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.

Hi stefbeer, link to .zip file is broken! Can you upload again?

EDIT: I tried with guitool, now it works!!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on April 02, 2014, 08:01:15 am
Has anyone received recently the free gift for the E4 purchase?
I`ve sent my request early in March, they requested me the invoice around the 15th of March,and since then I have no feedback.

It took them about 3 weeks to ship mine.  You can find out the status by calling FLIR Sales at 800-464-6372.

Thanks for that phone number.  I'm going on five weeks since mailing in all the required info and no free stuff yet.  I'll give them a ring and report back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 02, 2014, 08:24:02 am
Apologies in advance if this is old news. My searching for a Linux based way to connect to the E4 only turned up some frustrated sounding posts with no success stories.

It seems the E4 does indeed use a modified DHCP/RNDIS that doesn't play well without the FLIR tools installed, and manually configuring your interface to the expected 192.168.0.0 or 192.168.1.0 range fails as expected.

great
this way is simpler as descriped here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074)
or
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg339941/#msg339941 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg339941/#msg339941)

I checked it with an old  clean ubuntu machine. An RNDIS Device (like E4) has never plugged in since now.
(no extra rules for ethx edited - see /etc/network/interfaces)

Quote
$ uname -a
Linux xxxx 3.0.0-12-server #20-Ubuntu SMP Fri Oct 7 16:36:30 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux

$ cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet dhcp

$ dmesg
[922392.410990] usb 2-1.3: new high speed USB device number 3 using ehci_hcd
[922392.548860] usbcore: registered new interface driver cdc_ether
[922392.568661] rndis_host 2-1.3:1.0: RNDIS_MSG_QUERY(0x00010202) failed, -47
[922392.575979] rndis_host 2-1.3:1.0: eth1: register 'rndis_host' at usb-0000:00:1d.0-1.3, RNDIS device, 00:40:xx:xx:xx:xx
[922392.576000] usbcore: registered new interface driver rndis_host
[922392.581075] cfg80211: Calling CRDA to update world regulatory domain
[922392.582848] usbcore: registered new interface driver rndis_wlan
[922392.594211] cfg80211: World regulatory domain updated:
[922392.594213] cfg80211:     (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[922392.594215] cfg80211:     (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[922392.594217] cfg80211:     (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[922392.594218] cfg80211:     (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[922392.594219] cfg80211:     (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[922392.594221] cfg80211:     (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)


$ sudo ifconfig eth1 192.168.250.1 netmask 255.255.255.0

$  ftp 192.168.250.2
Connected to 192.168.250.2.
220 Service ready for new user.
Name (192.168.250.2:vbox): flir
331 User name okay, need password.
Password: 3vlig
230 User logged in, proceed.
Remote system type is Windows_CE.
ftp> ls
200 Command okay.
150 File status okay; about to open data connection.
01-01-98  12:00       <DIR>          FlashFS
01-01-98  12:00       <DIR>          FlashIFS
01-01-98  12:00       <DIR>          FlashBFS
04-02-14  16:44                 4096 Printer.swap
04-02-14  08:44       <DIR>          profiles
04-02-14  08:44       <DIR>          Documents and Settings
04-02-14  08:44       <DIR>          My Documents
04-02-14  08:44       <DIR>          Program Files
04-02-14  08:44       <DIR>          Temp
04-02-14  08:44       <DIR>          Windows
226 Closing data connection.


after plug in the E4 I get
Code: [Select]
$ cat /etc/udev/rules.d/70-persistent-net.rules
# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# PCI device 0x8086:0x10ef (e1000e)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="d8:d3:85:7f:88:e6", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# USB device 0x09cb:0x1002 (usb)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:40:xx:xx:xx:xx", ATTR{dev_id}=="0x0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 02, 2014, 07:09:47 pm
Interesting read about thermal cameras in general: http://www.prnewswire.com/news-releases/the-world-market-for-commercial-and-dual-use-infrared-imaging-and-infrared-thermometry-equipment-vol-irw-c-2014-edition-253528351.html (http://www.prnewswire.com/news-releases/the-world-market-for-commercial-and-dual-use-infrared-imaging-and-infrared-thermometry-equipment-vol-irw-c-2014-edition-253528351.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pingo on April 03, 2014, 07:08:21 am
Has anyone explored whether it would be possible to increase the range of measured temperatures? Would it be possible to have the TIC measure temperatures higher than 280°C?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bolt on April 03, 2014, 08:22:16 am
Has anyone explored whether it would be possible to increase the range of measured temperatures? Would it be possible to have the TIC measure temperatures higher than 280°C?
Possible, but IMHO temperature limit is about 320°C, in RAW data its equal 65535. Low limit theoretically is 0°K, I have seen -150°C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 03, 2014, 12:35:27 pm
Possible, but IMHO temperature limit is about 320°C, in RAW data its equal 65535. Low limit theoretically is 0°K, I have seen -150°C.

It's not so simple.
You can play around with this excel sheet to calculate Temperature=function(RAW)
 
source:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)


Hint: the embedded RAW value is not the direct result of the sensor ADC measurement of a single pixel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 03, 2014, 01:16:50 pm
Has anyone explored whether it would be possible to increase the range of measured temperatures? Would it be possible to have the TIC measure temperatures higher than 280°C?
I wonder if maybe there might be some interesting rset parameters, e.g. to tweak ADC gain/range
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on April 03, 2014, 01:42:35 pm
Hi
Is the last HACK 100% working with FW ver 1.22.0 and HW 1.1L?
There is information that is not of the bid (or users are making a mistake)
Thanks all info :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 03, 2014, 03:43:10 pm
Quote
To install Taucher's menu hack:

1. Install the RNDIS drivers on your PC. (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe))
2. Turn on RNDIS on the camera via the hidden menu (Settings>Device Settings>Camera Information - Press <right> for 10 seconds, select "USB Mode" then select "RNDIS")
3. Connect camera to PC via USB.
4. FTP to camera (eg. with FileZilla): Normal logon type, Host "192.168.0.2", user name "flir", password "3vlig"
5. Make a back-up of the files on your camera (copy files from camera to your computer into a back-up directory of your choice)
6. Copy the ADDMENU-Beta files over the files in the camera (eg. unzip the files to your computer then copy the folder "FlashBFS" from your computer over the folder "FlashBFS" in the camera - overwrite files)
7. Power-down the camera, remove battery and USB cable.
8. Re-insert battery and turn on.
9. Enjoy!  :D

Re: menu hack: 
Issue 1:  I made it to step 5 (above).  I selected ALL the folders/files on the camera (to backup everything) and during the transfer there are about 139 failed transfers.  I tried this on 2 different computers with similar result. 

Issue 2:  The FlashBFS\system folder in the 'ADDMENU-BETA3' mod has 1 folder and 5 files, however the same folder in the camera has 9 folders and a lot of files.  I'm guessing this means overwrite the 1 folder and 5 files, but KEEP all other files in the cameras "FlashBFS" folder as is.

I installed flir tools 4.0 from the two zip files posted somewhere, and the camera (apart from a few quirks like an occasional failure to find my images until I reboot and it reindexes them) seems to work OK. 

I am trying to upgrade but run into problems installing the device drivers.  It fails with FLIR Device Drivers -- Error 1935 An error occurred during the installation of assembly 'policy.8.0.Microsoft.VC80.OpenMP,version="8.0.50727.4053",type="win32-policy",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86"'. Please refer to Help and Support for more information. HRESULT: 0x80070005. assembly interface: IAssemblyCache, function: CreateAssemblyCacheItem, component: {04B9F3B6-9645-7658-A01F-C8B3B9A1E18E}.

The thing is is that I was expecting to be installing a 2.1 x 64 version and not 1.9, but have been unable to locate one, if that matters, since my fw version is 2.1.  Can anyone help me on this please?  I've spent a lot of time looking around to see if I could find a different driver file.  Also, the installer says something about not recognizing the windows version, which I find strange.  If I manage this part the rest should be pretty straightforward.  Thanks.  Please be kind, I'm getting old and my mind isn't quite as sharp as it used to be.

Edit:  I should add that I am using Windows 7 x 64
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on April 03, 2014, 04:38:43 pm
Not strictly a question for this topic, might want to contact FLIR support, but a quick google gives some things to try.

http://blogs.msdn.com/b/astebner/archive/2005/08/16/452523.aspx (http://blogs.msdn.com/b/astebner/archive/2005/08/16/452523.aspx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 03, 2014, 05:53:34 pm
Has anyone explored whether it would be possible to increase the range of measured temperatures? Would it be possible to have the TIC measure temperatures higher than 280°C?

I've wondered the same thing but didn't get any definite answers. Some cameras from FLIR and other companies (such as Fluke and General Tools) are able to handle temperatures as high as 1,000°C or more. Do those cameras use different hardware, or are temperature ranges also firmware-limited?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 03, 2014, 06:25:05 pm
I don't have an answer, but if thermal cameras are like video cameras, at least like mine (canon gl-2), once the sensor
becomes saturated, it can no longer capture information.  In visible light photography (digital) you are better off having a
photo that is under exposed than over exposed, again, saturation.  My camera (gl-2) has a mechanical neutral density
filter that goes into place once a picture tends to be over exposed.

It would seem reasonable that the micro-bolometer has limits, I would assume the cells, pixels, could become saturated,
like pointing at the sun.  Of course in that case, you could have permanent damage.  We know the IR cameras have a
mechanical shutter, but that seems to be for some kind of internal calibration.

Would some kind of neutral density filter be used to extend the upper limit of a thermal camera?

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 03, 2014, 07:27:25 pm
I wonder if maybe there might be some interesting rset parameters, e.g. to tweak ADC gain/range

The Flir Exx with two temperature ranges don't use a filter like the neutral density filter in photography.
I think, that the TIC only changes the integration time.

see here for samples with variation of the integration time:
http://www.flir.com/cs/emea/en/view/?id=41923 (http://www.flir.com/cs/emea/en/view/?id=41923)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 03, 2014, 08:36:52 pm
Hi
Is the last HACK 100% working with FW ver 1.22.0 and HW 1.1L?
There is information that is not of the bid (or users are making a mistake)
Thanks all info :)
The last hack (1.21/1.22 firmware hack info  (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480) or page 1 of this thread) is working very well for current fw 1.22.0 and hw 1.1L.
Follow the instructions. Do not replace the original file "conf.cfc" (on camera)! Better way: Rename the new, protected config file "conf_new.cfc" to "e8.cfc" and copy it to "FlashFS\system\appcore.d\config.d\" on your camera, cold-start and you are done.

Thanks  for the help, but I can't seem to install the drivers at all.  Based on what you're saying, the drivers I have should work.  I don't know what to do at this point. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 03, 2014, 08:39:53 pm
Not strictly a question for this topic, might want to contact FLIR support, but a quick google gives some things to try.

http://blogs.msdn.com/b/astebner/archive/2005/08/16/452523.aspx (http://blogs.msdn.com/b/astebner/archive/2005/08/16/452523.aspx)

Not very keen on contacting flir about this.  haha.  I did have a look at that link, tyvm, and tried some suggestions like disabling certain s/w, but still no go.  I'm tearing what little is left of my hair out!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 03, 2014, 10:05:37 pm
Hi
Is the last HACK 100% working with FW ver 1.22.0 and HW 1.1L?
There is information that is not of the bid (or users are making a mistake)
Thanks all info :)
The last hack (1.21/1.22 firmware hack info  (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480) or page 1 of this thread) is working very well for current fw 1.22.0 and hw 1.1L.
Follow the instructions. Do not replace the original file "conf.cfc" (on camera)! Better way: Rename the new, protected config file "conf_new.cfc" to "e8.cfc" and copy it to "FlashFS\system\appcore.d\config.d\" on your camera, cold-start and you are done.

Thanks  for the help, but I can't seem to install the drivers at all.  Based on what you're saying, the drivers I have should work.  I don't know what to do at this point.
Try to let you help from google.
I think you need the Microsoft Visual C++ 2005 Redistributable Package (http://www.microsoft.com/en-us/download/details.aspx?id=5638 (http://www.microsoft.com/en-us/download/details.aspx?id=5638))
But I can also be wrong.
The first time I installed flir tools, it also installed a few .NET programs and I think that 2005 C++ one as well as 1 or two others.  .  Subsequent installations were never the same, and the last one didn't install it.  The last couple of times I happened to check the options box for network install which I had missed before.  I will see about manually putting in that distributable, but what concerns me more is that error with VSS.  I am not sure which voume is causing it, and  it still failed after disabling a bunch of software and turning VS off, as well as turning security essentials off.  If anyone has any other ideas I am all ears.

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inline on April 03, 2014, 11:40:01 pm
I ordered and received my 20mm diameter and 100mm FL ZnSe lens off eBay, shipped from China the other day and just sent my lens holder off for production to a local outfit (I found them through www.makexyz.com (http://www.makexyz.com) if this helps anyone, because I could never get ahold of the LuneValley3D place, I tried like 7 times...)  The lens holder was only about $10 with shipping, so much better than thru Shapeway which wanted like $30.  The guy who printed it even sent me a picture and it ships tomorrow, so hopefully I'll have it on Saturday.  Finally I'll get up close ability for PCB work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on April 04, 2014, 01:37:35 am
Here's mine + scope attachment. I added finger holes to help remove it.

The scope attachment works, however the lenses either need to be a larger diameter or a smaller focal length, also images are inverted.... and the whole thing looks ridiculous.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Teledog on April 04, 2014, 02:02:40 am
Hi,
Newbie here.
Not sure if this is the correct thread to post on..my apologies if not. :-[
Was about to order an E4, but with their latest firmware, is it still possible to re-flash it? (Now April 3, 2014)
I am familiar with Linux/firmware flashing (unlocked my HTC, made/used a GoodFET, etc.)
TIA!  :)
Teledog
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: john19 on April 04, 2014, 07:39:36 am
I wonder if maybe there might be some interesting rset parameters, e.g. to tweak ADC gain/range

The Flir Exx with two temperature ranges don't use a filter like the neutral density filter in photography.
I think, that the TIC only changes the integration time.

see here for samples with variation of the integration time:
http://www.flir.com/cs/emea/en/view/?id=41923 (http://www.flir.com/cs/emea/en/view/?id=41923)

How does that camera control the integration time? 0.01 ms seems too fast for a mechanical shutter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 04, 2014, 10:34:35 am
@nemonic,

Interesting work you are doung on auxilliary lenses.

Some comments from me .....

With regard to the close-up lens attachment please be aware that tle lenses from China come in three forms depending upon focal length. Bi-Convex, Convex Meniscus and Plano Convex.  My Inframetrics Industrial Close-Up lens is a Convex Meniscus type that has the concave side facing the target. This makes sense and I used the smaller Chinese meniscus lenses in the same manner. Other members of the forum discovered that the lenses actually worked better with the convex side facing the target. In the pictures it looks like you have a concave side of the lens facing the target ? You may wish to experiment with the convex side facing the target as you may see a significant image improvement (especially edge focus) I also note that you appear to have the close-up lens positioned further forwards in your mount than that of Georges80 design....any reason fo this ? Do you get vignetting ?

With regard to your telescope....... I am in exactly the same position as you. I have two lovely Inframatrics X3 Telescopes, but they invert the image. I have used a simulator to investigate why they invert and it is definitely a product of the design and not an issue with the positioning of my E4 in relation to the lens rear. My X3 telescopes use 4 lens elements. I X-Rayed the telescopes to determine the lens shapes. I found two Convex Meniscus lenses in the front (moveable) section and two Concave Meniscus lenses in the rear section.

The image inversion occurs between the 1st and 2nd lenses at the front of the telescope and the 3rd and 4th lenses just shape the rays to suit the very large aperture lens output.

As you may know, refractor telescopes come in two forms, inverting and non inverting. For a non inverting telescope you will need a primary lens that has a long focal length to prevent the image inversion that would otherwise occur in the ray path between the two lenses. I failed to find such a ZnSe lens as most on e*ay are designed for less than 100mm FL to suit CO2 lasers.

To correct the inversion, you could add another biconvex lens between the 2nd lens and the camera ? That is something that I will be pursuing with my Inframetrics Telescopes in the hope of making them more user friendly.

If anyone is interested, I will post the X-Rays of my Industrial X3 Telephoto lenses and their dimensions etc.

I have managed to buy a FLIR X2 compound telescope for my FLIR PM695 cameras and that does not invert the image. It should work well with the E4 provided the E4's wide FOV does not cause vignetting. The FLIR lens is very short in length and uses complex optics that would not be available to home users, so sadly I doubt its internal design will offer much to your lens experiments. Sadly the FLIR X2 telescope is also a very expensive product, costing many thousands of Dollars new.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on April 04, 2014, 12:11:10 pm
@Aurora

The lenses I have are a 25.4mm and 101.6mm FL Plano-Convex, however positioning the elements more around 130mm centre to centre yields a sharper image, so i am not convinced the reported FLs are accurate.

I currently have both Plano sides facing each other within the lens tube as i believe this is the normal arrangement with optical telescopes. Apparently this is to reduce aberrations but i am not certain it will matter for my case. (Edit: got this the wrong way around i think)

The reason the lens is closer to the E4 body is that its a 25.4mm FL and was under the impression the same FL rules apply to the ocular lens such that the ocular lens is positioned FL + (E4 lens 6.6mm) distance. The interesting thing from having the 25mm lens at this distance is the magnification at close range is incredible, i've managed to capture the individual pours on my fingers "sweat" cool and dissipate heat.

With regards to inversion, i know of two simple ways to correct the image. One is the addition of a 3rd lens called an erector lens like you mention and the other is with replacing the ocular lens with a convex. The benefit of a convex lens would shorten the design and similar element arrangements are used in theatre binoculars.

I was planning on using a 3rd lens as i wasn't sure i would be able to get a convex with suitable FL properties. The problem i have is that the ocular lens has to be positioned at a distance that doesn't cover the FOV of the E4, so you get the strong vignette effect in the image i posted. The solution would be a (i haven't calculated this) 38mm dia+ ocular lens and an even larger objective, but then it starts getting pricey as you're after non-common lens sizes and the FL with an erector makes the whole thing crazy long.

Ideally i would have a 40mm FL 38mm dia+ objective with a 10mm ish FL ocular lens + 10mm FL erector (i think), but i cant see me getting these lenses from anywhere but a lens lab for crazy money. The benefit of the larger objective would also be it would collect more thermal light resulting in better detection of low temperature at range.

These are all optical solutions to the inversion problem and frankly just flipping a config flag on e4 to invert seems the much more preferred option. There is no reason why the E4 cant invert and im sure there will be a setting for it.

I shall have a look at the Convex Meniscus type you mention. I am not sure what optical properties they offer over Bi-Convex/Plano-Convex types.


- Disclaimer, i am not by any means an optometrist or have any expertise in optics. I happen to have a complete opticians lens set which i use to experiment different lens combinations with tho.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 04, 2014, 03:03:23 pm
@Nemonic,

Ditto, I am very not knowledgeable on the intracasies of optics, and all that I have learnt was from Googling and practical experimentation  ;)  I learnt another lesson whilst using a lens simulator.... Index of Refraction is very different to glass when simulating a Germanium lens ! Glass is approx 1.55 and Germanium is 4.

I have some Germanium 1/2" diameter 15mm FL Thorlabs Plano Convex lenses that were very kindly gifted to me by a member of this forum for experimentation. He is also selling them on e*ay. I was thinking of some experiments with them to see if they could help with my X3 Telescope inversion issue. They may be too small for that task though.

The greatest challenge for me has been in obtaining reasonably priced lenses. As you state, the larger they are, and more uncommon FL's, quickly make them unaffordable for experimentation.

I will do some experiments with my ZnSe close-up lenses as well. I may have them too close to the E4's lens. I discovered the use of No2 close-up optical lenses several years ago when working on video document presenters. The standard Sony Zoom camera module could not focus at the short distances from the lens to the platen so the manufacturer placed a No.2 lens directly in front of it to act as a 'monocle' and provide closer focussing. Once I discovered the availability of ZnSe lenses, with useful FL's, it was an easy step to inproving the close range focussing of my Ex Fire Brigade ARGUS thermal cameras. The same technique works with the E4 as we know. I have also experimented with GaAs lenses that are AR coated and designed for CO2 lasers. They also seem to work well but have lower transmission figures. They have the advantage of not scratching as easily as the soft ZnSe material. I have yet to experiment with Si lenses but from memory they are more suited to Shortwave thermal imaging applications.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Corn on April 04, 2014, 06:17:07 pm
Just check if you copied the conf.cfc file as conf.cfg to the camera. Don't ask me what makes me think so.  :palm:

Just tried (over and over) the above with my just arrived E4 1.22 with no success  :wtf:
i can only see some extra menu after installing the ADDMENU-BETA3 package, although not fully functional, some of them just freezes camera, like multi temp measure, but i think it's due to the main hack not working.

BTW apart a supposely better looking picture on screen, where am i supposed to see the full resolution? Camera info maybe? or some new menu which lets me to choose resolution? Sorry i'm completely new to this cameras.. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 05, 2014, 05:19:12 am
FYI: there's a really good deal on an unmodified FLIR E4 on eBay right now: http://www.ebay.com/itm/FLIR-E4-Compact-IR-Thermal-Imaging-Camera-80x60-Res-4-to-482F-20-to-250C-/261442336802 (http://www.ebay.com/itm/FLIR-E4-Compact-IR-Thermal-Imaging-Camera-80x60-Res-4-to-482F-20-to-250C-/261442336802)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on April 05, 2014, 05:36:55 am
Hi,
Newbie here.
Not sure if this is the correct thread to post on..my apologies if not. :-[
Was about to order an E4, but with their latest firmware, is it still possible to re-flash it? (Now April 3, 2014)
I am familiar with Linux/firmware flashing (unlocked my HTC, made/used a GoodFET, etc.)
TIA!  :)
Teledog

Good news!  Your answers are in the thread all you have to do is start reading page 1, in fact you answers should be on page one.  Unfortunately I don't quite understand your question.  When you say reflash do you mean modify or do you mean install the 1.22 firmware again?!!?  Anyway read the thread and your question will be answered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on April 05, 2014, 03:53:04 pm
Little gizmo uploaded to Thingiverse. It holds the USB connector cover open and away from the USB cable. http://www.thingiverse.com/thing:290354 (http://www.thingiverse.com/thing:290354)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on April 05, 2014, 06:11:45 pm
Little gizmo uploaded to Thingiverse.

And... gizmo done! Thanks  :-+

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=88103;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 06, 2014, 05:36:13 pm
According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on April 06, 2014, 05:37:01 pm
Nah, it was a pretty good gotcha. Worth a smile for sure. :)
Yes, I agree.... my comment was supposed to be taken as  jab, NOT as an angry response... I should have added an emoticon and that probably would have made it a little clearer.   :-DD :-DD :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 06, 2014, 06:06:07 pm
According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Could be a number of things  - the MSX processing will be taking some power. ISTR from my teardown that backlight brightness makes a significant difference . 20% difference isn.t much for what are probably significantly different architectures.
Plus all the CPU cycles that WinCE and all the UI layers are doubtless pissing away
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 07, 2014, 01:49:04 am
Nah, it was a pretty good gotcha. Worth a smile for sure. :)
Yes, I agree.... my comment was supposed to be taken as  jab, NOT as an angry response... I should have added an emoticon and that probably would have made it a little clearer.   :-DD :-DD :-DD

Yeah, I figured that was in jest; most EEVBlog forum members are probably too civilized to call each other a**holes. :P

According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Could be a number of things  - the MSX processing will be taking some power. ISTR from my teardown that backlight brightness makes a significant difference . 20% difference isn.t much for what are probably significantly different architectures.
Plus all the CPU cycles that WinCE and all the UI layers are doubtless pissing away

I remember seeing a post stating that the average power draw was between 500 and 700 mA. FLIR could probably get six or more hours if they switched to the new 3,600 mAh Li-ion cells.

Speaking of which, I'm surprised there are no third-party battery packs with lower price points given how expensive the batteries are. As it stands, each Ex replacement battery costs $50 a pop. I guess the demand just isn't high enough.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tiagobaracho on April 07, 2014, 03:41:49 am
According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Could be a number of things  - the MSX processing will be taking some power. ISTR from my teardown that backlight brightness makes a significant difference . 20% difference isn.t much for what are probably significantly different architectures.
Plus all the CPU cycles that WinCE and all the UI layers are doubtless pissing away
HI mike...
I have the 1.98 firmware hacked...
Does make sense to update to re-hack ? any improvements on 1.21/1.22 over the 1.98 ? any reported crashes as sometimes happens on 1.98 ?
Thanks you !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 07, 2014, 08:11:08 am
According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Could be a number of things  - the MSX processing will be taking some power. ISTR from my teardown that backlight brightness makes a significant difference . 20% difference isn.t much for what are probably significantly different architectures.
Plus all the CPU cycles that WinCE and all the UI layers are doubtless pissing away
HI mike...
I have the 1.98 firmware hacked...
Does make sense to update to re-hack ? any improvements on 1.21/1.22 over the 1.98 ? any reported crashes as sometimes happens on 1.98 ?
Thanks you !
There are no known functional improvements in 1.2x
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on April 07, 2014, 03:12:12 pm
Humdinger

You should post questions like this in the FLIR E4 Q/A thread:

https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772 (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 07, 2014, 03:25:01 pm
Humdinger

You should post questions like this in the FLIR E4 Q/A thread:

https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772 (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772)

oops.  removed and moved.  Thanks...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on April 07, 2014, 03:37:01 pm
Humdinger

You should post questions like this in the FLIR E4 Q/A thread:

https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772 (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/msg413772/#msg413772)

No Problem,  we just need to encourage everyone to separate topics otherwise this thread will be 1000 pages eventually!

oops.  removed and moved.  Thanks...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: humdinger13 on April 07, 2014, 10:06:17 pm
Since so many people seem to struggle with generating their own conf.cfc , I took the time and wrote a quick'n'dirty (well, not really quick but still a bit dirty) GUI for the tools in AutoIt. See the attached .zip .
I did some testing and everything should work. Also most errors should be handled. But ("sadly" ;D ) I only have an E4 with firmware 1.19.8 , but maybe someone could do some testing by herself / himself and give me some feedback. :)

@ flir-ID10T : Maybe this will help you.

This belongs on the 1st page.  Well done stefbeer! 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on April 07, 2014, 11:24:41 pm
According to the specs I've seen, the FLIR ix battery is rated at 2,200 mAh and is supposed to have a life of five hours. In comparison, the FLIR Ex battery is rated at 2,800 mAH but "only" has a life of four hours. Does this mean the Ex has a higher power consumption? If so, is it due to the larger screen?
Could be a number of things  - the MSX processing will be taking some power. ISTR from my teardown that backlight brightness makes a significant difference . 20% difference isn.t much for what are probably significantly different architectures.
Plus all the CPU cycles that WinCE and all the UI layers are doubtless pissing away
HI mike...
I have the 1.98 firmware hacked...
Does make sense to update to re-hack ? any improvements on 1.21/1.22 over the 1.98 ? any reported crashes as sometimes happens on 1.98 ?
Thanks you !
There are no known functional improvements in 1.2x
Other than an attempt to make the E4 unhackable!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 07, 2014, 11:58:00 pm
For those readers interested in hardware improvement of the E4 I thought I would share some pictures of auxilliary lenses that I purchased for my FLIR PM695. These lenses also work with the E4. All require a suitable mounting to be created to support them as the E4 does not have an official auxilliary lens option or mount.

All of these lenses were purchased as used but serviceable on e*ay, and all cost a very small fraction of the original FLIR price  :phew:

The pictures show the following lenses (from left to right in group pictures):

The FLIR X0.5 wide angle lens doubles the field of view for situations where there is no option to move further away from a target. On the PM695 this provides a 48 Degree FOV, whilst on the E4 it produces around a 90 Degree FOV  :)

The Inframetrics X3 Telescopes, that I have previously mentioned in this thread, present me with the possibility of relatively long range wildlife observation. These lenses invert the image by design, so I will need to insert another lens between them and the camera. At present the E4 works with it but there is a little vignetting due to the wide FOV of the E4 lens. These Telescopes produce an excellent, if inverted, image on the PM695 camera though. My Inframetrics 6" close-up lens (not shown) is designed to attach to the front of this telescope in order to provide a microscope function for electronics inspection  :)

Finally, my most recent purchase, the FLIR compact X2 telescope. I have been hunting for this lens for some time, but it is in high demand and commands significant sums of money on the used marketplace. This one cost me GBP260 (which is VERY cheap for this lens) and arrived today. Its a real beauty  :-+ Unblemished optics and just look at the size of the Objective lens ! That baby is 100mm across and a pretty large lump of optical grade Germanium  :)  The lens design enables the telescope to be very short in length, as can be seen when compared to a conventional refractor type telescope, like the X3 Inframetrics. It isn't a light weight though, at around a 0.7kg of Gemanium and Aluminium. The length is only 45mm and, from memory, the lenses are of complex design to achieve X2 magnification without loss of optical performance or geometry. I have seen similar designs for camcorder use, but this is an impressive thermal camera lens and the diameters of the lenses show it to be a pretty fast, so great for wildlife work. I do not know the exact retail price on the lens when new, but it was several thousand Dollars  :o

Enjoy the pictures..... and just look at the curvature on the X2 telescope objective......yes it really is that convex !

So, for anyone wanting to change their thermal cameras field of view, you need to consider the following.....

1. Only buy lenses that are capable of working at the Long Wavelengths that the E4 uses.
2. Auxilliary (add-on) lenses are designed to sit in front of the cameras built in lens.... these are the ones to look for as the optics should work with the E4 in most cases.
3. I recommend that you avoid unknown lenses that were part of a thermal camera optical block. They are unlikely to mate with the E4 without additional optics and even then the FOV may not be what you are after. These lenses are often designed to illuminate a Microbolometer FPA, or to form only part of a lens assembly that needs a lens that remains mounted on the camera. In short ... avoid !
4. The E4 has a relatively wide field of view so some lenses may produce a decent image but may also suffer vignetting if they were designed for a camera with a smaller FOV of say 24 Degress. In my case the FLIR lenses were designed for the 24 Degree lens on my PM695, but work fine with the E4. You do take a risk when buying without testing though.
5. Do not expect to find thermal camera lenses at bargain prices (sub $100). You can get the odd bargain now and then if you are not too fussy on an exact spec, and only want the lens elements,  but auxilliary lenses tend to sell for decent money. Even the scrap value of the lenses contained within them is high. Big lumps of Germanium optics usually means $$$$
6. As I found out with teh Inframetrics Telescopes....some lenses are designed to produce an inverted image !

Happy hunting  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marphy on April 08, 2014, 12:06:35 am
Hi folks,
first of all, I want to thank you as the community for your efforts you have put into the topic. And a special THANKS to Mike, ds and Taucher being the driving force behind all this fantastic stuff. A huge tumbs up to you! :-+

As a little contribution from my side, I want to present a tool which makes the upgrade process more easy and user-friendly (not to say foolproof ;)). No more messing around with Device IDs, CRCs, SUIDs and all that stuff...
Basically, the tool allows a one-click upgrade with automated backup of modified files.

For the start I have included pre-built package files for both E4 and E8 configurations for up-/downgrade as well as Tauchers menu hack.


You can find two screenshots attached.

Direct download link: TIConfig.zip Hint: Not maintained and available anymore. Please PM me if there is any further interest.


If there's enough interest, I may try to clean the source code up a little bit and publish the project on SourceForge or GitHub.

Looking forward to your feedback!

Cheers,
Marphy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 08, 2014, 12:21:41 am
You should consider making the source code available as well (even though C# programs can be easily decompiled). That would be the true spirit of "giving back" to the community. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nemonic on April 08, 2014, 03:00:07 am
@Aurora

That is an epic lens (lenses) you have there.

Is that a concave "ocular" lens in that assembly, so it isn't inverting?

Do you know the rated FL of the individual lenses? I expect they must be quite short to be such a compact design.

I'm amazed someone would sell this lens for £260, as you say the value of one lens alone must be well in excess of that.

Great stuff!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on April 08, 2014, 07:34:54 am
Marphy,

Your program produces this error when trying to do a full backup, Flir E4 1.18.7 with E8 mod but no menu mod. PC is a Dell WinXP laptop.

Aargee.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on April 08, 2014, 07:47:35 am
Aurora, great collection, what about some images taken through the lenses with E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 08, 2014, 09:53:55 am
@muvideo,

No problem with some images, but they aren't that exciting as you just see a larger or smaller version of the original image  ;D

I will take some pictures with, and without, the auxilliary lens fitted and post them. The Inframetrics X3 telescope produces the weirdest images on the E4 due to the inversion and vignetting issues. It does still function well though.

@nemonic,

The rear lens of the FLIR X2 telescope is indeed concave, but the lens is not inverting. As I indicated, the design is different to a standard refractor, so the shape of the rear lens may be unusual as a result.

With regard to the FL of the lenses used in FLIR X2 telescope, I agree that they would need to be very short in a conventional refractor design but, IIRC, the lens structure is not based on conventional lens elements. I will see if I can find the picture of a similar visible light lens that gives an idea of what lives inside this short lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marphy on April 08, 2014, 10:56:35 am
@aargee:
Thanks for the feedback. I hope having fixed the issue, please have another try.
Maybe I should open a separate thread for TIConfig related feedback (bug reports, feature requests etc.) as this thread is already huge enough...  :D

@ixfd64:
Yes, that's the plan if there is enough interest from the community side.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 08, 2014, 01:42:29 pm
@nemonic,

I found a useful site that details lens designs with nice clear pictures.

http://www.pierretoscani.com/echo_focal_length.html (http://www.pierretoscani.com/echo_focal_length.html)

I attach what I believe to be the internal design of the FLIR X2 Telephoto lens.

It is worth remembering that the Index of Refraction for Germanium is approximately 4 as compared to glass which is approximately 1.55. This will have the effect of shortening the lens assembly.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tao24 on April 09, 2014, 05:16:23 pm
@Marphy:
THANKS for your work on the TIConfig!Lots of love here from Copenhagen to you! :-) It work like a charm!
My E4 just arrived today with the mail, and when I wanted to check up on the hack here on the forum, TIConfig had just landed:-)
I had two minor problems when using the program:
I followed the instructions and installed RNDIS drivers and changed to RNDIS USB mode.
With the E4 turned on in normal operating mode, first I could not connect to the camera at all, so I fiddled around a little bit and realised the it was at a different IP address than the default. Default is 192.168.0.2 Mine was at 192.186.1.2
Now I was connected to the E4, so I started the Backup it looked fine but it returned with an error stating that 150 (or so) files had not been copied because they where probably in use. The I tried turning on and of a couple of times with the same result. Gave up..
Then I tried uploading the config file but it could not do it because it could not write the file to the device, so I tried putting into sleep mode with the same result. Im 90% sure that this final step is what I did to make it work: I took out the battery and plugged it back in without turning it on and the config file uploaded perfectly :-) 
After that I had a lot of fun with mixing hot and cold water in the sink :D
Thanx again Marphy!

PS: My E4 is a 1.21.0 - 1.1L
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CarpeTemperatus on April 09, 2014, 07:38:28 pm
Ok, here's the finished and perfectly fitting/working lens adjustment tool I 3d printed this morning. Mark II model for better finger grip. Just looks weird in the pics since it was printed with the plastic that was loaded (clear).

Also attached is a zip with sketchup file, STL file and Makerbot Replicator 2 print file.

Enjoy and feel free to tweak the sketchup file for your own fingers :)

cheers,
george.

Thanks for this .stl, George.  It didn't read into my CAD system quite right and I had a 3D printer report the same problem.  So I re-created your design, added some knurling around the big end, and made a smoother .stl which printed up fine (attached).  Brian Devitus in Seattle did the printing for me (find him on makexyz.com).  For $10 including Priority Mail postage he printed one unit, I got it the day after I sent him the file, and it works perfectly.  He used white ABS plastic which is just fine for this application.  I'm now able to focus down to 3"!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chasis on April 10, 2014, 12:12:27 am
So I can honestly say that I have read through the majority of the thread before I even purchased my e4 and as Murphy's law would suggest, my problem with the upgrade seems to be unique. I've come to the party a little late and my camera has version 1.22.0 and the model number E4 1.1L.

After having some problems getting the camera to connect with my computer, I tried a host of solutions offered here and finally got a network connection through the 192.168.0.2 host. The problem now is the password 3vlig doesn't work. Both FileZilla and WinSCP give me a bad password error when I try to connect.

Did Flir change the password as a way to prevent any further hacking? Any help would be appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 10, 2014, 12:30:02 am
Partial Serial No. ? Calibration date ?

Have you checked your cameras calibration date against my list on page 2 of the 'E4 Useful information thread' ? This should give you an idea whether your camera is a new release of just part of the standard batch that others have been able to modify.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on April 10, 2014, 08:45:22 am
if the problem is just the password?
Do you have a response to "ping" the device?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on April 10, 2014, 09:28:01 am
You can try a "reset to factory" with your TIC and then try to connect with Telnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: VR2XGI on April 10, 2014, 02:21:43 pm
Mike,

Thank You for your video >:D >:D, I want to buy a E4  :)

73 de VR2XGI
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brickmaster on April 10, 2014, 02:26:01 pm
Anyone care to share their opinions on the reporting software?  Is Flir+ worth the investment or is there another that might be better?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 10, 2014, 06:34:58 pm
I wish I  could answer your question about the flir tools +.  I had the eval version loaded but before I had a chance to
really use it, it timed out.  I noticed there are various dealers selling it at various prices, less than flir's list price.  I
am not convinced it is worth the money, I think it is a little pricey.  I think if you took the output of the free flir
tools, used some pdf to word converters, photoshop, and other programs, you could do the same thing, but
would not have a direct route to the end result.

I think it is like the er - e8 thing.  You are actually getting an e8 just don't know it, there are probably more
cost effect programs out there, or work-arounds.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on April 11, 2014, 01:53:19 am
Well the consumer grade IPhoney Flir One is around the corner at under $350. I still won't get one even if they are way cool
http://www.flir.com/flirone/ (http://www.flir.com/flirone/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 11, 2014, 01:55:36 am
Perhaps this is wishful thinking, but I wonder if the Ex series will drop in price once the FLIR One goes gold.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chasis on April 11, 2014, 05:40:50 am
if the problem is just the password?
Do you have a response to "ping" the device?
No, there was no response to the ping during my troubles...

To aurora:
Serial #639204xx
FW:1.22.0
Calibration:3-24-14

UPDATE:
Based on many of the other posts discussing connectivity issues, I was pretty sure it was just some network issue or the fact that Windows sucks and is secretly trying to slowly consume my soul. After rebooting both the camera and computer, deleting and re-installing Flir drivers, and fiddling with network settings, FileZilla managed to get a connection. What was weird is that during the file transfers, FileZilla repeatedly hung up for 3-4 seconds every couple seconds. It was not like the video someone posted showing the update where everything transfers in a matter of seconds.

But it worked and I didn't make a paperweight and the images are great! Thanks to all the contributors to this project.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Teledog on April 11, 2014, 11:32:47 pm
Tried the "TIConfig" utility..not sure if the resolution worked..maybe?..
( had to set the IP to 192.168.1.2)
Tried the menu upgrade & got;
"error uploading package: the remote server returned an error (550) file unavailable (e.g., file not found, no access)."
Now it's in a never ending boot loop.
{Edit}  tried uploading the backup files, takes a while, but eventually get the same 550 error}

V1.21 1.1

Is it bricked? :-[

Recovery? ( yes, I did a backup of the flashFS & flashBFS directories..it "seemed" to work to zip files with the TIconfig util,.. but again, the upload gives a 550 error)
Help?..  :-[
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marphy on April 12, 2014, 12:57:11 pm
Is it bricked? :-[
I guess you are still having device access via USB. So no, your device most probably is not bricked and we will solve the issue.

After some research I was able to reproduce a problem with the package upload and hopefully fixed it with version 0.2.0.

Please download the new version and follow these steps:

Hope to hear from you  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FoxholeAtheist on April 12, 2014, 05:12:39 pm
Hi Marphy,

Having the same "endless boot loop" problem.  I sent you a PM with my E4 directory structure. :)  Thanks for your work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FoxholeAtheist on April 12, 2014, 08:29:21 pm
Hi Freak,

Just for giggles, I tried using that tool to generate a new cfc file, then uploaded it to the camera.  Still stuck in a loop on startup.

For future reference, how long should a cold-start take?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FoxholeAtheist on April 12, 2014, 08:41:01 pm
Success!!!

So, it turns out that somehow, using Marphy's tool, there was an extra "FlashFS" directory where it shouldn't be.  I deleted it, and the E8 version appears to be working, with MSX and everything!

Thanks to Marphy and Freak_Ge.... Freak's post in another thread mentioned that there can be no other files BEFORE conf.cfc in the directory, and that led me to the answer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on April 12, 2014, 08:43:11 pm
Remember to remove the battery (and obviously remove usb cable, duh :P) to make sure you get a cold boot.

Ah, you already fixed it.  :-+ The ever popular "I'll just copy 345987634 folders over there and see what happens" approach.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FoxholeAtheist on April 12, 2014, 09:51:58 pm
So, turns out my inept fumbling was the right answer!  Just got an email from Marphy that the directory I noticed was indeed the problem.

Now, having used TIConfig (with a minor hiccup), I have the E8 resolution and the expanded menu working perfectly.

 :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Podrick on April 13, 2014, 06:45:07 am
I also had this never ending boot loop problem when tried to upgrade with TIConfig. After Marphy's help I managed to delete these extra directorys and got camera working again. I used this new 0.2 version of TIConfig after this and everything went fine. Got menu and resolution upgraded.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Teledog on April 13, 2014, 09:25:50 pm
Marphy gave me the "fix" file also.
And yes, the odd 550 hiccup , tried a couple of times/reboot, etc. , but it now works!  :D

Time to go look for critters in the garage! :P

Again, Thank You Marphy!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on April 14, 2014, 09:58:45 pm
bump
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on April 15, 2014, 03:05:13 am
I made a new 20mm lens holder that uses quite a bit less material and the camera is almost fully unobstructed (if you wanted to use it) - http://www.thingiverse.com/thing:299482 (http://www.thingiverse.com/thing:299482)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 15, 2014, 02:43:49 pm
Just decided to trade my E40 for E4 and hack it for higher resolution ... I use thermal camera mostly for checking electronics prototypes (electronic developer) and higher resolution means way more than E40 "fancy" issues (WLAN ...)

I have few questions:
- Camera (E4) that I will get has some older firmware installed (1.19.?). Shall I first update it to 1.22 from FLIR webpage and then apply steps, described on https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/? (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?)

- To get all the features (like MSX, PiP ...) is it enough just to hack it to E8 like described, or shall I make some more? (I don't need functions, described as Taucher's menu)

- Are there any different versions of Ex models (I mean from hardware view - is there any older/newer series with different options) - I am asking this, because for E40bx there are 2 models, where newer has MSX and some other features that the old one doesn't have (and can't be obtained by firmware update).


MANY thanks and greetings from Slovenia,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 15, 2014, 04:25:07 pm
Why did you decide to give up your e40 for an e4?  You can up the resolution on your e40 just like the e4.
You have now lost your sd memory card, your wi-fi access and your blu-tooth.  The e40 also has a better,
focus-able lens too.  My e40 even shows "e60" in the settings screen, only place it doesn't show e60 is on
the housing itself.  My e40 does not have MSX, but I'm told I can do that in post, flir tools or something.

The only thing I haven't played with on my e40 is changing menus.  My zoom levels are now 1, 2, 4, 8x.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 15, 2014, 04:51:44 pm
- Camera (E4) that I will get has some older firmware installed (1.19.?). Shall I first update it to 1.22
There is no reason to upgrade, and good reasons not to.
Quote
- Are there any different versions of Ex models (I mean from hardware view - is there any older/newer series with different options)
Not as far as we know.

BTW, has anyone opened a recent 1.22 model?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 15, 2014, 05:28:53 pm
You can up the resolution on your e40 just like the e4.

How can I do that? I only found, that this is possible for Ex and Ix series, I expected, that Exx have different sensors. Am I mistaken? (if you did it - can you describe it?)
Also MSX seems to be very good feature, which improves image readability in a great way.

I know E40 has several advantages and is also built better (IMHO), but still - I need camera for its functionality, not for being nice on a shelf ...

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 15, 2014, 05:38:27 pm
To change the resolution is even easier than the latest e4 models.  If all you want to do is up the resolution,
all you need to do is take your conf.cfg file, make the changes and create a new CRC calculation.  I started
with the files from "funzt" and went from there.  You can essentially make your e40 into an e60, that's going
from a $4K camera to an $8K camera for a few minutes of work.  I know the search engine on this site isn't
very good, but if you look hard enough, you will fine the files uploaded from funzt.  You can also experiment
with the settings.  Just make sure that everything is backed up before you make any changes.  Unless you
have a late model e40, you will not have the MSX feature, but I don't know how important that is.

So many of us thought we bricked our cameras, including me, but for the most part, we didn't.  I don't know
what the actual count is for those who actually killed their cameras, I'm guessing, one or two.

Always leave your original files on your camera, all changes are added to NEW files which are downloaded
to the cameras, in case you really screw up, then the original files are still there.

Hope this helps -  Jim

Mike - don't you ever get any sleep?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 15, 2014, 06:13:58 pm
HUH! That's an information!!!
Sure I will take a look at this! Searching ... ;)

Regards,
Gregor

p.s. Which version of FW do you have on E40? I have the latest version and I assume, an additional CRC will have to be implemented (just like with newer firmwares on E4x).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 15, 2014, 06:48:26 pm
My e40 is a couple years old now, bought it new.  I flashed the firmware one time since I've had it,
currently it is 2.23.14.  I don't know if there is anything later for my serial number range.  The CRC01
works on mine, nothing in the files is encrypted, everything clear text, use notepad or some simple
text editor to work with.

Funny story, after I bought the camera, I went to some seminars and heard the cam had zoom.  I
couldn't find it on the menu.  I asked the dealer, jokingly, he said, just get up closer.  Something
wasn't right here.  Later at another seminar, I asked the instructor about the zoom, he asked if I
downloaded the latest firmware.  I did (the version above) and bingo, I then got zoom, x2 woopie.

Of course, now I have x1, x2, x4, and x8 zoom.

I don't know if the current e40 cams use this version, I don't think FLIR is very proactive in closing
up the back doors in their camera, so I'll bet the latest e40 cams have no problem being upgraded.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 15, 2014, 06:52:31 pm
Found this ... Bascally speaking, I should:
- Connect E40 to computer to get access to the filesystem (didn't get that part completely - is there any special driver required for this operation (access to filesystem) )
- Locate files that are in the corresponding folders as the ones in the attached E60 map
- Check for # ID 490xxxxx in one of the files on the camera and apply this ID to all files
- Calculate CRC of each (new) file with V1 tool (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)) and add this information as a last line (+ one CRLF)
- Make backup of all original files (probably renaming them is just fine and they can stay, where they are?)
- Move "new" files to the location of the old files

Is that so?

Regards,
Gregor

p.s. Things will get more complicated, if new Flir's E40 firmware also has "new" protection methods ... However, then this can be done the same way as described here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480))?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on April 15, 2014, 07:08:18 pm
Found this ... Bascally speaking, I should:
- Connect E40 to computer to get access to the filesystem (didn't get that part completely - is there any special driver required for this operation (access to filesystem) )
- Locate files that are in the corresponding folders as the ones in the attached E60 map
- Check for # ID 490xxxxx in one of the files on the camera and apply this ID to all files
- Calculate CRC of each (new) file with V1 tool (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)) and add this information as a last line (+ one CRLF)
- Make backup of all original files (probably renaming them is just fine and they can stay, where they are?)
- Move "new" files to the location of the old files

Is that so?

Regards,
Gregor

p.s. Things will get more complicated, if new Flir's E40 firmware also has "new" protection methods ... However, then this can be done the same way as described here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480))?
I would do step 4 (backup all original files) FIRST before doing ANYTHING!  That way, if access to the camera is somehow trashed, you have the original files and folder structure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 15, 2014, 07:18:25 pm
True! Will do that ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 16, 2014, 03:04:37 am
I've spent a couple hours in this thread and elsewhere, reading about this hack. I haven't seen the answer to my question in bold black and white so I'll just ask it: Is there any good reason for me to be looking for a 1.19.X? I watched the 1.21 & 1.22 video (thanks for that) and it seemed simple enough, but there's still something nagging in the back of my head; something I read (can't remember exactly what/where I read) that has me convinced there's a higher likelihood of bricking a 1.22 or 1.21 and the 1.19 is a safer bet. I have found someone selling (or claiming to sell) a 1.19 but it will take a couple of weeks to get it and honestly it feels fishy. I'd much rather make that 2 day Amazon prime impulse purchase but I feel like that could be even more of a crap shoot.
Please advise

Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 16, 2014, 07:18:12 am
Well, obviously writing of a problem on EEV helps way more than working on it directly :)
I already am on camera through filezilla ... Just backing up ... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 16, 2014, 08:16:51 am
Camera (E40bx, ver. 490xxxxx) still works and works with 320x240 resolution! :) Should work with all Exx cameras I guess.

However, I have 2 questions:
- I can't get thermal fusion to work - any idea here?
- I can't change logo (FlashFS/system/bootlogo.bmp) - I created same size image and replace it, but no difference. Not a big deal actually, but would be nice.


Here are steps for dummies (like me! :) ):
- Download tools from https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)
1. Download E60 files from my previous post (E60 goodies)
2. Modify files with proper serial number and calculated CRC. Mind all described in CRC01 tool text file!
3. Download clonezilla
4. Turn on camera, connect it to wlan. Check its IP in WLAN settings
5. Connect to camera with clonezilla. Use IP, seen on camera WLAN settings, username "flir", password "3vlig"
6. Backup FlashFS folder - there are all files, that will be altered.
7. Replace files on camera with ones, that you created. I suggest only renaming original files with .old extension instead of rewrite/delete. This way original files are backuped on camera as well.
8. Shut down camera, remove battery, wait a bit and then turn camera on (offcourse insert battery first :) ) Voila!

EDITED
Due to unknown reason, with my camera (and latest Flir firmware - 2.23.14) this change only works in a following way:
- Do everything described above (DO RENAME OLD FILES!!!)
- Cold start camera (off, battery out, on)
- Connect to it back, and rename "new" files with .new
- Rename "old" files back to original name
- Cold start camera (off, battery out, on)
This was it works! (also Thermal fusion!)

I would like to thank all of you guys for help you provided!

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 16, 2014, 09:08:47 am
Checked ... :) It worked! Difference is nicely visible, when shooting (pretty) same image ...

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 16, 2014, 03:06:16 pm
I haven't read all 4800+ posts, but for those of who have, what is the success rate for hacking the 1.21 & 1.22? Anybody permanently bricked one yet?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 16, 2014, 04:17:29 pm
As there is a program developed, which does everything almost automatically (also backup) I guess there shouldn't be too problematic. Still, no idea about actual numbers, but I guess if anyone would brick it I am sure he would search for advice here :)

Another question about E40 (hmm, shall I say E60?! :) ):
- How to make FLIR logo on image transparent as it is done in menu hack for E4 (is it possible to simply browse for it and replace it with transparent PNG? Guess not :( )
- Any idea about startup image changing? I did replace the original image with another one (same size, same type (BMP), but loaded is still the original one.

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on April 16, 2014, 04:26:18 pm
One known TIC was bricked in "research". But this was a failed downgrade from 1.21.0 to 1.18.x and not while changing the crypted config.

The bootloader of the bricked TIC was still running. So it should not be impossible to unbrick this device.

It was happen in this thread at about page 270
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 16, 2014, 04:47:40 pm
Another question about E40 (hmm, shall I say E60?! :) ):
- How to make FLIR logo on image transparent as it is done in menu hack for E4 (is it possible to simply browse for it and replace it with transparent PNG? Guess not :( )

go to telnet and type
Code: [Select]
rset .ui.userSettings.overlayLogo false
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 16, 2014, 04:51:20 pm
It was happen in this thread at about page 270
Page numbers are not meaningful, as users can configure the number of posts per page - for me this thread isn't up to 100 pages yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 16, 2014, 05:04:44 pm
Camera (E40bx, ver. 490xxxxx) still works and works with 320x240 resolution! :) Should work with all Exx cameras I guess.

However, I have 2 questions:
- I can't get thermal fusion to work - any idea here?

wrong CRC in ui.d\config.d\conf.cfg ??

edit: I saw you found a solution for a hard reset.
You can also press the power button for 10 seconds - until the red LED inside the camera (visible near the SD slot) shut off.



don't rename original files
Remember that (AIUI) all config files in a folder are scanned, in alphabetical order so if you find somewhere that a setting appears to be set, you should be able to override it by adding another rsc file with a later alphabetical name.


you only need two files, see my Exx config here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)

just for fun I activated MSX with
Code: [Select]
> type \FlashFS\system\service\appcore.d\config.d\conf.cfg
....
caps.config.image.framegrab.fusion.hcf.enabled bool true

but read this:

If you have a Exx without MSX (year 2012) you can activate the MSX menu but you only see a live real image on the LCD.
If you take a picture, then you save a normal MSX jpg on your SD card.

I think, the MSX code is embedded in the windows CE binaries but not in the fpga code.

You can take PiP images and convert then with Flir Tools to MSX images.
with my config files I can change the PiP size smooth over the touch screen
if required: as workaround for MSX I zoom the PiP to fullscreen, then takes the PiP images and convert the image with flir tools to a MSX image
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 17, 2014, 07:18:17 am
It was happen in this thread at about page 270
Page numbers are not meaningful, as users can configure the number of posts per page - for me this thread isn't up to 100 pages yet.

Direct links to posts would probably be more useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on April 17, 2014, 08:45:04 am
Aurora, your lens collection is pretty amazing.

I loved the DIY telescope posted before, looks like the way to go for me. Shame the image is inverted. If I get a Zense lens with a lower focal I'll post results.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 17, 2014, 09:15:39 am
@Pauloven,

I am very pleased with the lenses that I have managed to find to date. I think I have all that I need for now.

I use the lenses with a FLIR PM695 but they work equally well on the E4. Their size is overkill for the E4 though as my PM695 has very large optics at around 55mm diameter. Smaller lenses should work OK with the E4.

I am presentely committed to other tasks so sadly have not had time to 'play' with the lenses on the E4. I will post images when I get a spare few minutes. I will then work on sorting out the image inversion in the Inframatrics X3 telescopes. Note that the Inframetrics Telescopes are circa 1980's but the optics are superb quality. These cost me around $150 on e*ay. Bargain lenses, even though they invert.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on April 17, 2014, 02:41:02 pm
Hi guys,

bad news, I now have a very expensive paperweight: downgrading went fine (well, except for a couple of complains here and there but not of them looked that bad. didn't think to copy/paste the log before hitting "reboot"....) and then, upon reboot of the unit, I got a FAT partition mounted on my laptop with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has

FLIR cam boot
MSDcmd 1.3
ASCO


and then 2 serial (including the one from the unit) and the ethernet MAC of the unit. The unit itself just displays the FLIR logo.

I suppose my best bet is to return it, unless somebody has any brilliant ideas ? (don't feel sorry. Gambling implies losses...)

So there *is* something lurking at the firmware level, I would say...

And a couple of posts later, he said, the device is already connected but has a empty Filesystem...



For the MSX on E40-TIC: In E4 are some variables:
.ui.setup.fusion, (for example: .ui.setup.fusion.fusionAlways bool true),
.image.services.channel..active text "FUSION"  with ["IR" "VISUAL" "FUSION"] as options

maybe one of this is also in the E40 and made MSX visible in the screen of the TIC

And in config (.caps.) of the E4 are this variables:

.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.visual.enabled bool true
.caps.config.ui.image.enabled bool true
.caps.config.ui.image.startMode text "HCF"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 17, 2014, 03:53:38 pm
As I see, it's kind of a problem, because FUSION on E60 stands for so called Thermal Fusion function (which makes part of image IR and part visual, depends on temperatures; i.e. let it be everything over 30 degrees in IR and everything bellow 30 degrees in visual).
As I see now, there is also FUSION word now, used for MSX function (actually I don't even know, if Thermal Fusion exists on cameras with MSX - can someone check this?), which is a bit confusing ...

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on April 17, 2014, 09:52:12 pm
WATCH OUT:Someone reported that TEquipment is selling 1.22.2 so maybe they patched the new hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Methodical on April 17, 2014, 11:29:24 pm
Someone reported that TEquipment is selling 1.22.2 so maybe they patched the new hack.

I just today received an E4 from TEquipment and it had 1.22 on it.  Maybe I got lucky.  TIConfig worked like a charm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 18, 2014, 02:07:27 am
Ah carp. I just ordered from amazon prime :"flir systems" - wondering if that means direct from flir. If so, I'll probably get this 1.22.2. We will see; supposed to arrive tomorrow by EOD.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Teledog on April 18, 2014, 03:56:10 am
Success!! Finally!

Tried many tools for the res/menu fix for the E4. (V1.21.0 1.1L)
Ftool, TIConfig, etc.
None worked ..always in a boot loops or CRC error (and quite frankly, scared me..thought I 'd bricked it...several times).
I must say I was using win7/64, so there may have been an issue with that (Microsoft anal security with command/terminal ..unless in admin mode)

Used Filezilla (yes, I know .."I told you so!")  backed up the FlashFS and FlashBFS directories.
Copied the factory conf.cfc ( from the Flash FS/system/appcore.d/config.d directory) to a separate directory (for backup/safety).

Copied the factory conf.cfc to my old XP laptop, then ran  "cfc_generator" {stefbeer} & ran it..what a breeze!
Renamed the newly created file (conf_new.cfc) to conf.cfc   moved it back to the Win7 machine/Filezilla then uploaded it  ..and success!
Again,... there may be issues with some of the  apps with win7/64?? Just sayin'...
Thanks again stefbeer!!  :D    I owe you a beer or 2!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on April 18, 2014, 09:15:04 am
However, I have 2 questions:
- I can't get thermal fusion to work - any idea here?
If 3rd party software is acceptable solution, see BFIC in my footnote. It can do better thermal fusion (with thermal opacity).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 18, 2014, 04:48:17 pm
I downloaded the batch converter from your link, when running it, shows version .9.  I get a message
saying the version has expired, I don't know where there is a newer version.  When I click on
a source image, I get the error message Runtime Error "5", Invalid Procedure Call.

I'm running windoze 7 professional 64bit, any ideas?

Thanks -  Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on April 18, 2014, 06:05:44 pm
I downloaded the batch converter from your link, when running it, shows version .9.  I get a message
saying the version has expired, I don't know where there is a newer version.  When I click on
a source image, I get the error message Runtime Error "5", Invalid Procedure Call.

I'm running windoze 7 professional 64bit, any ideas?

Thanks -  Jim
I just uploaded version 0.9d - try it. If this error will occur again, send me a screenshot and source image to daves at daves dot cz
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on April 18, 2014, 07:15:57 pm
Ok so I just got a shipment of 15 E4's in... I have already done the resolution hack on one.  Is the menu hack as good of an upgrade as the resolution hack is?  In other words, is it worth doing both upgrades?  Also, is "beta3" in "Reply #910 on: November 09, 2013, 03:01:58 AM" still the most recent/best menu hack?

Thanks for your help in this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 18, 2014, 07:24:56 pm
Ok so I just got a shipment of 15 E4's in... I have already done the resolution hack on one.  Is the menu hack as good of an upgrade as the resolution hack is?  In other words, is it worth doing both upgrades?  Also, is "beta3" in "Reply #910 on: November 09, 2013, 03:01:58 AM" still the most recent/best menu hack?

Thanks for your help in this thread.

Holy crap, that's a lot of E4's!

To answer your question: I don't have an E4 myself, but it is my understanding that the menu hack adds a lot of features that aren't even available in the standard E8. I think some of those features will only work after the resolution hack is applied, although I could be wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 18, 2014, 08:24:31 pm
The Menu hack adds manual control over the cameras temperature span and centre temperature. As thermograpers will know, that is reason enough to install it. ;) Other features such as different colour palets and electronic Zoom are other useful additions included in the Menu Hack. I am still running a customised Beta2A as I do not need the additional meaurement functions of Beta3. My E4 has yet to crash on me and appears rock stable, so no downside to the upgrade from my perspective.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on April 19, 2014, 12:50:18 am
Ok so I just got a shipment of 15 E4's in... I have already done the resolution hack on one.  Is the menu hack as good of an upgrade as the resolution hack is?  In other words, is it worth doing both upgrades?  Also, is "beta3" in "Reply #910 on: November 09, 2013, 03:01:58 AM" still the most recent/best menu hack?

Thanks for your help in this thread.

You planning on selling those suckers? I'd like one, for $1010 thank you very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on April 19, 2014, 12:52:45 am
Camera (E40bx, ver. 490xxxxx) still works and works with 320x240 resolution! :) Should work with all Exx cameras I guess.

However, I have 2 questions:
- I can't get thermal fusion to work - any idea here?
- I can't change logo (FlashFS/system/bootlogo.bmp) - I created same size image and replace it, but no difference. Not a big deal actually, but would be nice.


Here are steps for dummies (like me! :) ):
- Download tools from https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teag321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)
1. Download E60 files from my previous post (E60 goodies)
2. Modify files with proper serial number and calculated CRC. Mind all described in CRC01 tool text file!
3. Download clonezilla
4. Turn on camera, connect it to wlan. Check its IP in WLAN settings
5. Connect to camera with clonezilla. Use IP, seen on camera WLAN settings, username "flir", password "3vlig"
6. Backup FlashFS folder - there are all files, that will be altered.
7. Replace files on camera with ones, that you created. I suggest only renaming original files with .old extension instead of rewrite/delete. This way original files are backuped on camera as well.
8. Shut down camera, remove battery, wait a bit and then turn camera on (offcourse insert battery first :) ) Voila!

EDITED
Due to unknown reason, with my camera (and latest Flir firmware - 2.23.14) this change only works in a following way:
- Do everything described above (DO RENAME OLD FILES!!!)
- Cold start camera (off, battery out, on)
- Connect to it back, and rename "new" files with .new
- Rename "old" files back to original name
- Cold start camera (off, battery out, on)
This was it works! (also Thermal fusion!)

I would like to thank all of you guys for help you provided!

Regards,
Gregor

That thermal fusion is absolutely beautiful. The matching, that is... 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 19, 2014, 01:03:02 am
I received my E4 today from Amazon Prime (order placed 2 days ago), Firmware 1.22.0, model 1.1L. I tried the procedure in Dave's video and the menu hack worked but I lost MSX and all the other modes except thermal and picture. Restored to factory .cfc file and tried Marphy's program, worked beautifully! Lovely program, very simple - dare I say... idiotproof? Thanks Marphy!

thanks Dave, too, and all that paved the way to this awesome hack! Sorry I don't know who you all are, but I love you the same!

This tool will help me immensely in my work (troubleshooting industrial motors/controls/electronics)! If any of you live in or come through Houston, TX, hit me up; I'd love to buy you a beer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on April 19, 2014, 01:09:23 am
You mean Mike? Dave Jones hasn't done anything related to the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 19, 2014, 02:25:56 am
You mean Mike? Dave Jones hasn't done anything related to the hack.

I wasn't referring to Dave Jones, I was referring to DaveWB, who made the walkthrough video for the 1.2x hack. back in post 4520
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787)

Sorry for the confusion, and sorry if I'm misplacing credit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 19, 2014, 12:19:23 pm
Hi All
Trying to apply the resolution and menu enhancement to an E4 with software v1.22. Have been able to connect successfully via RNDIS and repeteadly tried to use the TIConfig app (v2.01) by Marphy. With TIConfig I could change the menu but have not been able to change the E4 configuration. Keep getting the error (550) File unavailable (e.g. file not found, no access). The camera keeps working normally with the E4 configuration instead.
Thinking about using the  "cfc_generator" (by stefbeer) however looking for the configuration file via Filezilla I found a conf.cfg file and not conf.cfc file. This file is in text format and not encrypted. Is this normal? Some here have mentioned that the TIConfig utility adds some extra FlashFS directories that need to be deleted before the modification can work, what are those directories?
Thanks!
JP
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on April 19, 2014, 02:34:02 pm
What is the other (non conf.cfg) file name?
As I saw with my case (E40), there must not be addtitional files in the filesystem for camera to work properly (I renamed old files with.old extension and it wasn't ok!). Can you manually open the encrypted file and see, if it has hack included or not?

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: phubarr on April 19, 2014, 02:46:47 pm
I just received my E4 from Amazon (Prime) literally minutes ago also, and it is version 1.22.0 as well. At the moment I'm not certain if this is good or bad because I've never noticed anybody mention the trailing ".0" before... I'll start researching it now!  I'm so excited!  I've been waiting to buy a thermal imager for YEARS and this hack swung it for me! 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: phubarr on April 19, 2014, 03:20:13 pm
I just received my E4 from Amazon (Prime) literally minutes ago also, and it is version 1.22.0 as well. At the moment I'm not certain if this is good or bad because I've never noticed anybody mention the trailing ".0" before... I'll start researching it now!  I'm so excited!  I've been waiting to buy a thermal imager for YEARS and this hack swung it for me!
It's all fine!
For newbies questions: https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/ (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)
You can make the hack for 1.21/1.22. At this moment there is no other FW than 1.22.0. It's the reason why all of us write only 1.22.
Thank you very much for clarifying, freak_ge!  It is greatly appreciated!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 20, 2014, 01:06:01 am
Hi All
Trying to apply the resolution and menu enhancement to an E4 with software v1.22. Have been able to connect successfully via RNDIS and repeteadly tried to use the TIConfig app (v2.01) by Marphy. With TIConfig I could change the menu but have not been able to change the E4 configuration. Keep getting the error (550) File unavailable (e.g. file not found, no access). The camera keeps working normally with the E4 configuration instead.
Thinking about using the  "cfc_generator" (by stefbeer) however looking for the configuration file via Filezilla I found a conf.cfg file and not conf.cfc file. This file is in text format and not encrypted. Is this normal? Some here have mentioned that the TIConfig utility adds some extra FlashFS directories that need to be deleted before the modification can work, what are those directories?
Thanks!
JP
For newbies questions: https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/ (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)
If you can post a screenshot from the directory structure (e.g. with filezilla), it will help us to help you.
Also if you post your original conf.cfc from /FlashFS/system/appcore.d/config.d/ . If you know what you do with filezilla, I can give back the hacked conf.cfc to you and you have to copy it back to your camera.

Hi freak_ge thanks a lot for your reply. I send a screenshot of the E4 directory and one of the content of the config.d directory. As you can see there is just a config.cfg file, no trace of any config.cfc. As I wrote before, I could change the menus form E4->E8 and back using the TIConfig app, however the configuration file refuses to change. If I can find the config.cfc I will post it here. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 20, 2014, 05:38:35 am
Hi freak_ge thanks a lot for your reply. I send a screenshot of the E4 directory and one of the content of the config.d directory. As you can see there is just a config.cfg file, no trace of any config.cfc. As I wrote before, I could change the menus form E4->E8 and back using the TIConfig app, however the configuration file refuses to change. If I can find the config.cfc I will post it here. Thanks!
I hope you made a backup. Copy complete dirs FlashFS and FlashBFS to your hdd.
If your FW is 1.22 then the config file at FlashFS/system/appcore.d/config.d/ is a .cfc not .cfg
Look at FlashFS/system/services.d/config.d. There must be another conf file. It must be a .cfc. If so, post it here!

<edit>Take a look at my filezilla.jpg. You can see the complete tree. Something like this is helpful! Can you find a conf.cfc?

Hi Freak-ge, thanks for your reply. Apparently the directories are identical. Also I have a backup of both FlashFS and FlashBFS. No .cfc files found in both FlashFS and FlashBFS (searched the backup content), just conf.cfg only. This is getting strange. (The camera is working all right so far).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 20, 2014, 09:42:50 am
Then you have FW 1.19.8.
Make the older hack (crc01).
If you don't know how, send me your conf.cfg from FlashFS/system/appcore.d/config.d/
I will send you back the hacked one.
Thanks Freak_ge, I got a similar impression when comparing the serial # and calibration dates posted in this forum, yes this camera came with v1.198 originally and then updated to 1.22 with Flir tools on a mack. I will give your suggestion a try and report.
Best Regards
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on April 20, 2014, 10:53:38 am
All users of this forum and their families, best wishes on the occasion of Easter.
Many of God's blessing and the joy of being with your loved ones and a lot of strength to overcome the hardships of everyday life.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 20, 2014, 01:53:21 pm
I received my E4 today from Amazon Prime (order placed 2 days ago), Firmware 1.22.0, model 1.1L. I tried the procedure in Dave's video and the menu hack worked but I lost MSX and all the other modes except thermal and picture. Restored to factory .cfc file and tried Marphy's program, worked beautifully! Lovely program, very simple - dare I say... idiotproof? Thanks Marphy!

thanks Dave, too, and all that paved the way to this awesome hack! Sorry I don't know who you all are, but I love you the same!

This tool will help me immensely in my work (troubleshooting industrial motors/controls/electronics)! If any of you live in or come through Houston, TX, hit me up; I'd love to buy you a beer.
Can you tell us the date of calibration and the partly (without the last 3 digits) serial number? Was the camera shipped directly by Flir?
@ phubarr: Can you do it too? Best here: https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/120/#lastPost (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/120/#lastPost)
Sure, probably on monday. I'm out of town for famliy holiday and I left the cam at home.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 20, 2014, 02:22:49 pm
Then you have FW 1.19.8.
Make the older hack (crc01).
If you don't know how, send me your conf.cfg from FlashFS/system/appcore.d/config.d/
I will send you back the hacked one.
Hi Freak_ge Just FYI I tried your suggestion with the CRC01 hack and it worked, thanks for all your help :-+
The difference is quite shocking I have to say. I attach 2 files, before and after for comparison.
The conf.cfg file change was quite simple using the CRC01 hack and transferring the result via RNDIS & Filezilla.
Cheers and Kudos to all involved in figuring out the hack and outlaying the file replacement procedure.
JP
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 20, 2014, 02:46:02 pm
Then you have FW 1.19.8.
Make the older hack (crc01).
If you don't know how, send me your conf.cfg from FlashFS/system/appcore.d/config.d/
I will send you back the hacked one.
Thanks Freak_ge, I got a similar impression when comparing the serial # and calibration dates posted in this forum, yes this camera came with v1.198 originally and then updated to 1.22 with Flir tools on a mack. I will give your suggestion a try and report.
Best Regards
Then you own the first reported successful updated E4 from 1.19.8 to 1.22.0. Interesting is  the fact, that your updated 1.22 is crc01 protect, not crc03.
Is the conf.cfg readable?

Gesendet von meinem PadFone 2 mit Tapatalk 2
I wonder if the later FW looks at calibration files to determine which config file to look at. Or maybe the "L" in the hardware version is used to decide to allow a CRC01'd config file.

Has anyone actually tried using a 1.19.x CRC01'd config file with 1.22..?

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madmax378 on April 20, 2014, 03:00:14 pm
First, thanks to all for this thread.  I bought a refurb E4 directly from Flir ver. 1.22 installed.  I guess they did a fresh firmware install.  I used Marphy's tool and successfully upgraded.  Now I want to make sure I keep the upgrade and can use Flir Tools without worry.

I have a concern about using Flir Tools and it auto updating and/or possibly cross-checking E4 firmware against SNs via the web.  Is this something I need to worry about?  Could I just use FileZilla to get images off the camera then use Flir Tools on the local files?  Or should I stick to a 3rd party software like Dave's BFIC? 

Also, can I just leave the camera USB in RNDIS mode once I'm done with the upgrade?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: strantor on April 20, 2014, 03:28:14 pm
First, thanks to all for this thread.  I bought a refurb E4 directly from Flir ver. 1.22 installed.  I guess they did a fresh firmware install.  I used Marphy's tool and successfully upgraded.  Now I want to make sure I keep the upgrade and can use Flir Tools without worry.

I have a concern about using Flir Tools and it auto updating and/or possibly cross-checking E4 firmware against SNs via the web.  Is this something I need to worry about?  Could I just use FileZilla to get images off the camera then use Flir Tools on the local files?  Or should I stick to a 3rd party software like Dave's BFIC? 

Also, can I just leave the camera USB in RNDIS mode once I'm done with the upgrade?

Thanks
I have similar concerns. I installed flir tools on another pc with the net connected only long enough to complete the install, then disconnected and tried to connect to the e4. It would not recognize the e4 being connected. Not sure why; probably operator error, I'm a noob. But I didn't press the issue; I found that I could get the pics off the e4 using Marphy's program once again, or with filezilla, so I don't know what incentive I have to dance around the fire of flir tools. I've never used it successfully but from what I gather, its only purpose is to suck the pics out and generate reports; I got the pic sucking taken care of, and the BFIC looks like it generates slicker reports anyway, so why bother?  Any good reason to give flir tools another go?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpordonezq on April 21, 2014, 11:56:00 am
Then you have FW 1.19.8.
Make the older hack (crc01).
If you don't know how, send me your conf.cfg from FlashFS/system/appcore.d/config.d/
I will send you back the hacked one.
Thanks Freak_ge, I got a similar impression when comparing the serial # and calibration dates posted in this forum, yes this camera came with v1.198 originally and then updated to 1.22 with Flir tools on a mack. I will give your suggestion a try and report.
Best Regards
Then you own the first reported successful updated E4 from 1.19.8 to 1.22.0. Interesting is  the fact, that your updated 1.22 is crc01 protect, not crc03.
Is the conf.cfg readable?

Gesendet von meinem PadFone 2 mit Tapatalk 2

Yes, both conf.cfg and e8.cfg are plain text, readable.
Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 21, 2014, 09:03:28 pm
Can someone with an E4 and FW 1.22.0 try to unlock resolution with an e8.cfg with crc01?

we tested this without success with firmware 1.21.0

read this and the next post from Rainer:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg399993/#msg399993 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg399993/#msg399993)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 21, 2014, 09:31:20 pm
Some may recall that FLIR told me that to upgrade from FW 1.19.8 to 1.21.0 I needed to return my E4 to them for an special upgrade. We all knew that the 'special upgrade' was unlikely to be for my benefit ! At the time it was suspected that the FLIR upgrade was in fact a change to the boot-loader or some other file set that could not be changed via a simple Firmware update. It would seem that this assumption is correct as no CRC03 is active on a 1.19.8 unit that has been upgraded to 1.22.0 without the 'special FLIR' upgrade  ;)

For those wondering..... there has not been any evidence, or even suggestion, that Firmware's later then 1.19.8 offer ANY improvement in camera performance or capability. In fact there are no known improvements since the original 1.17.x !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 22, 2014, 11:44:20 am
a confirmation:

after updating the Flir Tools to  Version 4.1.14066.1001 (28. Febr 2014 06:53)
http://support.flir.se/custhelp/softwaredownload/rss/feed.xml (http://support.flir.se/custhelp/softwaredownload/rss/feed.xml)

I get this new message:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=90550;image)

conclusion: firmware 1.22 is upgradable from 1.19.8 (older Flir Tools Version doesn't support an E4 update)

http://support.flir.se/CustHelp/FirmwareDownload/rss/camfeed.xml (http://support.flir.se/CustHelp/FirmwareDownload/rss/camfeed.xml)
Quote
FLIR Ex Series (1.22.0)
Montag, 10. März 2014 12:40

FLIR Ex Series (1.22.0)

Main improvements

    Improved shutter handling.
    Various bug fixes.


Alternative 1 (recommended): To update your camera firmware to this version, please use FLIR Tools PC software.

Alternative 2: To update your camera firmware to this version, download and unzip the file below, then install it according to the included instruction.

source firmware: http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 22, 2014, 01:14:17 pm
Hmmm shutter handling ? Anyone notice any bugs in the pre 1.22.0 FW NUC shutter function ? I haven't.

"Various bug fixes" .... not very informative and I am not aware of any major bug in the E4.... anyone know of any ?

Don't think I will need to bother with 1.22.0  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 22, 2014, 01:31:30 pm
Hmmm shutter handling ? Anyone notice any bugs in the pre 1.22.0 FW NUC shutter function ? I haven't.

"Various bug fixes" .... not very informative and I am not aware of any major bug in the E4.... anyone know of any ?

Don't think I will need to bother with 1.22.0  ;)
Have the even fixed the non-display of time/date in the image browser ? that's probably the most obvious bug I've noticed. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on April 22, 2014, 03:45:02 pm
Hmmm shutter handling ? Anyone notice any bugs in the pre 1.22.0 FW NUC shutter function ? I haven't.

"Various bug fixes" .... not very informative and I am not aware of any major bug in the E4.... anyone know of any ?

Don't think I will need to bother with 1.22.0  ;)

Sometimes, when i switch on the TIC with USB plugged in, it shows the Flir-Start-Image and then it rotates with start of the second image(special-edition-image) the TIC-Screen upside down.

And when the TIC is in MSD-Mode and i press the play-archive-Button, it hang up and show "indexing images" in TIC-Screen.
Title: Re: Boot message
Post by: mikeselectricstuff on April 22, 2014, 05:09:59 pm
I have discovered something new!
Do make a cold-start and press a key during boot.
Attached a video from cold-start of my camera.
I showed this in either the review or teardown vid
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on April 22, 2014, 05:12:11 pm
I don't think there is anything new there, depending on the camera, e4 or e40, holding down certain
keys during booting will allow one to see the files being read and loaded as the system boots.

As I understand the only way to guarantee a  cold boot is to momentary disconnect all power, battery
and usb for a few seconds, then re-apply power.

Did I read this message wrong?

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on April 23, 2014, 01:49:09 am
Some may recall that FLIR told me that to upgrade from FW 1.19.8 to 1.21.0 I needed to return my E4 to them for an special upgrade. We all knew that the 'special upgrade' was unlikely to be for my benefit ! At the time it was suspected that the FLIR upgrade was in fact a change to the boot-loader or some other file set that could not be changed via a simple Firmware update. It would seem that this assumption is correct as no CRC03 is active on a 1.19.8 unit that has been upgraded to 1.22.0 without the 'special FLIR' upgrade  ;)

For those wondering..... there has not been any evidence, or even suggestion, that Firmware's later then 1.19.8 offer ANY improvement in camera performance or capability. In fact there are no known improvements since the original 1.17.x !

Also, welcome to the GCHQ watchlist!  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on April 23, 2014, 08:11:15 am
I've just downloaded "Flir IR Camera Player"
http://www.flir.com/cs/emea/en/view/?id=52665 (http://www.flir.com/cs/emea/en/view/?id=52665)

Works well and does what I need it to do (I'm just recoding the thermal profile of some PCBs under various current loads).
When I downloaded it says 30 day free trial, but I cant find the price anywhere and I don't want a nasty surprise because I will need this video function long term.

Has anyone used it past the 30 day trial ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 23, 2014, 08:34:40 am
Oh, I missed something.  :-// For me it was new.
You also get a cold start by long pressing power button.

Q: Can I get a full txt log of the boot process?
Yes - connect to the serial debug port.
I think I put a copy  in this thread fairly early on.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on April 23, 2014, 01:00:53 pm
I've just downloaded "Flir IR Camera Player"
http://www.flir.com/cs/emea/en/view/?id=52665 (http://www.flir.com/cs/emea/en/view/?id=52665)

Works well and does what I need it to do (I'm just recoding the thermal profile of some PCBs under various current loads).
When I downloaded it says 30 day free trial, but I cant find the price anywhere and I don't want a nasty surprise because I will need this video function long term.

Has anyone used it past the 30 day trial ?

I have - the version I have installed seems the same at the one on that page but it never expired or even nagged me. I think that 30 day trial thing is a mistake.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 23, 2014, 01:21:47 pm
"30 day trial" is a mistake on the website

there is no nag screen in current version 2.3.3

see the datasheet
http://www.flir.com/uploadedFiles/DSW-10000_en_41.pdf (http://www.flir.com/uploadedFiles/DSW-10000_en_41.pdf)

Quote
FLIR IR Camera Player
This software is a freeware.
To download, click the following link:
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=89 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=89)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on April 23, 2014, 01:24:54 pm
Thanks guys  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonegate on April 23, 2014, 07:20:31 pm
Guys, I’m in a bit of a pickle here. After reading on this blog about the wonders of the E4 hack and the fact that the new firmware 1.22 was OK to I jumped and got one. It arrived half an hour ago and I noticed its model E4 1.1L … can I hack this hardware model to (L)? I have no time to dig thru this whole information posted here as if I cannot I need to return it asap.
I’m a hobbyist home renovator that just got an old house, and I have reasonable capability to follow instructions ? …
Your help is much appreciated.
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on April 23, 2014, 07:31:07 pm
Guys, I’m in a bit of a pickle here. After reading on this blog about the wonders of the E4 hack and the fact that the new firmware 1.22 was OK to I jumped and got one. It arrived half an hour ago and I noticed its model E4 1.1L … can I hack this hardware model to (L)? I have no time to dig thru this whole information posted here as if I cannot I need to return it asap.
I’m a hobbyist home renovator that just got an old house, and I have reasonable capability to follow instructions ? …
Your help is much appreciated.
Thanks

You can, see this other thread which is for newbies.
https://www.eevblog.com/forum/index.php?topic=28810.0

Questions like yours are being moved to this other thread. So that this thread can remain focused on development.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonegate on April 23, 2014, 09:21:56 pm
Guys, I’m in a bit of a pickle here. After reading on this blog about the wonders of the E4 hack and the fact that the new firmware 1.22 was OK to I jumped and got one. It arrived half an hour ago and I noticed its model E4 1.1L … can I hack this hardware model to (L)? I have no time to dig thru this whole information posted here as if I cannot I need to return it asap.
I’m a hobbyist home renovator that just got an old house, and I have reasonable capability to follow instructions ? …
Your help is much appreciated.
Thanks

You can, see this other thread which is for newbies.
https://www.eevblog.com/forum/index.php?topic=28810.0 (https://www.eevblog.com/forum/index.php?topic=28810.0)

Questions like yours are being moved to this other thread. So that this thread can remain focused on development.

 Looks like It will be fine based on what I could find on the link you pointed. I’ll start reading all that was posted.
Thank you for the quick help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stonegate on April 24, 2014, 02:22:09 am
Hi folks,
first of all, I want to thank you as the community for your efforts you have put into the topic. And a special THANKS to Mike, ds and Taucher being the driving force behind all this fantastic stuff. A huge tumbs up to you! :-+

As a little contribution from my side, I want to present a tool which makes the upgrade process more easy and user-friendly (not to say foolproof ;)). No more messing around with Device IDs, CRCs, SUIDs and all that stuff...
Basically, the tool allows a one-click upgrade with automated backup of modified files.

For the start I have included pre-built package files for both E4 and E8 configurations for up-/downgrade as well as Tauchers menu hack.


You can find two screenshots attached and a short introduction on my blog (http://bit.ly/1hVdRRN).

Direct download link: TIConfig.zip (http://bit.ly/1hycWlB)


If there's enough interest, I may try to clean the source code up a little bit and publish the project on SourceForge or GitHub.

Looking forward to your feedback!

Cheers,
Marphy

I got my E4 1.1L firmware 1.22.0 few hour ago and after reading thru the recommended posts I used Marphy’s idiot proof TICconfig to apply the E8 hack and the updated menu.
All features and functions work and the mod experience was painless.

I purchased the E4 as a hobby tool for home remodeling and since I don’t monetize the use, the purchase of a useful E6 was out of question. Now I am a happy camper in a budget.  :clap:

I would like to thank all the EEV forum contributors for making this possible and Marphy for making all easy and accessible.

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kanzas19 on April 24, 2014, 08:38:58 pm
I have the opportunity to buy E40bx at a good price.
Its measurement range is small because only about 120 degrees Celsius.
Is it will be difficult to increase the range to 650 degrees as the E40?


@ Aurora

Many thanks for the advice. Indeed, I had broken cell in the battery. I threw the electronics of the battery pack to E4.
I bought a charger and 3 pcs 3400mAh Panasonic. One is enough for about 5 h
It's good. Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jaimslaw on April 25, 2014, 03:53:06 am
Going on two months since i sent in via online and hard copy, all purchase related documentation to get the promotional items for the 8 E4s I bought for my home inspection company.  3  E4s were bought from listed Flir authorized sellers, 3 from Amazon, which I understood to be a qualified Flir  affiliate (not purchased from a "Amazon reseller") and two from true tech, a large distributor of equipment which i assume would be a qualified FLIR affiliate (as that term is used in the promotional rules).

Anyone else having a delay or getting any feedback.  Guess its time to make some phone calls to see if I can get a meaningful response and seocndly, if it turns out that i am SOL for some reason.

Bummer, as those spare batteries would be nice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sensor Geek on April 29, 2014, 12:32:14 am
Anyone know the weight of the essential components within an E4? I'd like to tear one down and use the guts on an aerial platform with limited payload capacity. To further save weight my thought would be to power the E4 from the on-board power source, not from the stock battery.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 29, 2014, 07:22:44 am
Anyone know the weight of the essential components within an E4? I'd like to tear one down and use the guts on an aerial platform with limited payload capacity. To further save weight my thought would be to power the E4 from the on-board power source, not from the stock battery.
Can't give a figure but you could get it pretty light - almost all the weight is the rubberised case. Ditch the LCD and you basically have a PCB, the sensor board and the shutter unit. You may want to retain some of the magnesium frame to preserve alignment etc. - not sure to what extent this may be needed for thermal stability, but if you're not too bothered by absolute accuracy it's probably not an issue.  Maybe replace it with a 3D printed sensor+lens holder.
My guess would be well under 100g
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on April 29, 2014, 04:42:53 pm
There are some videos of drones with FLIR cameras on YouTube. You could try asking the owners how they did it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on April 29, 2014, 08:50:59 pm
Long focal lens: can a newton telescope be used as an optic for a thermal imager?

A newton telescope is a very simple reflective telescope, with a parabolic (spherical sometimes)
primary mirror and a flat secondary that bends light laterally. Mirrors are shaped in glass,
and covered by a thin reflective aluminium surface. Sometimes this surface is covered by
another protective and optically transparent layer, but overall it should reflect long wavelenght
IR pretty well.

This is my hand as seen trough the telescope by the E4:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=91847)

But to use the scope as a lens, I should remove the lens on the E4, is it possible to remove the
lens just unscrewing it? I didnt try yet because I'm afraid to expose the sensor to dust.

An alternative to direct sensor projection, is the "ocular projection" method, it is needed an
"ocular", that is a lens of focal lenght way shorter than telescope, in this case the camera can
be used with it's own lens mounted, just like a small photocamera put near the ocular.
The big difference is that the "ocular" must be an IR lens. I hope I can make more tests on this.
If it works, it will be relativlely easy to build a tele lens for cheap.

More to come...

Update:
I made a quick and dirty test with an ebay 50mmFL lens as "ocular" for my telescope (1m FL),
just to see if I can obtain a sort of image, total magnification will be around 20x (1000mm/50mm).

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=91870)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=91872)

images are messy, there is a street going from low right corner of the image, to top left,
and cars passing, one in the first image and two in the second.
The camera was hand held, and the 50mm lens was about distance 50mm from E4 lens front.
Cars were about 600mt away.
The field seem to be be about 2°30', about what I was expecting.
Removing E4 lens should give much cleaner images :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 29, 2014, 09:27:44 pm
Interesting experiment.

I purchased a used reflector type telescope from the local Charity shop for just such experimentation but have had no time to play lately.

I recommend that you do not remove your E4 lens as dust on the micro-bolometer is a real PITA to sort out.

You may be interested to hear that Inframetrics used to offer a thermal camera telescope based on the compact reflector lens structure often found in physically short, high magnification SLR telescope lenses. I will see if I can find a picture of it.

Sadly SLR reflector lenses are of no use as they use a reflector that may or may not be surface metalised and glass lenses are used in the design to shape the image for the camera body. Pity.

UPDATE: Pictures of Inframetrics X10 reflector lens added. Expect to pay in the order of $1500 for such a lens, and that is very cheap considering its original price !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on April 29, 2014, 10:04:22 pm
Nice little lens on Ebay UK :


http://www.ebay.co.uk/itm/200mm-F1-0-Germanium-Thermal-Imager-Lens-Rank-Taylor-IRTAL-Super-Fast-Objective-/271429492535?pt=UK_Lenses_Filters_Lenses&hash=item3f32755f37 (http://www.ebay.co.uk/itm/200mm-F1-0-Germanium-Thermal-Imager-Lens-Rank-Taylor-IRTAL-Super-Fast-Objective-/271429492535?pt=UK_Lenses_Filters_Lenses&hash=item3f32755f37)

(http://i.ebayimg.com/t/200mm-F1-0-Germanium-Thermal-Imager-Lens-Rank-Taylor-IRTAL-Super-Fast-Objective-/00/s/OTYwWDEyODA=/z/OOMAAOxyjxlTKdKn/$_1.JPG)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on April 29, 2014, 10:38:33 pm
Interesting experiment.

I purchased a used reflector type telescope from the local Charity shop for just such experimentation but have had no time to play lately.

I recommend that you do not remove your E4 lens as dust on the micro-bolometer is a real PITA to sort out.

You may be interested to hear that Inframetrics used to offer a thermal camera telescope based on the compact reflector lens structure often found in physically short, high magnification SLR telescope lenses. I will see if I can find a picture of it.

Sadly SLR reflector lenses are of no use as they use a reflector that may or may not be surface metalised and glass lenses are used in the design to shape the image for the camera body. Pity.

UPDATE: Pictures of Inframetrics X10 reflector lens added. Expect to pay in the order of $1500 for such a lens, and that is very cheap considering its original price !

Nice Images, thank you!!

You are right that SLR lenses can be of no use, since usually
have refractive elements in the path.
I was thinking to cheap Newtonian telescopes, that have
reflective only optics. The downside of these optical arrangements
is that are bulky, and not well corrected for field flatness, coma or
spherical aberrations.  But long wavelengths are more forgiving
than visual, and a small sensor like the one in E4 will see a flat field.
It remains to be seen the behaviour of these mirrors on thermal IR.
I updated my previous post with a quick test, using an "ocular" lens.
I'm confident that direct imaging (without E4 lens in the way) will
give good results, but the dust on the bolometer is a big danger.

I definitely need to find a cheap thermal imager for experiments,
my E4 is needed to be in perfect shape for all other things.
Unfortunately my alerts on ebay for firefighting cameras arent
showing much hits.

Mike: I made a 100GPB offer, who knows ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: treefiddy on April 30, 2014, 04:30:39 am
Marphy , your app just worked for a 1.22.0 full hack and a 1.19.8 menu hack.  Beautiful work.

BTW, are y'all still compiling the list of serials/fw/calibration dates?  Thanks guys. ;D :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on April 30, 2014, 06:14:54 am
Marphy , your app just worked for a 1.22.0 full hack and a 1.19.8 menu hack.  Beautiful work.

BTW, are y'all still compiling the list of serials/fw/calibration dates?  Thanks guys. ;D :clap:
Yes it can be found here https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lewis on April 30, 2014, 07:43:13 am
Nice little lens on Ebay UK :

Nice!

I've come across that seller before and he is hugely overpriced, some of the stuff he has has been on for literally years.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on April 30, 2014, 02:51:19 pm
Hi from France !

First post here, please excuse my mistakes in english  :P just got my modified E4, I've been using before a Flir i7 and the extra functions offered by this mod are quite useful. No need to go with the Flir Tools software to deal with advanced measurements tools and other palettes. Thanks to Mike with his incredible work !

I've compared the E4 with the i7 and it seems that Flir made a lot of improvements with the image noise.

I made this to compare :

i7 :

(http://image.noelshack.com/fichiers/2014/18/1398867223-ir-0350.jpg)
(http://image.noelshack.com/fichiers/2014/18/1398868092-ir-0351.jpg)

E4 :

(http://image.noelshack.com/fichiers/2014/18/1398867403-flir0011.jpg)
(http://image.noelshack.com/fichiers/2014/18/1398867875-flir0007.jpg)

Like the E4' images are softened ... ?
The enlarged FOV is quite a good news for me, I work as a HVAC technician and we almost never have space to check the equipment, I already love my E4 for that !

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 30, 2014, 04:31:53 pm
Hi Sk-rmouche,

Welcome to the Forum.

The wide FOV of the E4 has attracted much positive comment amongst professional thermal camera users. Many suffered the same 'lack of space' challenge as yourself when using a TIC. The only option open to them on other FLIR camera models was a VERY expensive additional 45 Degree lens. Such an optional lens actually costs more than an E4 !

I am used to using industrial FLIR cameras such as the FLIR PM series. These come as standard with a 24 Degree FOV, and to widen it to 45 Degrees requires a large auxilliary lens and lots of cash. I am fortunate enough to own both the 45 Degree and 12 Degree optional auxilliary lenses but I would have hated to have had to pay the retail price on them when new.

On the down side, the 45 Degree standard FOV can be a little wide for some applications and so a telephoto lens is needed to narrow the FOV. As the E4 is not designed to take auxilliary lenses, some creativity is needed when it comes to adding one, as in the case of the ZnSe close-up lenses. With the arrival of the electronic Zoom function in the new 'taucher' menu at least it is possible to halve the FOV by selecting X2 Zoom(at the cost of losing optical resolution), and this often meets my needs when I cannot get close enough to a target when operating mobile.

All in all, I am very pleased that the E4 has the wider FOV. It makes it a very versatile unit for most users.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on April 30, 2014, 05:10:38 pm
I agree with you, optional lenses are highly priced for me ( and certainly many others ), I have X2, X4 and X8 electronic zoom, and both X4 and X8 are quite unusable, unless accuracy and sharpness aren't required !

Maybe it can be useful to occasionally detect heat elevation or moving part at something like 10-15 meters... But for the price of the E4, it's more than I could afford with an official E8, and clearly a nice update for my i7.

By the way, I saw on the web that i7 sensor is actually 320*240 pixels, but stuck @ 140*140 for rev 2 model, there's nothing new about that right ?

I'd love to play with InSb cooled sensor, but you don't want to look the price :p
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 30, 2014, 08:18:41 pm
I have worked with cooled thermal cameras, and they do provide superb sensitivity and a very clean image. When I first saw the FLIR PM570 demonstrated, I thought it a very noisy image and was not impressed. I was used to a superb PM550 with its striirling cooled detector.

The thermal cameras that require cooling sadly have their drawbacks, as I am sure you already know. The ones that require liquid Nitrogen for cooling are a PITA to run, and the ones that use bottled Argon gas discharge cooling are similarly so. The Peltier cooled cameras are 'OK' but not as good as other cooled options. The ultimate for me was a stirling cooler that provided the required low temperatures of around -196 Degrees Celcius, BUT they are mechanical coolers that require re-gassing and rebuilding all too often. Such maintenance can be very expensive. FLIR used to charge around GBP5000 per service. For this reasson I have avoided buying cameras that have stirling coolers as their accumulated run time, time since last service, and condition of cooler is often not known. These cameras become very expensive paperweights if you need a cooler rebuild, or even a re-gas.

I have a lovely, 'as new' Agema 880 industrial thermal camera.....it is Liquid Nitrogen cooled, but as I have no access to Liquid Nitrogen, it is just a memento of the early days of thermal imaging, when I used just such a camera to good effect with its associated BRUTE computer and Husky computer. My poor 880 sits in its huge metal case, along with the controller, monitor and Husky, in my garage. One day I will decide what to do with it. It is actually more useful and valuable as a source of Germanium lens elements as the camera has large, high quality lenses that work in the Long Wave band.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on April 30, 2014, 08:45:40 pm
Yeah, one way to go if I had some extra €€€ is to buy used cryocooler on eBay, to make LN2 at home, and then use it when I want crystal clear image, but anyway I don't have cooled thermal camera.

The Flir T640 has a nice 640*480 bolometer, and I think it could be sufficient for a lot of purposes. Does bolometer operate with less noise as it's cooled ? I know that the E4 use TEC element to heat up the bolometer around 30°C, just to avoid drifting, don't remember if Mike actually shows it in the tearing video ...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 30, 2014, 09:56:16 pm


The microbolometer is an inherantly noisy thermal detector but manufacturers are using various techniques to 'filter' some of the noise from the images these days. I have not met a cooled microbolometer yet. Most microbolometers wer temperature stabilised but FLIR recently advised me that the E4 does not have a thermo-electric cooler (or heater) to stabilise teh sensor. They are working on calibration maps that extrapolate microbolometer data corrections based on the ambient temperature measured on the chassis. This is why Mikes camera went crazy when he sparayed freezer spray on that chassis sensor.

The FLIR E4 is built to a price, and a low one at that. I can forgive the removal of temperature stabilisation as it meets the needs of the intended market without such. I use my PM series cameras for work where more temperature accuracy is needed.

The cooled sensors are usually semiconductor based and these need the cooling in order to reduce the level of their internal noise that would otherwise mask the energy that they are receiving from the lens. Similar techniques are used on professional radio telescopes with super low noise front end amplifiers etc. Liquid Nitrogen temperatures make seniconductoors nice and quiet. My Thermocam 880 at room temperature, without the Liquid Nitrogen, does not produce any form of thermal image, just rando noise.

I investigated buying some Liquid Nitrogen fron BOC in the UK but the Dewars are very expensive here, and there is the ever present risk of killing yourself through hypoxia if a major spill occurs ! I'll stick to microbolometers and BST sensors for now.... nice and safe.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on May 01, 2014, 03:58:03 pm
Most microbolometers wer temperature stabilised but FLIR recently advised me that the E4 does not have a thermo-electric cooler (or heater) to stabilise teh sensor. They are working on calibration maps that extrapolate microbolometer data corrections based on the ambient temperature measured on the chassis.

As Ex and Exx cameras obviously have the same sensor, but different (specified) thermal sensitivity (E30: < 0.1 °C, E40: < 0.07 °C, E50/60: < 0.05 °C - source: http://www.flir.com/cs/emea/en/view/?id=41959 (http://www.flir.com/cs/emea/en/view/?id=41959)) do you think, that they also have different correction maps? If so - does i.e. hacked E30 to E60 still have "old" thermal sensitivity, but higher (image) resolution, or does the hack also "unlocks" maps for higher thermal sensitivity? (probably yes, as the firmware is the same for all series)

Regards,
Gregor

p.s. A newbie question: would it be possible to have some "ND like" filter for thermal camera in order to measure (actually view only - don't need to measure absolute temperatures) higher temperatures? (with original camaera only up to 160 degrees)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on May 01, 2014, 06:06:31 pm

but FLIR recently advised me that the E4 does not have a thermo-electric cooler (or heater) to stabilise teh sensor. They are working on calibration maps that extrapolate microbolometer data corrections based on the ambient temperature measured on the chassis. This is why Mikes camera went crazy when he sparayed freezer spray on that chassis sensor.

Oh okay, my mistake  :-\ I was believing that Flir is actually using TEC element to control the module temperature, if it goes above 30°C, TEC is cooling, and under 30°C, reversing polarity and TEC in heat mode.

But then, why is there a ~ sign before the temperature, around 30 seconds after power on ? There's not such thing with my i7. I should compare that on a fixed heating resistance  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 01, 2014, 06:42:09 pm
 Sk_rmouche,

I thought along the same lines as you and believed that the E4 would have TEC temperature stabilisation. I stated that belief here in the forum and Mike rightly commented that there did not appear to be enough room behind the micro-bolometer wafer for a TEC. I decided to ask FLIR CS for their comments on the cameras temperature stabilisation method. Their response surprised me. They stated that the micro-bolometer naturally sits at around 30 Degrees C and this is why the temperature calibration tables are centred on that  temperature. No TEC is used in the Ex series.  I can't say that I was exactly happy to hear the news, but this is a budget camera after all...... what about the E8 that costs a lot more though......no temperature stabilisation is not great when working at narrow temperature spans as I do.

Regarding the Tilda (~) symbol, it is believed that this is shown for a period until the electronics and micro-bolometer rise to their nominal operating temperature. Only then will the calibration and temperature correction tables be valid, due to the lack of the TEC.

Take a look at this post and those that follow: (#112 onwards)

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg412095/#msg412095 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg412095/#msg412095)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on May 01, 2014, 08:43:35 pm
Thanks for the link, that's helpful. So lenses of Ex series aren't made of Germanium  :-+

I should open my i7 to see if it's the same way about TEC stabilization or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 01, 2014, 09:31:10 pm
Not an answer but maybe of interest to you:

http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)

http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf (http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf)

Note that the Ex series use a completely different micro-bolometer format to that of the ix series, and there is no hermetically sealed hard vacuum module, as the vacuum is integrated into the micro-bolometer wafer layer structure. The E4 is using micro-bolometer technology developed as part of as cost reduction process for automotive TIC applications. I believe I covered this and the lens details in my "E4 Useful information" thread. Worth a read ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 02, 2014, 12:54:23 am
Hi guys
First time posting
I have been looking at this E4 hack for few weeks
Worry that I missed the opportunity to get a E4 with performance of E8
So today I went to order one from my local store. $1000 Canadian
Might take 2 weeks but I can't wait, keep my finger cross that at least it is 1.21 or 1.22 where can still be hacked.
I was waiting for Flir one but still not out yet and only VGA resolution.
My worries is anyone have any problems after the hack?
And can it be reversed to original factory setting in case of warranty issue?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gallymimus on May 02, 2014, 02:07:35 am
Hi guys
First time posting
I have been looking at this E4 hack for few weeks
Worry that I missed the opportunity to get a E4 with performance of E8
So today I went to order one from my local store. $1000 Canadian
Might take 2 weeks but I can't wait, keep my finger cross that at least it is 1.21 or 1.22 where can still be hacked.
I was waiting for Flir one but still not out yet and only VGA resolution.
My worries is anyone have any problems after the hack?
And can it be reversed to original factory setting in case of warranty issue?
Thanks

Good question for the Q/A newbie thread:
https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/ (https://www.eevblog.com/forum/testgear/flir-e4-teardown-qa-and-newbie-questions/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kay on May 02, 2014, 02:55:12 am
Hi,

anyone knows if the E4 units that ships from Flirdirect as of now, May 2014,can still be hacked and what firmware they run?
Thanks for any input.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on May 02, 2014, 03:00:00 am
Hi,

anyone knows if the E4 units that ships from Flirdirect as of now, May 2014,can still be hacked and what firmware they run?
Thanks for any input.
It is prolly still 1.21/1.22, so yes, it can be hacked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 02, 2014, 10:02:08 am
FLIR handed this community a wonderful gift by using a 320x240 micro-bolometer in all its Ex series camera, and then not protecting the software configuration hobbling adequately. Sadly the newer low resolution cameras, such as the FLIR One will likely use a dedicated low resolution micro-bolometer, or one that is hardware crippled to prevent users upgrading them. It is my belief that FLIR have learnt a valuable lesson here, and will not repeat the mistake on new hardware. The FLIR Ex series (and some other earlier cameras) will likely be the beginning and the end of a superb opportunity for everyday users to own a high budget TIC capability on a relatively low budget. Thank you FLIR  :)

Anyone still sitting on the fence wondering whether the E4 is a good buy should think very carefully about the above. He/She who hesitates is lost  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on May 02, 2014, 11:07:50 am
I already almost missed the chance when I was on the fence and they put out 1.22 |O luckily the forum came through with the mod for that and I finally jumped off the fence :D  I do agree, do not pass this chance up.  It may never come up again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 02, 2014, 05:46:22 pm
I wouldn't  be surprised if at some point the E4 gets replaced by something with a Lepton core
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 02, 2014, 06:14:17 pm
The hacked E4's on eBay are probably what prompted FLIR to patch the original hack. However, I still don't think FLIR has much to gain by making new hacks impossible. It's not like the eBay buyers would have bought an E8 otherwise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on May 02, 2014, 07:44:01 pm
There are a few E4 stock TIC's for around 1K still.  Some even state the firmware version.
Guess the E4-E8+ hacked versions are still less than a stock E8, but the hackers are making a big profit!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 02, 2014, 11:23:15 pm
There are a few E4 stock TIC's for around 1K still.  Some even state the firmware version.
Guess the E4-E8+ hacked versions are still less than a stock E8, but the hackers are making a big profit!
Seems like they were going for about $1300 BIN a couple days ago.

1300
-1000 Camera
-169 eBay PayPal fees(about 13%)
-30 shipping
______________
~$100 profit

I've had a bunch of people write to me from the tutorial videos I posted because they somehow ended up messing up their camera and by the time I'm done helping them get it fixed it would have been easier for them to just buy a pre-hacked one from a seller online. For the inexperienced or for those who aren't 100% confident I think it would be worth the extra, but it is becoming alot easier to hack especially with TIConfig but even then that is not very stable as when I used it it would put a FlashFS subfolder within the FlashFS folder so I went oldschool with cmd or stefbeers utility. There was a guy from Australia who messaged me and told me that he paid his friend $400 to hack his camera for him and he said he watched my videos when he did the hack. He ended up decrypting his cfc file, and encrypted the configTEMPLATE.cfg file without putting in his serial or CRC and then just re-encrypted it. When I told him he acted like it was a little step he missed LOL
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 03, 2014, 12:23:34 am
so hows the stock level at TE? i hope they stock more ...
Calright Instruments has good customer service and ships same day, unlike what I've found from TEquipment. Calright also offers a much better price as they are the authorized Master Distributor for their region. I'd suggest contacting David Swanson at 866.363.6634 and he can probably give you a very fair price. Tell him I sent you too :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on May 03, 2014, 11:17:37 pm
Dave,
   We should the same day.  We have 29 units in stock and 100 more due in next week.  We will have more stock than ANYONE in the entire world. 
I trust this is not a shameless plug.  Plugs are fine but we do ship the same day for all USA orders for items in stock ordered before 3pm.

Thanks!
Evan Cirelli

TEquipment.NET
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on May 03, 2014, 11:20:57 pm
Also there is no such thing as a Master Flir distributor.  As much as someone may say they are the master in the region.  It sounds good :)  Heck I would love to put that on my site but we cannot.

Maybe I can lobby Flir for that tile?  Hope you are enjoying the camera.  It is a heck of a unit! 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 04, 2014, 01:10:20 am
Dave,
   We should the same day.  We have 29 units in stock and 100 more due in next week.  We will have more stock than ANYONE in the entire world. 
I trust this is not a shameless plug.  Plugs are fine but we do ship the same day for all USA orders for items in stock ordered before 3pm.

Thanks!
Evan Cirelli

TEquipment.NET
I'd be more than happy to supply order numbers if you PM me or simply ask Rick B, he'll know who I am. My first order from you guys was perfect, but my 2nd, 3rd, and 4th got messed up everytime, you guys have never shipped same day for me and yes the cameras were instock which is why I ordered from you. Went to Calright and they actually shipped same day plus they ended up giving better pricing by about $50. As far as master distributor, that's what they told me, I guess that could be a title that they gave themselves but I guess it really doesn't matter to me if FLIR gave that to them directly but the price they gave certainly reflects it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tequipment on May 04, 2014, 03:16:25 am
Dave sent me his order numbers.  He is right.  He had a less than stellar experience  I will look into this on my side with my management team.  I assure you though usually though this is not the case.  No matter what I really do appreciate the feedback.  Thank you.

3roomlap  PM me for an eevblog discount code. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: echen1024 on May 04, 2014, 03:54:49 am
I have only ordered with Tequipment once, but can vouch for them. It is true my order was not shipped same business day, but overall I had a fantastic experience with Dawn and the sales team. Unfortunately, I could not purchase my E4 from them since they were out of stock ATM, and the 1.21 hack had not yet been discovered. I purchased from Bell NW, who matched the 6% and were excellent as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tangmu on May 04, 2014, 04:57:07 am
I bought from Calright on EBay with a best offer accepted for less than $995, it shipped the same day, and was 1.22.0 like they advertised.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on May 04, 2014, 10:58:07 am
well all i need now is to buy 1 FLIR, is there some kinda strict policy that one cannot buy from overseas, or if you are authorized you are not allowed to sell overseas? or if these are shipped overseas, they will get stopped at customs like some dangerous goods?

Can't you buy the camera locally?

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 04, 2014, 07:26:32 pm
The matter of export controls on the Ex series has been discussed previously.

The issues with the E4 are as follows:

1. In spite of what some may believe, the E4 is covered by the ITAR regulations as it is thermal imaging technology. The good news is that ITAR PERMITS the E4 to be exported to countries that are deemed 'friendly' to NATO, without an export licence requirement. However the seller must obtain the end user details....name, country of destination and address before despatch. This requirement is usually met by the use of a Credit Card as that provides the relevant 'tracking'. To find out which countries do not require an export licence please Google ITAR and read the rules on one of the many Thermal Camera dealer web sites.

2. It is an offence under ITAR to sell or on-pass an E4 to a country or national who is considered hostile to NATO. That is to say, if you act as an agent to provide E4's to unsavoury persons, you are liable to prosecution, a fine and a prison sentence. No kidding....we have a Brit who is presently in a US Prison for such dealings.

3. Dealers in the USA are scared of getting on the wrong side of ITAR and going to Prison. They therefore often state that it is not legal to export the E4. An incorrect statement but understandable as ITAR can be both scary and confusing to the average Joe.

4. US dealers often hate international sales due to the required paperwork involved for no extra profit. Some charge large 'paperwork' fees, especially on ITAR licenced thermal cameras (like my PM695's).

5. Dealers may be concerned about exports upsetting FLIR as they are exporting into other markets. this could be in breech of their dealer agreement....unconfirmed. Not uncommon in the consumer electronics marketplace.

6. Dealers are often wary of international purchases on high cost items for fear of fraud. Credit card fraud is rife these days and the dealers feel exposed when exporting to some regions of the world.

7. The E4 contains a Lithium Ion Battery. It is becoming increasingly complicated to ship a product that contains a Lithium Ion battery and some dealers are concerned about making a mistake so refuse to export, or ship by air. In fact the E4 just needs a certain warning label (available on the internet) in order to ship it by air. Some courier companies are still refusing to ship anything with a Lithium battery in it or charge huge processing fees....one courier charged my employer $1500 to 'process' a single phone battery shipment of 1 battery  :o  Its gone kinda mad on that front !

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DJ on May 04, 2014, 08:47:05 pm
Something of a sad commentary.  We've had a wonderful opportunity to get an exceptional piece of kit, and it is being wrecked by greed. Hacking something for personal use is one thing. Using the members to help one flip product for personal profit is not right.

I've had designs nicked and put up for sale, and the end result is reluctance to share.

So short term a hundred bucks or so, and long term a dead end.

Hacking something for personal use is one thing.  Buying dozens of instruments and flipping them is quite another.

Relatively new here, but hope this is an anomaly.

:(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on May 04, 2014, 09:54:19 pm
Plugs are fine but we do ship the same day for all USA orders for items in stock ordered before 3pm.

I ordered mine on a Monday after 3PM, and it didn't ship until Wednesday.  No big deal, but you probably shouldn't make that claim.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 05, 2014, 02:10:02 am
I've had designs nicked and put up for sale, and the end result is reluctance to share.

How? Through a board fab?

I think the main reason this is happening if the availability of the hacking tools. When it required editing of filesystems and other work, scammers/flippers/profiteers were scared away. One it became as easy as installing a utility and clicking a few buttons, the profiteers immediately flocked to it.

I would suggest that all of the utilities be removed, as they are making it harder for us to develop hacks and improvements. If committing murder was as easy as this hack, we'd all be dead.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on May 05, 2014, 05:57:31 pm
Hmmm. Looks like manual level/span is being added to (er, ah, enabled on) the E8... and it's on sale! http://www.tequipment.net/FLIRE8.html?v=7249 (http://www.tequipment.net/FLIRE8.html?v=7249)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 05, 2014, 06:08:30 pm
Perhaps a little off-topic, but does anyone know what kind of cells are used in the FLIR Exx batteries (http://store.flir.com/product/e-series-battery)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 05, 2014, 06:09:40 pm
Hmmm. Looks like manual level/span is being added to (er, ah, enabled on) the E8... and it's on sale! http://www.tequipment.net/FLIRE8.html?v=7249 (http://www.tequipment.net/FLIRE8.html?v=7249)
YAY ... at least Flir has realized that this function might be worth several thousand money units premium - and does not cost anything in development :)
Hopefully one day they will realize that one great product at a great price would sell in quantities that would overwhelm their imagination - but chances are great that somebody will try to be "smart" and introduce crippeling or bad specs again.

Steve Jobs realized this at Apple - make just a few different products, but make them absolutely great in every aspect.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 05, 2014, 09:16:31 pm
FLIR Tools Android Mobile:

This may be slightly off-topic, but I think somebody can answer my question.  I have an e40 ->e60,
want to put flir tools mobile on an android tablet.  Flir requires that the app, "flir tools mobile," be downloaded
via google play store, which this tablet does not support.  I did install it on my android phone.  I'm wondering
if the installation program is still on my android phone, and could be copied from it over to the tablet and
be installed.  I don't see where any policies are broken here, just that this tablet company chose to use
amazon appstore instead of google, and amazon appstore does not have flir tools.  Would this work?
Of course, it would require that the installation program still be on my android phone, and not deleted.

Jim

Quote
Extremely unlikely. Firstly the USB port does not output 5V, so almost certainly no host/OTG support in hardware.
Thats a shame, Flir tools mobile App looks good , Its the only Android App I've found, and I think it only works with WIFI connection ( I might be wrong ) .

If it's not compatible with your tablet it won't install properly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on May 05, 2014, 11:11:35 pm
Edit:
Problem solved.  Earlier I asked if it would be possible to pull the program (FLIR Tools Mobile) from another
device and plant it on my tablet.  I did better than that, FLIR in Sweden emailed two APK files to me, I sideloaded
them on my tablet.  The email was received on my PC, I connected a usb cable between the tablet and the PC,
copied the files, executed them on the tablet, and bingo, the program installed.

I suspect this is a common problem, but it took somebody in Sweden to fix it, although the local tech support
tried, they didn't solve the problem.

The wi-fi works great, I can now create a hot spot on my tablet, run the FLIR Tools Mobile, and see my camera,
edit the photos, etc.  And of course, can do the same via the wi-fi in my office.

I hope this helps somebody who might have had the same problem, Sideloading!

Jim


I returned the tablet, got tired of fighting it, absolutely have to have google play store. 
Got another with google play, downloaded flir tools mobile, now trying to
figure how to make the camera and tablet talk together.  Flir used to have some tutorials, I can't find them.
If I remember right, I have to create a hot spot with the tablet, have the camera find it and connect to it, right?
I'm trying to find how to create a hot spot with this "Visual Land" tablet.  Downloaded a hot spot app, onwards.

All works fine when I use my htc android phone as a hot spot, but it's screen is too small for this sort of stuff.

edit:  I found a copy of the FLIR Tools Mobile pdf, but it simply wants us to connect us to a wireless network,
again, I believe the tablet has to create a hotspot, right?

Can somebody point me to some flir tutorials on pairing the cam and tablet?

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 07, 2014, 08:06:50 am
Hi Guys,

First time writing here ;)
I was a friend of Camera modifications too.
I wrote a remote control Software for the FLIR Ex (I also really link the Exx, but it is financial out of range).
Here is the Description: http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

A Copy is now selling for 30€ on ebay: http://www.ebay.de/itm/201086125469 (http://www.ebay.de/itm/201086125469)
(try to compensate a bricked E4, after trying to flash 1.18.7 to a 1.22 Camera :palm:... Device was sent to FLIR for repair)

Additional...happy hacking ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on May 07, 2014, 09:30:59 am
OK Very BIG LIKE :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 07, 2014, 12:06:11 pm
@Joe C

What did FLIR charge to re-flash your E4 please ? This information may be useful to others who end up with a unrecoverable bricked E4.

Is your software going to be available in English please ?

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 07, 2014, 12:49:42 pm
What did FLIR charge to re-flash your E4 please ? This information may be useful to others who end up with a unrecoverable bricked E4.
Hello,
The Camera is still by FLIR. I hope to receive it in the next 2 weeks.

Hat i have done:
1. Set Camera in RNDIS mode
2. open "FLIRInstallNet.exe" from /bin folder (FLIR Tools)
3. Download old firmware  (flir_ex_pn639_v1.18.7_update_pack.zip) from somewhere in this forum
4. flashing the "Z3comb_v1.18.7.fif"
5. Camera restarts later and was found as new Volume (ASCO 23.9MB)
6. only the FLIR logo was shown and the Asco volume... that's it.
I tried to use the hardware UART with "usbfn RNDIS" but nothing happens.
I copied the files inside the ASCO Volume (see attechment). If I store files there and restart the Camera, the files are disappeared.

I have the theory, that FLIR store some command file there and if the Camera restarts they have additional a working RNDIS mode for reflash.
However, they don't will let us know this...

Is your software going to be available in English please ?
The Software is partly in English (the words are shorter ;) ) but more in German. You can see in Schreenshots.
I could look to make it more Multilanguage... If my kids let me...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mago on May 07, 2014, 01:17:00 pm
Hi Joe,

your software looks very promising but... pls ...  |O translate it to english! I will buy a copy at once, if can understand it :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 07, 2014, 03:29:06 pm
Hi Guys,

First time writing here ;)
I was a friend of Camera modifications too.
I wrote a remote control Software for the FLIR Ex (I also really link the Exx, but it is financial out of range).
Here is the Description: http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

A Copy is now selling for 30€ on ebay: http://www.ebay.de/itm/201086125469 (http://www.ebay.de/itm/201086125469)
(try to compensate a bricked E4, after trying to flash 1.18.7 to a 1.22 Camera :palm:... Device was sent to FLIR for repair)

Additional...happy hacking ;)

I really wish I could understand German right now!
Are my eyes playing tricks on me or did you manage to install a WiFi or BT adapter into a hacked up E4? (does it work?)
Looking at your remote control software page it looks like you are doing sequence or video capture as well - how long can it record for? (and can it record with out the UI showing up - raw video)
Would love to know more about the application but Google translate is just not working for your site for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 07, 2014, 03:37:00 pm
@OrBy,

You can add Bluetooth to any device that communicates via RS232 if the levels are correct. A small level converter is sometimes needed. From memory, the E4 uses RS232 levels that are compatible with the many self contained Bluetooth transceivers available on e*ay. Such units are designed for interfacing to UARTS, so are ideal for the task, as no Bluetooth drivers or stack is needed on the host device. You are just converting Bluetooth data to RS232 format.

http://www.ebay.co.uk/itm/1-PCS-Arduino-HC-06-Wireless-4-Pins-Bluetooth-RF-Transceiver-Serial-Module-EA-/360920189987?pt=UK_Computing_USB_Bluetooth_Adapters_Dongles&hash=item5408850c23 (http://www.ebay.co.uk/itm/1-PCS-Arduino-HC-06-Wireless-4-Pins-Bluetooth-RF-Transceiver-Serial-Module-EA-/360920189987?pt=UK_Computing_USB_Bluetooth_Adapters_Dongles&hash=item5408850c23)

http://www.ebay.co.uk/itm/30ft-Wireless-Bluetooth-RF-Transceiver-Module-RS232-TTL-HC-06-for-arduino-ItS7-/141227113401?pt=UK_Computing_Other_Computing_Networking&hash=item20e1cabbb9 (http://www.ebay.co.uk/itm/30ft-Wireless-Bluetooth-RF-Transceiver-Module-RS232-TTL-HC-06-for-arduino-ItS7-/141227113401?pt=UK_Computing_Other_Computing_Networking&hash=item20e1cabbb9)

http://www.ebay.co.uk/itm/1-PCS-Pass-through-Module-51-Single-SPP-CA-Bluetooth-Serial-Module-Wireless-Data-/371035601728?pt=UK_BOI_Electrical_Components_Supplies_ET&hash=item566371fb40 (http://www.ebay.co.uk/itm/1-PCS-Pass-through-Module-51-Single-SPP-CA-Bluetooth-Serial-Module-Wireless-Data-/371035601728?pt=UK_BOI_Electrical_Components_Supplies_ET&hash=item566371fb40)


All 'cheap as chips'  :)

OR, if Wi-Fi is preferred......

http://www.ebay.co.uk/itm/HC-21-Embed-WIFI-to-Serial-Port-Wireless-Module-UART-Brand-new-/351058461570?pt=UK_BOI_Electrical_Components_Supplies_ET&hash=item51bcb70382 (http://www.ebay.co.uk/itm/HC-21-Embed-WIFI-to-Serial-Port-Wireless-Module-UART-Brand-new-/351058461570?pt=UK_BOI_Electrical_Components_Supplies_ET&hash=item51bcb70382)

Wi-Fi to RS232 module and still pretty inexpensive  :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 07, 2014, 07:14:46 pm
Hi Guys,

First time writing here ;)
I was a friend of Camera modifications too.
I wrote a remote control Software for the FLIR Ex (I also really link the Exx, but it is financial out of range).
Here is the Description: http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

A Copy is now selling for 30€ on ebay: http://www.ebay.de/itm/201086125469 (http://www.ebay.de/itm/201086125469)
(try to compensate a bricked E4, after trying to flash 1.18.7 to a 1.22 Camera :palm:... Device was sent to FLIR for repair)

Additional...happy hacking ;)

I really wish I could understand German right now!
Are my eyes playing tricks on me or did you manage to install a WiFi or BT adapter into a hacked up E4? (does it work?)
Looking at your remote control software page it looks like you are doing sequence or video capture as well - how long can it record for? (and can it record with out the UI showing up - raw video)
Would love to know more about the application but Google translate is just not working for your site for me.
A bluetooth connection to the console port would be a simple connection, but wouldn't get you image data. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 07, 2014, 11:11:47 pm
Aurora is right. I used a Bluetooth to Serial module, powered directly from Main board.
The wifi Module he found sounds interesting...
Looking at your remote control software page it looks like you are doing sequence or video capture as well - how long can it record for? (and can it record with out the UI showing up - raw video)
I don't try to make long thermal records yet...
But i can confirm, that it is real raw video (without UI).

I wrote an Extension to my Thermoviewer Project (see here).
This program can connect over Telnet (RNDIS) to send some settings and then download the sequence and open it.
Its automates... start Programm, goto Tab "FLIR Ex", click on Telnet, if telnet green click on "init Grab", then Grab IR (get a full IR Image with Temperatures... it takes around 10 Seconds).
See Attachment...
I think it could be make better, but this I will make later. It can also open sequences. But the Thermal data is false yet (does somebody knows, which bytes must be interpreted to get the min and max Temperature).
A Friend tell me, that e gets some error messages, but no image. Could you get the image? I tried with 1.19.8 and 1.22.0 and both work on my PC.

A bluetooth connection to the console port would be a simple connection, but wouldn't get you image data.
Yes. I also still don't found a possibility to get the IR-Image over the UART.
You only can grab the values from the Measurement results. But no pixel data.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 08, 2014, 03:05:47 pm
Think this might be related to the recent hack?
(http://i.imgur.com/1mRL2Zn.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 08, 2014, 04:17:58 pm
In my opinion
Flir is dropping its E8 price to try attract buyers due of the hack
But if you look at the poll
50% bought it  because price with the hack.
Myself included
I didn't want to spend $1000 for IR camera with low resolution
I was waiting for the flir one, I know VGA only but $350 only cheaper than new iPhone why not?
But after found out that spend $1000 = to E8 it was something that I cannot pass

My point flir got more sell of the E4 because of the hack
I am sure if flir change hardware to prevent the hack
It sells will drop to prior hack sells
Some might say flir can make more money selling higher end models
Of course! Higher profit margin, but in reality how many E8 they sell compare to lower end model
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 08, 2014, 09:20:46 pm
2000 for the E8 is slightly better than before. But a hacked E4 is still better ;)
It has some more defect pixels but after processing you don't can see them...

Has somebody tested the ThermoViewer_005e and get the full thermal Image?
Any error messages?

I improved my Ex Program (remote control E-Series). I is still default in German.
But by starting is there a "language.txt" in the folder, some controls and Messages are get a new text from this File.
See the Picture on the left side (contains "(extra language)"in the title). If changing the contend of "language.txt" it is possible to make it more Spanish or other.
Who has interest, contact me. The offer in Ebay is for 30€ or 40 USD (with Paypal directly).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 09, 2014, 01:12:52 pm
Has somebody tested the ThermoViewer_005e and get the full thermal Image?
Any error messages?

I poked at it for a min or two but didn't manage to get anything out of it even though it did seem to connect to my E4. As for errors - not that I could tell but it was in German so...

Glad to see the work that your doing however!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ChristofSchwiening on May 09, 2014, 03:40:03 pm
Has anyone investigated some of the other configuration file settings? For instance:
.caps.config.image.targetNoise.enabled
I think this may be the setting that adds noise to the E4 sensor. I suspect that there must also be some control over the smoothing filter which softens the image - but, I can't find it. Has anyone produced any documentation on controlling the E4 via the USB network connection? It should be relatively simple to capture the streamed IR data....
Having looked at the E4 raw IR data it seems largely unnecessary to jump through the complicated calibration formulae since within the 20-30 degree C range the data looks pretty linear.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on May 09, 2014, 05:39:51 pm
My newest camera has very few dead pixels.

Seems like I've been lucky with my hacked E4  !
Could be interesting to see what's the amount of defective sensor among clean ones  ^-^

(http://image.noelshack.com/fichiers/2014/19/1399657089-flir0052.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on May 09, 2014, 05:56:50 pm
Oh okay I didn't catch that error correction parameter over the whole topic, my bad ! Let me see how I can disable it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 09, 2014, 09:02:03 pm
This need not necessarily be. FLIR sold as many E4 in that the selection appears to be depleted in bad sensors. My newest camera has very few dead pixels.
This could be truth.
Btw, my camera looks similar...
But I have more in lower right corner:
http://joe-c.de/pages/posts/waermebildkamera_flir_ex_159.php#Firmware (http://joe-c.de/pages/posts/waermebildkamera_flir_ex_159.php#Firmware)
I poked at it for a min or two but didn't manage to get anything out of it even though it did seem to connect to my E4. As for errors - not that I could tell but it was in German so...
Hmm...not good.
Ok... fist the Button "Telnet" in Tab "FLIR Ex" must be green, after pressing (yellow while try to connect).
(at the Fist start, the Firewall should ask for my Program to be able to connect to 192.168.0.2)
If the Button is green, the Telnet-Console should be active... if you hit ENTER in the Command line (with "nuc" inside) the Camera should perform the NUC.
Then click "Init Grab" and "Grab IR".
Program needs .NET Framework 3.5.

Title: Re: Flir E4 Thermal imaging camera Accidental Hack Mistake
Post by: lesliebr on May 10, 2014, 12:55:53 am
Hello all, I have a huge issue. Last night I was hacking my brand new E4 thermal imager and  I accidentally overwrote the FLASHBFS system folder with the new one. Would anyone be able to email me a zipped folder with the original system folder? My flir is acting up now and is missing some functions. The factory reset does not fix this issue and I am a little worried I completely ruined my camera. my email address is b.leslie@live.com thanks!? Also, I tried restoring the firmware from the Flir website using Fir tools and it still didn't fix the problem and on top of all the heartache, I can no longer get my camera to connect to Filezilla.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sim on May 10, 2014, 02:56:20 am
Hello! For the poor fools trying through the Linux, ftool fails to encrypt to the correct output on amd64 because of this line in md5.h:

typedef unsigned long int UINT4;

Removing "long" will make it work. There's another one in main.cpp (DWORD), but it seems harmless.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 10, 2014, 04:58:29 am
FLIR just posted a picture (https://www.facebook.com/photo.php?fbid=736704819706407&set=a.262951180415109.65303.169363683107193) on their Facebook that shows what appears to be considerable discounts. I wonder if the hack has something to do with it. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 10, 2014, 11:24:40 pm
Look at this slimeball.
http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088 (http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on May 10, 2014, 11:56:28 pm
Look at this slimeball.
http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088 (http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088)

Hi, What's your issue with this seller?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 11, 2014, 01:47:14 am
Look at this slimeball.
http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088 (http://www.ebay.com/itm/Brand-New-Flir-E4-E8-Plus-Upgraded-Thermal-Imaging-Camera-320-x-240-Resolution-/191168294088)

Hi, What's your issue with this seller?

He (i'm guessing you) is selling it as a hacked device. Both immoral and unprofessional. If you're selling an E4 don't mark it up 30% because you screwed around with the firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 11, 2014, 01:56:57 am
If you think that's bad, someone just created a new website for selling hacked E4's: http://flir-upgraded.com (http://flir-upgraded.com)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 11, 2014, 02:13:30 am
Shitty HTML, no https, $500 markup for software that they don't own... yeah nope. FLIR is definitely going to have them shut down.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 11, 2014, 02:54:48 am
If you think that's bad, someone just created a new website for selling hacked E4's: http://flir-upgraded.com (http://flir-upgraded.com)

Well, they obviously expect some trouble:
Quote
Registrant Email: FLIR-UPGRADED.COM@domainsbyproxy.com
A classic "provider" used by MANY very respectable guys as spammers, phishers and other really nice guys...
... but technically I don't see it beeing a crime to sell an upgrade-service with public domain information.

The only miss is that they will have to beat EEVblog reputation when searching E4 hack...
good luck with finding anybody literate enough to use the internet themselfs - online ;)

It's hard to compete with FREE ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 11, 2014, 03:05:14 am
Yeah, the jerks didn't even credit us. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 11, 2014, 03:06:32 am
FLIR just posted a picture (https://www.facebook.com/photo.php?fbid=736704819706407&set=a.262951180415109.65303.169363683107193) on their Facebook that shows what appears to be considerable discounts. I wonder if the hack has something to do with it. ;D
I'm just more pissed on Flir for selling a "made in Europe" product at a really evil premium inside the EU.
899 USD would be 650 EUR ... or 775 EUR incl. VAT in Germany ... but not >1000 EUR.

It seems to be trendy to sell stuff at the same price number ... and good luck getting an E4 for under 1000 EUR inside Europe.

My guess is: EU-Price = US-Price +VAT + individual SHIPPING + 10% tolerance. ... so just to be near a point where individual imports won't pay off the hassle
It's like sticking a "FU" sign at the products.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on May 11, 2014, 01:47:44 pm
Quote
He (i'm guessing you) is selling it as a hacked device. Both immoral and unprofessional. If you're selling an E4 don't mark it up 30% because you screwed around with the firmware.

Well I'm from the UK, not the US  ;D


Cost of camera = $995
Cost of eBay & Paypal fees at $1398  =  $195
Cost of US postage (guess)  = $30

TOTAL = $1220

$1398 - $1220 = $178 Profit.

In my opinion $178 is a fair profit for the seller who is providing a known working hacked camera and taking all risks including:

- The risk of buying a camera and not getting a hackable firmware
- The time and effort hacking the camera
- The risk of it going wrong

The buyer is therefore getting quite a good deal. Remember European/UK buyers are already paying well over $1600 just for the camera direct.

Please bare in mind that any person with a bit of technical knowledge can find this thread with a simple Google search and do it themselves.

Those people without the necassary technical knowledge who would like to benefit from the hack can purchase a ready hacked camera for a relatively small premium. These are the people that would otherwise be posting on this thread asking for help with XYZ over and over again.

I fail to see the problem with this, it's a free market.

Quote
It's hard to compete with FREE ;)

Exactly, I agree :-)

Flir is doing exactly the same thing, but charging a $3000 premium.


I agree that it would be nice for the seller to provide a link to this thread though, or some mention of EEVblog.

I really like Flir, but they need to get their act together and decide what their business model is going to be going forward. They are stuck between Commercial and Military/Specialist markets.  Commercial is low margins but high volume, Military/Specialist is high margins and low volume.

Flir seems to have been stuck in a very low development mode for a long time. Think about all the technical progress made in the last 30 years, and yet a 80x60 thermal camera still costs at least a grand.

In my opinion Flir should be selling 720p and 1080p 9Hz cameras to the commercial markets for sub $10k, leaving room to put 640x480 cameras in the latest smartphones, cars and security systems.

They could then sell 4K cooled systems to the Military/Specialist markets at much higher frame rates (30-120Hz) with precision optics and high sensitivity, and therefore still preserve their high margin markets at the same time.

I suppose they are making some progress with the Lepton core, but it's still very low resolution. This whole E4 hack business goes to show that thermal cameras are not some wondorous new technology anymore, they are a commodity item. It's just the politics of having had a virtual monopoly that's stopped Flir from pushing the technology out there.

Thermal imaging is no longer the top military technology that it once was, every army, navy and air force in the world has them. Providing uncoolled 9Hz HD sensors to the civillian market isn't going to cause WW3, the hysteria needs to stop. Everytime we declare thermal imaging as being 'military technology' , we are only helping to preserve Flir's high margins.


Just my 2 cents (I mean pence!).

Cheers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sk_rmouche on May 11, 2014, 05:44:09 pm
Quote
He (i'm guessing you) is selling it as a hacked device. Both immoral and unprofessional. If you're selling an E4 don't mark it up 30% because you screwed around with the firmware.

Well I'm from the UK, not the US  ;D


Cost of camera = $995
Cost of eBay & Paypal fees at $1398  =  $195
Cost of US postage (guess)  = $30

TOTAL = $1220

$1398 - $1220 = $178 Profit.

In my opinion $178 is a fair profit for the seller who is providing a known working hacked camera and taking all risks including:

- The risk of buying a camera and not getting a hackable firmware
- The time and effort hacking the camera
- The risk of it going wrong

The buyer is therefore getting quite a good deal. Remember European/UK buyers are already paying well over $1600 just for the camera direct.

Please bare in mind that any person with a bit of technical knowledge can find this thread with a simple Google search and do it themselves.

Those people without the necassary technical knowledge who would like to benefit from the hack can purchase a ready hacked camera for a relatively small premium. These are the people that would otherwise be posting on this thread asking for help with XYZ over and over again.

I fail to see the problem with this, it's a free market.

Quote
It's hard to compete with FREE ;)

Exactly, I agree :-)

Flir is doing exactly the same thing, but charging a $3000 premium.


I agree that it would be nice for the seller to provide a link to this thread though, or some mention of EEVblog.

I really like Flir, but they need to get their act together and decide what their business model is going to be going forward. They are stuck between Commercial and Military/Specialist markets.  Commercial is low margins but high volume, Military/Specialist is high margins and low volume.

Flir seems to have been stuck in a very low development mode for a long time. Think about all the technical progress made in the last 30 years, and yet a 80x60 thermal camera still costs at least a grand.

In my opinion Flir should be selling 720p and 1080p 9Hz cameras to the commercial markets for sub $10k, leaving room to put 640x480 cameras in the latest smartphones, cars and security systems.

They could then sell 4K cooled systems to the Military/Specialist markets at much higher frame rates (30-120Hz) with precision optics and high sensitivity, and therefore still preserve their high margin markets at the same time.

I suppose they are making some progress with the Lepton core, but it's still very low resolution. This whole E4 hack business goes to show that thermal cameras are not some wondorous new technology anymore, they are a commodity item. It's just the politics of having had a virtual monopoly that's stopped Flir from pushing the technology out there.

Thermal imaging is no longer the top military technology that it once was, every army, navy and air force in the world has them. Providing uncoolled 9Hz HD sensors to the civillian market isn't going to cause WW3, the hysteria needs to stop. Everytime we declare thermal imaging as being 'military technology' , we are only helping to preserve Flir's high margins.


Just my 2 cents (I mean pence!).

Cheers.
Also mine as well  :-+ :-+ :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 11, 2014, 07:10:31 pm
guys: how about snipping down such long quotes a bit?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 11, 2014, 08:10:45 pm
guys: how about snipping down such long quotes a bit?
too much work  :-DD

btw... I also agree with Paulio
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on May 11, 2014, 09:06:35 pm
In my opinion, regardless as to what people are charging, they are going to kill the goose that laid the golden egg.
This began as a hobby effort, it's been fun and challenging, but by this fix becoming so public and becoming commercial, sooner or later you have to expect a serious response from FLIR.  They will plug up the holes and
I wouldn't be surprised that there could be some legal retaliation.

I've needed technical support from FLIR from time to time, that was paid for when I bought my camera, but
circumventing their product line will in the end hurt all of us, and I'm referring to making these modified
cameras available on the commercial market.  By the way, FLIR has provided me with excellent support,
I just had to dig a little deeper in their organization for some good help.

The same thing happened with satellite decoders and cable TV boxes, it was fun while it lasted but it was made
too public.

Enjoy it while you can, but I fear the free ride will come to an end.  My two cents worth.

Hope I trimmed the thread a little.

Jim

Quote
He (i'm guessing you) is selling it as a hacked device. Both immoral and unprofessional. If you're selling an E4 don't mark it up 30% because you screwed around with the firmware.

Well I'm from the UK, not the US  ;D


Cost of camera = $995
Cost of eBay & Paypal fees at $1398  =  $195
Cost of US postage (guess)  = $30

TOTAL = $1220

$1398 - $1220 = $178 Profit.

In my opinion $178 is a fair profit for the seller who is providing a known working hacked camera and taking all risks including:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 11, 2014, 09:13:35 pm
In my opinion, regardless as to what people are charging, they are going to kill the goose that laid the golden egg.
This began as a hobby effort, it's been fun and challenging, but by this fix becoming so public and becoming commercial, sooner or later you have to expect a serious response from FLIR.  They will plug up the holes and
I wouldn't be surprised that there could be some legal retaliation.

...

Enjoy it while you can, but I fear the free ride will come to an end.  My two cents worth.

Hope I trimmed the thread a little.

Jim
+1 selling the "upgraded" item for a profit will hurt the rest in the long run if it becomes prevalent.
And selling information based on other's work, is well... wrong!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on May 12, 2014, 01:49:59 am
In my opinion, regardless as to what people are charging, they are going to kill the goose that laid the golden egg.
This began as a hobby effort, it's been fun and challenging, but by this fix becoming so public and becoming commercial, sooner or later you have to expect a serious response from FLIR.  They will plug up the holes and
I wouldn't be surprised that there could be some legal retaliation.

...

Enjoy it while you can, but I fear the free ride will come to an end.  My two cents worth.

Hope I trimmed the thread a little.

Jim
+1 selling the "upgraded" item for a profit will hurt the rest in the long run if it becomes prevalent.
And selling information based on other's work, is well... wrong!

+2,  I agree as well but I know you can't put the cork back in the bottle and this will just have to run it's course.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 12, 2014, 01:53:26 am
How to stop others from selling on eBay for profit:
1. Buy camera
2. Sell camera for ~$1200(To cover fees/shipping)
3. Drive profiteers out of the market
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 12, 2014, 02:00:01 am
This is just a repeat of discussions that followed some people selling FW 1.19.8 cameras on ebay for vast profit. In this case, however, the prices are more reasonable when the sellers efforts are considered. I make no comment on the ethics of the situation though as this is an 'Open Source' upgrade thanks to the kind efforts of several members of this forum.

FLIR will take whatever action they have already planned, no matter whether people are selling upgrade services or upgraded cameras on ebay. The industry view is that FLIR will not lock down the core itself  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 12, 2014, 02:20:43 am
This (http://offer.ebay.com/ws/eBayISAPI.dll?ViewBids&item=131185679801&rt=nc&_trksid=p2047675.l2565) seller is clever, he set the starting price at $9.99. He got the buyers flocking to it

Wait, what? 

For future reference, it's an i40 and the bid is currently at $110.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on May 12, 2014, 07:26:48 am
F.A.O. Aurora

A colleague of mine has a camera SN 6392147xx that has FW 1.22 and is very happy with it ;)
It still had the original FLIR delivery note to the distributor which indicated calibration 24th April.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 12, 2014, 04:27:05 pm
@Scientist,

I am confused by your comment...clever ? ...how ?

A FLIR thermal camera for sale as 'spares or repair' and sold without test. These are the sorts of auctions I target and buy to repair. I have been very pleased and successful with repairing faulty cameras bought in this way. The seller is being very honest in the auction. The fact that the camera comes without accessories or battery would tend to suggest that the seller is an electronics recycler. When equipment is scrapped it often has its battery removed for environmental compliance reasons.

For info, if that camera sells for less than $300 it's a good risk  ;) (if you know how to repair kit)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 12, 2014, 07:28:10 pm
@Scientist,

I am confused by your comment...clever ? ...how ?

A FLIR thermal camera for sale as 'spares or repair' and sold without test. These are the sorts of auctions I target and buy to repair. I have been very pleased and successful with repairing faulty cameras bought in this way. The seller is being very honest in the auction. The fact that the camera comes without accessories or battery would tend to suggest that the seller is an electronics recycler. When equipment is scrapped it often has its battery removed for environmental compliance reasons.

For info, if that camera sells for less than $300 it's a good risk  ;) (if you know how to repair kit)

Aurora
I agree, there is nothing clever about that auction. It is most likely his own auction and just trying to get exposure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scientist on May 12, 2014, 07:36:57 pm
Clever that he set the price at $9.99 and then let the market fight over the real value.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on May 12, 2014, 08:35:22 pm
Just ordered a few minutes ago from Tequipment.net.  They said the firmware is still 1.22.0.  I'll keep ya posted on shipping times and serial/firmware info.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on May 15, 2014, 09:30:00 pm
General question:
Is it possible to add a -2 or -4 (I have no idea the exact value required) diopter IR lens so as to bring the close focus to something like 30cm ?

I was looking and it seems that BaF and CaF would be the choice, but I am not really sure, as I did not find precisely the IR wavelength range of the camera.  something that is good into the visible range could be shoved atop the whole lens so as to cover the visible light lens too.

Duct Tape: the atomic and laser-lab physicist's secret weapon !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 15, 2014, 10:24:34 pm
General question:
Is it possible to add a -2 or -4 (I have no idea the exact value required) diopter IR lens so as to bring the close focus to something like 30cm ?

I was looking and it seems that BaF and CaF would be the choice, but I am not really sure, as I did not find precisely the IR wavelength range of the camera.  something that is good into the visible range could be shoved atop the whole lens so as to cover the visible light lens too.

Duct Tape: the atomic and laser-lab physicist's secret weapon !

a piece of floppy disc or dark exposed film from a negative works wonders.

Edit, never mind misread that you wanted to block visible light :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2014, 12:00:23 pm
@JFA,

Please look at my 'E4 Useful information' thread on this forum. Its all there and cheap ZnSe lenses detailed etc.  ;)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KMIN on May 16, 2014, 05:39:16 pm
I was just chatting with Tequipment and they were confirming me twice that all their E4 have the newest firmware which cannot be hacked :
" Yes, the models we offer are firmware 1.22 which CANNOT be hacked."
I'm very confused! :o Anyone have an idea if Flir changed something ?
PCSnoop, did you get yours already?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2014, 07:54:34 pm
There does seem to be some odd information coming from Tequipment, such as the FW 1.22.2 that they said was coming in, yet never appeared. Personally I would order from a company that confirms FW 1.22.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 16, 2014, 08:46:20 pm
It's possible they are simply not aware of the "new" hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2014, 08:58:24 pm
They have representation on this forum, so should know as they are aware of the E4 hack. It could be that a particular member of staff who is still unaware though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 16, 2014, 10:30:40 pm
Hello,
my program is going Version 004 and are now available in English and (if somebody makes) other Languages.
http://joe-c.de/pages/posts/programm_ex_tools_158.php#v004 (http://joe-c.de/pages/posts/programm_ex_tools_158.php#v004)

I readout the complete resource tree, see attachment (only changed my Serial ;) ).
Maybe somebody interest...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmTx on May 17, 2014, 03:26:06 am
There does seem to be some odd information coming from Tequipment, such as the FW 1.22.2 that they said was coming in, yet never appeared. Personally I would order from a company that confirms FW 1.22.0

Flir Tools when checking for update reports my current version is 1.22.0 and that firmware 2.1.0 update is "available for free".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 17, 2014, 04:46:54 am
There does seem to be some odd information coming from Tequipment, such as the FW 1.22.2 that they said was coming in, yet never appeared. Personally I would order from a company that confirms FW 1.22.0

Flir Tools when checking for update reports my current version is 1.22.0 and that firmware 2.1.0 update is "available for free".

Oh man,
Are you telling me that I ordered another E4 today!
It will have the updated firmware?  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CFH on May 17, 2014, 12:45:08 pm
Hi everyone, I have everything i need and am computer literate but my command prompt will not let me conf_plain.txt to receive my suid and I am going nuts. Any help would be much appreciated.

command prompt tells me: cannot open output file conf_plain.txt

Thanks in advance. I have 1.22.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmTx on May 17, 2014, 02:00:16 pm
Hi everyone, I have everything i need and am computer literate but my command prompt will not let me conf_plain.txt to receive my suid and I am going nuts. Any help would be much appreciated.

command prompt tells me: cannot open output file conf_plain.txt

Thanks in advance. I have 1.22.0
I don't know what instructions you are following but I had no problem doing both the resolution and menu hack in about 1/2 hour. Go to youtube and search "flir e4 hack 1.22" find video by pspgamr and follow it. Also on that youtube video just above comments is "show more", chick on that and he has links to everything you need to download to make the hack work (filezilla, menu beta3 and tools1) EASY !!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 17, 2014, 04:41:54 pm
Hi everyone, I have everything i need and am computer literate but my command prompt will not let me conf_plain.txt to receive my suid and I am going nuts. Any help would be much appreciated.

command prompt tells me: cannot open output file conf_plain.txt

Thanks in advance. I have 1.22.0

Hi
If you are having problems with cmd commands
Try to use the crc generator file
Like jmTx said
YouTube E4 1.22 hack
I followed the instruction to detail but still didn't work
So I saw comments

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505)

Using crc generator and bang worked right away
But I only did the resolution upgrade I did not do the menu hack
Because it is only 1 file that is replaced, any problem I just put the original file back.
My recommendation is do that first if that works then if you want menu update then do it
But make sure you backup your original files
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 17, 2014, 05:55:02 pm
The new FW is out! It is version 2.1.0 ! A new protection has been added to protect against menu hack!  
But not against resolution hack, I think!  The menu files are now crc protect, CRC ??
The update adds the advertised new features (manual scale, two new image modes: blending and alignment) for the E8 (only for E8?).

I think, for the menu hack, crc protection must be deleted from applaunch.dat. But question is, this file can be changed? It looks like a protection in applaunch.sgn ...  :-//
Who wants to test it?  ;)

@Mike: You should add it to the first post.
Here we go again.... I'd be surprised if there wasn't something to counter resolution hacks on production units with this firmware.

Maybe they just got bored and wanted to stir things up to push the post count here over the 5000 mark...  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CFH on May 18, 2014, 02:12:14 am
Special thanks to freak_ge for the help and for everyone else who commented on helping me on my way. All was successful. Great forum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ed.Kloonk on May 18, 2014, 03:43:10 am


Maybe they just got bored and wanted to stir things up to push the post count here over the 5000 mark...  :D

Nearly there...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 18, 2014, 05:50:48 am
Post #5000
That is all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 18, 2014, 06:22:17 am
Post #5000
That is all.

That would be reply #5000, the post #5000 was the "Nearly there" :)

The counter doesn't count the OP, not that you don't count, cuz you do :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on May 18, 2014, 08:48:39 am
Mike, I took a screen cap of your tear down film and put the ball array layout from the datasheet on top of it.
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=94344;image)
Following the traces I think I fond the JTAG connections.
Is it useful to investigate this further?


PS I found a good clamp for the Flir.
http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649 (http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=94350;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rainer on May 18, 2014, 12:08:09 pm
is there any link to the new firmware-package? or can someone post a zip of the new filesystem?

If there is any possibility to decode, it could be a good idea, to extract the new overlay options...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 18, 2014, 01:52:35 pm
Mike, I took a screen cap of your tear down film and put the ball array layout from the datasheet on top of it.
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=94344;image)
Following the traces I think I fond the JTAG connections.
Is it useful to investigate this further?
Not really, unless you fancy writing completely new FPGA code, and firmware to drive it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on May 18, 2014, 03:58:56 pm
PS I found a good clamp for the Flir.
http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649 (http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649)

Are the teeth inside the clamp soft or hard?  Do they indent the E4 handle?

Update: Thanks, I ordered one!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 18, 2014, 03:59:57 pm
@freak_ge

I just read your post, the following new file looks ominous ! .......  fpga_lepton.bin

I thought the Lepton low resolution core was in the FLIR One iphone add-on ...... could this mean an fpga centric  resolution lockdown I wonder ?  :( If so, say goodbye to an easy resolution upgrade unless you fancy re-writing the fpga. There is also the possibility that the E4 hardware has been revised as it is the most likely to be bought and 'hacked' by a consumer on a budget. Could it be that the next generation of E4 to be released will look like previous models but contain a Lepton core ? That would permanently solve FLIR's problem of users hacking the E4. The next cheapest platform to 'hack' would then be the more expensive E5 or E6.

There is, of course, the possibility that the new firmware release incorporated Lepton related files to support the FLIR One of future Lepton based FLIR products. As has been said my Mike. We should expect future low resolution cameras from FLIR to contain a Lepton core as this is FLIR's new 'baby' for consumer grade cameras at 80x60 resolution. Datasheet attached. It is certainly a neat core, a pity it is only 80x60 though. I wonder if higher resolution cores will be release in the same compact format ? Could the Lepton be 320x240 core with E4 style hobbling on the video processing side of the core ? Time will tell  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 18, 2014, 04:32:38 pm
@freak_ge

As has been said by knowledgeable people on this Forum, reverse engineering an fpga .bin file is not something that may be bone easily, especially if you do not have the required proprietary software tools for the particular fpga chip family. If FLIR have placed protection inside the fpga, it will be down to whether the code may be circumvented between it and the OS and that very much depends upon the nature of the protection employed. The E4 may still produce the full resolution on the two digital outputs from the micro-bolometer but building a new image processing section to turn such into a decent image appears to not be trivial. Better to buy an old stock E4 or E5 and upgrade it  :-// 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on May 18, 2014, 05:45:55 pm
I have the hack 1.19.8 FW with Taucher Beta3 Menus and Zoom activated. To me all those new FW are a try to contain the hack rather than to fix or implement new functions.
So unless a new killer function will be released, I will NOT upgrade my E4 with the risk to go back to 2x4 pixel resolution forever.

(manual scale, two new image modes: blending and alignment)

what the heck are exactly those ones? Do we have more details? I can just imagine something.. but no idea if they will be really useful.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 18, 2014, 05:54:35 pm
I have the hack 1.9.8 FW with Taucher Beta3 Menus and Zoom activated. To me all those new FW are a try to contain the hack rather than to fix or implement new functions.
Well, actually Flir has realized that the hidden "manual scale" function could cause people to buy the E8... so they enabled it for E8 ... turning an already built-in feature into a premium simply requires such steps like intentionally crippling hardware in order to satisfy some marketing formula for market segmentation.

Seems to be a trend and not only confined to some industries.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TinyScooby on May 18, 2014, 06:06:38 pm
I have the hack 1.9.8 FW with Taucher Beta3 Menus and Zoom activated. To me all those new FW are a try to contain the hack rather than to fix or implement new functions.
Well, actually Flir has realized that the hidden "manual scale" function could cause people to buy the E8... so they enabled it for E8 ... turning an already built-in feature into a premium simply requires such steps like intentionally crippling hardware in order to satisfy some marketing formula for market segmentation.

Seems to be a trend and not only confined to some industries.

I have a question related to this as well.

I was wondering if Mike could tear down a surveillance camera that might have a similar firmware cripple as the E4.

Basically, I want to know if the Acti E77 camera can be allowed to have higher frame rates if not bound by the firmware?

The Acti E77 is a new 4K resolution surveillance camera that has 30 frames per second at 1080p resolutions, but then dips to only 6 frames per second at all other higher resolutions.

From the Acti E77 spec sheet:

6 fps at 3648 x 2736; 6 fps at 3648 x 2160; 6 fps at 2592 x 1944; 6 fps at 2048 x 1536;
30 fps at 1920 x 1080

How can this camera only get 6 frames per second at all these other resolutions if it gets 30 frames at 1920 x 1080?

Shouldn't 2048 x 1536 produce a much higher frame rate than 3648 x 2736?

I thought this might be a firmware lock like the E4 had. How can I tell? Would Mike ever be able to do something similar on the E4 to the Acti E77?  I know they are different types of camera's but it still seems like to me that the firmware of the E77 is limiting the framerates. Any ideas?  thanks


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 18, 2014, 06:11:05 pm
Quote
Basically, I want to know if the Acti E77 camera can be allowed to have higher frame rates if not bound by the firmware?
The Acti E77 is a new 4K resolution surveillance camera that has 30 frames per second at 1080p resolutions, but then dips to only 6 frames per second at all other higher resolutions.

From the Acti E77 spec sheet:

6 fps at 3648 x 2736; 6 fps at 3648 x 2160; 6 fps at 2592 x 1944; 6 fps at 2048 x 1536;
30 fps at 1920 x 1080

How can this camera only get 6 frames per second at all these other resolutions if it gets 30 frames at 1920 x 1080?

Bandwidth limitation and/or processing capacity for compression.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TinyScooby on May 18, 2014, 06:19:56 pm
Quote
Basically, I want to know if the Acti E77 camera can be allowed to have higher frame rates if not bound by the firmware?
The Acti E77 is a new 4K resolution surveillance camera that has 30 frames per second at 1080p resolutions, but then dips to only 6 frames per second at all other higher resolutions.

From the Acti E77 spec sheet:

6 fps at 3648 x 2736; 6 fps at 3648 x 2160; 6 fps at 2592 x 1944; 6 fps at 2048 x 1536;
30 fps at 1920 x 1080

How can this camera only get 6 frames per second at all these other resolutions if it gets 30 frames at 1920 x 1080?

Bandwidth limitation and/or processing capacity for compression.

Thanks Mike.

Is this a limitation of the hardware itself?

I'm curious if the hardware is capable of higher frame rates at say, 2048 x 1536, for example? Could a firmware change allow this camera to do 2048 x 1536 at greater than 6 frames?

Acti has a whole new line of 4K cameras that all have this same exact limitation. (6 fps at 3648 x 2736  and 2048 x 1536 at 6 fps). Usually framerates drop exponentially with higher resolutions, but all these resolutions at the same exact frame rate seems odd to me. Guess there is a key element I don't understand about how this works.

With a video card for instance, every bump in resolution usually costs more frames per second. Maybe its different with camera hardware or something.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 18, 2014, 06:31:07 pm

Those CCTV cameras are limited by computational power for encoding the video and limited by data-bus throughput.
Usually they are developed on a SoC according to a reference design (~1000 USD - just enough to keep private people out).
The SoC has a finite computation power, so take it as "bytes/sec" limited ... either many bytes per image -> few MPIX images per second .. or few bytes per image and many images per second.
Overall data/bitrate ... more or less constant
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TinyScooby on May 18, 2014, 06:41:30 pm

Those CCTV cameras are limited by computational power for encoding the video and limited by data-bus throughput.
Usually they are developed on a SoC according to a reference design (~1000 USD - just enough to keep private people out).
The SoC has a finite computation power, so take it as "bytes/sec" limited ... either many bytes per image -> few MPIX images per second .. or few bytes per image and many images per second.
Overall data/bitrate ... more or less constant

Thanks. I'm trying to grasp this but I'm not quite there yet.

For instance, how many frames per second could this camera do at 1920 x 1081 for instance?

At that resolution, would it be able to do closer to 30 frames per second, or closer to 6 frames per second? (if that resolution was available)

Presently, that camera can do 1920 x 1080 at 30 frames per second, but at 1920 x 1081, does it drop all the way down to only 6 frames per second as well?


I'm just trying to understand where the limitation is. For instance, on a PC, if you have a sata device that can do 6Gb/s, you can hook up a drive that can do 9Gb/s but it will be limited to the sata interface of only 6Gb/s and not be able to run the drive any faster than that because of the sata interface is only capable of exactly 6Gb/s and nothing more. Is it similar with the SoC?

So, in a similar comparison, this SOC is somehow limited to exactly 1920 x 1080 at 30 frames, and 1 more pixel in resolution bumping brings it down to 6 frames per second, is that correct?

So does that mean the only way this camera can get above 30 frames at 1920 x 1081 is by swapping out that SoC which is limiting the camera frames that could be achieved if a faster SOC was available?

This camera, the E77, costs $266. However, the cameras that can do 3840 x 2160 and greater cost $1000. Is that because of the SoC you are referring to?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 18, 2014, 07:05:17 pm
pixel clock alone will reduce the frame rate to 7.5 fps when you quadruple the resolution in raw mode, but then it needs to process the image which is limited by the internal bandwidth, reducing the frame rate more and it has to be synched to the host so 6fps sounds actually pretty impressive for a 4K sensor.

As for the 1081 mode, the chip might not let you use arbitrary resolutions, just some predetermined ones.

Just think that at higher res, you are quadrupling the work load, upping the clock 4 times to compensate might fry it,I mean you are talking 400% overclocking :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TinyScooby on May 18, 2014, 07:41:38 pm
pixel clock alone will reduce the frame rate to 7.5 fps when you quadruple the resolution in raw mode, but then it needs to process the image which is limited by the internal bandwidth, reducing the frame rate more and it has to be synched to the host so 6fps sounds actually pretty impressive for a 4K sensor.

As for the 1081 mode, the chip might not let you use arbitrary resolutions, just some predetermined ones.

Just think that at higher res, you are quadrupling the work load, upping the clock 4 times to compensate might fry it,I mean you are talking 400% overclocking :)

See, I completely understand why 3840 x 2160 would be limited to 6 frames per second. That makes perfect sense to me.

Because, it is 4 times the resolution of 1080p (1920 x 1080).

But, I don't understand why the 2048 x 1536 resolution is limited to only 6 frames per second, because I think that resolution should be able to handle at least 10 to 12 frames per second since its only about 500 pixel difference from 1080p.

But, if there is a bandwidth cap in between that is similar to a sata interface limiting drives to 6Gb per second, then I think I understand it a little better. But, as it is today, you can get a 4K surveillance camera for $266 that can do 3840 x 2160 at only 6 frames. If you want the 3840 x 2160 at 30 fps, the price jumps to $1000, unless you are talking something like the new Hero 4 which can do 3840 x 2160 at 30 fps for closer to $500. But the soon to be released Hero4 is not designed to be a surveillance camera, but instead a home movie camera.

So, it seems like these $266 3648x2160 surveillance cameras at 6 fps are the best we can do at the moment due to a low cost SoC that is limiting the bandwidth on these cameras? Is that correct?  Sorry if I am confusing anyone here I'm just really trying to understand the fps limitations for 4K surveillance cameras and presently I don't understand them. I was hoping this Acti E77 could somehow get around this crazy 6fps limitation @ 2048 x 1536 but if it's similar to the sata interface example, then it sounds like they can't.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 18, 2014, 08:07:27 pm
I'm guessing that it uses the full 3648 x 2736 sensor in other modes and it's limited by how it's hardwired as in it either it uses half the rows and columns or it uses it all.

simplified math because there is more to it that this:
(1920x1080)x60Hz / (3648x2736) = 6.232687 Hz
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 18, 2014, 08:12:21 pm
I'm guessing that it uses the full 3648 x 2736 sensor in other modes and it's limited by how it's hardwired as in it either it uses half the rows and columns or it uses it all.

simplified math because there is more to it that this:
(1920x1080)x60Hz / (3648x2736) = 6.232687 Hz

Hint: open up a new thread - this is going way off-topic.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr-Beamer on May 19, 2014, 04:49:45 am
PS I found a good clamp for the Flir.
http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649 (http://www.ebay.com/itm/221191232238?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649)

Are the teeth inside the clamp soft or hard?  Do they indent the E4 handle?

soft rubber, so no indentation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nvana on May 19, 2014, 11:47:50 am
First of all many thanks to all the tweakers here on the forum!  The resolution hack of our E4 works great  :-+

Does anyone know how to just enable the 'Manual Temperature Range' setting in the menus ? After downloading the Addmenu3 pack and reading the changelist, it seems that so many settings are tweaked at once. For my usage the 'Manual Temperature Range' menu option would be sufficient.

Kind regards

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on May 19, 2014, 09:59:36 pm
That's an easy one! Just don't use the other features if there's no need for them. It would probably be more work to try and remove all but the manual temp than to just live with it.

Don't remember who asked about the blend mode but there is a brief you tube video showing what it does on a non ex series camera. It basically allows you to control how much thermal information is shown over the top of the background image. It would be useful if you were looking at a warm-hot object with everything in the background not being drowned out by the temp range.
Very similar to how we use manual temp mode to display more information without it being too dark to make out the details of the objects surroundings.

Edit: It appears that the mode allows you to control the thermal info based on temp, by that i mean you can turn off the thermal info based on the temp. Starting at the coldest moving to hottest, when a temp is "turned off" you see a grayscale image very similar to the condensation palate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 19, 2014, 11:10:37 pm
It's interesting that firmware version 1.22.0 is still online: http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on May 20, 2014, 05:42:22 pm
I was just chatting with Tequipment and they were confirming me twice that all their E4 have the newest firmware which cannot be hacked :
" Yes, the models we offer are firmware 1.22 which CANNOT be hacked."
I'm very confused! :o Anyone have an idea if Flir changed something ?
PCSnoop, did you get yours already?

Received mine on Friday the 16th,  the sales person told me the same thing, version 1.22.0 and non hackable.  It was hacked within 30 minutes of hitting my front door.

serial#: 63924***
Software 1.22.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on May 20, 2014, 05:49:49 pm
Hi everyone, I have everything i need and am computer literate but my command prompt will not let me conf_plain.txt to receive my suid and I am going nuts. Any help would be much appreciated.

command prompt tells me: cannot open output file conf_plain.txt

Thanks in advance. I have 1.22.0
I don't know what instructions you are following but I had no problem doing both the resolution and menu hack in about 1/2 hour. Go to youtube and search "flir e4 hack 1.22" find video by pspgamr and follow it. Also on that youtube video just above comments is "show more", chick on that and he has links to everything you need to download to make the hack work (filezilla, menu beta3 and tools1) EASY !!!

I did exactly the same thing.  Works great and was easy.  30 min.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on May 20, 2014, 08:44:45 pm
I was wondering how this new firmware upgrade (had trouble writing that with a straight face) might reflect on the Exx-series? Are they, um, improving those as well? If not, that might juuust be enough of an incentive for me to upgrade to a better lens and better framerate.

(I'd have to offload this nice, slightly tampered with (software-wise), E4 with an extra battery and an external charger if that were to happen. And a few extras. I couldn't possibly sell it off cheaply, seeing how very very nice the camera is ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on May 21, 2014, 07:06:19 am
I was wondering how this new firmware upgrade (had trouble writing that with a straight face) might reflect on the Exx-series? Are they, um, improving those as well? If not, that might juuust be enough of an incentive for me to upgrade to a better lens and better framerate.

The mod works on the Exx series too.  I did the zoom mod, resolution mod and a few others.  I don't know if
the menu mods work or not, haven't tried them.  Last I checked a few weeks ago, the version of the firmware
is the same as it was when I bought the unit a couple years ago.

Do some digging on this site and you will discover the files you need to edit.

The E40, 50, 60 is nice, you can do live streaming video to an android device.  I just put FLIR tools mobile on my 8"
tablet.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on May 21, 2014, 01:04:25 pm
The mod works on the Exx series too.  I did the zoom mod, resolution mod and a few others.  I don't know if
the menu mods work or not, haven't tried them.  Last I checked a few weeks ago, the version of the firmware
is the same as it was when I bought the unit a couple years ago.
But on older (pre 2013) Exx there is no MSX, am I right? Or does anybody has an idea how to enable MSX on those?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 21, 2014, 01:18:35 pm
The mod works on the Exx series too.  I did the zoom mod, resolution mod and a few others.  I don't know if
the menu mods work or not, haven't tried them.  Last I checked a few weeks ago, the version of the firmware
is the same as it was when I bought the unit a couple years ago.
But on older (pre 2013) Exx there is no MSX, am I right? Or does anybody has an idea how to enable MSX on those?

From what I understand they lack the hardware required to support it. You would need to hack in your own second camera and write your own custom firmware witch I find some one every even attempting unlikely given what these modded E4's cost. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on May 21, 2014, 03:00:56 pm
The mod works on the Exx series too.  I did the zoom mod, resolution mod and a few others.  I don't know if
the menu mods work or not, haven't tried them.  Last I checked a few weeks ago, the version of the firmware
is the same as it was when I bought the unit a couple years ago.
But on older (pre 2013) Exx there is no MSX, am I right? Or does anybody has an idea how to enable MSX on those?

From what I understand they lack the hardware required to support it. You would need to hack in your own second camera and write your own custom firmware witch I find some one every even attempting unlikely given what these modded E4's cost. ;)
There IS a 2nd camera build in. The digital cam is quite similar to the Ex, just with a higher resolution. There is even a digicam/thermal cam blend mode; just MSX -where just the enhances edges of the digicam are shown- is missing.
As newer Exx do have MSX it is probably just some software thing. The whole software set is different to the Ex series on the older Exx where on the newer Exx it is similar. I am having the hope that somebody was able to bring an older Exx to the software set of a newer Exx.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on May 21, 2014, 05:59:44 pm
As smart guys told me (some pages back), when I hacked my E40 (also older mode, no MSX), MSX function is made inside FPGA and therefore it is not possible to get it on older camera ...

I also asked Flir (and Flir official distributor) about it, but they answered pretty arrogant in a way "you get what you paid for at the moment of purchase - if you want MSX, buy new camera".

Well, ironically, this answer leaded me to more digging and founding EEV way to hack E40 to E60 ... (where price difference actually is around the price of new E40 :-DD :-DD :-DD) Therefore I got a "new" camera, just not exact in a way that FLIR wanted to ... ;)

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on May 21, 2014, 06:04:15 pm
Right, the camera itself doesn't support the MSX, but I was told by somebody it can be done after
you download the images and do the work in FLIR tools, I haven't had the time to try it yet.

Jim

The mod works on the Exx series too.  I did the zoom mod, resolution mod and a few others.  I don't know if
the menu mods work or not, haven't tried them.  Last I checked a few weeks ago, the version of the firmware
is the same as it was when I bought the unit a couple years ago.
But on older (pre 2013) Exx there is no MSX, am I right? Or does anybody has an idea how to enable MSX on those?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on May 21, 2014, 08:25:05 pm
if required: as workaround for MSX I zoom the PiP to fullscreen, then takes the PiP images and convert the image with flir tools to a MSX image

see details for old E40 and MSX:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg427039/#msg427039 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg427039/#msg427039)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406831/#msg406831 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg406831/#msg406831)

or use imagemagick
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 23, 2014, 11:32:46 pm
FLIR just won a design award for the E8: http://www.test-meter.co.uk/blog/flir-e8-thermal-imaging-camera-wins-prestigious-red-dot-design-award (http://www.test-meter.co.uk/blog/flir-e8-thermal-imaging-camera-wins-prestigious-red-dot-design-award)

This suggests they haven't really lost any E8 sales due to the E4 hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 24, 2014, 10:11:16 am
FLIR just won a design award for the E8: http://www.test-meter.co.uk/blog/flir-e8-thermal-imaging-camera-wins-prestigious-red-dot-design-award (http://www.test-meter.co.uk/blog/flir-e8-thermal-imaging-camera-wins-prestigious-red-dot-design-award)

This suggests they haven't really lost any E8 sales due to the E4 hack.
Can't see how an award has any correlation with sales...

However it does give me an evil idea - how about getting hackaday to give the E4 an award for best value-adding hackable hardware.  Sort of like an IgNobel prize..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on May 24, 2014, 10:35:48 am
I thought MSX was done in the FPGA, hence why the VGA camera connects to the FPGA directly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 25, 2014, 08:16:03 am
If you think that's bad, someone just created a new website for selling hacked E4's: http://flir-upgraded.com (http://flir-upgraded.com)

It now says the shop is no longer available. I have a feeling lawyers were involved.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 25, 2014, 04:07:31 pm
If you think that's bad, someone just created a new website for selling hacked E4's: http://flir-upgraded.com (http://flir-upgraded.com)

It now says the shop is no longer available. I have a feeling lawyers were involved.

I don't think it has anything to do with lawyers. It is more likely the supplier can't get it any more or the product is harder to hack.
Why can't someone sell hacked or modified Products?
Of course the company that makes the product won't be happy, specially if you are making money but I am sure you should be allowed to do anything you want after buying the product.
Same thing with hacked PS3, Wii, iPhone or iPads.
Or even unlocked cell phones.
All those products were either hacked or modified, and sold later
I understand that companies don't like their products being changed or hacked,
But in my opinion, you should be able to do whatever you like after you bought it.
Or it would be saying, you can't upgrade your car, by getting better intake, or lower the suspensions,
Of course lawyer will try to prevent you to make money because they are paid to do that
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 25, 2014, 05:28:41 pm
If you think that's bad, someone just created a new website for selling hacked E4's: http://flir-upgraded.com (http://flir-upgraded.com)

It now says the shop is no longer available. I have a feeling lawyers were involved.

I don't think it has anything to do with lawyers. It is more likely the supplier can't get it any more or the product is harder to hack.

The latest firmware (2.1.0) has only just come out. We don't know if it has any new countermeasures against the resolution hack, and it has not been seen on production units yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 25, 2014, 08:41:36 pm
Sorry for the double post, but FLIR just removed the 1.22.0 download and put up the 2.1.0 one: http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mvh on May 25, 2014, 10:45:54 pm
I have a weird feeling that I won't be installing that 2.1 "upgrade" anytime soon, happy with my 1.19...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 26, 2014, 04:14:35 pm
Has anyone tried to downgrade the firmware?
Just wondering!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 26, 2014, 05:04:32 pm
Has anyone tried to downgrade the firmware?
Just wondering!

I think someone bricked their camera after trying to downgrade from 1.22.0 to 1.18.7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 26, 2014, 06:43:17 pm
Has anyone tried to downgrade the firmware?
Just wondering!
I think someone bricked their camera after trying to downgrade from 1.22.0 to 1.18.7.
With an ongoing update routine, it is possible, but should not.
You should analyze the camera.cmd of different update versions, then you can see which commands are executed during the update. Now you change the camera.cmd so that the update goes through without stopping because the actual firmware is "newer".
After analysing the last 4 updates I am sure that a downgrade is possible as long as the hardware is identical (which should be yes).
A new sensor could be in the devices with the new version 2.x.x installed.

One should not forget that a new binary might change configuration files in one direction - without having a method to revert them back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on May 26, 2014, 07:00:48 pm
Other than (trying to) prevent hacking, what is new in version 2.x.x from 1.8.x?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 26, 2014, 09:51:15 pm
And a 2nd fpga.bin (fpga_lepton.bin) is added, for whatever.  :-//
For products using the lepton core of course.
 My bet is the E4 will be replaced with a Lepton based unit.
Once Lepton is in production, why continue using a 320x240 sensor in the low-end product when they have a doubtless cheaper sensor available.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 26, 2014, 10:20:04 pm
I also have a feeling that FLIR will switch the E4 to a Lepton core soon. On the other hand, they just might also drop the price of the E4 - and hopefully that of the other cameras too!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 26, 2014, 10:30:39 pm
In other news, Flir have just announced a $499 Lepton based security camera (http://www.sourcesecurity.com/news/articles/co-9756-ga-co-5188-ga.13978.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 27, 2014, 12:45:35 am
Another price breakthrough. BUT I think the images shown in the article are a little deceptive..... they do not look like 80x60 resolution to me.

I like that little Lepton core, it is a very neat piece of integration and miniaturisation. Perfect for all manner of applications.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 27, 2014, 01:34:08 am

<edit> But what reason would anyone have for such a downgrade? (except of 2.x.x to 1.x.x)

Well isn't the 1.18 fw has better hack? Also has video right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 27, 2014, 08:52:17 am
Another price breakthrough. BUT I think the images shown in the article are a little deceptive..... they do not look like 80x60 resolution to me.

I like that little Lepton core, it is a very neat piece of integration and miniaturisation. Perfect for all manner of applications.
Apparently there is also a UAV in the works with one, and I'd expect people are doing stuff like super-lightweight head-up displays for firefighters, if only they'd just sell them in Digikey..
Currently they'll only talk to you if you can buy a MOQ of 1000 at $250 each. Hopefully that will change in time. In the meantime, I'm sure someone  ;) will reverse- engineer the protocols so you can rip them out of FlirOnes as & when they become available. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 27, 2014, 10:46:42 am
Indeed, and hopefully someone will come up with a clever mechanical jitter concept to crerate higher resolution images via frame layering  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 27, 2014, 04:02:23 pm
something related, has anyone bought or try to buy a FLIR recently? has there been stock shortages?

I ordered another E4 on the 15th of May
If local store get it the same time as my first E4
I should get it tomorrow or this week
Hope it is still 1.22
Let you guys know when I get it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on May 27, 2014, 07:16:33 pm
something related, has anyone bought or try to buy a FLIR recently? has there been stock shortages?

I bought my first E4 v1.22 ten days ago. I used it in E4 mode, found an arcing breaker at my friend's house (effectively paid for the unit right there right now!) and I procrastinated up until mid last-week to upgrade it.  When I brought it up to E8 status, I was flabbergasted !

I loved it so much, I bought three additional brand new 1.22 (verified at the moment of purchase) units.

I haven't upgraded them yet. 

The sales guy was pissed, because he knew what I was going to do with them...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on May 27, 2014, 07:19:07 pm
Upon upgrading my E4, I noticed that the IR images has vertical lines (density inconsistencies).

Is that an artefact of some calibration matrix not being properly calibrated for 320*240 but only for 80x60, with individual pixel compensation values missing ?  The sample images that I download from FLIR do not seem to display those vertical lines...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PLUMMER on May 27, 2014, 08:47:52 pm
As of today the last E4 Grainger had in stock was sold for the states of OH,IN, MI,KY. It was a 1.22.0 -1.1L calibrated April 14th,2014. New inventory for this region will be direct ship from FLIR.    Out the door price of $900.00 via preferred contractors account.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on May 27, 2014, 11:08:01 pm
Upon upgrading my E4, I noticed that the IR images has vertical lines (density inconsistencies).

Is that an artefact of some calibration matrix not being properly calibrated for 320*240 but only for 80x60, with individual pixel compensation values missing ?  The sample images that I download from FLIR do not seem to display those vertical lines...

Myself and others don't seem to have that issue. My camera had the 1.19 firmware and the earlier hardware version.
Some details about the previous items, hw, fw versions might help some of the more experienced guys here answer that question. If you didn't do it already Aurora has a thread where that info is also greatly appreciated. On another note, the calibration house my company uses for all of our gear that needs calibration said that the mod to the e4 doesn't have any influence on their end. Good news for those of us who need to have calibrated instruments. The guy i spoke to actually said that they have already calibrated "several upgraded devices" and will happily continue to do so. Im thinkin they have a few of their own ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: spatia on May 28, 2014, 02:23:44 am
Gents... New to this forum but just picked up an E4 with the 1.22 software...

I get as far as using filezilla and get this...

Command:   PORT 192,168,0,12,209,132
Response:   200 Ready command OK.
Command:   LIST
Command:   TYPE I
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   PWD
Response:   257 "/" is current directory.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   TYPE I
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   TYPE I
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   PWD
Response:   257 "/" is current directory.
Status:   Sending keep-alive command
Command:   NOOP
Response:   200 Ready command OK.
Status:   Sending keep-alive command
Command:   PWD
Response:   257 "/" is current directory.
Status:   Sending keep-alive command
Command:   TYPE I
Response:   200 Ready command OK.
Status:   Retrieving directory listing...
Command:   PORT 192,168,0,12,209,216
Response:   200 Ready command OK.
Command:   LIST
Response:   450 Data connection busy.
Error:   Failed to retrieve directory listing

Everytime I can't see the files in the unit.  Any help is appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 28, 2014, 02:33:03 am
Gents... New to this forum but just picked up an E4 with the 1.22 software...

I get as far as using filezilla and get this...

Command:   PORT 192,168,0,12,209,132
Response:   200 Ready command OK.
Command:   LIST
Command:   TYPE I
...

Everytime I can't see the files in the unit.  Any help is appreciated.

I'd say check your IP routing and local firewall settings for the IP range in question.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on May 28, 2014, 07:58:44 am
Just wanted to share the tripod mount I made out of Polymorph (Polycaprolactone)
A 1/4 to 3/8 adapter in the bottom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 28, 2014, 10:43:29 am
For those who have been following it, I have just updated my serial number Vs firmware and calibration date list here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

Sorry for the meandering columns  ;D

My thanks to all who have provided their camera details. I especially wish to thank one member of this forum (he knows who he is) who has provided whole batches of Serial/FW/Cal details for the forums use.

Newbies to this forum may wish to brows the content of my E4 Useful information thread.....it has some useful information within it.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 29, 2014, 04:53:08 am

 may wish to browse the content of my E4 Useful information thread.....it has some useful information within it.

Aurora
Who woulda figured  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on May 29, 2014, 12:24:08 pm
New use for the MikE8 today - how to tell if the washing on the line is dry!

Maximum Dad nerd points from the kids!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: olsenn on May 29, 2014, 01:04:12 pm
The other day my girlfriend asked me to make a porno of her with my thermal camera... this is how I know I'm in love!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on May 29, 2014, 03:23:02 pm
The other day my girlfriend asked me to make a porno of her with my thermal camera... this is how I know I'm in love!
I hope you are going to post the link then here  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 29, 2014, 04:11:04 pm
Just a short notice for anybody experiencing similar issues:

My E4+ did show problems with the DCIM folder - could not be listed or read over telnet/samba
diskutil unmount, check, remount did not help - still was unable to list contents - not even with "dir" in telnet! -> just stuck
new images were not saved etc.

Solution: changed to RNDIS+MSD mode - there I could read out the contents and recover the images (then I re-formatted the partition)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 29, 2014, 04:50:38 pm
The other day my girlfriend asked me to make a porno of her with my thermal camera... this is how I know I'm in love!

Thermograms or it didn't happen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on May 29, 2014, 04:57:57 pm
I think I have seen that video.........

Clash of the Titans?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 29, 2014, 07:18:27 pm
Just a short notice for anybody experiencing similar issues:

My E4+ did show problems with the DCIM folder - could not be listed or read over telnet/samba
diskutil unmount, check, remount did not help - still was unable to list contents - not even with "dir" in telnet! -> just stuck
new images were not saved etc.

Solution: changed to RNDIS+MSD mode - there I could read out the contents and recover the images (then I re-formatted the partition)
Have you changed the default store path for the images?
rls .services.volumes.0.directory

I download the Images over ftp and also use ftp to create/delete folders.
Just set the "default store path" is over Telnet.
what do you have done to reach this issue?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 29, 2014, 07:26:14 pm
Just a short notice for anybody experiencing similar issues:
...
Have you changed the default store path for the images?
rls .services.volumes.0.directory

I download the Images over ftp and also use ftp to create/delete folders.
Just set the "default store path" is over Telnet.
what do you have done to reach this issue?
No, didn't change the path - my guess is that's some strange issue with FAT based filesystems that get a "knock on the head" ;)
Interestingly everything was fine when read as memory device (MSD mode).
My best guess is that it's related to taking snapshots early after boot when not all services have started yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 30, 2014, 11:40:43 am
So, my E4 just arrived. It has the 2.1.0 firmware loaded (S/N: 639285XX)

Did anybody already try changing the 2.1.0 firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 30, 2014, 11:44:10 am
@realdoc,

Grateful for your units calibration date and the hardware build (detailed in camera details page)

Cheers

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 30, 2014, 11:48:45 am
Grateful for your units calibration date and the hardware build (detailed in camera details page)

Model: E4 1.2L
S/N: 639285XX
Part Number: 63901-0101
Date: 23 May 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 30, 2014, 11:51:53 am
Many thanks.

That is a new hardware revision as well  :(

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 30, 2014, 11:58:36 am
Many thanks.

That is a new hardware revision as well  :(

Aurora

Yup. Already noticed that as well. There is a packing slip on the box indicating it was shipped from FLIR in Estonia to my distributor somewhere late May, so it's really brand new. Any clues on how to proceed with this? It would be great if we can still open up this unit :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 30, 2014, 12:02:08 pm
I suspect the resident experts will need to ask you some questions about your cameras file structure and contents before it may be discovered what cunning plan FLIR have enacted this time.

You should be contacted soon as many will wish to discover what is new in this build

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marphy on May 30, 2014, 12:49:19 pm
Try to enable RNDIS mode. If this works, use TIConfig or FileZilla to make a full backup. Please report.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 30, 2014, 02:53:59 pm
Try to enable RNDIS mode. If this works, use TIConfig or FileZilla to make a full backup. Please report.

I can enter the hidden menu, which is nice! However, I cannot change the USB setting from UVC+MSD to anything else. Selecting RNDIS will just revert the option to the old setting, not taking any effect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 30, 2014, 04:04:50 pm
Vertical lines.....

Some E4 users have reported vertical lines on their images. I personally have not noticed anything serious in this respect on my E4 and it is possible that some cameras perform better in this respect than others due to production tolerances.

I just saw an interesting image and write-up on signal processing that mentioned FLIR. Take a look here:

http://www.mathworks.co.uk/company/newsletters/articles/matlab-and-simulink-in-the-world-connecting-matlab-and-simulink-to-hardware.html (http://www.mathworks.co.uk/company/newsletters/articles/matlab-and-simulink-in-the-world-connecting-matlab-and-simulink-to-hardware.html)

Some way down the page you will see a before and after thermal image and comment on FLIR image processing needed to clean up the output of the micro-bolometer. The 'before' image is pretty ugly !  I note that FLIR have spent a lot of R&D time on cleaning up the relatively noisy images produced by micro-bolometers. My PM570 image is pretty noisy when compared to more recent generations of camera. FLIR have recognised the importance to some users of a 'pretty' picture. Noise is not truly a big issue for my usage, but I suppose a nice clean image sells better  :)
To get low noise images you used to have to invest in a cryo-cooled camera.....not any more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 30, 2014, 05:03:10 pm
Vertical lines.....
Flir has some digital filters. If you turn them off, you can see lines... in both directions...

I love this camera and this functions ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on May 30, 2014, 05:14:35 pm
Vertical lines.....
Flir has some digital filters. If you turn them off, you can see lines... in both directions...

I love this camera and this functions ;)
Sure wish your website had English translation.... looks like a few nice projects, but I can't understand what is going on?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 30, 2014, 05:25:49 pm
Sure wish your website had English translation....
I overwrite now the Ex Tool site to make it bilingual and remove older contend. I think this should be done tomorrow.
The program is already in English available (language file).

Btw... I still don't received my bricked E4 from the FLIR support. I don't know why this takes so long... but I am sure... that's not a good sign.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on May 30, 2014, 05:27:50 pm
Vertical lines.....
Flir has some digital filters. If you turn them off, you can see lines... in both directions...

I love this camera and this functions ;)
Sure wish your website had English translation.... looks like a few nice projects, but I can't understand what is going on?

translate.google.com does a pretty good job:

http://translate.google.com/translate?sl=de&tl=en&js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fjoe-c.de%2F&edit-text= (http://translate.google.com/translate?sl=de&tl=en&js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fjoe-c.de%2F&edit-text=)

Edit: Although in chrome it seems I need to right click and open in a new tab or window to navigate through the website
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on May 30, 2014, 05:29:41 pm
Sure wish your website had English translation....
I overwrite now the Ex Tool site to make it bilingual and remove older contend. I think this should be done tomorrow.
The program is already in English available (language file).

OK thank you!  Yes, I remember in an earlier post of yours about your software for the Ex, you did mention about the different language files, just trying to figure out what to get from your site... I appreciate your effort and help!
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on May 30, 2014, 06:25:46 pm
Yes Gtranslate does do a good job, just didn't know how to get it to run.  It used to be available as a drop down menu selection in Firefox, but has disappeared.  Thanks for the link!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 30, 2014, 08:31:36 pm
Try to enable RNDIS mode. If this works, use TIConfig or FileZilla to make a full backup. Please report.
I can enter the hidden menu, which is nice! However, I cannot change the USB setting from UVC+MSD to anything else. Selecting RNDIS will just revert the option to the old setting, not taking any effect.
RNDIS should be activated over an update file. No time this moment. Will be back later.
<edit>Run FLIRInstallNet.exe from FLIR Tools install dir, set RNDIS_UVC mode by running Set_RNDIS_Mode.fif and restart your camera. RNDIS_UVC should be activated.

Somehow, on 3 computers running Vista, Windows7 and Windows8, the new 1.2 camera fails to show up as a Mass Storage Device and FLIR tools cannot see the device either. In device manager, it does show up with an exclamation mark as a imaging device "FLIR Ex-Series". I tried resetting it to factory defaults, which also didn't help. Anyone any idea or should I just return it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on May 31, 2014, 05:27:42 am
Grateful for your units calibration date and the hardware build (detailed in camera details page)

Model: E4 1.2L
S/N: 639285XX
Part Number: 63901-0101
Date: 23 May 2014

Hi
Could you tell us when did you order and what country?
I am in canada
I ordered my second E4 on May 15
Now I am really worry
Still haven't got it from my local supplier, which says coming from the East coast of canada
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 31, 2014, 06:57:59 am
Grateful for your units calibration date and the hardware build (detailed in camera details page)

Model: E4 1.2L
S/N: 639285XX
Part Number: 63901-0101
Date: 23 May 2014

Hi
Could you tell us when did you order and what country?
I am in canada
I ordered my second E4 on May 15
Now I am really worry
Still haven't got it from my local supplier, which says coming from the East coast of canada

I ordered mine on the 26th of May in The Netherlands. My batch was calibrated in Estonia on the 20th, shipped to my supplied on the 22th and delivered to my doorstep on the 30th.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 31, 2014, 02:50:42 pm
Now the Ex-Tools site was overwritten with new screenshots and a German (black) / English (blue) description.
The English is probably a little bit crappie, but I hope it could be understand ;)
http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

Somehow, on 3 computers running Vista, Windows7 and Windows8, the new 1.2 camera fails to show up as a Mass Storage Device and FLIR tools cannot see the device either. In device manager, it does show up with an exclamation mark as a imaging device "FLIR Ex-Series". I tried resetting it to factory defaults, which also didn't help. Anyone any idea or should I just return it?
Have you downloaded and installed the flir device driver (needed for the RNDIS mode):
http://flir.custhelp.com/app/answers/detail/a_id/4/~/installing-drivers-for-the-cameras. (http://flir.custhelp.com/app/answers/detail/a_id/4/~/installing-drivers-for-the-cameras.)

If you have installed the driver, the camera sould have a IP. This could be checked with the "FLIRInstallNet.exe from FLIR Tools install dir". This show the IPs in the combo box at the top.
If you see the camera with IP... use this IP in your Browser. If you see the FLIR web interface it is time for the next steps...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on May 31, 2014, 04:59:39 pm
Joe... thank you for translating your page.  Your English version is very understandable even with the "mistakes", but you did a great job.
Seems like it is a very handy utility with alot of control.... I have no idea of what would be a good price for all your work, but I am going to give you my idea... please don't be insulted if I am way too low.
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Smokem on May 31, 2014, 05:28:56 pm
Been sitting on the sidelines reading up on this. Great work to you all.

Now for my tiny tiny contribution... considering that firmware 2.1 is out, just a serial number to tighten up the log.

My unit has version 1.22 on serial 63925XXX with calibration date of April 28th, so estimate the worldwide supply accordingly :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 31, 2014, 06:03:53 pm
Now the Ex-Tools site was overwritten with new screenshots and a German (black) / English (blue) description.
The English is probably a little bit crappie, but I hope it could be understand ;)
http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

Somehow, on 3 computers running Vista, Windows7 and Windows8, the new 1.2 camera fails to show up as a Mass Storage Device and FLIR tools cannot see the device either. In device manager, it does show up with an exclamation mark as a imaging device "FLIR Ex-Series". I tried resetting it to factory defaults, which also didn't help. Anyone any idea or should I just return it?
Have you downloaded and installed the flir device driver (needed for the RNDIS mode):
http://flir.custhelp.com/app/answers/detail/a_id/4/~/installing-drivers-for-the-cameras. (http://flir.custhelp.com/app/answers/detail/a_id/4/~/installing-drivers-for-the-cameras.)

If you have installed the driver, the camera sould have a IP. This could be checked with the "FLIRInstallNet.exe from FLIR Tools install dir". This show the IPs in the combo box at the top.
If you see the camera with IP... use this IP in your Browser. If you see the FLIR web interface it is time for the next steps...

I cannot get the camera in RNDIS mode. To do so, I need to put a FIF file on there to enable it, because the hidden menu does not allow it to be changed. However, FlirInstallNet fails to find the device as there is no mass storage device created in Windows. Connecting it to my Linux laptop does give me a MSD, but FLIR Tools does not work on Linux.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 31, 2014, 06:56:00 pm
I cannot get the camera in RNDIS mode.
If you cannot change something in the hidden menu... work the settings from the normal USB menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 31, 2014, 09:59:46 pm
I cannot get the camera in RNDIS mode.
If you cannot change something in the hidden menu... work the settings from the normal USB menu?
There is no normal USB menu to change anything.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 31, 2014, 10:01:05 pm
I cannot get the camera in RNDIS mode. To do so, I need to put a FIF file on there to enable it, because the hidden menu does not allow it to be changed. However, FlirInstallNet fails to find the device as there is no mass storage device created in Windows. Connecting it to my Linux laptop does give me a MSD, but FLIR Tools does not work on Linux.
If you have no access in Flir Tools, there is a driver problem. Reinstall Flir Tools!
According to the documentation, even without a driver the E4 should install as a Mass Storage Device. Anyway, I tried 3 different machines, installed and reinstalled FLIR Tools several times, even reinstalled Windows 8 to get it working. Nothing helped.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on May 31, 2014, 10:55:32 pm
Simply asked: Do you have any way to copy the photos from your camera to your PC? If no, then your camera may be broken.
If in UVC and MSD mode (standard) you should have a mass storage device named 'FLIR Ex-Series' and FlirInstallNet.exe looks like screenshot attached.

Nope, I don't have any Mass Storage Device on any of my 3 Windows computers. At first I didn't know I should have one, but I guess I should :) Also, FlirNetTools says it cannot find a camera and doesn't show the USB Video like in your screenshot.

The only strange thing is my Linux computer does show a Mass Storage Device. That's a little awkward. Anyway, I guess FLIR broke something with their 1.2L hardware, 2.1.0 firmware, drivers or my specific unit so I just return it to get it replaced. When I have a new one, I will report in again so we can try upgrading it again :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on May 31, 2014, 11:35:28 pm
Nope, I don't have any Mass Storage Device on any of my 3 Windows computers. At first I didn't know I should have one, but I guess I should :) Also, FlirNetTools says it cannot find a camera and doesn't show the USB Video like in your screenshot.

Ok... here a small checklist:
- be sure to install flir player (comes with drivers)
- try with alternative cable - they sometimes break!
- do not use USB hubs
- try different USB ports
- write down what OS and patchlevel did not recognize the camera
- visually inspect the socket (use magnifier)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on June 01, 2014, 03:25:04 am
Nope, I don't have any Mass Storage Device on any of my 3 Windows computers. At first I didn't know I should have one, but I guess I should :) Also, FlirNetTools says it cannot find a camera and doesn't show the USB Video like in your screenshot.

Ok... here a small checklist:
- be sure to install flir player (comes with drivers)
- try with alternative cable - they sometimes break!
- do not use USB hubs
- try different USB ports
- write down what OS and patchlevel did not recognize the camera
- visually inspect the socket (use magnifier)
I was helping someone on skype and they made the mistake of updating from 1.22 to 2.1 and they are having the same exact symptoms... its not even showing up on Flir Tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 01, 2014, 03:50:21 am
Been sitting on the sidelines reading up on this. Great work to you all.

Now for my tiny tiny contribution... considering that firmware 2.1 is out, just a serial number to tighten up the log.

My unit has version 1.22 on serial 63925XXX with calibration date of April 28th, so estimate the worldwide supply accordingly :)

Hi I want to contribute too
I am in canada

Bought mine first E4
On May 1st
Got it on 8th
Serial 63925xxx
Site Estonia
Date April 28, 2014
1.22.0
1.1L

Hope you guys can find a way to hack this new version
Thanks
Any news if this new version still have the same hardware ?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 07:30:59 am

Any news if this new version still have the same hardware ?
No, it has a new reivision, but due to the problems I have actually hooking it up to a computer, we cannot dump the files on there to analyze or try the IR sensor modifications.

I was helping someone on skype and they made the mistake of updating from 1.22 to 2.1 and they are having the same exact symptoms... its not even showing up on Flir Tools.
Okay,so that would mean my camera is not broken, that 1.2L is not proven broken yet, but the 2.1.0 firmware is causing this issue. Did you manage to resolve the issue with them?

- try with alternative cable - they sometimes break!
- do not use USB hubs
- try different USB ports
- visually inspect the socket (use magnifier)
- write down what OS and patchlevel did not recognize the camera
Already did those. I actually used 3 diferent computers. Windows 7 Ult x64, Windows 8.1 x86, Windows Vista SP2 x64 with FLIR tools 4.1.14066.1001 and driver 1.9.1.0.

- be sure to install flir player (comes with drivers)
That might be the missing link, I will try that right away :)

BTW, I also logged a support issue with FLIR about it. Let's see what they come up with.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 07:37:05 am
- be sure to install flir player (comes with drivers)
That might be the missing link, I will try that right away :)
Don't forget to install as Administrator (use right mouse button)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 01, 2014, 07:38:53 am
Don't know if it helps, but here is the direct link to the installer for the 2.1.0 firmware: http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 07:42:30 am
Don't know if it helps, but here is the direct link to the installer: http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.1.0_update_pack.zip)
That's the link to the most crippled update pack - IMHO nobody should use it.

This is the current PLAYER direct download link: http://support.flir.com/SwDownload/Assets/FLIR%20IR%20Camera%20Player/flir_ir_camera_player_2.3.3.exe (http://support.flir.com/SwDownload/Assets/FLIR%20IR%20Camera%20Player/flir_ir_camera_player_2.3.3.exe)

Other stuff: http://support.flir.com/SwDownload/App/SWDownload.aspx (http://support.flir.com/SwDownload/App/SWDownload.aspx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 08:26:51 am
- be sure to install flir player (comes with drivers)
That might be the missing link, I will try that right away :)
Unfortunately, that did not work. The device drivers in the FLIR Player package are also the same 1.9.1.0 drivers as you can download seperately from the FLIR custhelp site.

It just feels like they upgraded the firmware but forgot to release new drivers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 08:32:52 am
- be sure to install flir player (comes with drivers)
That might be the missing link, I will try that right away :)
Unfortunately, that did not work. The device drivers in the FLIR Player package are also the same 1.9.1.0 drivers as you can download seperately from the FLIR custhelp site.

It just feels like they upgraded the firmware but forgot to release new drivers.

What VID/PID string does the windows device manager show for the USB device?
Did you try factory resetting the E4?
Is the demo mode possibly enabled?
Does saving a picture by trigger and replaying it -in cam- work?
Edit: Did you try hard-resetting the cam (remove battery)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 08:53:25 am
Quote
What VID/PID string does the windows device manager show for the USB device?
Code: [Select]
kernel: usb 3-3: new high-speed USB device number 4 using xhci_hcd
kernel: usb 3-3: New USB device found, idVendor=09cb, idProduct=1007
kernel: usb 3-3: New USB device strings: Mfr=7, Product=8, SerialNumber=0
kernel: usb 3-3: Product: FLIR Ex-Series
kernel: usb 3-3: Manufacturer: FLIR Systems

Quote
Did you try factory resetting the E4?
Yes, I did. After that I also power-cycled it.

Quote
Is the demo mode possibly enabled?
No. And after resetting the camera to factory defaults, that should be gone anyway I guess.

Quote
Does saving a picture by trigger and replaying it -in cam- work?
Yes, that works. I can also display the taken picture, as long as USB is not connected.

Quote
Edit: Did you try hard-resetting the cam (remove battery)
Yes, multiple times.

The strange thing is that the Mass Storage seems to work in Linux, but on none of my Windows machines,not even freshly installed ones. That really leaves me puzzled.

Are my PID/VID the same as yours? What OS / Patch Level / FLIR tools version are you running? I will then reproduce the exact same scenario and try again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 09:31:24 am
Quote
What VID/PID string does the windows device manager show for the USB device?
Code: [Select]
kernel: usb 3-3: new high-speed USB device number 4 using xhci_hcd
kernel: usb 3-3: New USB device found, idVendor=09cb, idProduct=1007
kernel: usb 3-3: New USB device strings: Mfr=7, Product=8, SerialNumber=0
kernel: usb 3-3: Product: FLIR Ex-Series
kernel: usb 3-3: Manufacturer: FLIR Systems

Please hit WIN+PAUSE under windows and navigate to device manager -> please post a screenshot showing all unknown devices listed there - my best guess would be you're missing the lower-level USB drivers or you have some strange security software running (upper or lower filters)

The VID/PID combo changes depending on selected mode - can somebody pls. fetch the table from our archives? ... see below for details
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 09:53:26 am
Found it...
Code: [Select]
MSD                   : 09cb:ffff
UVC                   : 09cb:1004
RNDIS                 : 09cb:1002
RNDIS and UVC         : 09cb:1005
RNDIS and MSD         : 09cb:1006
UVC and MSD (standard): 09cb:1007 <<<
RNDIS, UVC and MSD    : 09cb:1005

Note: RNDIS, UVC and MSD   is known not to work... but that won't affect you - your E4 is still in default mode!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 10:08:53 am
Please hit WIN+PAUSE under windows and navigate to device manager -> please post a screenshot showing all unknown devices listed there - my best guess would be you're missing the lower-level USB drivers or you have some strange security software running (upper or lower filters)

The only thing there is an Imaging Device with an exclamation mark called "FLIR Ex-Series". There is no Mass Storage Device, nor nothing else with exclamation marks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 10:33:16 am
The only thing there is an Imaging Device with an exclamation mark called "FLIR Ex-Series". There is no Mass Storage Device, nor nothing else with exclamation marks.

Thats what I've expected - driver is not installed or not working.
Doubleclick that device and read/copy the explanation why it does not work (driver, not working properly etc)
-> maybe try install driver and if requested select the driver directory...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 11:03:43 am
Thats what I've expected - driver is not installed or not working.
Doubleclick that device and read/copy the explanation why it does not work (driver, not working properly etc)
-> maybe try install driver and if requested select the driver directory...

Which driver are you using? I tried all of them in the Device Drivers folder, but they all result in a BSOD (blue screen of death).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 01, 2014, 11:11:04 am
Which driver are you using? I tried all of them in the Device Drivers folder, but they all result in a BSOD (blue screen of death).
How about supplying some helpful data like BSOD message code (take it from syslog)...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on June 01, 2014, 04:29:05 pm
New problem on E4 1.1L  v1.22.0

The camera started to become erratic. I had a WinCE error (which I didn't note down).

Eventually, the up button would not work anymore.

I did a factory reset, cold boot, removed the improved menus, removed the res improve and I am now back to the stock E4.

The up-button on the paddle does not work. I cannot access emissivity controls anymore, unless I do a factory reset. Every time I go down into the config menu, I must do a factory reset to go to the top again.

I will try to return the unit, as it seems to be hardware-related.  Hopefully, I'll get a 1.22 back
Any comment?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 01, 2014, 08:19:23 pm
How about supplying some helpful data like BSOD message code (take it from syslog)...

I went through all the installed drivers for the video and they are all ment for a firewire thermalcam, so that might well be why they result in a BSOD. Unfortunately I have to leave home for work the upcoming week, so I cannot troubleshoot anything until next Friday. I let you guys know if I get any response from FLIR on my ticket tho :)

Thanks so far!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 02, 2014, 11:57:16 am
Whatever you want. Tomorrow. Send a PM with your E-Mail to me. You will get the file.
the best of all (1.19.8) could never been downloaded, right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tom66 on June 02, 2014, 10:05:52 pm
Damn, I start work in July. I sure hope the Lepton E4 isn't out by then, because I'll finally be able to afford a proper E4 to upgrade. Otherwise FLIR will lose any prospect of money from me.

They should just make it so you can upgrade but it embeds a small watermark "Unauth. Upgrade" - that prevents professional users from using it (probably what they are most concerned about) - whilst allowing other non-pros to use it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 02, 2014, 11:13:37 pm
They should just make it so you can upgrade but it embeds a small watermark "Unauth. Upgrade"
This is not a good idea.
It seems at the moment to be already too late, as currently the E4 is already delivered with the new FW 2.1.0. There is as yet no indication of a successful hack.
But on the bright side, there are also no signs of an unsuccesful hack. attempt The 2.1.0 sw and 1.2L hw are just very new and so far I seem to be the only one having them. Let's hope FLIR can fix the driver issues I experience, so I can hook my Ex up to FLIR Tools and see what happens :)  Just being able to transfer the pictures would be cool already haha.

Looking at the 2.1.0 firmware, it's still a WinCE environment with some magic, but the executables don't seem to be overly protected. The worst case would be that we would have to change our attack vector from the checksummed cfc file to the appcore.exe binary and dll, to change variables or prevent security checks from raising exceptions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 03, 2014, 08:35:41 am
@realdoc.

I know it would not help this community but in your position I would be looking at returning your E4 for a refund as it is not fit for purpose due to the FLIR Tool connectivity issue. I would then put my efforts into finding an E4 with version 1.22 or earlier firmware. They are still available if you look around. There is the very real possibility that FLIR have done a decent job of locking down the platform this time. Nothing is unhackable if it has an I/O port BUT it may take a great deal of effort to succeed this time and such relies on 'others' having the time to assist. The fact that the E4 no longer communicates with its OEM software may even be an indicator of how locked down the new firmware is. As I have stated, an open I/O port is a vulnerability and FLIR know it. There are ways to ensure that a platform will only provide limited connectivity via its external ports and only to a specific application that is in itself locked down to prevent its easy use as an attack vector.

FLIR read this forum and will be learning from the conversations that occur here. If you wish to take the risk that they have missed an attack vector in their latest release then stick with it, but they have had plenty of time to perfect their defensive strategy and that new hardware revision makes me think they may have advanced to combined firmware and hardware lock downs. I may be totally wrong but while there are still older firmware cameras available, I would make life easier for myself and get one of those while you have the good treason to return your 2.1.0 camera.

Just my 5 Cents worth.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pciebiera on June 03, 2014, 03:59:56 pm
FYI E4 ordered from Amazon US on May 30, 2014 arrived June 2, 2014 has firmware 1.22.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 03, 2014, 04:16:52 pm
Ok so I have been following progress on the hack for a while and took the plunge to find out I've got an e4 with the new firmware! :(

I'm having the same issue putting it into RNDIS mode, I can get to the menu and then select it but it never actually changes mode.

Oddly I'm not having driver issues as stated, I can view the camera video using Flir player.exe etc.

Any tricks I can try to get the camera to respond in RNDIS? Happy to provide any details necessary.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 03, 2014, 04:52:48 pm
I wouldn't be surprised if FLIR deliberately disabled RNDIS mode to hamper the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 03, 2014, 05:10:51 pm
The camera will likely still have an I/O port that is open for calibration tasks so it is unlikely to be totally locked down but activation may require either a 'secret' key sequence or the correct 'Open Sesame' command from a host computer. There are so many ways to slam the door shut on users by denying them the attack vectors that are needed to 'probe' the OS and firmware. Sadly when a manufacturer goes for a nice tight lock-down, you often have to move from a close case, to open case hack involving direct access to key chips in the system. There is the RS232 port on the motherboard but FLIR know that this was discovered and exploited by Mike. It may end up with someone having to open their new E4 to see what, if anything, has changed since HW 1.0 and 1.1L. It would be a real shocker to see a LEPTON core sat where once a 320x240 microbolometer had resided ! Panic not, it's unlikely that this has been done. The FPGA config files are what would worry me. As others have stated, reverse engineering an FPGA is not a real option and so any countermeasure that involved the FPGA could be very effective.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 03, 2014, 05:29:10 pm
I wonder if a method like this (http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor) could be used to find unofficial upgrade paths.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 03, 2014, 05:55:04 pm
Ok so I have been following progress on the hack for a while and took the plunge to find out I've got an e4 with the new firmware! :(

I'm having the same issue putting it into RNDIS mode, I can get to the menu and then select it but it never actually changes mode.

Oddly I'm not having driver issues as stated, I can view the camera video using Flir player.exe etc.

Any tricks I can try to get the camera to respond in RNDIS? Happy to provide any details necessary.

Maybe you can try the SetRndisTemporary.fif from the attachment to the post of Mike
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

That only runs one command to change the USB mode and should not persist through reboots. Do be aware however, that it might not work or wreck something. You should be able to run it using the FlirInstallNet.exe command in your FLIR Tools directory.

BTW, can you make a screenshot of your device manager with the FLIR devices expanded? So I can compare with is different with me. And maybe check which driver you are using?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 03, 2014, 08:58:16 pm
]FlirInstallNet needs a device. But if you don't have a device...
But doesn't he have a device? You don't need your camera to be in RNDIS mode to install a fif file, from what I understood.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 03, 2014, 09:23:29 pm
@realdoc.

I know it would not help this community but in your position I would be looking at returning your E4 for a refund as it is not fit for purpose due to the FLIR Tool connectivity issue. I would then put my efforts into finding an E4 with version 1.22 or earlier firmware. They are still available if you look around. There is the very real possibility that FLIR have done a decent job of locking down the platform this time. Nothing is unhackable if it has an I/O port BUT it may take a great deal of effort to succeed this time and such relies on 'others' having the time to assist. The fact that the E4 no longer communicates with its OEM software may even be an indicator of how locked down the new firmware is. As I have stated, an open I/O port is a vulnerability and FLIR know it. There are ways to ensure that a platform will only provide limited connectivity via its external ports and only to a specific application that is in itself locked down to prevent its easy use as an attack vector.

FLIR read this forum and will be learning from the conversations that occur here. If you wish to take the risk that they have missed an attack vector in their latest release then stick with it, but they have had plenty of time to perfect their defensive strategy and that new hardware revision makes me think they may have advanced to combined firmware and hardware lock downs. I may be totally wrong but while there are still older firmware cameras available, I would make life easier for myself and get one of those while you have the good treason to return your 2.1.0 camera.

Just my 5 Cents worth.

I just don't want to sit here lurking around with a half-broken camera, without helping the community to go forward. I do actually feel very committed to also get this firmware opened up. I will send the unit in for a replacement this weekend and if the new one is still unlockable or broken, I still have enough time to send it back and get a refund. Let's see what happens and if we can make any progress with the unit of oddy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 03, 2014, 09:26:42 pm
]FlirInstallNet needs a device. But if you don't have a device...
But doesn't he have a device? You don't need your camera to be in RNDIS mode to install a fif file, from what I understood.
That's right. Also in UVC + MSD mode (default mode) you can run FlirInstallNet to install a fif file. But you must have some device. --> https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg454513/#msg454513 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg454513/#msg454513)
I think, with incorrect driver FlirInstallNet does not work. FlirInstallNet needs a UVC or RNDIS device.
I know. My camera is broken, but oddy also has one now, with the 2.1.0 firmware. So he can take the first steps while mine is replaced by the supplier :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FireBird on June 03, 2014, 09:45:04 pm
A friend of mine received his E4 today (FW 2.1, HW 1.2L) and also wasn't successful with connecting it to his PC. The device manager just showed the hardware with an exclamation mark. I currently do not have more details but can ask if someone is interested.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 03, 2014, 10:00:12 pm
One of the dangers of an OEM changing firmware, and/or hardware, to prevent hacking is you can effectively go from a known stable platform to an unknown or unstable one. It looks like FLIR may have an issue with FW 2.1.0 and because the cameras cannot connect to to a PC I can't see how a firmware update will be of any use. Anyone with such a camera should think seriously about getting a refund. The alternative may be having to send the camera into a service centre for 'upgrade'. Do you really want the hassle ? When I spend $1000 I expect a unit to work and don't really want someone messing around with it at a SC as that may involve disassembly. At this point, in spite of reports that some have PC connectivity to FW 2.1.0, I would consider it a duff build and not bother attempting a hack of it until such time as FLIR issue the fixed version, which may be different again !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FireBird on June 03, 2014, 10:08:27 pm
My guess is that the 2.1 FW is incompatible with the available drivers and a not yet released driver will fix it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 03, 2014, 10:13:16 pm
That view is supported by the fact that good old Linux can see the camera but Windoze cannot. Still a cr*p situation for FLIR to have created though. Stinks of poor pre-release Alpha and Beta Testing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 04, 2014, 08:12:32 am
My guess is that the 2.1 FW is incompatible with the available drivers and a not yet released driver will fix it.
My understanding was that some people have found it does not enumerate as a UVC or MSD device under Window - this should not need any driver from Flir, and if this is actually the case, it's a firmware bug that needs fixing.

As regards being able to select RNDIS with the menu but not connect, remember (AIUI) RNDIS is not a standard protocol, and needs Flir's driver, so they could have done all sorts of things to restrict what can be done here.
As the appear to use their own flavour of protocol over UVC for firmware updates, I'm not sure why they would even bother leaving RNDIS in there, though it may be used by their factory cal process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 04, 2014, 08:31:47 am
As regards being able to select RNDIS with the menu but not connect, remember (AIUI) RNDIS is not a standard protocol, and needs Flir's driver, so they could have done all sorts of things to restrict what can be done here.
It is a standard, using default WinCE functionality. There is a suggestion somewhere in this thread to actually use Linux to connect to the camera over RNDIS to the camera if nothing else works when it is in RNDIS mode.

On the positive side, the NK.bin (kernel image) in the latest 2.1.0 version still includes RNDIS support:
#define CE_MODULES_RNDISFN 1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 08:36:04 am
Ok so looking in my device manager with the camera attached I get a USB video device with the following USB VID/PID:

VID:09CB PID:1007

*Edit* : "UVC and MSD = 09cb:1007" so I should be able to use UVC to send the fif file over to the camera.

No exclamation mark. .... so I might actually be able to send commands ...

Mike, how dangerous is the set temp RNDIS command? whats the danger of bricking it? .... a 80*60 E4 is better than no E4 ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 09:24:16 am
Ok I'm in ...

RNDIS in temporary mode and I've telnetted to the camera.

Went to see if I could get the conf.cfc and have it but I'm getting errors trying to decrypt it using fool.exe. Error is:

Tail part 2 invalid

Any thoughts ... I guess they've changed the enc key?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 09:27:31 am
Also, just my 2 cents but the changes to the FPGA code in this version may be due to the new image mode available (overlay) and the extra processing required by the FPGA to provide this. A neat new feature is being able to change the alignment distance from the main menu too, you don't need to go into settings etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 04, 2014, 09:31:34 am
Any thoughts ... I guess they've changed the enc key?

Can you use FileZilla (or TIConfig) to create a FTP backup from the camera. FTP credentials should still be root/3vlig, as far as I can see. Then, put the zip online so we can have a look at it.

That zip should then also include your conf.cfc file, but you can always also post it seperately.

Thanks!!

BTW, Which hardware version do you have? 1.2L?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 10:45:48 am



BTW, Which hardware version do you have? 1.2L?

Yeah 1.2L, I'll see about doing a backup & posting. Connects over Filezilla so shouldn't be a problem, just at work at the moment so having to fit it in around my day job  ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 11:25:13 am
 >:( bugger, just looking through the files in the FlashBFS directory and the earlier comment about replacing them with Lepton cores might not be off the mark ....

next to fpga.bin there is a file named "fpga_lepton.bin"

Also I have noticed that the imager "takes a moment" when starting up from cold, not something I noticed on the E4 I had to play with some months ago.

Hardware version 1.2L .... Lepton core, no more 320*240  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 11:47:28 am
Where is Ftool.exe from? If it is Flir, have they released an update?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 04, 2014, 12:08:37 pm
>:( bugger, just looking through the files in the FlashBFS directory and the earlier comment about replacing them with Lepton cores might not be off the mark ....

next to fpga.bin there is a file named "fpga_lepton.bin"

Also I have noticed that the imager "takes a moment" when starting up from cold, not something I noticed on the E4 I had to play with some months ago.

Hardware version 1.2L .... Lepton core, no more 320*240  |O

What makes you so sure it's a Lepton core? Only the small wait in the new firmware and the fact that there is an extra binfile, that might well go unused? When I went through my rsc file on the MSD of myt broken 1.2L that I was able to view on Linux, I saw it using a something called Pollux and the FPGA release version and date matched the fpga.bin data, not the fpga_lepton.bin data.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 04, 2014, 02:31:26 pm
Suggest the presence of the LEPTON Core fpga file is not proof of a LEPTON core in the E4. This was noted previously in the 2.1.0 firmware release on FLIRs site. The view was that now the FLIR ONE is about to be released this could just be a common firmware that will also support LEPTON core cameras. There is no evidence yet that FLIR would fit the LEPTON into only the E4. What about the E5, and E6 ? these could not use the low resolution LEPTON, so FLIR would effectively have to tool up for what would be a unique camera....the "E4 LEPTON". Keep calm and carry on  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 04, 2014, 02:44:51 pm
If you really want to scare yourself, do some research on the FLIR manufactured Autoliv thermal cameras that are deployed in some Audi and BMW cars. Mike has an sample that he was looking at and has posted a thread on here about the internals. From what I have read, these cameras are 320x240 30 or 60 fps ..... and ITAR export controls enforced some pretty nasty lockdowns on the platform. The camera is married to the host cars computer and will not operate independently of its host. Some earlier models could be fooled into 'thinking' they were still in the correct car but later versions are smarter, and from what I have seen, no one has managed to hack one to get it to wake up. Now the killer blow.....there are reports that if you try to 'probe' the camera module in an attempt to hack it, it basically kills itself  :o  Imagine if FLIR used the knowledge that they already have on hacking defences and applied it to the Ex series.....you are fine until you try to hack it and then it will be a non warranty RTB for a rebuild if the camera locks down. Such measures are common in the world of hardware encryptors. There is no evidence that FLIR are doing this on anything but the high resolution car cameras but if the incentive is there, they might.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 04, 2014, 03:01:48 pm
If there were significant hardware differences (i.e. a totally different sensor) would the Flir part number not need to be changed in line with ISO9001. Or is the declaration of a hardware version sufficient?

I once worked on a project where the customer sold most of the units through Farnell, at one point there were 3 different part numbers for what was essentially the same piece of equipment, just a radio module was changed. No one would ever have been able to tell without a complete tear down but this customer did stuff totally by the book and his ISO consultant insisted we created new part numbers each time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 04, 2014, 03:03:33 pm
Now the killer blow.....there are reports that if you try to 'probe' the camera module in an attempt to hack it, it basically kills itself  :o
I'd take that with a huge pinch pf salt. Could be it sets an eeprom flag, but in practice this sort of thing just causes headaches for the supplier as it's hard to prove anything to the extent needed to be able to deny warranty replacement.
 
I think Lepton is too new to see it as a replacement sensor in an established product line - Flir have yet to ship anything with a Lepton, and I would think they'd start with new product lines before risking anything that new on an established line.
My guess is they may even discontinue the E4 and replace with a new Lepton based unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 04, 2014, 03:30:36 pm
Thanks Mike, it did sound an extreme countermeasure but in the car industry anti tamper seems to be a more common element of designs these days. Have you had any time to look at the Autoliv camera recently ? I was offered one at a decent price but chickened out as I do not have the required skillset to hack it....I bought a FLIR SC3000 cooled camera instead  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 03:43:59 pm
Sorry, was just voicing my fears / concerns not confirming it has got a Lepton core. Sounds reasonable logic (above) so I'll crack on and keep my fingers crossed. I guess its still a bit up in the air and the only proof will be opening it up or at least decrypting the cfc ...  :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 04, 2014, 03:58:28 pm
There is no need to apologise on this forum....we are all friends in a discussion....you just voiced what many were likely thinking. Take a look in my past posts and you will se that I had concerns that FLIR MIGHT fit a LEPTON to slam the door shut on the whole E4 upgrade situation.

I am a pessimist by nature so look for the worst case scenario..... I would still be of a mind to return any FW2.1.0 camera if there was an option to obtain a 1.22 or earlier version  ;) Once all 2.1.0 cameras have been sold users will have no choice but to risk a 2.1.0 unit.....that situation has not been reached yet.

Life is too short already....don't waste your life solving a problem that may be circumvented....unless of course you enjoy doing so  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 04, 2014, 05:04:14 pm
:) Thanks Aurora,

For me its a challenge and I'd rather help with a new hack than take the easy route.

Do you know who wrote Ftool.exe? Seems like it needs modification to understand / decrypt the new cfc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 04, 2014, 05:48:13 pm
Thanks Mike, it did sound an extreme countermeasure but in the car industry anti tamper seems to be a more common element of designs these days. Have you had any time to look at the Autoliv camera recently ? I was offered one at a decent price but chickened out as I do not have the required skillset to hack it....I bought a FLIR SC3000 cooled camera instead  ;D
Not yet - still in the big pile of stuff to be played with.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 04, 2014, 06:11:25 pm
Do you know who wrote Ftool.exe? Seems like it needs modification to understand / decrypt the new cfc.

I think forum member "ds (https://www.eevblog.com/forum/profile/?u=93883)" made it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 05, 2014, 01:31:33 am
Grateful for your units calibration date and the hardware build (detailed in camera details page)

Model: E4 1.2L
S/N: 639285XX
Part Number: 63901-0101
Date: 23 May 2014

Hi
Could you tell us when did you order and what country?
I am in canada
I ordered my second E4 on May 15
Now I am really worry
Still haven't got it from my local supplier, which says coming from the East coast of canada

Hi guys
I finally received my 2nd E4 today that I ordered on May 15
So nerviours when checking the version
I am so freaking happy
Here is info that you can add

Ordered on May 15th received on June 4th
Canada location
E4 1.1L
Serial 63926xxx
1.22.0
Calibration date may 6th 2014 Estonia

I am so glad
I will be hacking the resolution tonight!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 05, 2014, 04:59:35 am
Perhaps the solution is as simple as picking up an E5. That one can't use a Lepton. :)

Good ideas but mostlikely have new firmware upgrade too

Upgraded the resolution of my second unit without problem
 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: oddy992 on June 05, 2014, 10:21:34 am
so playing with rcd & rls commands on the device last night I managed to get a listing on the detector and it stated 320*240 so that pretty much rules out a Lepton detector. Can't remember the r'path but it definitely had those values. Also while poking around I found a frequency setting at 9.0009123 (or something like that).

Stupid question: In the PDF for the commands that the FLIR supports it states that this can be written ... Can't a temporary set command be used to adjust the frequency until the next reboot?

And if so, what would that command look like? (I hate interpreting those command manuals, I got where I got to last night by a bit of reading and more trial and error). ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 05, 2014, 11:13:53 am
Can't remember the r'path but it definitely had those values.
I searched in the full tree and found many places for a resolution setting... some of them could only be read.
I think the most interesting Info is the Detector type string:
.image.flow.detector.type             "SB320 ISC0901"
The other paths was in attachment.
Stupid question: In the PDF for the commands that the FLIR supports it states that this can be written ... Can't a temporary set command be used to adjust the frequency until the next reboot?
I don't remember the command, but I only could set the frequency somewhere. I used the Value 25 and get from the Value "real frequency" or something else only 7-10.4
But maybe it was only the measurement frequency. It's too long in the past... :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 05, 2014, 11:18:10 am
Regarding frequency please be pointed to the discussions that we had about ITAR and such issues causing a _REAL_ issue for Flir - that frequency thing would probably force big changes.

As much as I understand is that the sampling is already happening at 30Hz but is beeing resampled down by the FPGA so the output at the display is just 9Hz.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 05, 2014, 11:44:03 am
As much as I understand is that the sampling is already happening at 30Hz but is beeing resampled down by the FPGA so the output at the display is just 9Hz.
And that resampling is probably what allows them to use such a small lens - I suspect a 60fps image would be very noisy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wolflsi on June 05, 2014, 06:08:50 pm
Hello, I am a new FLIR E4 user in Taiwan,I bought FLIR E4 two days before(6/4), Camera information shows model E4 1.1L,software version 1.22 S/N is 63926142 P/N is 6301-0101,so it means not every new FLIR E4 is with hardware 1.2L and software 2.XX ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FireBird on June 05, 2014, 06:57:59 pm
It depends on how large your dealer's stock of 1.22 E4s is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on June 05, 2014, 07:31:56 pm
As much as I understand is that the sampling is already happening at 30Hz but is beeing resampled down by the FPGA so the output at the display is just 9Hz.
And that resampling is probably what allows them to use such a small lens - I suspect a 60fps image would be very noisy.

Are there any 30/60 fps Ex cameras? From what i understand, ITAR is mostly about export restrictions, right? If so, could there be higher framerate Ex cams on the US market? Or are they all 9 fps cams?

Greetings,

Chris

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 05, 2014, 08:10:27 pm
As much as I understand is that the sampling is already happening at 30Hz but is beeing resampled down by the FPGA so the output at the display is just 9Hz.
And that resampling is probably what allows them to use such a small lens - I suspect a 60fps image would be very noisy.

Are there any 30/60 fps Ex cameras? From what i understand, ITAR is mostly about export restrictions, right? If so, could there be higher framerate Ex cams on the US market? Or are they all 9 fps cams?

Greetings,

Chris

All public eX series are 9hz. (there was talk of a FLIR demo unit that ran at a higher rate that was seen at a trade show) To get higher you need to move to the eXX series tier. They have different hardware and larger lenses. Due to the small lens on the eX's, a 15Hz/30Hz frame rate would likely be the max it could support before looking like psychedelic poo.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on June 05, 2014, 08:15:29 pm
All public eX series are 9hz. (there was talk of a FLIR demo unit that ran at a higher rate that was seen at a trade show) To get higher you need to move to the eXX series tier. They have different hardware and larger lenses. Due to the small lens on the eX's, a 15Hz/30Hz frame rate would likely be the max it could support before looking like psychedelic poo.

Ah, thanks! Wasn't aware of that, i was thinking that it maybe only for the exported cams.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 05, 2014, 08:23:45 pm
Hello, I am a new FLIR E4 user in Taiwan,I bought FLIR E4 two days before(6/4), Camera information shows model E4 1.1L,software version 1.22 S/N is 63926142 P/N is 6301-0101,so it means not every new FLIR E4 is with hardware 1.2L and software 2.XX ?

Even you bought it on June 4th
You have to see your calibration date
That is the date mostlikely came out of factory
My second unit was luckily May 6th and it was still 1.1L and 1.22.0

Another member had calibration date may 23rd
It was 1.2L and 2.1.0

So between May 6 to May 23 flir upgraded the firmware
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 05, 2014, 08:35:55 pm
All public eX series are 9hz. (there was talk of a FLIR demo unit that ran at a higher rate that was seen at a trade show) To get higher you need to move to the eXX series tier. They have different hardware and larger lenses. Due to the small lens on the eX's, a 15Hz/30Hz frame rate would likely be the max it could support before looking like psychedelic poo.

Ah, thanks! Wasn't aware of that, i was thinking that it maybe only for the exported cams.

Greetings,

Chris

That would likely lead to quite a few headaches for everyone involved if they had a exportable and non-exportable versions of the same cam. The Ex's are the cheapies to get people hooked. They want to sell them everywhere to everyone and simple is the key to doing that. Then when you want good images and features you get to pay $$$ as long as your not in a ITAR restricted country ;).

LCDC.DLL "C.a.m.e.r.a. .F.P.S.:"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 05, 2014, 10:28:13 pm
As much as I understand is that the sampling is already happening at 30Hz but is beeing resampled down by the FPGA so the output at the display is just 9Hz.
And that resampling is probably what allows them to use such a small lens - I suspect a 60fps image would be very noisy.

Are there any 30/60 fps Ex cameras? From what i understand, ITAR is mostly about export restrictions, right? If so, could there be higher framerate Ex cams on the US market? Or are they all 9 fps cams?

Greetings,

Chris
The Ex0 series are 60fps. There is some confusion as Flir used to refer to the Ex0 as E series before the Ex came out - they should have used a different letter.
You can buy the Ex0 in most countries but need an export license to ship between countries. I think there may also be some end-user ID check when buying from a dealer in your country, though there seem to be plenty of >9fps TICs at general distributors Like RS and farnell   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on June 05, 2014, 10:52:56 pm
The Ex0 series are 60fps. There is some confusion as Flir used to refer to the Ex0 as E series before the Ex came out - they should have used a different letter.
You can buy the Ex0 in most countries but need an export license to ship between countries. I think there may also be some end-user ID check when buying from a dealer in your country, though there seem to be plenty of >9fps TICs at general distributors Like RS and farnell   

Yeah, the whole ITAR thing sound pretty silly to me anyways. I mean, really, why re-use a cam, that is meant for a completely different application like the Ex or Ex0, in some kind of hacked up weapon. Especially if you can get higher fps cams anyways. And then, someone who really wants that stuff to do harm has no problems getting used mil stuff anyways... Guess the pencil pushers just need some justification for their job...

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 06, 2014, 04:34:38 am
FW version 1.22.0 is now once again the latest version.
FlirTools don't want to update to 2.1.0!  :-DD

You mean if any new cameras shipped out with 2.1.0 can downgrade? :-//
  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 06, 2014, 10:19:52 am
The Ex0 series are 60fps. There is some confusion as Flir used to refer to the Ex0 as E series before the Ex came out - they should have used a different letter.
You can buy the Ex0 in most countries but need an export license to ship between countries. I think there may also be some end-user ID check when buying from a dealer in your country, though there seem to be plenty of >9fps TICs at general distributors Like RS and farnell   
I've just picked up an old FLIR ThermaCAM E25 (made in 2004), that's 50/60fps with video output (and tripod mount), but 160x120 resolution. Results from one of the Telnet commands indicates that it's got a SIM300 FPA (presumably the 160x120 SIM300L and not the 320x240 SIM300H - specs sourced from http://www.dtic.mil/dtic/tr/fulltext/u2/a424873.pdf (http://www.dtic.mil/dtic/tr/fulltext/u2/a424873.pdf) page 18).

For those interested, here's the E25's file structure visible through FTP:-
Quote
BITMAP.SYS
FLIST.SYS
system\bw.pal
system\bwr.pal
system\calib.reg
system\default.reg
system\fesi.bin
system\filekit.rev
system\fpga.bin
system\French.FLF
system\German.FLF
system\indi.bin
system\iron.pal
system\Italian.FLF
system\logo.bmp
system\matrix.elf
system\rainbow.pal
system\Spanish.FLF
system\calib\org\Caldata.htm
system\calib\org\Calprotocol.htm
system\calib\org\Caltuning.htm
system\calib\org\Camera.htm
system\calib\org\Checklist.htm
system\calib\org\DefBBTemps.htm
system\calib\org\Detector.htm
system\calib\org\OPspec.htm
system\calib\org\TCPBlockdata.htm
system\factory.d\local.reg
system\factory.d\model.reg
system\factory.d\poff.reg
system\factory.d\silentstart.reg
system\factory.d\trig.reg
system\maps\ds120C_fi_leFOV25_vi_ro.gan
system\maps\ds250C_fi_leFOV25_vi_ro.gan
system\maps\ds900C_fi_leFOV25_vi_ro.gan
system\web\back.jpg
system\web\camera.gif
system\web\flirtrans.gif
system\web\goahead.gif
system\web\index.asp
system\web\login.asp
system\web\user\todo.asp
Digging into the matrix.elf header indicates that it's 32-bit Big-Endian PowerPC code.

Web browsing to the camera gives access to a service web page login, but logging in (3vlig) gives a Page Not Found error as the service pages aren't in the camera.
Blanking logo.bmp (I used HxD as Paint messed it up) will remove the bootup and on-screen logo.

Hexediting the matrix.elf file uncovers a pair of hidden telnet commands:-
rlock: Lock resource commands
runlock: Unlock resource commands: runlock <code>
runlock 3vlig results in runlock: changed uid to root which unlocks some of the commands. videotest on/off for example only works as root.
The id command shows who you're logged in as. If you've runlocked to root, the runlock status survives a power-cycle (you don't revert to the shell/user UID).

Adding the palette files from addmenu beta 3 works. No need to edit any menus, just FTP them across.  ;D

By the way Mike, congratulations and thanks for completely upturning the TIC market, both new and second-hand. FLIR expected to do it with Lepton, you beat them to it with their own Ex range :)

To paraphrase The Mary Whitehouse Experience:-
"You see that blip in TIC sales and drop in price?"
"I am aware of it's presence."
"That's you, that is."
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: IrishRocker on June 06, 2014, 10:21:25 am
Hi all,

I need help, I want to attempt hacking a FLIR E8.....to E4 specs?
 :-DD

Just kidding! Don't actually own FLIR...yet! been watching EEVBlog on youtube for years now, ever since that pickit 3 review! :D but have only now joined the forum! :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on June 06, 2014, 11:26:04 am
So far, FLIR did not answer my support ticket about my broken camera in detail yet. The status of my ticket and update date does change a lot, so I think they are very busy working on it internally.

I'm really looking forward to their final answer. As of now, I still think they broke something bad in an attempt to fix something else :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 06, 2014, 11:44:12 am
Just skimming through the last posts, are you guys with v2.1 having trouble connecting to Flir Tools? I have a colleague who has just contacted me to day he bought an E4 and it's come with v2.1, he is able to connect to Flir Tools and transfer images.

He will probably bring the camera to me tomorrow or Monday so I can have a look, feel free to suggest things that can be checked, I will see if we can be of any help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 06, 2014, 06:37:00 pm
I've found another three .pal files for the cameras. These were lurking in the Mac version of FLIR Tools. Tested and working on a ThermaCAM E25 (so I've now got 11 palette options including the "Heat Detect" one), the colours are:-

Blue-Red Blended (like a subset of Rainbow but without the black bottom and white top)
Saturation (grey scale but with a blue bottom edge and red top edge)
Yellow (green black at the bottom through to yellow at the top)

UPDATE
I've managed to convert the RGB palettes in some of the other files (glowbow, medical and grayred) to the YCrCb format used by the cameras. I've also corrected yellow.pal which had RGB palette info instead of YCrCb. The original palettes had 120 colours (10 in the case of medical), these have been expanded to 224 with interpolated colours filling in the gaps instead of just doubling them up (medical being the exception once again). 14 palettes now working happily on my E25, menu selectable.  ;D

The attached zip file has been updated to include the additional & corrected palettes. Anybody got any other palettes I can have a pop at?  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 06, 2014, 07:36:25 pm
I've found another three .pal files for the cameras.
Thanks for the palettes. Bluered looks like "reinbow" from the Fluke Ti10.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 06, 2014, 09:36:26 pm
Might be a dumb question but, what folder on the camera did you drop the pal files into? I see them in a few places, some appear
in flashbfs/system/  but not all of them. I think only three are in that location. Rainbow, iron, and one i cant remember at the moment. Thanks much!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 07, 2014, 12:19:50 am
Not a dumb question at all. If you don't know, ask.

On my E25 they just go in the /system folder along with the rest. Presumably mine runs under a different OS and/or CPU though, as there's no FlashBFS folder on my E25.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 07, 2014, 12:36:02 am
Thanks! I appreciate the reply! I guess i sort of assumed (we know what they say about assuming..) the pals work on the modded e4. I did originally see the pals came from a different model. Ill give it a shot and leave a report!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 07, 2014, 05:26:17 am
Hello,
I have stored them only in "FlashBFS\system" and use remote commands to load:
palette bluered
palette saturation
palette yellow

after restarting the camera the files don't be listed in the menu. I thing the menu config must be adjusted to choose the palette direct from camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on June 07, 2014, 06:06:51 am
So far, FLIR did not answer my support ticket about my broken camera in detail yet. The status of my ticket and update date does change a lot, so I think they are very busy working on it internally.

I'm really looking forward to their final answer. As of now, I still think they broke something bad in an attempt to fix something else :)

My E4 up-switch stopped to work only after two weeks + 3 days of ownership.  Legal limit is 2
weeks for returns here. (10 opening days)
FLIR is adamant on their warranty policies, everything has to be sent back (I was told).  I don't know if that is a special directive for the E4, but I seem to have understood that they are like that for any of their machines.  So the dealer sent my camera back. (I guess he wanted to be nice to me, since I bought four E4 v1.22.0...

The dealer said that unless FLIR gets a RUSH mention and is harassed over the phone for results, and kicked in the butt by a large dealer with some commercial torque, FLIR is notoriously slow for effecting repairs, sometimes taking MONTHS. 

Another comment.  There was a remark on this thread about  dealers having cameras shipped to clients directly from factory, cameras not being shipped to dealers anymore... Some seemed to suspect it was a way to prevent E4 buyers to check the firmware v1.22.x / 2.x at the point of sale...

I was told it is because the company has a tremendous production backlog, and prefers to ship on demand rather than running the production line to stock dealer's inventories. That way, they can supply the end-user demand faster, apparently, instead of having their products told to be BO by many dealers.

The owner of the dealership also told me that FLIR seems to be quite mixed up in their operations, half of the company not knowing what the rest is doing.  Or maybe I misunderstood him...   Also, everything the dealer owner told me could be utter BS and sweet talk... I'll see when I see the unit coming back from the service center.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wolflsi on June 07, 2014, 07:51:34 am
Hello, I am a new FLIR E4 user in Taiwan,I bought FLIR E4 two days before(6/4), Camera information shows model E4 1.1L,software version 1.22 S/N is 63926142 P/N is 6301-0101,so it means not every new FLIR E4 is with hardware 1.2L and software 2.XX ?

Even you bought it on June 4th
You have to see your calibration date
That is the date mostlikely came out of factory
My second unit was luckily May 6th and it was still 1.1L and 1.22.0

Another member had calibration date may 23rd
It was 1.2L and 2.1.0

So between May 6 to May 23 flir upgraded the firmware

My E4 calibration date is May 2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wolflsi on June 07, 2014, 08:35:14 am
Thanks Marphy,your tool works very well on  E4 1.1L s/w 1.22,it works like a E8 and get better resolution/function now. I appreciate your application!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 07, 2014, 05:38:00 pm
Palette files corrected and added to, the zip file in my earlier post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg457752/#msg457752) has been updated accordingly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 07, 2014, 05:45:58 pm
Just a small reminder: using telnet and the palette command (or was it pal?) one can load/activate palettes not available from the menu - ideal for testing purposes :)
Edit: note they still have to go to the correct folder as no path can be supplied.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 07, 2014, 10:31:44 pm
Just replaced the bw.pal with the yellow pallet, seems a bit more visually appealing than the black and white. It replaces black and white for all color pallets that use it, ie,, grey, red above, blue below, white hot, black hot, etc. I think i'll be keeping it that way!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 08, 2014, 04:24:32 am
I was talking to my local supplier in Vancouver Canada. He said they don't like to stock them because they don't sell much. Also due of the calibration date.
He said problem is that if he ordered 2 units, let's say May 1st, so the calibration date on those units may be April 28th as example. They will be on the shelf until they sell. Let's say it sells one in May, might be still ok as the customers sees the calibration date is only couple of weeks old.
But let says the second unit sells in June, the customer buys it takes home see calibration date is April, he would be thinking this unit is 2 months old.
I know most of us here don't mind if the units are older because we can hack it. But most wants newer as possible, and remember the unit might need recalibrate service, the longer stays in shelf meaning the shorter life span left until next service.
Well that is what my supplier told me! I guess it make sense too!
Title: FLIR palette generator
Post by: AintBigAintClever on June 10, 2014, 06:49:08 pm
My first play with JavaScript.  ;D

The attached web page will read a .PNG file, take the leftmost strip of 224 pixels and create a custom palette file from it. I've tested the resulting files on my E25 and they work pretty well. They should also work on any other FLIR camera that supports this .PAL file format.  :)

Unzip the folder to your hard drive, double-click index.html and you're away. The two example .PNG files were done using the gradient tool in Paint.Net but you can use whatever you like.

You can easily "acquire" a palette from any image on the net that has one displayed, such as the one here: http://www.wired.co.uk/magazine/archive/2012/06/start/infrareds-walk-on-the-wild-side (http://www.wired.co.uk/magazine/archive/2012/06/start/infrareds-walk-on-the-wild-side)
Just crop the image to just include the palette block, resize to 224 pixels high and save as a PNG.

Another way to create the gradient is to go to http://www.colorzilla.com/gradient-editor/ (http://www.colorzilla.com/gradient-editor/), make your gradient, screen-grab it (ALT + PRTSCR in Windows, CMD + SHIFT + 3 in OSX) and crop/resize it in an image editor as before.

The E25 reads palette files in alphabetical order (probably ASCII order) with uppercase names all grouped together (e.g. Example.pal, Newpal.pal, bw.pal, grayred.pal, rainbow.pal) so if you want them in palette name order (the name inside the file) rename the file accordingly.

Best used in Firefox or Chrome. In Internet Explorer (certainly IE11 here) and Safari you'll find that the download button won't work, for these you need to cut and paste the generated palette code into a separate text file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 10, 2014, 08:07:39 pm
Well done AintBigAintClever, thanks.
I like my normal palettes, but it's good to know, that I could change if I want.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Baya73 on June 11, 2014, 12:37:11 am
I found this a while ago. Have fun !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on June 11, 2014, 06:44:43 am
I found this a while ago. Have fun !
Do you have this in a lossless format too (BMP, Tiff)? Reason is that the JPG due to the compression now probably (I did not verify) shows more/less colors.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on June 11, 2014, 08:44:16 am
thanks
multipage-tiff splitted and uploaded to eevblog.com
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on June 11, 2014, 12:25:51 pm
Are these images that can be made into palettes to work on the E4 using the tool provided by AintBigAintClever?  I guess I am a little confused as to what is going on now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 11, 2014, 01:00:40 pm
Are these images that can be made into palettes to work on the E4 using the tool provided by AintBigAintClever?  I guess I am a little confused as to what is going on now.
Yes. Take the image, find the palette you want, crop/resize/rotate to 224 pixels tall (width doesn't matter as only the left-hand edge is used), save as .PNG and convert using the tool.

By the way, the tool uses 224 colours as this seems to have been the standard. Do E4 cameras support more? Or less? I believe (due to issues with an earlier version (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg331123/#msg331123) of arctic.pal) they can have problems with other length palettes. My E25 will read shorter palettes without crashing but not necessarily behave properly with them (although admittedly I was pushing my luck with the 10-colour medical.pal).

Remember though that the E25 appears to use a different OS (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg457511/#msg457511) and handles the files differently (no need to hack the menus to add new palettes).

If the cameras are compatible with different sized palettes I can change the tool to accommodate that (one extra box to fill in - defaulted to 224 - and a bit of a code tweak).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 13, 2014, 05:05:16 am
Hi guys
I have a problem with my second E4,
I did the resolution hack only, everything seems to work.
But when I change the colour palettes, I noticed that my grey and blue is same. Stays grey
It doesn't turn blue. Red works,
I think it was problem from factory. But I can't be 100% sure because I did not check before the hack
Is it possible just palette blue file problem?
Again I did not hack the menu.
Any help?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 13, 2014, 10:39:14 am
First off, did you use the up and down arrow keys to set the temp that will display blue? If yes then you might have a problem. If no that's the best place to start.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 13, 2014, 01:27:46 pm
There are no blue palette. "Red above" and "blue below" are only the palette bw.pal with enabled isotherm. Isotherm is a separate function that work on all palettes.

So I think heavybarrel is right and you just don't reached the temperature margin.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 13, 2014, 10:25:09 pm
First off, did you use the up and down arrow keys to set the temp that will display blue? If yes then you might have a problem. If no that's the best place to start.

Hi thanks for the tips
At the end, I remove the hack,
Reset to factory,
Now seems to work
Redo the hack.
Now everything working
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 12:15:16 am
Have anyone bought new E4 lately?
Are they still shipping units with 1.2L and 2.1.0?
Any news?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on June 14, 2014, 03:34:46 am
Received an E4 from Amazon today with version 1.22. The hack worked nicely. I did not make a copy of the original menu files (wasn't included in the YouTube video). Is there any way to get those in case I need to restore the camera to the factory configuration?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on June 14, 2014, 04:47:44 am
Received an E4 from Amazon today with version 1.22. The hack worked nicely. I did not make a copy of the original menu files (wasn't included in the YouTube video). Is there any way to get those in case I need to restore the camera to the factory configuration?
I eventually will create a video on setting the camera back to factory along with those files but until there is an urgent need it will not be a high priority.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 06:30:07 am
Received an E4 from Amazon today with version 1.22. The hack worked nicely. I did not make a copy of the original menu files (wasn't included in the YouTube video). Is there any way to get those in case I need to restore the camera to the factory configuration?


Have anyone bought new E4 lately?
Are they still shipping units with 1.2L and 2.1.0?
Any news?

Bought two from Grainger a week ago. 1.1L and 1.22 on both

What day are the calibration dates?

Also is there any solution to record streaming video from E4?
Or it is only flir tool+ ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on June 14, 2014, 09:53:07 am
I have hw version 1.1L, calibrated May 2, 2014 in Estonia.

Thanks to the people who created the hack. Will stand by for the video to restore factory defaults.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 14, 2014, 12:40:16 pm
Does anyone have an old version of Flir Tools saved in a zip type format?
The other day I installed the most recent version and successfully opened images on a colleagues V2.1 version camera. Today when I try to look at images with my own V1.18 camera I can't get it to connect at all, it's not in Flir Tools, not in device manager and I cant connect with Filezilla.
Maybe I have a camera issue but Id like to check an old version of Flir Tools as they have obviously been doing weird things with it.

In slightly better news my colleague has agreed to a teardown of his V2.1 unit, hopefully he will be able to loan it to me this week. I will post pictures and report once I get a hold of it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 14, 2014, 01:23:23 pm
Hello,

my repaired E4 Camera was arrived. And it's a
Model: E4 1.1L
Software: 2.1.0
(new Entry) Lens: 45°
(new Entry) Power: 79%

From this menu you could still get to the submenu like early Cameras.
But if you change one of the USB modes, the camera goes instantly back to UVC-MSD. So no RNDIS could activate from this point.
Well... I will try later something more.

To the other changes. The Blending seems to be just a 50% Transparent IR image overlay over the Visual image.
And the Alignment is not a image mode, but it is found there. Here you could easily change the Distance for MSX and Blending.

Now I have to do other things... I will be back if have worked on this more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 02:59:54 pm
Bought two from Grainger a week ago. 1.1L and 1.22 on both

What day are the calibration dates?

The newest one has a cal date of May 5


I see,
My last unit E4 arrived on June 4
Calibration date was May 6th
So I guess if order new unit these day it will be depend if they ship you new unit or old stock.

Now joe-c has his repaired e4 back with 1.1L and 2.1.0
Flir has new firmware 2.3.0

I Guess better to wait and see before taking risk to order new unit

Thanks to the people who created the hack. Will stand by for the video to restore factory defaults.
I attached fif files for use with FlirInstallNet.exe. addmenu_v1.22.0.fif to add tauchers addmenu-beta3, restoremenu_v1.22.0.fif to remove the changes and restore original menu files from fw 1.22.0.
I have tested both files and they work really well.

Thanks freak_ge
I was waiting something like this for the menu hack
But just to be clear, this is only for menu hack for 1.22.0
It does nothing for the resolution hack. Right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 04:00:23 pm
Do I need to use USB RNDIS MODE in order to use flir instalment.exe to use the .fif for the menu hack? Or no need to change the mode

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peo007 on June 14, 2014, 04:37:27 pm
Hello
If you open a photo in Flir Tools, from an unhacked E4, what will the IR resolution box say?    80x60  or  320x240.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peo007 on June 14, 2014, 05:33:30 pm
I got hold of an E4, and when I open the pictures in Flir tool so it says 320x240,
so then it is hacked already.   :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 14, 2014, 05:59:21 pm
It looks like FLIR may have disabled RNDIS access in an effort to stop the hack. Has anyone managed to upgrade a 2.1.0 or 2.3.0 device using FLIRInstallNet?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 07:01:32 pm
Do I need to use USB RNDIS MODE in order to use flir instalment.exe to use the .fif for the menu hack? Or no need to change the mode
Thanks
You can use Flirs standard settings (MSD and UVC). RNDIS mode also possible but not needed. Your camera device must shown in FlirInstall Camera Selection.

when i connect my E4, windows explorer will connect my E4 i can download pic from my E4.
however, i start flirinstallnet.exe from bin at flir tools
i cant see any camera in selection.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 07:13:31 pm
you mean livestream?
it is greyed out, i cant seem to connect for live picture feed
but i can import the pictures from the camera
i am missing some drivers?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 14, 2014, 08:26:06 pm
Hello,

Version 2.1.0 RNDIS Mode:
-from menu no possible
-from "FLIRInstallNet.exe" with Set_RNDIS_permament.fif will not work
-from "FLIRInstallNet.exe" with Set_RNDIS_temporary.fif will work

Tried to open config.cfc in CFC Editor (GuiTool), but failed with error code:
Error: Tail part 2 invalid
Tried with ftool directly result the same error.

Tried an cfc file from another camera with changed serial and CRC01... camera starts like a E4 but no measurements possible and MSX was not shown.

Tried to flash firmware 1.22 with Z3comb_v1.22.0.fif (original from FLIR Download), but says no by the Question "Update prodapp/OS...".
This brings no results.
Tried to flash firmware 1.22 with yes by both questions.

Dammit! The same as before the Repair...
Camera shows only FLIR logo and was found as ASCO Volume.
So there is to note... better make no Firmware change over "FLIRInstallNet.exe".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 08:46:26 pm
you mean livestream?
it is greyed out, i cant seem to connect for live picture feed
but i can import the pictures from the camera
i am missing some drivers?
I think so.

well i tried to reinstall flir tools
also tried to install flir drivers
still the same, i can download the pictures from camera no problem
but i still cant not connect for live streaming from flir tools

i dont know what else i can do.
btw i am using windows 7 64bit
flir tools the newest version i think
E4 1.22
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 14, 2014, 09:33:46 pm
@joe-c

So to be clear, you received your camera back from FLIR repaired and the attempt to flash it with FW 1.22 killed it ?  :o

If so, this is not good news for you, and is a warning to others about trying to flash to a lower FW version. Decent firmware updaters, that have the potential to do damage, normally check the Hosts revision to establish whether an install is safe to continue. If an incompatible host is found, they abort before any overwriting is done. FLIR do not appear to include such sensible safeguards, so their firmware upgrades are risky.

What now Joe ?, are you sending it back again ? If so, I see nothing wrong with you stating that you attempted to load a legitimate FLIR firmware as your camera was supplied with an unstable firmware, namely 2.1.0. Hopefully they will not charge you to rebuild the firmware.

Aurora 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on June 14, 2014, 09:54:22 pm
well i tried to reinstall flir tools
also tried to install flir drivers
still the same, i can download the pictures from camera no problem
but i still cant not connect for live streaming from flir tools

i dont know what else i can do.
btw i am using windows 7 64bit
flir tools the newest version i think
E4 1.22

I have to enable both MSD+UVC. MSD is needed to see the flir as a drive and UVC is needed to stream, from what I've found.

thanks that works
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on June 14, 2014, 10:02:16 pm
In theory it should be possible to dump the (Toshiba NAND E2PROM??) memory from a working unit, and flash it to a bricked unit of the same HW rev.  A lot of trial/error and solder work though!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on June 14, 2014, 10:09:31 pm
Quote
If cloning a camera, the SN must also cloned.

Is this not stored on a separate I2C eeprom? I thought it would just be a matter of updating the .CFC file to match the bricked camera.

Obviously on version 2.x this would be a problem  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 14, 2014, 11:42:55 pm
In theory it should be possible to dump the (Toshiba NAND E2PROM??) memory from a working unit, and flash it to a bricked unit of the same HW rev.  A lot of trial/error and solder work though!
Not easily as unless you're very lucky, the bad-block map won't be right. You'd need to get access at the filesystem level, either in situ, or mounted on another compatible system -  this may be possible via the serial console boot menu which AFIAK nobody has exploted yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 14, 2014, 11:53:51 pm
I'm sure there has to be some sort of backdoor that FLIR uses for calibration or maintenance purposes. But I wouldn't be surprised if future hacks require opening up the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: schneider on June 15, 2014, 02:16:14 am
To any German readers: We've got an E4 from Reichelt last Friday. Came with firmware 1.22 and a calibration certificate from end of March.

Edit:
Just to be clear: There was no problem applying the resolution hack as well as the menu hack :).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on June 15, 2014, 07:12:24 am
@joe-c

So to be clear, you received your camera back from FLIR repaired and the attempt to flash it with FW 1.22 killed it ?  :o
The Camera is now only shown as a ASCO Volume. In "FLIRInstallNet.exe" was "No Camera" selectable.

It seems to be clear, that FLIR want this state for flashing an older firmware to bring the device in a state, that only they could revoke.

I probably will send the Camera back... FLIR can see here System was safe on this way.
Well... I have tried it and lost... but it were great, if this have worked right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 15, 2014, 12:19:35 pm
@ Joe-c

You never know until you try. Sadly the fact that FLIR are reading this forum means that they will likely have compiled a list of possible vulnerabilities that members previously suggested, including the firmware downgrading, As a forum we have effectively documented what FLIR needed to fix to counter hacking. That is the down side of a public forum discussing attack vectors.

If FLIR have done their job properly, I would have expected them to close the door on every discussed hacking approach, including attempts to change the identity of an E4 to an E8 to fool the firmware. The new hardware could be innocent progression of the platform but I would expect some countermeasures to have formed part of that development.

As you say, hacking would likely have to step up a level and take a path not previously discussed in this thread. OS's and Firmware cannot easily defend themselves against direct analysis of the code if such were possible to access, but the reverse engineering effort would likely outweigh the ability and benefit for the casual user scenario. Hackers are very determined people however, so I will never say 'never'  ;)

I have said it before but will repeat it here..... readers who want an Ex series camera to use and not spend months waiting for a hack, should hunt down a supplier of one with 1.22.0 firmware, or earlier. They are still out there if you look. The other, more expensive, options are to buy from someone on e*ay who has collected stock of hackable units and pay a premium for the 'service' or buy an older stock E5 that is very likely to have stayed on the shelf due to the E4 hack. Such an E5 may also be hacked as it is no different to an E4 HW and will likely be much earlier firmware if it has been lying around a while  :)

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on June 15, 2014, 08:18:39 pm
Quote
Not easily as unless you're very lucky, the bad-block map won't be right. You'd need to get access at the filesystem level, either in situ, or mounted on another compatible system -  this may be possible via the serial console boot menu which AFIAK nobody has exploted yet.

Ah ok, I assumed that would be done transparently by the flash chip and not at the processor. But in any case it would be a lot of work even if possible (and all locations of the serial number corrected), probably better for now just to find a used 1.22 or E5 as previously mentioned.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ds on June 16, 2014, 05:46:12 am
joe-c's conf.cfc has a new size (112 byte bigger) and ftool outputs an error.  :(

That's expected. The 16-byte MD5 hash has been replaced by a 128-byte Public-Key signature (RSA 1024-Bits). So unless you have the private key or are able to factorize the public key, you can't create a new, valid signature for a modified configuration file.

Patching this signature check in the software is most certainly only possible if you manage to circumvent the CRC check of certain files in "applaunch.dat" which is probably also protected by a Public-Key signature (file "applaunch.sgn").

I expect that it is still possible to hack the camera, but researching this would probably require quite some time and effort.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on June 16, 2014, 06:12:19 am
Or upgrading to an older Firmware but with a higher revision number?

I don't have a Flir so I'm just taking a shot in the dark.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 16, 2014, 09:08:08 pm
Update on my earlier connection issues:

Previously I experienced difficulty talking to my V1.18 after installing the latest Flir Tools software. A fellow forum member kindly uploaded Version 4.0.13284.1003 and now all is well again.
It seems to me that the ability to talk to the camera easily (even through filezilla) may depend on the Flir drivers. I could be wrong about this but in any case I'd advise against updating Flir tools in the meantime.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 12:52:16 am
Arg.  OK,  the first go around went well.  I did the res mod and went well, then the menu mod went well.  I went to do the menu3 mod and screwed the pooch.  Black screen.  I copied the FlashFS and FlashBFS incorrectly, so I deleted them on the camera (through filezilla) and resent the menu3 mod back to the camera.  I have nothing but a black screen now.  Any ideas how to get those files back (FlashFS and FlashBFS) onto the camera?  Many thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 18, 2014, 12:59:47 am
You should have done the recommended back up!  A little info about your particular firmware and hardware version would help in restoring the missing files. There are plenty of people here that can help you out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 01:08:39 am
Yeah,  I did the backup of the original cfc file, but the video I watched didn't walk me through backing up anything else  :(.  I am on 1.22
Filezilla is showing all kinds of crap on the camera now.

Which of these can I remove to make room for the FlashFS?  The FlashBFS copied over, but ran out of room for the FlashFS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 18, 2014, 01:14:59 am
You should be able to drag the new flashfs folder over and select overwrite to replace the one on the camera. Don't remove anything, just overwrite a known bad directory with a known good one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 01:26:57 am
I dragged the 2 folders back over and still have a black screen.  What should I try next?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on June 18, 2014, 01:30:45 am
There is a thread for this sort of thing,  i would try to run the firmware update for your version, 1.22 and start fresh. There is no telling if that will work or not but that's what i would do. I am not saying try yo upgrade to a newer version, run the one you already have. There are links in this thread but a few pages earlier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 01:40:28 am
I've been googleing for hours in this forum.  Can't seem to find a fix.  When I try and send the FlashFS I get the exceeded storage error..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 01:54:35 am
There is a thread for this sort of thing,  i would try to run the firmware update for your version, 1.22 and start fresh. There is no telling if that will work or not but that's what i would do. I am not saying try yo upgrade to a newer version, run the one you already have. There are links in this thread but a few pages earlier.
Hey Heavybarrel,  Could you point me to that thread?  Where would I find the firmware update?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PCSnoop on June 18, 2014, 02:02:47 am
My backup folder is empty.  The only thing I have a backup of is the original cfc file.  Am I screwed?

Is there a way for me to get a complete FlashFS and FlashBFS directory somewhere?

Thank you to a member in this forum.  He logged into my computer and repaired it for me.  Awesome  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on June 18, 2014, 03:45:33 am
My backup folder is empty.  The only thing I have a backup of is the original cfc file.  Am I screwed?

Is there a way for me to get a complete FlashFS and FlashBFS directory somewhere?

Thank you to a member in this forum.  He logged into my computer and repaired it for me.  Awesome  :-+
Took care of it for him through TeamViewer, he was using an e60 cfg file lol
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: carlpj on June 18, 2014, 10:55:31 am
Gentlemen, I am impressed. An amazing hack, followed by Marphy’s brilliant one-click package.

E4 1.1L, SN 63924xxx, f/w 1.22, cal date 24 April.

Sent from Tequipment on 5 June to Australia. Delivered cost A$1135, all inclusive (vs A$1500 local price). A winner.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AintBigAintClever on June 18, 2014, 11:07:10 am
joe-c's conf.cfc has a new size (112 byte bigger) and ftool outputs an error.  :(

That's expected. The 16-byte MD5 hash has been replaced by a 128-byte Public-Key signature (RSA 1024-Bits). So unless you have the private key or are able to factorize the public key, you can't create a new, valid signature for a modified configuration file.

Patching this signature check in the software is most certainly only possible if you manage to circumvent the CRC check of certain files in "applaunch.dat" which is probably also protected by a Public-Key signature (file "applaunch.sgn").

I expect that it is still possible to hack the camera, but researching this would probably require quite some time and effort.
Is this the same config file that's written to by the camera itself when changing preferences? If so, the code and keys for re-signing the file will be in the camera firmware somewhere. If the firmware's encrypted, the camera needs to know how to decrypt that at boot time.

Time and effort indeed, but the answer is right there in the camera. Unlike say the Xbox 360 where the encryption is buried in the hardware (and even that got reset glitch hacked) this is encryption added where it wasn't before, and all the instructions for doing it will be in that firmware package.

Wish I'd kept up with coding now, must be 20 years since I've used a disassembler.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 18, 2014, 12:07:56 pm
Is this the same config file that's written to by the camera itself when changing preferences? If so, the code and keys for re-signing the file will be in the camera firmware somewhere. If the firmware's encrypted, the camera needs to know how to decrypt that at boot time.
No, it's the (supposedly) fixed factory configuration.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: padrino on June 19, 2014, 08:56:12 pm
If I purchase an E4 with 2.1 is it possible to downgrade it to 1.22 or another firmware version that can be unlocked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paulio on June 19, 2014, 11:45:51 pm
If I purchase an E4 with 2.1 is it possible to downgrade it to 1.22 or another firmware version that can be unlocked?

No,  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: felixh on June 20, 2014, 12:45:37 pm
I just got my E4, another new Firmware-version: E4 1.2L, software 2.3....

I hoped, Reichelt still had some old cams remaining...

well, i think i'll keep it. its a cool toy either way :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 20, 2014, 05:03:34 pm
I just got my E4, another new Firmware-version: E4 1.2L, software 2.3....

I hoped, Reichelt still had some old cams remaining...

well, i think i'll keep it. its a cool toy either way :)

Are you able to turn on RNDIS mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on June 20, 2014, 05:16:47 pm

Just a short comment regarding hacking a public/private crypto system:

-> find public key stored in device
-> replace public key with own one
-> re-sign all signed stuff
-> have fun

In case the key is hardwired somewhere, then just patch the comparison routine(s).
-> In short: Flir is just setting up a challenge instead of ensuring that their customers get maximum satisfaction.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on June 20, 2014, 06:21:08 pm
-> In short: Flir is just setting up a challenge instead of ensuring that their customers get maximum satisfaction.

Who's saying that such challanges are not satisfying to some customers ;)

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: StaticDET5 on June 21, 2014, 02:04:05 am
I just received my E4, and I'm getting ready to do the software performance update.  I have a software 1.22 system.  Before I go forward with this:

Would it help to film it?  Document the process for others?  Is there anything I can do to help you folks continue this process?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on June 21, 2014, 02:13:18 am
I just received my E4, and I'm getting ready to do the software performance update.  I have a software 1.22 system.  Before I go forward with this:

Would it help to film it?  Document the process for others?  Is there anything I can do to help you folks continue this process?
Back it up, main thing is the conf.cfc file. If you need help I can TeamViewer you
Edit: Let us know what your calibration date is and serial number(you can hold off on last digit) and Aurora will add it to the Useful information thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: StaticDET5 on June 21, 2014, 03:48:01 am
Alright!

I'm on it.  If there is anything else folks want me to do, let me know by around 1700EST tomorrow.

Thanks folks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on June 21, 2014, 08:08:58 am
Hi.
639256xx, 1.22.0, April 30, Estonia, V1.1L
639261xx, 1.22.0, calibration date to be given later.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 21, 2014, 04:56:04 pm
Hi,

ordered my E4 Wednesday, eagerly awaiting its arrival. Im already thinking about adding a passive autofocus. Anyone knows if theres software capable of analysing videostreams (per contrastscanning for example) und giving out a signal to control a motorslide which moves a telephoto-lens? Software like http://www.focusmax.org/ (http://www.focusmax.org/) (didnt read the whole description, but i think its not fast enough, since its for telescope users). Another question: Is there any information which lens to use as a telephoto-lens for the E4 for ~100m targetdistance? Ive got knowledge about laser-optics, but not about image-optics.

Many thanks to the users on here constantly working on hacking the E4-Firmware  :-+


Greetings,

Steffen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 21, 2014, 08:27:33 pm
Is there any information which lens to use as a telephoto-lens for the E4 for ~100m targetdistance? Ive got knowledge about laser-optics, but not about image-optics.

You'll need a germanium telephoto lens (https://www.google.com/search?q=telephoto+germanium+lenses&tbm=isch). Glass is not thermally transparent, so it's unusable. The germanium lenses are quite expensive, though.
For example :
http://www.ebay.co.uk/itm/200mm-F1-3-Germanium-Thermal-Imager-Lens-PPE-Fast-Objective-/281312701181?pt=UK_Lenses_Filters_Lenses&hash=item417f8b2afd (http://www.ebay.co.uk/itm/200mm-F1-3-Germanium-Thermal-Imager-Lens-PPE-Fast-Objective-/281312701181?pt=UK_Lenses_Filters_Lenses&hash=item417f8b2afd)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 21, 2014, 09:30:18 pm
I've noticed that pictures taken with thermal scopes typically don't show temperatures. Do people usually not care about temperature readings, or do thermal scopes not have that feature at all?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 21, 2014, 11:19:01 pm
The E4 is capable of detecting a person easily at 300m. Much depends upon what you need in terms of target detail. I do wildlife work with a thermal camera and operate a 24 Degree Lens fed from a FLIR X2 telescope. I bought the compact telescope for around $400 on the secondary market where prices can be more reasonable.

The E4 was designed with a 45 Degree wide angle lens (in TIC terms), and this suits its target audience who often wish for >24 Degree lenses when working in cramped conditions. For distance work it is better to find a camera with the narrower field of view though. Adding Germanium lenses in front of the primary lens also adds some loss (approx. 15% on my X2 lens), weight, and costs a lot of money due to the amount of expensive Germanium lens material needed.

Be very careful buying lenses on the secondary market..... they are often still an expensive purchase and there are many traps to fall into, including a totally unsuitable SW lens that massively attenuates the image when used on a LW camera such as the E4 ! That is due to the AR coating differences.

Somewhere I have a table of FLIR detection distances with different lenses. I will see if I can find it.

Do not forget that the E4 can apply a digital zoom of X2 to X8. As you likely know, this is at the cost of resolution, but it provides a larger image on the screen. X2 is useful...... much more than that and pixelation becomes an issue.

Weapons sights do not normally have temperature measurement as they are weapon centric, providing an uncluttered view of the target with the best possible contrast. Such a TIC is not a good choice where temperature measurement is a requirement !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 21, 2014, 11:51:20 pm
I see. But I'm curious: is it possible to hack a thermal scope to display temperatures?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 22, 2014, 12:03:50 am
Scopes will often have automatic  gain/zero adjust to maximise the amount of detail in an image. In some cases, they will not, or only rarely rarely, do a shutter calibration, as uninterrupted view is more important than temperature accuracy.
For any scope that is handheld, the movement will mean that for nonuniformity correction, it can be assumed that the long-term avarage scene content will be uniform - I think the FlirOne uses this method, and only needs the manual shutter when you want to measure absolute  temp.
I suspect if you mount a FlirOne on a tripod looking at a static image, the image will fade out, though they may be using the accelerometer as an input to estimate whether the image should be moving or stationery.

Another aspect is that a scope type device would not need to worry about things like long-term drift with temperature and aging, as absolute values aren't important.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 22, 2014, 12:56:05 am
Yes that's the one. You need to translate the lens mm specifications into 'Field of View' though as that tends to be the spec supplied with cameras. The E4 has a very simple and small lens but is still good for 300m spotting human targets.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on June 22, 2014, 11:28:03 am
-> In short: Flir is just setting up a challenge instead of ensuring that their customers get maximum satisfaction.

Who's saying that such challanges are not satisfying to some customers ;)

Greetings,

Chris

I have been reading the discussion of the hacking efforts for the new firmware with much interest, as I am wondering what will happen if I someday need to return my new hacked camera for repair, and I receive something much less valuable in return.

However, tiring to look at the big picture, I think that if Flair can make a high quality camera for a low price, other manufactures can also. In the end the camera prices will be subject to competition. Perhaps we will all be able to replace our camera's in the future with something better at a lower price.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 23, 2014, 10:18:53 am
I just got my hands on a 2.1 unit with permission from the owner to tear down for pictures. I know everyone wants to see what sensor has been used so I will get pics of that, let me know if there's anything else anyone wants to know while I'm in there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 23, 2014, 12:03:56 pm
I just got my hands on a 2.1 unit with permission from the owner to tear down for pictures. I know everyone wants to see what sensor has been used so I will get pics of that, let me know if there's anything else anyone wants to know while I'm in there.
Doubt sensor will be different but would be interesting to see if there are any PCB changes, e.g. if the console port FFC connector is still fitted
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 23, 2014, 01:37:08 pm
V2.1 Internal photos:
I'm a bit busy today but I hope to have time to put a scope on tomorrow.

(http://media.use.com/images/s_1/da2a6531f73484081f53.jpg) (http://www.use.com/da2a6531f73484081f53)
(http://media.use.com/images/s_1/9ae168c8df455600b5c0_1.jpg) (http://www.use.com/9ae168c8df455600b5c0?p=1)

 (http://media.use.com/images/s_1/9ae168c8df455600b5c0_2.jpg) (http://www.use.com/9ae168c8df455600b5c0?p=2)
(http://media.use.com/images/s_1/1aaf34b99ad4e871f98d_1.jpg) (http://www.use.com/1aaf34b99ad4e871f98d?p=1)
 (http://media.use.com/images/s_1/1aaf34b99ad4e871f98d_2.jpg) (http://www.use.com/1aaf34b99ad4e871f98d?p=2)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 23, 2014, 01:39:43 pm
I just got my hands on a 2.1 unit with permission from the owner to tear down for pictures. I know everyone wants to see what sensor has been used so I will get pics of that, let me know if there's anything else anyone wants to know while I'm in there.
Doubt sensor will be different but would be interesting to see if there are any PCB changes, e.g. if the console port FFC connector is still fitted

Ugh, I forgot to photo that side of the board and I have to head out now, but ff that's the one accessible by removing the label at the front then yes it's still there  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DJ on June 24, 2014, 12:17:33 am
One wonders if any other products have been studied as intently by such a geographically diverse group.

I've had some designs copied by the chinese, but only saw the results,  not the process.

The good folks at Flir, especially the designers, must be somewhat bemused, as each revision gets trotted out and torn apart.

Sort off odd to have ones work under such a public microscope.  Outside the hacks, the overall execution seems to be holding up rather well.

Flir, if you are reading this, well done. And how's about spreading any bonuses to the design people?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: carlpj on June 24, 2014, 07:50:04 am
The E4 has a very simple and small lens but is still good for 300m spotting human targets.

Aurora

Correct me if I’m wrong. Each E4 sensor pixel subtends an angle of 45°/320, or 0.14°. At 300 metres this corresponds to an object 0.74 metres wide (and high; the pixels are approximately square). So a non-obese human will on average partly light up two pixels. Under optimum conditions (think bikini in snow) this will be barely detectable. In hot sun, or among trees, it will be even less obvious.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on June 24, 2014, 08:27:11 am
The E4 has a very simple and small lens but is still good for 300m spotting human targets.

Aurora

Correct me if I’m wrong. Each E4 sensor pixel subtends an angle of 45°/320, or 0.14°. At 300 metres this corresponds to an object 0.74 metres wide (and high; the pixels are approximately square). So a non-obese human will on average partly light up two pixels. Under optimum conditions (think bikini in snow) this will be barely detectable. In hot sun, or among trees, it will be even less obvious.
But they will usually be moving, which will make them easily visible even if they are only a couple of pixels wide
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zakraf on June 24, 2014, 10:09:23 am
I also got a new Flir E4

Model: E4 1.2L
Firmware: 2.1.0
Serial No.: 6392 91xx
Calibration Date: May 23

You can still get into the USB mode menu, but you can’t change to any other mode then “UVC and MSD”

Regarding the USB problem, I also first couldn’t install it on any PC, but FLIR posted a fix
http://flir.custhelp.com/app/answers/detail/a_id/987 (http://flir.custhelp.com/app/answers/detail/a_id/987)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zakraf on June 24, 2014, 11:43:59 am
I did activate the RNDIS_UVC  mode with the “Set_RNDIS_Mode.fif” file from freak_ge

But now I can’t install any drivers for the RNDIS mode and because of that I can’t set back the E4 to “UVC and MSD”
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zakraf on June 24, 2014, 02:07:33 pm
Thank you for the PM, it got fixed with manually choose the driver „FLIR Camera Network Device” using the “List of device drivers on the computer” option.
TIConfig is working now, just need someone now adapt the conf.cfc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on June 24, 2014, 10:48:44 pm
Has anyone thought of building a focal lenght augmenter on the Ex serie?
My optics classes date from 1984, forgotten everything.
But I was tempted to dust off my old school notes and do some back-of-the-envelope doodling to see if it's possible...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on June 24, 2014, 10:52:54 pm
Just found that...
http://www.opticalsoftware.net/index.php/how_to/lens_design_software/winlens3dbasic (http://www.opticalsoftware.net/index.php/how_to/lens_design_software/winlens3dbasic)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 24, 2014, 11:26:08 pm
For anyone interested, I have just torn down a Fluke VT02 and posted plenty of pictures here:

https://www.eevblog.com/forum/testgear/fluke-vt02-thermal-camera-visual-thermometer-teardown/msg467641/#msg467641 (https://www.eevblog.com/forum/testgear/fluke-vt02-thermal-camera-visual-thermometer-teardown/msg467641/#msg467641)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 25, 2014, 04:32:29 am
They work for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on June 25, 2014, 07:46:00 am
Link doesn't work? Not sure what you mean as I can see the photos in your quote. Anyone else having trouble?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rbg on June 25, 2014, 04:00:45 pm
I just noticed today that FLIR is using FreeDOS's command interpreter.  I telnet'ed to a 1.22.0 FLIR E4 and was playing with the various commands.  The output of "ver /c" says their command interpreter is from FreeDOS and implies they have modified it (FLIR copyright).  "ver /r" explicitly says it is GPL.  Has anyone asked FLIR for the source of their GPL code?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 28, 2014, 04:43:24 pm
Got my new E4 about a week ago and i am very pleased with it. The menu/resolution-hack was done with the TIConfig-Tool without problems, thx marphy!  :) . At the moment im trying to merge the flir-stream with a C920-webcam-stream and implementing a autofocus-algorithm in OpenCV, just gonna need to find suitable Ge/ZnSe-Lenses first.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plumber on June 29, 2014, 01:01:48 pm
Hi everyone .I have been trying to update my flir E6 to an E8 by following pop gamers video on you tube.
I've downloaded his links under the video and followed his video .
But when I think I'm at the end and change the file to zip my contents.fif.
When I enter the new file in flir install net it comes up ... IDS ILLEGAL. Any ideas . I would love to upgrade my camera since it cost a small fortune
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 29, 2014, 03:10:16 pm
Does anyone have a working stream-configuration for me? Flir-Tools-Stream works with activated UVC+RNDIS and http://192.168.0.2/webcam.asp (http://192.168.0.2/webcam.asp) works too. But it isnt working in VLC-Player with the standard-adress: 192.168.0.2:554 ipconfig/all says its the correct address.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on June 29, 2014, 07:35:41 pm
Does anyone have a working stream-configuration for me? Flir-Tools-Stream works with activated UVC+RNDIS and http://192.168.0.2/webcam.asp (http://192.168.0.2/webcam.asp) works too. But it isnt working in VLC-Player with the standard-adress: 192.168.0.2:554 ipconfig/all says its the correct address.

I've got the E4 streaming (and recording) just fine. See this older post: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg347138/#msg347138 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg347138/#msg347138)

Will be interested to hear what you come up with using opencv. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 30, 2014, 12:33:19 am
ffserver cant be compiled on Windows. Im using Windows 7 64-Bit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on June 30, 2014, 12:40:24 am
No habla windoze senior. In which case I don't have a working solution for you, sorry.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 01, 2014, 12:35:35 am
Just reseted my E4 from E8-status again to E4 just to be sure its not depended on the firmware-files in the cam, but no effect, still no available stream in vlc. Tried it already on a Vista-32Bit-laptop and a Win7-64Bit-Desktop. Will try to get a stream in vlc on another XP-pc which is not connected to my home-network, i seriously dont know why it doesnt work.  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on July 01, 2014, 06:20:51 am
These probably aren't hackable but http://store.flir.com/category/ex-series-infrared-cameras (http://store.flir.com/category/ex-series-infrared-cameras)


Really?
$100 off for E4
$250 off for E5 or E6?
Mmmm.... Wonder why?  :scared:
Possible drop on sales after the new firmware came out?  |O
Come on flir! No brainer!
I already said in the pass, if flir blocks the hack, it will see drop of the Ex model sales
I am one of the guys who bought 2 E4 because of the hack, if no hack, I would wait for the flir one
Which still no news.
I would bought a 3rd or maybe more because of friends saw my E4, and wanted to buy it from me.
But I don't want to get stuck with an unhackable E4
So kind of wait and see with the new firmware  :phew:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on July 03, 2014, 11:42:55 am
The Cameras on sale seem to have some sort of impaired temperature range.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on July 03, 2014, 11:52:09 am
Hi All,

I have been searching for a way to extract the raw data from my new Flir e4, and tried the "Batch Flir Image Converter" (mentioned above) which so far  works really well.

My one concern is that that my Norton virus software reports a security risk based on reputation (i.e. there was no actual issue found, but they didn't trust the source). Has anyone found any sort of problem with this download?

jjmss00
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 03, 2014, 04:32:29 pm
@jjmmss

Interesting .... well spotted.

So FLIR are selling off sub standard products for a small discount. A duff batch of microbolometers maybe. Surprised FLIR will sell sub standard product though. The small amount of discount is a joke as well.

I note that measurement accuracy and ambient working temperature are compromised. The E4 has no physical temperature stabilisation and relies upon an algorithm and look-up table to estimate the error introduced by ambient temperature changes. It is a possibility that the calibration stage of production detected 'out of limits' calibration values for these cameras below zero and above 40C.
Surprised that measurement accuracy would have been compromised though as that is based upon calibration tables and some maths. +-5C is a truly appalling accuracy figure for a thermal camera.  A bit of an odd situation really.

I wonder what FLIR do to clearly identify the cameras as sub standard specification....... Brand them with a big letter 'R' for Reject maybe  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 03, 2014, 05:08:50 pm
Just had a chat with the FLIR-Support. They told me that RTSP-Streaming with the usual Infracam-Driver isnt possible for Ex-Series-Cams, instead these cams only support UVC-Streaming (which the "Flir Tools"-Software uses). Thought you guys mentioned that rtsp-streaming works with your ex-series-cams? Or is the rtsp-streaming regulated in the firmware-file and the hack should have enabled it? *confused*

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 03, 2014, 09:33:31 pm
Dont know if the e4 was intimidated but it now works, dont know why (as i recall i tested the uvc-stream-function properly in opencv last time) but it now streams per UCV. Quite slow with 4 fps or so, but should be manageable to increase that to 9 fps.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on July 04, 2014, 01:00:25 am
So FLIR are selling off sub standard products for a small discount. A duff batch of microbolometers maybe. Surprised FLIR will sell sub standard product though. The small amount of discount is a joke as well.

I note that measurement accuracy and ambient working temperature are compromised. The E4 has no physical temperature stabilisation and relies upon an algorithm and look-up table to estimate the error introduced by ambient temperature changes. It is a possibility that the calibration stage of production detected 'out of limits' calibration values for these cameras below zero and above 40C.
Surprised that measurement accuracy would have been compromised though as that is based upon calibration tables and some maths. +-5C is a truly appalling accuracy figure for a thermal camera.  A bit of an odd situation really.

True. The discounted E4 has a temperature range of 0°C to 150°C (32°F to 302°F). Standard E4 temperature range is –20°C to +250°C (–4°F to +482°F). The discounted "E4" is quite hobbled, especially in light of the mere 10% discount.

On top of that, the ±5% accuracy vs the standard E4 ±2% accuracy makes me wonder why FLIR is even letting these get out the door.

Temperature range and accuracy of the discounted E5 and E6 cameras is the same as that of the discounted E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on July 04, 2014, 01:11:50 am
Just so you know.
I've gone to pick up an E4 which had a defective UP switch more than a month ago.

I sent the camera specifying that I did NOT want the firmware to be upgraded. I told the store guy that I purchased that model and firmware and that I requested same model and firmware, that I did not authorise the upgrade.

The camera came with an upgrade to v2.3.0

When we sent the camera, weeks agow, we found among his inventory one of the remaining V1.22.0 and he set it aside for me in his office with my name on it.

So I have got a V1.22.0
but...
FLIR does not respect the DO NOT UPGRADE instructions, it seems...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 04, 2014, 02:06:58 am
That will hopefully become a moot point once someone figures out how to hack the 2.x.x firmware. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KyleK29 on July 04, 2014, 03:50:55 am
Figured I'd throw this here.

Received a FLIR E4 today, this is the info:

E4 1.2L
Serial: 63928###
Software: 2.3.0
Cal Date: May 23rd, 2014

Was able to connect to it using the FLIRnetworktool + Set_RNDIS_temporary.fif file (Set_RNDIS_permenant.fif didn't work). Unable to do resolution hack, because of the previously talked about "tail 2 invalid" error.

If anyone needs the encrypted conf.cfc for comparisons, let me know.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 04, 2014, 04:16:15 am
This thread had 357 pages earlier today, but now it's at 355. Did someone delete some posts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 04, 2014, 07:23:41 am
Well it wasn't me this time  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 04, 2014, 03:05:43 pm
I think it was freak_ge this time. A cached version of this thread shows that he has 131 posts, but now he only has 71.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on July 05, 2014, 12:07:13 am
I've been religiously saving this thread since day1. Having done the mod, my guess was that FLIR would have forced it wiped, and there was/is
too much valuable information to lose :-)  I'll go through and compare the missing bits and see if there's anything worth recovering.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 05, 2014, 03:04:08 pm
I understand that the Internet Wayback machine has already been directed to this thread  ;

Freak_ge  may have had good reason to purge his postings ( I know that way back in this thread I had to do similar until my involvement had been approved). I hope Freak_ge is OK as I cannot see any of his postings so he may have decamped ?

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeoffS on July 05, 2014, 03:07:54 pm
I think it was freak_ge this time. A cached version of this thread shows that he has 131 posts, but now he only has 71.

 freak_ge  has  deleted all their posts. No response to a PM asking not to.
Looking at the profile for freak_ge, their personal text reads 'GoodBye!' so it would seem they are leaving.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 05, 2014, 03:12:21 pm
Many thanks Geoff.

Pity he had to leave that way, but I suppose he had his reasons.

OK, Own up ! who pi**ed him off  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeoffS on July 05, 2014, 03:14:13 pm
He's still logged on and active as of 10 minutes ago.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on July 05, 2014, 08:37:36 pm
I thought you couldn't delete your own messages if they are very old ? Doesn't it take an admin to do that ? Or am I mistaken ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 05, 2014, 09:36:58 pm
A friendly word of warning:

When FLIR first released the E4, its firmware was not protected by encryption and I was advised that it was not illegal for a user to UPGRADE the camera by simple changes to the configuration files. That situation may have changed now that FLIR is encrypting their firmware to actively prevent upgrading. Carrying out a hack that cracks an encrypted product invites action from the OEM against any individual involved in creation of the hack, or the selling of hacked units. Sellers of hacked units on ebay beware !

I am not in a position to say more, but please consider this situation carefully before thinking of hacking the new E4 firmware. IMHO the upgrading of the E4 has run its course and ends with FW 1.22.

I also recommend that you do not post images from hacked cameras on the internet or provide any full serial numbers of such units. With regret, I will not be compiling any more serial number Vs firmware version details in my useful information thread.

Disclaimer: I do not work for, or represent FLIR. But I do have contacts and information sources in the trade.

Take Care

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 05, 2014, 10:08:28 pm
its firmware was not protected by encryption and I was advised that it was not illegal for a user to UPGRADE the camera by simple changes to the configuration files. That situation may have changed now that FLIR is encrypting their firmware to actively prevent upgrading. Carrying out a hack that cracks an encrypted product invites action from the OEM against any individual involved in creation of the hack
How would encryption make any difference to legality or otherwise?
The original FW had a form of digital signature (CRC01) on it - the only difference is that it was possible (via service mode) to make the unit sign the file itself. 


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on July 05, 2014, 10:24:01 pm
freak_ge, hope you can read this. Life sucks, sometimes. Hope things work out for you. There are too many things to do in the world to worry about just one thing. Cheer up and move forward with your head held high. :) You've done much for many. Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on July 05, 2014, 10:30:37 pm
"Oh boy" - Flir could have quintrupled their sales and even not have to develop software themself...
Just provide some Open SDK and a reasonably priced module and the community will thrive (But I guess that's too much innovation to grasp at once).
Naturally this assumption could be wrong - time will show.

I was "looked on strange" (not to say I got ridiculed) when I claimed "Linux will become REALLY big" (1998 ff)... well, now it's the world's most widely used, dominant OS.
... oh, of cause - the guys at Google don't know what they are doing - and they are not making any profit either... :-DD

It might take some time, but sooner or later some competitor (if there is any) will decide that there's good money to be made with the hobbyist segment - hopefully we'll see where the game theory plays out.




(PS - Just in case somebody gets sued then I'd suggest to remember how "home-talking" the Flir tools are - they claim to not collect personal information, yet the machine and user name are sent over to the data collecting server in order to identify the user ... and there's more mud to find once somebody starts digging).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 05, 2014, 10:38:13 pm
I don't see how encryption is anything more than a technical barrier. Several years ago, Texas Instruments unleashed its lawyers on people who cracked the signing keys of their graphing calculators. It didn't exactly end well for the company: http://en.wikipedia.org/wiki/Texas_Instruments_signing_key_controversy (http://en.wikipedia.org/wiki/Texas_Instruments_signing_key_controversy)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 05, 2014, 11:29:54 pm
I am no lawyer and know little of the law regarding hacking. My thoughts were that if a manufacturer provides a product that has not been specifically protected against changing the configuration, then changing such is not an act for which a user may be pursued. Not sure how a CRC is considered in terms of a manufacturers intention to protect its product especially when they include the tools to re calculate it !CRC's are commonly used to detect defective data rather than a defence system. The passwords were also public domain from their own on-line documentation.

No move forwards a few months.... FLIR deliberately change their CRC to stop the upgrade. The change is flawed and the CRC was still able to be calculated. No password changes. In short, not a very effective response by FLIR

Move forward a few more months..... FLIR release Firmware 2.1 and then 2.3. Both of these Firmware versions include a protection mechanism designed to be very hard to circumvent or 'crack'. the protection is true encryption using Public Private keys. Can there be any doubt that FLIR have got serious about stopping the upgrades ?

Place yourself in front of a Judge and consider the three stages above. In stages one and two I believe that it is the mildest form of hacking and could be described as hobbyist 'playing' with simple CRC calculations. Then consider stage 3. If you have been involved in cracking a public private key encryption, can there be any doubt that the the manufacturer did not wish you to access the configuration and took serious steps to prevent it. You would also have needed to enact an advanced form of hacking to circumvent or crack the encryption. The law may take the side of the OEM against you and who knows what that could mean.

I have absolutely no idea what, if anything FLIR would do if someone publicised a hack of the 2.1 and 2.3 firmware's but I would not wish to find out in person, as such acts can sometimes bring fire and brimstone down on the head of those involved. Not scare mongering, just a warning based upon recent actions by FLIR that have come to my attention.

Just be careful what you place in the public domain.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeoffS on July 06, 2014, 12:18:52 am
I thought you couldn't delete your own messages if they are very old ? Doesn't it take an admin to do that ? Or am I mistaken ?

You can remove any of your own posts unless it's the first post in a thread i.e a thread you've started.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 06, 2014, 12:26:23 am
My thoughts were that if a manufacturer provides a product that has not been specifically protected against changing the configuration, then changing such is not an act for which a user may be pursued.
Not sure how a CRC is considered in terms of a manufacturers intention to protect its product
The old CRC01 was a specific measure to prevent changing configuration, and inclusion of the serial number prevents copying a config from a higher spec model.
Quote
No move forwards a few months.... FLIR deliberately change their CRC to stop the upgrade. The change is flawed and the CRC was still able to be calculated. No password changes. In short, not a very effective response by FLIR
Move forward a few more months..... FLIR release Firmware 2.1 and then 2.3. Both of these Firmware versions include a protection mechanism designed to be very hard to circumvent or 'crack'. the protection is true encryption using Public Private keys. Can there be any doubt that FLIR have got serious about stopping the upgrades ?
No, but I can't see that it has any bearing on any legal issues.
I own it. I agreed to no license agreement on purchase. I can do what I want with it.
May be different in the US where they have industry-sponsored legislation like the DMCA, though it's questionable to what extent this would apply in this situation as it has no relation to copyright infringment or copying.
Quote
Place yourself in front of a Judge
On what charge?
Quote
and consider the three stages above. In stages one and two I believe that it is the mildest form of hacking and could be described as hobbyist 'playing' with simple CRC calculations. Then consider stage 3. If you have been involved in cracking a public private key encryption, can there be any doubt that the the manufacturer did not wish you to access the configuration and took serious steps to prevent it. You would also have needed to enact an advanced form of hacking to circumvent or crack the encryption. The law may take the side of the OEM against you and who knows what that could mean.
I can't see how the degree of protection, or level of incompetence in the design of any protection has any bearing on legality. It was always protected, and it has always been clear that they did not intend it to be possible to hack. All they've done over time is plugged some unintended holes.
Quote
I have absolutely no idea what, if anything FLIR would do if someone publicised a hack of the 2.1 and 2.3 firmware's but I would not wish to find out in person, as such acts can sometimes bring fire and brimstone down on the head of those involved.
Or backfire spectacularly - the Striesand Effect

Nobody can know what goes on in their heads, but the fact is that if there is still a flaw in the protection (and I'm not aware that anyone has taken a serious look yet), there's a good chance someone will find it, and it will become public. Any attempt to suppress it will just cause the Striesand effect to kick in.

The stupid thing is that it would have been so easy for them to make it completely unhackable months ago, and if there is still a way in then they only have themselves to blame.   

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on July 06, 2014, 12:42:27 am
Hi,

If you have been involved in cracking a public private key encryption, can there be any doubt that the the manufacturer did not wish you to access the configuration and took serious steps to prevent it. You would also have needed to enact an advanced form of hacking to circumvent or crack the encryption. The law may take the side of the OEM against you and who knows what that could mean.

Come on. Of course, it depends of the country you are in. But generally speaking :
- The fact that the manufacturer "did not wish" us to access this information is irrelevant.
- The fact that they took serious steps to prevent it is irrelevant. Reverse engineering is even allowed by law in some countries.
- The fact that you are doing something bad for the business of the manufacturer is irrelevant.
- The fact that they are loosing money is irrelevant too.

The law and judges are not there to protect business strategies and business revenues by themselves.

However, companies may use their money and size to try to intimidate people. It's a bit like terrorism : even if your requests are not 100% legit, you try to make people do what you want by using fear. That can work. It can also backlash (as shown with the example from TI - but there are many other examples, see the Sony DRM story for an example).

Even if FLIR does manage to get the sale of hacked units to stop (I suspect many customers of hacked units are in fact very happy customers !), even if they do manage for the information to disappear from the Internet (which would piss people off), there is already a lot of people who are informed of all this stuff and who will remember it. And many those people are mostly FLIR customers.

Time will tell what will happen to FLIR. In my eyes, they look more and more like a big company struggling to keep their profits using questionable business practices, and less and less like a respectable company acting in good faith for the benefit of their customers.

And I have no problem publishing my opinion in public domain. Free speech.

While we're speculating about law, I'm wondering if FLIR actions by themselves could not be subject of a legal action too. I'm not sure selling crippled hardware is legal everywhere, especially with such a price difference for the same hardware, a price difference which can not really be justified by differences in the software.

And I think customers who bought a full-priced E8 must be very unhappy when they learnt that the E4 hardware can do the same for like 6x times less. FLIR might think that those customers are unhappy because of the hack. But even if there was no hack, no upgrade possibility, those customers would still be unhappy. They've been induced to pay a huge premium. They might feel cheated : I would feel cheated.

[EDIT] I also believe that the sale of hacked unit is legal, as long as the customer precisely knows what he is buying, of course.
Actually I believe that someone buying a hacked E4 from an eBay seller knows more what he's buying than someone buying a crippled E4 from FLIR... which customer is being cheated on ? Which seller is lying the most about the capabilities of the product ? Think about it.
Aurora, you think that a judge might fall in the side of FLIR. I think he might also laugh about their practices. It all depends of the country I believe.

uski
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on July 06, 2014, 12:54:19 am
We are getting off topic but I'll leave this for your perusal:

http://en.wikipedia.org/wiki/Anti-circumvention#Reverse_Engineering_and_Circumvention (http://en.wikipedia.org/wiki/Anti-circumvention#Reverse_Engineering_and_Circumvention)

Quote
Reverse Engineering and Circumvention

Sec. 103(f) of the DMCA (17 U.S.C. § 1201 (f) ) says that if you legally obtain a program that is protected, you are allowed to reverse-engineer and circumvent the protection to achieve the ability the interoperability of computer programs (i.e., the ability to exchange and make use of information). The section states:

(f) Reverse Engineering.— (1) Notwithstanding the provisions of subsection (a)(1)(A), a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title. (2) Notwithstanding the provisions of subsections (a)(2) and (b), a person may develop and employ technological means to circumvent a technological measure, or to circumvent protection afforded by a technological measure, in order to enable the identification and analysis under paragraph (1), or for the purpose of enabling interoperability of an independently created computer program with other programs, if such means are necessary to achieve such interoperability, to the extent that doing so does not constitute infringement under this title. (3) The information acquired through the acts permitted under paragraph (1), and the means permitted under paragraph (2), may be made available to others if the person referred to in paragraph (1) or (2), as the case may be, provides such information or means solely for the purpose of enabling interoperability of an independently created computer program with other programs, and to the extent that doing so does not constitute infringement under this title or violate applicable law other than this section. (4) For purposes of this subsection, the term "interoperability" means the ability of computer programs to exchange information, and of such programs mutually to use the information which has been exchanged.

This doesn't mean you can crack the code to enable features but you can to be able to exchange information with other programs that otherwise you would be prevented to do.

Edit: but I'm no lawyer, so I don't know to what extent will this protect anyone. but to me it reads I can circumvent the protection to enable features written by myself and being able to publish my results for that purpose.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on July 06, 2014, 01:01:26 am
We are getting off topic but I'll leave this for your perusal:

http://en.wikipedia.org/wiki/Anti-circumvention#Reverse_Engineering_and_Circumvention (http://en.wikipedia.org/wiki/Anti-circumvention#Reverse_Engineering_and_Circumvention)


(DMCA only applies in the USA)

Unless I don't read this properly (I'm not a lawyer), it gives cases where reverse engineering is explicitely allowed by law.
However, it does not forbid doing so in other cases. As Mike pointed out, a customer who lawfully bought a FLIR Ex has not signed anything preventing him from reverse engineering its software or hardware. And I am not aware of any legal provision that prevents someone from doing so.

[EDIT] Miguel I didn't see your last paragraph, sorry.

Also, it says it's about a "program". We're speaking about hardware. I don't know if the DMCA applies to its embedded program. It seems likely, but it's not 100% sure. I also believe that the spirit of this paragraph is to prevent companies from putting restrictions in the data format which is output by their software. I wonder if the fact of enabling the raw output of the sensor (raw resolution, reduction in noise added artificially) doesn't in fact help with interoperability and doesn't, in fact, follows the spirit of this paragraph (of course, depending of your country, this may or may not be taken into account by the judges).

By the way, I have heard of a program that will only process 320x240 images. The hack is needed for interoperability with this program.

This is not off topic. This is exploring the legal implications of what this thread is all about, and also being informed instead of pissing in our pants for no reason :)

Some people read this thread like bad hackers hacking software and hardware of a legitimate company who is a poor victim. I read it like normal people finding out that some company has been possibly cheating on its customers and finding how it's been done, and stopping it. Just my opinion. The fact that FLIR is, indeed, a legitimate company, doesn't mean that they are always right in what they do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on July 06, 2014, 10:44:27 am
All this lawyer stuffs or regarding hacking a product
Didn't we see this constantly?
The biggest company in the world today can't even stop it.
Apple!
Couple weeks ago, Chinese team released jailbreak for iOS 7.1.2
That is hacking too

In my opinion it is so stupid when company try to stop things like that.
I bought the dam product, paid with my hard earn money.
I should be able to do anything I want

If company wants to prevent hacking, then hire better staff, or make more secure product
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on July 06, 2014, 10:56:47 am
To play the devil's advocate some of those companies might dilute their IP by hackers forcing them to lay of employees and/or close doors because their pricing scheme is not viable anymore.

Sure you can claim that their efforts were not enough or that their hardware shouldn't be limited by their license. But there is still that side of the story specially on companies that can't afford a good cypher programmer or can't afford to protect their intellectual property.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 06, 2014, 12:24:02 pm
Many thanks to all for the comments. All very interesting  :)

The comments that FLIR are likely just trying scare tactics seems reasonable. As I stated, I am not familiar with the law regarding what has been achieved with the E4 firmware and I am not going to lose any sleep over it.

As previously stated, I am not trying to scaremonger, but thought the community should know that FLIR MAY be changing tactics. This is based only on information received and so could be unreliable. I have not seen any communications sent by FLIR to individuals or dealers, so do not know any content, or if they are even genuine. There is always the possibility that a HOAX is being played out here  :palm:

No harm in being careful though  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on July 06, 2014, 04:36:29 pm
The comments that FLIR are likely just trying scare tactics seems reasonable. As I stated, I am not familiar with the law regarding what has been achieved with the E4 firmware and I am not going to lose any sleep over it.

You seem to say that FLIR is actively fighting people involved in the hack.

I do believe that a big company sending lawyers after people is indeed using scare tactics, if they don't do any public communication beforehand. Until someone with a good lawyer or some experience in that actually goes to court and fight back.
And here comes the Streisand effect (the company may be right or wrong - doesn't matter).

It will be interesting to see how it plays out in the long term. I'm a bit sorry that FLIR acts this way. They could have taken the opportunity to open their platform and let the talented people they are fighting improve their products. Instead, they close it down. Too bad :--
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 06, 2014, 06:38:44 pm
The evidence that FLIR are changing tactics will likely come from e*ay auctions. If the 'upgraded' E4 auctions disappear it is likely that FLIR will have lodged a complaint against them. The auctions are the easiest to shut down rather than chasing buyers or users of the upgraded cameras. If we do not see the disappearance of the auctions, then I will call HOAX on the whole matter as it would make no sense at all.

It's a case of wait and see. I have no evidence that FLIR is carrying out a campaign against individual users. FLIR may just be trying to close down the upgraded camera sellers. remember that web site that was offering an E4 upgrade service ?  It disappeared for reasons unknown.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on July 07, 2014, 12:36:45 am
Hi all,

I hate to distract from the interesting legal discussion, but I was hoping that someone could help me out with a more practical problem. I have been having a hard time making some of the scripts described earlier work properly (see reply 2396 by thomas123) .

Starting out with an E4 image FLIR0108.jpg, I ran the following command:

exiftool -b -RawThermalImage FLIR0108.jpg > t1.png

and got t1.png (so far so good). Then I ran:

convert t1.png gray:- | convert -depth 16 -endian msb -size 320x240 gray:- t2.png
and
convert t2.png -auto-level t3.png

looking at t2 and t3, things don't seem to be working. Can anyone see a problem?

thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 07, 2014, 08:48:33 am
your byte switching doesn't work

- use the Q16 version of imagemagick !!

>convert -version
Version: ImageMagick 6.8.8-5 Q16 x64 2014-02-08 http://www.imagemagick.org[/url


your sample
 (http://www.imagemagick.org)
Code: [Select]
>convert t1.png gray:- | convert -depth 16 -endian msb -size 320x240 gray:- t2.png
>convert t2.png -auto-level t3.png



mystery: your t2.png is 16 Bit
Code: [Select]
>identify t2.png
t2.png PNG 320x240 320x240+0+0 16-bit sRGB 110KB 0.000u 0:00.000

with a Q8 version of IM I got
Code: [Select]
>C:\util\ImageMagick-6.8.9-Q8\convert.exe t1.png gray:- | convert -depth 16 -endian msb -size 320x240 gray:- t2b.png

>identify t2b.png
t2b.png PNG 320x240 320x240+0+0 8-bit sRGB 256c 60KB 0.000u 0:00.000


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on July 07, 2014, 04:08:35 pm
Hi

The evidence that FLIR are changing tactics will likely come from e*ay auctions. If the 'upgraded' E4 auctions disappear it is likely that FLIR will have lodged a complaint against them.

Those auctions are going to disappear anyway once the stock of 1.22.0 cameras will be depleted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on July 07, 2014, 06:22:01 pm
Thomas123,

Thanks for testing my images with your software. I reinstalled Imagemagick, but am getting the same result. Note version:

$ convert -version
Version: ImageMagick 6.8.9-5 Q16 x64 2014-06-26 http://www.imagemagick.org (http://www.imagemagick.org)

which seems slightly newer than your version, but probally doesn't make any difference. I couldn't find the windows version 6.8.8-5 on the imagmagick web.

Also I obtain:

$ identify t2.png
t2.png PNG 320x240 320x240+0+0 16-bit sRGB 110KB 0.000u 0:00.000


I am thinking that I should convert the .png file to a raw file and then reverse the bytes myself with a simple C/C++ program, and then convert it back to .png. I am working on that approach.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 07, 2014, 06:32:05 pm
This thread just went from 350 to 349 pages. It seems more posts are still being deleted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on July 07, 2014, 06:38:01 pm
Please note - the page count can be configured individually (I prefer longer pages *G*)
... but this is post #5235

Whoever decides to delete the own posts - I think that's their right (but an useless action anyway).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: seleo on July 07, 2014, 07:01:20 pm
Hello,

I have a flir E4 that I was able to get with 1.22 firmware, that I was under the impression could still be modified

Did the resolution mods but having manual temperature range in camera would really help with the use of it.

The Menu mod page for Taucher says to avoid 1.21 or higher with beta 3.

What is the issue and could it be possible to mod menu for manual temperature with 1.22?

Thanks,

Seleo
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on July 07, 2014, 07:09:09 pm

I can't test my menu-mod with more recent firmwares, but 1.21 and up contain additional checksums ... the most recent firmwares contain private/public key signatures... read up on this thread for details.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 07, 2014, 10:11:34 pm
Thomas123,

Thanks for testing my images with your software. I reinstalled Imagemagick, but am getting the same result. Note version:

$ convert -version
Version: ImageMagick 6.8.9-5 Q16 x64 2014-06-26 http://www.imagemagick.org (http://www.imagemagick.org)

I rechecked your problem with a fresh self compiled version of IM on a mac
Code: [Select]
$ convert -version
Version: ImageMagick 6.8.9-1 Q16 x86_64 2014-07-08 http://www.imagemagick.org
and I get the same wrong image like you.
I think, there is a new bug in the begin of pipe "convert t1.png gray:- ".

But I wrote above, there is a new switch for byte changing, and it works fine (thanks to the PNG developer glennrp)
Code: [Select]
$ convert -define png:swap-bytes t1.png t2.png
$ convert t2.png -auto-level t3.png
try it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 07, 2014, 10:13:29 pm

Whoever decides to delete the own posts - I think that's their right (but an useless action anyway).
But it would be polite to post an explanation.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on July 08, 2014, 11:49:42 am
Code: [Select]
$ convert -define png:swap-bytes t1.png t2.png
$ convert t2.png -auto-level t3.png

This works great. I have been moving on to try and get PHP functioning. Will this change affect the flir.php script?  Thanks for your support.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 08, 2014, 11:50:42 am
After I deleted some messages, many moons ago, I realised that I could have deleted just the text content, but that was a lesson learnt. Some people may be deleting their whole posts and even their eevblog account for reasons best known to themselves. Hopefully not as a result of pressure from any party.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 08, 2014, 01:13:10 pm
This works great. I have been moving on to try and get PHP functioning. Will this change affect the flir.php script?  Thanks for your support.

please edit the corresponding lines in the php code

I wrote a support request for your problem in the IM forum :)
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=25875 (http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=25875)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frischky on July 08, 2014, 06:18:26 pm
Long time viewer of EEV on YT, but just came across this thread while Googling the E4.

Is there still many "upgradable" E4's left in the supply chain or is the newer hardware/firmware very prevalent?

I have no professional need for a TIC, but ever since a kid when I saw these at the Science Centre (were cooled by liquid nitro I think at the time) TICs always intrigued me.  So if there is still plenty of old stock, I am thinking of picking one up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 08, 2014, 07:04:50 pm
Much depends on which country you are in and the stock holding of retailers.

You could take a look on ebay as there are plenty for sale at RRP on there and they often state the firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frischky on July 08, 2014, 09:13:47 pm
Thanks for the info.  Will have to roll the dice and hope for the best.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: micio on July 09, 2014, 01:36:31 pm
Hi guys, I've been following this thread since day one and I have an E4, I was wondering if there was an easy step to remove the temperature scale and other elements over the picture so that it's just a thermal image. (i was only able to remove the logo)

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KyleK29 on July 10, 2014, 12:29:36 am
Might be well known, but my E4 with 2.3.0 ended up soft-bricked (or appeared so).  ;)  It would turn on and just have a black screen, I was able to revive it using the firmware pack at the FLIR site. Open FLIR Tools, hold SHIFT+CTRL+ALT and click the box under "Check for updates". This will force an update. Selected the .FIF and then the eFlirInstall.exe. It copied and hung. I then disconnected and replugged it in, redid that procedure and it copied the entire package. Rebooted camera when prompted and the package installed - failed and said "update failed, please reboot and try again". Did so and it successfully took it. Works like new again.

Posted here just encase anyone messes up their 2.3 based camera by FTPing into it.

Does anyone have a mirror of the 1.22 firmware? I want to check something.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 10, 2014, 05:03:47 am
Be careful about downgrading your camera. There are reports that doing so bricks the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on July 10, 2014, 05:38:29 am

Yes, most likely the bootloader is different (the chipset supports encryption and signing from bootblock level up) - I didn't check myself, but the bin/NK disassembly instructions are still around (they are pretty generic). Worst case would require the memory to be re-written externally (by programmer) as the built-in-flasher could fail to update/change certain flash-areas.

Please note that I'm NOT an expert in firmware bootloading etc. but more a systems generalist.
The described method with "force update" above could really be the key to un-bricking the camera.

Basically any step involved in bootup has to work - otherwise the camera will seem bricked:
- bootloader
- read & parse configuration data
- boot applications

For example: if one changes the bootloader and the binaries, then one also has to change the config files as the old software won't be able to expect - or parse new checksums or obfuscation layers introduced in later versions.

A complete copy of firmware AND configuration could be a method of downgrade - assuming one does not forget the serial number inside I²C.
Another approach would be to patch the code that reads the serial from I²C to return something pre-defined...

Just an idea for anybody who wants to try :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GTPprix on July 10, 2014, 04:34:12 pm
Long time lurker, first time poster. First off just wanted to thank everyone thats contributed to this quite frankly amazing thread. I have been thinking about buying one of these for ages but with the advent of the new firmware decided to move on it and I should have it tomorrow.

Hoping that I get 1.22 but I guess we'll see :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on July 11, 2014, 07:12:34 am

Yes, most likely the bootloader is different (the chipset supports encryption and signing from bootblock level up) - I didn't check myself, but the bin/NK disassembly instructions are still around (they are pretty generic). Worst case would require the memory to be re-written externally (by programmer) as the built-in-flasher could fail to update/change certain flash-areas.

Please note that I'm NOT an expert in firmware bootloading etc. but more a systems generalist.
The described method with "force update" above could really be the key to un-bricking the camera.

Basically any step involved in bootup has to work - otherwise the camera will seem bricked:
- bootloader
- read & parse configuration data
- boot applications

For example: if one changes the bootloader and the binaries, then one also has to change the config files as the old software won't be able to expect - or parse new checksums or obfuscation layers introduced in later versions.

A complete copy of firmware AND configuration could be a method of downgrade - assuming one does not forget the serial number inside I²C.
Another approach would be to patch the code that reads the serial from I²C to return something pre-defined...

Just an idea for anybody who wants to try :)

This could be a problem as you can't just use a conf file from another camera, if you do the camera will work and the image is 320x240... but it looks grainy and not unlike a 80x60 image. My guess is that each bolometer has a slightly different output (more than just dead pixels) and this is calibrated and mapped in the factory.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on July 11, 2014, 07:27:26 am
...A complete copy of firmware AND configuration could be a method of downgrade - assuming one does not forget the serial number inside I²C.
Another approach would be to patch the code that reads the serial from I²C to return something pre-defined...
This could be a problem as you can't just use a conf file from another camera, if you do the camera will work and the image is 320x240... but it looks grainy and not unlike a 80x60 image. My guess is that each bolometer has a slightly different output (more than just dead pixels) and this is calibrated and mapped in the factory.

Well, that could be fixed by re-calibrating - the "good old" 17/18 firmware did come with the built-in webserver incl. re-cal.
Also we have had a few forum members who played with the cal-data, pixel masks etc... that stuff is little of a problem - but you're right - the "repace anything" solution would require a re-cal...
or one has to down-convert the config files in order to get perfect results.

Oh... and BTW - another idea: take an E8 - copy contents and I2C ...


Edit: Post #5252
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GTPprix on July 11, 2014, 06:37:31 pm
Got my E4 today from Amazon with 1.22 on it (what a relief!) Had it modded within ten minutes of getting it; freakin amazing :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 13, 2014, 06:33:24 pm
My FLIR E4 was repaired. The firmware was changed to 2.3. Is there any way to downgrade. Where can I download old firmware to flir e4. Maybe someone earlier downloaded firmware from flir.com and can share.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 13, 2014, 08:07:21 pm
There is no known way back from Firmware 2.3.

You may not even have the same main board in your repaired camera. Sadly you are locked into standard E4 specification.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 13, 2014, 08:16:52 pm
Not much time was needed to improve the resolution. I changed the original configuration file manually. Fixed checksum using old tools. I switched the original file. After the restart I gained full native resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on July 13, 2014, 08:57:52 pm
That's an interesting turn of events :)

Care to elaborate what tool you used and some details on what you did?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 13, 2014, 09:21:27 pm
Has anyone here actually seen a production 2.3 unit & had a serious play?
I don't recall seeing anyone posting about it, just a few comments from people who've looked at the downloaded update files.

It may be that there are differences between units that are manufactured (and calibrated) with newer FW vs. those that have been subsequently updated.
These differences could provide some useful clues. I'd have though the bootloader would be an obvious place for them to have added something, but from what vmp says, he has 2.3 running an old config file, not downgraded the FW to an earlier version.

BTW I bookmarked several ebay auctions for upgraded units over a week ago & no sign of any being taken down.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 13, 2014, 09:39:58 pm
I connected the camera as RNDIS  using  flirs tool FLIRInstallNet  and Set_RNDIS_temporary.fif  from this forum.
I downloaded the file conf.cfg from my flir e4 using FileZilla.   (ip: 192.168.0.2  user: flir  pass: 3vlig  )
In Notepad I've changed:
". caps.config.image.settings.IRwidth int32 80
. caps.config.image.settings.IRheight int32 60 "
to
". caps.config.image.settings.IRwidth int32 320
. caps.config.image.settings.IRheight int32 240"
I've Fixed checksum using crc01.exe ( tool from this forum).

I switched the original file. After the restart i have 320x240 resolution in thermovision.

My conf.cfg was not encrypted.
My camera info: 
Model:   E4 1.1
serial:  639xxxxx
part number: 63901-0101
software  2.3.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 13, 2014, 10:03:07 pm
Seems reasonable that when upgrading FW it would keep the old config file, at least for an end-user upgrade, but looks like they did change it to a standard one with 80x60, but left it in the old format.
So the question is, how might you make a production 2.3 unit think it's an old but  upgraded unit (assuming production 2.3 is the same as "upgrade" 2.3)?
Bootloader version/functionality? EEPROM? Hardware differences ? Serial number?
It shouldn't be too hard to find where it's checking for this.

Here we go again...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 13, 2014, 10:12:47 pm
Excellent work VMP  :-+

You have just given hope to those who have had to return their cameras to FLIR.

As Mike states, the production FW2.3 cameras may be a more challenging platform but at least your 'upgraded' unit was capable of being returned to its former self  :)

What was wrong with your camera that required it to be returned ? If they had fitted a new main board I would have expected it to be a production FW2.3 version spare part.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 13, 2014, 10:17:19 pm
Excellent work VMP  :-+

You have just given hope to those who have had to return their cameras to FLIR.

As Mike states, the production FW2.3 cameras may be a more challenging platform but at least your 'upgraded' unit was capable of being returned to its former self  :)

What was wrong with your camera that required it to be returned ? If they had fitted a new main board I would have expected it to be a production FW2.3 version spare part.

Aurora
Or it could be that their spares stock is still older boards - these would probably move rather more slowly than production units so could hang around rather longer.
Interestingly vmp's hardware version was not showing the mysterious "L".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 13, 2014, 10:24:01 pm
What was wrong with your camera that required it to be returned ?

My camera had a hot spot in every picture. The motherboard was good, after repairing the serial number is the same.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 13, 2014, 10:48:42 pm
Thanks for the info. The hot spot was likely either contamination of the microbolometer window or a calibration issue. Either way, it would be unlikely to need replacement parts  :) Good news.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: micio on July 15, 2014, 03:21:39 pm
Sorry to post again but my question got buried, I was wondering if there was an easy step to remove the temperature scale and other elements over the picture so that it's just a thermal image. (i was only able to remove the logo)

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larky on July 16, 2014, 06:37:46 am
Try daves software;
http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on July 16, 2014, 09:07:51 am
Thanks for the info. The hot spot was likely either contamination of the microbolometer window or a calibration issue. Either way, it would be unlikely to need replacement parts  :) Good news.

Aurora

I've done a few repairs on Flirs now for a local firm that hires them out, luckily all the problems have been very basic so far. The most common is dust on the sensor causing what looks like hotspots/coldspots.  I just cleaned the sensor using a standard camera sensor cleaning kit, it's a delicate but not overly difficult tear down if you follow Mikes original video. Likewise instructions for the cleaning process for a camera sensor can be found online and cleaning kits are cheap.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: burlbark on July 16, 2014, 07:35:06 pm
Try daves software;
http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip)

 Thanks for linking that.... Now how does a person use it.... :-//  I am not stupid just not computer literate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 16, 2014, 08:24:53 pm
Regarding dust contamination of TICs, I have an elderly Agema 880 and that has a fully enclosed dustproof optical block. Now my later PM series FLIR cameras incorporate no such dust proofing measures. The camera case is gasketed but there is a large rear door that is opened to access the battery and memory card. Once open, the door gives dust access to the internals including the optical block. Considering the original cost of over $50,000, and the intended industrial use, I was amazed that the optical block was not enclosed in a protective casing such as you would find in a conventional camcorder. Most odd. I attach a picture of the PM570 optical block to show what I mean. No covers have been removed for the picture. Opposite the optical block there is just the main CPU PCB.

Dust contamination of the microbolometer is a PITA. It would be interesting to know where the Ex series dust ingress point is located. It is also interesting to note that some new E4's arrive with a dust problem which rather suggests poor assembly hygiene.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 17, 2014, 10:20:14 pm
Several ebay listings for upgraded E4s have disappeared. There are no current listings.
One listed as "upgradeable", from a seller who has previously sold at least 20 upgraded units includes this :
Quote
NOTE: Due to eBay regulations I cannot sell a pre-modified camera so I am just selling a basic E4 with 80x60 resolution. HOWEVER, I WILL HELP YOU AS MUCH AS I CAN TO APPLY THE HACK ON THESE OLDER FIRMWARE UNITS. CONTACT ME BEFORE PURCHASING AND I CAN HELP YOU MAKE SURE YOU CAN DO APPLY THE HACK. My phone number is below or you can message me through eBay.
My guess is Flir pressured ebay based on warranty issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 17, 2014, 11:12:39 pm
How do you know they were removed, and not sold? Hacked E4's are still pretty high in demand.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Armen on July 17, 2014, 11:19:23 pm
Hello to all.
If anybody can help me to find the solution.
I am doing research on the energy balance of the earth. I started using FLIR A305sc to determine the temperature of the surface of plant at long range.

About Planck R canstant.
With ExiftoolGUI I get:

Planck R1                       : 16314.8828125
Planck B                        : 1423.59997558594
Planck F                        : 1
Planck O                        : -6199
Planck R2                       : 0.0109910489991307
Peack of spactral range 10.11 mkm

For have a proof, I calculated:
B = h*c/(k*?)=(6.626068*10^-34*2.9979*10^8)/(1.38066*10^-23*10.11*10^-6) = 1423 (Planck B)
R=R1/R2=1.484*10^6, so...
R = 2*h*c^2/?^5=(2* 6.626068*10^-34*(2.9979*10^8)^2)/(10.11*10^-6)^5 = 1.128*10^9 ???? why not 1.484*10^6

And another question.
If spectral range is a constant (10.11 micromètre) then Wien law of displacement (lambda=2898/T) is not provided in FLIR???

Thank you in advance for yours reply.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 18, 2014, 07:38:50 am
I think, you know my posts

http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.60.html (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.60.html)
and summary
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg23944.html#msg23944)

The Flir method of calculation the temperature from raw values is explained in this book:
http://books.google.de/books?id=6H3HyacPxnMC&printsec=frontcover&hl=de#v=onepage&q&f=false (http://books.google.de/books?id=6H3HyacPxnMC&printsec=frontcover&hl=de#v=onepage&q&f=false)

sample: the part of air influence
http://books.google.de/books?id=6H3HyacPxnMC&pg=PA171&redir_esc=y#v=onepage&q&f=false (http://books.google.de/books?id=6H3HyacPxnMC&pg=PA171&redir_esc=y#v=onepage&q&f=false)


for another readers

(1) as attachments some pages from flir documents
(2) with Atmosphere.xls you can check the calculation with csv-values from Flir Tools
    see here for more informations http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27546.html#msg27546)
   download the special sample Flir radiometric jpg with 4x4=16 Pixel and RAW values from 10000 to 25000 (step 1000)
   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 18, 2014, 07:39:38 am
How do you know they were removed, and not sold? Hacked E4's are still pretty high in demand.
I bookmarked several listings a while ago  - some were "ended by the seller" but some have been actively removed and the page no longer exists- the only way I know for this to happen is if Ebay remove it. If it sold or ended by the seller, the listing would still be there.

 The text on the "Upgradeable" listing shows Ebay have told the seller, probably after taking the listing down.

I just noticed That listing  (http://www.ebay.com/itm/Brand-New-Flir-E4-UPGRADEABLE-E8-Plus-Thermal-Imaging-Camera-320-x-240-/191250741773?pt=LH_DefaultDomain_0&hash=item2c876eba0d&nma=true&si=kT%252Br%252F0VMVkOjO5XrI5N%252FfmOKA58%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557) has been ended by the seller, though that could have been an off-ebay sale.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Armen on July 18, 2014, 08:38:05 am
Again thank you Tomas.

The book is what I really needed for a detailed study.

I just have to go for it in the library of about 100 kilometers. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on July 18, 2014, 05:07:32 pm
How do you know they were removed, and not sold? Hacked E4's are still pretty high in demand.
I bookmarked several listings a while ago  - some were "ended by the seller" but some have been actively removed and the page no longer exists- the only way I know for this to happen is if Ebay remove it. If it sold or ended by the seller, the listing would still be there.

 The text on the "Upgradeable" listing shows Ebay have told the seller, probably after taking the listing down.

I just noticed That listing  (http://www.ebay.com/itm/Brand-New-Flir-E4-UPGRADEABLE-E8-Plus-Thermal-Imaging-Camera-320-x-240-/191250741773?pt=LH_DefaultDomain_0&hash=item2c876eba0d&nma=true&si=kT%252Br%252F0VMVkOjO5XrI5N%252FfmOKA58%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557) has been ended by the seller, though that could have been an off-ebay sale.
Flir had been requesting these auctions to be taken down, the message we received from eBay was
Quote
Hello,
After reviewing your eBay account, we've taken the following action:
- Violating listings have been removed. A list of items that were removed can be viewed at the bottom of this message.
- We have credited any associated fees to your account.

Your listing was removed after the rights owner notified us that your item infringes on their intellectual property rights.

We urge you to contact the rights owner directly for more information on why they requested the removal of your listing and whether you can relist the item.

For more information on our VeRO program, go to:
http://pages.ebay.com/vero/infoforusers.html (http://pages.ebay.com/vero/infoforusers.html) 



Please be sure your current and future listings follow these guidelines, keeping in mind that additional violations could result in the suspension of your account.

The rights owner or an agent authorized to act on behalf of the rights owner, FLIR Systems Inc, notified eBay that this listing violates intellectual property rights. When eBay receives a report of this type of violation, we remove the listing to comply with the law.
also
Quote
Hello,
After reviewing your eBay account, we've taken the following action:
- Violating listings have been removed. A list of items that were removed can be viewed at the bottom of this message.
- We have credited any associated fees to your account.

Your listing was removed after the rights owner notified us that your item infringes on their intellectual property rights.

We urge you to contact the rights owner directly for more information on why they requested the removal of your listing and whether you can relist the item.

For more information on our VeRO program, go to:
http://pages.ebay.com/vero/infoforusers.html (http://pages.ebay.com/vero/infoforusers.html) 



Please be sure your current and future listings follow these guidelines, keeping in mind that additional violations could result in the suspension of your account.

The rights owner or an agent authorized to act on behalf of the rights owner, FLIR Systems Inc, notified eBay that this listing violates intellectual property rights. When eBay receives a report of this type of violation, we remove the listing to comply with the law.



We encourage you to contact FLIR Systems Inc directly if you have any questions.

You can send an email to:
allen.frechette@flir.com

For more information on how eBay protects Intellectual Property, or for additional information if you believe that your listing has been removed as a result of an error or misidentification, please visit the following Help page:
http://pages.ebay.com/help/policies/programs-vero-ov.html (http://pages.ebay.com/help/policies/programs-vero-ov.html)

If you have additional questions, contact our policy experts. Get started by clicking the link below:
http://ocsnext.ebay.com/ocs/cusr?query=1337&domain=email1414 (http://ocsnext.ebay.com/ocs/cusr?query=1337&domain=email1414)

Here are the listings that were removed:
AUCTION INFO


We appreciate your cooperation.
Thanks,

eBay

Please don't reply to this message. It was sent from an address that doesn't accept incoming email.
Looks like Allen Frechette who is the VP of Marketing was the one that was reporting these listings. He sent an email last night on the "UPGRADEABLE" camera saying
Quote
Hello Fellow Ebayer,

I am reaching out to you from FLIR Systems Corporate offices in Portland OR. I work with the legal department and before I submit another Vero complaint on this I though I would give you the courtesy of an separate email.  I am not sure if Ebay led you to believe that you could still advertise the super popular E4 hack this way, but it's still a violation according to our lawyers.  I suggest you take it down but that's your call.   I am happy to introduce you to our corporate staff legal team and you can ask them questions about this directly.  Just give me a call and I can put you in touch with them.   I will pursue the Vero process tomorrow.   
Thanks,

Allen
This was his username http://www.ebay.com/usr/flir_vrt (http://www.ebay.com/usr/flir_vrt)
Figured it wasn't worth the hassle.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: micio on July 18, 2014, 05:45:44 pm
Try daves software;
http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip)

Thank you Larky, I've tried that before and when I click on "Go" or the editor button in the picture I get the " convert.exe is not a valid win32 application"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 18, 2014, 05:54:26 pm

Looks like Allen Frechette who is the VP of Marketing was the one that was reporting these listings. He sent an email last night on the "UPGRADEABLE" camera saying
Quote
Hello Fellow Ebayer,

I am reaching out to you from FLIR Systems Corporate offices in Portland OR. I work with the legal department and before I submit another Vero complaint on this I though I would give you the courtesy of an separate email.  I am not sure if Ebay led you to believe that you could still advertise the super popular E4 hack this way, but it's still a violation according to our lawyers.  I suggest you take it down but that's your call.   I am happy to introduce you to our corporate staff legal team and you can ask them questions about this directly.  Just give me a call and I can put you in touch with them.   I will pursue the Vero process tomorrow.   
Thanks,

Allen
It would be interesting to ask them how exactly they believe their rights are being violated
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on July 18, 2014, 06:15:32 pm
It would be interesting to ask them how exactly they believe their rights are being violated

The only thing I can think of is telling people about the hack, but seeing him write "the super popular E4 hack" that doesn't make much sense.
Oh well, lawyers...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 18, 2014, 06:18:10 pm
It's possible that he personally likes the hack but has to do what FLIR tells him to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 18, 2014, 06:45:34 pm
So FLIR are confirmed as taking action against the hack.

I was not impressed with the wording of the FLIR message.....very amateur. "Super popular" for heavens sake  :palm:

The question is.....how much further will they be able to take this and against who.

I note the message made clear mention of the FLIR legal department  ::) Lawyers Lawyers Lawyers. It a sure way to gain someone's attention but I am not clear on the true legal situation of the more recent hack methods. I know that the generation 1 'upgrade' was not in any way illegal for a user to install as I spoke to others in the industry who were aware of the hack and its implications. Their view was that FLIR were in a very difficult position and that if the frame rate was increased above 9fps by users, the brown stuff would really hit the fan for FLIR and ruin their day ! Even the fact that Mike discovered a high frame rate digital image stream emanating from the core was considered seriously embarrassing for FLIR.

Selling hacked goods will always be a grey area depending upon the position taken, OEM or seller. I am not a lawyer so have no knowledge of the loopholes or laws that may be invoked by such action.

I am assuming that the ebay auctions are the sole attack vector against the hack but we must consider whether Dave will receive a similar threat in due course regarding the content of this thread.

I honestly do not see FLIR chasing down individual users, but I can see them pursuing persons who they believe are a threat to their latest countermeasure if such people can be identified.

Watch this space.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 18, 2014, 07:26:35 pm
I am really surprised they have even bothered. They sold a camera to some one, it's now that persons property, the person modified it, and is now selling it. I don't see how any IP was violated - it's not like they copied the camera hardware or software and are selling clones or have taken the software from it and porting it to other vendors units. I don't get how FLIR could make this case in court and not get laughed out the door - but I am not a lawyer type so....

The best reaction from FLIR's perspective I think would of been to add more software features and continue to lock down the firmware on newly shipped units while also voiding warranty and/or support for a modified unit.

To go on record - I think ebay sale of hacked units is a little sleezy. Unless the seller is going to take the place of FLIR for both support and warranty it's unfair to make the buyer think that FLIR is going to turn a blind eye if something goes wrong. The ads that I have seen seem to gingerly dance around that issue. But that's more of a buyer beware thing.

Retaliation like this is likely only going to bring both bad PR and like retaliation witch could result in even deeper hacks taking place. (There are still things that could be unlocked like the FPS, or adding WiFi/BT)

I wonder if some insulated higher up finally caught wind of this and swiftly did a knee jerk reaction into their own windpipe as they tend to do and the lower yes men got their engines all fired up...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on July 18, 2014, 07:58:03 pm
Like I said in the pass, flir won't be able to stop people to hack.
Again biggest company of the world apple still can't stop the jailbreak.
Jailbreak is a hack for sure

Same as E4 hack, only modifying the software.
Most of my iphone, iPad and Apple TV are jailbroken.
Of course personal use.
But after I update to newer model, I still sold my used unit with the jailbreak.
I haven't seen apple trying to sue everyone selling a jailbreak device.
Remember apple voids the warranty if you jailbreak

In my opinion, flir is trying to stop people to make money from the hack.
Like buying from flir for $1000 and selling it for $1500-1700, example eBay
But flir should stop spending the money on stupid lawyers and hire better software engineer or just change the hardware, then we won't be talking about this topic.

Also again, flir is killing its own E4 sales by stopping the hack
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 18, 2014, 08:02:45 pm
Regarding warranty.....its an interesting situation.

PC's are designed to have hardware added and to have different software loaded. If you modify the hardware you void your warranty. If you suffer a physical failure that is not caused by a hardware or firmware settings you do not void your warranty.

Now the E4 situation.....

If FLIR stated that your warranty was void, they would surely need to provide evidence of what the hack did to cause such a failure. Overclocking a PC can cause damage but we are not overclocking etc. the E4 platform or stressing it. The hack is not a hardware modification. It is just a firmware configuration change. Now if the camera stopped working due to a software corruption that is a different scenario, and I can see FLIR having a case to state that the user caused the issue through an attempt to hack the software/firmware.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 18, 2014, 08:18:25 pm
S
I note the message made clear mention of the FLIR legal department  ::) Lawyers Lawyers Lawyers. It a sure way to gain someone's attention but I am not clear on the true legal situation of the more recent hack methods.
As they have offered to "introduce" the seller to the legal dept, I really think the question should at least be asked -  Either they can give a clear answer, or something vague that would show that they know they have little or no legal basis on which to stop sales of hacked units and are simply resorting to threats and FUD. A legal opinion on this would also potentially have bearing on hacks of other equipment like scopes. Flir are doubtless paying these legal people a ton of money - let's get them work for it!
AFAIK it doesn't take much to get Ebay to take listings down as they aren't going to risk action against them versus a few lost sales.
As regards warranty, this is basically  a contract between the buyer and seller, and conditional on the terms of that contract, and that could specifically exclude support for hacked units (has anyone actually looked at a recent version of their terms to see if anything is mentioned that may have bearing on this?).
In some countries, there are some mandatory requirements for warranties that may preclude them limiting liability, however in some cases this may only apply to consumer sales - I'd imagine Flir would argue that it is a professional piece of equipment aimed at business sales.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 18, 2014, 08:30:11 pm
Post removed as it contained unconfirmed information that may have been incorrect.
Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 18, 2014, 08:32:12 pm
I wonder if some insulated higher up finally caught wind of this and swiftly did a knee jerk reaction into their own windpipe as they tend to do and the lower yes men got their engines all fired up...
My impression is that the "highest up" (Hi Andy, if you're watching!) is far from "insulated" and very much in touch with what's ahppening around their prodicts- he includes an email that gets to him on a "welcome" sheet in every box - inbetween my review & teardown vids we exchanged a few emails, and I know for a fact he's watched my FireFlir teardown video!

My best guess is that they want to at least be seen to be doing "something" to maintain some credibility to shareholders etc. without doing anything heavy-handed that would bring negative publicity or invoke a Striesand effect.

Howeverl the second non-paid google result for Flir E4 is the hackaday "Manufacturer-crippled " article - I can't see any amount of SEO getting that one to go away any time soon!

Googling Flir related stuff often turns up more hits about financial & business stuff than anything technical, especially in news related searches.
 


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 18, 2014, 08:40:06 pm
Just for interest, I include a link to Bullard who make thermal cameras for fire fighting. They are currently selling a 160x120 camera that may be upgraded to 320x240 (for a fee) at a later date by the user  ;)

The E4 is little different but FLIR have chosen to not offer a resolution upgrade path to users.

http://www.bullard.com/europe/en/products/thermal_imaging/fire_service/EclipseLD/ (http://www.bullard.com/europe/en/products/thermal_imaging/fire_service/EclipseLD/)

There is a RUMOUR that the camera contains a FLIR core but I could not confirm this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 18, 2014, 09:25:27 pm
Interesting unit! The export agreement has got some really specific wording on it as well. Small lens on the front, looks like it's running faster then 9Hz as too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 18, 2014, 09:26:24 pm
There is a RUMOUR that the camera contains a FLIR core but I could not confirm this.

That's what teardowns are for. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on July 18, 2014, 10:02:04 pm
Just throwing in my two cents here but.. It might be possible that the people over at Flir are in a panic for a different reason?
We need to remember that these engineers and designers are not stupid people! I have a suspicion that when they caught wind
of the lovely resolution patch and extra bonus menu items, they started to dig into what they have been putting out as far as the firmware goes and had an "UH OH!" moment. I believe they scrambled to fix a "boy i hope nobody figured out how to exploit this yet". Logic dictates that the camera was crippled by the firmware, so the hardware can do much much more. I would bet the farm on the frame rate being able to be exploited on earlier versions and the latest countermeasures were in fact not to eliminate the ability to patch the resolution but to lock down the features that could in fact put them in front of a judge. Fear of a lawsuit can make a company do very odd things. Like targeting ebay listings, really.... Its just a broom sweeping at some of the crumbs to intimidate the rest of them. I spoke to the legal department at my place of employment (i work for an engineering firm that does automation, software, and hardware) and the answer i got was "They don't have a leg to stand on." and "They must not understand what the law defines as property." and finally, "Software including firmware can only be copyrighted in it's current state and must go through that process each time it is modified." In other words, once you change it, it is not covered anymore. The automation industry would go out of business if that wasn't the case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 18, 2014, 10:19:36 pm
I would bet the farm on the frame rate being able to be exploited on earlier versions
I highly doubt this - we have no direct evidence, but as the FPGA is doing all of the processing, including frame avaraging to allow the use of the small lens, there is no reason for it to support higher framerate throughput. However it's not inconceivable that there could have been a test mode in there.
Quote
 
 "Software including firmware can only be copyrighted in it's current state and must go through that process each time it is modified." In other words, once you change it, it is not covered anymore. The automation industry would go out of business if that wasn't the case.
Nonsense. What process ? Copyright exists as soon as something is created.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on July 18, 2014, 10:27:06 pm
Just telling you what our legal guys said. They do it every day, i don't. As far as copyrights go i am no expert. I do know that in the world of graphics there is no such thing. You can sell superman t shirts all day long as long as it doesn't say the words "Super Man" on it. I guess the name is the only thing protected. I do know our legal guys are top notch! We deal with all of the giants of the manufacturing industry. From mining equipment manufacturers to nuclear power plants. I would take their advice if i was going to face a judge. Again that was just my two cents, no intent on initiating an argument.  ;D

Edit:

Might just be a U.S. thing, not sure but i found this.

http://www.copyright.gov/help/faq/faq-register.html (http://www.copyright.gov/help/faq/faq-register.html)

And this.

§ 411 . Registration and civil infringement actions11

(a) Except for an action brought for a violation of the rights of the author under section 106A(a), and subject to the provisions of subsection (b), no civil action for infringement of the copyright in any United States work shall be instituted until preregistration or registration of the copyright claim has been made in accordance with this title. In any case, however, where the deposit, application, and fee required for registration have been delivered to the Copyright Office in proper form and registration has been refused, the applicant is entitled to institute a civil action for infringement if notice thereof, with a copy of the complaint, is served on the Register of Copyrights. The Register may, at his or her option, become a party to the action with respect to the issue of registrability of the copyright claim by entering an appearance within sixty days after such service, but the Register’s failure to become a party shall not deprive the court of jurisdiction to determine that issue.

Note: I didn't read 106A(a)  :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Galaxyrise on July 19, 2014, 03:42:06 am
As far as copyrights go i am no expert. I do know that in the world of graphics there is no such thing. You can sell superman t shirts all day long as long as it doesn't say the words "Super Man" on it. I guess the name is the only thing protected.
There are certainly such things in the graphics world!  For your example, there are numerous trademarks on Superman, including the logo (http://tmsearch.uspto.gov/bin/gate.exe?f=doc&state=4810:2op0lw.2.1) and his likeness (http://tmsearch.uspto.gov/bin/gate.exe?f=doc&state=4810:2op0lw.2.2) for clothing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on July 19, 2014, 01:07:25 pm
Trademarks and copyrights are not the same. That's all i have on that one.  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 19, 2014, 04:24:30 pm
On the subject of laws, are restrictions on use after purchase legally binding?

For example, FLIR sells some educational kits with deep discounts but requires that they be used for non-commercial purposes only. Are buyers legally obligated to comply with this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on July 19, 2014, 04:51:47 pm
On the subject of laws, are restrictions on use after purchase legally binding?

For example, FLIR sells some educational kits with deep discounts but requires that they be used for non-commercial purposes only. Are buyers legally obligated to comply with this?
They can be based on the EULA.  This would not apply to sellers because they are not end users.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on July 19, 2014, 04:52:59 pm
On the subject of laws, are restrictions on use after purchase legally binding?

For example, FLIR sells some educational kits with deep discounts but requires that they be used for non-commercial purposes only. Are buyers legally obligated to comply with this?
They can be legally obligated based on the EULA.  This would not apply to sellers because they are not end users. I think flir is on very shaky legal ground for pulling sales that even mention it can be hacked. They could really open themselves up to a DMCA-abuse lawsuit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 19, 2014, 05:13:25 pm
Still, it looks like FLIR has achieved their goal with scare tactics. It's been several weeks since 2.x.0 was released, and there seems to have been no serious attempts to hack it so far.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 19, 2014, 05:24:06 pm
Still, it looks like FLIR has achieved their goal with scare tactics. It's been several weeks since 2.x.0 was released, and there seems to have been no serious attempts to hack it so far.

I don't think it has anything to do with whatever Flir may or may not have done -  the simple fact is the boat has mostly sailed.
Anyone interested in buying & hacking a camera will already have done so, and anyone looking now will try to get hold of a unit with older firmware, of which there are still a few around on ebay and probably also in distribution - 1.22 rwas eported on a unit from Amazon on Jul 11th.
(It would be interesting to know if Flir pulled old stock back like they did with 1.22, though we've had a report that an old unit updated by Flir to 2.3 is still hackable so maybe little point.)

The simple fact is that there are far, far fewer people with any need to hack the current firmware than was the case for the previous releases.  Maybe once 2.3 has been around a while someone will have a serious crack at it, though by then the E4 may be using Lepton cores.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 20, 2014, 01:13:00 pm
Just stumbled on some internal pics of the E60 on the FCC approvals site:

https://apps.fcc.gov/oetcf/eas/reports/ViewExhibitReport.cfm?mode=Exhibits&RequestTimeout=500&calledFromFrame=N&application_id=523320&fcc_id=ZLV-FLIRE49001
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 21, 2014, 01:52:28 am
I was making some pano's today and then running them through tomas123's flir.php script and was getting nothing but failures for some unknown reason.
I managed to track it back to the newer FLIR Tools 4.1 seems to be putting values differently into the corrected radiometric jpg and convert is failing to be able to extract them.
Downgrading to a older 4.0 version of FLIR Tools fixed the problem and I can make them again.
I tested this with non-panoramic files and they were affected as well.

Just a FYI in case anyone else runs into issues!

Oh - and I got ZnSe/20mm/FL: 4"/101.8mm lens this week and got my local maker space (assentworks.ca) to print off that holder file that was published in ABS on their best printer. Here is some close up goodness.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pubo on July 22, 2014, 03:54:23 am
Just for whoever that is still interested to purchase one, I've just purchased one from tequipment.net via PriceUSA on the 8th of July and received today. Total cost is AUD 1224. The unit I received is as follow.

Model: E4 1.1L
Serial: 63924xxx
Part Number: 63901-0101
Software: 1.22.0

Hope that helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 23, 2014, 08:28:32 pm
Hi,

does anyone know which format the uvc-stream of the Ex-series has? Is it an MPEG-Stream consisting of JPG-frames (with EXIF-rawthermalimage) or just the live-stream of the display without EXIF-stuff?

Greetings,

Echo
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 23, 2014, 09:05:23 pm
I know its off topic but how i should configure my flir e4 to stream video to "vlc" or "flir ir camera player"
rtsp://192.168.0.2 don't work for me. Camera is online beacus i can connect to via filezilla.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on July 23, 2014, 09:40:32 pm
I'll try to buy a E4 1.22 before the supply dries up completely. Plan to use it for PCB work.

Has anyone tried to make a new casing for it and move the internal parts over to make for a more easy fit on a tripod?
I'm also thinking in terms of designing in an easily accessible focus adjustment using the standard optics and a new form factor (such as Flir A40M). I can design up the casing in my CAD and then have it 3D printed with Objet or SLA for a nice finish at reasonable cost.
Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 23, 2014, 09:43:10 pm
I'll try to buy a E4 1.22 before the supply dries up completely. Plan to use it for PCB work.

Has anyone tried to make a new casing for it and move the internal parts over to make for a more easy fit on a tripod?
I'm also thinking in terms of designing in an easily accessible focus adjustment using the standard optics and a new form factor (such as Flir A40M). I can design up the casing in my CAD and then have it 3D printed with Objet or SLA for a nice finish at reasonable cost.
  • Please let me know thoughts on pro/cons doing this and interest.
  • Will the MSX function be offset when changing the focus on the lens?
  • If anyone has made CAD files of the E4 or accessories for it, please share as it can speed up the design (most time will go into making the internal parts into 3D CAD)
Cheers
MSX won't work close up, but you don'treally need it as when close up it will be obvious what you're looking at.
Not sure it's worth the effort re-casing - it's not too hard to rig up a tripod mount of some sort.

If you want something for nothing else but PCB work, Therm-App (http://therm-app.com/) might be a better option, as it has adjustable lens and more mounting options
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 24, 2014, 12:06:17 am
I disassambled my E4 and stuffed it together with my 2 stereo-webcams in a bigger aluminium-case, its not that complicated. The 4 screws which hold the pcb in the magnesiumframe are separated by about 50mm each. The On/Off-Button is emulated by a flexprint-button and the battery is connected via a selfbuild adapter. The other buttons are controlled via Telnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on July 24, 2014, 12:42:06 pm
There are some tripod mounts, auxiliary close-up lens holders, and focus ring tools for the Ex cameras over at Thingiverse. Nothing, that I'm aware of, for remounting the internal components.
Title: Problem connecting to E4 using RNDIS mode and Filezilla
Post by: Sentient BeanCurd on July 24, 2014, 06:06:31 pm
Hi Folks,

New owner of a FLIR E4 v 1.22.0 here , and I'm trying to perform the amazing upgrade hack.

However, I cannot seem to connect to the camera using Filezilla as described in this post.

I am receiving a "Connection failed with "ECONNREFUSED" -Connection refused by server. message most of the time, and "Could not connect to the server" other times.

I have:
1. Turned off Windows Firewall and McAfee
2. Confirmed IP address is 169.254.146.11 in ipconfig and used that IP address
3. Tried using the 192.168.0.2 IP address as described in this thread
4. Tried the connection on 3 different Windows 8 and 7 machines...same errors
5. Of course installed the RNDIS drivers from FLIR
6. Setup the camera in RNDIS only mode in the instrument USB hidden menu

So...I' wondering if FLIR have somehow changed the RNDIS drivers? I can communicate with the device using FLIR tools, and I can stream video to an IP capture device once the device is reset (not in RNDIS mode) so I know the E4 is working.

Any help mucho appreciated...something new must have happened recently, since the Filezilla connection is so effortlessly acheived in these posts.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vmp on July 24, 2014, 09:45:15 pm
RNDIS drivers i used to connect via filezilla.
http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on July 25, 2014, 12:23:09 pm
It's been observed that it is sometimes a bit of a dance to get the FLIR and PC to link up over RNDIS.

What I've gotten to work (fortunately, it hasn't been needed recently) is some combination of (1) disconnecting/reconnecting the USB, (2) leaving the USB connected and power cycle the FLIR, or (3) change the FLIR's USB mode from bare RNDIS to RNDIS+[one of the other modes]. Eventually, the PC and camera have always managed to find one another. Just keep checking ipconfig for the right subnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sentient BeanCurd on July 25, 2014, 08:46:54 pm
Hi,

Thanks for your suggestions. I've tried them all, and the "best" I can do is confirm the IP address of the FLIR E4 can be pinged, and get an "ECONNREFUSED" error in Filezilla and FTP error in the TIConfig program..

I've attached a few screenshots in case anyone would care to take a look.

It seems to me that the camera is connected with a valid IP address and responding to pings but not accepting the user password?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on July 25, 2014, 09:29:05 pm
Look closer. :palm: The screen shot shows your IP address was 192.168.0.2 and the camera's (listed as the "default gateway") was 192.168.0.1. So, you were pinging, and attempting an FTP connection to, yourself.

FWIW, I just fired mine up to check and in this instance it came up as 192.168.0.1 on the PC and 192.168.0.2 as the FLIR. How it is that which gets what, I do not know. Phase of the moon, maybe, or else Schrodinger is lurking nearby.

But, do whatever it was that you just did but check the ipconfig screen to see which you were assigned and then you should be good to go.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on July 26, 2014, 04:18:07 am
Still, it looks like FLIR has achieved their goal with scare tactics. It's been several weeks since 2.x.0 was released, and there seems to have been no serious attempts to hack it so far.

I don't think it has anything to do with whatever Flir may or may not have done -  the simple fact is the boat has mostly sailed.
Anyone interested in buying & hacking a camera will already have done so, and anyone looking now will try to get hold of a unit with older firmware, of which there are still a few around on ebay and probably also in distribution - 1.22 rwas eported on a unit from Amazon on Jul 11th.
(It would be interesting to know if Flir pulled old stock back like they did with 1.22, though we've had a report that an old unit updated by Flir to 2.3 is still hackable so maybe little point.)

The simple fact is that there are far, far fewer people with any need to hack the current firmware than was the case for the previous releases.  Maybe once 2.3 has been around a while someone will have a serious crack at it, though by then the E4 may be using Lepton cores.
Here is what FLIR said when I asked what legal basis they had
Code: [Select]
The listed product, a FLIR E4 upgraded to an E8 are all plainly counterfeit goods, as the sellers are selling goods that are counterfeit in that they are not authorized by the Manufacturer FLIR Systems.  Further, the Seller is violating numerous laws in its willful selling of the counterfeit goods, including, but not limited to:
   
1.       Violation of the Federal Copyright Act - The software on FLIR’s products is protected by copyright.  See 17 U.S.C. § 101 et seq.  Federal law prohibits unauthorized copying, reproduction, manipulation, modification, and commercial use of such software without FLIR’s permission. Id. § 101.  Because FLIR has not granted the Seller such permission, Seller’s manipulation and modification of FLIR’s software, including its source code, to purportedly “upgrade” FLIR E4 devices for commercial profit is a willful violation of these laws. 

2.       Violation of the Federal Trademark Act and the Federal Lanham Act - Absent special licensing arrangements, FLIR has not authorized Seller to use its proprietary trademark(s) in connection with third party products and services, much less so for items that are being passed off for profit as official FLIR products when they are nothing of the sort.   

3.       Violation the unfair competition and false advertising provisions of the Federal Lanham Act, 15 U.S.C. § 1125(a)(1)(B) – Seller’s claim that the products sold – a hacked version of FLIR’s E4 marketed as a “FLIR Special Edition” or “E8++” – is superior to FLIR’s own E8 is baseless, false and misleading, and thus violates the unfair competition and false advertising provisions of the Federal Lanham Act. 

4.       Violation of FLIR’s Terms of Use – the product being offered is not a FLIR E8, the seller has impermissibly hacked, manipulated, and passed off an E4 as an E8+ to unsuspecting consumers.  Introducing into the marketplace these unauthorized adulterated cameras under this false moniker will inevitably cause consumer confusion and injury, deceiving purchasers and users alike into believing the camera is authorized and backed by FLIR’s product support.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on July 26, 2014, 06:01:37 am
Quote
The listed product, a FLIR E4 upgraded to an E8 are all plainly counterfeit goods, as the sellers are selling goods that are counterfeit in that they are not authorized by the Manufacturer FLIR Systems.  Further, the Seller is violating numerous laws in its willful selling of the counterfeit goods, including, but not limited to:

The goods are unmodified FLIR hardware, so it's not counterfeit, they will have the burden of proof that the actual device is a copy, as far as not being authorized there is no dispute there but being the legal owner he can sell it.

I'm not an authorized dealer of my car, but I can sell it to whoever I want even if I upgraded parts of my car including the ECU, super chargers or any other non authorized third party improvements.
   
Quote
1.       Violation of the Federal Copyright Act - The software on FLIR’s products is protected by copyright.  See 17 U.S.C. § 101 et seq.  Federal law prohibits unauthorized copying, reproduction, manipulation, modification, and commercial use of such software without FLIR’s permission. Id. § 101.  Because FLIR has not granted the Seller such permission, Seller’s manipulation and modification of FLIR’s software, including its source code, to purportedly “upgrade” FLIR E4 devices for commercial profit is a willful violation of these laws. 

As far as I know, nobody modified the software. The actual executable remains untouched. Further, there are provisions in Sec. 103(f) of the DMCA (17 U.S.C. § 1201 (f)) stating that if you legally obtain a program that is protected, you are allowed to reverse-engineer and circumvent the protection to achieve the ability to achieve interoperability of computer programs, allowing the legal owner of the non-counterfeit device to make the software communicate with a third party software to achieve such interoperability.  Maybe a grey area, but the burden is on the prosecution.

Quote
2.       Violation of the Federal Trademark Act and the Federal Lanham Act - Absent special licensing arrangements, FLIR has not authorized Seller to use its proprietary trademark(s) in connection with third party products and services, much less so for items that are being passed off for profit as official FLIR products when they are nothing of the sort.   

I guess then I can't sell a Honda by name if Honda doesn't give me authorization to sell it under that badge name. They are really reaching here since it's a FLIR product and the burden is on them to prove that it's not a legally obtained product. As long as the seller doesn't claim he/she is an authorized dealer they can modify it. This is as ludicrous as some car company preventing me to sell my car because I use tires and spark plugs that are not OEM.

Quote
3.       Violation the unfair competition and false advertising provisions of the Federal Lanham Act, 15 U.S.C. § 1125(a)(1)(B) – Seller’s claim that the products sold – a hacked version of FLIR’s E4 marketed as a “FLIR Special Edition” or “E8++” – is superior to FLIR’s own E8 is baseless, false and misleading, and thus violates the unfair competition and false advertising provisions of the Federal Lanham Act. 

They have the burden of proof for this one to counter act that the product is actually not superior. But the seller would be stupid to actually say it's better than an E8 when they just have to claim the improvements over the original equipment. It will be like adding a super charger to a car, you can't claim is a different model but the same model with enhancements.

Quote
4.       Violation of FLIR’s Terms of Use – the product being offered is not a FLIR E8, the seller has impermissibly hacked, manipulated, and passed off an E4 as an E8+ to unsuspecting consumers.  Introducing into the marketplace these unauthorized adulterated cameras under this false moniker will inevitably cause consumer confusion and injury, deceiving purchasers and users alike into believing the camera is authorized and backed by FLIR’s product support.

The also have the burden of proof that the consumers are being mislead about a sale of a product, but the seller should be honest and don't claim it's not an E4 since it is an E4. But I don't see why the seller couldn't state the improvements over the original equipment.

Let's put it this way. I can buy a 35mm camera and use the body combined with optics made by me or a third party and the internal mechanics done yet by a different manufacturer, and I still will be able to sell it. I just can't claim it's the original camera or that it has any warranty of any kind.

Any legal action could bring a class action lawsuit for people that paid more for the same hardware sold at a fraction of the cost, if the court findings are that it's actually the same equipment.

All that said, if FLIR was to offer the software upgrades and be upfront that the hardware is the same, then that will give them more rights, but that is not the case. A similar thing will be to get a computer with some commercial version of an operating system and modify it to a different version of the operating system that the vendor offers as an upgrade. That still doesn't prevent a user to put their own software on such system as long as it's not the original and doesn't contain modified original code on it, but say we write our own firmware from scratch. That is totally legal as well so they have to thread lightly.

Manufacturers will have a field day if what they claim was to be upheld by the court, it will mean that if I had an electrical oven and the heating element broke I couldn't replace it with a third party one and still be able to sell it when I wanted. There will be thousands of court precedents.

Disclaimer: I'm not a lawyer so this is just my opinion and not legal advice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on July 26, 2014, 06:40:25 am
Since I don't want to edit my previous post, I want to state also that private sales are different than commercial sales.

Not sure how legal this link is but further research can be done:

http://www.consumerline.org/search/?cat=Goods+%26+Services&item=Private+Sales (http://www.consumerline.org/search/?cat=Goods+%26+Services&item=Private+Sales)

Quote
Introduction

You can sometimes pick up a bargain when you buy privately, perhaps through a 'small ad' in your local newspaper or on the internet. But beware. Buying privately does not give you as many rights as buying from a trader.

What the law says

Goods bought privately do not have to be of satisfactory quality or fit for any specified purpose. But they do have to be properly described.

Useful information

There is a legal rule which applies to all goods bought privately. It is called 'caveat emptor', which means 'let the buyer beware'. Because of this, any responsibility for buying goods which are faulty lies with the buyer, and not with the private seller.

If you're thinking of buying something privately, make sure you inspect it thoroughly before you buy. Bring a witness with you, preferably someone who knows a lot about the sort of item being sold. They should be able to spot any defect which you may miss. And they should also be able to testify how the seller described the item if you later need to take court action. Ask for any appliance to be switched on so that you can see it working.

Don't forget that your only legal safeguard is that the item being sold must be properly described. And so you should ask a lot of questions about its condition. You should also keep a copy of any advert. If the seller's answers or description later turn out to have been false, then you can claim your money back. For example, if the seller tells you that the car he is selling is two years old and it turns out to be four years old, then you are entitled to your money back because the car has been misdescribed.

Some traders try to pretend they are private sellers so that it will be more difficult for you to claim against them. If you suspect that you are dealing with a trader and not a private individual, do not buy! If he is hiding his true identity, you can be sure he is hiding some defect in whatever he is trying to sell you. Tell-tale signs include lots of 'small ads' with the same telephone number or if the seller tries to hide the fact that he has business premises by offering to bring the item round to your house. Also, contact Consumerline on 0300 123 6262. It is a criminal offence for a trader to try and give the impression in advertisements that he or she is a private seller. This is a particular problem with the sale of second-hand cars. The details will be passed to the Trading Standards Service who can investigate complaints about advertisements placed by so called "hidden traders".

What to do if you have a complaint

Complain first to the private seller if you later find that the item you bought from him was not as described. Point out to him that it is against the law to do what he did and ask for your money back. Or if you want to keep the item, ask him to pay for the repair of any defect.

If, despite your efforts, you haven't been able to sort out your complaint, you may have to think about court action. If the amount involved is not more than £3,000, you can take your case yourself to the Small Claims Court. Talk to Consumerline, your local Advice Centre or Citizens Advice about this before you ask your local court for an application form. For larger amounts, you should talk to a solicitor.

But the original manufacturer is not at all involved in private sales as far as I can see. If FLIR's claims were to prevail in court it will expand to all consumer goods. I could even foresee a home constructor stipulating that if the original equipment placed in a home was to be replaced, it will violate the licensing agreement between the constructor and the owner, therefore insuring that you buy lightbulbs, fixtures, and other home goods only from authorized distributors.

Yeah, I'm reaching but not by much.

Disclaimer: I'm not a lawyer so this is just my opinion and not legal advice. I don't even own a FLIR device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on July 26, 2014, 08:02:39 am
Quote
4.       Violation of FLIR’s Terms of Use – the product being offered is not a FLIR E8, the seller has impermissibly hacked, manipulated, and passed off an E4 as an E8+ to unsuspecting consumers.  Introducing into the marketplace these unauthorized adulterated cameras under this false moniker will inevitably cause consumer confusion and injury, deceiving purchasers and users alike into believing the camera is authorized and backed by FLIR’s product support.

The also have the burden of proof that the consumers are being mislead about a sale of a product, but the seller should be honest and don't claim it's not an E4 since it is an E4. But I don't see why the seller couldn't state the improvements over the original equipment.

Dunno what the law in the US (or anywhere else except Germany/EU) is, but over here they can write up agreements and terms of use and such stuff until they run out of ink. It has no legal power per se with respect to the customer. That is, if the goods are bought at a retail shop or a dealer or something. Because then i have a contract only with that dealer, and no one else. If they (or the dealer) want to have those clauses to have any effect, they must be shown to me at the point of sale, before the sale is done, so that i can accept or decline these conditions. What i don't see beforehand has exactly zero legal power. That is why, for example, shrink-wrap licenses are just a waste of ink and paper over here.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 26, 2014, 09:17:09 am
Quote

1.       Violation of the Federal Copyright Act - The software on FLIR’s products is protected by copyright.  See 17 U.S.C. § 101 et seq.  Federal law prohibits unauthorized copying, reproduction, manipulation, modification, and commercial use of such software without FLIR’s permission.
How do they define "unauthorised" manipulation?
Normal operation, for example changing settings, saving images etc. involves some change of state. I don't recall anything in the documentation that explicitly forbids FTPing in and changing files. What about invoking the service mode?
There is an interesting issue here in that software for additional functionality was already there - the fact that it's there could be seen as implicit authorisation.
Another major issue is that the buyer does not have to agree to any license terms prior to purchase or use, so how is the user supposed to know that making use of certain parts of the software is unauthorised?

Quote
2.       Violation of the Federal Trademark Act and the Federal Lanham Act - Absent special licensing arrangements, FLIR has not authorized Seller to use its proprietary trademark(s) in connection with third party products and services, much less so for items that are being passed off for profit as official FLIR products when they are nothing of the sort.   
The seller (in the listings I saw at least) clearly stated the nature of the product - they were not passing anything of as something that it wasn't.
Might be interesting to explore the situation if someone bought units and rebranded under their own name.
Quote
3.       Violation the unfair competition and false advertising provisions of the Federal Lanham Act, 15 U.S.C. § 1125(a)(1)(B) – Seller’s claim that the products sold – a hacked version of FLIR’s E4 marketed as a “FLIR Special Edition” or “E8++” – is superior to FLIR’s own E8 is baseless, false and misleading, and thus violates the unfair competition and false advertising provisions of the Federal Lanham Act. 
The upgraded unit has features that are not available on a standard E8, therefore it is clearly superior in some respects. May be on slightly dodgy ground associating the name Flir with it though. So maybe "Acme cam-hackers special edition"..?
Quote

4.       Violation of FLIR’s Terms of Use
What terms of use? The buyer has not agreed to any terms of use, so this is utter nonsense.

Quote
– the product being offered is not a FLIR E8
The seller wasn't claiming it was
Quote
, the seller has impermissibly hacked, manipulated, and passed off an E4 as an E8+ to unsuspecting consumers.  Introducing into the marketplace these unauthorized adulterated cameras under this false moniker will inevitably cause consumer confusion and injury, deceiving purchasers and users alike into believing the camera is authorized and backed by FLIR’s product support.

In what way are consumers unsuspecting? ISTR The listing was clear as to what they were getting.
Interesting that no legislation was cited in respect of this. 


AFAICS the only solid argument they have is the use of the term "Flir special edition"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 26, 2014, 10:55:11 am
For me a key omission from FLIRs legal comments are any reference to a user modification being in any way 'illegal' This tallies with what I was told at the beginning of this upgrade odyssey. So selling an E4 as an E4 is not illegal and the buyer can upgrade it if they wish. I doubt stating the firmware version is wrong either as many products have various generations of firmware, some better than others, and buyers like to know which is installed.

Basically...."my toy, I shall do with it as I please"  ;D

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on July 26, 2014, 07:22:32 pm
Hi,

with a software > 1.22.0 it seems to be the case a camera ressource node ".resmon.registry.config.hideGraphics " was included. This function hides the icons and the temperature-scale. My cam has 1.22.0 (now E8-standard). Does anyone know how to change the firmware-files to include this function and set it via telnet or durable in the file?
Is it necessary to update my cam to > 1.22.0 while risking to brick it?


Greetings,

Echo
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on July 26, 2014, 07:24:26 pm
Since I don't want to edit my previous post, I want to state also that private sales are different than commercial sales.

But, did the eBay seller list the item as New, or imply that there was a Flir warranty?  If so, that would lead the buyer to think it was a commercial sale.  In a situation like this (not an authorized reseller, Flir making threats), the item should have been listed as Used.

Here are some discussion threads about a similar situation, with Netgear bullying resellers:

http://saverocity.com/bighabitat/1-26-14-netgear-gets-nasty-lawsuit-another-reseller/ (http://saverocity.com/bighabitat/1-26-14-netgear-gets-nasty-lawsuit-another-reseller/)
https://sellercentral.amazon.com/forums/thread.jspa?threadID=198433 (https://sellercentral.amazon.com/forums/thread.jspa?threadID=198433)
http://www.fatwallet.com/forums/finance/1336470 (http://www.fatwallet.com/forums/finance/1336470)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sentient BeanCurd on July 26, 2014, 07:27:38 pm
Thanks for the helpful input here. Problem was resolved by turning off ALL network adapters including Bluetooth. And then waiting 3 minutes after the TIC powered up  before attempting connection with the correct IP address.

I'd say most people having problems connecting to the device have some kind of network adapter still active while trying to connect. It was impossible to connect until I checked that my Bluetooth was still active in control panel.

Oh..and that TIConfig tool is the way to go to perform the hack...messing with the config file manually is sure to cause problems.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PedroDaGr8 on July 28, 2014, 03:38:09 am
Direct link to drivers: http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)
Both x86 and x64 seem to point to the same file - correct me if I'm wrong.

thanks for this link nitroxide. (2 more months n it be 2014 october ha !)
i used the widely available info to "toy" with my E4 (thanks mike, aurora, DS etc.). and a certain youtube vid was very nicely done on this subject.

i made a blunder initially. i forgot to add in a LF after the CRC03. the device still booted (its a 1.22.0/1.1L), but it did not work fully as "intended", the menu was screwy, the image wasnt the full sensor array. when it booted, the splash screen has an additional *SPECIAL EDITION* wording to it :D (and a WIFI symbol popped on screen ... o my)

i did another edit n added the LF and a 2nd upload (  :phew: )

so ... what other nifty mods can i add to this very nice tool ? :D ( i saw a discussion on changing color palettes and add-on lenses ). i just wish FLIR sold E4 as a full uncrippled device and sold an E8 as a XGA resolution FLIR, hehe i must be dreaming right?

edit : and the new menu seems to work much faster, as i used the original menu for sometime before trying the mod. is there a "delay" string in original E4 code?

edit : reading the last few posts, so FLIR is going to clamp down on users who applied the mod ? or are they attacking the "chiefs" of this "mod".
They appear to be going after the people profiting off of the upgrades. The sellers on ebay that are upgrading the camera and making a profit off of the upgraded camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on July 28, 2014, 07:57:39 am
edit : reading the last few posts, so FLIR is going to clamp down on users who applied the mod ?
How exactly would they do that?
Quote
They appear to be going after the people profiting off of the upgrades. The sellers on ebay that are upgrading the camera and making a profit off of the upgraded camera.
..but only half-heartedly it seems- some listings have reappeared
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ychl0060 on July 29, 2014, 06:56:21 am
????????????1.22????
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Roboss on July 29, 2014, 05:53:32 pm
Hi guys anyone know a sure fire way to get 1.22 version shipped to Aus?

I'm not holding my breath that the new firmware can be hacked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 29, 2014, 06:18:42 pm
Hi,

with a software > 1.22.0 it seems to be the case a camera ressource node ".resmon.registry.config.hideGraphics " was included. This function hides the icons and the temperature-scale. My cam has 1.22.0 (now E8-standard). Does anyone know how to change the firmware-files to include this function and set it via telnet or durable in the file?
Is it necessary to update my cam to > 1.22.0 while risking to brick it?


Greetings,

Echo

Ohhhh this would be really nice for UVC video capture!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MarcelM on July 30, 2014, 10:41:19 am
Hi Guys,

I ordered an E4 last monday, on the CONDITION that it was a version 1.22 or below.
Distributor replied that he had a 1.21 in stock, which I promptly ordered...

Came in today, parameters are:

Model              E4 1.1L
Serial number  639164xx
Part number    63901-0101
Software         1.21.0

(ordered in The Netherlands)

Not tried any upgrades yet, first want to play with the thing to get a feel for it's out-of-the-box performance.

Rgds,
Marcel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: realdoc on July 30, 2014, 07:43:56 pm
I ordered an E4 last monday, on the CONDITION that it was a version 1.22 or below.
Distributor replied that he had a 1.21 in stock, which I promptly ordered...

Where did you order it? I'm also based in The Netherlands and I gave up on my 2.x unit. If they still have them in stock I would be really interested.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 31, 2014, 12:30:18 am
May I please suggest that sales of E4's, upgradeable E4's and upgraded E4's be placed in the buy and sell section of the EEVBlog.

Why? ....well if FLIR decide to turn nasty and continue to pursue anyone trying to sell an E4 as an 'upgradeable to E8' platform, could it not endanger this amazing thread ? If they complain to Dave about items in the buy and sell section, at least only those specific topics will be removed.

Thanks  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on July 31, 2014, 12:35:49 am
Quote from: Aurora
May I please suggest that sales of E4's, upgradeable E4's and upgraded E4's be placed in the buy and sell section of the EEVBlog.
+1  Can it be moved?
EEEEEP Stock prices are rising faster than the peak oil crisis :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 31, 2014, 01:04:09 am
@mondeo,

I can see your viewpoint but sadly FLIR have made it clear that even saying you will help upgrade a camera that you are selling breaches their rights. Whilst such is debatable it would be a pity if the FLIR lawyers started hassling Dave to remove this thread. It might be just the excuse they are looking for as I doubt they like this threads content  ;D

How about you reword your advert and detail your E4 as a standard unit with version 1.22 firmware and say nothing more, especially about helping people to upgrade it. Anyone interested in upgrading the camera AFTER they buy it can find the help that they need anyway.

You are also selling the E4 at a mark-up.....this appears to anger FLIR, so they may still contact you about 'unauthorised' selling of their products causing reputational damage..... again, no idea how valid that argument truly is.

Lets not risk this thread eh ? You could always place your advert in the correct buy and sell area and direct people to it from a posting here ?

Kindest Regards

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MarcelM on July 31, 2014, 06:30:52 am
I ordered an E4 last monday, on the CONDITION that it was a version 1.22 or below.
Distributor replied that he had a 1.21 in stock, which I promptly ordered...

Where did you order it? I'm also based in The Netherlands and I gave up on my 2.x unit. If they still have them in stock I would be really interested.
Try sensorbv.nl. They've been very helpful & shipped promptly...

Groeten,
Marcel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RoryJones on August 05, 2014, 01:26:54 am
I am wanting to get a TIC.  Are current versions of the E4 still hackable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on August 05, 2014, 08:58:31 am
I think that Flair is actually enjoying the surge in sales from selling a large number of E4 cameras, and will continue to make the hackable version available (which seems to be the case so far).

At the same time, they need to keep up an image for their mainstream corporate customers of trying to fight this.

I worked for large aerospace companies for many years and listened to a large amount of meaningless talk/propaganda from management. I believe that one needs to ignore mostly what is said, and pay close attention to what I is actually done. So far for Flair, it seems to me that the actual actions are very limited.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Roboss on August 05, 2014, 03:23:14 pm
Hi guys,

I've been on the hunt for a 1.22 E4.

I'd suggest trying the guys at Valuetesters.com

Click the quote button, Sam there was of great assistance and they're happy send overseas.

I'll report back when it arrives.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on August 05, 2014, 06:34:22 pm
The FLIR website doesn't list them yet, but the T3 2014 promotions are now available: http://www.johnstonesupply.com/assets/store92/123114-flir.pdf (http://www.johnstonesupply.com/assets/store92/123114-flir.pdf)

Just an FYI.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on August 07, 2014, 01:04:12 pm
More of a FYI - I have been making some videos with the FLIR and tossing some of them up on youtube. Please go easy on me - video editing is not what I would call one of my top skills...  ;D

https://www.youtube.com/channel/UCCeE9hjpbFWpw3KoGjfP_yw (https://www.youtube.com/channel/UCCeE9hjpbFWpw3KoGjfP_yw)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 07, 2014, 06:22:20 pm
Can you identify firmware by serial number?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on August 07, 2014, 06:38:35 pm
Can you identify firmware by serial number?

There was a list of camera serials and what firmware they had but it's not being updated anymore due to FLIR attacking I believe.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 07, 2014, 07:32:17 pm
Can you identify firmware by serial number?

There was a list of camera serials and what firmware they had but it's not being updated anymore due to FLIR attacking I believe.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Nothing to stop others adding some data points to that thread though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on August 07, 2014, 08:15:15 pm
Can you identify firmware by serial number?
You can go up to 6392 61xx, maybe more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 07, 2014, 08:36:57 pm
The last confirmed 'upgradeable' unit on which I received information is detailed below:

6392 54xx            28 Apr              1.22.0 E4 V1.1L

If FLIR recalled any retailer stock (as they have in the past) for retro fitting with the later 2.x firmware, the serial number may not guarantee anything. I have not seen a confirmed case of such however. It was discovered that an 'old stock' camera that had FW 2.x retro fitted by FLIR (after a repair) could still be upgraded as the encryption was not active on such a unit.

My serial number Vs fw revision list in the 'useful information thread' is still useable in identifying serial numbers that should be pre fw2.x when originally built. If others know of later serial numbers that contained pre fw2.x they may wish to post but I will not be updating the list in my thread.

Aurora


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mutzgrila on August 09, 2014, 04:24:08 pm
Flir recommends to send the thermocamera to calibrate once a year.
But probably they will update my firmware version 1.2.2 to 2.x.x, and then, the hack will not work.
Is there anywhere else to calibrate?
thks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 09, 2014, 04:49:02 pm
There are many calibration houses for thermal cameras. Which country are you in ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on August 10, 2014, 01:29:15 am
I have two remaining E4 v1.22.0  1.1L, unregistered, registerable, never used units for sale. 



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 02:52:34 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on August 11, 2014, 03:23:26 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?

43.65227%
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 03:27:10 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?

43.65227%

Nice!  I assume all strict scientific estimation rules were followed in deriving this number?   :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on August 11, 2014, 03:33:13 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?

43.65227%

Nice!  I assume all strict scientific estimation rules were followed in deriving this number?   :-DD

Of course! But looking at the post from Aurora -


6392 54xx            28 Apr              1.22.0 E4 V1.1L

I would assume it would be 1.22 or less since the serial appears to be lower than the one posted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mutzgrila on August 11, 2014, 04:15:43 pm
There are many calibration houses for thermal cameras. Which country are you in ?

I am in Brazil...
Thanks
I will take a look
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 04:18:47 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?

43.65227%

Nice!  I assume all strict scientific estimation rules were followed in deriving this number?   :-DD

Of course! But looking at the post from Aurora -


6392 54xx            28 Apr              1.22.0 E4 V1.1L

I would assume it would be 1.22 or less since the serial appears to be lower than the one posted.

I would tend to agree but the company I found that has it also has a 20% restocking fee - ouch if it not a 1.22 or less....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 11, 2014, 05:30:44 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?

43.65227%

Nice!  I assume all strict scientific estimation rules were followed in deriving this number?   :-DD

Of course! But looking at the post from Aurora -


6392 54xx            28 Apr              1.22.0 E4 V1.1L

I would assume it would be 1.22 or less since the serial appears to be lower than the one posted.

I would tend to agree but the company I found that has it also has a 20% restocking fee - ouch if it not a 1.22 or less....
Which is why you should place the order conditional on version, so if it's wrong they are in breach of contarct
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 11, 2014, 05:56:11 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?
It is a 1.22 with a 4/3 calibration date.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 06:12:48 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?
It is a 1.22 with a 4/3 calibration date.
Whoa -  boom - hard data - how do you know that?   :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 11, 2014, 06:26:50 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?
It is a 1.22 with a 4/3 calibration date.
Whoa -  boom - hard data - how do you know that?   :)
I have a list and cameras with serials before and after that have calibration of 4/3 and are 1.22
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 06:29:58 pm
So what do you think the odds of a unit with the following serial number: 63921757   has the 1.21 or 1.22 firmware?
It is a 1.22 with a 4/3 calibration date.
Whoa -  boom - hard data - how do you know that?   :)
I have a list and cameras with serials before and after that have calibration of 4/3 and are 1.22
Sweet!  You da man!! Thanks!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 11, 2014, 07:02:39 pm
and I bought it - 959 shipped!   Thanks everyone for the assistance - hopefully the upgrade will go smooth!

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 11, 2014, 07:39:29 pm
In this particular case my list would have helped you as the camera is quite old stock

Take a look at the list here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

A camera with S/N 6392 17xx is identified as FW1.22 and calibrated on 3 April 14. You will see that there were many cameras produced after that serial number that had fw1.22.

See extract below:

====================
6392 023x            21 Mar             1.22.0 E4 V1.1L
6392 17xx            03 Apr              1.22.0 E4 V1.1L
6392 21xx            08 Apr              1.22.0 E4 V1.1L
6392 29xx            11 Apr              1.22.0 E4 V1.1L
6392 4xxx               ?                   1.22.0 E4 V1.1L
6392 5xxx            28 Apr              1.22.0 E4 V1.1L
6392 54xx            28 Apr              1.22.0 E4 V1.1L

Not in Camera @    18 May           2.1.0 RELEASED on FLIR web site - Built 16 May

6392 85xx            23 May             2.1.0 E4 V1.2L

====================

Note my warning about recalled stock however....nothing is a certainty, but the odds are definitely in your favour for an upgradable camera  :)

If you have not already done so, I recommend that you read my E4 Useful information thread as it answers many questions for those new to the E4.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104)

I hope all goes well and you enjoy your camera.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on August 12, 2014, 06:06:17 am
I have a V1.22.0 unit available, can ship within the EU. It's brand new, I picked it up at a local electrical wholesaler who told me he couldn't shift it  :-DD
Available at Flir list price plus shipping at cost.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rozzone on August 13, 2014, 12:05:48 am
I am just taking possession of a new E4 I am assuming that it will have the new firmware.  Is anyone interested in having a look at the firmware?  I was thinking about having a look through it myself, but I am kinda new to it all.  I would appreciate some guidance.  Feel free to email if you would prefer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clavo on August 13, 2014, 10:28:52 pm
Has anyone found a way to change the configuration files to allow for tracking of more than 1 hot or 1 cold spot?  Ideally tracking all hot spots in the entire frame...

-will
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 13, 2014, 10:49:12 pm
Has anyone found a way to change the configuration files to allow for tracking of more than 1 hot or 1 cold spot?  Ideally tracking all hot spots in the entire frame...

-will
How would you decide what constitutes hot/cold?
Why would you want to do this?

The read above/blue below modes allow highlighting of over/under temp areas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clavo on August 14, 2014, 12:31:36 am
For example:  Tracking 4 hogs for hunting and having them framed so you can clearly see the object without obscuring it.  A novelty yes, but if it can track 2 spots (hot and cold) and draw a target over them it should be able to draw a box around X amount of objects above a certain temperature right?

-will
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 14, 2014, 08:22:11 am
For example:  Tracking 4 hogs for hunting and having them framed so you can clearly see the object without obscuring it.  A novelty yes, but if it can track 2 spots (hot and cold) and draw a target over them it should be able to draw a box around X amount of objects above a certain temperature right?

-will
Why draw a box? The red above palette will highlight hot objects perfectly well
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chuck on August 14, 2014, 01:09:26 pm
Hi Gents,

I just received my new E4 and was planning to hack it. But in hidden menu I can’t change USB mode to RNDIS. I’m trying but the setting is not changing from default. Is there any workaround to change it some different way? Thnx.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 14, 2014, 06:08:41 pm
like a fool, I grabbed an E4 2.3.0 firmware on eBay.   It seems there really is no hack for it?  what a bummer.  an expensive bummer.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 14, 2014, 08:06:03 pm
like a fool, I grabbed an E4 2.3.0 firmware on eBay.   It seems there really is no hack for it?  what a bummer.  an expensive bummer.....
I don't think anyone has given it a serious look. It has been reported that a previously 1.22 unit which was upgraded when it was returned was still hackable -  I don't know if anyone has tried the same method  on a factory 2.3 unit. Could be worth investigating....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clavo on August 15, 2014, 12:39:20 am
Just to be able to?  The FLIR automotive cameras choose to draw a box around pedestrians and animals instead of just blurring it with a different color for a reason.  It makes it easier to identify the object.  Being able to change the hot/cold target box to be full screen would be helpful to some as well.  Just because it's not something you personally find useful doesn't mean others wouldn't like the feature.

-will

For example:  Tracking 4 hogs for hunting and having them framed so you can clearly see the object without obscuring it.  A novelty yes, but if it can track 2 spots (hot and cold) and draw a target over them it should be able to draw a box around X amount of objects above a certain temperature right?

-will
Why draw a box? The red above palette will highlight hot objects perfectly well
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 15, 2014, 02:57:31 am
Well,  ive been trying all day with no luck.   Got as far as installing FIF file with zero results.   How does one save a file with \ in the name anyhow?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 15, 2014, 03:03:33 am
like a fool, I grabbed an E4 2.3.0 firmware on eBay.   It seems there really is no hack for it?  what a bummer.  an expensive bummer.....
I don't think anyone has given it a serious look. It has been reported that a previously 1.22 unit which was upgraded when it was returned was still hackable -  I don't know if anyone has tried the same method  on a factory 2.3 unit. Could be worth investigating....


Ahh... Forgot to quote you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jpcjguy on August 15, 2014, 02:02:34 pm
Received mine yesterday new - 959 shipped - last 4 of serial was 1757 - came with 1.22.0
  ;D
Time for the upgrade!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MarkIR on August 15, 2014, 05:47:55 pm
I'm an old house owner that likes new toys and has an ongoing, unsolved water leak ($6k to rebuild a chimney and I just discovered that I still have a problem) .  I also pay 1/2 to 2/3 the price of an E4 every month in energy bills.  I was considering a rental from Home Depot, but am now considering the E4.  I looked at the Flir One as well, but the E4 (hacked) is a lot more interesting as a tool I can use on a regular basis.

Is there still a reliable place to find an E4 that can be modified?  I'm still going through threads to learn more and see if there are any recommended vendors.

Thanks,
Mark

Edit: Found one (Thanks)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blincoln on August 15, 2014, 05:55:18 pm
I wanted to post a long-overdue thank-you to Mike and everyone else involved in making this possible. I'd wanted a thermal imager for literally 20 years (ever since I saw Predator), and you made it affordable to get ahold of one with decent resolution. I've been using mine since March, and it's been outstanding.

I also have a question - maybe this is overkill, but has anyone tried downgrading the firmware by directly connecting to the pins on the flash memory in the device? My understanding is that it's not possible to downgrade the "normal" way, but unless there are physical changes to the hardware, shouldn't it be possible to copy a raw firmware image from e.g. a 1.22 device to a 2.x device by using raw flash memory read/write hardware connected directly to the chip?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on August 15, 2014, 06:27:32 pm
The problem with that is that you lose your calibration, because the old firmware will not be able to read the encrypted files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 15, 2014, 07:39:49 pm
The problem with that is that you lose your calibration, because the old firmware will not be able to read the encrypted files.
Do we know that the cal data is encrypted and/or incompatible with earlier firmware ? Would be easy to test if we can get a new cal file.
May also be interesting to try an old cal file on new FW as that may have been what made it work for that upgraded unit
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 16, 2014, 12:03:13 am
If possible could someone please list the steps necessary to hack a 2.3.0 e4?  Thank you in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 16, 2014, 12:09:39 am
If possible could someone please list the steps necessary to hack a 2.3.0 e4?  Thank you in advance
1) Figure out encryption method
2) Write software to create suitably encrypted config file
3) Enjoy!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on August 16, 2014, 12:29:19 am
I believe the latest version uses 1,024-bit RSA encryption, which can't be broken with current hardware. However, firmware with public-key encryption can be hacked via other means:


Just a short comment regarding hacking a public/private crypto system:

-> find public key stored in device
-> replace public key with own one
-> re-sign all signed stuff
-> have fun

In case the key is hardwired somewhere, then just patch the comparison routine(s).
-> In short: Flir is just setting up a challenge instead of ensuring that their customers get maximum satisfaction.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 16, 2014, 03:52:10 am
I believe the latest version uses 1,024-bit RSA encryption, which can't be broken with current hardware.

If you have any connections at the NSA, you're in... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 16, 2014, 09:26:24 am
I believe the latest version uses 1,024-bit RSA encryption, which can't be broken with current hardware.

If you have any connections at the NSA, you're in... :)
At least we have a very good idea if what most of the plaintext is...

I think the best avenues, in order,  would be to figure out how to make it think it's an old unit that had been updated, downgrade to  older firmware, or make it load a hacked firmware image to bypass checks.
However as there are still a few 1.22 units out there I can't see anyone having a serious go at this for a while. 

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 16, 2014, 10:03:21 am
Let us not forget that firmware 2.3 sits on a 'new' hardware revision platform. It has yet to be established how the new hardware platform differs from the previous revision. If I were FLIR I would have installed hardware based countermeasures to hacking but then we do not know how much effort FLIR put into this.

As I have said before.....if this thread starts detailing hacking of the 2.3 Firmware expect Dave to get a take down notice pretty damned quick  ;)

Maybe move any such discussion to a new 'sacrificial' thread ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 16, 2014, 12:57:22 pm
As I have said before.....if this thread starts detailing hacking of the 2.3 Firmware expect Dave to get a take down notice pretty damned quick  ;)
Why ? On what basis?
There is nothing about the new FW that makes it any more or less legal to play with than the older ones.
All we know for sure about what Flir have done so far is they've had a few ebay listings taken down for possibly dubious claims of misrepresentation, and even that is patchy and they have since been re-appearing (and sometimes disappearing) on a regular basis.
Title: Flir E4 Thermal imaging camera teardown
Post by: Roboss on August 16, 2014, 03:53:19 pm
I agree, details on how to hack 2.3 would be no different than the ones contained in this thread and others about how to hack 1.22

Just because the encryption method has changed? ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 16, 2014, 06:29:05 pm
No worries, but don't ever complain that you were not warned  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 16, 2014, 09:16:14 pm
Watching this thread ever so closely.... Thank you folks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 16, 2014, 09:29:18 pm
Just for a laugh i wrote FLIR and asked for instructions on how to upgrade the E4 to an E8.  I'll be sure to let you know exactly what
 their presumably hilarious refusal is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on August 16, 2014, 09:30:45 pm
Just for a laugh i wrote FLIR and asked for instructions on how to upgrade the E4 to an E8.  I'll be sure to let you know exactly what
 their presumably hilarious refusal is.
:o ::)  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 16, 2014, 09:36:12 pm
I only asked if i can increase the resolution since its almost useless for building assesmemt AND the darn thing has E8 pictures on it already for demo mode.  'hack'  was never mentioned or anything like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on August 16, 2014, 09:55:54 pm
I only asked if i can increase the resolution since its almost useless for building assesmemt AND the darn thing has E8 pictures on it already for demo mode.  'hack'  was never mentioned or anything like that.

I regress then.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 16, 2014, 10:10:25 pm
Its all good.  But seriously, did they put E8 demo pics on the E4 just to mess with me? ... Lol
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MarkIR on August 16, 2014, 11:42:50 pm
A bit off topic (delete if offensive) ...

As some of the recent buyers are aware, FLIR has a promotion where you get some "free" stuff.

Anyone have any experience with the FLIR EX Camera Accessory Kit - It's listed as FLIR EX Camera Accessory Kit (ITC Online Training, Car Charger for FLIR EX-Series, VP50 Voltage Detector/Flashlight.

Other option is a BR80 video borescope.  Is there something useful in the camera accessory kit that I'm missing?  A car charger is "eh" - handy for those actually using it when traveling, but...  a hard case would be nicer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fnordfnordfnord on August 17, 2014, 01:37:33 am
FYI I just purchased an E4 from Tequipment with the 1.22 firmware. The fellow said that all of their stock was fw 1.22. Ordered it Wed. received it Fri. Res & menu hack installed Fri. with no problems. Thought y'all might like to know. Thanks very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on August 17, 2014, 02:25:25 am
As some of the recent buyers are aware, FLIR has a promotion where you get some "free" stuff.

Anyone have any experience with the FLIR EX Camera Accessory Kit - It's listed as FLIR EX Camera Accessory Kit (ITC Online Training, Car Charger for FLIR EX-Series, VP50 Voltage Detector/Flashlight.

Other option is a BR80 video borescope.  Is there something useful in the camera accessory kit that I'm missing?  A car charger is "eh" - handy for those actually using it when traveling, but...  a hard case would be nicer.

Didn't your E4 come packed in a hard case?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MarkIR on August 17, 2014, 02:34:10 am
As some of the recent buyers are aware, FLIR has a promotion where you get some "free" stuff.

Anyone have any experience with the FLIR EX Camera Accessory Kit - It's listed as FLIR EX Camera Accessory Kit (ITC Online Training, Car Charger for FLIR EX-Series, VP50 Voltage Detector/Flashlight.

Other option is a BR80 video borescope.  Is there something useful in the camera accessory kit that I'm missing?  A car charger is "eh" - handy for those actually using it when traveling, but...  a hard case would be nicer.

Didn't your E4 come packed in a hard case?

Hasn't shown up yet (Thursday hopefully).  But Bonus!  I didn't know it came with one!  Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 17, 2014, 03:22:02 am
Anyone have any experience with the FLIR EX Camera Accessory Kit - It's listed as FLIR EX Camera Accessory Kit (ITC Online Training, Car Charger for FLIR EX-Series, VP50 Voltage Detector/Flashlight.

Other option is a BR80 video borescope.  Is there something useful in the camera accessory kit that I'm missing?  A car charger is "eh" - handy for those actually using it when traveling, but...  a hard case would be nicer.

I got the Ex Accessory Package. I needed the 2nd battery, the charger and the soft case. The car charger is just a Flir-branded charger with a micro-USB plug. The desk charger came with a micro-USB wall wart. The VP50 voltage detector and flashlight is kinda "meh", but looks cool and functions decently, and I haven't used the online ITC training yet. All in all, it's a decent kit. I initially looked at getting just the 2nd battery, the desk charger and the case, but the kit was about the same price.

The extra battery + charger is great for extended use. It looks like the ex batteries are single-cell 18650 li-ion, so it's easy to burn through a charge with heavy use. Having the second battery helps a lot. The desk charger has a small footprint. The case is padded, quite rugged and stylish, and it includes a belt loop and shoulder strap.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 18, 2014, 02:06:53 am
Has anyone seen this E4-B? Looks like it has a lower temperature range. http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/ (http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on August 18, 2014, 02:29:22 am
Has anyone seen this E4-B? Looks like it has a lower temperature range. http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/ (http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/)

Thanks - $799.00 (~ 590€) sounds quite reasonable - the joy of software options - produce one, sell it as any imagineable model...
I see they "enhanced" the sensitivity by reducing the fake-noise... seems like somebody is clinging to the sales-manual for market-segmentation :)
I'd be really interested in a real bill of materials & expenses for the production of an Ex-camera.

Regarding the ongoing rumors on HW-changes: wasn't there a FCC website where approved devices/PCBs had to be depicted with PCB mugshots?


PS: As somebody from Europe I still feel ridiculed by Flir as the salesprice after shipping over the Atlantic ocean (US-price) is less than it is "next" to the European factory.
Oh, and of course no attempts to offer any "feebies" for Europe ... pay more, get less ... if only they would sell an E4-B for 800 indial Rupies as well...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 18, 2014, 09:01:24 am

Regarding the ongoing rumors on HW-changes: wasn't there a FCC website where approved devices/PCBs had to be depicted with PCB mugshots?
Yes but I think it's only stuff that uses RF

[/quote]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 18, 2014, 10:33:45 am
Has anyone seen this E4-B? Looks like it has a lower temperature range. http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/ (http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers/)
So just as the number of people interested in hacking the new FW has dwindled, a cheaper version may provide some new blood... :D
Would be interesting to see whether they've actually capped the measurement range, or just not guaranteed the cal accuracy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on August 18, 2014, 02:53:02 pm
Anyone have any experience with the FLIR EX Camera Accessory Kit - It's listed as FLIR EX Camera Accessory Kit (ITC Online Training, Car Charger for FLIR EX-Series, VP50 Voltage Detector/Flashlight.

Other option is a BR80 video borescope.  Is there something useful in the camera accessory kit that I'm missing?  A car charger is "eh" - handy for those actually using it when traveling, but...  a hard case would be nicer.

I got the Ex Accessory Package. I needed the 2nd battery, the charger and the soft case. The car charger is just a Flir-branded charger with a micro-USB plug. The desk charger came with a micro-USB wall wart. The VP50 voltage detector and flashlight is kinda "meh", but looks cool and functions decently, and I haven't used the online ITC training yet. All in all, it's a decent kit. I initially looked at getting just the 2nd battery, the desk charger and the case, but the kit was about the same price.

The extra battery + charger is great for extended use. It looks like the ex batteries are single-cell 18650 li-ion, so it's easy to burn through a charge with heavy use. Having the second battery helps a lot. The desk charger has a small footprint. The case is padded, quite rugged and stylish, and it includes a belt loop and shoulder strap.

Just to avoid confusion, the kit you bought is not the same as one that's part of the promotion.  The free kit doesn't include the battery, desk charger, or soft case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 18, 2014, 02:58:52 pm
Just noticed tequipment are listing the E4 as "clearance - only 1 left", so I wonder if the E4-B is replacing it.

Maybe it has a Lepton inside now..?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 18, 2014, 04:08:40 pm
Just to avoid confusion, the kit you bought is not the same as one that's part of the promotion.  The free kit doesn't include the battery, desk charger, or soft case.

Oh, that's too bad. The extra battery + charger + case are what make the whole thing worthwhile. Wouldn't be very useful without the good stuff. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 18, 2014, 04:14:00 pm
+1 on the external charger, spare battery and soft case. These are very useful accessories.

Note: I have the soft case for the Ex series and another for the Exx series. The Exx soft case suits me better than the Ex case as the E4 is not such a tight fit and easier to insert and remove.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on August 18, 2014, 04:51:14 pm
Even though the limited temperature range of the FLIR E4-B makes it less useful to anyone but building inspectors, it just shows how fast the prices of thermal cameras are dropping.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 18, 2014, 07:27:50 pm
The prices of thermal imaging technology has dropped significantly in terms of availability of a technology. I recently purchased an NEC AVIO thermal camera for GBP720 on e*ay. It was virtually new condition and was originally purchased in October 2002. To give you an idea of how prices have dropped, here is the price list for that camera and accessories:

AVIO TH series thermal Camera     Euros 40,000
AVIO Close up lens FL: 38mm        Euros 12,000
AVIO High Temp Filter (2000C)      Euros   5,600
AVIO IEEE1394 interface               Euros   5,600
AVIO/Goratec Software                 Euros   3,500
AVIO Battery (Li-Ion)                    Euros       90
Annual warranty fee                      Euros  3,500

The AVIO TH series camera is an aircraft aluminium 'camcorder format' shell built around a military grade Boeing micro-bolometer thermal imaging core. A superb set of Germanium auto focus optics feed the image to the microbolometer.....quality built around quality  :)

What you see above is the cost of professional thermal imaging equipment. FLIR can be even more expensive than AVIO for such equipment.

I know that people want more affordable consumer grade thermal cameras and I am all in favour of such. As the technology has developed it has dropped in price. But please do not think that the FLIR E4 is not already good value for money. It is a bargain when compared to the prices of professional equipment, and even more so when upgraded to 320x240 resolution. My FLIR PM' and AVIO TH' cameras have the advantage of 'bullet proof' build quality, accuracy and precision, combined with 320x240 resolution at 60fps. That is what you pay for. The casual user can often accept a lesser specification....hence the arrival of the FLIR Ex series.  FLIR's introduction of the LEPTON core will hopefully do wonders for the budget thermal camera market place, but at low resolution only. I am looking forward to affordable thermal CCTV cameras as they offer an excellent intruder detection capability and are less easily fooled than conventional visible/IR imaging technology. A $400 thermal CCTV camera would be great, even at 80x60 resolution.

Will higher resolution cameras become available soon ? I hope so, but the realist in me thinks it unlikely due to the tight control companies like FLIR and Raytheon have over the market place. It may change, but the Chinese do not seem to be producing cheap sensor arrays as yet. There is also the unavoidable production costs of such and the yield % of good sensor arrays. They may be an expensive device, no matter who makes it. These are not relatively simple CCD chips after all.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 18, 2014, 08:15:51 pm
FLIR's introduction of the LEPTON core will hopefully do wonders for the budget thermal camera market place, but at low resolution only. I am looking forward to affordable thermal CCTV cameras as they offer an excellent intruder detection capability and are less easily fooled than conventional visible/IR imaging technology. A $400 thermal CCTV camera would be great, even at 80x60 resolution.
Flir have already announced a Lepton based security camera - not much info yet ISTR price was around $700
I'm sure lots of other people will be making security cams base on it
Quote
Will higher resolution cameras become available soon ? I hope so, but the realist in me thinks it unlikely due to the tight control companies like FLIR and Raytheon have over the market place. It may change, but the Chinese do not seem to be producing cheap sensor arrays as yet. There is also the unavoidable production costs of such and the yield % of good sensor arrays. They may be an expensive device, no matter who makes it. These are not relatively simple CCD chips after all.
I think the main barrier to cheap hi-res is cheap optics - the semiconductor industry has shown that if you make enough of something the price trends towards zero.
I doubt we'll see more than around 320x240 mainstream anytime soon as that's adequate for most uses. There's also an ITAR limit at 111K pixels, which may explain Opgal's 384x288 (=110592) resolution
It will be interesting to see if developments like Heimann's 82x62 thermopile sensor, and the MEMs based sensors from  Alps  compete with Lepton in a race to the bottom of the 80x60 market
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jjmmss00 on August 19, 2014, 12:00:16 pm
There was an article today in the Wall Street Journal, that Flir has a $349 cover for an iPhone that turns it into an thermal imager.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 19, 2014, 02:23:27 pm
There was an article today in the Wall Street Journal, that Flir has a $349 cover for an iPhone that turns it into an thermal imager.
really?  who knew...? :palm:

The only real news in that article was this
Quote
Meanwhile, a group of industry veterans at a startup called Seek Thermal this fall plan to begin selling an add-on camera for smartphones for about $100 less.

new thread : https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/ (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 20, 2014, 08:51:35 pm
+1 on tequipment having 1.22 firmware e4s
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on August 21, 2014, 11:38:44 pm
Just noticed Tequipment are listing -B versions of the E4,5 and 6

I wonder if this is just a case of reducing cost by a shorter calibration for the narrower temp range?
Would be interesting to know if these will even attempt to display temps outside their reduced range
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 22, 2014, 01:25:30 pm
if you do order from tequipment make sure you choose the included free 2-day shipping at checkout.   otherwise you get what's looking like 6-day free ground that is automatically generated at checkout.
and the free boroscope or accessory kit is a form you download,  mine was pdf from amazon.   not good for ebay sales.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JustMe on August 24, 2014, 05:58:34 pm
Can anyone advise any online sellers (other than eBay) that offer the Flir E4 with firmware version 1.22?  Looks like tequipment is now selling version 2.3.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kq702 on August 24, 2014, 07:46:57 pm
Hi all, I am new here but have read lots of posts. I purchased the e4 and got 1.2L with software version 2.1.0. Does that mean my unit does not have a solution to convert it to the e8? after reading lots of pages I am not clear if the hack will work with my unit or not, please advise
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 24, 2014, 11:03:06 pm
Hi all, I am new here but have read lots of posts. I purchased the e4 and got 1.2L with software version 2.1.0. Does that mean my unit does not have a solution to convert it to the e8? after reading lots of pages I am not clear if the hack will work with my unit or not, please advise

Nothing yet for FW v2+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mosaic on August 25, 2014, 04:01:26 pm
Can anyone advise any online sellers (other than eBay) that offer the Flir E4 with firmware version 1.22?  Looks like tequipment is now selling version 2.3.

I just rec'd my E4 from TEquipment:
Model E4 , 1.1L
1.22.0 firmware  8)

Modded to E8 on first try...10 minutes using this video
https://www.youtube.com/watch?v=oXJYv_MxIHw (https://www.youtube.com/watch?v=oXJYv_MxIHw)

Everything works!

Thanks much! ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kq702 on August 26, 2014, 02:01:38 am
Hi all, I am new here but have read lots of posts. I purchased the e4 and got 1.2L with software version 2.1.0. Does that mean my unit does not have a solution to convert it to the e8? after reading lots of pages I am not clear if the hack will work with my unit or not, please advise

Nothing yet for FW v2+

thanks for the update
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Roboss on August 26, 2014, 02:09:40 pm
Once again another huge thanks to @Marphy for the program and all who figured out the hack.

Successfully deflowered my 1.22.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 27, 2014, 08:43:42 pm
just received a 1.22 from tequipment so they may still have some.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on August 28, 2014, 05:58:49 pm
just received a 1.22 from tequipment so they may still have some.

  When did you order it and to where and I am thinking to order E4 from Tequipemnt ship to Canada?  If anyone know any seller in Canada?

ps: anyone know if this one on http://www.amazon.ca/gp/product/B00FKD9DSW/ref=ox_sc_act_image_1?ie=UTF8&psc=1&smid=A3DWYIK6Y9EEQB (http://www.amazon.ca/gp/product/B00FKD9DSW/ref=ox_sc_act_image_1?ie=UTF8&psc=1&smid=A3DWYIK6Y9EEQB) can be hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 28, 2014, 06:08:18 pm
Received a 2.3 from TEquipment yesterday so I must have just missed it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on August 28, 2014, 06:45:02 pm
If anyone know any seller in Canada?
[/quote]

I bought mine though shopflir.ca. It actually came from Optimum Energy Products Ltd out of Calgary but that was quite a while back and have no idea if they have new stock or not. Good luck!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 28, 2014, 06:48:56 pm
just received a 1.22 from tequipment so they may still have some.

  When did you order it and to where and I am thinking to order E4 from Tequipemnt ship to Canada?  If anyone know any seller in Canada?


last week.   I dont know about its export rules but if you call the company they can tell you that and the firmware version
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on August 28, 2014, 06:56:50 pm
If anyone know any seller in Canada?

I bought mine though shopflir.ca. It actually came from Optimum Energy Products Ltd out of Calgary but that was quite a while back and have no idea if they have new stock or not. Good luck!
[/quote]

  yes, shopflir.ca had in stock like 10+ for 995.00 Cdn and amazon.ca is selling 895.00 Cdn and I like amazon.ca price but I had never order anything from amazon.ca.   I am thinking go for amazon.ca price.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KrowBar on August 29, 2014, 03:28:33 am
Got my Amazon order today with firmware 2.3.  Gonna pay the 4 bucks to return it.  Lost sale because of recent meddling by FLIR.  Would have bought one if I could get quality resolution for $1k, but not getting any kind of TIC in near future now.  Suck it!   Or take a better look at your sales data as things cool off now and consider opening back up the door.  Learn from the CPU folks.  An overclockable mid-range product gives better overall sales and increased market share even if a few high margin sales are lost as a result.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on August 29, 2014, 04:10:27 am
A few months ago, even a 80 x 60 resolution for $995 was a really good deal, but I guess the FLIR One (and future competing products) changes all that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cdmanii on August 29, 2014, 07:18:54 am
Hello, I have an awesome camera, FLIR E40 (without MSX).
Recently, through the youtube and the web site below, I noticed some important fact that is, the FLIR E40 can be utilized or changed to E60.

Flir E4 320x240 Resolution Hack (https://www.youtube.com/watch?v=rYd8Jv8Kz3k#ws)

I have not only seen that video clip several time, but tried to connect computer to FLIR E40 by though USB cable.
However, the explanation being on that video clip made by use of FLIR E4 and therefore, the last process does not exist.
Also, I have seen some articles mentioning about the way of modification with configuration file.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/2820/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/2820/)
but I don’t totally understand it because of the explanation saying just simple configuration so that it cannot be applicable to my camera.


ps

i want to download "flir e60 conf.cfg" where is it ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: courtneyssoul on August 29, 2014, 08:55:16 pm
If anyone know any seller in Canada?

  yes, shopflir.ca had in stock like 10+ for 995.00 Cdn and amazon.ca is selling 895.00 Cdn and I like amazon.ca price but I had never order anything from amazon.ca.   I am thinking go for amazon.ca price.

I would take a chance that amazon.ca had new vintage stock for $895CDN but when I tried to order they indicated they cannot ship this item to my address in the United States.  Does Canada classify the USA as a terrorist country?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 30, 2014, 05:43:11 am
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on August 30, 2014, 05:57:50 am
If anyone know any seller in Canada?

  yes, shopflir.ca had in stock like 10+ for 995.00 Cdn and amazon.ca is selling 895.00 Cdn and I like amazon.ca price but I had never order anything from amazon.ca.   I am thinking go for amazon.ca price.

I would take a chance that amazon.ca had new vintage stock for $895CDN but when I tried to order they indicated they cannot ship this item to my address in the United States.  Does Canada classify the USA as a terrorist country?

Hi,  no idea why you couldn't get it from amazon.ca  site and stock is low from 10 down to 7 by now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 30, 2014, 04:20:19 pm
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Yes you messed up the config file. Most likely something with the CRC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 30, 2014, 04:59:22 pm
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Yes you messed up the config file. Most likely something with the CRC

 
thanks a lot for getting back.  so do I wipe the device with factory reset and start over?
thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 30, 2014, 05:00:21 pm
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Yes you messed up the config file. Most likely something with the CRC

also am I correct in thinking that to enable zoom and PIP I have to modify a couple lines of the CRC file?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on August 30, 2014, 05:00:42 pm
I would take a chance that amazon.ca had new vintage stock for $895CDN but when I tried to order they indicated they cannot ship this item to my address in the United States.  Does Canada classify the USA as a terrorist country?

No, but Amazon makes US customers buy from amazon.com.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 30, 2014, 05:10:32 pm
 O0 O0 O0 O0 O0 O0

has anyone located a source for 3d printed TELEPHOTO lens for the E4?
(US supplier or will ship to the US)

 |O |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on August 30, 2014, 06:24:30 pm
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Yes you messed up the config file. Most likely something with the CRC

also am I correct in thinking that to enable zoom and PIP I have to modify a couple lines of the CRC file?
Post or PM your original CFC and I will send you the correct config.cfc file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 30, 2014, 10:53:59 pm
ok... so do I understand correctly that even if the resolution is higher and there are more colors,  if there's no MSX or crosshairs,  i did something wrong?

1.22 with hack + menu 3 beta zip
Yes you messed up the config file. Most likely something with the CRC

also am I correct in thinking that to enable zoom and PIP I have to modify a couple lines of the CRC file?
Post or PM your original CFC and I will send you the correct config.cfc file.


thanks very much!
I fooled around a little bit with the CRC file and got MSX to work, but still no PIP or zoom.....  :'(
and,  honestly,  I prefer thermal to MSX,  but I haven't tried it in gray which seems appropriate for night walking moreso than rainbow.
saving a separate jpg file shows only a black space and nothing is saved as a separatr photo from the IR image.   is this also a CRC issue?
is 'arctic'  the same as moisture?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on August 31, 2014, 05:30:47 pm
Have E40, oops, I meant E60 as well :)

No MSX for me as well: unfortunattly can't be done via hack. Though what you get is a higher resolution (320x240) as well as ThermalFusion option (with E40 you only have PiP).

What I did (check like 10-20 pages back for my posts and files) is that I took files, that one published (from E60), changed serial to mine, calculated CRC using CRC01.exe and enter it as described.

With E40 there's even nicer approach - use WLAN and ftp to access files. No need for USB & RDNIS! :)

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on August 31, 2014, 10:10:25 pm

I am completely unable to connect through filezilla,  winscp,  or smartftp.   I change networks,  disable adapters and Ive tried all usb modes but nothing.   password and user name are correct- I've tried all the different host names.
Ipconfig /all shows me IPv that is not 192.168.0.2 and nothing for a defauly gateway (for flir)
Any help would be greatly appreciated.

This is after having been able to load a crc file previously,  so the drivers are (I think) correct.


the TIC shows up in FLIR TOOLS under instruments as well as a video feed in FLIR Player, but when I click IMPORT there is no camera/sd card, no matter what rain dances I do.  Not to mention no FTP in any form....
any help?
windows 8.1 x64   current FLIR drivers/tools/player 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on September 01, 2014, 07:10:06 am
I assume you are working through USB.
Did you switch to RDNIS mode (hidden menu)?
Try also disable Windows firewall ... Sometimes it's a pain in the ass ...
What about accessing it through WLAN?

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 01, 2014, 12:55:22 pm
Yes rndis,  disabled firewall,  all other networks..... Everything.
How does one use wlan to connect?  I dont ever see a default gateway or connected network with the flir e4......
I actually got ftp to work one time last night after 10 hours at it,  but no connection since.  I will be blowing off any duties I have today to spend another 10 hours becauae I think I hace the right cfc file finally....
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on September 01, 2014, 01:34:02 pm
Hmm, you have E4 or E40? (I was thinking of the second)
I assume you already try hard reset few times? :)

If you have E40, you connect it to your WLAN through Settings, then just check on router for camera's IP and establish FTP connection to it.

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 01, 2014, 02:46:42 pm
Thanks for the help.  Its an e4 though.
I have tried resets.   Powering off,  unplugging the cable,  unplugging the battery,  reinserting the battery and then powering back on when the cable is plugged back into the usb port.  Different usb ports or the same,  it doesn't matter,  no ftp.
I am using a usb tether to get networking for filezilla and winscp.   I am thinking that might be an issue,  and the couple of times I was able to connect was purely by chance.
ThermaCam shows me its connecting,  and the 2 times I did connect ThermaCam showed me "ircam5" and "192.168.0.2" it was like magic had just occurred.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 01, 2014, 06:39:23 pm
I finally got it.
100 laptop/modem/TIC restarts for 1 ftp session,  but I reinstalled the e4 config and then used TIconfig.exe to upload the e8 config and menu hack.   Works beatifully and after seeing thr results there's no question the hours,  days,  and even weeks I spent on this project was all worth it.
I feel like I just had a baby.

Thanks to everybody for the help.
I have learned a lot through the difficult process,  which seemed so easy before I actually tried it.....  :)
I cant find the donation link on this page.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on September 01, 2014, 08:43:04 pm
Congrats!
Know this feeling very well!!! :) :) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 01, 2014, 09:11:56 pm
Congrats!
Know this feeling very well!!! :) :) :)

A big 'ol :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on September 02, 2014, 01:37:38 am
conf files
Sorry wasn't able to get on lately, hope this helps.
RENAME IT TO conf_new.cfc (site wouldn't let me upload a .cfc) and upload to camera. You should see all the features.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yyao on September 02, 2014, 02:53:06 am
I connected the camera as RNDIS  using  flirs tool FLIRInstallNet  and Set_RNDIS_temporary.fif  from this forum.
I downloaded the file conf.cfg from my flir e4 using FileZilla.   (ip: 192.168.0.2  user: flir  pass: 3vlig  )
In Notepad I've changed:
". caps.config.image.settings.IRwidth int32 80
. caps.config.image.settings.IRheight int32 60 "
to
". caps.config.image.settings.IRwidth int32 320
. caps.config.image.settings.IRheight int32 240"
I've Fixed checksum using crc01.exe ( tool from this forum).

I switched the original file. After the restart i have 320x240 resolution in thermovision.

My conf.cfg was not encrypted.
My camera info: 
Model:   E4 1.1
serial:  639xxxxx
part number: 63901-0101
software  2.3.0

Funny thing... My caps.config.image.settings.IRwidth and IRheight was already set to 320x240 when I opened FlashFS/system/service/appcore.d/config.d/conf.cfg. I still get 80x60 resolution though.

Could you provide more detail on how you went about doing this?

Model:   E4 1.1L
Serial:  639xxxxx
Part number: 63901-0101
software  2.3.0
Title: Flir E40 Thermal imaging camera teardown
Post by: cdmanii on September 02, 2014, 03:06:46 am
I have a camera that is FLIR E40 (without MSX).

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/2835/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/2835/)
Read through the article above, I was able to see that the FLIR E40 can be utilized as E60.

As it turned out, just two files are changed, those are conf.cfg and ui.cfg.
However, there was no changes in resolution, rather doesn’t work, display JPEG files. Was I wrong?
Despite the fact that I fixed both of them, one of the menus of controlling “Spot” disappeared.
How can I fix it. Is there any proper way to do it?

And further, a key question, that is about connecting to the FTP.
For FTP connection as RNDIs modification on E40, I knew that press the menu button, then “play” button for 10 seconds.

Is it a correct method to do it?

If you have a solution, please let me know.     


Model : Flir E40 (without MSX)
Serial : 4903XXXX
Part Number : 49001-2001
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 02, 2014, 03:52:24 am
conf files
Sorry wasn't able to get on lately, hope this helps.
RENAME IT TO conf_new.cfc (site wouldn't let me upload a .cfc) and upload to camera. You should see all the features.

Thanks very much for the help.  I really appreciate it.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 02, 2014, 05:29:16 am
You hacked a 2.3.0 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 02, 2014, 05:45:27 am
You hacked a 2.3.0 ?

  no hacked yet for 2.3.0 fw.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on September 02, 2014, 06:49:50 am
@cdmanii
I replaced 4 files, though serial number was only in 2 if I remember correctly.

JPEGs always (!) have 320x240 resolution, though you can see from the images comparision, that one image is way more "grainy" than the other.

What I was doing wrong is, that I only renamed original files (and add modified ones), not deleting them. As Flir uses some stupid system (if I remember correctly it looks by alphabet and looking for i.e. 15th file), it took wrong file.

Another stupid thing was, that I calculated CRC wrong for one file once (all files have same name, just are put in different directories).

About RDNIS you are right (settings menu, where version is displayed, then RIGHT (not play if I remember well!) button for 10 s), but with E40 you actually don't need it! Just connect camera to your home WLAN and then access to it via FTP.

Simplest "check" if you did E60 out of E40 is, that you check if "Thermal fusion" option is avalible. And offcourse in menu.


Hope this helps!

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on September 02, 2014, 11:23:03 am
O0 O0 O0 O0 O0 O0

has anyone located a source for 3d printed TELEPHOTO lens for the E4?
(US supplier or will ship to the US)

 |O |O

Do you have the file?  I could look at it and maybe print it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 02, 2014, 12:28:40 pm
You hacked a 2.3.0 ?

  no hacked yet for 2.3.0 fw.

Read post #5455
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 02, 2014, 01:33:32 pm
You hacked a 2.3.0 ?

  no hacked yet for 2.3.0 fw.

   I might get my ordered for Flir E4 this week and dan Amazon.ca free 2 days ship look like a week to ship out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on September 02, 2014, 04:40:44 pm
The price of the FLIR E4-B has gone up to $849: http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers (http://www.tequipment.net/FLIR/E4-B/Building-and-Industrial-Thermal-Imagers)

Perhaps the $799 price was part of an introductory sale or something. But what's strange is that one part of the website says the maximum temperature that the E4-B can measure is 100° C, while another part says it's 150° C. Anyone know what's up?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 02, 2014, 08:40:09 pm
Has anyone figured out how to remove the FLIR logo from images post Menu3 hack?
I am amazed I can import images into FLIR tools using MSD&UVC.   I can even load them onto my phone and adjust the pallette.  Incredible. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aarnulfo on September 02, 2014, 09:57:55 pm
My E4 1.22 got stolen :'( :'(
Just bought a new one but came with the 1.23..
I read there is not hack yet, do you guys think that there will be one soon?

Thanks for the incredible job you have done.. i really enjoyed my old E4 upgraded to E8, now is very hard to go back.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 02, 2014, 11:35:21 pm
My E4 1.22 got stolen :'( :'(
Just bought a new one but came with the 1.23..
I read there is not hack yet, do you guys think that there will be one soon?

Thanks for the incredible job you have done.. i really enjoyed my old E4 upgraded to E8, now is very hard to go back.

  Someone did E4 2.3.0 FW hacked and look back few posts.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on September 03, 2014, 12:23:05 am
I think that was only for an old 1.1L device that was running the new firmware. The new 1.2L hardware probably contains additional countermeasures to prevent the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 03, 2014, 01:00:48 am
  that mean less chance to get board with 1.1L now.
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on September 03, 2014, 01:35:37 am
My E4 1.22 got stolen :'( :'(
Just bought a new one but came with the 1.23..
I read there is not hack yet, do you guys think that there will be one soon?

Thanks for the incredible job you have done.. i really enjoyed my old E4 upgraded to E8, now is very hard to go back.
1.23??? Are you sure you did not get 2.3?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aarnulfo on September 03, 2014, 05:40:44 am
My E4 1.22 got stolen :'( :'(
Just bought a new one but came with the 1.23..
I read there is not hack yet, do you guys think that there will be one soon?

Thanks for the incredible job you have done.. i really enjoyed my old E4 upgraded to E8, now is very hard to go back.
1.23??? Are you sure you did not get 2.3?
My mistake.. it is a 2.3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cdmanii on September 03, 2014, 08:51:51 am
thank you very much~

but i can not find E60 conf.cfg and ui.cfg

Do you have FLIR E60 Origin conf.cfg and ui.cfg file ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 03, 2014, 12:50:36 pm
O0 O0 O0 O0 O0 O0

has anyone located a source for 3d printed TELEPHOTO lens for the E4?
(US supplier or will ship to the US)

 |O |O

Do you have the file?  I could look at it and maybe print it.


I will see if it exists
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on September 03, 2014, 03:11:09 pm
Do you have FLIR E60 Origin conf.cfg and ui.cfg file ?

Here's all you need in specific folders. Do mind, that you have to change SNs and calculate and write CRC01.

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cdmanii on September 03, 2014, 08:40:48 pm
thank you very much !~
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 03, 2014, 08:59:15 pm
   Hi guys, I just got my ordered from amazon.ca few minutes and my FW is 2.1.0 + E4 1.2L.  I got lucky on old batch and amazon.ca still got 6 let when I was ordering at 10 let.

ps: what is easy way to to hack it or I will try to read more before do anything.

Thank all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 03, 2014, 09:05:18 pm
FW 2.1 and 2.3 have the same anti hacking protection. You needed FW 1.22 or earlier.

There is no hack for 2.x firmware in circulation at this time and I don't expect one any time soon.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 03, 2014, 09:15:11 pm
  I was thinking FW 2.1.0 with old board 1.2L that hackable but I am now confused.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 03, 2014, 09:19:49 pm
No firmware after 1.22 is hackable at this time. FW2.1and 2.3 with Hardware 1.2L are the protected releases that use encryption to prevent the hack.

Sorry it isn't better news for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 03, 2014, 09:24:28 pm
  I am understanding now and thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on September 03, 2014, 09:30:54 pm
Even signed firmware can theoretically be hacked:


Just a short comment regarding hacking a public/private crypto system:

-> find public key stored in device
-> replace public key with own one
-> re-sign all signed stuff
-> have fun

In case the key is hardwired somewhere, then just patch the comparison routine(s).
-> In short: Flir is just setting up a challenge instead of ensuring that their customers get maximum satisfaction.

It's just that nobody has implemented the method yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 04, 2014, 12:58:00 am
  I think one can hacked but posting it that other problem and someone dont want to deal with Flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 06, 2014, 01:37:20 am
Im thinking about removing the display from my E4 (wanna use it just as a small thermocam for my pc, so no need for the bulky display). Can the removement of the display be problematic on the electronic side? As is it just a data-bus to the display im assuming it should be no problem, as long as the bootloader doesnt care if the display isnt there.

Title: Need help, camera is crashing all the time
Post by: Pinkus on September 06, 2014, 09:05:47 am
Hey guys,
I need some help: I did hack the E4 with Tauchers beta 2 and it was working fine, I then installed the beta 3 including zoom and including the files  MP4.dll und Mediaserver.exe. It looked good after a first glance and thus I disabled RNDIS and set it back to normal USB mode.

But now, the camera is crashing every time on restart. Because of this I do not have any access to the USB menu (to set it back to RNDIS) anymore as it is crashing before I can go there (Appcore.exe). :scared:
What can I do? There might be something buried in this thread, but you know how exhausting 365 pages can be.
Thanks!!

-Edit: complete backups of original and of the working hack (Tauchers beta 2) are available of course.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 06, 2014, 10:19:12 am
Im thinking about removing the display from my E4 (wanna use it just as a small thermocam for my pc, so no need for the bulky display). Can the removement of the display be problematic on the electronic side? As is it just a data-bus to the display im assuming it should be no problem, as long as the bootloader doesnt care if the display isnt there.
Shouldn't be a problem - it's a controllerless type so the main board likely won't notice. Without the display it would probably be possible to power it from USB but you may need some fiddling to avoid confusing the power management /charging system.
One problem is that you still need the frame to hold everything together, though if this is a permanent mod you could cut it down or make a substitute.
If you were doing this from scratch, the therm-app might be a better option , though at the moment it only supports Android.

One thing you may want to check though is the backlight supply- I'm assuming it's a step-up, and though these typically have protection against  the overvoltage that would otherwise occur if the load is disconnected, it may not be a good idea to run it continuously like this. Shouldn't be hard to find the backlight supply & disable it, e.g. by removing /disconnecting the inductor
Title: Re: Need help, camera is crashing all the time
Post by: Taucher on September 06, 2014, 10:30:11 am
Hey guys,
I need some help: I did hack the E4 with Tauchers beta 2 and it was working fine, I then installed the beta 3 including zoom and including the files  MP4.dll und Mediaserver.exe. It looked good after a first glance and thus I disabled RNDIS and set it back to normal USB mode.

But now, the camera is crashing every time on restart. Because of this I do not have any access to the USB menu (to set it back to RNDIS) anymore as it is crashing before I can go there (Appcore.exe). :scared:
What can I do? There might be something buried in this thread, but you know how exhausting 365 pages can be.
Thanks!!

-Edit: complete backups of original and of the working hack (Tauchers beta 2) are available of course.

#1 Rule: Check free space on the device
#2 Remove Battery and insert it right back - try booting then.

If nothing goes, try re-flashing with old/original firmware - it might need some tweaking of the update-commands
then repeat the mods - the DLL and mediaserver.exe are just for reverse-engineering guys and were an attempt to get video functionality (which clearly exists at some point).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on September 06, 2014, 10:58:38 am
Thanks taucher,
I am now about creating a new FIF file where I am deleting the files I added since the last backup and replacing all changed files with the files from the latest (working) update. I am crossing my fingers.
I will report back if everthing works out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 06, 2014, 02:15:38 pm
Thanks for the answer Mike! It was planned from the start to hack the E4 for the resolution/palettes and then cut it down to fit on my stereo-camera. At the time of the purchase i didnt knew about ThermApp, but it costs 1k and also has only the E4-resolution and is no UVC-device like the FLIR, so the FLIR is still more suitable for me.
As you mentioned i want to use only USB to power the FLIR, so i taught about the following:

FLIR is connected to USB, also a separate DCDC-converter (5V to 5V, isolated) gets the 5V from the USB, behind the converter is a standard voltage regulator (LM317T for example) including the backcurrent-protection-diode, which sets the converter/regulator-output-voltage to the maximum battery voltage. This voltage is fed into the battery-port to simulate a charged battery.   
Any thoughts about that?

As you said im gonna need to disable the backlight-stepup-converter. Also i want to use the commando-UART on the pcb to command the FLIR over RS232-TTL (i assume TTL), instead over Telnet. Do you have a drawing/plan where those UART-pins are on the pcb?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 06, 2014, 02:42:06 pm
Thanks for the answer Mike! It was planned from the start to hack the E4 for the resolution/palettes and then cut it down to fit on my stereo-camera. At the time of the purchase i didnt knew about ThermApp, but it costs 1k and also has only the E4-resolution and is no UVC-device like the FLIR, so the FLIR is still more suitable for me.
As you mentioned i want to use only USB to power the FLIR, so i taught about the following:

FLIR is connected to USB, also a separate DCDC-converter (5V to 5V, isolated) gets the 5V from the USB, behind the converter is a standard voltage regulator (LM317T for example) including the backcurrent-protection-diode, which sets the converter/regulator-output-voltage to the maximum battery voltage. This voltage is fed into the battery-port to simulate a charged battery.   
Any thoughts about that?

As you said im gonna need to disable the backlight-stepup-converter. Also i want to use the commando-UART on the pcb to command the FLIR over RS232-TTL (i assume TTL), instead over Telnet. Do you have a drawing/plan where those UART-pins are on the pcb?

UART id on the FFC connector - pinouts here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316424/#msg316424 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg316424/#msg316424)

A 317 regulator may not do the job as it won't be expecting voltage back into it. Maybe if you set the voltage at 4.2-4.3 to simulate a fully charged battery so it never tries charging. Suggest you take a look at the datasheet of the battery manager to see how to go.
Somethting that would be worth a try is to see if it will run from USB power with the battery dicsonected.
one issue you may have is that it needs the power button closing to start - not sure if you can wire this permanently closed without side-effects.
Fortunately the on/off switch contact is on the FFC cable along with the Uart - I suspect they also use this during test.
There is also a power pin on the FFC, so it may be possible to supply power (4.2, maybe even 5V - maybe use 5Vusb via a 1N4001 to drop voltage a bit. ) to this - again this may be for powering it during test/cal.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Megla on September 08, 2014, 07:48:06 am
I have been wondering if it is possible to change the lense on the flir e4 cammera for na narower field of view (im using it for airsoft games and i need range :D)
i was looking the lenses for therm app 19mm it should be for a longer ir range ?
and if any1 has tryed something simmilar ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 08, 2014, 09:49:38 am
I have been wondering if it is possible to change the lense on the flir e4 cammera for na narower field of view (im using it for airsoft games and i need range :D)
i was looking the lenses for therm app 19mm it should be for a longer ir range ?
and if any1 has tryed something simmilar ?
The problem is the mount is rather constrained in terms of space, so choice of lens is limited.
For a narrower FOV you may need a larger lens to get sufficient signal. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Megla on September 08, 2014, 11:43:43 am
Thank you for the reply !

I am aware that i need a bigger lense for a narower field of wiew therefore i have been looking at these lenses
http://therm-app.com/product/6-8mm-lens/ (http://therm-app.com/product/6-8mm-lens/)
this one 6.8mm looks simmilar as in a e4 device and has a simmilar field of view
http://therm-app.com/product/19mm-lens/ (http://therm-app.com/product/19mm-lens/)
and this one has a bit bigger lense and a narower field of view (actualy the housing of a lense is similar but the outer lense seems to be bigger) i am only worried about the threads since on the first look they do not seem to be the same size and theese lenses are made for therm app thermal device and i havent seen the thread specs anywhere (they appear to be bigger) :/ i am hoping on implementing something simmilar in to an e4 device without significant housing modifications

https://www.youtube.com/watch?v=x48-uLMjROY (https://www.youtube.com/watch?v=x48-uLMjROY)
this is my video of a test at 150m of a mansize target... if he would be in the woods i would not be able to pick him up and the airsoft gun ranges are at 130m (heavly modified)

plus i havent found anny germanium based lenses yet to be a drop in for e4 :D there are for ex0 series....

oh and i appolagise for my bad eanglish :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 08, 2014, 12:53:03 pm
Thank you for the reply !

I am aware that i need a bigger lense for a narower field of wiew therefore i have been looking at these lenses
http://therm-app.com/product/6-8mm-lens/ (http://therm-app.com/product/6-8mm-lens/)
this one 6.8mm looks simmilar as in a e4 device and has a simmilar field of view
http://therm-app.com/product/19mm-lens/ (http://therm-app.com/product/19mm-lens/)
and this one has a bit bigger lense and a narower field of view (actualy the housing of a lense is similar but the outer lense seems to be bigger) i am only worried about the threads since on the first look they do not seem to be the same size and theese lenses are made for therm app thermal device and i havent seen the thread specs anywhere (they appear to be bigger) :/ i am hoping on implementing something simmilar in to an e4 device without significant housing modifications

https://www.youtube.com/watch?v=x48-uLMjROY (https://www.youtube.com/watch?v=x48-uLMjROY)
this is my video of a test at 150m of a mansize target... if he would be in the woods i would not be able to pick him up and the airsoft gun ranges are at 130m (heavly modified)

plus i havent found anny germanium based lenses yet to be a drop in for e4 :D there are for ex0 series....

oh and i appolagise for my bad eanglish :D
As far as I know the E4 does not use a standard size lens mount, so for any alternative lens you will probably need to improvise a mount
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on September 08, 2014, 04:43:24 pm
I have been able to locate a Flir E4 in stock with serial number: 6392.76xx.

I would really appreciate if someone can confirm via their own serial number if this is a 1.22.0 firmware or not.  :-*

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rozzone on September 08, 2014, 10:14:17 pm
I have 6392 75XX and it is 1.22.  It was made in estonia and its calibration date was 14 may.

Does this help?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rozzone on September 08, 2014, 10:32:28 pm
Couple of questions.... Live streaming of a modified E4.  I used Marphys EXE - many thanks Marphy and all the rest of you.  Now I don't seem to be able to activate live streaming via flir tools, VLC or the Flir Camera Player.  In FLIR tools, I connect to live streaming, it works away for about 3 minutes and then returns a CAMERA_RTREE_CONNECT_ERROR. :-//

Also, I am interested in developing a telephoto converter for this camera.  Has anyone worked out what the thread for the std E4 lens mount is?  I might see if I can work out a connector that joins the therm app 19mm lens to the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on September 08, 2014, 10:42:12 pm
Thank you Rozzone. A 6392.75xx sure increases probability that the 6392.76xx is also a firmware 1.22.0.

Would feel 100% certain if someone could verify a serial 6392.77xx or later as firmware 1.22.0. Anyone?

OK, double kisses this time:  :-*  :-*
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wer4 on September 09, 2014, 04:43:12 pm
Thank you Rozzone. A 6392.75xx sure increases probability that the 6392.76xx is also a firmware 1.22.0.

Would feel 100% certain if someone could verify a serial 6392.77xx or later as firmware 1.22.0. Anyone?

OK, double kisses this time:  :-*  :-*
I would just ask the supplier, I believe this serial is going to be either 2.1 or 1.22. It could be when they started shipping 2.1's but could also be after they started putting 1.22 back on due to 2.1's failures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on September 09, 2014, 05:18:54 pm
I checked with Flir USA - but they claim they can not tell firmware based on serial number (unwilling or unable!?). At least it has not been sent in to service.
Retailer do not want to risk ending up with an unsold open box item and I do not want to risk loosing the 30% restocking fee.

Feel stuck between a rock and a hard place  |O. Unless someone can check a camera with later serial number than 6392.76xx and confirm firmware 1.22.0.

I have the camera on hold for a few more days, that's it.

(PS. This retailer may have a couple of more of these in stock).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 09, 2014, 06:38:44 pm
Tell the seller he should open the box and look at the version on the FLIR E4-screen, if he wants to sell you his stuff then he could at least do this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 09, 2014, 06:45:47 pm
  I dont think seller need to open it to check for S/N # is out of box or unless you want seller to check for F/W.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on September 09, 2014, 07:51:57 pm
Tom9999, I asked the seller to check for firmware, but they did not want to open the box. I am not sure why that is, if they have to break the packaging in order to do so?
I know other authorized sellers have checked firmware, but these guys did not want to :(.
These guys are potentially the only guys with any 1.22.0 left in stock - if I only could have someone confirm serial 6392.76xx for me...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 09, 2014, 08:03:01 pm
Tom9999, I asked the seller to check for firmware, but they did not want to open the box. I am not sure why that is, if they have to break the packaging in order to do so?
I know other authorized sellers have checked firmware, but these guys did not want to :(.
These guys are potentially the only guys with any 1.22.0 left in stock - if I only could have someone confirm serial 6392.76xx for me...

   I think maybe seller know weren't anymore old stocks that they didn't want to open it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on September 09, 2014, 08:05:37 pm
Tom9999, I asked the seller to check for firmware, but they did not want to open the box. I am not sure why that is, if they have to break the packaging in order to do so?
I know other authorized sellers have checked firmware, but these guys did not want to :(.
These guys are potentially the only guys with any 1.22.0 left in stock - if I only could have someone confirm serial 6392.76xx for me...

Not enough data points but first one with 2.1.0 showed up 5 days after Flir released the firmware update on their website. and that was 6392.85xx

So chances are you are good, but nothing that will totally ensure it.
https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Garfield on September 09, 2014, 08:28:13 pm
With the hack does it increase the E4 thermal sensitiviely from 0.15c to 0.06c?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 09, 2014, 10:30:25 pm
Tom9999, I asked the seller to check for firmware, but they did not want to open the box. I am not sure why that is, if they have to break the packaging in order to do so?
I know other authorized sellers have checked firmware, but these guys did not want to :(.
These guys are potentially the only guys with any 1.22.0 left in stock - if I only could have someone confirm serial 6392.76xx for me...

Not enough data points but first one with 2.1.0 showed up 5 days after Flir released the firmware update on their website. and that was 6392.85xx

So chances are you are good, but nothing that will totally ensure it.
https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332428/#msg332428)

  also same as S/N 6392.79xx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 09, 2014, 10:35:17 pm
With the hack does it increase the E4 thermal sensitiviely from 0.15c to 0.06c?
AFAIK nobody has figured out the exact reason for the sensitivity difference in spec between E4 and E8 (if any) - could be sensor differences, could be more accurate calibration. I don't think any reference to it has been found in any of the config files.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on September 09, 2014, 10:50:04 pm
  also same as S/N 6392.79xx

Not sure what you mean? Same as in 1.22.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Garfield on September 10, 2014, 01:00:56 am
With the hack does it increase the E4 thermal sensitiviely from 0.15c to 0.06c?
AFAIK nobody has figured out the exact reason for the sensitivity difference in spec between E4 and E8 (if any) - could be sensor differences, could be more accurate calibration. I don't think any reference to it has been found in any of the config files.   

Thanks mikeselectricstuff.  If I understand correctly, the E4 and E8 was the same hardware except for features crippled (reduced) in firmware.  So the hack E4 should have the same thermal sensitivity as the E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 10, 2014, 01:31:31 am
Just tested the E4 without the battery: powered by a isolated DCDC-converter and a LDO, set to 4,0V via the battery-connection (didnt use the powerpin on the FFC-connector because it wasnt hardwired to the battery, scared of damaging the board). When i then connect the micro-usb, it connects to the pc like usual and the charger thinks the "battery" is full and i just get the "connected"-icon on the lcd (again wasted sensorscreen  :'( ).
Know i just have to load the lcd-backlight-converter with another diode/resistor instead of the lcd. I cant find the converter whos responsible for the lcd. It must be the lonely IC (no partnumber) with the inductor, apart from the Dialog-Chip http://www.dialog-semiconductor.com/products/power-management/da9021 (http://www.dialog-semiconductor.com/products/power-management/da9021) ,but im not sure and dont really care about the lost 200mA or so.
I tried connecting the command-console-txd/rxd pins to a USB/RS232-3,3V converter-cable, but the E4 restarts when i send commands via RS232 (telnet works). Do you still know the baudrate and the other stuff (i assume 8N1)?

Apart from the UART it works beautifully :) Of course its still a little bigger than your smallest thermalcam, but i fits my requirements.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on September 10, 2014, 01:23:55 pm
Hi there,

a few days ago I mentioned a problem with my E4. It still exists as I do not get access to it. I now need a hint how to proceed best:

What I did:
I renamed accidentely the folder FlashBFS/System/ui.d/presets.d
AND (dumb as I was) I switched USB from RNDIS to the option at the top (very probably MSD) |O

Now, when I start the camera a message appears that Appcore.exe has crashed (I assume because it does not have access to presets.d).
The camera powers up (behind the crash message the thermal picture is visible). But I cannot use any of the buttons - the E4 is not reacting, so I cannot set it back to RNDIS to correct my mistake.

I do have USB connection (= I can see the DCIM directory) but I do not get a connection through FLIRInstallNet.exe after installing the FlirDeviceDrivers. Why not? Probably because I selected MSD and not UVC at the USB menu.

I know I now should be able to enable RNDIS through the serial interface (by sending the command "usbfn RNDIS") and using the FTP program to add the missing directory, but this would mean getting a 0.5mm cable first and then opening the E4. I would like to avoid this.

Is there any other way heal my mistake without opening the E4?
E.g. copy the missing files to the directory with some autostart file. Or a hint to disable all measurement features of the display (such as box, hot spot etc.) because without anything on the screen the camera should not need the access to the folder "presets.d" thus allowing me to enable RNDIS again.

Thanks!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 10, 2014, 01:35:09 pm
Just tested the E4 without the battery: powered by a isolated DCDC-converter and a LDO, set to 4,0V via the battery-connection (didnt use the powerpin on the FFC-connector because it wasnt hardwired to the battery, scared of damaging the board).
Quote
I think there is probably a MOSFET switch between that pin and the battery, to disconnect the load during charging. I suspect that applying power to that pin would work, without any interference from the charger, though it's possible the battery manager might report a fault status in the absence of the battery.
As this node is at the exact same voltage as the battery when the battery is there I think it's unlikely there would be a risk of damage.

Incidentally has anyone actually confirmed the presence of the serial console port functionality on 1.2x? Does the 1.2x firmware package include the command-line interpreter?
 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2014, 05:53:21 pm
For anyone wanting a more compact thermal camera that can produce 160x120 pixel images at a very reasonable cost, take a look at my Post here:

https://www.eevblog.com/forum/testgear/nec-avio-f30s-thermal-camera-nice-camera-at-a-great-price/msg510639/#msg510639 (https://www.eevblog.com/forum/testgear/nec-avio-f30s-thermal-camera-nice-camera-at-a-great-price/msg510639/#msg510639)

Its a camera by NEC AVIO of Japan, a well respected thermal camera producer. These have been used in remote controlled drones as they are both compact, light and provide both USB digital and Composite video outputs...... think Thermal camera version of a Go-Pro and you are not far off !

Mine arrived today and I am impressed with it.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 10, 2014, 06:03:54 pm
Hmm, gotta check the usb/rs232-connection again to see if i connected it wrong or maybe they closed the UART via Firmware as you mentioned. Also will look at the debug-output to see if its still functioning (didnt check yesterday) and maybe its the same baudrate necessary for the command-UART.

Its not that i really need the UART, im just to lazy to waste a week or so to learn about Telnet-Client programming in C++ when i can go via a simpler approach.  >:D

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 10, 2014, 06:44:56 pm
For anyone wanting a more compact thermal camera that can produce 160x120 pixel images at a very reasonable cost, take a look at my Post here:

https://www.eevblog.com/forum/testgear/nec-avio-f30s-thermal-camera-nice-camera-at-a-great-price/msg510639/#msg510639 (https://www.eevblog.com/forum/testgear/nec-avio-f30s-thermal-camera-nice-camera-at-a-great-price/msg510639/#msg510639)

Its a camera by NEC AVIO of Japan, a well respected thermal camera producer. These have been used in remote controlled drones as they are both compact, light and provide both USB digital and Composite video outputs...... think Thermal camera version of a Go-Pro and you are not far off !

Mine arrived today and I am impressed with it.

Aurora
teardown please  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2014, 07:13:12 pm
Mike,

Fear not, her clothes will be removed once I have made sure all is well before playing  ;)

I just weighed the camera without batteries but with battery holder and it weighs 210g.... great for a drone application  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on September 10, 2014, 09:21:33 pm
With the hack does it increase the E4 thermal sensitiviely from 0.15c to 0.06c?
AFAIK nobody has figured out the exact reason for the sensitivity difference in spec between E4 and E8 (if any) - could be sensor differences, could be more accurate calibration. I don't think any reference to it has been found in any of the config files.
Hello,

I think the E4 has the same thermal sensitivity like the E8. But on the E4 was a "noise generator" enabled with the value of 150... this seems to be a thermal additional noise for each pixel. If you use a stock E4 and deactivate the noise generator you'll get a clean image.

So the hack does not incase the thermal sensitivity... he prevent only the deterioration of your thermal image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chriseparent on September 10, 2014, 11:00:50 pm
Couple of questions.... Live streaming of a modified E4.  I used Marphys EXE - many thanks Marphy and all the rest of you.  Now I don't seem to be able to activate live streaming via flir tools, VLC or the Flir Camera Player.  In FLIR tools, I connect to live streaming, it works away for about 3 minutes and then returns a CAMERA_RTREE_CONNECT_ERROR. :-//

Also, I am interested in developing a telephoto converter for this camera.  Has anyone worked out what the thread for the std E4 lens mount is?  I might see if I can work out a connector that joins the therm app 19mm lens to the E4.


Good luck.   Let us know how the telephoto comes along....  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 11, 2014, 01:14:14 am
After fiddling around with my LA on the FLIR i got it to work with the USB/RS232-converter, Baudrate is 38400. It seems the cam just responds to the commands if sent twice, dont know why but it isnt such a problem cause i gotta poll the answer from the FLIR anyway. Gotta look if i find a nice small enclosure for the modded cam.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on September 11, 2014, 04:25:00 am
After fiddling around with my LA on the FLIR i got it to work with the USB/RS232-converter, Baudrate is 38400. It seems the cam just responds to the commands if sent twice, dont know why ...
With Telnet a command just ends with (char)13, but while using Uart you have to send (char)13 as start byte and also (char)13 as end byte.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 11, 2014, 09:40:10 am
After fiddling around with my LA on the FLIR i got it to work with the USB/RS232-converter, Baudrate is 38400. It seems the cam just responds to the commands if sent twice, dont know why but it isnt such a problem cause i gotta poll the answer from the FLIR anyway. Gotta look if i find a nice small enclosure for the modded cam.  :)
I never noticed that when I was playing - what FW version are you using?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Garfield on September 11, 2014, 08:58:01 pm
With the hack does it increase the E4 thermal sensitiviely from 0.15c to 0.06c?
AFAIK nobody has figured out the exact reason for the sensitivity difference in spec between E4 and E8 (if any) - could be sensor differences, could be more accurate calibration. I don't think any reference to it has been found in any of the config files.
Hello,

I think the E4 has the same thermal sensitivity like the E8. But on the E4 was a "noise generator" enabled with the value of 150... this seems to be a thermal additional noise for each pixel. If you use a stock E4 and deactivate the noise generator you'll get a clean image.

So the hack does not incase the thermal sensitivity... he prevent only the deterioration of your thermal image.


Thanks joe-c
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 12, 2014, 11:43:52 pm
Indeed joe-c, one needs to send CR before and after each command via UART, now it acknowledges every sent command  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 13, 2014, 10:01:32 am
For those with a general interest in thermal imaging cameras and what lives inside the case, I have just done a quick teardown of the NEC AVIO F30 compact thermal camera.

https://www.eevblog.com/forum/testgear/thermal-camera-teardown-nec-avio-f30-compact-camera-aka-mikron-mikroshot/msg512006/#msg512006 (https://www.eevblog.com/forum/testgear/thermal-camera-teardown-nec-avio-f30-compact-camera-aka-mikron-mikroshot/msg512006/#msg512006)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 15, 2014, 02:55:07 am
The communication with the FLIR did work with my program, but i recognized that the FLIR tends to lose communication over RS232 after about an hour and doesnt respond (by program and simple terminal-program) till completely restarted. Also the responsetime of the FLIR is a little bit slow with about 300ms (also gotta expect the minutely calibration which stops the rs232-answers for the time).

I stopped using the UART to get the min/max-temps and instead im using an OCR-algorithm to extract the temps from the videostream in realtime. Also i did extract the pseudocolor-palettes to get my own pseudocolorstream without relying on the FLIR for this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 15, 2014, 02:10:40 pm
Maybe my question is boring but I should ask. Is there any hope for E4 firmware 2.3? Today I received mine and all fun halved when I see frmwr 2.3.  :scared:

Hello to everyone by the way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 15, 2014, 02:24:16 pm
Maybe my question is boring but I should ask. Is there any hope for E4 firmware 2.3? Today I received mine and all fun halved when I see frmwr 2.3.  :scared:

Hello to everyone by the way.
There's always hope.... the problem is there are now far fewer people interested in working on it now that we all have early versions.
There are still plenty of avenues to explore & I'm sure there's a way....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SalsaShark42 on September 15, 2014, 02:55:30 pm
I think I'm going to take a crack at 2.3.

So far, I haven't seen any serious / documented attempts.

Does anybody know if the key is hard coded or not? Not sure how easy disassembling the comparison routine will be...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 15, 2014, 03:01:21 pm
I think I'm going to take a crack at 2.3.

So far, I haven't seen any serious / documented attempts.

Does anybody know if the key is hard coded or not? Not sure how easy disassembling the comparison routine will be...
If I were looking at it, I think the first approach would be to figure out how an old  unit that was upgraded during repair was still able to be hacked ( see a few pages back) if you can convince the SW it's running on an older unit, that may be a potential way forward.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on September 15, 2014, 08:18:13 pm
I stopped using the UART to get the min/max-temps and instead im using an OCR-algorithm to extract the temps from the videostream in realtime. Also i did extract the pseudocolor-palettes to get my own pseudocolorstream without relying on the FLIR for this.
this sounds really interesting. Why you do this?

Btw... the temperatures you grabbed are not the real high and low of the thermal image.
The measurement box gets the real min and max inside the image... the values in the scale shows you only, from who to who the pseudo color was translated from the temperatures. This values are near... but not the same... see attachment.

But it's a real interesting thing to do it that way... and it's even faster than the UART/Telnet connection.

Maybe it's possible to change some things in the Scale settings to get this more accurate...
.image.contadj.autoAdj.TSpanMin                       4
.image.contadj.autoAdj.TSpanMinAuto                   8
.image.contadj.autoAdj.filterParam                  0.5
.image.contadj.colDistr.filterParam                    1
.image.contadj.colDistr.linearPercent                100
.image.contadj.colDistr.plateauPercent               100
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 15, 2014, 09:59:39 pm
Hmm interesting, do you get the real pixel-temperatures by getting the raw-image from the jpg? Is there a possibility to extract the real temperatures from the pixels in the livestream? At the moment im gonna work on my stereo-cams so the thermalcam-stuff gotta wait for a few days.  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 15, 2014, 10:23:30 pm
If I were looking at it, I think the first approach would be to figure out how an old  unit that was upgraded during repair was still able to be hacked ( see a few pages back) if you can convince the SW it's running on an older unit, that may be a potential way forward.

Hi there -

I've been lurking around this forum for some time and also own a "pimped" E4 (originally with a 1.19.8 on a 1.1 H/W) but this topic now convinced me to sign in and report my findings. Being the type of guy who loves to play around and experiment with these things on one side and somewhat a perfectionist on the other, I always got a little annoyed about the fact the flirtools still recognized my "E4++" as an E4 and also tagged the downloaded images as such.

This made me experiment with the service menu and the eeprom settings where I finally was able to change the camera into a "real" E8. Now I couldn't resist to use the software update function of flirtools to update the code to 2.3.0 (we've got a -pimped- 1.22.0 at work which seems to utilize the calibrating shutter much less frequently than mine which goes through this procedure annoyingly often, so I expected a F/W update to change this) and the worst thing that could happen (in my opinion) would be that I cannot take the way back anymore. Having bought the camera inexpensively (well, sort of...) second hand, I wouldn't have to bother about losing its warranty anyway.

Well, to cut a long story short, the update procedure went through but upon the final reboot, I got an error message that the update was unsuccessful. Strange thing, since the Camera is running okay (with the menus of a stock E8) and reports a F/W 2.3.0 in the on-screen sysinfo. In the config files, it's tagged as a "2.3.0*". It still reported errors in the FlirInstallNet's "check installation" function but I got that sorted by manually copying the appkit.rev and prodkit.rev files from the update container to the installation directories.

The files are not encrypted or in any other way scrambled compared to the 1.19.8 original configuration. So I assume that the encryption mechanism is either related to a hardware change or it lies burried deeply in the operating system files (maybe in the bootloader??) that cannot be replaced easily by a firmware update.

I don't know if this information helps getting closer to the point but having benefitted so much from all your work here, I think it's only fair to try to contribute something in return.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 15, 2014, 10:43:57 pm
I suspect the latest FW has a "legacy" mode that can use older config files if it thinks the hardware is older. It could even be a simple as looking for serial numbers below a certain point, however it could also be something more involved, using the eeprom and/or bootloader.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on September 16, 2014, 03:06:31 am
Hmm interesting, do you get the real pixel-temperatures by getting the raw-image from the jpg? Is there a possibility to extract the real temperatures from the pixels in the livestream?
No... this image shows only the live image from the Camera. The mbox 1 was set to full screen and the Values could get with:
rls .image.sysimg.measureFuncs.mbox.1.maxT
rls .image.sysimg.measureFuncs.mbox.1.minT

but this Screenshot shows only, what the Camera LCD shows.

And yes... it should be possible to get the real temperatures from live stream. Maybe with a change of the facet_Z3.rcc there the values was shown as a binary pixel line at the side... this is maybe a better way to recognize the values and let you see more from your image... but this is a huge change.

I now was not able to get values like the Spot temperature... because I don't know  how get values from resource tree without a working sample.
There was a commented function...but this wont work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 16, 2014, 06:46:19 am
I suspect the latest FW has a "legacy" mode that can use older config files if it thinks the hardware is older. It could even be a simple as looking for serial numbers below a certain point, however it could also be something more involved, using the eeprom and/or bootloader.


Mike -

what actually makes me believe that the secret lies hidden in the bootloader is that this seems to be the only portion of the code that apparently hasn't been changed by the update procedure -- at least it hasn't a date tag and all the others are now tagged significatly after the manufacture date of the camera:


Camera Name    Part #    Serial #    Date
FLIR E8    63901-0101    63909xxx    2013-12-03

HW-id hwtype    System UID
Z3    C358E202000xxxxx

Kits Name    Version    Date
SW combination   2.3.0
appkit   2.1.2   23-May-2014
userconf   E8 1.1   25-Oct-2013
ASCO OS image   18.1.20   2014-06-05
prodkit   0   28-Feb-2014

Calibration Name    Date
org    2013-12-03 13:23:30

Hardware Name    Part #    Revision #    Serial #
camcore   T198304   01   6380xxxx
detector   *   *   *
mainboard   T198283   10   2003xxxx

Firmware Name    Version    Date    From
IRDM   0.0.1.0   -   -
POLLUX   0.1.0.0   07-Apr-2014   FLIR
POLLUX_FPGA   8.7.0.0   -   FLIR

Software Name    Version    Date    From
AppCore   25.0.0.1   22-May-2014   upalmer@SE-BRYGG5/ALPHA_1.12
AppServices   25.0.0.1   16-Apr-2014   upalmer@SE-BRYGG5/ALPHA_1.12
Bootloader   16.0.4.0   -   FLIR
ResMon   25.0.0.1   03-Apr-2014   upalmer@SE-BRYGG5/ALPHA_1.12
WinCE   6.0.0.0   2005   Microsoft
appcore_dll   1.12.1.1   03-Apr-2014   upalmer@SE-BRYGG5
common_dll   1.12.1.1   29-Apr-2014   upalmer@SE-BRYGG5
facet_core   25.0.0.1   22-May-2014   upalmer@SE-BRYGG5/ALPHA_1.12
facet_ui_qml   25.0.0.1   22-May-2014   upalmer@SE-BRYGG5/ALPHA_1.12
fvd   16.0.48.0   Apr 8 2014   upalmer@SE-BRYGG4

Usage Statistics Number of cold starts   64
Number of shutter operations   2057
Number of focus moves   0
Laser time (hrs)   0
Max. operating temperature (?C)   47.07
Max. operating temperature time   2014-08-02 00:09:36
Min. operating temperature (?C)   21.89
Min. operating temperature time   2014-02-16 11:53:36
Operating time (hrs)   44
Up-time (hrs)   0



Maybe someone could compare the package versions/dates with a 1.19.8 camera without the update applied. Unfortunately I didn't safe a screenshot of the configuration before I applied the update. This may give other hints what to address to understand the new locking mechanism.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: f15h on September 16, 2014, 07:13:34 am
FYI
There is a source in Austria - which still has one pcs (Firmwareversion 1.19.8 and Serialnumber 63908584) on stock
 www.messgeraete-shop.at (http://www.messgeraete-shop.at)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 16, 2014, 12:52:39 pm
Mine is a new one came with 2.3 firmware. I would share its data if it helps to understand what has been changed (I know that you are asking for older fw, maybe this also makes some help). I couldn't make a snapshot like you did (because of I'm very newbie to this). But i can write what I can see on screen when I go for "device settings>camera information" long press on right of middle button (usb RNDIS mode switcher)  and "version information" data tab. At that screen information quite similar to your snapshot with a few differences. Here I'm writing them (screen doesn't show any date nearby them, only versions).

IRDM                 0.0.1.0
POLLUX             0.1.0.0
POLLUX_FPGA    8.7.0.0
camcore             T198304-01-6382****
detector              *_*_*
mainboard          T198283-11-2020****
appkit                 2.1.2
confkit               E4 1.2L
osimgkit             18.1.20
prodkit               0
AppCore             25.0.0.1
AppServices        25.0.0.1
Bootloader          16.1.7.0
ResMon               25.0.0.1
WinCE                6.0.0.0
appcore_dll          1.12.1.1
common_dll         1.12.1.1
facet_core           25.0.0.1
facet_ui_qml        25.0.0.1
fvd                     16.0.48.0

Bootloader has suspiciously different number than yours (I think you only upgraded and old device with new 2.3, mine came with it in the package).
 I'm also adding the files version.rsc  and postlog.txt where you can find it at root of simply connected at usb as cam. It is listing some interesting data also.



 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: imau on September 18, 2014, 01:24:37 pm
Thank you guys for your hard work!

I've purchased an used E4 with firmware 1.22.0. Owner was unaware about the hack and he sold because he wasn't using the camera.

Now my camera is modded successfully.


Now, I would like to enable video recording such as E8 does.

Is it safe to play with conf.cfc settings?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on September 18, 2014, 06:12:01 pm
FYI
There is a source in Austria - which still has one pcs (Firmwareversion 1.19.8 and Serialnumber 63908584) on stock
 www.messgeraete-shop.at (http://www.messgeraete-shop.at)

Hi.
How did you manage to know the firmware version ? I cannot see anything in the website. I found this link on the site:
http://www.messgeraete-shop.at/de/Waermebild-Inspektions-Kameras/Waermebild-Kam.-Serie-Ex/Waermebildkamera-Flir-E4.html (http://www.messgeraete-shop.at/de/Waermebild-Inspektions-Kameras/Waermebild-Kam.-Serie-Ex/Waermebildkamera-Flir-E4.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on September 18, 2014, 06:41:59 pm
  You can call up store ask for S/N that only way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on September 18, 2014, 06:52:57 pm
Apparently they do not sell to final customers.:-(

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 18, 2014, 07:41:08 pm
Dear Mike and Thomas,

I'd like to share what I've been discovered when playing with my new E4 fw 2.3.

It looks like activating RNDIS mode is blocked by new software at new devices. I tried many combinations while attempting to activation of usb connections but no result. I shot a video for my attempts; you can see it is not possible to activate by device buttons. Secret menu comes with 10 seconds pressing to medium button but usb mode is not selectable. Is there any way other than RNDIS usb mode to reach config file in the system? I was trying to edit config file manually as forum user vmp did on his 2.3 updated old device "https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478554/#msg478554 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478554/#msg478554)"

Here is video of one of my attempts
 E4 not activating RNDIS (https://www.youtube.com/watch?v=Fcy6DdPsH8E#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on September 18, 2014, 07:47:01 pm
If you search through Mikes original hack you can enter RNDIS mode using flirinstallnet and the FIF files from Mikes earlier hacks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 18, 2014, 08:40:29 pm
Sorry for my ignorant warning. I've succeed as described by Mike's older posts. It has a connection and I downloaded conf.cfc from my device. But I couldn't get it deeper. ftool.exe comes as "Tail part 2 invalid" and with a blank .txt file generated. It looks like decription is not working as vmp made. I'm adding my conf.cfc here if anyone can use it for decription...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 18, 2014, 08:42:05 pm
Thank you very much Bookaboo for your reminder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: x25 on September 19, 2014, 10:16:10 am
Hi all. I can ask a question? My sellers no have Flir e4 with old firmware
But i can buy E5 with 1.21. (of course more expensive)
I can remake e5->e8. all too process? there are not any special features?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 19, 2014, 10:42:13 am
But i can buy E5 with 1.21. (of course more expensive)
I can remake e5->e8. all too process? there are not any special features?
Yes - exactly the same method
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 20, 2014, 08:21:58 pm
I know it had been discussed before but actually, being not too deep into programming, I had my difficulties understanding...  :-[

What I would like to know is if there's a simple method to "disassemble" an *.rcc container. I'm aware that a tool had been published that would assemble several icons or other pieces of software into a single rcc file and I also understood that this is somehow related to Qt (I installed the free Qt package and felt "like a fish with a bicycle"...  ???). Would it be possible for a member of this forum with more experience in these things than myself to extract two versions of the facet_z3.rcc for me? I'm asking because I'ld like to try to install the menu patch on a 2.3.0 version and it seems the aforementioned file contains some additional modules that are not included in the patch version. So I thought there may be a chance by comparing them and maybe merging parts of both files into one, to get a working patch version for rev 2.3.0.

I hope someone will be able to assist...

Thanks a lot and all the best,

Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 20, 2014, 08:37:25 pm
...RCC...
I hope someone will be able to assist...

Well, the decompression tool is quite simple - it even exists as finished .exe
The harder part is re-compressing a modified container.

Anyway the RCC file mostly optical decoration as any changed menu will require re-signing/chechsumming the XML file.
I didn't look at the latest firmware (somebody donate a 2.3 cam to fiddle with) - but it's even possible that some parts of
the menu got hardcoded... who knows.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 20, 2014, 08:51:31 pm
Sorry for my ignorant warning. I've succeed as described by Mike's older posts. It has a connection and I downloaded conf.cfc from my device. But I couldn't get it deeper. ftool.exe comes as "Tail part 2 invalid" and with a blank .txt file generated. It looks like decription is not working as vmp made. I'm adding my conf.cfc here if anyone can use it for decription...

Hey I've got an idea that might be worth trying - maybe too simple yet.

Since you've got your camera in rndis mode now, did you try to enter its web server (when plugged in in rndis mode and the flir drivers installed, log with your browser to 192.168.0.2 and be patient (takes some time). I don't know which functions are enabled in an ex-factory 2.3.0 but if you can enter the service menu (login: flir - password: 3vlig ), you may be able to access the EEPROM and edit the camera information and change it to FLIR E8 (EEPROM unlock password: 1235 ). Now your camera will be identified by FlirTools as an E8 (you will have to change the USB mode back to MSD). If you now force a firmware update, maybe the parameters for the E8 will be installed.

I'm not able to test this since my camera is just a "crippled" 1.19.8 (my own fault...) but it may be worth a try anyway. At least you wouldn't lose anything.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 20, 2014, 10:07:08 pm

Since you've got your camera in rndis mode now, did you try to enter its web server (when plugged in in rndis mode and the flir drivers installed, log with your browser to 192.168.0.2 and be patient (takes some time). I don't know which functions are enabled in an ex-factory 2.3.0 but if you can enter the service menu (login: flir - password: 3vlig ), you may be able to access the EEPROM and edit the camera information and change it to FLIR E8 (EEPROM unlock password: 1235 ). Now your camera will be identified by FlirTools as an E8 (you will have to change the USB mode back to MSD). If you now force a firmware update, maybe the parameters for the E8 will be installed.

I'm not able to test this since my camera is just a "crippled" 1.19.8 (my own fault...) but it may be worth a try anyway. At least you wouldn't lose anything.

Cheers,
Thomas


Hello Thomas

Now I tested your advice. I couldn't get in the screen for Service menu. I succeed on arriving browser  screen. When I click "service menu" it asks for password. Then when I put user: flir password: 3vlig it accepts it but "url not found" screen comes. So that means they closed that kind of entrance or they simply change to another reaching adress. After "url not found" I've cleared the adress part for "http://192.168.0.2/service/index.asp" to "http://192.168.0.2/service", but it resulted as "Access Denied".  I will put my screen caps at attachment.

I can copy all files that I see with Filezilla if it can be a use for you (I don't know how to take a full backup of cam. flirinstallnet.exe's Backup Camera tab is not responding as backup function). All files are about 34 mb, 15 mb when zipped.

Thanks

Tugbay

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 20, 2014, 10:15:56 pm
I'm not able to test this since my camera is just a "crippled" 1.19.8 (my own fault...) -snip-

1.19.8 should be recoverable - what state is it at?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 21, 2014, 11:57:39 am
@ Taucher

the camera is actually working, yet I made the mistake to install the 2.3.0 update. So what I've got now is something like a "true" E8 but without the chance to install the extended menus. When I do so, the camera will boot (progress bar working) but when it reaches just the final step, the screen goes black. The network interface is still active so I can revert the patch and everything's okay again. I also tried installing the files of the menu patch one at a time, and as soon as I install the facet_z3.rcc container, the camera won't boot completely anymore. When I actually leave the rcc file original and only install everything else, the extended menus seem to work, yet the icons of the menu structure are missing and everything's arranged on the screen somewhat awkwardly... That's why I think there's a chance to assemble a new rcc container from the existing ones that may solve the problem. I'm aware that this may require some experimentation but at least it wouldn't harm the camery since the web interface keeps working all the time and I can always return  to the known running configuration.

I won't attempt a "downgrade" since I've heard from others that there's a good chance to end up with a "bricked" camera that way.

@ Tugbay

Seems like only the "user front end" of the web site is installed on your camera. But since this web site refers to the /service/index.asp page, there's little that contradicts simply installing these pages from a previous firmware version. I think I even did that on my camera after I installed the 2.3.0 update. If you need further info, please contact me directly by e-mail.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 21, 2014, 12:53:34 pm
@ Taucher
...as soon as I install the facet_z3.rcc container, the camera won't boot completely anymore. When I actually leave the rcc file original and only install everything else, the extended menus seem to work, yet the icons of the menu structure are missing and everything's arranged on the screen somewhat awkwardly... That's why I think there's a chance to assemble a new rcc container from the existing ones that may solve the problem.

I took a look at the 2.3.0 firmware and the following tells me there's more to do to hack the menu:
applaunch.dat
Code: [Select]
.....
# doCRC FlashBFS\system\appcore.exe 1812480 3954364497
# doCRC FlashBFS\system\common_dll.dll 1224192 3691234647
# doCRC FlashBFS\system\appcore_dll.dll 708608 3352418829
# doCRC FlashBFS\system\progressapp.exe 29184 464017185
# doCRC FlashBFS\system\defaultusr.exe 5120 2332166433
# doCRC FlashBFS\system\chargeapp.exe 32768 4157672503
# doCRC FlashBFS\system\ui.d\design_ui_Z3.xml 36473 748083417         <<<<<<<<<<<<
# doCRC FlashBFS\system\ui.d\facet_Z3.rcc 293928 3897467070         <<<<<<<<<<<<
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514         <<<<<<<<<<<<
don't forget about applaunch.sgn - I guess it's simply a checksum to verify applaunch is unmodified.

you see: both the rcc and the xml required for a menu change are enlisted to be checked on boot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 21, 2014, 01:27:55 pm
@TurboTom

I took the liberty to unpack the RCC of a vanilla 2.3.0 upgradepack and attach it to this message. It might aid you in your studies, but note as already told: any change will most likely require correcting checksums/signatures for the bootup-files.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 21, 2014, 01:28:21 pm
And while I'm on it: Post #5555
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 21, 2014, 02:15:33 pm
IIRC we have a documented case of an E4 user who was able to downgrade his camera after FLIR had upgraded it with 2.3 during a repair. The user discovered that the encryption element of the newer cameras was not active in his older unite. I believe he had a FW1.19 HW1.1 camera. It is the HW1.2L cameras that seem to use an active encryption.

It would be worth you looking back through the last few pages of this thread as I am sure the user managed to restore his camera to the pre 'upgrade' condition. This will not work with a camera that came from the factory with FW2.3 as that has active encryption and will not downgrade without the bricking issue that you mentioned.

I recommend that you study the procedure, contact the user who did the downgrade and then return yours to its previous version as well. You can then install all of the nice upgrades including the Menu. I would not recommend upgrading to 2.3 after that though as I have no idea what that would do to you upgrades.
Aurora


UPDATE:

My memory failed me on this occasion. I just found the posting regarding changing the FW2.3 camera that had been upgraded by FLIR. The user managed to achieve the 320x240 resolution but no mention of the Menu upgrade. Sorry.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478595/#msg478595 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478595/#msg478595)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 21, 2014, 02:50:37 pm
they really made sure people see this in the movie lol ... (transformers)
i wonder how much they need to pay
LOL, coincidently I've watched that (rather chaotic) movie yesterday and ended up counting all products placed...  had the same thought... esp. because the logo was shown on two towers for a very prominent timeframe - and later on thermal imaging was used in the movie to no sense whatsoever :)

Edit (my notes on the blatantly shown brands):
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on September 21, 2014, 02:57:50 pm
Does anyone have sent the E4 back to Flir for repair, with the E8+ upgrade done ? :-(
Is it possible to revert the upgrade back to 1.22 ?



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 21, 2014, 04:52:04 pm
@TurboTom

I took the liberty to unpack the RCC of a vanilla 2.3.0 upgradepack and attach it to this message. It might aid you in your studies, but note as already told: any change will most likely require correcting checksums/signatures for the bootup-files.

Taucher - thanks a lot for this. I added the missing files from the rcc file of the menu patch to this and "repackaged" it, without any modifications to the applaunch files - the camera works normally. I then copied design_ui_z3.xml and toolbar-config_z3.xml to the camera - the menu won't work anymore and I can only toggle the battery/memory card icons at the top of the screen on/off with the menu button. If I replace the design_ui_z3.xml with the original version, some of the extended menu functions work but others don't. Yet, the Icons are now complete - as expected. I guess I'll have to have a closer look at the two toolbar-config_z3.xml files. It should be possible to get at least the additional palettes, the zoom and maybe the measurements running. Unfortunately, I'll probably only be able to spent some time on this next weekend...

Thanks so far and all the best,

Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on September 21, 2014, 07:12:38 pm
I'm not able to test this since my camera is just a "crippled" 1.19.8 (my own fault...) -snip-

1.19.8 should be recoverable - what state is it at?


Dear Thomas

Thank you for your guidance. I am succesful of adding service menu activity. I used old service cluster from fw 1.18. It worked and now I can see many service related functions, specially EEPROM tab  with "edit Camera Information" tab. Now when I try to change my camera model name from e4 to e8 it also asks for eeprom unlock password. I tried 1235 but it didn't open it. still says locked. Is there any other eeprom unlock password that you can say to me to try.

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on September 21, 2014, 08:31:28 pm
@ Tugbay - Strange that for you the EEPROM password isn't working. Maybe tomorrow I can mail you the web directory contents that I'm using.

@ Taucher - I got the menu patch working like I wanted to. Actually, with the merged facet_z3.rcc, all that was additionally necessary was to apply the mods of the patched toolbar-config_z3.xml to the original 2.3.0 file (I copied the missing presets.d files already beforehand). Now my camera "behaves" like a true E8 (also identification-wise) and has all the menu patches that I wanted.

In order to get the installation "clean", I've only got to correct the CRC's and file sizes in applaunch.dat and appkit.rev . Do you know what kind of "CRC32" is used here? When I use a standard CRC32 calculation tool and convert the result from hexadecimal to decimal, I end up with everything except what I find in the aforementioned files. Also tried the inverse or typed the numer in reversely but I wouldn't get close. Is there a special application available to calculate this "very peculiar CRC"?

Thanks,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on September 26, 2014, 04:05:44 pm
Well, Flir has decided they have to invest in locking down their firmware to shitty resolutions and artificially reduced menus... and continue charging artificially inflated prices for the real, physical specs....

Seems competition decided there's space to expand: http://thermal.com/ (http://thermal.com/) ... I have read about a US$200 iPhone attachment camera from them.
Pixel resolution: 206x156 , -40°C...+330°C ... sounds like roughly four times the resolution of a Flir One.

German:  http://www.heise.de/mac-and-i/meldung/Zweite-Waermebildkamera-fuer-das-iPhone-vorbestellbar-2404242.html (http://www.heise.de/mac-and-i/meldung/Zweite-Waermebildkamera-fuer-das-iPhone-vorbestellbar-2404242.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on September 26, 2014, 06:55:14 pm
Very interesting Taucher  :D Would possibly buy if it was usable by pc and would stream via UVC/RTSP or similar.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on September 26, 2014, 08:21:55 pm
I ordered one yesterday (Android) but they won't start shipping until the app is in the Google Play Store.
Timeline 2 weeks for Android, 3 for IOS.

Btw it's 6.6 times higher res but no optical camera, but higher res sensor, and can measure beyond boiling and freezing water.

I also signed in for the developers SDK.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on September 26, 2014, 09:35:28 pm
Ordered mine today for iphone! Thanks Taucher!! For 200 bucks that guy will come in handy for electrical field work.
Since i am already carrying my phone the small camera attachment might as well live in my glove box! (When i am not constantly fiddling with it that is!!!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on September 28, 2014, 07:51:52 am
Maybe a bit off-topic, but FLIR is launching a new product on Monday: http://flir.com/newproduct (http://flir.com/newproduct)

I wonder what it'll be?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on September 28, 2014, 07:56:45 am
Maybe a bit off-topic, but FLIR is launching a new product on Monday: http://flir.com/newproduct (http://flir.com/newproduct)

I wonder what it'll be?

A $500 camera lepton based, they preemptive the announcement after seek released their product. It's on a comment from Mike in probably another thread in here.

Edit: Or was it the $995 industrial one, not sure anymore, whatever they do might be too little too late, we will see.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 28, 2014, 09:41:04 am
This I suspect - TG165 Lepton based thermal imager.
They're calling an imaging thermometer, presumably so it ends up on the same catalogue page as the crappy Fluke ones.
 
http://www.cityelectricweb.com/2014/09/flir-tg165-imaging-ir-thermometer/ (http://www.cityelectricweb.com/2014/09/flir-tg165-imaging-ir-thermometer/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on September 28, 2014, 02:12:49 pm
And the resolution????   A BLAZING 80x60!
WOW.... can't WAIT to get my hands on THAT one.... MUST be better than my E4 (E8+)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on September 28, 2014, 07:55:20 pm
I googled "android infrared camera."  One of the hits was from a product called "Therm-App."  They want $999 for the device.  They claim a resolution of 384 x 288, the company is "Opgal."  Is this the same device you have ordered?

Jim

I ordered one yesterday (Android) but they won't start shipping until the app is in the Google Play Store.
Timeline 2 weeks for Android, 3 for IOS.

Btw it's 6.6 times higher res but no optical camera, but higher res sensor, and can measure beyond boiling and freezing water.

I also signed in for the developers SDK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on September 28, 2014, 08:04:31 pm
I googled "android infrared camera."  One of the hits was from a product called "Therm-App."  They want $999 for the device.  They claim a resolution of 384 x 288, the company is "Opgal."  Is this the same device you have ordered?
No - Seek Thermal
https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg520493/#msg520493 (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg520493/#msg520493)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MJFNJ on September 29, 2014, 11:54:12 am
Please forgive my ignorance. I have searched and I'm not sure I found the correct answer. Can I use Flir tools with a hacked E4? Any chance of a problem doing it.
Perhaps the better question would be what is the best software to produce reports with the hacked E4. I have read about Daves  software but then unable to find it.
Thank you in advance for your help.
MJFNJ
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on September 29, 2014, 07:21:16 pm
Please forgive my ignorance. I have searched and I'm not sure I found the correct answer. Can I use Flir tools with a hacked E4? Any chance of a problem doing it.
Perhaps the better question would be what is the best software to produce reports with the hacked E4. I have read about Daves  software but then unable to find it.
Thank you in advance for your help.
MJFNJ
Using Flir Tools will be no problem, however watch out it will ask you to update so make sure you decline.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MJFNJ on September 29, 2014, 10:54:42 pm
 Thank you. Can an yone point me towards Daves reporting software?
Thanks,
MJFNJ






Please forgive my ignorance. I have searched and I'm not sure I found the correct answer. Can I use Flir tools with a hacked E4? Any chance of a problem doing it.
Perhaps the better question would be what is the best software to produce reports with the hacked E4. I have read about Daves  software but then unable to find it.
Thank you in advance for your help.
MJFNJ
Using Flir Tools will be no problem, however watch out it will ask you to update so make sure you decline.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on September 29, 2014, 11:04:31 pm
Thank you. Can an yone point me towards Daves reporting software?
Thanks,
MJFNJ

I don't know what reporting software you are talking about and what Dave in particular,
There is some software that joe-c posted a while back:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg439848/#msg439848 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg439848/#msg439848)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 3roomlab on September 29, 2014, 11:59:04 pm
Hi Guys,

First time writing here ;)
I was a friend of Camera modifications too.
I wrote a remote control Software for the FLIR Ex (I also really link the Exx, but it is financial out of range).
Here is the Description: http://joe-c.de/pages/posts/programm_ex_tools_158.php (http://joe-c.de/pages/posts/programm_ex_tools_158.php)

A Copy is now selling for 30€ on ebay: http://www.ebay.de/itm/201086125469 (http://www.ebay.de/itm/201086125469)
(try to compensate a bricked E4, after trying to flash 1.18.7 to a 1.22 Camera :palm:... Device was sent to FLIR for repair)

Additional...happy hacking ;)

marvelous work. its like putting DIP switches to everything that can ever be flipped on the soft side. but since on 1.22 the FLIR seems jammed, i am guessing you cant really use this on any 1.22? i see that there is some korean words, hmmm some korean modded the mod software too?
Title: Re: Is there a video out possible for the E4 ? I
Post by: comanche3 on September 30, 2014, 11:24:18 am
 I would need a Video PAL/NTSC out on the E4, do you think it is possible ? To hold a small camera against the LCD seems to be a way, but not the best  :-\
Title: Re: Is there a video out possible for the E4 ? I
Post by: mikeselectricstuff on September 30, 2014, 11:41:46 am
I would need a Video PAL/NTSC out on the E4, do you think it is possible ? To hold a small camera against the LCD seems to be a way, but not the best  :-\
ISTR Someone did this using a Raspberry Pi - I think it was more aimed at recording, but as RasPi has composite out it should be possible to display via that
Title: YRe: Flir E4 Is video recording possible?is there's way to rev
Post by: MJFNJ on September 30, 2014, 11:56:48 am
Is there a way to record video on a modified E4?

Thanks,
MJFNJ
Title: Re: YRe: Flir E4 Is video recording possible?is there's way to rev
Post by: mikeselectricstuff on September 30, 2014, 12:23:49 pm
Is there a way to record video on a modified E4?

Thanks,
MJFNJ
Only via USB on  a PC, raspi etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Relaxe on September 30, 2014, 06:26:18 pm
Hello all,

I have an E40, does the same trick applies to update it to E60?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 01, 2014, 09:49:37 am
Hello all,

I have an E40, does the same trick applies to update it to E60?
Yes. We don't know if they've released any countermeasured firmware for the Ex0 models
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 01, 2014, 01:33:56 pm
Is the current E4 totally gimped?
All this talk for thermal cameras has perked my interest again, but Im still not able to justify a grand for a novelty.
Perhaps the $200 seek will satiate my curiosity, but may be best to wait and see what reviews say.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 01, 2014, 01:51:58 pm
Is the current E4 totally gimped?
Only in the sense that nobody's yet figured out a hack, however I don't think anyone's tried that hard yet as there are still a few older units around.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 01, 2014, 02:59:59 pm
Yes that's right, I think pros in here don't have a new unit to dig inside. Maybe I should send mine to  :-/O

By the way, I'm playing with new 2.3fw E4 and it looks like I can not even understand the encryption in it :P, (I'm a vet who likes to open gadgets and trying to be a midnight cave engineer  >:D).

So let me give my primitive observations from my experiences for last 2 weeks:

By the help of Thomas (TurboTom) i could reach file system at least. "1235" Eeprom pasword is not working in my device with web service of device(But Thomas's device was updated old device and he could use that password to reach Eeprom settings). Now I'm trying to make a Brute Force attack to Eeprom Unlock screen with "Burp Suite". My problem is; Burp is sending passwords but reaction from web service is not look like returning with any answer. I'm using number wordlists etc with 4-5-6 character combinations. Is it possible other letter characters to be in EEPROM Unlock password?

If anyone knows the best way to make Brute Force attack to web based EEPROM setting screen I would appreciate the advice.

Maybe you can think "why to unlock Eeprom?". Reason is; I want to try changing E4 name to E8 and make a update if it works.


Tugbay




 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leafman on October 01, 2014, 07:04:42 pm
Just out of curiosity, as I haven't read all 370+ pages of this thread, has anyone looked at the update files that are left on the internal memory after a firmware update. 

Reason I asked is they seem to get extracted on there and i was able to copy them off on my mac without issue.  I was updating a 2.1 unit to 2.3 since it wouldn't even connect on windows.  If anyone is interested hit me up and I'll see about hosting them some place, its about 50mb. 

I already have a hacked e4-e8, this one was for work and while hacking it would've been nice we were happy to just get it 'working', I took a couple quick pokes, but I couldn't trigger the update routine to run again but tbh, i spent about 2 minutes trying.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anthonyy on October 05, 2014, 06:55:15 pm
Hi guys, just to confirm the new 2.3 firmware hasn't been hacked yet?
I ordered a new one from flir's website and was hoping I could update the resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 06, 2014, 08:49:46 am
There are still 1.22.0 units available (ebay is one source) which is probably why no one has bothered to attempt cracking 2.3.0 yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 07, 2014, 11:43:31 am
Just seen a thermal imaging company post this up: http://www.iredltd.co.uk/palettes/ (http://www.iredltd.co.uk/palettes/)

Nice little app for making custom palettes!

EDIT: OK, it's quite basic, but it does allow you to make your own palette which you can import into FLIR tools. Works a treat with my E60.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on October 07, 2014, 12:09:00 pm
Not bad (1minute iron palette):
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=112100;image)

I should put something like that on my site http://html-color-codes.info/ (http://html-color-codes.info/) (shameless advertising, but the site is free to use)... ;)
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 08, 2014, 09:54:46 am
Not bad (1minute iron palette):
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=112100;image)

I should put something like that on my site http://html-color-codes.info/ (http://html-color-codes.info/) (shameless advertising, but the site is free to use)... ;)

I didn't realise Ironbow had red in it! Looks good though - I wonder if I can create a better high contrast rainbow...

Love the fact it exports as .pal

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 08, 2014, 01:36:17 pm
I am assuming that this is 'on-line' only as I did not see a download option. it is the sort of utility that I like to keep backed up in case the web site disappears or the owner decides to remove it. Hopefully unlikely in this case though.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hephaestus on October 08, 2014, 06:47:04 pm
The market seems to have dried up for pre-2.x.x E4s. Cheapest on ebay is going for $1700 unmodified. What is the liklihood that a hack for the newer firmware will be developed?
If it isn't likely and I'm forced to buy a low resolution camera, I'll probably just go with a Fluke which I can much cheaper from my local supply house. -1 for FLIR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 08, 2014, 07:52:02 pm
The market seems to have dried up for pre-2.x.x E4s. Cheapest on ebay is going for $1700 unmodified.
Might be worth looking for old-stock E5's
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 09, 2014, 10:58:28 am
I am assuming that this is 'on-line' only as I did not see a download option. it is the sort of utility that I like to keep backed up in case the web site disappears or the owner decides to remove it. Hopefully unlikely in this case though.

Aurora

As far as I know it is online, but judging from the sourcecode it won't be difficult to save a local copy - in fact I had a go and it has kept the majority of functionality. Can't hurt to ask them though if you do want a copy of it - they've put it online for a reason surely?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 09, 2014, 08:00:21 pm
This message is for Sofia and other people who can not reach their web service screen of their E4s. As solution described by TurboTom; updated firmwares don't have web reachable service menus from browsers and it can be replaced from older firmwares' web clusters. Then system config menu (Eeprom config etc.) can be available over browser. (On any browser by writing 192.168.0.2 adress, RNDIS mode E4s  are openning their system config menu with username:flir and password:3vlig). But for newer devices 1235 Eeprom unlock password is not working; it should be something different.

However I'm adding web service cluster to be copied to device with Filezilla:
copying adress     /FlashBFS/system/web

Cheers to everyone

Tugbay
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on October 10, 2014, 08:47:02 am
This message is for Sofia and other people who can not reach their web service screen of their E4s. As solution described by TurboTom; updated firmwares don't have web reachable service menus from browsers and it can be replaced from older firmwares' web clusters. Then system config menu (Eeprom config etc.) can be available over browser. (On any browser by writing 192.168.0.2 adress, RNDIS mode E4s  are openning their system config menu with username:flir and password:3vlig). But for newer devices 1235 Eeprom unlock password is not working; it should be something different.

However I'm adding web service cluster to be copied to device with Filezilla:
copying adress     /FlashBFS/system/web

Cheers to everyone

Tugbay
Thank you for your help:-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on October 10, 2014, 10:42:32 pm
I have upgraded my FLIR E4 using the TIConfig utility. My E4  is 1.22 version.

Apparently the upgarde worked (I perceived the increase in resolution), but some minutes after the upgrade I got the following error (displayed in a MessageBox type window):

"Application Error" (An OK button displays on the top right corner)
"Application appcore.exe encountered a serious error and must shutdown".

The E4 was working on the background despite the error. But I had to restart the unit to rid of the error message.





Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 11, 2014, 09:13:09 am
I have upgraded my FLIR E4 using the TIConfig utility. My E4  is 1.22 version.

Apparently the upgarde worked (I perceived the increase in resolution), but some minutes after the upgrade I got the following error (displayed in a MessageBox type window):

"Application Error" (An OK button displays on the top right corner)
"Application appcore.exe encountered a serious error and must shutdown".

The E4 was working on the background despite the error. But I had to restart the unit to rid of the error message.

I recall that happening on my unit, haven't had a problem since.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on October 11, 2014, 01:36:09 pm
Which is the parallax error I should expect in MSX mode for a 1 meter distance ?

I get about 3 cms.(in real size) offset between the camera and the thermal image, so MSX it is not usable at that distance.
At a distance of about 3 meters and beyond I get a decent mix between picture and thermal image.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on October 11, 2014, 01:40:01 pm
Which is the parallax error I should expect in MSX mode for a 1 meter distance ?

I get about 3 cms.(in real size) offset between the camera and the thermal image, so MSX it is not usable at that distance.
At a distance of about 3 meters and beyond I get a decent mix between picture and thermal image.

check out your camera's settings-menu ... distance setting...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on October 11, 2014, 03:58:22 pm
Do people use the MSX feature at all? Or is it better to use photoshop?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on October 11, 2014, 04:31:37 pm
Do people use the MSX feature at all? Or is it better to use photoshop?

I use MSX and set the distance. I'm sure PS would do well, but it significantly increases the time to process the images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on October 12, 2014, 02:13:30 pm
This message is for Sofia and other people who can not reach their web service screen of their E4s. As solution described by TurboTom; updated firmwares don't have web reachable service menus from browsers and it can be replaced from older firmwares' web clusters. Then system config menu (Eeprom config etc.) can be available over browser. (On any browser by writing 192.168.0.2 adress, RNDIS mode E4s  are openning their system config menu with username:flir and password:3vlig). But for newer devices 1235 Eeprom unlock password is not working; it should be something different.

However I'm adding web service cluster to be copied to device with Filezilla:
copying adress     /FlashBFS/system/web

Cheers to everyone

Tugbay
Hello,
did not find anyone to Eprom password? 1235 does not work.
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on October 12, 2014, 02:40:34 pm
Hint to Flir. Couldnt be the offset between thermal image and actual picture be set automatically by software ?


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 12, 2014, 02:43:27 pm
Hint to Flir. Couldnt be the offset between thermal image and actual picture be set automatically by software ?
It should be possible to make a pretty good guess based on a correlation between the images
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 13, 2014, 08:08:10 am
the Flir cameras with auto/manual-focus fit the offset between thermal image and actual picture
with exiftool you can read out the focus distance and the offset

if you have a fixed focus camera (like E4)  you can try this way for automatic overlay:
(sample with a 8 bit autolevel grayscale thermal image thermal.png and a real image real.jpg)
http://studio.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23318#p97884 (http://studio.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23318#p97884)

but it's better to use this algorithm:

- the offset between thermal image and real picture is a line as a function of distance
- take two pictures (macro and infinite) and find out the first point and the last point of the line
- check your images with all possible offsets around the line with (write a script)
  compare -metric rmse ( see http://www.imagemagick.org/script/compare.php (http://www.imagemagick.org/script/compare.php) )
  and find the best match

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 14, 2014, 01:24:54 pm
Hi there

Newbie here  :)  I just bought a new Flir E4 with firmware 2.3.0. Any experiences with that version regarding the hack tuning? Has someone suceeded to do that version?

Ah yes, just in case someone cares... 3vlig (trevlig in swedish) means "nice" or "pleasant". It's not just a random string of characters  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on October 14, 2014, 02:03:53 pm
Anyone knows a place where i can get a E4 with old Firmware 1.19 at the moment ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on October 14, 2014, 08:34:10 pm
Ah yes, just in case someone cares... 3vlig (trevlig in swedish) means "nice" or "pleasant". It's not just a random string of characters  ;)

Wow, that's pretty cool! I was wondering why they chose such an odd password. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 15, 2014, 12:11:40 am
Regarding E4 with updated firmware:

The new "protection" is based on the fact that the per-device config files (FlashFS\system\appcore.d\config.d\conf.cfc, FlashFS\system\ui.d\config.d\conf.cfc, FlashFS\system\services.d\config.d\conf.cfc) are now encrypted and signed.

The encryption algorithm is RC4 with the key being the SHA1(key || "2A00"), where "key" comes from the "FAD1:" device, ioctl 0x800040C0. That ioctl, which I don't fully understand what it's actually doing, returns 0x18 bytes, with the last 8 bytes being the key (not sure if it's per-device or generic), and the second word indicating whether the config-files have to be globally signed or just including a hash. On my camera (1.2L, came with 2.3.0) it indicated that they have to be signed. common_dll.dll checks for the config file signature, and uses a RSA1024 bit public key to verify the signature.

So far, that's all bad news.

You can patch your config-file, and patch common_dll.dll to disable the signature check (and because I couldn't get CRC03 to compute correctly, I patched that as well), but then the camera doesn't auto-boot anymore since applauncher.exe verifies the CRCs from applaunch.dat (which fails for my patched common_dll.dll), and applaunch.dat itself is signed (applaunch.sig).

BUT: It appears that CRMD160 is very fundamentally broken for byte values >= 0x80 (talk about not compiling with /J, hehheh). This allows to conveniently patch the signature check in a way that applauncher.exe doesn't notice. (Unfortunately the config signature check uses MS Crypto Provider, not their custom stuff.)

I was able to apply this hack on my E4 but it's a very dirty hack. I haven't fully understand the config loading yet, maybe there's a better way, like manipulating on of the existing files instead to override the per-device config? Has someone played with that yet? (like: remove the per-device config, and then hack one of the .rsc to set the stuff that's otherwise set in the .cfc).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on October 15, 2014, 01:42:38 am
Well, sounds like you deserve some congratulations ;)
I'd even say: feel free to post details about the applied patches.  :-+


Regarding FAD1: I remember posting about that device and that I was pretty sure it's naming was a decoy... this just confirms my assumption.
My gut feeling tells me it's just some SN or version from the FPGA... not that one couldn't patch that driver to always return the required data... just an idea ;) NK.BIN contains hints to MISCDEV_LIB.dll

Regarding Applaunch: just take a close look into NK.bin from the update file... many neat strings in close proximity - like CRC04 :)
I can even imagine that looking at the internal registry (SOFTWARE\FLIR SYSTEMS\APPLAUNCHER) could yield some additional insights).
Don't have a 2.3 cam anyway... so can just do rough static checks - I remember the µC having secure boot features ... still I doubt they would resist elaborate efforts.

Also there might be some option using one of those strings:
eFLIRInstall_cont.dat
autoload.fif

Regarding E4 with updated firmware:

The new "protection" is based on the fact that the per-device config files (FlashFS\system\appcore.d\config.d\conf.cfc, FlashFS\system\ui.d\config.d\conf.cfc, FlashFS\system\services.d\config.d\conf.cfc) are now encrypted and signed.

The encryption algorithm is RC4 with the key being the SHA1(key || "2A00"), where "key" comes from the "FAD1:" device, ioctl 0x800040C0. That ioctl, which I don't fully understand what it's actually doing, returns 0x18 bytes, with the last 8 bytes being the key (not sure if it's per-device or generic), and the second word indicating whether the config-files have to be globally signed or just including a hash. On my camera (1.2L, came with 2.3.0) it indicated that they have to be signed. common_dll.dll checks for the config file signature, and uses a RSA1024 bit public key to verify the signature.

So far, that's all bad news.

You can patch your config-file, and patch common_dll.dll to disable the signature check (and because I couldn't get CRC03 to compute correctly, I patched that as well), but then the camera doesn't auto-boot anymore since applauncher.exe verifies the CRCs from applaunch.dat (which fails for my patched common_dll.dll), and applaunch.dat itself is signed (applaunch.sig).

BUT: It appears that CRMD160 is very fundamentally broken for byte values >= 0x80 (talk about not compiling with /J, hehheh). This allows to conveniently patch the signature check in a way that applauncher.exe doesn't notice. (Unfortunately the config signature check uses MS Crypto Provider, not their custom stuff.)

I was able to apply this hack on my E4 but it's a very dirty hack. I haven't fully understand the config loading yet, maybe there's a better way, like manipulating on of the existing files instead to override the per-device config? Has someone played with that yet? (like: remove the per-device config, and then hack one of the .rsc to set the stuff that's otherwise set in the .cfc).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 15, 2014, 09:31:40 am
Here we go again....!

Have you noticed anything that sheds light on the report of the unit that was upgraded and was still able to use an old file ?
Seems like this might be a useful avenue to explore if you can trick the FW into convincing it that it's an old unit.

Is it not possible to patch applauncher.exe?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 15, 2014, 10:47:06 am
applauncher.exe is part of nk.bin, so it's not easily replaceable. (I'm sure people know the required magic to patch nk.bin, but unfortunately I don't.) But with their CRC-screwup, it's easy enough to patch useful changes into the CRC'ed binaries.

(It only appeared now to me that tnt's original tool, which doesn't replicate the signedness-screwup, works fine on configuration files because they do not contain any characters >= 0x80).

An upgraded unit will not have a strong signature for the config data, since it's device-unique and the private key is - likely - not embedded in the updater; there is no opportunity to create a strong-signed config file for those units. However I think that's what the "alternative" code path is for, that supports hashed-only encrypted config files. (The result of the FAD1:-IOCTL determines wether it requires a strong signature - likely for units that were calibrated with updated firmware - or just encrypted-and-hashed configuration files - likely for units that were calibrated before they added the countermeasure).

We should look into what the FAD1:-Ioctl really does. If we can trick it into returning that this is an old, updated unit, then a valid configuration file could be produced.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 15, 2014, 11:03:21 am
Ok... I understand that you people are working hard on the new firmware. I'd like to help but I have no experience with the USB/RNDIS networking. Could someone provide me some basic guidance?

First (eventual) problem: Choosing the RNDIS mode in the hidden menu looks odd. I can move the selector bar to the RNDIS item and press OK then it jumps immediately to the previous menu. There is no indication which mode is chosen. Is this normal?

Second problem: I actually get a new network connection on my PC (XP) called "LAN Connection 4 - Windows Video...something" ist this correct and what IP settings do I need? Is it to be set to DHCP? Does the camera provide the IP address or do I have to install a DHCP server??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 15, 2014, 12:08:03 pm
Nice video... but it starts where I am stuck. There ist no word about the IP settings. I need the 5minute video before that one ;)

Update: I played a bit with the camera and it seems that it is not possible to set RNDIS mode.
I get into the hidden menu, I see the USB mode menu, I can scroll through the items but nothing changes. I still see an USB mass storage device and a webcam (that's where the LAN4 - Microsoft TV/Video-connection comes from). Do I have to reboot the camera? I tried that too but.... no success.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 15, 2014, 10:23:46 pm
I've troubled as you. Then a friend suggested Mike's first posts for injecting RNDIS file to device. His file package includes related FIF files to activate it. It worked for me.


'If you search through Mikes original hack you can enter RNDIS mode using flirinstallnet and the FIF files from Mikes earlier hacks.'
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 16, 2014, 07:54:50 am
Thanks for the hint... I will try this. Where can I find this tools and how do I "inject" the files?

In Mikes video, he's playing with a serial connection and displaying some startup logs. Has someone ever tried to communicate with the cam through that serial port? I wonder which pins a re used...
Sometimes amazing things can be achieved with a simple RS232 connection. Maybe even activating hidden menus or options.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 16, 2014, 08:00:33 am
Thanks for the hint... I will try this. Where can I find this tools and how do I "inject" the files?

In Mikes video, he's playing with a serial connection and displaying some startup logs. Has someone ever tried to communicate with the cam through that serial port? I wonder which pins a re used...
Sometimes amazing things can be achieved with a simple RS232 connection. Maybe even activating hidden menus or options.
The pinouts are listed early in this thread.
I don't think anyone has checked to see if the serial console is still present in firmware 1.2x or later
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 16, 2014, 09:01:06 am
Here is an old package of tools at attachment. It includes FIF files.

You need to install Flir Tools first. Then you should go manually to C:\Program Files (x86)\FLIR Systems\FLIR Tools\bin and find flirinstallnet.exe file. By clicking it brings the screen that you can inject .FIF files to your device. Grab according Temporary or Permanent RNDIS.fif file from package and it will activate RNDIS mode. Any how the hidden menu for USB connection selection from E4 is not becoming active after all but you can use flirinstallnet.exe to activate temporary or permanently or removing RNDIS mode.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 16, 2014, 09:50:06 am
Thanks for the hint... I will try this. Where can I find this tools and how do I "inject" the files?

In Mikes video, he's playing with a serial connection and displaying some startup logs. Has someone ever tried to communicate with the cam through that serial port? I wonder which pins a re used...
Sometimes amazing things can be achieved with a simple RS232 connection. Maybe even activating hidden menus or options.
The pinouts are listed early in this thread.
I don't think anyone has checked to see if the serial console is still present in firmware 1.2x or later

No need to break out the serial port to enable RNDIS, this can be done with Mike's flirinstallnet.exe hack from way back.
Once you have uploaded the FIF file you can then connect via USB and Filezilla as normal, I had played around with a friends 2.3.0 unit and was able to modify files but could not get any upgrade to work in the time I had it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 16, 2014, 08:32:34 pm
Ok that's a lot of useful information. Thank you all. I will try this next week and report whatever I find out :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FireBird on October 16, 2014, 10:40:46 pm
According to the Flir updater pdf, there is a way to manually select the firmware fif and eFLIRInstall.exe. Has a 2.x user ever tried what happens if the 1.22 fif and exe are selected for upload?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 17, 2014, 07:57:10 am
I'm a couple of steps further.... i got an FTP connection, could download the conf.cfc from the camera and tried to decrypt it with ftool.exe.

And then I get the error "tail part 2 invalid"   What does that mean? (attached conf.cfc from firmware V2.3.0, zipped)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 17, 2014, 08:56:44 am
It means that old ftool can not decrypt your config file. You should find private key to decrypt with some other tools. Then a new ftool can be decompiled from that point to make easy decryption like before.

You can play with system setup menu over browser (write 192.168.02 in firefox adress and you will see a system menu. But also when you click detailed service tabs it will give http 401 error. System service web files are not present in your device also, but you can copy old firmware's web cluster to your device with ftp and valaaa, now you will have your system service tabs active and working   -this page's loading time is a little long maybe 40 seconds). There is a tab for EEPROM settings which you can change your device serial number and model and many more things. Thomas has changed his device's model name to E8 and updated again, now he has E8 as he mention. But new devices eeprom unlock password is not 1235. I believe finding EEPROM unlock password will help to find public key in system's config files encryption. So trying to make brute force attack on that web service. But until now I couldn't penetrate Burp Suite correctly because of web service works with authentication with username flir and pswrd 3vlig.   


PS: My Reply #5597 has those web service files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 17, 2014, 10:10:10 am
I'm not a decryption specialist but the plaintext (decrypted) file will not differ much from the old cfg file... so I have a encrypted file and I know the plaintext. Finding the key should be easy in this case. The question is what tool can I use to brute force the file...?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 19, 2014, 10:37:37 am
A notice regarding this error:

"Application Error" (An OK button displays on the top right corner)
"Application appcore.exe encountered a serious error and must shutdown".

I got this error one time on my brandnew, not modified, not even tried to modify E4. I got this after switching it off/on a couple of times.
Seems not to be a real problem... it's WINDOWS inside :-) Sudden crashes must be accepted.

Action taken: Removed battery and rebooted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 21, 2014, 08:04:44 am
I have a potential, albeit "dirty" (won't survive firmware upgrade, for example) solution for E4 cams that came with 2.3.0. It gives upgraded resolution _only_ (for now). But before widely releasing it, I'd like to test it on a few more devices.

So if anyone
 - feels adventurous (although unlikely, it could simply not work, or even brick your camera, or maybe create a black hole and swallow up earth),
 - has an E4 that _came_ with 2.3.0 (though it should work with upgraded units too, but let's start with known facts),
 - already has experience with the Flir E4 (including setting up RNDIS mode, ftp access, telnet)
please send me a PM and I'll supply you with a tool. I promise(*) that once the hack turns out to be useful I'll publish it here.


(*) You should not believe any promises from random strangers on the internet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cenkaetaya on October 21, 2014, 01:34:37 pm
Hi,

Can someone tell me if this hack works on the FLIR E5?

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 21, 2014, 01:56:53 pm
If it is V1.22.0 or before then there is no reason why not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 21, 2014, 09:38:18 pm
Ok, whatever, here's a firstsecond version.

From the readme:

Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes.

If that's the case, that sounds good. Otherwise, this hack is not for you.

 - Download+install python2 (not python3)
 - Download+extract this zip
 - Set Camera to RNDIS mode
 - run "apply.py apply <ipaddress of camera>". If it fails, please provide
   the output for diagnostics.
 - Hard-Reset the camera


Let me know if anyone has problems using this.

EDIT: If you get "550 File unavailable", please just re-run the script. I'll work on a better fix. If retrying doesn't work, let me know.
EDIT: tried to fix the "550" issue with more retries. Seems killing the app sometimes keeps the DLLs busy for "a while" (for whatever definition of that). Let's hope this helps.

IF YOU STILL HAVE ISSUES WITH "550" with v0.3, let me know. You can always resort to manually uploading the binaries if you want - they are preserved if upload fails.

EDIT2: Added v0.4.zip with support for the E5.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on October 21, 2014, 10:56:12 pm
They probably should make a backup first :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on October 22, 2014, 06:04:46 am
tmbinc,

Your update is for getting the resolution to the e8 (max) setting right? What are the probabilities for getting other functionalities working, like the e5's (and up) Min and Max hotspot? We are looking to get an Ex (4 or 5) camera and not sure what the firmware version will be. If chances are that the newest firmware can also be hacked soon we don't have to worry too much and go for the E4 model.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 22, 2014, 08:58:14 am
Ok, whatever, here's a first version.

From the readme:

Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes.

If that's the case, that sounds good. Otherwise, this hack is not for you.

 - Download+install python2 (not python3)
 - Download+extract this zip
 - Set Camera to RNDIS mode
 - run "apply.py apply <ipaddress of camera>". If it fails, please provide
   the output for diagnostics.
 - Hard-Reset the camera


Let me know if anyone has problems using this.


I've tried that hack but unluckily it didn't work at first trial. You can see the screen shot of dos screen. Resolution was the same at hard boot.

Then I've applied v0.1 of that hack which tmbinc sent previously (last night with PM) . And it gave a real hack for resolution. Thank you very much tmbinc on behalf of new fw 2.3.0 E4 owners.  :-+

(v0.1 is doing the same file replacements; but it is manually with FTP and Telnet command.)

Tugbay
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 22, 2014, 10:25:59 am
Ah, I see. For everybody getting the "550 File unavailable" error, it _appears_ to help if you just try again (re-run the script with same arguments).

I'll see if I can come up with a better fix.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 22, 2014, 10:51:40 am
only two bytes in common_dll.dll !
great work  :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 22, 2014, 11:11:20 am
I can confirm that the "resolution improvement" v0.1 works for an newly bought E4 (V2.3.0) camera. I also tried v0.2 and it has a problem finding the files to send back to the camera. Maybe only a file-path naming problem... So I did it manually with Windows-CMD/FTP

Great job!!!  :-+ :-+

BTW: I got the information that FLIR did not only reduce the resolution but also installed a noise generator to further impair the picture... I think this is a bad move, only that they can say "see, how much better our E8 model is!"
Fortunately the upgrade eliminates also the noise, which is very good visible.

Such manufacturers deserve to be hacked!  :rant:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 22, 2014, 12:00:52 pm
If the final upload fails, the patched files are not removed, so you can manually upload them. (But remember to execute "stopapp" via telnet before doing so, if you didn't let the script doing it.)

- upload common_dll.dll to /FlashBFS/system/
- upload conf.cfc to /FlashFS/system/appcore.d/config.d/

Not sure why deleting common_dll.dll fails sometimes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on October 22, 2014, 01:21:27 pm
Just ordered the Flir E4, looking forward to try your patch/update, tmbinc! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Iphone_hack on October 22, 2014, 03:55:26 pm
If the final upload fails, the patched files are not removed, so you can manually upload them. (But remember to execute "stopapp" via telnet before doing so, if you didn't let the script doing it.)

- upload common_dll.dll to /FlashBFS/system/
- upload conf.cfc to /FlashFS/system/appcore.d/config.d/

Not sure why deleting common_dll.dll fails sometimes.

Great job
So here we go again
I am sure flir will start selling E4 like crazy
I know you just got it working

Could you or someone post all the instructions step by step
Even how to connect the new E4 to computer from the beginning
I am sure new member will be interested too
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: macsisi on October 22, 2014, 08:04:09 pm
If the final upload fails, the patched files are not removed, so you can manually upload them. (But remember to execute "stopapp" via telnet before doing so, if you didn't let the script doing it.)

- upload common_dll.dll to /FlashBFS/system/
- upload conf.cfc to /FlashFS/system/appcore.d/config.d/

Not sure why deleting common_dll.dll fails sometimes.



I tried the procedure with v0.2 on my camera which runs 2.3 firmware and model number is 1.2L and indeed it gave me an error not to find proper files. But using FTP I could easily overwritten the two files and now my camera works at 320x240 resolution. Great hack indeed and most of all it works.
At first the center point was a bit off, but after a reboot everything is OK now.

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on October 23, 2014, 08:00:10 am
If the final upload fails, the patched files are not removed, so you can manually upload them. (But remember to execute "stopapp" via telnet before doing so, if you didn't let the script doing it.)

- upload common_dll.dll to /FlashBFS/system/
- upload conf.cfc to /FlashFS/system/appcore.d/config.d/

Not sure why deleting common_dll.dll fails sometimes.



I tried the procedure with v0.2 on my camera which runs 2.3 firmware and model number is 1.2L and indeed it gave me an error not to find proper files. But using FTP I could easily overwritten the two files and now my camera works at 320x240 resolution. Great hack indeed and most of all it works.
At first the center point was a bit off, but after a reboot everything is OK now.

Thanks!

Preparing for the hack..
In the case you get the error, do you need to do the telnet stopapp action before uploading the files with ftp or is is it already executed with the script even though it gives an error?
Can we also change the bootlogo file with ftp?

EDIT: Done, after the script its easy to FTP to the FLIR and overwrite the 2 files. Did not yet try to change the bootloader. It's really impressive to see the noise generator gone. The picture was very grainy before the resolution hack. Very happy here and keeping an eye on this topic to check if there is an update to fix the menu. Min/Max hotspotting would be great. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 23, 2014, 02:34:42 pm
STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v02.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the zip into the PYTHON folder.
- open CMD, go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!

common_dll.dll  ->  /FlashBFS/system
conf.cfc             -> /flashfs/system/appcore.d/config.d

***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on October 23, 2014, 03:21:53 pm
Please where can I find (hack version 01) v0.1.zip?
I can not find it.
Thank you for a great job.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 23, 2014, 03:46:26 pm
There is no need for "v0.1" of this hack. You can use v0.2 just fine. Please do not recommend v0.1, since it did fewer error checks, did not automate the "stopapp" etc.;

if the only issue is the "550", you can _still_ upload the files manually. Just use v0.2, and then manually upload the files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on October 23, 2014, 04:41:50 pm
Ok.
Thank you for the clarification.
Tomorrow I'm going for 2.3 Hopefully this works:-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 23, 2014, 05:31:33 pm
I've uploaded a new version, which hopefully works better. (It's attached to my original post)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on October 23, 2014, 09:53:37 pm
BTW: I got the information that FLIR did not only reduce the resolution but also installed a noise generator to further impair the picture... I think this is a bad move, only that they can say "see, how much better our E8 model is!"
Fortunately the upgrade eliminates also the noise, which is very good visible.

Was there a "noise generator" in the E4 v1.22 too?  ??? And if so, does the v1.22 hack remove the noise generator on those models too?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 24, 2014, 09:03:41 am
Is the FW version 2.3 did you upload the ADD-MENU (max, min, Zomm etc)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on October 24, 2014, 09:42:03 am
@ SWAGGYD:
I have a potential, albeit "dirty" (won't survive firmware upgrade, for example) solution for E4 cams that came with 2.3.0. It gives upgraded resolution _only_ (for now).
[...]

@ ThermalGuru:
There always has been a virtual noise generator on the E4 (and other FLIR TICs, if not all). The original hack lowered the level of noise. This has been discussed earlier, see here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg318571/?topicseen#msg318571), here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342315/#msg342315), here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg362950/?topicseen#msg362950), here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363364/?topicseen#msg363364) and here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg363506/?topicseen#msg363506).


BTW, I really love the work of tmbinc! I find it awesome that there's somebody out there who knows his stuff and is able to do something like that. I only know really really tiny basics about this stuff and I have no idea how to do any of this. It really impresses me how sligtly changing two files makes all of this work. I wouldn't even know how to start. Nice job, dude, keep it up!!!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on October 24, 2014, 11:19:19 am

- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"

Hello. I just tried this but unfortunately can't seem to connect to the cam via CMD's FTP.
I manually assigned the IP address as it would not do it automagically, but alas, it simply won't connect via ftp.
ThermaCAM driver does connect, but I can't login via FTP for some reason...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 24, 2014, 11:37:15 am
*** Changed my "user guide" for use of V2 hack ***

Quote
Hello. I just tried this but unfortunately can't seem to connect to the cam via CMD's FTP.
I manually assigned the IP address as it would not do it automagically, but alas, it simply won't connect via ftp.
ThermaCAM driver does connect, but I can't login via FTP for some reason...

Did you set your camera to RNDIS mode? If this doesn't work, you will not get the network link. Maybe it helps to unplug/plug the USB after setting RNDIS mode. I had no problems on Windows 7...

I have to say that I'm also very thankful for the work of all those people here, especially tmbinc! He found such a clever solution.... I already tried to brute force the encryption key but he changes the file without any key. How nice is that!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on October 24, 2014, 12:04:08 pm
Maybe it helps to unplug/plug the USB after setting RNDIS mode. I had no problems on Windows 7...

Thanks, I did unplug/plug in USB, and restart a few times, and I managed to FTP the cam now. Cheers!

Continuing the process now....

UPDATE: okay it all seemed to work. Now with better resolution! Many thanks.
A couple of things:
- my IP address was COMPLETELY different (my fault I know).
- I think I was working with an older description as the word "apply" was missing but I see it's now added in:  "python apply.py apply 192.168.0.2"
- the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" are found in a zip file called "e4hack3c" (this took me a while to find!)

Again, many thanks to all who contributed...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cenkaetaya on October 24, 2014, 07:30:00 pm
Hi, this may be a bit of a dumb question but..

What is the easiest way to tell the thermal resolution modification worked?

It seems like the thermal image is more detailed but this could just be a placebo effect.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on October 24, 2014, 09:09:16 pm
@ cenkaetaya:
Please see here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg399877/#msg399877). It's also possible to view the meta-data of the image with FLIR Tools but to do so you have to install the software, download the picture from the camera and open the file in FLIR Tools. The Image Gallery is way easier. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 24, 2014, 09:21:28 pm
HI, I am unclear on one step of the process, and that is where you move the apply.py. Do you move it into the folder that "python" is installed in?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 25, 2014, 07:46:35 am
When you run the python command followed by the apply.py filename, python will look for it in it's own directory. That means you have to put it there first. Or you enter the complete path into the command. (c:/folder/subfolder/apply.py) but I have not tried that.
Don't forget to put ALL files that belong to apply.py into the python folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jores on October 25, 2014, 08:24:58 am
I successfully upgraded my E4 1.2L version 2.1.0 with v0.3 today`

Great job you guys!


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on October 25, 2014, 08:57:17 am
I've uploaded a new version, which hopefully works better. (It's attached to my original post)
That was done with v0.3
Thank you. Great work:-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: compet17 on October 25, 2014, 10:07:03 am
For those who ask about the difference of 80x60 and 320x240. I think it's clearly visible... (the stored jpg is always 320x240)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Svuppe on October 25, 2014, 10:34:05 am
Bummer. Does NOT work with E5  |O
conf.cfc is a different size.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 25, 2014, 11:47:05 am
For those who ask about the difference of 80x60 and 320x240. I think it's clearly visible... (the stored jpg is always 320x240)
shallow angled sharp edges of objects, like those fan blades, are the easiest way to tell
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on October 25, 2014, 02:07:23 pm
i encounter a problem with a second E4 i can´t update. I activated RNDIS Mode via FIF and can log in but i can´t download common_dll.dll. Also Filezilla isn´t retrieving it.
Other Files are no problem. Do i have to shutdown anything on this cam before downloading ?
 apply.py is standing still at retr common_dll.dll

This Cam sucks. Seems the FTP of this cam is not working like others, sometimes working, sometimes not. Can´t download all files.

Anyone knows if you can reinstall firmware 2.3 on this cam ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on October 25, 2014, 06:01:16 pm
Easy way to check if the hack works: close the lens cap and if the picture is smooth 1 color the hack worked. With the original E4 there will be a lot of noise displayed. (Many dots in different colors)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on October 26, 2014, 09:32:18 am
This Cam is making me sick ! I can only change files using Telnet, FTP isn´t working correct. If you change files via telnet don´t save backups in the flashbfs/system directory or flashfs directory - otherwise the patched files won´t work
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 26, 2014, 11:04:34 am
This Cam is making me sick ! I can only change files using Telnet, FTP isn´t working correct and now i don´t think this is 320x, what do you think ? 320 or 80 ?

What I see is they are both 80x60 resolution and grainy. Normally your files should be more than 100 kb but they are 50 KB and 70 kb which means lower resolution.

Are you sure that you did installed Python 2.x  not 3.x version? This could be an issue.

If you are unsuccesful with ftp, your "stopapp" command from hack could be unsuccesful also and you can not overwright 2 hack files ( .dll and .cfc)

I can suggest you to test v0.3 hack with Python 2.x. If it is the same result then you could go with manually telnet command. For that manual way you can use "puttytel" from net and issue "stopapp" over it. It is waiting for a while but you should stop many progs you will see. Then use a ftp file transfer for 2 files for hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on October 26, 2014, 12:04:43 pm
Hmmm...

I was playing around with the cam some more, and now there seems to be a problem. Maybe it never did get better resolution,
and I was experiencing the placebo effects that was mentioned in the thread earlier??

I am getting following error when running the python apply.py :
IOError: [Errno 2] No such file or directory: 'common_dll.dll.delta'

(http://)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on October 26, 2014, 12:07:35 pm
Yes i allready managed to hack this E4. On this brandnew E4 you can´t download those two files, even with filezilla it isn´t working. I telnet those files to flashifs and downloaded via Windows Drive letter. After patching it on my own i did the same way back and now everyhting is working. Last error was that i kept backups of this files in their original directory.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on October 26, 2014, 12:08:17 pm

I am getting following error when running the python apply.py :
IOError: [Errno 2] No such file or directory: 'common_dll.dll.delta'


and the file is really in the same directory like apply.py ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on October 26, 2014, 12:15:05 pm
lol, nah, I forgot to put them in there this time. It's too early for me this morning...
All is good. Full resolution is mine!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sandrew on October 26, 2014, 02:31:05 pm
Hi guys,

Flir E30 owner here. I'm sorry for the lame question, but is it possible to upgrade E30 resolution to 320x240?

Thank you in advance for your kind cooperation!

Steve
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 26, 2014, 03:04:30 pm
IIRC yes it is. Somewhere back in this thread an Exx series owner upgraded the resolution. You will need to do a search in E30, E40 and E60 to find the details though.

Edit - I did a quick search for you.

Here is a message that provides links to what you need  ;)

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407014/#msg407014 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407014/#msg407014)

And the required file is here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sandrew on October 26, 2014, 03:38:13 pm
Dear Aurora,

Thank you very much for your help!

My FW version is 1.24.16. Should I need upgrade to the latest FW or 1.24.16 is okay? Should I follow standard E4 upgrade procedure or there is E30 specific steps?

Sorry for the noob questions, I'm not very experienced, unfortunately :(

Best regards,

Steve

P.S. Strange, but when I use search function with string : E30, E40, E50, E60, I don't see the results that you posted above.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 26, 2014, 03:46:05 pm
I don't know if they've added any countermeasures to the Ex0, but updating firmware is probably a bad idea
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 26, 2014, 03:53:39 pm
@Sandrew,

I searched on E30 first, couldn't find the message so then searched for E40. It was E40 that threw up the required message  ;)

I agree with Mike, I would NOT update the firmware unless you are CERTAIN that it is not a counter-measured version.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sandrew on October 26, 2014, 04:01:55 pm
Thank you for your answers Mike and Aurora. I wouldn't touch firmware then :)

Here is result for my search of : E40

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on October 26, 2014, 04:17:06 pm
[...]
P.S. Strange, but when I use search function with string : E30, E40, E50, E60, I don't see the results that you posted above.

I also tried that and couldn't come up with any results either. Not even your post was shown when I searched for E30. Don't know what is going on...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 26, 2014, 04:35:28 pm
Indeed.... the search function seems a bit iffy at the moment !

The EEVBlog site was unavailable last night for a period and search did not return when the site came back so maybe the search function is not working properly ?

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on October 26, 2014, 05:24:50 pm
Forum search functionality being a bit iffy is a known issue. ;) You typically get better results using google like so:

https://www.google.com/webhp?ie=UTF-8#q=E40%20site%3Awww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown%2F (https://www.google.com/webhp?ie=UTF-8#q=E40%20site%3Awww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown%2F)

etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 26, 2014, 06:10:37 pm
Thanks to Svuppe, I was able to add support for upgrading an E5 (with 2.3.0). As usual, resolution increase+noise disable. The extra E5 features stay enabled, of course.

I've attached it to my original post (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297)). As usual, let me know if there are any issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 27, 2014, 03:13:56 pm
Loving how this thread is progressing! Some great work by some people!

I've got a range of cameras at work which I have been carefully experimenting with. Since they are active IR cameras, I have to be careful as to not invalidate their calibration, so I have only played around with copies of the files for now. If anyone would like a copy of the files, please let me know.

I have the:
E60 2012 model
E60 2014 model
B400

So far I can access all three cameras using FTP and can alter the config.d files. Interestingly, the 2014 E60 has less features than the 2012 model?! Has anyone else noticed this? As for the B400, whilst it may not have the option to increase the resolution, I believe I can turn on some more features. I haven't seen anyone mention this range of cameras (T4xx and B4xx), so if anyone else has had any success altering them, please share your results!

I also have the much older PM6xx series camera, which I've successfully managed to get working wirelessly! I'll post more on this later.

I'm starting to think this forum needs it's own thermal imaging section...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 28, 2014, 02:09:14 pm
STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v02.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the zip into the PYTHON folder.
- open CMD, go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.


Compet17,
You sir, are a stud.

Thank you all for creating such a great resource. I am getting my E4 today in the mail from Amazon that will likely be 2.3.0 and I will give this procedure a try.

I'll be using the camera primarily with my appliance repair business with the occasional hog hunt thrown in.

I'd be interested to know the quickest way to get images from the e4 to an iPad Air, but I'll continue to search in case this has been answered before.

Thanks guys!
Andy

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 28, 2014, 03:55:26 pm
Pulled the trigger on the E4.  Cant go wrong with the unit being $746 today at zoro
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 28, 2014, 04:55:28 pm
I'd be interested to know the quickest way to get images from the e4 to an iPad Air, but I'll continue to search in case this has been answered before.

Dunno if anyone has tried it with a iPad yet but I have gotten pics off it with my Nexus 7 and RAZR HD with a USB OTG cable.

You could try a http://store.apple.com/us/product/MD821ZM/A/lightning-to-usb-camera-adapter?fnode=3a (http://store.apple.com/us/product/MD821ZM/A/lightning-to-usb-camera-adapter?fnode=3a) but knowing Apple - who knows if they will let it work or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on October 28, 2014, 05:39:08 pm
Pulled the trigger on the E4.  Cant go wrong with the unit being $746 today at zoro

The code is valid for today only at zoro.com, use "FUZZY" and it brings the price down to $746.25 + free shipping. Use your Discover card (sign up first for online 5% back) and your net cost should be ~$709. Add the hack and that price will be hard to beat for a 320x240 imager for some time to come I think.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 28, 2014, 05:48:39 pm
Yeah don't forget the 2% fatcash from fatwallet in addition to the discover 5% and 25% coupon code.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 28, 2014, 07:00:21 pm
I need help.
Where can I find the zip file "E4 hack "v02.zip" for Version 2.3.0.
Also, I'm trying to hack my E4, so far, I'm up to the point where it is mention " If all that works, type "quit" to exit and close ftp connection." Everything before has been working perfectly. No problem to communicate with my E4

But I don't know which file to copy in the Python folder, I don't even know where to find that folder, do I have to create it?
I got Python software version 2.7.8 64 bits, This is what was needed for my computer, is it ok?
If somebody could guide me to complete the hack, it would be very appreciated.
Thanks

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v02.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the zip into the PYTHON folder.
- open CMD, go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on October 28, 2014, 11:13:38 pm
copineau

Python27 cluster in your pc is under c:\Python27

You don't need v0.2 hack, v0.3 is updated one.

Original post is:
Ok, whatever, here's a firstsecond version.

From the readme:

Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes.

If that's the case, that sounds good. Otherwise, this hack is not for you.

 - Download+install python2 (not python3)
 - Download+extract this zip
 - Set Camera to RNDIS mode
 - run "apply.py apply <ipaddress of camera>". If it fails, please provide
   the output for diagnostics.
 - Hard-Reset the camera


Let me know if anyone has problems using this.

EDIT: If you get "550 File unavailable", please just re-run the script. I'll work on a better fix. If retrying doesn't work, let me know.
EDIT: tried to fix the "550" issue with more retries. Seems killing the app sometimes keeps the DLLs busy for "a while" (for whatever definition of that). Let's hope this helps.

IF YOU STILL HAVE ISSUES WITH "550" with v0.3, let me know. You can always resort to manually uploading the binaries if you want - they are preserved if upload fails.

EDIT2: Added v0.4.zip with support for the E5.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 28, 2014, 11:26:46 pm
Isn't v0.4 the latest version?  Why not use that?

I need help.
Where can I find the zip file "E4 hack "v02.zip" for Version 2.3.0.
Also, I'm trying to hack my E4, so far, I'm up to the point where it is mention " If all that works, type "quit" to exit and close ftp connection." Everything before has been working perfectly. No problem to communicate with my E4

But I don't know which file to copy in the Python folder, I don't even know where to find that folder, do I have to create it?
I got Python software version 2.7.8 64 bits, This is what was needed for my computer, is it ok?
If somebody could guide me to complete the hack, it would be very appreciated.
Thanks

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v02.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the zip into the PYTHON folder.
- open CMD, go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 29, 2014, 01:12:31 am
sofisticated
Thanks for the info, I now have v0.3
What I need to know now, is where do I copy the two files "common dll and conf.cfc delta" Do I have to create a new folder in Python27?
If so, how do I get to this python folder?
When I open phyton.exe, there is a command window that open, from there, I've no idea how to get to my folder, I don't know the command to do it. In reality, I don't know much about computer, this is why I'm stuck there.
I started to read how the Python software works, there is a lot of reading to do.
Some guidance would be appreciated! :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 29, 2014, 05:02:26 am
Hey Copin,
I got stuck at the same spot but powered through.
I'm not very savvy with Python either, but it was something to the effect of:
"Cd c:/python27"
That should get you to the correct directory assuming your file is named Python27.

I got my 2.3.0 hacked, but am having trouble getting FlirTools to recognize my camera as being plugged in. It won't allow me to import anything.
"No Source was found.  Please connect a camera or sd and click reload."

Any tips?

Thanks very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 29, 2014, 09:02:17 am
You may have to re-enable "UVC and MSD" mode in the Settings>USB Menu

In fact I highly recommend exiting RNDIS mode and entering "UVC and MSD" after a successful hack as it should make it harder for any Flir stealth firmware "upgrades".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 29, 2014, 12:24:31 pm
@andif80
Thanks for your help!
The problem I have now is syntax error when I do the "apply"
- copy the hack files from the zip into the PYTHON folder.
- open CMD, go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

If you can tell me what I'm doing wrong ( or anybody) it would be appreciated.
And then, let me know how to upload the files back to the camera, is there a special command for this?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 29, 2014, 12:38:12 pm
When you physically go to your Python27 folder on your computer do you see the back up file as having been created?
Are there 2 files in there?

If yes, try pulling the battery out and rebooting the camera. You should be done.
The Python scripting applies (swaps) the files automagically.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 29, 2014, 12:41:16 pm
I do not seem to be able to access a hidden menu by holding down the right button for 10sec.

Is the hidden menu a feature found with the menu upgrade and thus not part of this hack? (I.e resolution only?)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 29, 2014, 12:44:30 pm
I dont have my camera in front of me but I think you have to go into "camera information" then hold right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 29, 2014, 12:53:02 pm
Andyf80
When you physically go to your Python27 folder on your computer do you see the back up file as having been created?
Are there 2 files in there?
I have only the original file, no new file has been created.
Any idea why I get this syntax error?
I'm using the cmd window from Python, when I open it, I'm directly into the python27 folder ( all folders), I added my 2 files in there just by copying them, I did'nt create a new folder to place them, is it ok?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: luis garcia on October 29, 2014, 05:30:41 pm
Where is the  limit of close focus for the E4 lens ?
I have been able to rotate the lens half way to the left (using the plastic device on thingiverse). With this setting I can focus about 10cm from the object. I have noticed that the lens screw is pretty loose at that position though. 

Which is the limit for the lens screw before it gets too loose ? In other words, which is the sensible limit to rotate the lens without risking the lens geting out the camera or something ?

By the way, which is the benefit of using a custom close-up lens, in place of just rotating the lens ?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 29, 2014, 07:07:25 pm
I have no idea what is happening, I run the set_RNDIS.fif it all works but when I run IPCONFIG I do not see my camera. Also if I try to connect to 192.168.0.2 with FTP it does not recognize it. Can you help me?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 29, 2014, 07:36:57 pm
BPAN
I had the same problem, I reloaded the driver for the camera and after that, I was able to see it using ipconfig. I could'nt before.
I got the driver from FLIR website.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 29, 2014, 07:51:46 pm
I have looked and looked I can't find a driver anywhere.... you wouldn't have the link would you?
EDIT: I found them.
EDIT2: Still not connecting I don't know what to do...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 29, 2014, 08:05:13 pm
I dont have my camera in front of me but I think you have to go into "camera information" then hold right.

Thanks Bookaboo,
That did it!
I'll test to see if I can get FlirTools to recognize the camera when I get home.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 29, 2014, 08:26:35 pm
OKAY!!! I got all that, but now when I come to entering my "password" it wont let me type ANYTHING!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 12:01:02 am
The password is protected where it doesn't show the letters or typing.
Simply type the password and hit enter.  It should work for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 12:02:38 am
Also, here is the link to the drivers just in case anyone is still looking for them:

http://support.flir.com/SwDownload/App/RssSWDownload.aspx?ID=70 (http://support.flir.com/SwDownload/App/RssSWDownload.aspx?ID=70)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 12:11:36 am
I was able to get in to the hidden menu and see the USB Mode section.  However, when I try to change the USB Mode to MSD (or any other option besides USB) it takes me back to the previous screen with no change made.

Anyone have any tips?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 30, 2014, 01:04:24 am
Hi, I'm very close to succeed to get my high resolution for my E4.
the problem that I have is this ( see the attach file)
The backup file has been created, I can see it in the python folder, the new dll and cfg have been created also.
But I got error 550, the program won't upload the file back to my E4.
Any suggestions??
Thanks a lot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 01:28:48 am
I'm almost there, thanks so much for the help guys you've been great! When I go to "apply" all I get is this. Nothing seems to work I don't have any extra files or backups or anything.
EDIT: Wow I am dumb.
Thank you so much for this! It worked great. I will try to make a how to video of this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 01:29:47 am
Hey Copineau,
I got a similar issue, but did a reboot by removing the battery and mine took anyway.

Sorry, wish I could be more help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 02:02:42 am
I have created a Torrent with all the needed files in order to hack the E4 please seed if you download.
Thanks!
https://thepiratebay.se/torrent/11327374 (https://thepiratebay.se/torrent/11327374)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 30, 2014, 02:03:53 am
bpan
what did you do to get it work?
We were almost at the same point.
Look at my post, the only thing missing is cause by error 550.
EDIT  I'm trying to download your torrent.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 02:14:49 am
My only problem was that rather than typing "python apply.py apply 192.168.0.2" I typed "apply.py apply 192.168.0.2"

The program ran itself a few times before it actually downloaded. Are you using v3.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 30, 2014, 02:17:46 am
bpan
Yes, I'm using v3
It did create the files but it won't upload it to my e4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 02:35:50 am
You have logged into your camera via FTP? Are you sure you have the right IP address? Sorry I don't really know what I am doing, I am not a programmer I am just a guy bumping my way through hacking an infrared camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 3roomlab on October 30, 2014, 02:49:17 am
i have a small Qn @ the more experienced E4 coders, for manual temp range mode, is there a way to write somekind of startup setting so that the E4 will always start in a certain mode and temp range ?

and also, is there something i can fiddle with to improve the image algorithm? or reduce its compression rate when it saves?

thanks in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 03:20:04 am
Out of curiosity, is anybody working on the menu hack at the current moment?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on October 30, 2014, 09:05:46 am
Flir disabled selection of RNDIS in V2.3 (or at least made it some secret key combo we haven't figured out).
To enter RNDIS mode you need follow these instructions from Mikes post #483 in this thread:


To set USB RNDIS mode temporarily - until next hard restart
Run FLIRInstallNet, run the "Set_RNDIS_Temporary" .fif file
You will get a timeout error as it dumps the USB connection.

.fif Scripts are also included to set RNDIS permanently, and also remove permanent RNDIS
These add/remove the appcore.d\factory.d\zrndis.rsc file

When RNDIS is active, USB Mass sotrage and video mode are NOT available.
Access to files is still possible via FTP or the the Flir T3Mon virtual drive util that comes with the RNDIS device drivers

Note FlirInstallNet WILL work over RNDIS.

You can find the relevant files in post #483.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 30, 2014, 09:38:24 am
Does anyone else think that a thread like this, should be private? No doubt FLIR are monitoring this thread very closely, so they know when they need to work on a new fix to render the hacks useless. At least in a closed environment, users can be vetted and the hacks could continue to be developed in more secrecy?

I know it's nice to have everything public, but it would help delay FLIR's response and potentially cut back on those scalpers selling E4s with lower firmware revisions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on October 30, 2014, 01:18:54 pm
I did it!!
My E4 has now a LOT better resolution.
The problem that I had was that the new created file wouldn't load back to the camera ( the files that are located in the python folder)
What I did, I deleted the new created files (dll.dll and conf.cfc) and I tried it again because I was getting error 550.
I did it about 5 times and suddenly, I got the message "reboot device" I knew I had succeeded!
It works perfect now, quite a difference in quality.
I'm very happy and I want to thanks everybody that worked hard to give us the chance to achieved the hack.
Really appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 01:35:51 pm
Thanks again Bookaboo, I'll give that a try!

Great work Copinaeu.

Thank you all for helping make this happen.
The stock resolution was a joke in comparison.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 30, 2014, 02:02:34 pm
and also, is there something i can fiddle with to improve the image algorithm? or reduce its compression rate when it saves?

There are, but your much better off working with the RAW data that is embedded in the existing JPG's since it's loss-less.

Do some more reading in this thread - tools like flir.php and BFIC that extract and work with the RAW sensor data have already been made available and can be used to make wonderful images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marcel 88 on October 30, 2014, 03:57:57 pm
Hi, today my new E4 was in the mail but i can't connect with ftp to the thermal cam. I'm following the instructions on page 377. But at the step with the ipconfig i get this ip address from the cam: 169.254.237.105. (I installed the camera driver manually) What did I miss, where is my failure?

Hopefully someone can help me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on October 30, 2014, 05:25:36 pm
Have you tried:
Ftp
Open 169.254.237.105 ?


Thanks for the help everyone!
I got mine hacked and recognizing the usb in flir tools now. I appreciate it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on October 30, 2014, 06:26:32 pm
169.254.x.x indicates that Windows did not get a DHCP response and assigned a "zeroconfig" (or whatever it's called these days) address. I don't know how the setup is _supposed_ to be (is there a DHCP server running on the cam?), but I had to hardcode the IP configuration to (for example) 192.168.250.1 in network settings.

To figure out the CAM's IP address, I used tcpdump (or wireshark), and saw some packets from the cam.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 30, 2014, 09:27:51 pm
oh my ... that lens ! thanks for the heads up
flir.php ... so much search result returns :p

No special lens was used - that's a E4 modded with the res hack - but there is a catch.

Your going to need ImageMagick, MS ICE, PHP, EXIFTool, FLIR Tools, and a decent chunk of time.

There is another PHP file here (splitjpg.php) that was used to stitch many images together into a panoramic with MS ICE then I ran the output though the splitphp then FLIR tools then finally the flir.php. It's a bit convoluted but results are  :-+. Users here like tomas123 and daves have contributed some insane work on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 30, 2014, 09:28:33 pm
Torrent is unavailable.


I have created a Torrent with all the needed files in order to hack the E4 please seed if you download.
Thanks!
https://thepiratebay.se/torrent/11327374 (https://thepiratebay.se/torrent/11327374)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 30, 2014, 11:00:18 pm
I dont know why but the torrent and account have been deleted. Maybe I was not following their rules?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 30, 2014, 11:23:17 pm
I gave up on trying to get this working on my main PC.  I even tried static IPs. 

I switched to my laptop and it assigns an IP OK.

Have you tried:
Ftp
Open 169.254.237.105 ?


Thanks for the help everyone!
I got mine hacked and recognizing the usb in flir tools now. I appreciate it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 31, 2014, 03:33:00 am
Why is that no one is saying that 192.168.0.1 is the default gateway IP on many home routers and as such this IP and 192.168.0.2 may already be assigned to other computers and that may create a conflict and cause all sort of glitches when performing the published procedure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 31, 2014, 04:20:50 am
Does anyone remember if FLIR had Christmas sale discounts last year ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 31, 2014, 06:05:31 am
Dunno about Christmas sale, but they did have a promotion same time as e4 was released.

Since I missed the 25% off at zoro tools, I am hoping they have similar/usual discounts for black friday/cyber monday. (dec 1).
25,30,40 previous years.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on October 31, 2014, 07:11:19 am
Since I missed the 25% off at zoro tools, I am hoping they have similar/usual discounts for black friday/cyber monday. (dec 1).
25,30,40 previous years.

Don't expect Black Friday or Cyber Monday discounts on thermal cameras because the average end-user does not buy test equipment. But never say never...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: larry42 on October 31, 2014, 09:34:11 am
For close-up work:
How is the FLIR lens held in place - will repeatedly screwing/unscrewing cause the fastening mechanism (gasket?) to wear out?
I have a ZnSe element on order, but I would prefer to only use the FLIR internal lens, as I guess the temperature accuracy is better with only the internal lens.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on October 31, 2014, 10:24:38 am
My home network is 192.168.1.1.  So there is some other issue going on here...


Why is that no one is saying that 192.168.0.1 is the default gateway IP on many home routers and as such this IP and 192.168.0.2 may already be assigned to other computers and that may create a conflict and cause all sort of glitches when performing the published procedure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marcel 88 on October 31, 2014, 11:54:06 am
I solved my IP address problem. Now I tried it on my old Win XP PC and it works just fine.

So really great job you guys. Thanks a lot  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 31, 2014, 01:37:40 pm
not lens? but it looks sooooo fish eyed :D ( i tried to read everything ... but my brain is not syncing lol ... i will try experimenting later again)

Yeah MS ICE's stitching makes it look like that.

I do have a lens/holder for close up work but all the big stuff is stitched.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 31, 2014, 03:14:46 pm
ok the first image is a stiching of 4 quadrants and the lower 1 is a pano right?

The first one is one image done though a CO2 lens but flir.php by default resizes 200% and smooths a bit hence the larger size.

The second one is a pano but I disabled the resize since it would be super wide if I left it.

For close-up work:
How is the FLIR lens held in place - will repeatedly screwing/unscrewing cause the fastening mechanism (gasket?) to wear out?
I have a ZnSe element on order, but I would prefer to only use the FLIR internal lens, as I guess the temperature accuracy is better with only the internal lens.

There would be a bit of wear but I would be more concerned that once you touch the lens your calibration and image correction are compromised anyway. I don't understand it all myself but mrflibble did some great work on this around the 140-150 page mark I think.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bpan on October 31, 2014, 04:15:21 pm
Sorry this is a little off topic, I am just wondering if anyone knows who makes the case for the e4. I like it a lot and want more cases similar to it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on October 31, 2014, 04:25:58 pm
The soft case was made by www.shell-case.com (http://www.shell-case.com).
I don't have the hard case handy to figure out who made it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on October 31, 2014, 04:32:36 pm
Sorry this is a little off topic, I am just wondering if anyone knows who makes the case for the e4. I like it a lot and want more cases similar to it!
If you mean the hard case, look for "peli case" - not sure if the Flir one is actually made by Peli or is a look-alike
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chuckw99 on October 31, 2014, 09:01:08 pm
I'm new to TIC's. I needed one for a boiler project and didn't even know about the hack at the time.

Well crap on a cracker that was easy!!! Upgraded.

Thanks to all the developers and people with questions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emtgreg on October 31, 2014, 10:38:06 pm
I am attempting the upgrade to my 2.3/1.2L E4, and I am stuck. I have used FLIRInstallNet to enable RNDIS mode using the temp RDNIS file(I think) however I cannot select anything in the hidden USB menu...and after I log into the camera it stalls out at the 150 File status ok; about to open data connection. any ideas?

EDIT: it did not appear that my camera was in RNDIS mode, now when I go into the USB menu it is right. Ill get this yet!

Success!

Also I would like to say something to those to are  working on this project, THANK YOU!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 01, 2014, 03:15:29 am
There is no need for "v0.1" of this hack. You can use v0.2 just fine. Please do not recommend v0.1, since it did fewer error checks, did not automate the "stopapp" etc.;

if the only issue is the "550", you can _still_ upload the files manually. Just use v0.2, and then manually upload the files.

  this hacked for flir e4 2.3.0 f/w or can it done on 2.1.0 f/w?
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on November 01, 2014, 11:31:31 am
Quote from: bpan on October 30, 2014, 02:20:04 PM (https://www.eevblog.com/forum/index.php?topic=21772.msg540324#msg540324)
Out of curiosity, is anybody working on the menu hack at the current moment?


I'm not sure if this is relevant for a "native" 2.3.0 camera but I've succeeded in an implementation of at least most of the add-ons of the 1.19.8 mods on a camera that has been "updated" to 2.3.0 (...my fault...), i.e. with the cfg files not encrypted. Since the menu-related stuff isn't encrypted anyway, the upgrade may as well work on a native 2.3.0 installation. Anyway, I recommend experimenting with this only for those who know what they are doing. And please always backup your original files before overwriting anything.

Cheers,
Thomas

Sorry - Attachment removed since it wouldn't run on a "true" 2.3.0 version, see contributions below.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 01, 2014, 08:15:45 pm
Got E4 today, and this is 2-3 hours in my hands. And of course I tried that Menu Upgrade.... and ended with black screen. And nothing connects after reboot with E4. No ThermaCAM Connect 3 and no FTP - wrong password. Somewhere in FLIRInstallNet window I saw CRC error after pressing all buttons, maybe "Check Installation".
Reflashed firmware 2.3.0 - now lets try something more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on November 01, 2014, 10:51:54 pm
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on November 01, 2014, 10:57:27 pm
I'm not sure if this is relevant for a "native" 2.3.0 camera but I've succeeded in an implementation of at least most of the add-ons of the 1.19.8 mods on a camera that has been "updated" to 2.3.0 (...my fault...), i.e. with the cfg files not encrypted. Since the menu-related stuff isn't encrypted anyway, the upgrade may as well work on a native 2.3.0 installation
How did you update? Replacing files?

A real 2.3.0 has a signed applaunch.dat which includes hashes for the UI data, so if you change the original files, the app will not lot automatically anymore.

(That said, there's a relatively easy way to swap out those files, but I'd rather stay away from a menu hack. I'd rather prefer if we could come up with an alternative UI, using the existing drivers, or even full firmware replacement (linux? bare metal?) that's rewritten from scratch and doesn't have artificial limitations, and a plug-in API for measurement functions.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 02, 2014, 07:26:41 am
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Download update from homepage and browse it to FLIRInstallNet.exe and "Run FIF"
But something strange was with resolution hack, it did not run. It patch dll, but Config.cfc was already hacked -
it did backup where was original dll and cracked cfc. But when I looked into E4, that moment was there original cfc.
I uploaded patched from that backup directory.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 02, 2014, 08:09:06 am
A real 2.3.0 has a signed applaunch.dat which includes hashes for the UI data, so if you change the original files, the app will not lot automatically anymore.
Yes... if I replace only one file toolbar-config_z3.xml, camera is dead... black screen and it locks connections to it - wrong password.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on November 02, 2014, 09:13:55 am
Yes on the "updated" 1.19.8, replacing the files did the trick. But then, the CFG files aren't encrypted either. The applaunch.dat file is present after the "update" but apparently it doesn't do anything. At least, it doesn't affect running the modified XML scripts. So I guess I'll better remove the file to prevent others from getting in touble... Thanks for pointing this out!

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 02, 2014, 10:20:47 am
Hi!

I have been reading this thread a lot in the lately, a bunch of pages in the beginning and a lot of pages in the "half way" and most of all the pages from post #5633 to where we are now.

So if i understand correctly we now are able to get high resolution on version 2.3 but no other extra features seems to be solved for a manufactured v2.3, and the problem is that Flir now has an encrypted config (?) file.

Is this encrypted file possible to get my hands on without a camera (i will have an camera next week and it will probably have v2.3) but it would be interesting to have a look att the encrypted file before the TIC arrives.

Best regards
N
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on November 02, 2014, 12:32:55 pm
Yeah this entire thread is out of control. There needs to be separate sections for the different software versions.

Hi!

I have been reading this thread a lot in the lately, a bunch of pages in the beginning and a lot of pages in the "half way" and most of all the pages from post #5633 to where we are now.

So if i understand correctly we now are able to get high resolution on version 2.3 but no other extra features seems to be solved for a manufactured v2.3, and the problem is that Flir now has an encrypted config (?) file.

Is this encrypted file possible to get my hands on without a camera (i will have an camera next week and it will probably have v2.3) but it would be interesting to have a look att the encrypted file before the TIC arrives.

Best regards
N
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 02, 2014, 01:36:40 pm
There is another E4 thread for newbies as an aid to prevent this one getting too confusing and also as a quicker way to get help. Suggest those with upgrade questions use that thread ?

Full details in Mike's fist Post ...here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg309194/#msg309194 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg309194/#msg309194)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 02, 2014, 04:55:23 pm
The applaunch.dat file is present after the "update" but apparently it doesn't do anything. At least, it doesn't affect running the modified XML scripts.
´
There is  one sgn file - applaunch.sgn and inside applaunch.dat is some files lenght and crc. Like that -
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514
somewhere something checking them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 02, 2014, 05:18:34 pm
Hi!

I have been reading this thread a lot in the lately, a bunch of pages in the beginning and a lot of pages in the "half way" and most of all the pages from post #5633 to where we are now.

So if i understand correctly we now are able to get high resolution on version 2.3 but no other extra features seems to be solved for a manufactured v2.3, and the problem is that Flir now has an encrypted config (?) file.

Is this encrypted file possible to get my hands on without a camera (i will have an camera next week and it will probably have v2.3) but it would be interesting to have a look att the encrypted file before the TIC arrives.

Best regards
N


  I was trying to get help too with f/w 2.1.0 but not sure 2.3.0 hacked work on 2.1.0 or I need to upgrade to 2.3.0.
Thank all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 02, 2014, 06:03:55 pm
Tom9999, have yout checked if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes?

According to Readme in v0.4 for the 2.3Hack:
Quote
Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes (or 6336 for the E5).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 03, 2014, 05:58:50 pm
The applaunch.dat file is present after the "update" but apparently it doesn't do anything. At least, it doesn't affect running the modified XML scripts.
´
There is  one sgn file - applaunch.sgn and inside applaunch.dat is some files lenght and crc. Like that -
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514
somewhere something checking them.
After thinking all night I tried hack this menu. All files are in E4 anyway from first copy, only those
facet_z3.rcc and toolbar-config_z3.xml do not let him boot... here I found weak point. I replaced
files after boot but before he reads them. And I saw this enhanged menu but all not working and
camera crashed. After that things gone very bad. I lost MSX and measure spot and other stuff.
Make all working again was bit difficult...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mannebanne on November 04, 2014, 12:53:13 am
Hi everyone

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Link: http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1 (http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu_1)

Cheers
Erik


Dear all,
It seems that the above filedropper link is dead. Could somebody please resend the guide or update the link?
Wishes Manne
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Andyf80 on November 04, 2014, 01:24:45 am
How to: Transfer images from a hacked 2.3 E4 to an IPad Air (iOS 8.1) via usb

Initially I purchased one of these:
(http://thumbs1.ebaystatic.com/d/l225/m/mRFYnqJ49qKcjpNCdDxL3Ag.jpg)

Upon hooking up the Flir it gave me an error of:
"Cannot use device: the device uses too much power captain" (using your best Scottish accent)

At this point, figured there was not a way.
Then, I found this video which explains how you can use a non-powered usb hub in-between the adapter & camera cord to bypass the error.
Video: http://youtu.be/J-I-nnocYtU (http://youtu.be/J-I-nnocYtU)

For my usb hub I bought one of these cheesy things at Walmart for $6.
(http://gnr8.cachefly.net/gnr8biz/images/hubmanmain2.jpg)

For me it worked well except ONLY the thermal images transfer over vs the original & thermal.

Anyone know if that is a settings issue?


In order to have the original photo transfer on to your ipad with the thermal, you must select on your camera:
Main menu
Save options
Photo as a separate JPEG > on

Perform a Reboot

This will allow you to import the photos from your camera roll to Flir Tools for Ipad and edit, notate and email from the ipad.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on November 04, 2014, 02:35:34 am
Thanks to everyone for all the work. I've just ran the resolution hack on my new v2.3 E4 following the instructions at:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619)

It was successful on writing the files on attempt 4 and I did a reboot removing the battery but the resolution is still the same with a lot of noise as well. I tried both v03 and v04.zip but it just tells me the files have already been modified.

"Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes."

conf.cfc on my camera is 6608 bytes.

Any ideas?



Edit:

I deleted via FTP and re-ran apply.py and rebooted again. Now resolution seems much better!!!!



I can't thank everyone here enough for all the good work. Hopefully a successful menu hack and special edition will be possible for v 2.3.

My camera is brand new shipped with v 2.3 and the banner above the screen is a blue E4 instead of white.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 04, 2014, 07:19:56 am
You deleted what, can you be more specific?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on November 04, 2014, 11:28:53 am
Wow zoro tools has 30% off today on the E4.  5% more if you use discover.  I only got 25% last week...

code: SaveBig
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 04, 2014, 12:30:54 pm
Wow zoro tools has 30% off today on the E4.  5% more if you use discover.  I only got 25% last week...

code: SaveBig

Code has expired :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on November 04, 2014, 01:19:06 pm
@zoro - check date and time

*30% off your order—maximum savings of $2,000. Enter SAVEBIG at checkout. Limit one (1) use per customer. May not be combined with any other promotions or discounts. No minimum required. Offer may not be applied to previous purchases. Offer valid Tuesday, November 4, 2014 from 11am to 2pm CT.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on November 04, 2014, 02:21:51 pm
You deleted what, can you be more specific?

Actually replaced the common_dll.dll and conf.cfc with the originals on the E4 via ftp, deleted the common_dll.dll from the Python27 folder and tried the process over again. I don't know why it didn't work the first time even though there were no errors and everything said it worked.

Both times writing the files to the E4 succeeded on attempt 4.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 04, 2014, 05:59:53 pm
When I received my new Flir yesterday I had ha happy time after start-up when looking up the sw version.

After been reading this thread back and forth i was sure that i would get an V2.x but i did actually get an V1.22  :-+ ;D :D 

So after 5 mins i had a updated TC :)

Model:E4 1.1L
SN:639221***

EDIT:Spelling
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 04, 2014, 06:07:30 pm
When I received my new Flir yesterday I had ha happy time after start-up when looking up the sw version.

After been reading this thread back and forth i was sure that i would get an V2.x but i did actually get an V1.22  :-+ ;D :D 

So after 5 mins i had a updated TC :)

Model:E4 1.1L
SN:639221***

EDIT:Spelling

  nice to get old E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 04, 2014, 06:39:56 pm
@ nissepisse: May I ask where you ordered your TIC? That dealer must have an unbelievable old supply chain.
But have fun with your new E4+ ! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 04, 2014, 06:51:14 pm
Well, it was ordered in Sweden... I was thinking that Flir would have exchanged those in the "home area" first of all but it doesn't look that way. Probably is the selling volume quite low here and therefore a lot of old units still in stock.

Mine was calibrated in March.


 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 04, 2014, 08:42:44 pm
  Do I have to do E4 hack in windows only or can I do it in ubuntu Linux OS?

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 04, 2014, 09:00:08 pm
If i´m wrong i hope someone will correct me but from what i can find you will need microsoft os since the drivers only seems to be for ms.

The python scripts should work if you get the drivers to work, but TIConfig uses .NET framework.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 04, 2014, 09:39:32 pm
The applaunch.dat file is present after the "update" but apparently it doesn't do anything. At least, it doesn't affect running the modified XML scripts.
´
There is  one sgn file - applaunch.sgn and inside applaunch.dat is some files lenght and crc. Like that -
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514
somewhere something checking them.
After thinking all night I tried hack this menu. All files are in E4 anyway from first copy, only those
facet_z3.rcc and toolbar-config_z3.xml do not let him boot... here I found weak point. I replaced
files after boot but before he reads them. And I saw this enhanged menu but all not working and
camera crashed. After that things gone very bad. I lost MSX and measure spot and other stuff.
Make all working again was bit difficult...
Ok, i have menu now, but what I must see? I have now 8 color palletes,
scale: auto - lock - unlock and measurement: new delta s and delta t.
But delta s like center spot and delta t like no measurement. And that's all.

My camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 04, 2014, 09:40:22 pm
The applaunch.dat file is present after the "update" but apparently it doesn't do anything. At least, it doesn't affect running the modified XML scripts.
´
There is  one sgn file - applaunch.sgn and inside applaunch.dat is some files lenght and crc. Like that -
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514
somewhere something checking them.
After thinking all night I tried hack this menu. All files are in E4 anyway from first copy, only those
facet_z3.rcc and toolbar-config_z3.xml do not let him boot... here I found weak point. I replaced
files after boot but before he reads them. And I saw this enhanged menu but all not working and
camera crashed. After that things gone very bad. I lost MSX and measure spot and other stuff.
Make all working again was bit difficult...
Ok, i have menu now, but what I must see? I have now 8 color palletes,
scale: auto - lock - unlock and measurement: new delta s and delta t.
But delta s like center spot and delta t like no measurement. And that's all.

My camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on November 04, 2014, 09:48:03 pm
It should work from Linux. In fact, I've developed the 2.3.0-hack in Linux.

There's a very ugly tool included (usbmode.py) that switches the cam from UVC+MSD to RNDIS. After that, the default rndis kernel driver should attach, giving you an eth device. You need to setup the IP address manually ("ifconfig eth1 192.168.0.1 up" for example if your cam's address is 192.168.0.2; you can use tcpdump to figure it out if you don't know it) though.

Make sure ping and telnet works okay before using apply.py.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 04, 2014, 10:06:39 pm
Ok, i have menu now, but what I must see? I have now 8 color palletes,
scale: auto - lock - unlock and measurement: new delta s and delta t.
But delta s like center spot and delta t like no measurement. And that's all.

My camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014

Zoom, 13 color pallets, 7 measurements, picture in picture in image mode is what i have on my 1.22 after update (maybe something more has changed but this is what i can se now after update).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AleXYZ on November 05, 2014, 12:12:00 am
Wow zoro tools has 30% off today on the E4.  5% more if you use discover.  I only got 25% last week...

code: SaveBig

Thanks, viacom1!  Because of the existence of this forum and that 30% off sale, I finally pulled the trigger and ordered a E4 unit.  Saving almost $300 bucks made the decision easy(ier).

Now the hacking begins...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: myrong on November 05, 2014, 12:52:53 am
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Download update from homepage and browse it to FLIRInstallNet.exe and "Run FIF"
But something strange was with resolution hack, it did not run. It patch dll, but Config.cfc was already hacked -
it did backup where was original dll and cracked cfc. But when I looked into E4, that moment was there original cfc.
I uploaded patched from that backup directory.

Tried the same thing as you, and got the black screen. Which FIF file did you use to fix it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JasonM on November 05, 2014, 03:57:20 am
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Download update from homepage and browse it to FLIRInstallNet.exe and "Run FIF"
But something strange was with resolution hack, it did not run. It patch dll, but Config.cfc was already hacked -
it did backup where was original dll and cracked cfc. But when I looked into E4, that moment was there original cfc.
I uploaded patched from that backup directory.

Tried the same thing as you, and got the black screen. Which FIF file did you use to fix it?

Download the FLIR Ex (2.3.0) Update Pack (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.3.0_update_pack.zip) and unzip it. It should contain Z3comb_v2.3.0.fif.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 05, 2014, 06:17:17 am
  I did get screen hacked work with 2.1.0 f/w.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tom9999 on November 05, 2014, 06:38:36 am
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Download update from homepage and browse it to FLIRInstallNet.exe and "Run FIF"
But something strange was with resolution hack, it did not run. It patch dll, but Config.cfc was already hacked -
it did backup where was original dll and cracked cfc. But when I looked into E4, that moment was there original cfc.
I uploaded patched from that backup directory.

Tried the same thing as you, and got the black screen. Which FIF file did you use to fix it?

Download the FLIR Ex (2.3.0) Update Pack (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.3.0_update_pack.zip) and unzip it. It should contain Z3comb_v2.3.0.fif.

  what is news on 2.3.0 F/W and I am still on 2.1.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: myrong on November 05, 2014, 06:46:23 am
Reflashed firmware 2.3.0 - now lets try something more.
How is it possible to reflash 2.3.0 ??
Download update from homepage and browse it to FLIRInstallNet.exe and "Run FIF"
But something strange was with resolution hack, it did not run. It patch dll, but Config.cfc was already hacked -
it did backup where was original dll and cracked cfc. But when I looked into E4, that moment was there original cfc.
I uploaded patched from that backup directory.

Tried the same thing as you, and got the black screen. Which FIF file did you use to fix it?

Download the FLIR Ex (2.3.0) Update Pack (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.3.0_update_pack.zip) and unzip it. It should contain Z3comb_v2.3.0.fif.


Unfortunately, mine appears a little more fubar'd. After successfully uploading the FIF file and eFLIRInstall.exe and unplugging the USB after, there's no installation progress displayed on the camera screen. Tried it multiple times. Any suggestions
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 05, 2014, 05:31:05 pm
Ok, i have menu now, but what I must see? I have now 8 color palletes,
scale: auto - lock - unlock and measurement: new delta s and delta t.
But delta s like center spot and delta t like no measurement. And that's all.

My camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014

Zoom, 13 color pallets, 7 measurements, picture in picture in image mode is what i have on my 1.22 after update (maybe something more has changed but this is what i can se now after update).
I think this config.cfg resolution hack not enabling all E8 features and other that in plain text version... cfg must remain same size...
I think here you can see template for cfg
FlashFS/system/service/appcore.d/config.d/conf.cfg
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JasonM on November 06, 2014, 12:52:14 am
Download the FLIR Ex (2.3.0) Update Pack (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.3.0_update_pack.zip) and unzip it. It should contain Z3comb_v2.3.0.fif.


Unfortunately, mine appears a little more fubar'd. After successfully uploading the FIF file and eFLIRInstall.exe and unplugging the USB after, there's no installation progress displayed on the camera screen. Tried it multiple times. Any suggestions

It probably won't do anything itself by copying the FIF/eFLIRInstall.exe to the camera. If you've installed FLIR Tools, execute "FLIR Systems\FLIR Tools\bin\FLIRInstallNet.exe" from the appropriate Program Files directory. Select the camera (FLIR USB Video), browse to Z3comb_v2.3.0.fif, and select "Run FIF". It'll take 30 minutes or so to replace the OS and the contents of "flashbfs/system". You should see the progress of the update in FLIRInstallNet.

If that doesn't work, I am out of suggestions. I had a similar black screen issue. Flir Tools' method of updating by extracting/uploading the FIF and eFLIRInstall.exe to the USB storage would not work, as nothing was booting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 06, 2014, 02:27:11 pm
oh my ... that lens ! thanks for the heads up
flir.php ... so much search result returns :p

No special lens was used - that's a E4 modded with the res hack - but there is a catch.

Your going to need ImageMagick, MS ICE, PHP, EXIFTool, FLIR Tools, and a decent chunk of time.

There is another PHP file here (splitjpg.php) that was used to stitch many images together into a panoramic with MS ICE then I ran the output though the splitphp then FLIR tools then finally the flir.php. It's a bit convoluted but results are  :-+. Users here like tomas123 and daves have contributed some insane work on this.

not lens? but it looks sooooo fish eyed :D ( i tried to read everything ... but my brain is not syncing lol ... i will try experimenting later again)

Just a quick update - the newer versions of FLIR Tools when editing an existing image file would re-save the EXIF info into a newer version that made it incompatible with EXIFTool and cause it to fail. Phil Harvey the EXIFTool Author has updated it to v9.75 and fixes this issue so it works again. http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,6119.0.html. (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,6119.0.html.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emtgreg on November 07, 2014, 12:33:54 am
Has anyone gotten any of the extended functions to work on the 1.2L/2.3.0? I am most interested in the pallets and the measurement tools. I saw earlier that there were a few working on this..was there any progress? Thanks! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud123 on November 07, 2014, 01:26:56 pm
10% off at Zoro
CPNAF10
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on November 07, 2014, 06:24:10 pm
Wait for the 30% towards the end of the month.  Monitor this forum for the code when it becomes available.

10% off at Zoro
CPNAF10
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 07, 2014, 07:08:00 pm
Has anyone gotten any of the extended functions to work on the 1.2L/2.3.0? I am most interested in the pallets and the measurement tools. I saw earlier that there were a few working on this..was there any progress? Thanks! :-+
I can tell you how to use new menu files- toolbar-config_z3.xml, design_ui_z3.xml and facet_z3.rcc or whatever files,
but someone must make them. Existing "2.3.0Menu_Upgrade" adds only more palettes- that I can share with You
and I think new E4 do not have many extended functions...
.image.sysimg.alarms  --  ends here
.ui.userSettings -- ends here
and so on.
Many stuff needs to be enabled somewhere, like pip, zoom, humidity, insulation, isotherm, spot, arrow, box... shortly - all stuff,
without them we have... only more palettes
As I said, my camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emtgreg on November 07, 2014, 08:28:50 pm
Has anyone gotten any of the extended functions to work on the 1.2L/2.3.0? I am most interested in the pallets and the measurement tools. I saw earlier that there were a few working on this..was there any progress? Thanks! :-+
I can tell you how to use new menu files- toolbar-config_z3.xml, design_ui_z3.xml and facet_z3.rcc or whatever files,
but someone must make them. Existing "2.3.0Menu_Upgrade" adds only more palettes- that I can share with You
and I think new E4 do not have many extended functions...
.image.sysimg.alarms  --  ends here
.ui.userSettings -- ends here
and so on.
Many stuff needs to be enabled somewhere, like pip, zoom, humidity, insulation, isotherm, spot, arrow, box... shortly - all stuff,
without them we have... only more palettes
As I said, my camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014

I would be very grateful for the palettes, and maybe a quick install how to. I have already done the res upgrade.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AleXYZ on November 07, 2014, 08:34:42 pm
My FLIR E4 arrived from Zoro this afternoon, and it shipped with v2.1.0 firmware.   The OP indicates 2.1 was a short-lived version with possible connectivity issues, yet a later post indicated success using the V0.3 hack.

Before I start the hack procedure, does anyone know definitively if there is going to be a problem (and possible solution) with applying the hack to V2.1, or should I upgrade manufacturer firmware to V2.3 first?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hugoneus on November 08, 2014, 06:57:19 am
Thank you all for your contribution. I have purchased an E4 which is 1.2L, 2.3.0. I would appreciate a few quick answers:

1) Is there a clear step-by-step instruction for version 2.3.0 available? (I am sorry if I have missed it)
2) Aside from the increased resolution does the hack offer any other improvements? What is still missing compared to the E8?

Any additional comments which you think may be relevant would be very much appreciated!

Cheers,
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 08, 2014, 09:03:13 am
...but, why You do not read messages even in this page?
Sometime answers is 2 messages away.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on November 08, 2014, 09:21:22 am
No worries Shahriar,

janekivi probably doesn't know how much you contribute to the community.

tmbinc is the one that originally figured it out:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297)

Also there is a step by step done by compet17 probably based on tmbinc's work:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619)

I don't know how complete those two posts are since I don't have a flir e4.

Good luck, and I hope it works out smoothly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 08, 2014, 09:47:27 am
Sorry, forgot add link to my answer, where I explained menu and functions.
I thought this is not so far away, my bad.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on November 08, 2014, 10:06:16 am
Hi,

i am very happy that i  found  this Site, my E4 arrived yesterday   1,2L  with 2.3  , calibrated 6 days ago, seem to be brand brand new

I have some questions:


1.  where can i download      Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif     ??





Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes.


2. How can I do that, Software needed?




3. Is Python 2.7.8 the right Version



Thanks from Germany and forgive my poor english :)


Michael
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on November 08, 2014, 03:17:45 pm
Has anyone encountered 'limited range' E4? Wonder could it be reconfigured via this hack to full range E4 camera?
http://store.flir.com/product/e4-infrared-camera-engineering-special/ex-series-infrared-cameras (http://store.flir.com/product/e4-infrared-camera-engineering-special/ex-series-infrared-cameras)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on November 08, 2014, 06:19:46 pm
Hi,

i am very happy that i  found  this Site, my E4 arrived yesterday   1,2L  with 2.3  , calibrated 6 days ago, seem to be brand brand new

I have some questions:


1.  where can i download      Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif     ??





Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608
bytes.


2. How can I do that, Software needed?




3. Is Python 2.7.8 the right Version



Thanks from Germany and forgive my poor english :)


Michael

1) You can find e4hack3c.zip here which includes the RNDIS files:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

2) You must first apply the RNDIS file to enable a network connection to your camera, I recommend only using the temporary file for v2.3. Follow instructions from the below post to load the RNDIS file.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg535619/#msg535619)

Stop after the step of running the Set_RNDIS_temporary.fif and install FileZilla or any ftp program. When you open your ftp program, under host enter 192.168.0.2 then "flir" for username and "3vlig" for the password. When connected you should be able to browse to

 /FlashFS/system/appcore.d/config.d/conf.cfc

Then just check the file size to see it is 6608 in size. Also this is a good time to make a copy of the original conf.cfc for safety.

3) Yes anything below python 3.x.x should work.

Be careful with a v2.3 E4 until someone creates a new hack procedure. I would only attempt the instructions for the resolution hack. Modification of any other files will likely result in a failure to load the camera software and give you a black screen.

The bad part about this is you can be locked out of FTP access with an invalid password error so you have to re-flash the whole v2.3 firmware over again via Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe. In my case the re-flash kept failing until I disabled RNDIS mode first! :scared:

Good luck!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on November 08, 2014, 08:38:14 pm
Many thanks to you northdynamic, that will help me a lot  :-+ :-+


When i have done like its written here, STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners ,  what did i get then? the higher Resolution and the rest stays the same-- Menues, Options, etc.?


Thanks

Michael


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on November 08, 2014, 09:14:06 pm
Windows 8 ask how to handle the .fif  file, which program it should use?? Any Tips?

Thanks

Michael
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scott in Michigan on November 08, 2014, 09:34:07 pm
Bought an E6.  After using it for a while, I can say this: the capability it provides is great, but overall I'm left a bit underwhelmed.  Translate that to mean - I'm sure glad I didn't buy further down the chain. 

It makes me wonder if an unmodified E4 is of much use at all. 

It seems well built.  Boots up quickly. 

The spot temp feature is useful for surveying wiring and junctions, and seems quite precise.  You can zero in on individual conductors and connections.

The MSX feature is what makes the product most useful. 

Scott

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AleXYZ on November 08, 2014, 10:00:39 pm
I am happy to report that my E4 with 2.1.0 firmware is now successfully hacked with the v0.3 files.  I now have 320x240 resolution and the induced generated color noise is GONE.  The picture is now stable and noise-less as I hoped.

Two resources helped me that were not mentioned in tmbinc's otherwise excellent instructions:

(1) A video showing the hack procedure for an earlier firmware version (v1.98)
https://www.youtube.com/watch?v=rYd8Jv8Kz3k (https://www.youtube.com/watch?v=rYd8Jv8Kz3k)

(2) which led me to the missing RNDIS drivers located here:
http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)


I am totally pleased with this brand new camera at a $700 price tag.  Thanks to EVERYONE in the forum who created the hack and made all this information available.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hugoneus on November 08, 2014, 10:03:15 pm
Thank you supermikel, Northdynamic, miguelvp. I appreciate all the help I will try this.

Out of curiosity, after the hack, what does the E8 still offer which the E4 would lack? Is the issue that the firmware version 2.3.0 can't be fully hacked yet?

Thanks,
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2014, 10:23:19 pm
Out of curiosity, after the hack, what does the E8 still offer which the E4 would lack? Is the issue that the firmware version 2.3.0 can't be fully hacked yet?
With the old pre 2.x hack, the upgraded E4 had features that even the E8 didn't, like manual temp range setting.
AIUI the 2.x hack only improves the resolution, but I'm sure he other stuff will happen in time.
The E8 does have a better resolution spec, and we haven't yet figured out what determines this - it could be they they just add less noise, or could be that they select better sensors.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hugoneus on November 08, 2014, 10:55:19 pm
Out of curiosity, after the hack, what does the E8 still offer which the E4 would lack? Is the issue that the firmware version 2.3.0 can't be fully hacked yet?
With the old pre 2.x hack, the upgraded E4 had features that even the E8 didn't, like manual temp range setting.
AIUI the 2.x hack only improves the resolution, but I'm sure he other stuff will happen in time.
The E8 does have a better resolution spec, and we haven't yet figured out what determines this - it could be they they just add less noise, or could be that they select better sensors.

Thanks Mike. So what is your recommendation, should I down-grade to pre-2.x firmware? (If that is even possible), or is the new firmware worth it? What about the E5, is the hacked version of E5 (with 2.x firmware) essentially becomes an E8 (minus the small resolution improvement)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 08, 2014, 11:06:00 pm
Out of curiosity, after the hack, what does the E8 still offer which the E4 would lack? Is the issue that the firmware version 2.3.0 can't be fully hacked yet?
With the old pre 2.x hack, the upgraded E4 had features that even the E8 didn't, like manual temp range setting.
AIUI the 2.x hack only improves the resolution, but I'm sure he other stuff will happen in time.
The E8 does have a better resolution spec, and we haven't yet figured out what determines this - it could be they they just add less noise, or could be that they select better sensors.

Thanks Mike. So what is your recommendation, should I down-grade to pre-2.x firmware? (If that is even possible), or is the new firmware worth it? What about the E5, is the hacked version of E5 (with 2.x firmware) essentially becomes an E8 (minus the small resolution improvement)?
If it was possible to downgrade things would be a whole lot easier (not sure anyone has seriously tried). I suspect the cal data from a later one may not work with earlier FW.
The resolution is the biggest improvement, so unless you can find an old stock 1.2x unit, wait until someone figures out how to hack the other features
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on November 08, 2014, 11:28:43 pm
now i know how to handle the fif, but could also get no connection via ftp at 192.168.0.2 to the camera, is it possible that flir changed the IP in the latest version? My Ip scanner also found nothing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hugoneus on November 09, 2014, 01:10:35 am
Quote
If it was possible to downgrade things would be a whole lot easier (not sure anyone has seriously tried). I suspect the cal data from a later one may not work with earlier FW.
The resolution is the biggest improvement, so unless you can find an old stock 1.2x unit, wait until someone figures out how to hack the other features

From Flir's website, the only differences between E5/E6/E8 is the resolution and a minor temperature sensitivity. Does this mean that a hack of the E5's resolution would result in essentially an E8? Since all the extra software features are already available on E5.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on November 09, 2014, 02:06:20 am
now i know how to handle the fif, but could also get no connection via ftp at 192.168.0.2 to the camera, is it possible that flir changed the IP in the latest version? My Ip scanner also found nothing

This thread contains a lot of information but it takes some time to read through and find all the answers. Try reading from this post onwards and you will see some people addressing the ipconfig problems:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg540027/#msg540027 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg540027/#msg540027)

First I would start by installing the drivers from here (please read page 1 of this post for links and info):

http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)

If the drivers do not help you will have to do some exploring to find your specific issue including any ip conflicts with other network devices seen by your pc. Remember that you have to apply the RNDIS temporary fif file first to activate the network service. Also the temporary RNDIS fif will only be active until the camera is re-booted so it may have to be applied again if you have shut the camera down.

This part of the instructions is intended to make sure you have a connection to your camera,

Quote
- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

Just keep reading through the older posts in this thread and you will find the answers. Again, tmbinc has created an excellent resolution patch and compet17 has written great instructions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on November 09, 2014, 02:06:54 am
Has anyone encountered 'limited range' E4? Wonder could it be reconfigured via this hack to full range E4 camera?
http://store.flir.com/product/e4-infrared-camera-engineering-special/ex-series-infrared-cameras (http://store.flir.com/product/e4-infrared-camera-engineering-special/ex-series-infrared-cameras)
I was wondering what model B meant.

This E4 model will produce the same high quality image available on Standard Release cameras under normal operating conditions but the operating temperature range is not the same as the Standard Release E-Series specification detailed in the user manual

Code: [Select]
Temperature Range 0° to 150°C (Standard Range is –20°C to +250°C (–4°F to +482°F))
Accuracy ±5% or 5°C, whichever is greater at 25°C nominal
(Standard Accuracy is ±2°C (±3.6°F) or ±2% of reading, for ambient temperature 10°C to 35°C (+50°F to 95°F) and object temperature above +0°C (+32°F))

150 vs 250 C
5% vs 2%
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rmorgansd on November 09, 2014, 06:05:26 am
now i know how to handle the fif, but could also get no connection via ftp at 192.168.0.2 to the camera, is it possible that flir changed the IP in the latest version? My Ip scanner also found nothing

This might be your problem, it was mine when I first tried the hack on my E4......Make sure your computer is in the same LAN network domain range as the camera you're trying to connect to.  It needs to be 192.168.0.[something], where [something] is anything except 0, or 2.   Go to your network settings and set the TCP/IP properties to a static IP address in the same domain, such as 192.168.0.8.  (The '8' is just a number I chose).  Then disable and re-enable the network connection.  You don't need an internet connection on the computer as you do the hack.  To see if it works you can type at the command line.  PING 192.168.0.2  to see if it is now talking.  PING should return a response showing 100% success every second.  To stop the PING hold [CTRL] and press [C].   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2014, 10:11:09 am
Quote
If it was possible to downgrade things would be a whole lot easier (not sure anyone has seriously tried). I suspect the cal data from a later one may not work with earlier FW.
The resolution is the biggest improvement, so unless you can find an old stock 1.2x unit, wait until someone figures out how to hack the other features

From Flir's website, the only differences between E5/E6/E8 is the resolution and a minor temperature sensitivity. Does this mean that a hack of the E5's resolution would result in essentially an E8? Since all the extra software features are already available on E5.
There are other differences- E6 & above have picture-in-picture and hot above/cold below palette modes.
A fully hacked 1.2x unit adds manual temperature range (not even available on E8), which is probably one of the more useful add-ons, some extra pallettes and zoom mode (don't recall if E8 has this). 
However like I said the resolution is  95% of the improvement,  the rest is just icing on the cake. Nice to have all the toys but of limited use to most people.
Of course if you can find a way to downgrade a unit to 1.2x then everyone will be even happer (except Flir of course!) 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 09, 2014, 02:57:58 pm
For those wondering about the model 'B' versions of the Ex range, there is no real mystery here.

The 'B' model is intended to meet the needs of building surveyors who carry out thermal audits of a structure. This is a fiercely competitive market for FLIR so a cost reduction may increase their hold over such a lucrative customer base. Thermal audits are a significant market in this modern eco friendly world in which we live  ;)

NEC AVIO released the F30 thermal compact camera in a version specified for the building thermal audit community. It had a smaller temperature range but apparently a greater temperature difference resolution as well. Such is important when viewing walls for minor thermal anomalies. NEC named the version F30s and it was also sold by Mikron under the name Mikroshot 'B' for 'Building' version. The camera sold at a relatively competitive price and was designed to fit into a surveyors pocket. Temp range topped out at 100 C but it also has the advantage of manual focus and decent FOV. Thermal range and amazing measurement accuracy are not paramount in building survey work
The lens is a clever design in that it is manual focus at close range and effectively fixed focus at long range so no need to fiddle with focus all the time on a building survey.

I have examples of the Mikron B in my collection but apart from taking one apart I have not had time to play with them. I will have to see what happens when one is pointed at a target hotter then 100 C. Very nice little camera though and perfect for field photography of wildlife as that tends to run cooler than 100 C  ;D

I attach the data sheets for further info.

The FLIR Ex 'B' appears little different in terms of the intended market and the lower price may appeal to those who do not need amazing accuracy or temp range. It should be remembered that where accuracy is concerned anything specified tighter than +-2% is really only for laboratory  experimentation as target emissivity variance destroys absolute  accuracy anyway  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on November 09, 2014, 03:05:08 pm
The real question re the model-b is are they crippled in software, or didnt make the grade for true e4.

At first I thought model b was just a revision, eg firmware, L(ock) board.
Almost bought one thinking was a deal.

Guess I need someone to get me a genuine e4 from zoro via proxy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 09, 2014, 03:21:56 pm
There is no reason to believe that the B model is some sort of sub standard 'reject'. FLIR are pretty good with TIC production quality and have no need to sell sub standard microbolometers that fail QA.
Producing a model that is 'hobbled' for specific areas of the market in order to provide a range of cameras with differing capabilities and associated prices is pretty much proven by the E4 upgrade.

It would not be difficult for FLIR to limit the thermal range and accuracy of an Ex in its firmware, to suit the Building survey market needs without endangering standard Ex series sales. Far easier than trying to build TICs from sub standard parts  ;) Even the 80x60 E4 contains a microbolometer that passes FLIR's functional pixel spec.

It is worth considering what an out of spec microbolometer usually fails on. DEAD PIXEL COUNT... simple as that. A VoX element does not tend to have a failure mode that limits temperature range or accuracy. It works or it doesn't simple as that. If a microbolometer die is found to be out of spec it normally ends up as scrap as its reliability is suspect. FLIR offer a 10 year guarantee on the microbolometers in the Ex cameras.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 09, 2014, 03:45:02 pm
There may also be differences in the calibration process. I don't know how many temperature points these units are calibrated over, but  it may well be that B units are at least optimised for the 0-100 deg range.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 09, 2014, 04:31:25 pm
@Mike.

Indeed. Calibration can be an expensive part of the production process. I may be out of date as the mass production that is now occurring must surely have some form of automated calibration on the production line ? As you say, a quicker, less precise calibration could be quicker and cheaper.

I was interested to read Mikron's comments on the Mikroshot 'B'. It was stated that though reduced in temperature range it has enhanced temperature differential sensitivity to suit the role for which it was intended. Such could be an advantage for some users over temperature range. If in electronics I see a component running at over 100C I would normally have reason to be concerned  ;D

Aurora 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Manfred on November 09, 2014, 10:01:23 pm
I just ran the resolution upgrade on a 1.1L 2.3. e4.  I have lost the spot meter and thermal blending functions but do have improved resolution.  I can revert to the original conf and .dll files and both functions return, is this the expected outcome?  Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 10, 2014, 02:38:26 pm
Does anyone have a T400, T420, B425 they wouldn't mind sharing the config files for?

Trying to add another range to our B400 as the spec sheets say it should have two!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 10, 2014, 04:09:34 pm
I just ran the resolution upgrade on a 1.1L 2.3. e4.  I have lost the spot meter and thermal blending functions but do have improved resolution.  I can revert to the original conf and .dll files and both functions return, is this the expected outcome? 
I got this problem when hacked menu and delta s delta t caused this. Camera changed conf.cfc file and this was shorter,
not 6608, I changed it to modified 6608 cfc, dll was not affected.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 10, 2014, 05:24:22 pm
I was interested to read Mikron's comments on the Mikroshot 'B'. It was stated that though reduced in temperature range it has enhanced temperature differential sensitivity to suit the role for which it was intended. Such could be an advantage for some users over temperature range. If in electronics I see a component running at over 100C I would normally have reason to be concerned  ;D

Aurora

It's likely those cameras are tailored for building inspections, hence the "B" designation. From what I've heard, building inspectors generally care more about thermal sensitivity than temperature range.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: XynxNet on November 12, 2014, 06:53:19 am
Thank you very much for this hack! :)

My E4 has some orange dots in the menus. They look like pixel defects but vary their position.
Anyone with the same problem?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on November 12, 2014, 07:20:49 am
Yes,

I have seen such orange dots on menu graphic borders when I first purchased the device. It is not about hack. Still have similar defects on borders of menu graphics after hack. I think it is about coding of program. Menu is overlayed on cam's live feed, it should be the reason.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on November 12, 2014, 10:45:37 am
I have a rather strange question to ask :) Has anyone tried to use hacked E4 at long range thermal imaging? With the 320x240 bolometer resolution it basically has the same hardware as Flir PS32, which is used only for observation purposes (and it gives quite nice results). I wonder if E4 is capable of doing similar job at 1/4 price :) Maybe anyone has some photos at distances approx. 30-60 meters?
And one more question: is this camera capable of displaying thermal image in blak-hot/white-hot mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 12, 2014, 03:00:34 pm
I have a rather strange question to ask :) Has anyone tried to use hacked E4 at long range thermal imaging? With the 320x240 bolometer resolution it basically has the same hardware as Flir PS32, which is used only for observation purposes (and it gives quite nice results). I wonder if E4 is capable of doing similar job at 1/4 price :) Maybe anyone has some photos at distances approx. 30-60 meters?
And one more question: is this camera capable of displaying thermal image in blak-hot/white-hot mode?

Once modded with the menu hack mine can do black-hot and white-hot modes (E4 hardware 1.0 software 1.18.7). As for long distance observation you would need to augment or replace the lens. There was some talk about doing that in this thread a while back but I don't recall ever seeing any results so it could of not turned out. I would say it's definitely possible - but it could also be cumbersome and very costly since larger optics are not cheap.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dr_when on November 12, 2014, 08:58:57 pm
Wow! I have been lurking here for a little while. I have been reading this topic for about a day, on and off. I am at post 1260 of 5829. This whole thing "Flir E4 Thermal imaging camera teardown" could actually be a book!! At message 1260, the suspense is killing me... Did Flir wreck Mike's hack to the E4?? Don't tell me... spoilers!! I am going to enjoy reading the 4600 or so messages left on this topic to get to the conclusion. Kudos to the EEVBLOG and it's contributors!! Now the question is.... do I even consider purchasing an E4?? I guess I must read on!!  :-+

Cheers!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on November 13, 2014, 01:26:48 am
Has anyone actually seen a camera with the new FLIR Ultramax technology. I wonder if some of the code could be utilized in the original Ex series (thinking pre-2.x series equipment). Upgrading to a 640x480 resolution natively in the camera might be worth getting some of the "original" enhancement team excited again. If I missed this already being discussed elsewhere please forgive me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on November 13, 2014, 03:42:38 am
yogort1

I got 3 pictures at different distances using my E4 with the new resolution.
5 meters, a skater on a skate board.
10 meters, my cat behind my car, you can also see my neighbor car that is still warm
at about 50 meters, two persons walking.
I can see somebody at a distance of about 300 to 400 meters, after that, I need a zoom, the dot is too small.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on November 13, 2014, 07:22:19 am
@copineau, @OrBy
Thank you very much :) I think it's worth a shot, now it's time to spend some money :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on November 13, 2014, 11:20:56 am
Starting to consider to buy an E4 for myself just for FPV purposes at night on a quadcopter..  Would require some serious modding to make the thing lighter though...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 13, 2014, 11:37:08 am
Ive had one apart, the functioning electronics are very light indeed, if you can run from your own power source it's all very light and easy to work with.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on November 13, 2014, 12:28:53 pm
I´m flying one E4 on a HexaCopter. Normally you should disassemble E4 and reduce weight. I didn´t disassemble.
I can mount my E4 on my Hexacopter in 10 seconds and can move it via a servo horizontaly.
Of course you need a raspberry PC for live picture.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on November 14, 2014, 02:32:50 pm
Is the video feed flyable for you? And how do you use the raspberry, connect the e4 through usb? I take it you have an e4 before 2.3 firmware then? I believe it is a bit more difficult to get a nice video feed from the 2.3 E4's.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on November 14, 2014, 04:08:01 pm
I use raspberry on a 2.3 E4 without problems.
It is flyable, but don´t expect to see many things at night. Houses, streets, trees all look black and it´s hard to navigate on the few things that have temperature. For searching people or animals at night it´s of course great.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 14, 2014, 06:27:25 pm
sorry for the double posting, but I think, this is also interesting for the E4 owners

For comparing the quality of the flir lepton sensor with the Flir Ex / Exx I shot sample images from a (uncooled) beer crate and two bottles of champagne with the same FOV.

Knowingly I shot a image with minimal temperature differences (only 1 Kelvin).
Please note the different temperature scales!

All screenshots from FlirTools after pressing the Auto-Range Button. (without MSX)

Flir E40 (hacked 320x240)
(https://www.eevblog.com/forum/testgear/flir-one-personal-thermal-imaging-device-for-your-iphone5-5s/?action=dlattach;attach=118511;image)

Flir E4 (hacked 320x240)
(https://www.eevblog.com/forum/testgear/flir-one-personal-thermal-imaging-device-for-your-iphone5-5s/?action=dlattach;attach=118513;image)

Flir One => Lens FOL 2 (80x60)
(https://www.eevblog.com/forum/testgear/flir-one-personal-thermal-imaging-device-for-your-iphone5-5s/?action=dlattach;attach=118515;image)

the difference between E4 and E40 is smaller by greater temperature differences
see my old post here (a hot coffee maker)

E40
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70029;image)

E4
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=70025;image)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 14, 2014, 07:00:03 pm
Picture of bottles... this is not so much sensor compare, this is JPG compare. You can see it from file sizes. For E4 you can insert command from telnet: [rset .image.services.store.quality 100], after that you can save better images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 14, 2014, 08:02:41 pm
Picture of bottles... this is not so much sensor compare, this is JPG compare.

trust me, these differences in screenshots are not jpg compression artifacts
I'm the hacker, who reverse engineered the embedded RAW datas in flir EXIF headers -  see exiftool (thanks to Phil) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on November 14, 2014, 08:24:15 pm
janekivi, you know more hacks like the jpeg-quality, telnet command to make the cam better?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 14, 2014, 08:30:47 pm
I believe the Ex0 cameras have better optics, hence the difference in image quality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 14, 2014, 08:40:59 pm
this is correct

see my old post
a compare of Noise Measuring in Service Menu
....
the old E40 makes really cleaner images with their large good lens (good f-stop)
but the sensor noise is large (30 mK)

Flir combines in the cheap E4 a better sensor (20 mK Noise) with a really bad lens (unsharp)
...


lens of Flir E4
Field Of View                   : 45.0 deg
Code: [Select]
\> .calib.lens.leExFOL7
descr                     "FOL7"
fNumber                      1.5

and lens of Flir E40
Field Of View                   : 25.0 deg
Code: [Select]
rdescr                    "FOL18"
fNumber                      1.3
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 14, 2014, 11:12:44 pm
After watching the teardown video I am wondering if you could add a wifi chip to an e4.... would be nice. 

Picture of bottles... this is not so much sensor compare, this is JPG compare. You can see it from file sizes. For E4 you can insert command from telnet: [rset .image.services.store.quality 100], after that you can save better images.

Will this work on a 2.3? I havent done anything to my E4 yet as I am considering returning it... especially if (cant remember the site's name) has them on sale for 30% off again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 15, 2014, 12:22:06 am
Zoro?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 15, 2014, 12:39:22 am
Yep thats it. Zoro... wish I had seen this tread before when they had the 30% off....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: puppycrack on November 15, 2014, 01:01:44 am
I recently purchased a Flir One, and came across this thread shortly after ordering.  I've not yet opened the Flir One, and am considering returning it if I can get a new Flir E4 to do 320x240 resolution.  I've read through most of the later posts in this thread, and it seems the newer units have countermeasures that would prevent this hack from being applied.  Is this correct?  Is there a list of hardware models / firmware versions that are and are not hackable?  If no such list exists, is 1.2L hackable?  How about FW2.3.0?

I've seen E4 units on ebay that have the older 1.22 firmware, but they're asking almost $2k for them, which is a bit out of my price range. 

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 15, 2014, 02:27:42 am
Yes you can unlock the full resolution on E4's with 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: puppycrack on November 15, 2014, 02:40:35 am
Yes you can unlock the full resolution on E4's with 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.

Thanks for the excellent writeup!  Does this apply to both 1.1L and 1.2L hardware levels?  I guess the thing I am trying to figure out is if I buy a brand new Flir E4 from Amazon today, will I be able to do the resolution and/or menu hacks?  Or am I rolling the dice depending on whether I get old or new inventory?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 15, 2014, 02:55:45 am
Please note I did not do the original writeup....

This is the steps for 2.3... if you order from amazon you will most likely get a 2.3.0

Since doing the hack I turned off my E4... I turned it back on and I got a picture with a lot of noise..... white pixels dancing all around. WTF!!!! I pulled the battery and let it sit for a min or so.... now all I get is a black screen from thermal..... This sucks!!!

Just picked it up and it is back to normal.... What is going on??????
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 15, 2014, 09:46:45 am
I believe the Ex0 cameras have better optics, hence the difference in image quality.
Exactly. This is why MSX is an must for the E4 but just a nice to have on an Exx.
I also did such a comparision between an E4 and an E30 (both hacked to 320x240, noise value on 0 or 5 - I do not remember, but definately low). I made a lot of pictures, and are attaching one. The difference is already good to see in preview, downloading and opening the image (by clicking on the Exx-Ex#1.jpg link below the picture) will show the massive difference even more.

Remarks: I moved to closer to the object with the E4 (as the lens has an wider angle) to get more or less the same image covered by the sensor. The difference between Ex and Exx is huge.
Oh, and: Pictures were made as screenshots from Flir Tools, thus it has nothing to do with JPG compression as Flir Tools is using the raw data.

It is easy to see what a difference the larger lens mades. In real live you can easily live without MSX on a Exx as you are able to recognize all details.

Edit: Added another picture showing a sealing problem at a window frame and at the top above the shutter.
Visually this looks like a doubled resolution on the Exx compared to the E4, but both are 320x240. The crappy lens on the E4 is ruining everything but by using MSX you can cover the problem pretty good for a first glance - however you are not getting the detailed thermal information the Exx with its at least 5x larger lens gives.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 15, 2014, 03:17:38 pm
The crappy lens on the E4 is ruining everything[/b][/color] but by using MSX you can cover the problem pretty good for a first glance - however you are not getting the detailed thermal information the Exx with its at least 5x larger lens gives.[/i]

Look at DSLR's vs most other cameras. The glass is as or more important than the sensor inside the camera!

What we need now is a high quality replacement lens for the Ex cameras. After watching Mikes video on the laser cutter lens, I have designed a few different style holders to cut out on my CNC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 15, 2014, 03:43:43 pm
The E4 lens is not Germanium. That does effect performance along with the small diameter. If buying a decent size Germanium lens to fit on an E4,expect to pay around $1000 or possibly more. I have been using ZnSe lenses for close up work for years. They are wide band and require thermal filters if used as a replacement for an E4 objective. Germanium is still the best choice and you would need to recalibrate the camera. Aurora.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 15, 2014, 03:49:33 pm
Please note I did not do the original writeup....

This is the steps for 2.3... if you order from amazon you will most likely get a 2.3.0

Since doing the hack I turned off my E4... I turned it back on and I got a picture with a lot of noise..... white pixels dancing all around. WTF!!!! I pulled the battery and let it sit for a min or so.... now all I get is a black screen from thermal..... This sucks!!!

Just picked it up and it is back to normal.... What is going on??????

It's been noted that after hacked it may take a reboot or two in order for the cam to totally return to normal. No biggie - enjoy! ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 15, 2014, 03:54:08 pm
janekivi, you know more hacks like the jpeg-quality, telnet command to make the cam better?

It's much better to just use tomas123's FLIR.PHP or daves BFIC tool to extract and work with the RAW data that's embedded in the JPG's. Outputting PNG's from FLIR.PHP is my preferred method since there is zero compression loss.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on November 15, 2014, 10:20:19 pm
Please note I did not do the original writeup....

This is the steps for 2.3... if you order from amazon you will most likely get a 2.3.0

Since doing the hack I turned off my E4... I turned it back on and I got a picture with a lot of noise..... white pixels dancing all around. WTF!!!! I pulled the battery and let it sit for a min or so.... now all I get is a black screen from thermal..... This sucks!!!

Just picked it up and it is back to normal.... What is going on??????

I have also seen the television static on my e4! Mine is 1.19 though. It only happened one time a few months back and i haven't
seen it since. I am not sure why it did that but a power off and power on fixed it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 15, 2014, 11:34:48 pm
Man this is creepy. EVP getting visualized

http://en.wikipedia.org/wiki/Electronic_voice_phenomenon (http://en.wikipedia.org/wiki/Electronic_voice_phenomenon)

 :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: puppycrack on November 16, 2014, 03:10:23 am
Please note I did not do the original writeup....

This is the steps for 2.3... if you order from amazon you will most likely get a 2.3.0

Since doing the hack I turned off my E4... I turned it back on and I got a picture with a lot of noise..... white pixels dancing all around. WTF!!!! I pulled the battery and let it sit for a min or so.... now all I get is a black screen from thermal..... This sucks!!!

Just picked it up and it is back to normal.... What is going on??????

Is your camera a 1.1L or 1.2L?  I ask because I'm still not clear if 1.2L is hackable.  Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: XynxNet on November 16, 2014, 08:17:49 am
Is your camera a 1.1L or 1.2L?  I ask because I'm still not clear if 1.2L is hackable.  Thanks!
Mine is 1.2L and all went well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 16, 2014, 08:59:32 am
Anyone know if there is a difference between the Ex0 lenses and the T4x0 ones?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 16, 2014, 12:25:01 pm
Anyone know if there is a difference between the Ex0 lenses and the T4x0 ones?
as Flir is offering a wide angle lens and a tele lens which fits on both, also the standard lens will be probably identical.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on November 17, 2014, 03:52:21 am
Has anyone gotten any of the extended functions to work on the 1.2L/2.3.0? I am most interested in the pallets and the measurement tools. I saw earlier that there were a few working on this..was there any progress? Thanks! :-+
I can tell you how to use new menu files- toolbar-config_z3.xml, design_ui_z3.xml and facet_z3.rcc or whatever files,
but someone must make them. Existing "2.3.0Menu_Upgrade" adds only more palettes- that I can share with You
and I think new E4 do not have many extended functions...
.image.sysimg.alarms  --  ends here
.ui.userSettings -- ends here
and so on.
Many stuff needs to be enabled somewhere, like pip, zoom, humidity, insulation, isotherm, spot, arrow, box... shortly - all stuff,
without them we have... only more palettes
As I said, my camera is Flir E4 1.2L 2.3.0 from oct. 16, 2014

I've been looking though old posts and a while back I saw where someone referenced that they had working color palettes on 2.3.0? I currently have an unlocked E4 which I love, but I'm dying for someone to get black-hot and zoom working on 2.3.0. Is anyone actively working on either of these? I'd like to help myself, but I don't know much about programming so I don't think I'd be much use =/. It would be nice to see a video or something of how the modified files were made in the first place so maybe other people can try to figure it out.

Also, I've tried searching for this "2.3.0Menu_Upgrade" file, but I can't find it mentioned anywhere else.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mucek on November 17, 2014, 01:07:57 pm
Just want to share our "selfie" from Electronica 2014 fair! :)

And it was indeed visit Flir/Extech (and some other TIC companies) stand and discuss about cameras, what price performance is best (we know this already :) ) etc.

Regards,
Gregor
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JFA on November 17, 2014, 07:52:16 pm
I also found that image quality vary from camera to camera on the E4 model. Out of the 4 I bought, two have "nice" images, but the third one I converted has a much sharper image compared to the first two (sold).  I noticed that only as I converted the third one after the second one was gone.
I haven't converted the fourth one, but I will soon. I intend to keep it for myself as a back-up, considering that the guarantee is, for all practical purpose, inexistant.
In the end, I will have gotten myself a camera (and a backup, shall I decide to do business with it) for free.

The E4 lens is not Germanium. That does effect performance along with the small diameter. If buying a decent size Germanium lens to fit on an E4,expect to pay around $1000 or possibly more. I have been using ZnSe lenses for close up work for years. They are wide band and require thermal filters if used as a replacement for an E4 objective. Germanium is still the best choice and you would need to recalibrate the camera. Aurora.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 17, 2014, 10:36:48 pm
I think, only your focus is different

try a FOCUS adjustment tool
https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kezat on November 18, 2014, 07:02:43 am
Hack success! ;)
E5 1.2L
SW v3.2.0

Had some issues connecting after RNDIS.fif application and once i got that to work the first hack attempt did not work.
What got it to work for me:

Its not clear to me if the extra step's really did anything or I just got lucky at that moment, perhaps clicking my heels together would have been just as effective. :scared:

Thanks everyone on this forum for doing the heavy lifting.

Matthew
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 18, 2014, 08:37:32 am
I think, only your focus is different

try a FOCUS adjustment tool
https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg332104/#msg332104)
Please note, regarding to my comparison linked below: after the first results, I thought too my lens would be out of focus. I marked the lens position and tried to get a sharper image. Guess what: the default position of the lens got the least worse picture (I restrain of calling it the "sharpest picture"), thus no chance to improve it.

Link to my E4-E30 comparision: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg550870/#msg550870 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg550870/#msg550870)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 18, 2014, 09:17:00 am

Link to my E4-E30 comparision: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg550870/#msg550870 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg550870/#msg550870)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=118693;image)

You images are not good for comparing the lens quality.
Because of really small temperature differences in your images (only 1 Kelvin) you compare more the signal-to-noise ratio with the NUC algorithm and less the sharpness

see my post for sharpness of Exx
https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg551882/#msg551882 (https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg551882/#msg551882)
(https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/?action=dlattach;attach=118919;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 18, 2014, 02:06:21 pm
Still waiting on a good coupon code from Zoro.com.... Anyone tried to hack the E4B yet? At $850 it seems to be the best option right now. Also will amazon purchases qualify for Flir's promotion?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 19, 2014, 08:33:20 am
After reading here and decompiling files and trying edit every file I can do little something in 2.3.0, but limitations set by conf.cfc stops add anything. I can use "Menu Upgrade" files, but without conf they are pointless, only +4 palettes.
I think, what conf file system is waiting, depends from FAD1 answer, because 2.3 update can work with older cameras. But hack this dll is tricky as you know. But there is hacked already some checking procedures and how to make here new conf.cfc like in 1.22 systems someone maybe know... we need new ftool :) I can't hack or programming here.
That conf.cfc readed by appcore, I see. Inside there is interesting as in common_dll. If you restart it, changes are immediate. If you delete cfc, it remember all stuff, but if you use file like in 1.22, you loose MSX and Center spot and 320x 240 too of course. If you put there plain text, you get low resolution.

Those commands You asked are there http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf)
You can save some of them in some files too, but there is some rights levels in boot process and any command are not accepted in any time. Important stuff made by supervisor. Example - that image quality 100 accepted only if defaultuser loads it. You can't set all in rsc files...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 19, 2014, 02:50:21 pm
I have looked at most of the files here and from the camera and cant wrap my head around everything..... All I will be using the camera for is electronic repairs so not sure the other features is all that important to me anyways... I have a lens on the was and resolution is now full 320x240. Now if I could figure out the noise generator and how to set it to 0!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on November 19, 2014, 02:58:42 pm
Still waiting on a good coupon code from Zoro.com....
20TODAY coupon is good for 20% off today. Standard E4 for $796 shipped. FLIR.com is also teasing "white hot black friday deals start Sunday" so maybe they'll have some direct deals on the E4 too.

Very excited to get one and hack it if possible.

What's with all the new accounts talking about Zoro and posting multiple different coupons...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on November 19, 2014, 04:57:16 pm
Because new users are trying to get a good deal on the camera.

Still waiting on a good coupon code from Zoro.com....
20TODAY coupon is good for 20% off today. Standard E4 for $796 shipped. FLIR.com is also teasing "white hot black friday deals start Sunday" so maybe they'll have some direct deals on the E4 too.

Very excited to get one and hack it if possible.

What's with all the new accounts talking about Zoro and posting multiple different coupons...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud123 on November 19, 2014, 04:59:32 pm
And I want to be kept up to date on the amazing work you guys are doing here  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 19, 2014, 05:09:02 pm
Didn't see the 20% coupon but thanks. Not sure if I should wait for black friday or go ahead and get one at 20% off and return this one (that I paid full price on....)
Also that drops the price below the free borescope to the crappy flashlight..... If it were 30% off I would jump on it.


Still waiting on a good coupon code from Zoro.com....
20TODAY coupon is good for 20% off today. Standard E4 for $796 shipped. FLIR.com is also teasing "white hot black friday deals start Sunday" so maybe they'll have some direct deals on the E4 too.

Very excited to get one and hack it if possible.
What's with all the new accounts talking about Zoro and posting multiple different coupons...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on November 19, 2014, 05:22:07 pm
Wait for black friday.  I am getting my shopping list together to get as much as possible then.  Honestly I don't see how they make money on the E4 at that price.


Didn't see the 20% coupon but thanks. Not sure if I should wait for black friday or go ahead and get one at 20% off and return this one (that I paid full price on....)
Also that drops the price below the free borescope to the crappy flashlight..... If it were 30% off I would jump on it.


Still waiting on a good coupon code from Zoro.com....
20TODAY coupon is good for 20% off today. Standard E4 for $796 shipped. FLIR.com is also teasing "white hot black friday deals start Sunday" so maybe they'll have some direct deals on the E4 too.

Very excited to get one and hack it if possible.
What's with all the new accounts talking about Zoro and posting multiple different coupons...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 19, 2014, 06:00:35 pm
I see where they did 40% off back in 2012 black friday. That would be sweet but I doubt we will see that big of a discount. There was a used E4 on ebay yesterday for $700... but it sold before they answered me about the firmware. Today there is a E30 but at 2,200 I don't think it is that good of a deal. (especially if I could get a new e40 for $2218 if they did do 40% off.

But then again do I need anything more than a E4 for amp repairs... the main thing I will be using it for???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 20, 2014, 01:00:58 am
Another 2.3.0/1.2L puppy just got converted here. Observations:

- in RNDIS mode the camera has a DHCP server with address 192.168.0.2 and will assign 192.168.0.1 to the computer

- Installing FLIR Tools does not install USB network (RNDIS) drivers. You can either install them as a separate package (search for flir_device_drivers.zip posted here before by someone) or as part of FLIR Player software (freeware from FLIR web site). Do this before trying to convert.

- not possible to set camera to RNDIS mode via camera's hidden menu. Has to be done using FLIRInstallNet.exe

- DHCP via RNDIS did not work on my Win7 64-bit. When I installed RNDIS drivers and uploaded Set_RNDIS_temporary.fif, the RNDIS driver recognized it and a new network adapter popped up in Windows Control Panel, but DHCP did not work and apparently the overall IP stack did not work, so that new adapter never gets the 192.168.0.1 address, and even if I could go and set it manually on that network adapter, still could not ping the camera or FTP to it. I then tried uploading Set_RNDIS_permament.fif and ended up with a semi-bricked  camera in terms of the camera still worked but I could not connect to it anymore neither via USB nor via RNDIS

- uploading Set_RNDIS_permament.fif and rebooting the camera changed the camera mode in the camera hidden menu to RNDIS, but same as for USB the mode cannot be changed from the camera. My guess was I could only revert it to USB if I can connect to the camera via RNDIS and delete the file that was uploaded before. But how do I connect to it if DHCP did not work?

- the solution was to move to a Win XP machine. I have a Win XP virtual machine on my W7 x64. I installed the RNDIS drivers package there, redirected the USB port to the VM and bingo, a new network adapter popped up and a message popped up that camera found on 192.168.0.2

- from this point I was able to ftp to the camera and browse the filesystem, on the XP machine

- installed Python v2.x on the XP and ran the conversion script as per the instructions and rebooted the camera

Man, what a difference!

So do not know if Win7 32-bit would work, mine was 64-bit with the latest Windows Updates, did not work. XP seems to work OK.

As others reported, there is also http access to the camera via a browser, you get a information page with some statistics and version info.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on November 20, 2014, 12:09:11 pm
Because new users are trying to get a good deal on the camera.

Still waiting on a good coupon code from Zoro.com....
20TODAY coupon is good for 20% off today. Standard E4 for $796 shipped. FLIR.com is also teasing "white hot black friday deals start Sunday" so maybe they'll have some direct deals on the E4 too.

Very excited to get one and hack it if possible.

What's with all the new accounts talking about Zoro and posting multiple different coupons...

Sure seems like a bunch of spam advertising for Zoro.  Never heard of them before and all the sudden 2-3 accounts are mentioning them in their first post.

So we have gemrough, Bud123, and viacom1 all posting about Zoro.  All accounts opened within about 2 weeks of each other and all at 11 or fewer posts...yeah, nothing fishy here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 20, 2014, 01:26:28 pm
I cant speak for the other accounts but I can say I have no connections with them. I had never heard of them before either. The only reason I mentioned them is their price is a lot less than any where else....(and someone here had mentioned them and a 30% off coupon)  Which makes me a little suspicious. Has anyone here actually ordered from them and received their order?

I wonder if Amazon will price match them? If Amazon will, I'll just keep the E4 I ordered from them already.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on November 20, 2014, 01:31:41 pm
FYI: I tried to buy at Zoro (at 30%), but they declined my intl. credit card and canceled my order a few hours later - they never replied to my emails. You can only purchase there if you
a) have an US credit card AND
b) have an US shipping address
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on November 20, 2014, 03:23:36 pm
Quote
So do not know if Win7 32-bit would work, mine was 64-bit with the latest Windows Updates, did not work. XP seems to work OK.

I modified my E4 on a Windows 7 pro 64 bit with no problem, I don't think it is the OS as much as how your OS is configured. I did install the RNDIS drivers before I did anything else.

I only used the set_RNDIS_temporary file and all went smooth, I did need to reboot my camera more than once before the new resolution took effect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 20, 2014, 03:54:38 pm
Did you use the standalone drivers package? On my Win 7 64 they came as part of FLIR Camera Player install, and i later compared and found they are of a newer version than the drivers in the standalone package. Do not know if that caused the problem with W7 x64 .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 20, 2014, 05:06:45 pm
FYI: I tried to buy at Zoro (at 30%), but they declined my intl. credit card and canceled my order a few hours later - they never replied to my emails. You can only purchase there if you
a) have an US credit card AND
b) have an US shipping address

You might could order from tequipment.net and use coupon code TETB0805 (5% off) on a E4B for $806.55 after coupon.

Oh no! Now I am going to be accused of working for tequipment.net... LOL 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 20, 2014, 06:56:36 pm
I believe TEquipment.NET also offers a 6% discount for EEVBlog members.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 20, 2014, 07:54:18 pm
Just to say in Canada E4 is sold for same price as in the US but in Canadian dollar, which is interesting since the exchange ratio is not 1:1. Of course tax applies on top but still.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 21, 2014, 10:41:16 am
an old news:
current E4 FW from June 12, 2014
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)
contain two fpga FW
Code: [Select]
07.04.2014  09:26           632.594 fpga.bin
17.12.2013  08:18           606.097 fpga_lepton.bin

6 month ago Mike wrote:
And a 2nd fpga.bin (fpga_lepton.bin) is added, for whatever.  :-//
For products using the lepton core of course.
 My bet is the E4 will be replaced with a Lepton based unit.
Once Lepton is in production, why continue using a 320x240 sensor in the low-end product when they have a doubtless cheaper sensor available.

Are there some news about the E4 and Lepton?

The only professional Flir camera with Lepton sensor is the FLIR TG165 .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samf on November 21, 2014, 03:39:18 pm
Hi Guys,

Thank you all for the contribution and help.

I received E4 yesterday from ValueTesters, got $100 discounts when I called them, to my surprise I found that it was

E4 1.1L with 1.22.0 firmware on it.

I just want to confirm that Can I apply the hack "1.21/1.22 firmware hack info" to get it to E8+ level.

Note: *** I am no way affiliated to ValueTesters in anyway ***. Just the info...

Thank you.
Sam.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 21, 2014, 03:56:42 pm
Yea right... I know you are sitting there at work (for Valuetesters.com) and posting that you got the hard to find 1.22 firmware version just to try and drive up a bunch of orders..... LOL

You should be fine. Go to page 1 and look at the links on the first post. You should be able to find everything you need from there.

As for the E4 being switched to a lepton.... It could happen. But it is not cheap to change the PCB, have new batches made and populated just to save a little on the sensor itself. How concerned are they with the E4 hack... I'm sure some. But honestly I bet the E4 hack has caused more sales for them than revenue lost. My guess is most people looking for an E8 don't know or don't care about the hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 21, 2014, 04:09:26 pm
an old news:
current E4 FW from June 12, 2014
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)
contain two fpga FW
Code: [Select]
07.04.2014  09:26           632.594 fpga.bin
17.12.2013  08:18           606.097 fpga_lepton.bin

6 month ago Mike wrote:
And a 2nd fpga.bin (fpga_lepton.bin) is added, for whatever.  :-//
For products using the lepton core of course.
 My bet is the E4 will be replaced with a Lepton based unit.
Once Lepton is in production, why continue using a 320x240 sensor in the low-end product when they have a doubtless cheaper sensor available.

Are there some news about the E4 and Lepton?

The only professional Flir camera with Lepton sensor is the FLIR TG165 .

I am kinda skeptical that they will just "replace" the E4 with a revamped Lepton based E4 unit. Since the E4 shares to much with the other Ex's I think it's more likely the E4 will just go away and be replaced by something entirely different with a Lepton in it and the rest of the Ex's will march on with the existing sensor tech and higher res. The second FPGA bin file was likely just left in from some testing. They would likely need a less powerful FPGA since the Lepton is already spitting out 9Hz, NUC'ed, and colored frames already - the only thing the FPGA would be needed for would be the MSX side of things.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 21, 2014, 05:19:47 pm

Many stuff needs to be enabled somewhere, like pip, zoom, humidity, insulation, isotherm, spot, arrow, box... shortly - all stuff,
without them we have... only more palettes

Can you post how to add palettes?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 21, 2014, 06:24:17 pm
you just need 2.3.0Menu_Upgrade .... which can not be found posted anywhere....???? Maybe it is not a public released hack. 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 21, 2014, 06:39:21 pm
Additional information that i have not seen yet in this thread:

When camera is in RNDIS permanent mode, you can FTP to it even if it is turned off but is connected to USB. However the login  is not flir/3vlig. The login credentials in this case are:

user:   anonymous
psw:    NcFTP@

Once connected (i use WinSCP) you can browse the filesystem, make a backup of the Flash, transfer files 2-way. This may also help if you bricked your camera, if you know which files you want to replace.

Do not power the camera on, just plug the usb cable in to use this login.

It should be possible to even reflash the firmware in this mode (using FLIRInstallNet.exe) if the camera is bricked.

EDIT:
Kids don't try it at home. You have to know what you are doing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 21, 2014, 06:44:04 pm
If someone had the files for the firmware "upgrade" to go from 1.11/1.12 to 1.8 (or 1.9 what ever it was) could one not do this and "upgrade" a 2.3.0 to the older firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 21, 2014, 07:06:55 pm
Its been attempted and the answer is no.

FW 1.18 was released by FLIR ages ago and trying to install in a 2.x fw camera leaves it bricked.

The only known success was on a camera that was upgraded to 2.3 by FLIR during a repair. AFAIK the owner was able to recover it to its former self. Such is blocked by encryption and bootloader in factory 2.x units.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 21, 2014, 07:29:38 pm

Many stuff needs to be enabled somewhere, like pip, zoom, humidity, insulation, isotherm, spot, arrow, box... shortly - all stuff,
without them we have... only more palettes

Can you post how to add palettes?
Yes, this was easy - next time they make it harder :). I like to add more, but can't hack it to read older files. Trying edit exe and dll files (conf loaded by appcore I see) but there is someones help needed...
__________________________________________

First thing - you need resolution hack
after that  - how You like to do
                  FLIRInstallNet - browse fif file then run fif file
                  or copy needed files to camera

This all based on other peoples work from this thread and I changed only something in some places.
May be this is not working to all or not at all...
2.3.0_Menu_2.zip (http://)  [Link lifetime 7 days]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 21, 2014, 09:02:34 pm
FYI: FLIR is putting on a Black Friday sale that starts on the 23rd, although you'll have to sign up for on their website.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 22, 2014, 08:02:55 am
Can you post how to add palettes?
Yes, this was easy

Thank you my friend, that worked on a native 2.3.0/1.2L
Even that little bit greatly enhances the features, I liked almost all additional palettes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on November 22, 2014, 08:36:20 am
Can you post how to add palettes?
Yes, this was easy

Thank you my friend, that worked on a native 2.3.0/1.2L
Even that little bit greatly enhances the features, I liked almost all additional palettes.

I want to ask how many pallets were added and what?
And what other features have been added?
Thank you for your response.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 22, 2014, 08:54:26 am
No features beside 5 more palettes

rainbow high contrast
gray white hot
gray black hot
arctic
lava

If it only had manual scale too I would be completely happy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 22, 2014, 09:22:17 am
No features beside 5 more palettes

rainbow high contrast
gray white hot
gray black hot
arctic
lava

If it only had manual scale too I would be completely happy.

How about FLIR logo on left bottom of screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on November 22, 2014, 12:42:48 pm
Thanks janekivi
I added the palettes, it works fine on my 2.3 1.2 E4
FLIR logo on left bottom of screen is still present.
Now, I'll wait for the zoom!
Thanks again for your help and the link!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 22, 2014, 01:05:24 pm
Thanks janekivi
I added the palettes, it works fine on my 2.3 1.2 E4
FLIR logo on left bottom of screen is still present.
Ok, let's hide it
2.3.0_Menu_3.zip (http://)

And some may be wonder, there is no zoom or other stuff in menu files - they do not come visible anyway.
You can check them by tlenet commands:
zoom - rls .caps.config.image.zoom
isotherm - rls .caps.config.image.sysimg.measureFuncs.isotherm
...and rset in not allowed here. I'm not figured out yet where I can set them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on November 22, 2014, 01:52:59 pm
Thanks janekivi
I added the palettes, it works fine on my 2.3 1.2 E4
FLIR logo on left bottom of screen is still present.
Ok, let's hide it
2.3.0_Menu_3.zip (http://wikisend.com/download/488226/2.3.0_Menu_3.zip)

And some may be wonder, there is no zoom or other stuff in menu files - they do not come visible anyway.
You can check them by tlenet commands:
zoom - rls .caps.config.image.zoom
isotherm - rls .caps.config.image.sysimg.measureFuncs.isotherm
...and rset in not allowed here. I'm not figured out yet where I can set them.

Logo is gone!
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on November 22, 2014, 02:10:38 pm
 :)  A massive thanks to all the mega brains on here. Just received my new E4 v2.3 - ran through the idiots guide, after a bit of faffing around with drivers and IP addresses - perfect - full resolution.

  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 22, 2014, 05:25:29 pm
hi @ all
i'm a newbie  ;)
can anybody help me? i haven't found the answer in this thread  :-[
after "python apply.py apply 192.168.0.2" there is a backup folder in the python(2.78) directory, but no files in there and
a common_dll file with 0 kb in the python directory was created  :-//
i'm using win 7 64bit..the E4 is 2.3.0, appkit 2.1.2, bootloader 16.1.7.0, confkit E4 1.2L and OsImgkit 18.1.20..
moreover i can't make a backup of my original cfg file from the flashfs/.../..  directory

i'm going confused  :palm:

thanks to all geniuses here  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 22, 2014, 09:40:22 pm
Tell us how much you successfully advanced. Did you install FLIR drivers, did you verify the IP address using ipconfig (on Windows), did you successfully PING the camera's 192.168.0.2 address? Can you FTP to the camera? Not sure what you mean by can't make a backup of my original cfg file from the flashfs/.../..  directory - you cannot connect or you cannot download the file getting some error?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on November 23, 2014, 05:30:12 am
Are you certain you use the correct IP address of the camera?
Check with ipconfig. My IP address showed up as different from the instructions and I went with what ipconfig showed. Worked like a charm  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 23, 2014, 09:28:58 am
Tell us how much you successfully advanced. Did you install FLIR drivers,  YES
 did you verify the IP address using ipconfig (on Windows),YES ITS 192.168.0.2
 did you successfully PING the camera's 192.168.0.2 address? YES PING IS OK
Can you FTP to the camera? YES VIA TOTAL COMMANDER
Not sure what you mean by can't make a backup of my original cfg file from the flashfs/.../..  directory -
you cannot connect or you cannot download the file getting some error? I CAN CONNECT BUT THE DOWNLOAD LASTS VERY LONG AND THEN I ONLY GET A FILE WITH 0 KB
Are you certain you use the correct IP address of the camera? YES ITS 192.168.0.2
Check with ipconfig. My IP address showed up as different from the instructions and I went with what ipconfig showed. Worked like a charm  :-+
thank you for your help :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on November 23, 2014, 10:23:41 am
Thanks janekivi for your menu hack - so easy to install.   What next?????

I added the palettes, it works fine on my 2.3 1.2 E4 and no pesky logo anymore.


Flir install has a 'camera backup' button but it asks for a fif file for it - does anyone know where this can be found?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 23, 2014, 11:19:22 am
is it possible to download the original conf.cfg file from flashfs/.. directory via ftp?
in wich usb mode can i do this? rndis? or another mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 23, 2014, 12:14:08 pm
RNDIS mode and filezilla will let you do that. Back up everything and tread carefully if modding files!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 23, 2014, 01:11:07 pm
The Flir sale is on..... but no good deals! Well they are doing $100 off a Flir One if you were in the market (now $249)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on November 23, 2014, 01:37:10 pm
Ok, let's hide it

2.3.0_Menu_3.zip

Is this zipfile  the full menue hack for the 2.3.0 1,2L , or only the removed Logo? If yes, how to install it best?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on November 23, 2014, 02:09:49 pm
Being that the Seek for iOS is endlessly delayed. Looks like a new E4 is on tap. Watching to see what kind of deals pop-up over the next week...

Big thumbs up to the guys that figured out the resolution hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 23, 2014, 03:22:14 pm
@KK

I have both the SEEK and the E4 and can definitely recommend the E4 over the current SEEK offering. You will not be disappointed with an E4. I know the SEEK is much cheaper but sometimes you have to spend a little more to get decent image quality especially now that the firmware 2.3 can be upgraded to 320x240 pixels.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 23, 2014, 03:33:42 pm
i'm going crazy  |O theres no way to download files from the e4 to pc via ftp (filezilla / total commander).
any ideas?  :-[

i tried to download another file from temp directory.. always the same..
"RETR postlog.txt"
answer:   125 Data connection already open; transfer starting.
answer:   226 Closing data connection.

the file postlog.txt was downloaded but has 0kb
:(
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Svuppe on November 23, 2014, 03:44:47 pm
i'm going crazy  |O theres no way to download files from the e4 to pc via ftp (filezilla / total commander).
any ideas?  :-[
Do you have a firewall that interferes with the ftp data connection?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 23, 2014, 03:50:20 pm
switch to a different computer... I would recommend Win XP if you have access to one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 23, 2014, 03:54:48 pm
i'm going crazy  |O theres no way to download files from the e4 to pc via ftp (filezilla / total commander).
any ideas?  :-[
Do you have a firewall that interferes with the ftp data connection?


i#ve stopped kaspersky and windows firewall.. nothing happens..

ok.. i'll try via XP
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 23, 2014, 03:56:11 pm
I have both the SEEK and the E4 and can definitely recommend the E4 over the current SEEK offering. You will not be disappointed with an E4. I know the SEEK is much cheaper but sometimes you have to spend a little more to get decent image quality especially now that the firmware 2.3 can be upgraded to 320x240 pixels.

I looked at SEEK, FLIR One, FLIR Ex and I made my decision based  on the following:

SEEK is a device specific to a mobile platform. If you buy one for your Android phone today, how long it may be until there is no Android phones anymore, or there is no Apple anymore, or there is no USB on cell phones anymore, or - whatever. I would not be able to use the SEEK hardware then anymore. Without a upstream host it is dead, Same applies to FLIR One iPhone-only device.

FLIR E4 is a standalone device. It can live on its own 10 years from now. It has its own battery and screen. Can be used for many applications where there is no need to ever connect the camera to a computer.

I think FLIR E4 has a much better long-term value in that regard.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 23, 2014, 03:57:13 pm
@KK

I have both the SEEK and the E4 and can definitely recommend the E4 over the current SEEK offering. You will not be disappointed with an E4. I know the SEEK is much cheaper but sometimes you have to spend a little more to get decent image quality especially now that the firmware 2.3 can be upgraded to 320x240 pixels.

Aurora
For the moment for $800 more than Seek one gets with Flir E4 $1000 only thermal blobs enhanced by higher resolution visual camera  as official product :-DD
amazon: FLIR E4: Compact Thermal Imaging Camera with 80 x 60 IR Resolution and MSX (http://www.amazon.com/FLIR-E4-Compact-Thermal-Resolution/dp/B00FKD9DSW)
This is officially available upgrade supported by Flir or only hacking cracking crying, etc,  to get this magic 320x240 thermal scene?
If only hacked version than you have to pray with each Flir software upgrade if you will be able hack this resolution in next versions too, else this thing will be able only show thermal blobs at oryginal 80x60 resolution  :palm:
Seek with gradient issues corrected and own open source software which will enable something similar  to Flirs  MSX easy and at much higher resolution can be Flir killer soon, while no strange menu hacking needed and everyone can write his own application and add functions that will never be available in Flir software.
For the moment without any development tools it is possible get realtime thermal imaginery from Seek Thermal Android connected to PC Linux/Windows or Android tablet -only one need to make adjustments to those gradients in the corners, but it is clear that Seek will also improve hardware soon and while even now it is available to use this dongle at Windows and Linux systems with own software without any hacking oryginal software it is much more interesting option if someone wants more than only this what comes with Flir soft...

SEEK is a device specific to a mobile platform.
Nope, people are able connect it via USB  to PC Linux/Windows and probably any other OS.
Now it is even possible by writing only a few lines of C/C++/Python code without any Seek official development tools  >:D
So, it can be easy integrated even now with The Ångström Distribution (Linux) (http://www.angstrom-distribution.org/) and turn small Linux PCB into... thermal image source distributed by wifi etc.. Endless posibilities right now for everyone  :o

Note: there is latest example of Python code which grabs thermal frames in realtime via USB directly from Seek Thermal Android version $200  and all what we need more is to know a little bit better protocol to get fully functional open source thermal app available at any OS
eevblog: Yet another cheap thermal imager incoming Seek Thermal -Python images raw sensor data dump to 16bit 208x156 PNGs (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg555230/#msg555230)
It is as simple as reading USB mouse data  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on November 23, 2014, 03:58:18 pm
@KK

I have both the SEEK and the E4 and can definitely recommend the E4 over the current SEEK offering. You will not be disappointed with an E4. I know the SEEK is much cheaper but sometimes you have to spend a little more to get decent image quality especially now that the firmware 2.3 can be upgraded to 320x240 pixels.

Aurora

Thanks for the info. The attraction to the Seek was its small size and attachability to my iPhone/iPad. The Flir-1 doesn't fit by iPhone 6+ so that's out. I have always liked the E4 I just needed the higher resolution and now that is a done deal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on November 23, 2014, 04:02:23 pm
@KK

I have both the SEEK and the E4 and can definitely recommend the E4 over the current SEEK offering. You will not be disappointed with an E4. I know the SEEK is much cheaper but sometimes you have to spend a little more to get decent image quality especially now that the firmware 2.3 can be upgraded to 320x240 pixels.

Aurora
For the moment for $800 more than Seek one gets with Flir E4 $1000 only thermal blobs enhanced by higher resolution visual camera  as official product :-DD
amazon: FLIR E4: Compact Thermal Imaging Camera with 80 x 60 IR Resolution and MSX (http://www.amazon.com/FLIR-E4-Compact-Thermal-Resolution/dp/B00FKD9DSW)
This is officially available upgrade supported by Flir or only hacking cracking crying, etc,  to get this magic 320x240 thermal scene?
If only hacked version than you have to pray with each Flir software upgrade if you will be able hack this resolution in next versions too, else this thing will be able only show thermal blobs at oryginal 80x60 resolution  :palm:
Seek with gradient issues corrected and own open source software which will enable something similar  to Flirs  MSX easy and at much higher resolution can be Flir killer soon, while no strange menu hacking needed and everyone can write his own application and add functions that will never be available in Flir software.
For the moment without any development tools it is possible get realtime thermal imaginery from Seek Thermal Android connected to PC Linux/Windows or Android tablet -only one need to make adjustments to those gradients in the corners, but it is clear that Seek will also improve hardware soon and while even now it is available to use this dongle at Windows and Linux systems with own software without any hacking oryginal software it is much more interesting option if someone wants more than only this what comes with Flir soft...

I see your point, but remember nobody HAS to update the firmware. If some future firmware comes out, you don't NEED to update if you don't want to. Any resolution hacks your already have will always be there if you don't update.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 23, 2014, 04:40:28 pm
I see your point, but remember nobody HAS to update the firmware. If some future firmware comes out, you don't NEED to update if you don't want to. Any resolution hacks your already have will always be there if you don't update.

Exactly. And if you shop around you should be able to get an E4 (or E4B) for $800 or less. Yes out the box the E4 is only enhanced by MSX... and the SEEK is a competitor (just based on price, it kicks the E4's butt)

However if you enable the full 320x240 via software modification the E4 blows the SEEK out of the water!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 23, 2014, 05:35:47 pm
However if you enable the full 320x240 via software modification the E4 blows the SEEK out of the water!
Via hardware modyfication and connecting 5 Seek Thermal dongles for $1000 you get two times bigger thermal pixels array - excluded 2.1k hexagon patent pixels per Seek device, so about 30k Seek Thermal real available pixels vs 76.8k at this higher E4 resolution, but still crappy 640x480 visual camera in E4  :--  which is nothing to available 5M or even 8M in modern Full HD visual cameras available.
It will depend on application-Seek it is much smaller and ready to connect to existing small PCB Linux boards and make functional thermal objects deection system accelerated by Nvidia Cudo supported by OpenCV  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 23, 2014, 06:08:03 pm
Ok so i get a firmware upgrade for my E4 and what do i -really- get? I am not getting box measurements, i amnot getting manual scale, all i get maybe some minor bug fixes best case, and worst case more locked firmware, so who cares about firmware upgrades?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 23, 2014, 06:09:41 pm
I am sorry to have to say it but anyone who believes that the SEEK microbolometer is in the same class as a FLIR 320x240 microbolometer is kidding themselves. We have to remember that the SEEK exists for one reason only....to make thermal imaging affordable for the masses. It is a heavily compromised solution and necessarily so in order to meet the very low retail price. For the money the SEEK is interesting to me as a new technology but its image noise content and gradient issues makes it an early days prototype IMHO and not a polished product. I certainly do not see a SEEK strapped to a tablet or PC running a 3rd party software as a very ergonomic device for many. It needs its issues in both hardware and APP to be sorted and sorted effectively. It must be remembered that FLIR are past masters in thermal imaging and the processing of the images before output to screen or computer.

Can I recommend the SEEK product at this time ? Sadly No. It breaks new ground but if you are serious about using a decent thermal camera, for non industrial  use, you should seriously consider the E4 upgraded to 320x240 and accept that it will be without a warranty if FLIR detect the hack upon return for repair. The very good news is that FLIR equipment is normally very reliable unless abused.

Maybe the SEEK Mk2 (if it ever happens) will do better ? I would expect a higher retail price though.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: earzone on November 23, 2014, 07:13:01 pm
switch to a different computer... I would recommend Win XP if you have access to one.

YEAH!! thats it  :-+
this was the solution  ^-^
thanks @ all for your support!

greets
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 23, 2014, 07:59:36 pm
Even an un-hacked E4 still beats the seek hands-down - MSX very effectively augments the low native resolution apart from in close-up situations.
Even then the much better temp range/sensitivity gives a "nicer" picture than the seek.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on November 24, 2014, 03:14:47 am
Installed the menu hack without issue on a 2.3 1.2L. Even this small upgrade feels like the day I got the camera and installed the hack all over again! My wife even complains that we needs a new rule that no thermal cameras will be on the dinner table :P. The difference between the rainbow color pallet and rainbow HC is like night and day! Studs inside walls show up much better than they did before. I also notice if you hold the camera so that your skin is the only thing the camera can see, then while holding it there put the temp range on lock (increases contrast in the 90-100F range), set black hot and pull the camera back you can now see the veins in your arm very well in black hot specifically! Thank you so much guys, the utility you've added to this device is nothing short of amazing! It's such a letdown that FLIR isn't producing the best product they can, but instead intentionally crippling their products.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 24, 2014, 07:26:04 am
Even an un-hacked E4 still beats the seek hands-down - MSX very effectively augments the low native resolution apart from in close-up situations.
Since there is only global setting for emissivity even in "perfect" Flir E4 with a few different emissivity objects in the scene high precision will be useless since one can't specify emissivity on scene object level, so output temperature will be affected by global emissivity setting, so Seek dongle with automatic object recognition and applying emissivity to predefined objects can easy outperform overpriced Flir$ especially when connected to Nvidia Cudo accelerated machines including multicore PC and tablets with Nvidia graphics cards  ;)

BTW: Gradient issue tested in a way just by putting this Seek dongle very close to surface by putting on table reversed is bad idea while sensor can see reflected heat from himself, so it was clear mistake which was made in this famous @mikeselectricstuff  Seek thermal gradient video .
I understand, this might be made for Flir friends, but simply this not the use case this Seek thing was designed to-cover lens input with plate without any minimal distance and enjoy gradients. No serious scientific experiments were presented by @Aurora and @mikeselectricstuff how this gradient changes with distance from lens and surface angle :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on November 24, 2014, 07:53:21 am
@eneuro,

The gradient issue in the Seek is there, there is no doubt about it and it develops even if pointing at the floor at a distance.

The two people you point out are probably the most experienced with thermal imaging devices in this forum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 24, 2014, 08:37:46 am
@eneuro,

The gradient issue in the Seek is there, there is no doubt about it and it develops even if pointing at the floor at a distance.

The two people you point out are probably the most experienced with thermal imaging devices in this forum.
@miguelvp Are you taking about oryginal app? How do you know that it was not already solved by.... me in my custom software?  ::) i have no time to wait for official Seek development tools as well for Flir, while for <<$1000 custmers will get complete solution not only Flir E4 with degraded thermal resolution to 80x60 and visual 640x480  :-DD
I'm not using oryginal Seek Android app while it also has fixed global emissivity as it is passed as not matrix but one float parameter in this Seek Andoid app code in this native call to libSeekware.so installed with Seek app on Android
Quote
libSeekware.so: ELF 32-bit LSB shared object, ARM, version 1 (SYSV), dynamically linked, not stripped
Code: [Select]
SeekwareNativeLib.ThermographyCalculate(bytebuffer, bytebuffer1, floatbuffer, 32448, 32448, 0, 0, 208, 156, [b]emissivity[/b], minMaxTemperatureBuffer, bytebuffer2);
So, simply Flir E? with  fixed global emissivity  doesn't fit my needs, but it looks like Seek can do easy  for me at decent resolution  of course in my own software 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on November 24, 2014, 09:33:55 am
Yes I'm talking about the app. Also I'm not sure what you are talking about solving anything since the code I released doesn't show that gradient and I did share how I did it with source code a long time ago and I still have to see any algorithm from you.
https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546880/#msg546880 (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546880/#msg546880)

Even the lastest drop that uses a different approach doesn't show the gradient either, and I did share the code as well.
https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg547638/#msg547638 (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg547638/#msg547638)

I'm also aware about the methods available in libSeekware.so since I did point to you (just yesterday) that the decompiled code you dismissed the poster as just an apk, unzipped.
https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg556179/#msg556179 (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg556179/#msg556179)

Maybe you are also going to claim what row 207 does as well?

In fact the praise should go to marshall and sgstairs for communicating with the Seek anyways.

Now, BS aside, and I've been biting my tongue till now, You can't claim the E4 is not superior than the Seek because you have neither of those cameras and you come out in an insulting way towards people that are more knowledgeable than you in this matters (mike and aurora). Might be a language barrier but I doubt it because your constant eye rolling towards others.

And you (and myself) should stay away from the E4 thread. They have a wonderful sensor that works stand alone and this thread should be left stand alone as well, wanna discuss it further let's take it over PM.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCR on November 24, 2014, 12:02:01 pm
I am planning to purchase an E4 via Amazon to apply the resolution hack but am a bit overwhelmed by the amount of postings and comments on this topic, so excuse me for lazily taking the shortcut: can the E4's which are currently sold be modified or are there any (hw/sw) versions which cannot be modified (e.g. newer version than 2.3?)?

Cheers!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 24, 2014, 12:13:44 pm
Yes I'm talking about the app. Also I'm not sure what you are talking about solving anything since the code I released doesn't show that gradient and I did share how I did it with source code a long time ago and I still have to see any algorithm from you.
In next posts like this Since the ring is not centered it could be due to the lens placement and the software assumes the ring is supposed to be centered (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546988/#msg546988) it looks like you have a lot of to do to do it without manual tweaking for every Seek Thermal camera  >:D
Just investigating nonlinear gradients in Flir E? 320x240 in similar spots too-need more 16bit gray PNGs from Flir equipment , before they make thermal blobs enhanced by MSX contours :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 24, 2014, 01:21:14 pm
What the hell does any of this have to do with the E4 hack or how to help unlock more features in 2.3.0??? Oh, it doesn't!! Your just being an annoying troll!!!

Yes I'm talking about the app. Also I'm not sure what you are talking about solving anything since the code I released doesn't show that gradient and I did share how I did it with source code a long time ago and I still have to see any algorithm from you.
In next posts like this Since the ring is not centered it could be due to the lens placement and the software assumes the ring is supposed to be centered (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546988/#msg546988) it looks like you have a lot of to do to do it without manual tweaking for every Seek Thermal camera  >:D
Just investigating nonlinear gradients in Flir E? 320x240 in similar spots too-need more 16bit gray PNGs from Flir equipment , before they make thermal blobs enhanced by MSX contours :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 24, 2014, 01:24:46 pm
I am planning to purchase an E4 via Amazon to apply the resolution hack but am a bit overwhelmed by the amount of postings and comments on this topic, so excuse me for lazily taking the shortcut: can the E4's which are currently sold be modified or are there any (hw/sw) versions which cannot be modified (e.g. newer version than 2.3?)?

Cheers!

Amazon is shipping 2.3.0 and you can do a partial hack to it. You can unlock full resolution and also add several palettes to the menu. Some features are still locked at this time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 24, 2014, 03:25:09 pm
We are not aware of versions newer than 2.3.0
I guess you better hurry up before one is out

 ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 24, 2014, 03:33:45 pm
Seek dongle with automatic object recognition and applying emissivity to predefined objects can easy outperform overpriced Flir$ especially when connected to Nvidia Cudo accelerated machines including multicore PC and tablets with Nvidia graphics cards

My friend you must be kidding about pricing comparison when you saying what SEEK has to be connected to. Secondly, good luck drugging your CUDA (not Cudo) PC around on your next house thermal inspection trip.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samf on November 24, 2014, 04:03:04 pm
Thank you all for helpful insights and contribution. Special thanks to "gemrough" who replied my post.

Today I successfully upgraded my E4 (1.1L, 1.22.0) to E8 without much problem, except that when I did first time I lost my MSX feature using itools1, but later when I re-tried, it came with new CRC number and it was fine. I did both resolution and Menu hack.

The "Special edition" logo appeared first time and after that it never appeared and USB mode still enabled after restart, also I see new option "Hidden Menu".

Can I leave it in USB mode? If not how to change it to original status.
What should be the normal operating mode for the camera after the hack? RNDS/MSD/UVC ?

Thank you all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 24, 2014, 04:13:08 pm
Secondly, good luck drugging your CUDA (not Cudo) PC around on your next house thermal inspection trip.
Common we live in XXI century and ARM Linux is everywhere now  even on small PCBs ;)
http://beagleboard.org/black (http://beagleboard.org/black)
(http://www.ti.com/ww/en/beagleboard/product_detail_black_sm.jpg)
Flir is not needed to see and record in realtime thermal image -a few lines of code with Seek dongle can do what we want, not what Flir wants  :-DD

BTW: Today "trolls" use at least C/C++/java languages and also know IBM AS/400 iSeries ILE RPG  and of course  Linux very well ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 24, 2014, 06:11:35 pm
Photos of unconnected boards do not count, my friend. Noone questions your programming skills but programming is not everything. It's a long jorney from a concept to manufacturing. Please do return when you have a _finished_ product and we will be happy to talk .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 24, 2014, 07:32:52 pm
Flir is not needed to see and record in realtime thermal image -a few lines of code with Seek dongle can do what we want, not what Flir wants  :-DD

this is not true
see my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)

the flir raw video format is *.seq and can simple decoded with exiftool
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html?PHPSESSID=rmdb6aq89be16ms2rrhci3n9a4#msg25567 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,5279.msg25567.html?PHPSESSID=rmdb6aq89be16ms2rrhci3n9a4#msg25567)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on November 25, 2014, 07:50:28 am
What the hell does any of this have to do with the E4 hack or how to help unlock more features in 2.3.0??? Oh, it doesn't!! Your just being an annoying troll!!!

Yes I'm talking about the app. Also I'm not sure what you are talking about solving anything since the code I released doesn't show that gradient and I did share how I did it with source code a long time ago and I still have to see any algorithm from you.
In next posts like this Since the ring is not centered it could be due to the lens placement and the software assumes the ring is supposed to be centered (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546988/#msg546988) it looks like you have a lot of to do to do it without manual tweaking for every Seek Thermal camera  >:D
Just investigating nonlinear gradients in Flir E? 320x240 in similar spots too-need more 16bit gray PNGs from Flir equipment , before they make thermal blobs enhanced by MSX contours :-/O
I cannot agree MORE!!!  Why the Hel* is this jerk trying to yank everyone' chain about the Flir being so inferior and the $eek being SO much better?????

IT IS NOT!!!
So GO AWAY!!!!!  if you continue to be a pain in the A$$!!!  that you are!!!
I am getting TIRED of reading your assinine posts!!! that have NOTHING to do with the Flir teardown/(hack) that makes these cameras MUCH better than the $eek will EVER BE!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCR on November 25, 2014, 11:50:44 am
Amazon is shipping 2.3.0 and you can do a partial hack to it. You can unlock full resolution and also add several palettes to the menu. Some features are still locked at this time.

Thank you, will try to get one this week and then report back ^-^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on November 25, 2014, 12:38:17 pm
I hope SEEK Thermal are suitably impressed with the excellent work that is being done on thsi forum.
Yep, probably now they now how to NOT design thermal dongles, but do not care too much about this forum, because their target customers are not electronic guys who can hack their circuits and writ eown better software, but gadget fans, who will be able now make thermal blob of their cats, dogs, etc and will have another good reasons to chat on facebook etc. about this  ;)

BTW: Gadget fans have no idea what gradient means at all and it doesn't matter that for the moment difficult to find thermal image from this Sick Thermal cam without destruction in the corners-they are happy thay can in restaurant now check which caffe cup is hot and go at night throutgh park with this dongle in hand saying and showing that now someone behind the trees can not only steel crappy phone worth $200 but additionally Sick Thermal dogle as a bonus  which is in their hands :-DD

And now he is over here "SEEK SO MUCH BETTER THAN FLIR  :-/O  :-DD |O :-/O"  Change your mind quite a bit don't you?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 25, 2014, 01:04:03 pm
He's just a troll that thinks he's  8) but is just a   :-- doing nothing but :blah: :blah: :blah: making :bullshit: just trying to pick a  :box: and get others to  |O so he can  :-DD

how  :=\ we just need to  :palm: and he will go away
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 25, 2014, 03:05:18 pm
SEEK SO MUCH BETTER THAN FLIR
This is Flir's One great MSX technology where bad processed visual image (probably due to limited processing power in this iPhone toy) simply destroys his blured 80x60 thermal image and for $385 or more happy Flir's customers gets a garbage of IR & visual image :-DD
(https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/?action=dlattach;attach=120514)

They probably know this is a toy only while Flir One price now is not $350 , but  $250 , but with it's manual crappy shutter no worth even $100 while it is useless since we can't leave this device for longer time and record in automatic mode hours of thermal imaginery without human interaction :palm:
FLIR ONE - Infrared Accessory - fits Apple iPhone 5/5s - See the Heat - (Space Gray) (http://shop.flir.com/dp/B00K0PXFB6)

BTW: Santa Claus brings me Seek Thermal dongle, so no reasons to complain  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on November 25, 2014, 03:26:03 pm
SEEK SO MUCH BETTER THAN FLIR
This is Flir's One great MSX technology where bad processed visual image (probably due to limited processing power in this iPhone toy) simply destroys his blured 80x60 thermal image and for $385 or more happy Flir's customers gets a garbage of IR & visual image :-DD
(https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/?action=dlattach;attach=120514)

They probably know this is a toy only while Flir One price now is not $350 , but  $250 , but with it's manual crappy shutter no worth even $100 while it is useless since we can't leave this device for longer time and record in automatic mode hours of thermal imaginery without human interaction :palm:
FLIR ONE - Infrared Accessory - fits Apple iPhone 5/5s - See the Heat - (Space Gray) (http://shop.flir.com/dp/B00K0PXFB6)

BTW: Santa Claus brings me Seek Thermal dongle, so no reasons to complain  8)

I'm sure your native language is not English but I give up trying to deciper whatever your point may be, and this is the Flir E4 thread...not Flir One.  :-DD :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 25, 2014, 03:37:45 pm
The language thing was unnecessary, tonns of precious information posted by non native english speaking members. Would this Blog have such success if only participants from Australia were allowed to post.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 25, 2014, 03:50:49 pm
Flir is not needed to see and record in realtime thermal image -a few lines of code with Seek dongle can do what we want, not what Flir wants  :-DD

this is not true
see my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)

the flir raw video format is *.seq and can simple decoded with exiftool
@tomas123 With the point is that with a few lines of code I can do whatever I want with Seek Thermal thermal scene frames and Flir equipment is not needed, so sentence I've wrote:
Quote
"Flir is not needed to see and record in realtime thermal image"
now with Seek Thermal dongle is true.
I do not need any Flir's tools to make analysis of thermal image and more... I can do it in realtime on small ARM Linux PCB which... can controll GPIOs to do many automated tasks like for example in security system fire flush lights and enable high resolution full HD visual camera recording when detects suspicious objects in the scene, can move thermal camera and follow this thermal object...endless possibilities and Flir proprietary software or closed source software (http://en.wikipedia.org/wiki/Proprietary_software) is not needed for such tasks  :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tjb1 on November 25, 2014, 03:56:21 pm
The language thing was unnecessary, tonns of precious information posted by non native english speaking members. Would this Blog have such success if only participants from Australia were allowed to post.

Well Australia speaks english...as does the US, Europe and a large portion of the world.  I've noticed random mispellings, he is capable of english but too busy trying to be a troll to put it all together.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 25, 2014, 04:14:10 pm
best thing to do is ignore him and he will go away. He is a child who still believes in Santa Claus


BTW: Santa Claus brings me Seek Thermal dongle, so no reasons to complain  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on November 25, 2014, 04:52:10 pm
Yes I'm talking about the app. Also I'm not sure what you are talking about solving anything since the code I released doesn't show that gradient and I did share how I did it with source code a long time ago and I still have to see any algorithm from you.
In next posts like this Since the ring is not centered it could be due to the lens placement and the software assumes the ring is supposed to be centered (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg546988/#msg546988) it looks like you have a lot of to do to do it without manual tweaking for every Seek Thermal camera  >:D
Just investigating nonlinear gradients in Flir E? 320x240 in similar spots too-need more 16bit gray PNGs from Flir equipment , before they make thermal blobs enhanced by MSX contours :-/O

If you have such a "thing" for seek please start your own topic on it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 25, 2014, 05:55:17 pm
I live by the principle "don't feed the trolls". Maybe others should too.

Back to the main reason why I'm posting here:
After about three hours of fiddling around and still not getting it to work I am slowly going nuts. Maybe someone can help me or can point me to the obvious mistake I'm doing over and over again.
I am trying to set the parameter ".image.services.store.quality" to "100".

Jpeg compression level:
.image.services.store.quality                       85
How would one go permanently changing this to 100? (I am never going to have 500 images on this thing so they may as well look as good as they can)
Enable RNDIS and telnet to it (192.168.0.2). Then do:
Code: [Select]
rset .image.services.store.quality 100
[...]
This works fine, but is only temporary of course. So I'm trying to make that permanent.

At first I tried to make my own quality.rsc and move it to \FlashFS\system :
Code: [Select]
#
# Created at 2014-11-25 16:07:00 by stefbeer
#
.image entry
.image.services entry
.image.services.store entry
.image.services.store.quality int32 100
# CRC32 dd781eef
After a reboot the value still was at 85.

I thougt maybe the file doesen't get parsed because it's a new file. So I inserted the line into \FlashFS\system\default.rsc , re-calculated the CRC32, rebooted and failed again.
Then I tried a different approach and tried it as described here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074), but still no success.
So I moved my file quality.rsc over to \FlashFS\system\appcore.d\factory.d. (As you may notice, I don't really know where the file really belongs.) And, you already guessed it: nothing changed. I am slowly starting to get desperate.

After parsing through every text file on the system I noticed something in my e8.cfg (The one from the hack, of course) :
Code: [Select]
[...]
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
[...]
Looks like just the place for my parameter. So I added the line:
Code: [Select]
.caps.config.image.services.store.quality int32 100I re-calculated the CRC01 of course, uploaded it via FTP and did a reboot. My hopes were so high but I failed yet again. Nothing changed, the parameter still is at 85. (But the resolution still was at 320x240 and the MSX still worked, which means the new e8.cfg has to be valid.) I only got a headace and the tiniest bit frustrated.

Oh and I'm still on firmware version 1.19.8.

Any kind of help is highly appreciated! Thanks in advance! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skynet on November 25, 2014, 05:58:13 pm
hi all ive just got a Flir E4 1.2L  software ver 2.3.0 can someone point me in the right place for a how to , to do the hack and software files needed thanks  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 25, 2014, 06:04:31 pm
Stefbeer, may be it is expecting the parameter after int32 in a particular format, i.e. hex. Try searching the files to see how numeric parameters are formatted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on November 25, 2014, 06:06:07 pm
hi all ive just got a Flir E4 1.2L  software ver 2.3.0 can someone point me in the right place for a how to , to do the hack and software files needed thanks  :-+
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/ (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/)

Have you tried to read the first post in the thread?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 25, 2014, 06:59:17 pm
@ Bud:
Thank you for your reply! :) But that doesen't seem to be the problem. I checked different configuration and ressource files and the value seems to be "plain numbers" for an int32.

For example \FlashFS\system\default.rsc:
Code: [Select]
.image.services.store.bgStoreDelay int32 100
[...]
.image.sysimgInstances.main.measureFuncs.mbox.1.calcMask int32 12
[...]
.power.settings.acOffTime int32 1140
.power.settings.acSysIdleTime int32 55
.power.settings.acUserIdleTime int32 5
.power.settings.battOffTime int32 1140
.power.settings.battSysIdleTime int32 55
.power.settings.battUserIdleTime int32 5
[...]
.system.usbforcefs int32 0

And \FlashFS\system\appcore.d\config.d\e8.cfg:
Code: [Select]
.caps.config.image.services.store.incompatible.level int32 0
[...]
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
[...]
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
[...]
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
[...]
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
[...]

More ideas? :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 25, 2014, 07:28:35 pm
Did you try looking in the WEB interface? I think i saw something storage related there but can only check when i get home tonight.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on November 25, 2014, 07:38:56 pm
If you have such a "thing" for seek please start your own topic on it.
Probably not needed, while thanks to a few people from this thread very quickly discovered tricks how  Flir manipulates thermal LUTs on their equipment (FLIR E4+) to display thermal scenes with objects  above its maximum temperature and now postprocessing even Flir's 16bit PNGs in custom open source software is not a problem.
(https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/?action=dlattach;attach=120426)

BTW: I hope, this is not Flir's fanclub page, but teardown thread, so there are people which are looking for hardware details and others are very interested in how Flir deals with image processing in their products.

Thanks to those threads and teardowns on EEVblog - people can choose product which better fits their project requirements :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on November 25, 2014, 07:42:42 pm
Just a thought... does the value for quality go to 100?  I mean is the number 100 even recognized as a valid number?
Maybe try 99 and see it that works?

Just a thought....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on November 25, 2014, 07:45:02 pm
A crude way... try searching for the partial string... store.quality 100.
Just wonder if it's hiding somewhere else that might have been overlooked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 25, 2014, 08:29:58 pm
@ Bud:
I did now but I couldn't find anything :( I always get sweatty hands when I click through all those calibration menus. After I went through all of them I looked at the screen of the TIC, only to see some weird noise overlayed over the picture. My heart started beating faster but everything is back to normal after a power cycle (of the TIC, not my heart! :D). But still no permanent quality setting...


@ pomonabill221:
Yes, you can set the JPEG quality parameter to 100. If I do:
Code: [Select]
rset .image.services.store.quality 100it works just as it should.

When I export the whole resource tree with
Code: [Select]
rls -r -l > /FlashIFS/rls.txtI can see the current value and the min and max value:
Code: [Select]
.image.services.store: (32)
[...]
rw--rw--rw--1- 0 root   root   <i> quality                      100
                 [1, 100]
[...]

I really don't understand why I can set the value with rset without an issue but I'm not able to set it via a config or resource file...

A search with the partial string came up with a few results, see attached screenshot. Previously I alwas searched with the leading dot. I think that is what Bud meant, but as far as I can see the function call is also just temporary and only called during certain calibration functions (which I ain't touchin'!).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on November 25, 2014, 08:57:14 pm
hhmmm.... I see a few places where the quality is 85, but I wouldn't have the guts to start playing around with some of them either.
Of course, the Ex's don't have a laser, so those entries shouldn't do anything.

I have VERY limited "exploratory" experience with the Ex, so my help would be limited, but these things I posted are just thoughts that I had....
I would imagine that this parameter is one of them though... just which one?!?!?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on November 25, 2014, 11:25:02 pm
Cheers guys&gals -

I don't know if FLIR ever provided any for download but I'm looking for an original update package to firmware version 1.19.8. Since only the most recent version is available on the update server, I thought some forum member may still have a copy of the old version in his archives and might possibly share it... ;) . This would open the road for me to some more experimenting...

Thanks and all the best,

Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 26, 2014, 12:24:00 am
I don't know if FLIR ever provided any for download but I'm looking for an original update package to firmware version 1.19.8.

I don't recall 1.19.8 ever being released for download - only found factory installed. FLIR did have a 1.18.7 update pack but then it jumped to 1.21.0.

Also remember that there are three (or more) hardware versions as well - 1.0, 1.1 (power supply fix?), and 1.1L (hack lock down?). I am not sure if 1.0's can go above 1.18.7 without risking a brick as I recall FLIR asking 1.0's to be sent in to be upgraded to 1.21.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on November 26, 2014, 08:06:37 am
Cheers guys&gals -

I don't know if FLIR ever provided any for download but I'm looking for an original update package to firmware version 1.19.8. Since only the most recent version is available on the update server, I thought some forum member may still have a copy of the old version in his archives and might possibly share it... ;) . This would open the road for me to some more experimenting...

Thanks and all the best,

Thomas

Thomas

I have fw 1.18.7 package. Maybe it works for you. I send it over Wetransfer. here is the link
"https://www.wetransfer.com/downloads/edc64ec8258772c435577410b990cc8520141126075443/8ede047ffd9b47a7a195b3b5b1b2efa320141126075443/d9d99b"

If link is not working please inform, I can try another service.
Tugbay

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skynet on November 26, 2014, 01:12:34 pm
ive followed all the how to for a Flir E4 (Firmware 2.3.0) i am stuck in rndis mode i can see ftp and all files tryed to install v04.zip hack via python also the v03.zip just incase i get errors my flir ip is right its on the screen on windows xp
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 26, 2014, 03:21:37 pm
1.18.7 version link was somewhere here too. You can play with it in 2.3.0 camera, if you use from it let's say
appcore exe and dll and common dll, for testing rls.exe too. Then you can see it reads plain text conf files.
But how this registry or whatever that thing is - .caps.config and so on, working and why conf needed for
every boot. If there is a way to save settings for default...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 26, 2014, 04:27:57 pm
@ pomonabill221:
As far as I understand these parameters are only applied when you open the web interface, open a certain menu and click on a button on the page. And that wouldn't be of any use for me :(
I am slowly getting the feeling that I have to live with a quality of 85 after a cold boot :(


@ TurboTom:
I agree with OrBy, firmware 1.19.8 has never been available for download. I saved every update package that I could find, and so far I "only" have 1.18.7, 1.21.0, 1.22.0, 2.1.0 and 2.3.0.
But I can say that my E4 is version 1.0 and was delivered with firmware 1.19.8.
It is possible that version 1.1 has a fix for power supply. At a certain battery voltage (and below) I start to see some flickering in the visible camera image. Looks like stepping from a voltage regulator. I don't know if version 1.1 or 1.1L do have the same issue, would be interesting to test. But from the top of my head I can't say at which battery level the flickering starts to set in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 26, 2014, 06:32:53 pm
I wrote here about that quality 100 command. Important stuff is loaded by supervisor.
You can set commands like this where they loaded, I think, by defaultuser.
One place for them is menu files. Take some presets and write your lines. Then, after
reboot You need change Measurement away and back to this preset to have Your
command executed.
(.image.services.store.quality int32 100 working fine : )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skynet on November 26, 2014, 07:42:53 pm
Sorted the problem above i had. Can anyone tell me how to set the flir e4 back to uvc and msd mode in the usb. Iam stuck in rndis mode and cant change it in usb menu and flirinstaqllnet wont work in that mode so i cant use the Remove_RNDIS_Permament.fif .thx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 26, 2014, 08:04:55 pm
FLIRInstallNet should work in RNDIS mode.

Anyway, rename the remove rndis .fif file to .zip, open it and see in the  cmd file inside what file you need to delete from the camera. Run ftp and delete that file, i believe it is called zrndis.something, then reboot the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skynet on November 26, 2014, 08:07:51 pm
thank you Bud
FLIRInstallNet should work in RNDIS mode.

Anyway, rename the remove rndis .fif file to .zip, open it and see in the  cmd file inside what file you need to delete from the camera. Run ftp and delete that file, i believe it is called zrndis.something, then reboot the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 26, 2014, 08:34:43 pm
One place for them is menu files. Take some presets and write your lines. Then, after
reboot You need change Measurement away and back to this preset to have Your
command executed.
(.image.services.store.quality int32 100 working fine : )

So you saying i can open, say, the centerspot preset, put that line there, reboot, then toggle the centerspot in the menu and that extra command will get executed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 26, 2014, 08:58:52 pm
@ janekivi:
Thank you for your hint!
I think that means I have to make some changes to facet_z3.rcc. I have to find out how and where I need to make those changes because I have never done that before and I'm not really familiar with the structure. But if it's the only possibility I have to make it work...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 26, 2014, 09:17:28 pm
So you saying i can open, say, the centerspot preset, put that line there, reboot, then toggle the centerspot in the menu and that extra command will get executed?
Yes, after reboot you need to select this preset where your command is. If this preset selected before, reboot not loading your lines. Select something else and after that edited preset, then command executed. After that do whatever you want until next boot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: control4reak on November 27, 2014, 03:03:34 am
Im having trouble find the V.03.zip files for version 2.3.  Any suggestions on where to look?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 27, 2014, 05:25:45 am
So you saying i can open, say, the centerspot preset, put that line there, reboot, then toggle the centerspot in the menu and that extra command will get executed?
Yes, after reboot you need to select this preset where your command is. If this preset selected before, reboot not loading your lines. Select something else and after that edited preset, then command executed. After that do whatever you want until next boot.

Do you need to re-CRC the modified preset file? What tool is to calculate new CRC32 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on November 27, 2014, 05:59:21 am
Im having trouble find the V.03.zip files for version 2.3.  Any suggestions on where to look?
Go to post #5633.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on November 27, 2014, 12:40:05 pm
Quote
Thomas

I have fw 1.18.7 package. Maybe it works for you. I send it over Wetransfer. here is the link
"https://www.wetransfer.com/downloads/edc64ec8258772c435577410b990cc8520141126075443/8ede047ffd9b47a7a195b3b5b1b2efa320141126075443/d9d99b"

If link is not working please inform, I can try another service.
Tugbay

Tugbay -

thanks for uploading the package, I downloaded the file but I noticed that I've already got the same one in my archives.

Thanks also to the others who commented on the existance (or rather non-existance) of the requested update package.
So I guess I'll try to assemble a 1.19.8 update package from my backups. At least for the FLIR camera application this should be possible, maybe not so for the OS.

Cheers,
Thomas


PS. Wow, just noticed that I opened page 400 of this thread - impressive considering the relatively small number of owners of these Tools (toys??) ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 27, 2014, 09:40:15 pm
looks like zoro is a zero for a black friday 20%+ coupon! BOO!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Diesel on November 28, 2014, 01:11:45 am
Hopefully there will be a cyber monday. I believe they have had pretty good ones in the past. I waited out the 20% the other day and am hoping for another chance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 28, 2014, 08:11:43 am
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Thanks. Also, typo in instructions. That should be qmake -project && qmake && make (not -profile).


Can someone help compile this and post back a ready to use executable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 28, 2014, 10:40:52 am
Regarding tripod mounts. There is discussion of such buried in this thread and on the E4 useful information thread. Worth a look. The issue with placing a small threaded insert in the battery endcap is high leverage forces due to the length and weight distribution in the camera.A load spreader plate with a tripod thread tapped into it may be safer option. My Testo 880 has a metal end cap of just such a design.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SCR on November 29, 2014, 12:20:03 am
Thank you, will try to get one this week and then report back ^-^

Got my E4 today (E4 1.2L SW2.3.0), applied v0.4 and now have a very nice resolution thermal cam to work with - thank you very much indeed! BTW, the included calibration certificate was from last week, they must sell a lot of these things.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blkphtm on November 29, 2014, 02:19:19 am
Just received the E4, 2.3.0, 1.2L and applied v04 hack (had to manually upload the files).  Is the Menu hack also required?  I noticed that I did not have Thermal MSX as an option after the v04 hack, missing the cross hairs and temp, and if I just used the digital camera, I got an AppCore.exe error and the camera had to be shut down.  Anyone else run into these issues with 2.3.0 version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 29, 2014, 04:56:51 am
You better revert and look what went wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on November 29, 2014, 08:34:50 am
I just want to let you know that I finally managed to return my (acidentally "updated" 2.3.0) 1.1HW camera back to its original 1.19.8 SW configuration with all the resolution/menu hack and web server service functions running.  :-+

To get this done, I used the backup of the original camera (...good to have kept this...) and an OEM 1.18.7 update package and constructed my own 1.19.8 update package. After some "tweaking" of the files, the update went through right to 96% but then terminated with an error (silent flag something...). Anyway, at this point the camera was fully operational and the only fact that indicated that there was a problem with the update was that the software configuration was reported as " >0.1.1". To finally get this sorted, I had to manually replace the two files in  \flashBFS\system\kits.d\ "appkit.rev" and "prodkit.rev" with the ones from my old backup. Even though they were part of the patched 1.19.8 "update package", apparently they were not replaced during the "update" process.

Well, that's a quick description of how an acidentally updated camera could be reverted back to its original configuration even if there isn't a suitable OEM package available. If someone needs more detailed information on this, please let me know.

This method will not work on a factory-shipped higher SW version camera, e.g. 2.3.0. The bootloader or other fuctions buried "deeper" in the camera system will not be compatible with the earlier firmware. Any attempt to "downgrade" such a camera as described above will "brick" it!

Thanks a lot to all who posted the information and hints to finally enable me to get this done.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 29, 2014, 08:36:05 am
So you saying i can open, say, the centerspot preset, put that line there, reboot, then toggle the centerspot in the menu and that extra command will get executed?
Yes, after reboot you need to select this preset where your command is. If this preset selected before, reboot not loading your lines. Select something else and after that edited preset, then command executed. After that do whatever you want until next boot.

OK that worked! Another improvement to 2.3.0
Yes just a little inconvenience that every time you boot you need to toggle the crosshair, that will set quality to 100. Not a big deal.

A single line did not work for me, I added the following to preset_nomeasure.rsc

.image entry
.image.services entry
.image.services.store entry
.image.services.store.quality int32 100

Attached is a raw image of a PC fan grill under the desk, no MSX, no postprocessing,  quality 100.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 29, 2014, 10:23:49 am
Well, there it goes for me. That's the price you have to pay for an easier hack.

No wonder I couldn't find these preset files in my backup. These were introduced in firmware 2.1.0.
I compared the current firmware update package with my backup and I don't have a folder "presets.d", see attached screenshot. So this isn't an option for me.

I'm sure there would be another possibility for me, but as I said earlier I don't know anything about menu hacking, so I have to live with it.

But nevertheless, thanks to everyone who tried to help me! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on November 29, 2014, 02:11:51 pm
@BUD

Does that work on firmware 1.19 ? Or has it not been tried? Mine does have the presetsd folder.

That picture of the fan grill is quite good! You should do a side by side with quality at it's default and that photo.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 29, 2014, 03:20:03 pm
I'm not Bud but I have firmware 1.19.8 and I do not have this preset-folder. And I have to admit that I haven't tried it yet. But I'll give it a go now. I'll report back in a few minutes.
Just out of curiosity: Do you only have the folder itself or are there 4 files present also?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on November 29, 2014, 03:29:00 pm
Stefbeer,

I just checked, the folder is there but it is empty! Can't say i ever made the effort to open it before!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 29, 2014, 03:44:38 pm
Hm okay, I thougt so...

I just tried it but without success. :( At first I copied the original files from the update package to see if it makes a difference (or even causes a crash or something) but after a reboot everything was like before. So I added the four lines from Bud, Re-CRC-ed and uploaded the files. I tried it immediately without a reboot but nothing changed also. So I did a reboot, only to notice that still nothing changed. Then I noticed the third line in the preset-file:
Code: [Select]
# IDLooks like I have to add my serial number, maybe it makes a difference. So I added it, re-CRC-ed the file again, uploaded it again and did a test before and after reboot but it still didn't work. "rls -l .image.services.store.quality" via telnet still returned a value of 85...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on November 29, 2014, 03:54:46 pm
Stefbeer,

Thanks for giving it a go! I am sure there is a way to to it but i have no idea how  :( I borrowed my e4 to a friend last week for 4
days. He has been thinking about getting one. He is also a computer guy, maybe he was in there playing around. I am going to call
him and see if he was!! He borrowed it to "winterize his house" but might have just wanted to get inside the camera.  :-/O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 29, 2014, 04:03:39 pm
did a test before and after reboot but it still didn't work. "rls -l .image.services.store.quality" via telnet still returned a value of 85...

did you toggle the preset ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blkphtm on November 29, 2014, 04:36:29 pm
Just received the E4, 2.3.0, 1.2L and applied v04 hack (had to manually upload the files).  Is the Menu hack also required?  I noticed that I did not have Thermal MSX as an option after the v04 hack, missing the cross hairs and temp, and if I just used the digital camera, I got an AppCore.exe error and the camera had to be shut down.  Anyone else run into these issues with 2.3.0 version?

I got the hack to work and this is what I did..
- Set the RNDIS to Permanent Mode, and did a hard reset
- Opened a Telnet session to 192.168.0.2 and typed "stopapp"
- Ran the v03 hack, and hard reset.
- Removed the Permanent RNDIS, and hard reset
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 29, 2014, 05:23:49 pm
@ heavybarrel:
That's a possibility. I checked the firmware update files for 1.18.7, 1.21.0 and 1.22.0 and none of them contained the folder. It first appeared in the firmware version 2.1.0.
Do you have an old backup which you could compare?

@ Bud:
Yes I did, just forgot to write that in my post. I checked before the reboot but after changing to "no measuring spot", then after changing it back to the center spot, then did a reboot and checked directly after the reboot, after changing it to "no measuring spot" and after changing it back to center spot. So not really any possibility to miss it :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on November 29, 2014, 10:45:42 pm
Stefbeer,

Yep! He was in there messing around!! He explained what he was trying to do but i believe i completely filtered out everything
he said. I wasn't real happy but no harm no foul. He has a copy of the files now so he can beat those up as much as he wants.
Don't think he will get his mitts on my camera again unless he comes up with something really interesting. He also said he has been
following this thread,  hmm!

Also did look at my backup, no folder in there! Looks just like your comparison screenshots! Thanks for giving it a go on your
camera, hope someone can sneak around this  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on November 30, 2014, 12:33:34 am
Little thing what I can do so far and showed to you is thanks to what wiser people talking here. I make here shortcuts for ideas what i have. I'm just kind of "notepad hacker". After comparing and looking cfc files they not wery scary any more. Thanks to other posts from here of course. But now I need some help so I can understand what some things here exactly mean:

The encryption algorithm is RC4 with the key being the SHA1(key || "2A00"), where "key" comes from the "FAD1:" device, ioctl 0x800040C0. That ioctl, which I don't fully understand what it's actually doing, returns 0x18 bytes, with the last 8 bytes being the key

Suid.exe is just reading the SUID as HEX-Code (8 byte to hex / printf("%16.16llX")) from FAD1: (read 30 bytes) and printing it - my guess is it's either a serial number or some camera specific key to be used for encryption.
Note: if a SUID was not found then the exe shall return "00000000000000000000000000000000" (printf("%16.16llX",0)).

Can someone pm me, my last programming lesson was too many years ago... (25)
So far you can play with this byte in appcore conf file where in adress 68 is data 7D
For fun - as you know this is affect nowhere, you can only see it with telnet [rls .caps.config.name] - write here 7F or 79... : )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: brooklyncam on November 30, 2014, 04:41:59 am
Hi all, wondering if someone could help me.  I have the e4 with firmware 2.3. 

In trying to follow the steps, I haven't been able to successfully ftp to 192.168.0.2 as it just hangs (the IP isn't showing up when running ipconfig either).  Wondering whether it was because my computer's IP address is in the 10.0.1.1 default gateway, but I tried manually changing to 192.168.0.1 with no luck.

I tried applying the temporary.fif file first, and then rebooted and tried the permanent.tif one.  Now I can't even see the camera in the FLIRInstallNet program.  Any thoughts please?  Thanks much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 30, 2014, 05:27:22 am
Did you install the FLIR network drivers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on November 30, 2014, 11:53:30 am
The E4 seems to top out at 280 degrees C - my friends E40 goes up to 650 possibly even 1200 - is there any way of enabling a higher range? In my naivety it would just be update a config file?  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: brooklyncam on November 30, 2014, 01:28:40 pm
Thanks Bud, installing the Flir Device Drivers from their site first made everything work!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on November 30, 2014, 04:02:44 pm
My E4 went to snow again... no matter what I did I had static.... I noticed the battery was low so I charged it and the snow went away. Is this a voltage issue???

I wonder if the Armasight Zeus 160 (Flir) is software disabled like the E4.... Would be very tempting to get on if it could be upgraded to a Armasight Zeus 640!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on December 01, 2014, 11:23:19 am
Zoro tools 30% off today!   Code: holiday
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on December 01, 2014, 12:11:46 pm
Zoro tools 30% off today!   Code: holiday

Applies to the e4... final price $696.50 and free shipping on all orders. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Diesel on December 01, 2014, 03:47:44 pm
Just ordered E4 with Zoro coupon code $696.50 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lgustavocampos on December 01, 2014, 11:58:58 pm
Upgrading E30 to E8 including resolution upgrade.

Hello All,

   My name is Gustavo, and I have been craving to share with you all a great accomplishment I had with an E30, I successfully upgraded  it to an E60, using all the available hardwares, including “Camera”, Flash Light for illumination, 320x240 resolution with full frame buffer, WiFi, Bluetooth,  Video Recording, and even the name of it is E60 instead.


    DO IT ONLY IF YOU UNDERSTOOD EVERYTHING SAID HERE, IF SOMETHING SOUNDED ODD OR GREK DO NOT ATTEMPT TO ALTER YOUR UNIT. I AM SHARING WHAT I HAVE DONE, AND I WILL NOT BE RESPONSIBLE FOR MISUSES OF MISUNDERSTANDINGS OF ANY SORT. BE AWARE.

   
    I will now share the procedures I endured through out this with all of you, but before I have some warnings:

   1. This hack was performed over an E30 2012 model, so, before changing your unit,  check your unit serial number, it has to start with 490.
   2. The Firmware version must be  2.23.14, the latest for this model up today.
   3. You must backup every listed File, and once copying the new files, replace it, DO NOT LET OLD COPIES AT THE DIRECTORY OR THEY WILL BE EXECUTED, EVEN IF IT HAS CHANGED THE NAME OR EXTENSION. BE AWARE.
   4. To access your camera you must have the flir_device_drivers already installed
   5. Your camera must be at RNDIS MODE, in order to set it up, go to, Settings -> Information, press “right button” and keep it pressed till a USB menu appear and select RNDIS only, back, and got to the main screen,. NORMALLY TAKES 10 SECONDS TO THE USB MENU APPEAR.
   6. After steps 5 and 6 are done, connect your camera to your computer, wait 20 seconds, open a FTP software (WinSCP or FileZilla) and connect to 192.168.0.2 username: flir password: 3vlig
   7. It is highly recommended that you may be acquitted to FTP and those things, or you will damage your unit.
   8. This is what worked for me, and I am just reporting by explaining how to, do it at your own risk.

   
Procedures

 1. Make a full backup of the directory FlashFS, skip every unaccessible file, the most important here are the Configuration files, the others will be in case of need.

 2. Open at the backup file:  FlashFS\system\appcore.d\config.d\conf.cfg
 2.1 Take a note of the line started with # ID, it is in the bottom of the file. This is a important step, this ID is, although, your serial number.

 3. Open the same file at the downloaded Hack files FlashFS\system\appcore.d\config.d\conf.cfg

 4. Replace the # ID 490xxxxx to your # ID and add a new line <ENTER> (DO NOT FORGET TO ADD THE NEW LINE RIGHT AFTER THE LAST CHARACTER, DO NOT LET ANY OTHER CHARACTER LEFT.)

 5. Now copy this altered file to the same place where the CRC01.exe is located

 6. at the command line and at the directory where you have just copied the file, enter: cc01.exe “conf.cfg”

 7. It will display a line with the CRC01 of the file, it will look like this “# CRC01 fd769a2a” copy it and past it at the end conf.cfg you are editing from the hack files, and add a new line pressing ENTER (DO NOT FORGET TO ADD THE NEW LINE RIGHT AFTER THE LAST CHARACTER, DO NOT LET ANY OTHER CHARACTER LEFT.)
 
 8. Copy the just modified hack file to the same path in the camera using your FTP Software.

 9. Do the same procedures shown at lines 3, 4, 5, 6, 7 and 8, but instead you will use:
     9.2 \FlashFS\system\ui.d\config.d\conf.cfg
     9.3 \FlashFS\system\appcore.d\config.d\conf.cfg
     9.4 \FlashFS\system\services.d\config.d\conf.cfg

10. Copy from your backup  file \FlashFS\system\kits.d\confkit.rev, open it and alter  E30 to E60 at the line started with VERSION. there is no need to add the CRC01, just alter and copy it back to your unit at the same path you copied from your backup “\FlashFS\system\kits.d\confkit.rev”

After everything done, turn off your camera by pressing “start button” for 2 seconds, take the battery off and replace it and restart again. and Now you have a E60.

To use the full potential of the unit, take the cove of the laser off and make wholes where the Flash light and Camera are located, it is hidden beneath it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on December 02, 2014, 01:23:01 am
Zoro tools 30% off today!   Code: holiday

Thanks for the heads up. I've been considering an E4 for quite some time and been following this thread for several months. That kind of price made finally get off the pot and order one. Hopefully all goes well with the upgrade once it gets here. Although a VERY long thread there is tons of info here and I wanted to say thanks to all who have contributed!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emptech on December 02, 2014, 08:17:46 am
Igustavocampos:

That's great!  We knew an e30 could be upgraded but we wondered about the wi-fi, we suspected the electronics was on the board and just needed to be enabled, but didn't know for sure.  I upgraded my e40 many months ago thanks to this forum.

You also gave a good step-by-step, if I had to do it again, not sure if I could, I've forgotten the steps.

BTW, the neat thing about the eXX series with bluetooth and wi-fi, the video can be streamed to another device.

Jim
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nissepisse on December 02, 2014, 08:49:40 am
Batch FLIR Images Converter:  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)


Hi Dave,
Would it be possible to make an image offset setting between the IR and visible picture in your program to compensate wrong MSX settings? Or is the pictures tied together hard from the Ex?

/NP
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lgustavocampos on December 02, 2014, 09:37:52 am
Emptech:

Once done, all the features will be from a real E60, I have recorded videos from the unit, used the WiFi and Bluetooth, as I said at the post, it has a real camera just hidden beneath the cover, you only need to expose it doing wholes at the cover.

And about the streaming, the pictures I am showing I have taken them all from a mirroring streaming with the Flir tools, but a native IR streaming is also available, I am using it at my own lab.

With this hack you can even use the pip, IR + visual blended and all the features available at the E60.

Tell me, Have you successfully enabled the 320x240 or where you using the supervisor mode???

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 02, 2014, 11:40:06 am
Upgrading E30 to E8 including resolution upgrade.
E30 to E60

great, I linked your post to my link list


  • Resolution upgrade Flir E30/E40/E50 to E60 and i3/i5 to i7
      https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
      https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
      https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
      you must edit your crc01 inside E60 goodies.zip:
        https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)
      a nice history from E30 (without WLAN)  to E60 (with WLAN)
        https://www.eevblog.com/forum/profile/?area=showposts;u=89829 (https://www.eevblog.com/forum/profile/?area=showposts;u=89829)
       and https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 03, 2014, 12:24:54 am
Ordered from Zoro yesterday and order still shows "Pending Approval".... I'm starting to wonder if they are going to honer the 30% off coupon....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chris Epler on December 03, 2014, 12:51:06 am
It took them a day to ship mine.
 Certainly no Amazon Prime :) but I guess I've gotten spoiled...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on December 03, 2014, 01:01:55 am
It took them a day to ship mine.
 Certainly no Amazon Prime :) but I guess I've gotten spoiled...

I order most of my items prime as well so I know exactly what you mean- Amazon actually had them for $850 this last weekend and I almost did that. Come to find out Zoro is actually owned by Grainger so all should be good. I actually got my shipping confirmation with a tracking number today but it doesn't register with UPS yet and I placed my order yesterday morning.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 03, 2014, 01:03:19 am
Ordered from Zoro yesterday and order still shows "Pending Approval".... I'm starting to wonder if they are going to honer the 30% off coupon....

Mine sat like that for a day and then changed to 'pending fulfillment'
Tomorrow must be the ship day. I ordered Monday morining.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 03, 2014, 04:19:29 am
I also ordered early Monday morning (around 9am est)..... I guess I will call tomorrow and see what is up. I see the charge pending on my credit card. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: supermikel on December 03, 2014, 04:38:16 pm
Hi,

i want to ask about any Progress with Respekt to a Menue hack for the  E4. Manual Temp.range Setting, and different palettes are Feature i dream on. Is there any Menue hack available?

Thanks

Mikel
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on December 03, 2014, 04:57:18 pm
If you go on the website you can see that you guys bought out their entire inventory.  Some will be delayed a few days I'm sure.



Ordered from Zoro yesterday and order still shows "Pending Approval".... I'm starting to wonder if they are going to honer the 30% off coupon....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on December 03, 2014, 06:44:50 pm
Well much to my surprise it showed up at my door this morning! Looks like it shipped from IL and I'm in MI so it got here next day. I did the update and all went well- 320x240 now! FW version 1.2 and SW 3.2.0

Does anyone have the files and procedures for eliminating the flir logo and getting the other palettes? There was link to file from 2 weeks ago but they are no longer there. Any help would be great- Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 03, 2014, 09:10:05 pm
Nothing new so far...
2.3.0_Menu_3.zip (http://)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on December 03, 2014, 10:05:29 pm
Thanks- that did the trick and easy to do!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skarabas on December 04, 2014, 12:35:21 am
Thanks- that did the trick and easy to do!

Im in the same boat sidewinder...  Literally, from Michigan, ordered it from zoro with the discount, got it today.  The resolution hack worked, but the menu thing isn't taking.  In fact I am losing all my menus/button fuctionality when I run it.  What did you do to get them to work right? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on December 04, 2014, 01:02:10 am
All I did was run the 2.3.0_menu_upgrade.fif from the FLIRInstallNet application. It restarted and the additional color palettes were there and the logo was gone- no problems at all. Where in MI are you?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: skarabas on December 04, 2014, 02:48:40 am
grand rapids.

I must have disconnected the flir before it was done injecting the fif (I was getting impatient at that point).  Tried it again and it worked out fine.  The only thing I'm missing (I don't think the new FW is compatible with it yet) is the ability to manually enter temp scales.  But I can survive without it.

And a big heads up for anyone else with the new firmware, for some reason or other (at least for me) windows 8.1 doesn't set up the network options properly and even manually entering the IP and Gateway doesn't work.  Tried three different windows 8.1 pcs and about a dozen usb ports with zero luck.  I ended up digging out an old windows 7 laptop and everything worked perfectly on the first try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on December 04, 2014, 04:01:45 pm
Thanks  janekivi!

Just ran the menu upgrade on my 2.3, now I have full resolution and added pallets; one step closer to full unlock!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on December 05, 2014, 03:29:19 am
Been fiddling with a v2.3 cam for about an hour now... Cannot get past the "150 File status okay; about to open data connection" message; just hangs there and that's that. IP comes right up, login is successful, but...???

SOLUTION: Re-checked Win-Firewall and a SECOND entry is now present for FTP, and after enabling access for the new entry everything worked. Prolly that's the cause behind the trouble people have been having.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on December 05, 2014, 12:33:34 pm
Hello all.
I have a FLIR E4 before me that i bought yesterday and that has been slightly used, and my question is this: Can you somehow tell if this unit has been hacked? Does it show anywhere in the system? The startup screen seems normal, but in the specs in the camera it says "Model - E4, i was thinking that this might change once you've upgrade it?
If it isn't hacked i will do it, but it's quite unnecessary if it's already been hacked... ;)

Its a fairly new unit so the software is 2.3, btw..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 05, 2014, 01:47:36 pm
Hello all.
I have a FLIR E4 before me that i bought yesterday and that has been slightly used, and my question is this: Can you somehow tell if this unit has been hacked? Does it show anywhere in the system? The startup screen seems normal, but in the specs in the camera it says "Model - E4, i was thinking that this might change once you've upgrade it?
If it isn't hacked i will do it, but it's quite unnecessary if it's already been hacked... ;)

Its a fairly new unit so the software is 2.3, btw..

It's highly unlikely that it is, but you can check the outputted images, which will indicate what the resolution is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on December 05, 2014, 02:19:40 pm
If i open this in Linux GIMP, it says: Image size 320x240 , but in another line it says that resolution is: 72x72 DPI?  :-//


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 05, 2014, 02:42:43 pm
If you go on the website you can see that you guys bought out their entire inventory.  Some will be delayed a few days I'm sure.



Ordered from Zoro yesterday and order still shows "Pending Approval".... I'm starting to wonder if they are going to honer the 30% off coupon....

I was surprised to get a 1.2 firmware from Zorro. But, I am pleased.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 05, 2014, 02:45:16 pm
If i open this in Linux GIMP, it says: Image size 320x240 , but in another line it says that resolution is: 72x72 DPI?  :-//


EDIT: If i'm not mistaken it should be hacked, if you look to the picture res?

 I'll ask the seller later and how he did it and report back!

Open the image in FLIR Tools and check what the IR resolution reports as:

(http://imgur.com/w6GYAnI.png)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 05, 2014, 03:20:00 pm
To my eyes that sample image looks to have 80x60 thermal resolution. i.e it has not been hacked.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on December 05, 2014, 03:35:03 pm
Big thank you for the replies.

The device was not hacked, but now it is! I just followed the steps in the guides here and it worked like a charm. Thank you for making this possible!

If someone having difficulties with the steps in the guide, drop me a PM and i'll try to help you  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 05, 2014, 03:42:50 pm
Can you somehow tell if this unit has been hacked? Does it show anywhere in the system?

To my eyes that sample image looks to have 80x60 thermal resolution. i.e it has not been hacked.

Aurora

yes
Code: [Select]
>exiftool -RAW* FLIR0016.jpg
Raw Value Median                : 10220
Raw Value Range                 : 432
Raw Thermal Image Width         : 80
Raw Thermal Image Height        : 60
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 5566 bytes, use -b option to extract)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on December 05, 2014, 06:59:00 pm
switch to thermal image only - no msx and post a picture of your hand, so we can tell you if you have high resolution
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 05, 2014, 07:53:14 pm
A unhacked camera has a lot of visible noise, just close the lens cover and you will see it all dancing all over the background.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2014, 04:31:05 am
Which firmware suggest the Flir tools updater for the old E4 with a FW 1.19 (the first version with a plain text config file and simple crc01 checksum)?

What is happened by a firmware update from a old un-crypted 1.19 to current firmware?
Persists the old plain text config file with simple CRC01 check?

If yes, why we cant simple hack the current FW with an old plain text CRC01 config file?
Are there additional entries in EEPROM of newer cameras ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on December 06, 2014, 12:51:38 pm
Which firmware suggest the Flir tools updater for the old E4 with a FW 1.19 (the first version with a plain text config file and simple crc01 checksum)?

What is happened by a firmware update from a old un-crypted 1.19 to current firmware?
Persists the old plain text config file with simple CRC01 check?

If yes, why we cant simple hack the current FW with an old plain text CRC01 config file?
Are there additional entries in EEPROM of newer cameras ?

Hi Tomas -

the FLIR Updater suggests the currently latest Version 2.3.0 for a 1.19.8 camera (been there, done that). The update procedure itself ends with an error (though I forgot what it actually says). After the update, the firmware of the camera is reported as "2.3.0*", whatever the asterisk means... All the config files stay unencrypted and the "simple" hack for the 1.19.8 still works. Yet, the menu extension won't since FLIR seems to have removed some of the functions from appcore and facet.rcc doesn't contain all the required modules anymore. I was able to assemble a "special" facet.rcc with the help of some of this forum's members that will return most of the menu extensions of the old hack, but the manual temperature range adjustment was one of the functions that wouldn't work. Also most of the extended web configuration menu items would only report something like "This function is not supported".

Examinations and comparisons between the camera backup and OEM update packages showed that the updater replaces the operating system and most files in FlashBFS. Some config files stay untouched as well as the defect management (obviously). CRC01 check for the config files is kept.

With a "home-brewn" 1.19.8 update package (which apparently doesn't exist publicly available from FLIR), I was able to revert my camera back to 1.19.8 with the updater once again terminating at 96% with an error message. After the "downgrade" the camera reported a software configuration ">0.1.1"  ;D or something like this. To finally get this sorted, I had to manually replace the two files in  \flashBFS\system\kits.d\ "appkit.rev" and "prodkit.rev" with the ones from my old backup.

There must be some additional software layer (or maybe even hardware coding) that reports to appcore what config file format it should expect and that renders an old software configuration inoperational. This could be the bootloader which was the only file where the version number didn't change throughout this "journey". Yet, I failed to locate the bootloader, maybe it's residing in a hidden partition of the flash memory? Maybe if we would be able to locate and access the bootloader, we could up/downgrade the camera as we like.

About the EEPROM structure and if it was changed on generic 2.x.y cameras I haven't got any information. All that I can tell is that on my camera, the EEPROM access password stayed "1235" even after the update.

Maybe this information is some food for thoughts regarding a possible "downgrade" of later camera versions.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 06, 2014, 02:12:02 pm
great answer  :-+ :-+

Thank You

All the config files stay unencrypted and the "simple" hack for the 1.19.8 still works.
as expected, Flir now use the eeprom as dongle
so that newer E4 can't down step to unencrypted config files
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 06, 2014, 10:07:28 pm
As I wrote here before, you can play with old software in new 2.3.0 1.2L E4 and it loads plain text conf.cfc files. This is not problem. I took some files from flir_ex_pn639_v1.18.7_update_pack.
There is few changes in windows files and who knows what it checks for booting... that's why I'm not test yet full
software downgrade.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 08, 2014, 11:55:43 am
Has anybody troubles with unmapped bad pixels? (no dust)

in the another Flir thread I posted some nice screenshots from service menu of E40 ( it's the same menu like E4 until FW 1.19)

wow,
I found a menu, where you can replace single dead pixels!
the page only work with internet explorer ( no firefox or chrome)

Select a method  :-\
(https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/?action=dlattach;attach=123404;image)

show all bad pixels (currently mapped)
(https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/?action=dlattach;attach=123406;image)

kill a single bad pixel
(https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/?action=dlattach;attach=123408;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 08, 2014, 12:17:22 pm
@Tomas123,

Thank you again  :-+

As I commented in the E40 thread, this is a great option for users with dead pixels issues, now or in the future. Microbolometer pixels can fail over time, as proven by my Testo 880-1 having three dead pixels at the moment. Not surprisingly Testo refused to comment on how to delete those pixels as they would have had to provide service menu detail.

NEC AVIO thermal cameras bury the dead pixel correction map within the calibration procedure, making it hard to use unless you have the required blackbody sources to complete the required calibration sequence. From talking to an engineer it is a tiresome process on an AVIO camera.

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eneuro on December 08, 2014, 01:54:05 pm
Has anybody troubles with unmapped bad pixels? (no dust)
Those bad pixels on Flir cameras always has low values (looks black) or there are also high value unresponsive one?

Nice to know how Flir deals with bad pixel management in their software  :-+

On Seek Thermal device just implemented in my open source version of my Seek software automatic mode for dead pixels detection, where many calibration frames are collected during normal camera operation (at least 8 ) and differences computed between each of those calibration frames (28) then map of not changing pixels created and it can be saved on device with storage capability or in automatic mode repeated after each Seek device restart.
For long running thermal cameras those dead pixels can be detected on the fly, so it is transparent to end user and he can check only from time to time how many dead pixels his units has  8)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 09, 2014, 09:57:31 am
Thanks for pointing out the menu to correct bad pixels - I've just used it to correct two on a new second hand camera we have just picked up (T6xx series). Pretty much everything in this thread is applicable to the T6xx series and even the T/B4xx series!

Just need to have a look at some configs from the higher models and see if I can apply them to the lower ones...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 09, 2014, 03:51:15 pm
@tomas123,
there is no service menu web files in last E4, if you for completness could point to the package with the files that would be great. I copied them on mine but i did not save the link.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 09, 2014, 04:09:02 pm
good luck...

... but I don't think, that all the old "restree.setResourceValue" commands from web GUI works on the current firmware

sample  restree.setResourceValue( "prod.preparation.command",  "restartHighRes" );
Code: [Select]
#start HighRes Modus
>rset prod.preparation.command restartHighRes

as attachment the relevant files from firmware flir_ex_pn639_v1.18.7_update_pack
(size limit is 1MB, rename to zip)

ah I see, that the current fw of E40 Late 2013 v4.9.0 has no service menu   :(
...
you can simple read the html files of the old FW and make the same steps on the shell (setResourceValue = rset)

sample:
search for activating the service mode in Web GUI (file name HighRes.asp = full resolution  8) ):
Code: [Select]
$ cd flir_exx_pn490_v2.23.14_update_pack/E2comb_v2.23.14.fif/FlashFS/system/web
$ grep -i -r highres *
service/Diag/HighRes.asp:      restree.setResourceValue( "prod.preparation.command",  "restartHighRes" );
service/inc/servicemenu.inc: menuRow("Activate Service Mode", "/service/Diag/HighRes.asp", "submenu1", selectedMenu == "mnuDiagResolution");
service/index.asp:                    <FORM ACTION=diag\HighRes.asp METHOD="POST">

we get
Code: [Select]
restree.setResourceValue( "prod.preparation.command",  "restartHighRes" );and this is the same command on the shell
Code: [Select]
#start HighRes Modus
>rset prod.preparation.command restartHighRes

for inspirations:
as attachment all resource values set by service menu
Code: [Select]
>grep -r -i "restree.setResourceValue" * > setResourceValue.txt
there are nice commands like
Code: [Select]
web/service/ImgCorr/PixKill.asp: restree.setResourceValue( "ui.userSettings.overlayLogo", false );is equal to
Code: [Select]
rset .ui.userSettings.overlayLogo false
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: crmaris on December 10, 2014, 02:26:45 pm
Hey guys,

I have an E4 2.3 modified and only now I noticed that I cannot open the Flir tools. It starts and after a while closed down on its own (apparently it cannot find the camera).

In the device manager under the imaging devices strangelly enough only the FLIR USB Video is shown and nothing else.

http://img.techpowerup.org/141210/Capture477.jpg (http://img.techpowerup.org/141210/Capture477.jpg)

Also in the hidden menu the USB is set to UVC and MSD. Tried to change it to something else but I can't. Once I push the center menu button it returns me to the previous menu without changing anything.

Any ideas??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 10, 2014, 03:29:49 pm
Code: [Select]
rset .ui.userSettings.overlayLogo false

Just used this command to disable the FLIR logo on all of our cameras :D Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 10, 2014, 03:37:57 pm
...and someone asked about full clear screen:

rset .ui.userSettings.hideGraphics true - false
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 10, 2014, 03:46:31 pm
Logo/ graphics - is it a permanent change?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 10, 2014, 03:56:31 pm
this way ... no
in 2.3.0 I save that hideGraphics true line for example in preset_nomeasure.rsc
and false to preset_centerspot.rsc
and that logo I removed with hexEdit from facet.rcc (replaced with transparent)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 10, 2014, 03:59:23 pm
this way ... no
in 2.3.0 I save that hideGraphics line for example in preset_nomeasure.rsc

It's permanent on my T620! I just telnet into it and send the command - BAM! After numerous reboots, hard resets etc the logo is still gone :) Will try on our other cameras when I can.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 10, 2014, 04:11:41 pm
E4 2.3.0 is not very simple and not very biddable ...

edit: but but ... just found that temp scale manual entry mode using
rset .ui.userSettings.scaleInteractive true
when in menu is selected "Lock"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 10, 2014, 04:57:38 pm
I have an E4 2.3 modified and only now I noticed that I cannot open the Flir tools. It starts and after a while closed down on its own (apparently it cannot find the camera).

May be try to reinstall Flir Tools? When it cannot find my camera it does not close, it still runs but only shows the images that were imported before.
Quote

Also in the hidden menu the USB is set to UVC and MSD. Tried to change it to something else but I can't. Once I push the center menu button it returns me to the previous menu without changing anything.

Forget about trying to change the mode from the camera, it does not work on 2.3
Can only change via a fif script.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: crmaris on December 10, 2014, 05:45:24 pm
I have an E4 2.3 modified and only now I noticed that I cannot open the Flir tools. It starts and after a while closed down on its own (apparently it cannot find the camera).

May be try to reinstall Flir Tools? When it cannot find my camera it does not close, it still runs but only shows the images that were imported before.
Quote

Also in the hidden menu the USB is set to UVC and MSD. Tried to change it to something else but I can't. Once I push the center menu button it returns me to the previous menu without changing anything.

Forget about trying to change the mode from the camera, it does not work on 2.3
Can only change via a fif script.

Thank you for your input! I tried unistalling and installing the application along with the drivers but this didn't help. Will try to install it in another PC and see how it goes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Megla on December 11, 2014, 09:12:14 am
I have a quick question and it goes like this :
Has any1 tryed to isntall this lens  http://therm-app.com/product/19mm-lens/ (http://therm-app.com/product/19mm-lens/)  on to a flir e4 cammera since it is fairly cheap 19mm narow fov lens that could give a longer detection range (at least i hope so :D ) there would be some housing modifications since i dont think the threads on the lenses are the same...

im using flir e4 on airsoft fields and i need as much range as possible :D

thank you :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on December 11, 2014, 01:10:41 pm
25% off Zoro Today and Friday  Code: candycane

The more people we get to buy these the more that can work on hacking other features.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 11, 2014, 06:27:29 pm
Well I have been pissed at Zoro as my order was pending until for 10 days!!! Well it finally shipped.

What came in.... a dead as crap camera.... I was hoping that was a good sign. Hooked up a charger and BAM sw v 1.22!!

I couldn't have been happier!!! All that for $700!!!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 11, 2014, 06:57:28 pm
YOU LUCKY BAST@RD!!!!

Congrats!  Enjoy your E4  (winkwink)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 11, 2014, 08:09:38 pm
lol for real. I feel like I won the lottery or something. HAHA I guess they stack them on the shelf as they come in and since mine was held up I got towards the back of the stack.

My only concern would be the fact the battery has been sitting for so long. I haven't checked config date yet....Mid April So it has been sitting for 8 months!!! Should I be concerned?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 11, 2014, 09:04:51 pm
I would imagine that the battery is just fine.
It is a Lithium, and the battery managment in the E4 shuts down if the voltage gets too low (3.2v I believe?), so it shouldn't be damaged.

Best thing to do is charge it up and give it a run until it shuts down... should be about 4 hours run time.
They are 18650's... typical in most laptop battery packs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 12, 2014, 04:59:42 am
Was going to wait to hack the new camera but couldn't take looking at the crappy res any more. Used TIConfig and it worked like a charm. All the menu hack stuff is just awesome. One thing I noticed between the 2 is the 1.22 boots up faster than the 2.3

The 1.22 has more background noise than the 2.3 but I changed it on the 2.3 and didnt do anything but the standard hack on the 1.22
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 12, 2014, 04:09:38 pm
total noob here (and I mean a total noob  :-[), if anyone has any clear, easy to follow guides for a total noob with regards to hacking the E4 with 2.3.0 firmware I would be forever grateful. thanks in advance.  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: quattro on December 12, 2014, 07:32:53 pm
I've successfully applied the resolution hack to an E4 with the 2.3 firmware.  I'm now looking for the menu hack (2.3.0_Menu_3.zip) to get additional pallets, etc. All the links are stale, is there a sticky link somewhere? Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 12, 2014, 08:30:14 pm
2.3.0_Menu_3.zip

2.3.0_Menu_4.zip
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 13, 2014, 12:04:20 am
Hi, I have been considering buying an E4 for the last 6-8 months, and finally broke down and bought a used one,  It seems the previous owner did a software update on it, as the menu shows it as model E4 1.2L with Software 2.3.13  Can anyone tell me the state of hacking for this version, as while I have been reading through this thread and others, I am a bit unclear on updated units, and have seen no mention of 2.3.13 software, just 2.3.0.

thanks

p.s. the Calibration sticker is dated April 7, 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 13, 2014, 04:12:48 am
I am a bit unclear on updated units, and have seen no mention of 2.3.13 software, just 2.3.0.

I guess if you have not seen it  then there is no information on this version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 13, 2014, 03:06:08 pm
Ok, right now I'm confused (to say the least). Is there finally a way to hack 2.3 firmware like the older versions? Resolution + menu options? I thought only resolution hack is possible  :wtf:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 13, 2014, 04:57:42 pm
Ok, right now I'm confused (to say the least). Is there finally a way to hack 2.3 firmware like the older versions? Resolution + menu options? I thought only resolution hack is possible  :wtf:

I don't even know where to start for doing the hack for the resolution, let alone for the menu hack too (if it can be done). any guides would be great (guides for complete noobs)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 13, 2014, 06:32:50 pm
@yogort1
No menu , beside additional palettes

@GH05TMS
Browse this thread backwards until you see a long post with instructions, different people reposted them several times.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 13, 2014, 06:43:30 pm
hi mike,many thanks for your hacking on e4 v2.3. I don't quite understand some part of your guide like"Save the file as flashfs\system\appcore.d\config.d\e8.cfg ".That means I need to creat some folders in these names and then put the modified e8.cfg into config.d ? Some guides in this thread mentioned RNDIS and PYTHON while only flir tools you mentioned in your guide.Is it the new method to hack e4 in your way which only use flir tools and camera.cmd? Please give me some advice |O.Thanks and sorry for my poor english :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 13, 2014, 10:04:19 pm
Ok, right now I'm confused (to say the least). Is there finally a way to hack 2.3 firmware like the older versions? Resolution + menu options? I thought only resolution hack is possible  :wtf:

I don't even know where to start for doing the hack for the resolution, let alone for the menu hack too (if it can be done). any guides would be great (guides for complete noobs)

Page 377, Reply #5645
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 13, 2014, 10:29:02 pm
Yes you can unlock the full resolution on E4's with 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JerryTN on December 14, 2014, 03:07:25 am
I recently purchased the flir e4b. It has the latest 2.3 sw and wanted to know if the above hack for the standard e4 will work on the e4b.  From what I can find out its the same unit as an e4 except with limited temperature range. Thanks for any help. Jerry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ITman496 on December 14, 2014, 04:59:05 am
Proud to say that it worked!  Dunno about any of the menu stuff on 2.3 but the resolution is amazing now! And that blasted noise is gone.  Thank you everyone for your hard work! Now I can enjoy looking at my cat in glorious 320x240.

Interesting notes for anyone new attempting this:

The IP isn't always 192.168.0.2, in my case it was 192.168.1.2   Make sure to check ipconfig and figure out what yours comes out to be.

The files for the RNDIS were a bit annoying to find but if you google the file name in the guide you can find it.  I assume they are hard to locate for a reason.

When I did said RNDIS procedure, windows complained about disabling an unsigned driver, but it didn't seem to affect anything.  Maybe its why the cmd ftp didn't work.

doing ftp in cmd didn't work.  I'd hit dir and it would say 150 status okay fetching data or something like that, but never actually do anything.  Instead I just went to windows explorer and typed in the top (on a win7 x64 machine) ftp://192.168.1.2  and I was able to browse through the files normally and find/verify that the one file was 6608 or something in length.  At least I assume that's what they want checked.

Other then that, it worked great.  Went smoothly, following the directions, immediately made the image on the camera 1000x better.

Hope this helps anyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 14, 2014, 07:17:26 am
Can someone explain what I will be losing if I cannot update the menus? I am about to order a camera, which will no doubt have 2.3 SW.

Maybe I shoudl buy an E5 instead and upgrade that if the functionality is important.

Also does the Resolution hack also increase the Sensitivity? as E4 is quoted at <0.15C, E5 <0.10C and E6 and E8 at <0.06C

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ITman496 on December 14, 2014, 07:31:42 am
I'm interested in that answer as well, I don't know what I'm missing, and probably want it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 14, 2014, 07:41:22 am
I can confirm that the "resolution improvement" v0.1 works for an newly bought E4 (V2.3.0) camera. I also tried v0.2 and it has a problem finding the files to send back to the camera. Maybe only a file-path naming problem... So I did it manually with Windows-CMD/FTP

Great job!!!  :-+ :-+

BTW: I got the information that FLIR did not only reduce the resolution but also installed a noise generator to further impair the picture... I think this is a bad move, only that they can say "see, how much better our E8 model is!"
Fortunately the upgrade eliminates also the noise, which is very good visible.

Such manufacturers deserve to be hacked!  :rant:
"filr also installed a noise generator" it that ture?
what the **** flir is!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ITman496 on December 14, 2014, 08:09:44 am
It does indeed.  I saw it with my own eyes before I did the mod.  Why FLIR, whyyyyyy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on December 14, 2014, 08:49:25 am
Does this 2.3 hack also shut off the noise generator?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 14, 2014, 12:01:57 pm
Noise is 0 now. In E8 conf nr is 5. In E4 2.3.0 cfc it was 135 , changed it to 335 - that was cool (999 not tested) : )
Changed here reso too - lower than 40x30 and higher than 320x240 it won't go and 640x480 have no visual effect (40x30 had : )).

Edit: That noise is added by conf, if you delete conf file or mess those rows in conf - noise is 0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 14, 2014, 07:00:30 pm
If you need manual temp scale it is possible that way:
download this - 2.3.0_Menu_4.zip (http://wikisend.com/download/325660/2.3.0_Menu_4.zip)
and add in - preset_centerspot.rsc
line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 14, 2014, 07:07:37 pm
Well I have been pissed at Zoro as my order was pending until for 10 days!!! Well it finally shipped.

What came in.... a dead as crap camera.... I was hoping that was a good sign. Hooked up a charger and BAM sw v 1.22!!

I couldn't have been happier!!! All that for $700!!!

My camera from Zorro only took a few days from order, but it was also dead and needed a charge before it could be turned on. It also turned out to be a version 1.22.

Once you register the SN# with FLIR they upgrade your 1 year warranty to 2 years.

The hack went smoothly, and was very simple. I backed up the original config file and the system folder to return it to stock if needed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 14, 2014, 07:15:57 pm
Writing stock files back will change their timestamp, you cannot fool Flir that way unless thereis a way to overwrite the timestamp.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 14, 2014, 08:04:44 pm
@KK

How long ago did you buy it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 14, 2014, 08:27:04 pm
@KK

How long ago did you buy it?

Cyber-Monday 12/1/14.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: reifill on December 14, 2014, 10:28:09 pm
Hi, the whole day I tried to upgrade my E4 to resolution E8...now I am becoming crazy... |O

E4 was bought 12/2013, in 10/2014 FW-Update from 1.19 FW to FW 2.3, "conf.cfg" size 6.297kb not 6.608kb, this may be the reason why v0.3/0.4.zip dosen´t work. V0.3/.04 generates backup folder with "common_dll.dll", no file "conf.cfg", in the python27 folder the "common_dll.dll" was created (same size as the original, perhaps it is not changed) and the "conf.cfg", size 0kb(?)


Access via FTP(192.168.0.2) seams to be easy via pressing the right side of central button (menue camerainformation) for 12 sec to enter usb-menue, changing selection to RNDIS. I have access to folders FlashBFS and FlashFS, I am able to copy, rename and erase files on E4...

python 2.7 stops running with error 550 (see attachment). I tried, I believe, nearly everthing discribed in threads, start reading page 350-407...using older tools/versions, entring CRC01 checksum and and and...

Now I have no more Ideas. :-// :palm:

Has somebody additional ideas/hints?

Thanks i.a. reifill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 14, 2014, 11:34:33 pm
Hi, the whole day I tried to upgrade my E4 to resolution E8...now I am becoming crazy... |O

E4 was bought 12/2013, in 10/2014 FW-Update from 1.19 FW to FW 2.3, "conf.cfg" size 6.297kb not 6.608kb, this may be the reason why v0.3/0.4.zip dosen´t work. V0.3/.04 generates backup folder with "common_dll.dll", no file "conf.cfg", in the python27 folder the "common_dll.dll" was created (same size as the original, perhaps it is not changed) and the "conf.cfg", size 0kb(?)


Access via FTP(192.168.0.2) seams to be easy via pressing the right side of central button (menue camerainformation) for 12 sec to enter usb-menue, changing selection to RNDIS. I have access to folders FlashBFS and FlashFS, I am able to copy, rename and erase files on E4...

python 2.7 stops running with error 550 (see attachment). I tried, I believe, nearly everthing discribed in threads, start reading page 350-407...using older tools/versions, entring CRC01 checksum and and and...

Now I have no more Ideas. :-// :palm:

Has somebody additional ideas/hints?

Thanks i.a. reifill

waiting answers with U…………
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 14, 2014, 11:56:45 pm
I've got a question for people who own additional FLIR cameras besides an E4 (or any other Ex camera). Are the screens of other FLIR cameras scratched as easily as on the Ex ones, or is this issue specific to the Ex series?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 15, 2014, 01:31:50 am
I know this is probably a stupid question, but where do I find v0.4 for the 2.3 hack?  I have been looking for 2 hours and no luck, if this should not be posted in public please PM me.

thanks

p.s. just found it

I can now report that the v.04 resolution hack worked with my version 1.2L original, 2.3.13 updated software E4   YAY what a way to spend a Sunday afternoon.  Also hidden USB menu to set RNDIS worked
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on December 15, 2014, 01:47:15 am
Hi, the whole day I tried to upgrade my E4 to resolution E8...now I am becoming crazy... |O
:
:
Thanks i.a. reifill

Hey reifill,

sometimes just scanning through a few of the previous pages of a bulletin board provides valuable information ;)
You may want to check my contribution here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg563620/#msg563620 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg563620/#msg563620)

I would say as long as your camera is a 1.0 or 1.1 hardware, you can hack it using the "old" method, i.e. like it's described in the links published on the first page of this thread for the original 1.19.8 firmware. The menu hack wouldn't work, though. But there's a good chance that you can "downgrade" your camera back to 1.19.8

First thing to do is to download Marphy's TIConfig tool: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg421535/#msg421535 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg421535/#msg421535) and check if the cfg files are encrypted or not. If they are readable clear-text, the standard hack for 1.19.8 firmware will work. If you'ld post a list of your camera's configuration, I can tell you if my "downgrade package" will work for you.

But from all I've learned with my cam, an updated 1.19 is still closer to the old configuration than to a factory native 2.3.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 15, 2014, 06:27:25 am
I've got a question for people who own additional FLIR cameras besides an E4 (or any other Ex camera). Are the screens of other FLIR cameras scratched as easily as on the Ex ones, or is this issue specific to the Ex series?
It's a Ex trouble.
The touch display of Exx is better.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 15, 2014, 08:31:19 am
If you need manual temp scale it is possible that way:

OK janekivi, that worked, I will play more with it when have more time
 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 15, 2014, 10:58:59 am
Is it possible to unplug the lcd screen and stream video through USB? My question regards E4 firmware 2.3 with hacked resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 15, 2014, 11:48:21 am
Is it possible to unplug the lcd screen and stream video through USB? My question regards E4 firmware 2.3 with hacked resolution.

What do you mean with "unplug the lcd screen"?

Windows
for USB Video use Flir Tools
see https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140)
or free camera player
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg378926/#msg378926 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg378926/#msg378926)

Linux
https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/ (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 15, 2014, 12:05:47 pm
I mean remove the LCD screen completely from the camera :) I want to design my own case for E4's electronics module and print it on my 3D printer. I'm asking about streaming video through USB, because I want to process it through OpenCV and add some features. I'm worrying that camera could make some initial peripheral devices check on startup, and when it finds out that the LCD is missing it simply won't boot up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2014, 02:07:19 pm
I mean remove the LCD screen completely from the camera :) I want to design my own case for E4's electronics module and print it on my 3D printer. I'm asking about streaming video through USB, because I want to process it through OpenCV and add some features. I'm worrying that camera could make some initial peripheral devices check on startup, and when it finds out that the LCD is missing it simply won't boot up.
It will work fine without the LCD ( or the buttons)
You may want to investigate disabling the backlight driver to save power - these are usually step-ups, and with no load will usually go into some sort of protection mode - in some cases this draws minimal power, but could just be burning it in a zener.
ISTR someone mentioned issues with UVC video on later FW.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 15, 2014, 03:03:21 pm
Hello I am considering buying an e4 spoke with flir and they claimed they have stopped the hack so I am asking can the new e4 be hacked to e8. . Also if it can who can do it as I am no wizzard with software . Appreciate the reply
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 15, 2014, 04:24:56 pm
That is always a hard question to answer, because no one knows exactly what new "un-hackable" model may have just been introduced into the supply chain.  But the ones people have reported receiving in recent days with the 2.3.X firmware are still partly hackable.  In particular there is still a resolution hack available to get to the E8 resolution, but what is still missing is some of the extended menu functionality of the E8, so in effect the current hack gets you a higher resolution E4, and some of the recent sub-hacks that get some of the extended menu functions back, but not yet all of them.  As to the difficulty of performing the hack, overall it is what I would call a mid level skill hack, as they have introduced a few obstacles that makes the process a bit more complex, but once you determine what it is you need to do for your particular revision the process only takes a few minutes.  I just did it for the first time yesterday on a used E4 which had the latest software, but slightly older firmware which added some minor complications.  I spent about 3 or 4 hours reading through old messages in this thread, determining what I had, downloaded various bits of software, had to trouble shoot some of the installation, go out and dig up a driver to download, etc.  Much of this time was spent due to the high level that the instructions are written at, such as "put E4 in RNDIS mode", so go spend 45 minutes finding out what RNDIS mode is and how to set it, find that there was a hidden menu for RNDIS on older firmware models, but newer ones needed another way to trick into RNDIS......
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2014, 04:58:48 pm
@leoibb,

You didn't honestly ask FLIR if their E4 could still be hacked did you ? Not very diplomatic if you did  ;D

FLIR are against the hacking of their product and any response from them on the matter cannot be trusted. I was surprised and impressed that firmware 2.3 has been hacked relatively quickly. Where there is a will, there is often a way  ;)

All versions up to Firmware 2.3 may be upgraded to higher resolution but if you can find a 1.19, 1.21 or 1.22 firmware it is capable of even more improvements that are very useful.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 15, 2014, 05:06:03 pm
This is better if you go to Flir and say to sales manager: what if I buy from you E4 and pay to hacker to make it to E8 and more better OR make me very good offer and sell me E8, I have cash in pocket right now : )))
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 15, 2014, 05:13:58 pm
My question from before still stands.

Which hacks have not been managed yet on the new firmware versions?

Also is the sensitivity that of an E8 ? with 2.3.x

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 15, 2014, 05:19:54 pm
Hello I am considering buying an e4 spoke with flir and they claimed they have stopped the hack
..to which your response should be "which hach..?"  ;D

Quote
Also is the sensitivity that of an E8 ? with 2.3.x
I don't think anyone has figured out the sensitivity differences (if any) on any version.
Has anyone managed to get a config file from a real E8? I wonder if maybe they just turn the noise value down?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2014, 05:24:27 pm
Noise gen on E8 is set to 5mK.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 15, 2014, 05:37:22 pm
My question from before still stands.

Which hacks have not been managed yet on the new firmware versions?

Also is the sensitivity that of an E8 ? with 2.3.x

What you need to understand is this is a fluid situation, the resolution hack seems to work on all firmware versions, recently someone seems to have figured out how to get additional color palettes back, and work arounds have been partly found for some other features like manual temperature scale, or logo removal, others are in the works, but may have to be set from a connected computer and can't be toggled by on screen menu, or will not persist after a reboot, Who knows what next week and next month may bring.

As to E8 sensitivity that is a hard one to answer since we don't know if Flir does some sort of in house grading system giving the best sensors to the E8's etc.  The setting for the artificial noise generator has been discovered, and someone seems to have found how to completely turn it off, but not how to fine tune yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 15, 2014, 06:22:44 pm
E4 2.3.0 recalculated-hacked conf: noise nr have 1 position now (because reso takes 2 position more now and they come from here) - address 1657
I can write here:
; - C8
: - C9
9 - CA
8 - CB
7 - C4
6 - C5
5 - C6
4 - C7
3 - C0
2 - C1
1 - C2
0 - C3
that way the rc4 pattern goes here for me.
Changing all numbers is easy but false to [space]true... not yet. Hope that have this key what he got for changing conf contents...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 15, 2014, 07:00:32 pm
Noise gen on E8 is set to 5mK.
and in E60 files it is 40
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 15, 2014, 07:02:16 pm
evening all, iv still not really got a clue about all this hacking malarkey but I am desperately trying to figure it all out. my trouble is the wording used by you experts on here lol, im not very technically minded at all and really have no idea where to start despite reading the posts on this page over and over and over again.

Anyway, I have a new question for you all. Having just acquired my e4 last Friday ive had to get it swapped for a new one because of what I can only describe as pixel failure in places on the screen. Upon bootup, where the flir logo is displayed upon the black background, a big red dot was present, and also various pixels were playing up in the settings menu too. mainly over the words ''Demonstration mode'' and ''reset options'' when scrolling up and down the menu. these pixels could not be seen at fault under normal viewing using the cam as a actual cam, and only noticeable when in menus. So, I got onto the guys I bought from and they said they had another in stock, I drove up there today to swap units and guess what? this new one does it too, in exactly the same places on the menus. This one however has no big blurred and smudged red dot on the flir logo bootup screen. the guy also got out a e5 and a e8 and they also had this weird pixel thing in the menus!? have I got a duff or is there a faulty batch of screens? could this be a software issue with 2.3.0 units? anyone else had the same probs?

back to the old drawing board now trying to figure out where to even start for this hack!?!? god help me! my knowledge with computers is about as much as turning one on, basic browsing and then shutting it down lol.  :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 15, 2014, 07:26:24 pm
evening all, iv still not really got a clue about all this hacking malarkey but I am desperately trying to figure it all out. my trouble is the wording used by you experts on here lol, im not very technically minded at all and really have no idea where to start despite reading the posts on this page over and over and over again.

Anyway, I have a new question for you all. Having just acquired my e4 last Friday ive had to get it swapped for a new one because of what I can only describe as pixel failure in places on the screen. Upon bootup, where the flir logo is displayed upon the black background, a big red dot was present, and also various pixels were playing up in the settings menu too. mainly over the words ''Demonstration mode'' and ''reset options'' when scrolling up and down the menu. these pixels could not be seen at fault under normal viewing using the cam as a actual cam, and only noticeable when in menus. So, I got onto the guys I bought from and they said they had another in stock, I drove up there today to swap units and guess what? this new one does it too, in exactly the same places on the menus. This one however has no big blurred and smudged red dot on the flir logo bootup screen. the guy also got out a e5 and a e8 and they also had this weird pixel thing in the menus!? have I got a duff or is there a faulty batch of screens? could this be a software issue with 2.3.0 units? anyone else had the same probs?

back to the old drawing board now trying to figure out where to even start for this hack!?!? god help me! my knowledge with computers is about as much as turning one on, basic browsing and then shutting it down lol.  :palm:

The red pixels in the menu, I also met in last supply cameras.
Try the following hack factory camera settings. And let me know if that helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 15, 2014, 07:38:50 pm
evening all, iv still not really got a clue about all this hacking malarkey but I am desperately trying to figure it all out. my trouble is the wording used by you experts on here lol, im not very technically minded at all and really have no idea where to start despite reading the posts on this page over and over and over again.

Anyway, I have a new question for you all. Having just acquired my e4 last Friday ive had to get it swapped for a new one because of what I can only describe as pixel failure in places on the screen. Upon bootup, where the flir logo is displayed upon the black background, a big red dot was present, and also various pixels were playing up in the settings menu too. mainly over the words ''Demonstration mode'' and ''reset options'' when scrolling up and down the menu. these pixels could not be seen at fault under normal viewing using the cam as a actual cam, and only noticeable when in menus. So, I got onto the guys I bought from and they said they had another in stock, I drove up there today to swap units and guess what? this new one does it too, in exactly the same places on the menus. This one however has no big blurred and smudged red dot on the flir logo bootup screen. the guy also got out a e5 and a e8 and they also had this weird pixel thing in the menus!? have I got a duff or is there a faulty batch of screens? could this be a software issue with 2.3.0 units? anyone else had the same probs?

back to the old drawing board now trying to figure out where to even start for this hack!?!? god help me! my knowledge with computers is about as much as turning one on, basic browsing and then shutting it down lol.  :palm:

The red pixels in the menu, I also met in last supply cameras.
Try the following hack factory camera settings. And let me know if that helps.

thanks for the reply. please forgive me but what do you mean try the following hack factory settings?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 15, 2014, 07:47:52 pm
May be?:
Try the following hack: factory camera settings.
Settings -> Device settings -> Reset options ->
[Reset device settings to factory default...]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 15, 2014, 07:54:05 pm
May be?:
Try the following hack: factory camera settings.
Settings -> Device settings -> Reset options ->
[Reset device settings to factory default...]

ah I tried that on the original unit and also on this but no joy. still got a few red/orange pixels bleeding through in places on the menus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kitsok on December 15, 2014, 07:57:12 pm
Hello, all!

 I've made the stupid mistake and upgraded my E4 to 2.3.0
The hack for the 2.3.0 is not working (I've got a windows error on the TIC), and the size of conf.cfc file is 6336 (instead of 6608).
The information on the service page (I've uploaded the web folder) is here:
Code: [Select]
Camera
Name Part # Serial # Date
FLIR E4 63901-0101 63917130 2014-03-04
HW-id
hwtype System UID
Z3 2A4BD5020090153E
Kits
Name Version Date
SW combination 2.3.0
appkit 2.1.2 23-May-2014
userconf E4 1.1L 25-Oct-2013
ASCO OS image 18.1.20 2014-06-05
prodkit 0 28-Feb-2014
Calibration
Name Date
org 2014-03-03 10:01:22
Hardware
Name Part # Revision # Serial #
camcore T198304 01 63814506
detector * * *
mainboard T198283 11 20136316
Firmware
Name Version Date From
IRDM 0.0.1.0 - -
POLLUX 0.1.0.0 07-Apr-2014 FLIR
POLLUX_FPGA 8.7.0.0 - FLIR
Software
Name Version Date From
AppCore 25.0.0.1 22-May-2014 upalmer@SE-BRYGG5/ALPHA_1.12
AppServices 25.0.0.1 16-Apr-2014 upalmer@SE-BRYGG5/ALPHA_1.12
Bootloader 16.1.5.0 - FLIR
ResMon 25.0.0.1 03-Apr-2014 upalmer@SE-BRYGG5/ALPHA_1.12
WinCE 6.0.0.0 2005 Microsoft
appcore_dll 1.12.1.1 03-Apr-2014 upalmer@SE-BRYGG5
common_dll 1.12.1.1 29-Apr-2014 upalmer@SE-BRYGG5
facet_core 25.0.0.1 22-May-2014 upalmer@SE-BRYGG5/ALPHA_1.12
facet_ui_qml 25.0.0.1 22-May-2014 upalmer@SE-BRYGG5/ALPHA_1.12
fvd 16.0.48.0 Apr 8 2014 upalmer@SE-BRYGG4
Usage Statistics
Number of cold starts 33
Number of shutter operations 723
Number of focus moves 0
Laser time (hrs) 0
Max. operating temperature (°C) 44.73
Max. operating temperature time 2014-11-01 22:25:03
Min. operating temperature (°C) 2.635
Min. operating temperature time 2014-12-14 05:27:00
Operating time (hrs) 14
Up-time (hrs) 0

The EEPROM unlock code is not 1235 :(
Is there a chance to hack the resolution?

Thank you!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kitsok on December 15, 2014, 08:45:42 pm
Okay, answering myself.

The conf.cfc in the upgraded TIC is the same format as in previous, so I've used ftool, decrypted the file, removed # CRC03 line (leaving CR after the last line), changed the width and the height to 320x240, re-calculated CRC03 (using crc03.exe from the ftool).
Then I've encrypted the file back using the SUID and ftool.exe, uploaded file to the device and rebooted. Gotcha.
But the cross was on the wrong place (at 30x60).
Okay. I've downloaded default.rcs, changed the cross position (measureFuncs.spot.1.x and y), recalculated CRC32, added the line, uploaded the file and rebooted device.
Now I'm happy!

Thank you, all!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 15, 2014, 08:46:39 pm

Yes you can unlock the full resolution on E4's with 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.

I had a few issues with this process applying it to an E4 with 1.2L which had been upgraded to 2.3.13, but I was able to get things to work

1, The current release of flirtools did not install the windows RNDIS driver on my windows 7 computer, after a bit of digging I was able to download a copy of the RNDIS driver dated 2013 from the Flir support site.

2, I was able to set RNDIS using the hidden USB menu, and did not have to use  "Set_RNDIS_temporary.fif" or "Set_RNDIS_permanent.fif" I suspect this is due to the 1.2L original firmware (I bought this E4 used, certification date was in april 2014)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 15, 2014, 08:47:38 pm
I give up trying to hack this thing! can anyone please help me or better still, do this for me? I have money waiting! e4 running 2.3.0

I read the instructions, don't really understand what half of them mean and im getting myself really worked up over this. please can someone help me. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 15, 2014, 08:52:37 pm
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478520/#msg478520 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg478520/#msg478520)
You must hack it like before with old firmware tools.
But sometimes is not better way to resolve problems...

Edit: you got it already
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 15, 2014, 08:59:13 pm
I give up trying to hack this thing! can anyone please help me or better still, do this for me? I have money waiting! e4 running 2.3.0

I read the instructions, don't really understand what half of them mean and im getting myself really worked up over this. please can someone help me. :-+

Where are you getting stuck?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 15, 2014, 09:14:52 pm
I give up trying to hack this thing! can anyone please help me or better still, do this for me? I have money waiting! e4 running 2.3.0

I read the instructions, don't really understand what half of them mean and im getting myself really worked up over this. please can someone help me. :-+

Where are you getting stuck?

im am totally a noob. I have no idea what any of the instructions mean, click this? do that? copy this? run that? and then all the different files to find and unzip? I mean geez lol, I don't even know what unzip means! I have no hope of doing this alone. no hope at all. in answer to your question, I got flir tools installed and that's my limit with how to do anything else. sorry for been so dim in this but I really have not a clue what to do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on December 15, 2014, 10:23:44 pm
im am totally a noob. I have no idea what any of the instructions mean, click this? do that? copy this? run that? and then all the different files to find and unzip? I mean geez lol, I don't even know what unzip means! I have no hope of doing this alone. no hope at all. in answer to your question, I got flir tools installed and that's my limit with how to do anything else. sorry for been so dim in this but I really have not a clue what to do.

Gh05tms, I strongly advise that you enjoy your e4 as-is, since the hack can be tricky even for those with extensive knowledge of computers, networking, scripting, electronics and more. If you make a mistake in any of the many steps, you may be left with a completely non-functional ("bricked") e4. While I've heard that Flir has been forgiving of such things when returned for warranty repair, I don't know how far their generosity extends.

FWIW, "unzip" means to extract compressed files from an archive, typically an archive in the zip file format (http://en.wikipedia.org/wiki/Zip_%28file_format%29).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: reifill on December 15, 2014, 10:25:32 pm
Hi, the whole day I tried to upgrade my E4 to resolution E8...now I am becoming crazy... |O
:
:
Thanks i.a. reifill

Hey reifill,

sometimes just scanning through a few of the previous pages of a bulletin board provides valuable information ;)
You may want to check my contribution here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg563620/#msg563620 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg563620/#msg563620)

I would say as long as your camera is a 1.0 or 1.1 hardware, you can hack it using the "old" method, i.e. like it's described in the links published on the first page of this thread for the original 1.19.8 firmware. The menu hack wouldn't work, though. But there's a good chance that you can "downgrade" your camera back to 1.19.8

First thing to do is to download Marphy's TIConfig tool: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg421535/#msg421535 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg421535/#msg421535) and check if the cfg files are encrypted or not. If they are readable clear-text, the standard hack for 1.19.8 firmware will work. If you'ld post a list of your camera's configuration, I can tell you if my "downgrade package" will work for you.

But from all I've learned with my cam, an updated 1.19 is still closer to the old configuration than to a factory native 2.3.

Cheers,
Thomas

Hi Thomas, camera is a 1.0, the conf.cfg is clear text, I changed the resolution in the textfile already to 360/230 and I used from e4hack3c CRC01.exe and copied the cfg-File to folder FlashFS. Now I will try CRC03.exe from ftool...
regards reifill

...it does not work...the camara behaves like nothing has changed...

Hi Folks, Ive got it!  :-DD The mistake I made, was: I only renamed the original file to conf.cfg.bak and copied additionally the "new" config.cfg into the same FS Folder, that does not work. After erasing the bakupfile everything is fine, with exception of the centerspot, but this will be an issue for tomorrow....(finaly I used the CRC01 Version).

Once again, in my case, Ive only exchanged the clear text conf.cfg in folder FlashFS, using my serial# and CRC01.exe and E8.cfg from e4hack3c, and watching youtube how to use CRC03/01.exe

Good night Reifill, happy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 16, 2014, 12:12:22 am
GH05TMS, I am going to have to agree tsmith35 here, and say either enjoy it is, or find someone nearby that is somewhat more computer literate / experienced.  I have been doing various types of mostly non-programming computer work for over 25 years (computer assembly, tech support, computer admin, etc.) and had to spend 3 or 4 hours going over old messages in this thread to understand which revision of the E4 I had and follow the instructions, and even then I was crossing my fingers and being hopeful of a positive outcome.  If you want to try to find someone locally with the needed skills, you might check with some computer science or electrical engineering majors at nearby colleges or people that do IT work (other than first line tech support) for any mid size company.  It should be easy to find a qualified computer science student type that can do this, and most will work for cheap ($20, plus a pizza and 2 liter of cola), just be aware that if they brick it you are likely out your money.  The chance of bricking is the reason I would never try to do the hack for someone else, just is not worth the risk, even if the risk is low, too many people will say it is fine with them to take the risk, etc. then when it gets bricked they get mad.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 16, 2014, 03:05:38 am
My advice would be to return the E4 due to the problems (which my 2.3 did as well as sometimes had snow when the voltage got low) and is the reason I returned it. Then order one from Zoro and pray you get lucky and get a 1.22 like I did. Then the hack is very simple. Also zoro has 25% off right now so you get it for $750.....

Worst case you get a 2.3 and you have extra money to hire a computer geek to hack it for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: saycomp on December 16, 2014, 07:03:40 am
Hi!

I'm new on this forum.
Many thanks for yours really great work!!!  :-+

I hack my E4 / 2.3 without any problem.
I did it all under Win 7 x64 without any problem. I noticed, that service "FLIR Systems Camera Monitor" must running. But sometimes it's not active and it can cause problems with connecting to the camera via network.

If you need manual temp scale it is possible that way:
download this - 2.3.0_Menu_4.zip (http://wikisend.com/download/325660/2.3.0_Menu_4.zip)
and add in - preset_centerspot.rsc
line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures

I tried upgrade my E4 / 2.3 to unit with manual temperature scale, but something is not clear for my.
I upgraded menu to version 4. But when I edit "preset_centerspot.rsc" there is no ".ui.userSettings.hideGraphics" line...

it look like:

#
# Generated at 2012-12-18 14:21:06
# ID
#
.image entry
.image.sysimgInstances entry
.image.sysimgInstances.main entry
.image.sysimgInstances.main.measureFuncs entry
.image.sysimgInstances.main.measureFuncs.activeGlobal bool false
.image.sysimgInstances.main.measureFuncs.spot entry
.image.sysimgInstances.main.measureFuncs.spot.1 index
.image.sysimgInstances.main.measureFuncs.spot.1.active bool true
.image.sysimgInstances.main.measureFuncs.spot.1.x int32 160
.image.sysimgInstances.main.measureFuncs.spot.1.y int32 120
.image.sysimgInstances.main.measureFuncs.spot.1.parMask int32 128
# CRC32 1928c3b8


Greetings!
simon
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 16, 2014, 12:20:48 pm
thanks for replys all. I guess I will just have to either live with a stock e4 and missout on what you guys have or get someone to do this hack for me as you suggested seen as I have no clue what to do or where to start. Anyone from near Barnsley in the UK who can do this hack for me? E4 running 2.3.0. cash waiting. :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 16, 2014, 01:25:26 pm

Yes you can unlock the full resolution on E4's with 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum (zipped downloads somewhere in this thread)
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.

I had a few issues with this process applying it to an E4 with 1.2L which had been upgraded to 2.3.13, but I was able to get things to work

1, The current release of flirtools did not install the windows RNDIS driver on my windows 7 computer, after a bit of digging I was able to download a copy of the RNDIS driver dated 2013 from the Flir support site.

2, I was able to set RNDIS using the hidden USB menu, and did not have to use  "Set_RNDIS_temporary.fif" or "Set_RNDIS_permanent.fif" I suspect this is due to the 1.2L original firmware (I bought this E4 used, certification date was in april 2014)
I'm wondering how to use the hidden USB menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 16, 2014, 01:40:20 pm
If you need manual temp scale it is possible that way:
download this - 2.3.0_Menu_4.zip (http://wikisend.com/download/325660/2.3.0_Menu_4.zip)
and add in - preset_centerspot.rsc
line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures
Hi janekivi?would you please give me the details for using 2.3_menu_4.zip step by step for 2.3 menu hacking?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 16, 2014, 02:26:16 pm
In the older firmware (and apparently in mine) there is a functional hidden USB menu you can go to from the onscreen menu.  Select settings, Device Settings, Camera Information, then when you are on the menu item for Model (on mine this reads E4 1.2L), hold down on the right direction pad for about 10-15 seconds it will take you into a set of hidden menus, one is USB mode, others are export information, Version Information, and Latest Calibration date.  If you hold down on the button too long it will take you into the Version information menu, if that happens just go up a directory level to see USB mode.  In some later firmware versions it appears that this menu is still available, but that the selector button simply does not change any of the settings.  One of these settings allows the use of RNDIS mode without having to do the Set_RNDIS hack
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 16, 2014, 02:43:31 pm
So does anyone on here do the hack . Once I know this I can buy one. Also can the e6,be hacked
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 16, 2014, 03:27:13 pm
2.3.0 Menu hack:
if you download 2.3.0_Menu_4.zip (http://)
and install it with FLIRInstallNet to camera, then you have new preset_centerspot.rsc
add there line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: saycomp on December 16, 2014, 05:35:46 pm
Hi!

2.3.0 Menu hack:
if you download 2.3.0_Menu_4.zip (http://wikisend.com/download/245670/2.3.0_Menu_4.zip)
and install it with FLIRInstallNet to camera, then you have new preset_centerspot.rsc
add there line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures

Something goes wrong. I tried many times. At the end I calculated right CRC32 number, but this option is still inaccessible...

file looks like:

#
# Generated at 2012-12-18 14:21:06
# ID
#
.image entry
.image.sysimgInstances entry
.image.sysimgInstances.main entry
.image.sysimgInstances.main.measureFuncs entry
.image.sysimgInstances.main.measureFuncs.activeGlobal bool false
.image.sysimgInstances.main.measureFuncs.spot entry
.image.sysimgInstances.main.measureFuncs.spot.1 index
.image.sysimgInstances.main.measureFuncs.spot.1.active bool true
.image.sysimgInstances.main.measureFuncs.spot.1.x int32 160
.image.sysimgInstances.main.measureFuncs.spot.1.y int32 120
.image.sysimgInstances.main.measureFuncs.spot.1.parMask int32 128
.ui.userSettings.scaleInteractive bool true
.ui.userSettings.hideGraphics bool false
# CRC32 1ad41b30

greetings!

simon
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 16, 2014, 06:23:08 pm
Hello all just took a chance and bought the e 4 it has the latest software . Who can hack this for resolution I don't mind paying someone help I am ok based Leeds are but would travel to get it done
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 16, 2014, 06:46:06 pm
Hello thank you all for feedback . Does anyone do the hack on here ? As for asking flir about the hack yes I sure did as I was interested to hear his explanation of price difference due to a file or software differences . Hat off to him he was direct and upfront. If anyone does the hack let .me know . I'd travel or over pc maybe for a fee
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 16, 2014, 07:02:22 pm
Ok... manual scale...
First thing - if you have resolution hack - we don't need any CRC anywhere, hacker wrote about his work
(all using my menu and there all files without it)
If rsc file is right as you have, process is this:
set [SCALE] to [LOCK] [OK]
set [MEASUREMENT] to [NO MEASUREMENTS] [OK]
set [MEASUREMENTS] to [CENTER SPOT] [OK]
and now scale temperature numbers is in gray boxes and they are adjustable with center button up down right left
after playing change [SCALE] to [AUTO] [OK]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: merlin1234 on December 16, 2014, 08:23:59 pm
just received an e4 from Zoro ordered last week.
Flat battery.......
YES, its 1.22
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 16, 2014, 08:47:03 pm
Then order one from Zoro and pray you get lucky and get a 1.22 like I did. Then the hack is very simple. Also zoro has 25% off right now so you get it for $750.....

I chickened out and didn't order one last week. Seeing that others are still getting the older version, I'm feeling some regret. The 25% off code that was posted here was only good last Thursday and Friday (11/12 Dec). Is there some other 25% off deal that's still available?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on December 16, 2014, 09:26:31 pm
I chickened out and didn't order one last week. Seeing that others are still getting the older version, I'm feeling some regret. The 25% off code that was posted here was only good last Thursday and Friday (11/12 Dec). Is there some other 25% off deal that's still available?

There is a Zoro.com 25% off coupon code that still works, but it expires TONIGHT. The discount code is TRAIN -- I just tested it with an e4 in the cart and it works. Again, it expires tonight, so it appears that you lucked out.

Direct link to the e4 on Zoro: http://www.zoro.com/i/G5281245/ (http://www.zoro.com/i/G5281245/)

The price before shipping and taxes is $746.25 (the coupon saves you $248.75).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 16, 2014, 09:48:28 pm
thanks for replys all. I guess I will just have to either live with a stock e4 and missout on what you guys have or get someone to do this hack for me as you suggested seen as I have no clue what to do or where to start. Anyone from near Barnsley in the UK who can do this hack for me? E4 running 2.3.0. cash waiting. :-+
... Did you find someone to hack it if so I am local to you and would like mine doing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 16, 2014, 11:04:39 pm
2.3.0_Menu_4.zip (http://wikisend.com/download/245670/2.3.0_Menu_4.zip)
and install it with FLIRInstallNet to camera, then you have new preset_centerspot.rsc
Something goes wrong. I tried many times. At the end I calculated right CRC32 number, but this option is still inaccessible...

file looks like:
...
.ui.userSettings.scaleInteractive bool true
.ui.userSettings.hideGraphics bool false

This does not look like the preset from janekivi. Extract and Install the preset from janekivi's link. You have two lines missing before the last two.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 16, 2014, 11:25:39 pm
Ok... manual scale...
First thing - if you have resolution hack - we don't need any CRC anywhere, hacker wrote about his work
(all using my menu and there all files without it)
If rsc file is right as you have, process is this:
set [SCALE] to [LOCK] [OK]
set [MEASUREMENT] to [NO MEASUREMENTS] [OK]
set [MEASUREMENTS] to [CENTER SPOT] [OK]
and now scale temperature numbers is in gray boxes and they are adjustable with center button up down right left
after playing change [SCALE] to [AUTO] [OK]

Hello Janekivi,
You forget to say that the camera.cmd-file also had to be changed with two add commands.
For the centerspot-file and the no measurement-file. Otherwise this files are not added to the camera.
But by the way, your work is very usefull and I want to thank you for your efforts.
I appreciate it very much. Keep up the good work.
The menu's and colors are great and the manual scale is working very fine.
Thank you again.
Fred
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Rasz on December 17, 2014, 08:22:31 am
As for asking flir about the hack yes I sure did as I was interested to hear his explanation of price difference due to a file or software differences . Hat off to him he was direct and upfront.

Wow, you spoke to mister Flir himself?

for resolution I don't mind paying

Oh thats easy one mate, you sell E4, and buy E8.

Did you find someone to hack it if so I am local to you and would like mine doing

How do you spell entrapment in Leeds?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 17, 2014, 08:42:16 am
Behave ya,self I'm genuine . I need it hacked so come on please help . Money waiting would be worth ya while . Check me out I'm genuine guy www.roofingisus.co.UK (http://www.roofingisus.co.UK) . I just want this hacked please cash waiting
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: saycomp on December 17, 2014, 08:57:55 am
Hi!

You forget to say that the camera.cmd-file also had to be changed with two add commands.
For the centerspot-file and the no measurement-file. Otherwise this files are not added to the camera.

I unpacked *.fif file and now all is clear.  :D
Manual temperature scale is working now! Thank you for really great job!!!

Janekivi, I want ask you, why you don't add these two lines directly to the "preset_centerspot.rsc" file inside "2.3.0_Menu_Upgrade.fif"?
In *.cmd two lines are missing too.
It's technical reason or this option is only for advanced users?   ;)

Thank you again!

simon
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GH05TMS on December 17, 2014, 12:40:33 pm
yes cash waiting here too if anyone can hack mine for me. e4 running 2.3.0

I live in Barnsley, south Yorkshire, UK. I have no issue with travelling to you and cash is in my hand waiting! if anyone can help that would be brilliant.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 17, 2014, 01:46:29 pm
In the older firmware (and apparently in mine) there is a functional hidden USB menu you can go to from the onscreen menu.  Select settings, Device Settings, Camera Information, then when you are on the menu item for Model (on mine this reads E4 1.2L), hold down on the right direction pad for about 10-15 seconds it will take you into a set of hidden menus, one is USB mode, others are export information, Version Information, and Latest Calibration date.  If you hold down on the button too long it will take you into the Version information menu, if that happens just go up a directory level to see USB mode.  In some later firmware versions it appears that this menu is still available, but that the selector button simply does not change any of the settings.  One of these settings allows the use of RNDIS mode without having to do the Set_RNDIS hack
cool Thx a lot!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 17, 2014, 02:01:04 pm
There is a Zoro.com 25% off coupon code that still works, but it expires TONIGHT. The discount code is TRAIN -- I just tested it with an e4 in the cart and it works. Again, it expires tonight, so it appears that you lucked out.

Indeed. It worked for me. Thanks so much! Now, we'll see if I'm another lucky old-stock lottery winner... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 17, 2014, 02:02:55 pm
Makes 2 of us.... Mine is still pending shipment. Thanks again @tsmith35
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 17, 2014, 02:05:08 pm
2.3.0 Menu hack:
if you download 2.3.0_Menu_4.zip (http://wikisend.com/download/245670/2.3.0_Menu_4.zip)
and install it with FLIRInstallNet to camera, then you have new preset_centerspot.rsc
add there line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false
then you can set scale to "lock" and after changing "measurement" from "no" to "center spot"
up down left right moving temperatures
thanks! I also can not quit understand that part "add there line - .ui.userSettings.scaleInteractive bool true
after or before - .ui.userSettings.hideGraphics bool false"
Dose that means I need download the “preset_centerspot.rsc” in RNDIS mode and modify it by adding “- .ui.userSettings.scaleInteractive bool true” then upload it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 17, 2014, 04:42:29 pm
Need someone's help! There is always a notice of connection timeout  in using FLIRInstallNet after hacking……what‘s wrong?I wang to use menu hacking :-// |O someone……help?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 17, 2014, 04:46:15 pm
Yes, download from camera and edit and put back.
I had presets in camera.cmd but some dwarfs stole it from here, in restore they still in place...

2.3.0_Menu_5.zip (http://)

And that CRC - when we have stock E4 2.3.0, then we have with reso crack hacked dll and then we don't
need no CRC or signature. For example you can erase from conf.cfc data from ID nr at 1928 to file end
markings 19BF and have shorter conf. All still working. When I played with older software files I hacked same
crc procedure in dll and then was too no need for crc in plain text conf files. Then I used some files from 1.18.7.
With them I didn't got menu, only was simple to test other parameters. That crypted conf is tricky to edit...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 17, 2014, 04:50:26 pm
Need someone's help! There is always a notice of connection timeout  in using FLIRInstallNet after hacking……what‘s wrong?I wang to use menu hacking :-// |O someone……help?

I can too use FLIRInstallNet only one time with one file then I must close it and open again
and then I can run other fif. (Win 7 32bit). Not big problem for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2014, 05:53:29 pm
Need someone's help! There is always a notice of connection timeout  in using FLIRInstallNet after hacking……what‘s wrong?I wang to use menu hacking :-// |O someone……help?

You can do everything using a ftp program. User: flir , pass: 3vlig
Unpack the fif file and see what commands are sent in the cmd file. Then just manipulate the files in ftp mode. This is assuming you set the camera to RNDIS mode first - either from the camera hidden menu (for pre- 2.3.0 native firmware) or via flirinstallnet. I have set mine to permanent RNDIS so i can reboot and go straight to ftp again, until i settle the configuration. The downside of this is Cannot import images into Flir Tools (but still can download/view them via ftp as generic  jpg files)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 17, 2014, 07:06:47 pm
So just to double check with my resolution hacked E4 using the python script on an original E4 1.2L upgraded to 2.3.13 

I should be able to download Janekivi's latest Menu5 zip file
unzip it, then unzip the Menu Upgrade fif file and then manually copy the files to their respective subdirectories using ftp in RNDIS mode, making appropriate ftp backups of the files being changed?

No need to use flirtools or FlirInstallNET?

Being originally 1.2L I also don't need to worry about generating a new CRC value?


Thanks, just looking for clarification to minimize the chance to bricking
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 17, 2014, 07:49:45 pm
So just to double check with my resolution hacked E4 using the python script on an original E4 1.2L upgraded to 2.3.13 

I should be able to download Janekivi's latest Menu5 zip file
unzip it, then unzip the Menu Upgrade fif file and then manually copy the files to their respective subdirectories using ftp in RNDIS mode, making appropriate ftp backups of the files being changed?

No need to use flirtools or FlirInstallNET?

Being originally 1.2L I also don't need to worry about generating a new CRC value?

Thanks, just looking for clarification to minimize the chance to bricking
We don't know what this update is. I have stock E4 1.2L 2.3.0 and zip name is 2.3.0 ...
Try them with ftp but make before backup for all files what you can read with ftp. I made fif
because for others this is simplier to use and working when camera not booting. But then you can
use user: anonymous psw: NcFTP@ and restore original files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 17, 2014, 08:09:14 pm
Janekivi, can you give me the time stamp dates for the original files that get switched out by your Menu 5  for 2.3.0 so I can see if any of those have changed with 2.3.13

thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2014, 08:17:22 pm
unzip it, then unzip the Menu Upgrade fif file and then manually copy the files to their respective subdirectories using ftp in RNDIS mode, making appropriate ftp backups of the files being changed?

Backup the files by transferring them to your PC. People previously reported problems if you just rename the file and leave it on the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 17, 2014, 09:03:39 pm
Janekivi, can you give me the time stamp dates for the original files that get switched out by your Menu 5  for 2.3.0 so I can see if any of those have changed with 2.3.13
All my files in camera have one 2014 midsummer time +/1 minute diference...
You must compare your files and look what time they all have and what is newer, what updated lately.
Compare contents and there may be always something new what disabling to toutch some files.
I think as long as you do not toutch windows you can use ftp to restore.
My menu is working in my 2.3.0 E4 and made for it. This is your playground, give a try
or not : )
And yes, with multiple files may be problems.
There is not much free disk space in camera and it loads files if they are renamed, for example conf.cfc
He is loading files what in that place where he must load something whatever the name is. And menu is
defined by default design_ui*.xml facet_*.rcc - that is another point what you must notice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 17, 2014, 09:16:13 pm
I will likely not have enough free time to try it until the weekend, but I will post back and let everyone know how it goes with 2.3.13
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: newguy on December 18, 2014, 04:08:22 am
I recently purchased an E4 , 1.2L 2.3.0 firmware and applied the v.03 resolution hack.  The resolution seemed to have been complete but I lost the MSX capability and the image is actually worse (albeit with less noise) than the original.  Any ideas on how to get the MSX function back?  I have the backup files and have already restored the unit to original and the MSX returns and then I did the hack again and same result, no MSX.  Any ideas??

I also notice that the center spot function was deleted as well.

Will the menu hacks restore these?

Thanks in advance!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 18, 2014, 04:34:52 am
Was that the right package? I used v0.4 from message #5633
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: newguy on December 18, 2014, 12:26:42 pm
Was that the right package? I used v0.4 from message #5633
I recently purchased an E4 , 1.2L 2.3.0 firmware and applied the v.03 resolution hack.  The resolution seemed to have been complete but I lost the MSX capability and the image is actually worse (albeit with less noise) than the original.  Any ideas on how to get the MSX function back?  I have the backup files and have already restored the unit to original and the MSX returns and then I did the hack again and same result, no MSX.  Any ideas??

I also notice that the center spot function was deleted as well.

Will the menu hacks restore these?

Thanks in advance!

Update:  The menu hacks did not work at all.  In fact all the menues disappeared as well as the temperature scale, only the thermal image remained.  I used the menu restore .fif and got the menues back then overwrote the config and common.dll.dll files with the original backup files so now the camera is back to the stock configuration.  I then tried the v.04.zip hack and again gained the 320 x 240 resolution with reduced noise but lost the MSX feature.  Thanks for the idea.  Any other words of advice?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 18, 2014, 01:45:56 pm
In menu if yoy select "No Measure" the screen is clear.
About conf. Camera loads any file from directory where
conf must be and this version looking for crypted one. He discards plain text files. If this is not plain text, it trying
to deccrypt it. If there is not readable # ID 63636363CRLF row it disables reso, noise, MSX, spot. Conf.cfc part
from 191A to 1927 in E4 2.3.0 (6608) file must stay unchanged. If you delete conf, reso is 80x60 and noise gone.
Not figured out yet where this MSX stuff is. Something like this it is what I tested. But you have resolution...
I think something is wrong what hack doing with your version conf.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 18, 2014, 02:26:39 pm
@newguy
Did you remove the backup copies of the files from the camera.
May be you could capture the output of the python script to a file and post here.
After you run the python script login with ftp and check the files indeed were replaced.
The other suggestion is check back messages from janekivi with attachments, extract the facet file and try replacing your facet.rcc with that one (make a backup copy of the original). Unless janekivi can post just the facet file for you.

I have 2.3.0 1.2L and the usual procedure worked for it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: newguy on December 18, 2014, 03:55:06 pm
Thank you! Thank you! Thank You! Bud and Janekivi.  You were right.  I reset the camera using the reset function to factory defaults then ran the v.03 hack again and this time it took!  I then ran the 2.3.0 menu upgrade and that was successful as well.  Now the camera is operating as expected with the enhanced features.

Happy Day!

Again, thanks to all who have worked on this thread / project.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 18, 2014, 05:03:46 pm
Hello I am considering buying an e4 spoke with flir and they claimed they have stopped the hack ...
Thank you! ...
Now the camera is operating as expected with the enhanced features.
So they not stopped the hack yet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 18, 2014, 05:53:49 pm
I might have screwed something up ;D
I have succesfully set up camera to RNDIS mode, but by the 'Set_RNDIS_permament.fif' file. That was before I found out a way to enter a hidden menu through settings, directly on camera (well, that's because I'm an idiot  :palm: ). Now I've lost connection though USB, thus I cannot upload the 'Remove_RNDIS_Permament.fif' via FLIRInstallNet.exe
How do I have to upload the 'Remove_RNDIS_Permament.fif' without USB connection?  :o
Another thing is that while in RNDIS mode and the camera is on, I don't see any extra IP adresses listed. What am I doing wrong? :)

EDIT:
I've managed to establish ftp connection on XP, but still, please tell me how to send the fif file disabling the RNDIS? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 18, 2014, 06:11:27 pm
If you do not see a new IP address on your computer then it is not talking to ghe camera. Did you install Flir device Drivers ? Not FLIR Tools, the drivers is a separate package
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 18, 2014, 07:37:07 pm
Everything worked fine after moving from Win7 to XP  ;D
You guys are the best. Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JerryTN on December 18, 2014, 09:18:29 pm
Well, thought I would try my luck and did the 25% coupon at Zoro for the Flir E4 hoping to get a 1.22.  UPS ground and it arrived in only two days. I'm sorry to say its the 2.3.0 version.  It was shipped out of their South Carolina warehouse so guess it all depends on which warehouse it gets shipped from as to which software version one gets.  I already have the E4b that was also at SW version 2.3.0, so guess will put the E4b on the auction block and keep the E4 since its temp readings is not limited. So for anyone trying to get the 1.22 version, you may need to find out which warehouse they are being shipped from and try to request that warehouse when ordering if possible.  Maybe the ones getting 1.22 can comment on which warehouse theirs came from as that may help others in getting the older version.  Hopefully soon SW version 2.3 will be able to have all the same features as the 1.22 but then I understand there may be some hardware differences that may limit it.  Just thought I would pass this information along for anyone trying to get the 1.22  Oh the battery was also flat dead as others have mention which was a fooler when first trying to check the version.  Oh Well, anyone want a good deal on an E4b only a few weeks old.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: quattro on December 18, 2014, 09:31:13 pm
I got a 1.22 E4 using the Zoro 25% off coupon. A friend of mine ordered one from Zoro a day later using the 25% off coupon, he received a 2.3 E4. Both shipped from Hodgkins, IL; mine shipped on Saturday, his on Monday.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 18, 2014, 09:51:00 pm
I've downloaded janekivi's 2.3.0_Menu_5.zip file and installed it on my E4. Thanks for the extra palettes  ;) I wonder if there is a possibility to unlock the zoom option. Janekivi said that there is a telnet command 'zoom - rls .caps.config.image.zoom'. This will add zoom option in menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Galaxyrise on December 18, 2014, 11:24:45 pm
3rd Photo: No Lens approx. 6" away from Arduino Mega
4th Photo: Lens attached approx. 3" away from Arduino Mega

I just went through a similar process and thought I'd post some comparison photos for the next person trying to choose a lens.  I used the stl that Georges80 posted (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg332269/#msg332269) on Shapeways (it complained about thin walls, but it printed fine.)  I bought both a 2" (http://www.ebay.com/itm/261541517475?_trksid=p2059210.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AIT) and a 4" (http://www.ebay.com/itm/261541512155?_trksid=p2059210.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AIT) from bingo929 (http://stores.ebay.com/bingo929/).  The lens is a bit loose in the holder, so after making my choice, I used Elmer's to glue the lens in place.

The subject for these is a BK 9130 power supply:
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125236;image)

You can see a number of warm areas.  For the purposes of these comparisons, I'm going to be looking at that bright spot in the upper left, and the regulators in the center.  With the macro lenses, I also captured an area with some SMD parts on it, however the parts didn't have much temperature variation, so you'll just have to get an idea what's going on from the pads.

It was really hard for me to pull the trigger without making things blurry on the macro shots, so these samples are often blurrier than the best you can get.  In all of the macro pictures, I was able to get some part of the image in decent focus.  The point of these samples is to show off the kind of feature size you can make out with the different focal lengths.

LensRegulatorsDiodeSMD
default(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125240;image)(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125238;image)
4"(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125242;image)(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125244;image)(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125246;image)
2"(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125248;image)(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125250;image)(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=125252;image)

Sorry I had the camera rotated for the regulators with the default lens.   It should be rotated ccw to match the others, but it still easily shows how blurry it is.

The camera wasn't able to resolve the high temperature diode without a lens: not only was it a blurry blob, but it was showing as 33C instead of 50C.  The regulators were big enough that they measured as roughly 50C both with and without the lens (although the sample here has the 3 lenses looking at different parts of the regulator, oops.)  As I said above, the SMD parts themselves are too uniform a temperature to really make out.  You can see some... I think they were 0805 parts that are just barely warm. 

I went with the 4".  0603 is still discernable, and the depth of field on the 4" focal length was enough to have the entire TO220 parts basically in focus (where the 2" lens could only focus on the top or the bottom.)  There were also areas of the board I couldn't get into focus with the 2" lens because taller parts got in the way.

The holder + lens cost about $25, and makes my $1k camera so much more useful for PCBs!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 19, 2014, 01:01:22 am
Well, that was a surprise.

I ordered my E4 around 22:00 CST Monday night.

All day Tuesday, the order showed as Pending.

Wednesday afternoon, I got email that it had been "fulfilled", with a tracking number. When I went to bed last night, UPS still wasn't displaying any tracking information.

This morning, UPS said that it had been origin-scanned in Greensboro -- a city in North Carolina, not South Carolina where Zoro claims to have a warehouse -- it arrived in Chapel Hill, midway between here and Greensboro, in the middle of the night, and it was out for delivery on the truck.

Around dinnertime, I got email that it had been left on our front porch. We were here at the time; I guess this close to Christmas, the UPS folks don't even have time to ring the doorbell. Looked out the front door, and there it was.

Calibration certificate was dated May 13, 2014; a good sign...

...software version: 1.22.  ;D  :clap:

I'm going to try to be disciplined enough to do some good before-and-after images, but given the amount of knowledge that's already on this thread, I'm hoping I won't run into any surprises. I probably won't attempt the hack until this weekend, but we'll see.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 19, 2014, 03:44:53 am
I'm off to my usual software-installation start. For somebody who actually got a Ph.D. in computer science, I have a real talent for screwing up installs.

The instructions that I've found have me install RNDIS drivers, set the camera to RNDIS mode, plug it into the computer, and connect with Filezilla. The RNDIS drivers installed without difficulty, and when I plug the camera in, it shows up as a FLIR Camera Device with RNDIS drivers -- but it doesn't respond to the 192.168.0.2 address that everyone specifies. I found a slot under the Device Properties where I could assign an IP address for the device, but that didn't seem to make any difference. This is on a borrowed Win 8 machine; mine's a Mac, and while I found an RNDIS driver for OS X, I thought it would be quicker to use the canned PC tools.

I'll trawl through Google and the depths of this thread, and see if I can diagnose "nobody home at 192.168.0.2". But not tonight. Sigh...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JerryTN on December 19, 2014, 03:45:19 am
Congrats on getting SW version 1.22. Mine was ordered on Tuesday evening. Almost sounds like it just luck of the draw on which E4 one gets.  Mine had a calibration date of June 2014.  It would be great if you could request which version to be shipped, ha ha.  The box mine came in was torn apart and at first thought it might had damage the case and unit, but appears only the box got damage. Only thing is did the box get damage from a major drop to the floor and there may be an issue lurking within my unit to only show up at a later date. Maybe I should contact Zoro to let them know in case they would like to swap it out for another unit, maybe an older one with version 1.22....ha ha.  Oh well, guess I'll wait a little while before doing any upgrade to the unit to make sure nothing is broken from the damage seen on the box.  Who knows maybe soon 2.03 will have all the nice features of 1.22.  One can hope.... Will be interesting to see what some of the others receive in that recently ordered one.  I believe its just pot luck on which version software one gets as their inventory may be mixed between the different versions.   Thanks to ones that are providing the much needed support for the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on December 19, 2014, 05:55:19 am
I'm off to my usual software-installation start. For somebody who actually got a Ph.D. in computer science, I have a real talent for screwing up installs.

The instructions that I've found have me install RNDIS drivers, set the camera to RNDIS mode, plug it into the computer, and connect with Filezilla. The RNDIS drivers installed without difficulty, and when I plug the camera in, it shows up as a FLIR Camera Device with RNDIS drivers -- but it doesn't respond to the 192.168.0.2 address that everyone specifies. I found a slot under the Device Properties where I could assign an IP address for the device, but that didn't seem to make any difference. This is on a borrowed Win 8 machine; mine's a Mac, and while I found an RNDIS driver for OS X, I thought it would be quicker to use the canned PC tools.

I'll trawl through Google and the depths of this thread, and see if I can diagnose "nobody home at 192.168.0.2". But not tonight. Sigh...

I don't think anyone has gotten it working on Windows 8.  Windows XP is recommended.  You could probably do it with a LiveXP DVD.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 19, 2014, 07:39:45 am
I used 64 bit Windows 7 Professional with no problem
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 19, 2014, 08:00:20 am
This morning I had a strange activity on my camera. When I unplugged it from USB and turned the camera on I could see a dim contours of a battery symbol that is showing when the camera is charging. As I said, it was quite dim, but still visible. Nothing changed after several hard reboots. I changed the screen brightness from high to low, and then high again and the contours are almost gone. Is it possible to somehow disable this battery symbol?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on December 19, 2014, 08:35:35 am
I'll trawl through Google and the depths of this thread, and see if I can diagnose "nobody home at 192.168.0.2". But not tonight. Sigh...
Quick note on that: the Flir DHCP implementation doesn't play nicely at times. You can work around that by setting the IP on the PC side to a static IP.

See for example: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg340074/#msg340074)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 19, 2014, 11:46:33 am
I've downloaded janekivi's 2.3.0_Menu_5.zip file and installed it on my E4. Thanks for the extra palettes  ;) I wonder if there is a possibility to unlock the zoom option. Janekivi said that there is a telnet command 'zoom - rls .caps.config.image.zoom'. This will add zoom option in menu?
For zoom we need at least two things: in conf.cfc must be
.caps.config.image.zoom.maxFactor double (number other than 1) - this is easy, I know pattern and can edit it
.caps.config.image.zoom.enabled bool (false must be turned to _true) - not so easy
Hackers can edit conf but they is not cooperative and answer no letters but I can't stop and try this my own way-
with notepad and calculator.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 19, 2014, 12:05:32 pm
So what do we have left of the missing E4 to E8 features in 2.3, Zoom, Area Metering and PIP?  Anything else?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 19, 2014, 12:11:05 pm
Abot this E4 hacking - this is not for others to make money. Did you even read this
E4HACK-2 v0.4

            **** DISCLAIMER ****

- You do this on your own risk.
- By using this tool, you agree that you will
  remove the hack before selling the device.
- TO REPEAT: UNDER NO CIRCUMSTANCES you are allowed
  to sell a device that has this hack installed.
but what we see here- guy bought 4 camera and can now leave one for himself.
I make here no money when I spend hours and play with it to find more holes to add some
features to it. And this stuff is too for only educational purposes for using commands and knowledge
to get from machine what you want.
(my english is not very good but hope you got the point)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on December 19, 2014, 01:14:13 pm
And long may you continue - the vast majority appreciate your (and every one else's) efforts.  :-+




Abot this E4 hacking - this is not for others to make money. Did you even read this
E4HACK-2 v0.4

            **** DISCLAIMER ****

- You do this on your own risk.
- By using this tool, you agree that you will
  remove the hack before selling the device.
- TO REPEAT: UNDER NO CIRCUMSTANCES you are allowed
  to sell a device that has this hack installed.
but what we see here- guy bought 4 camera and can now leave one for himself.
I make here no money when I spend hours and play with it to find more holes to add some
features to it. And this stuff is too for only educational purposes for using commands and knowledge
to get from machine what you want.
(my english is not very good but hope you got the point)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 19, 2014, 01:23:50 pm
Janekivi, I am not sure exactly who your last message was targeted to, I have not seen any recent messages by people talking about trying to make money off of upgrading and selling these modded E4's.  At most I have seen a few people without the skills to do the hacks themselves offering to pay others to perform the hacks.  If your reply was regarding my message about E8 features that have not yet been unlocked, that question was just meant as a way to determining how close the 2.3 hack is to the older full unlock hack, not any goal to make profit from applying this hack and reselling.  Now personally I feel the demand to remove the hack before selling is a bit excessive, but I have no plans to sell my  E4 at this time, however in 4 or 5 years once better / cheaper equipment comes along that may be a different matter.

p.s. I for one appreciate the effort you are making, and hope my feedback regarding 2.3.13 helps in the process
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 19, 2014, 01:49:04 pm
All you need is ticonfig.exe and the config files. Go back to page 1 post 1 and follow the links for 1.22. A few pages after the initial instructions for 1.22 you will find the instructions for the hack with ticonfig (Very simple to do the hack with it)


I'm off to my usual software-installation start. For somebody who actually got a Ph.D. in computer science, I have a real talent for screwing up installs.

The instructions that I've found have me install RNDIS drivers, set the camera to RNDIS mode, plug it into the computer, and connect with Filezilla. The RNDIS drivers installed without difficulty, and when I plug the camera in, it shows up as a FLIR Camera Device with RNDIS drivers -- but it doesn't respond to the 192.168.0.2 address that everyone specifies. I found a slot under the Device Properties where I could assign an IP address for the device, but that didn't seem to make any difference. This is on a borrowed Win 8 machine; mine's a Mac, and while I found an RNDIS driver for OS X, I thought it would be quicker to use the canned PC tools.

I'll trawl through Google and the depths of this thread, and see if I can diagnose "nobody home at 192.168.0.2". But not tonight. Sigh...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 19, 2014, 02:15:30 pm
All you need is ticonfig.exe and the config files. Go back to page 1 post 1 and follow the links for 1.22. A few pages after the initial instructions for 1.22 you will find the instructions for the hack with ticonfig (Very simple to do the hack with it)

I actually grabbed ticonfig.exe, and when I tried to run it, Norton yanked it out from under me. I don't much like Norton, but I was working on my wife's production machine, and I didn't want to override anything without giving her time to go over it first.

I was thinking about trying this on my work PC, which is running Win 7, but I don't want to abuse the local-admin privileges they gave me. (Especially since, as I said, I have a talent for breaking things.) My wife's PC can boot into 7; I'll probably do that this weekend and try again.

I'd really like to be able to do this from my Mac; I found what appears to be a RNDIS driver that might work. That would take some more homework, though. I'll confess that last night I was looking for the quick, easy answer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 19, 2014, 02:56:00 pm
This morning I had a strange activity on my camera. When I unplugged it from USB and turned the camera on I could see a dim contours of a battery symbol that is showing when the camera is charging. As I said, it was quite dim, but still visible. Nothing changed after several hard reboots. I changed the screen brightness from high to low, and then high again and the contours are almost gone. Is it possible to somehow disable this battery symbol?

This was covered early on in the thread already. I managed to minimize this issue by replacing the black/white image with a black/grey image but simply leaving the unit on for a while seems to resolve the temp burn in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 19, 2014, 03:16:24 pm
This morning I had a strange activity on my camera. When I unplugged it from USB and turned the camera on I could see a dim contours of a battery symbol that is showing when the camera is charging. As I said, it was quite dim, but still visible. Nothing changed after several hard reboots. I changed the screen brightness from high to low, and then high again and the contours are almost gone. Is it possible to somehow disable this battery symbol?

This was covered early on in the thread already. I managed to minimize this issue by replacing the black/white image with a black/grey image but simply leaving the unit on for a while seems to resolve the temp burn in.

Exactly. After some time the contours are gone. Strange thing to happen though :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djeans on December 19, 2014, 04:09:51 pm
HI All,

can someone please point me to the right direction? I have a brandnew flir e4 with 2.3.0.
- How can I backup the E4
- Where to start to apply the res and menu hack?

I tried to find the information in this thread, but as it is now 414 pages long it is a bit hard and I'd be happy if someone can point me to the right starting point.

Thanks
DJ
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 19, 2014, 04:45:08 pm
"I have not seen any recent messages by people talking..." - good point.
Why all other messages? All jump in and "I want!! I need!!" This is not personal.
No one can't feel touched by this. I don't point anyone with finger here.
There is only case  if this person thinking "I must have hacked E4, what you waiting!!!".
I only want to inspire all of - let's say - newbies like I am to search,
study and learn something. To try stuff, find something and give something.
Let's get smarter, let's think more.
Peace

Edit: message I started writing earlier landed not so good point...
        Page 1 message 1 is good point to start hacking, this is like bookmark to key points in thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 19, 2014, 05:01:36 pm
HI All,

can someone please point me to the right direction? I have a brandnew flir e4 with 2.3.0.
- How can I backup the E4
- Where to start to apply the res and menu hack?

I tried to find the information in this thread, but as it is now 414 pages long it is a bit hard and I'd be happy if someone can point me to the right starting point.

Thanks
DJ

Unfortunately this is an evolving situation, and all the information is not neatly presented in one place yet, I was in the same place you are a couple of weeks ago, and had to spend a couple of hours digging back over the old messages to piece everything together to apply the hack.  Here are a few starting points for you, go back to page 1, the first message has been updated with some links to stuff you need to know, also look at the  most recent step by step instructions, I think I posted my quoted reply to them about 5 or 6 pages back.  The one thing that gave me the most trouble was finding the link to the v.04.zip hack, which I think I finally found somewhere around page 360-380.  Note I have only done the resolution hack, not Janekivi's menu hack yet, which is quickly evolving, so you will want to check recent pages for the latest version before applying it, I think version 5 of the menu hack is current as of today.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 19, 2014, 05:13:55 pm
Hello Janekivi, I appreciate your work in this posts very much. You have done a lot of good work already for us. :clap:
I have a question. I studied the flir updat pack 2.3.0.

Did you already try to change the menu with '<ToolBar name="scale_scale_manual"/>' in the file 'toolbar-config.xml' to make a change button on the camera scaleMenu in stead of toggling from unlock tot lock in scaleMenu for manual setting of temperature? Or can't the menu not be changed so easily as I say or think?
In the flir updatepack 2.3.0 are more ToolBar names for the file toolbar-config.xml. Can they easily put into the camera or is this dangerous for bricking the camera? I think you did maybe already try this?
Fred
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 19, 2014, 08:26:05 pm
Hi Janekivi,

I too like many others really appreciate yoru work and I haven't even got my E4 yet, :(

It's on it's way but will cross the Atlantic first etc etc etc , so won't be till the new year.

One thing which I woudl certianly appreciate knowing is how to make sure I don't BRICK the system and if I do, is it really a throw away the canera problem or do we mean brick the system UNTIL you return it to it's original state?

I enjoy hacking but don't want to lose my camera in the process.

Thanks

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djeans on December 19, 2014, 09:33:22 pm
so, few hours later...

Thanks all.

res enhancement and color palettes ok now ( on 2.3.0 1.2L E4 :) )

Is there anything else what can be improved?
Zoom, PIP, manual set temp range ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 19, 2014, 09:43:49 pm
All of those are still work in progress, with luck someone will figure out how to unlock them, it may be tomorrow, it may be next month, or it may be never.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hackster84 on December 19, 2014, 11:34:15 pm
Hi there,

I have just acquired a Flir E5... Assuming I'm new to the world of applying hacks to firmware, what are the chances that applying the V0.4 hack to the E5 firmware would result in a bricked device?  I don't want to brick a $1500 piece of equipment - that would be difficult to explain to my boss...

Thanks for your advice!

-Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hackster84 on December 19, 2014, 11:35:58 pm
I forgot to mention - it does have the V 2.3.0 firmware...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djeans on December 20, 2014, 11:55:32 am
final question:

I have now "res enhancement" and "color palettes" on 2.3.0 1.2L E4 .

What are the ways to revert?
For Menu I used 2.3.0_Menu_5.zip. There is a 2.3.0_Menu_Restore.fif also include. I assume this restores the menu.
For res hack I used "python apply.py apply 192.168.1.2". It has created some backup files. How do I revert the res hack now? Do I need to copy over the backuped files anyhow?

Thanks in advance.
DJ
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElSteverino on December 21, 2014, 04:39:24 am
Abot this E4 hacking - this is not for others to make money. Did you even read this
E4HACK-2 v0.4

I make here no money when I spend hours and play with it to find more holes to add some
features to it.

I for one want to say thank you for the work you have done. You have really helped unlock these latest versions of the Ex series and are helping them reach their full potential. I admit it can be frustrating seeing something for sale that has been made more useful in part due to your efforts. I've been there. I look at life a bit differently than most, I see situations like those as, not someone profiting off the work of others or trying to make a fast buck, but rather providing a service for those who don't have the knowledge to do it themselves or don't want to take the risk. I certainly don't think anyone is trying to claim your work as their own.

I'll admit, before I picked an E4 up on black friday, I looked at the offerings on eBay. An unlocked 2.3 E4, was going for about $1200. With eBay, PayPal and postage fees the seller was probably just breaking even. Was it wrong, probably. Should he kick something back to you and the community, yes. But IMHO, it is also wrong to "cripple" hardware through software just to earn a bigger profit, but I digress.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 21, 2014, 06:49:15 am
The main point is to prevent FLIR from cracking down on sites likes this. Hacking your own E4 for your own good is one thing, but doing this for money is something else.

It's interesting that one one side people claim that FLIR really profits from the hack (implying that they would make a larger profit if they'd just sell the E4 unlocked), but on the other hand accusing FLIR to cripple hardware with software to earn bigger profits.

In the end we don't know, and it's not our decision to make. I don't like crippled hardware. However it's FLIR's right to produce a product with whatever specs they like, whatever they seem fits the market. If you don't like it, well, then feel free to hack it. But I don't like this complaining about their "shady business tactics".

[EDIT: At least _I_ don't care if people make money with work I did. If I would, I wouldn't release stuff for free. So that's not the point. The point is solely to keep the hack "non-commercial". And while I understand a little bit how FLIR wants to keep the "more advanced" measurement features locked for the higher-priced products - even if re-implementing these algorithms wouldn't take more than a few hours for even a semi-skilled programmer -, and how they want to only build one sensor hardware, the most controversial feature I think is the noise generator. They spent extra development work on making the image look worse and making measurements less accurate. I think that's a different level than locking out software features.]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 21, 2014, 01:56:27 pm
Several times in this thread I have seen comments on its size and the difficult in seeing the wood for the trees. I have made such a comment myself and recommended a separate 'newbies help' thread which was created. This effectively separated the development information from the newbie "how do I do it" questions and lowered the 'signal to noise ratio'.

The first Post in this thread provides useful links for new arrivals.

This thread has effectively become a monster due to its own popularity and peoples desire for it to grow into the biggest thread on EEVBlog ever !. It is evidence of interest in the topic and the great work done by those who developed the upgrade paths. As such it needs to be treated a bit like a book that you really want to read. Start at the beginning and read the whole history of the E4 upgrade development. It is an interesting story on its own and an education to users and OEM's  :-+

The 'payback' of the resolution upgrade is worth a users time. If that is not the case, the user should consider buying either an E8 or one of the Exx models with extra features. This might sound harsh but we all have day jobs and our lives are finite so going round upgrading E4's isn't really something I personally would wish to do and it does invite an issue with FLIR that they might wish to pursue as they did with 'via ebay' upgrade services.

The really hard truth is that if a user is not proficient at upgrading an E4 themselves by following the guidance in this thread, they should consider whether the E4 is the right tool for them. If they can identify a friendly tech who will do the upgrade for free then they have an option. Buying an E4 and THEN asking someone else for an upgrade service via a public forum is unlikely to elicit many, if any, responses. Such users could try starting a new E4 upgrade thread and operate a co-operative 'self help' service to each other. If you want the higher performance you need to put the effort in and not ask others to take risks by upgrading for money. There are likely good Samaritans who will do the work for free if they can afford the time. I support the Lowe HF receiver series in the UK for free. That is my hobby and my choice.

PLEASE PLEASE PLEASE do not clog up this thread with 'I am a newbie and need to be 'spoon fed' the process for upgrading an E4'. Put the effort in, read the thread fully and ask questions from a position of knowlwdge. It is far more likely to elicit a helpful response if you have demonstrated that you made the effort to read this large thread (Book  ;D )

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 21, 2014, 07:28:09 pm
About this E4 hacking - this is not for others to make money. Did you even read this
E4HACK-2 v0.4

            **** DISCLAIMER ****

- You do this on your own risk.
- By using this tool, you agree that you will
  remove the hack before selling the device.
- TO REPEAT: UNDER NO CIRCUMSTANCES you are allowed
  to sell a device that has this hack installed.
but what we see here- guy bought 4 camera and can now leave one for himself.
I make here no money when I spend hours and play with it to find more holes to add some
features to it. And this stuff is too for only educational purposes for using commands and knowledge
to get from machine what you want.
(my english is not very good but hope you got the point)

On page 392 on 18 novembre 2014 someone said:

"I also found that image quality vary from camera to camera on the E4 model. Out of the 4 I bought, two have "nice" images, but the third one I converted has a much sharper image compared to the first two (sold).  I noticed that only as I converted the third one after the second one was gone.
I haven't converted the fourth one, but I will soon. I intend to keep it for myself as a back-up, considering that the guarantee is, for all practical purpose, inexistant.
In the end, I will have gotten myself a camera (and a backup, shall I decide to do business with it) for free."

I think, this is what Janekivi means and he is fully right. And don't forget that in Europe, where Janekivi lives, we have no Zoro-shops with 30% discount on for instance Black Friday, so we had to pay the full price in Euro's (about Euro 1200, this is $ 1.470 !). This is more than 2 times the price that several newbees in this forum did pay. I know of course they can't do anything about this. It is our own decision to buy the camera. But.....it is a little bit frustrating that these guys want to change their cameras within five or better yet two steps without taking the trouble of reading some or more pages in this thread. The only goal/purpose seems to change their camera as soon as possible into a camera with the possibilities of an E8. I think these are the points.
 
I by myself are a newbee too.  :-[ But I first did read all 400 and more pages of this thread before I did the upgrade all by myself. I invest my time (for about 5 evenings) in it. I found all the needed files, copied them to my computer and did the upgrade. And of course it was a little bit scarry, but there are enough pages with a good instruction manual to do the changes, so be brave and give it a try after reading enough. I am not an IT-man and I could do it.  :phew:
I'm not a native English speaker too so forgive me my language errors.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 21, 2014, 07:30:54 pm
I've downloaded janekivi's 2.3.0_Menu_5.zip file and installed it on my E4. Thanks for the extra palettes  ;) I wonder if there is a possibility to unlock the zoom option. Janekivi said that there is a telnet command 'zoom - rls .caps.config.image.zoom'. This will add zoom option in menu?
For zoom we need at least two things: in conf.cfc must be
.caps.config.image.zoom.maxFactor double (number other than 1) - this is easy, I know pattern and can edit it
.caps.config.image.zoom.enabled bool (false must be turned to _true) - not so easy
Hackers can edit conf but they is not cooperative and answer no letters but I can't stop and try this my own way-
with notepad and calculator.

Unfortunately I don't understand the last sentence. Could you please rephrase it?
janekivi, at the moment seems like you're the only one who is actually doing something towards enabling the zoom option. If you describe what exactly is the problem with the zoom option, then maybe we all could help you with this process and give you some advice on how to overcome some problems. I'm sure that this thread is visited by people who could actually have some good ideas :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 21, 2014, 08:46:43 pm
Several times in this thread I have seen comments on its size and the difficult in seeing the wood for the trees. I have made such a comment myself and recommended a separate 'newbies help' thread which was created. This effectively separated the development information from the newbie "how do I do it" questions and lowered the 'signal to noise ratio'.

The first Post in this thread provides useful links for new arrivals.

This thread has effectively become a monster due to its own popularity and peoples desire for it to grow into the biggest thread on EEVBlog ever !. It is evidence of interest in the topic and the great work done by those who developed the upgrade paths. As such it needs to be treated a bit like a book that you really want to read. Start at the beginning and read the whole history of the E4 upgrade development. It is an interesting story on its own and an education to users and OEM's  :-+

The 'payback' of the resolution upgrade is worth a users time. If that is not the case, the user should consider buying either an E8 or one of the Exx models with extra features. This might sound harsh but we all have day jobs and our lives are finite so going round upgrading E4's isn't really something I personally would wish to do and it does invite an issue with FLIR that they might wish to pursue as they did with 'via ebay' upgrade services.

The really hard truth is that if a user is not proficient at upgrading an E4 themselves by following the guidance in this thread, they should consider whether the E4 is the right tool for them. If they can identify a friendly tech who will do the upgrade for free then they have an option. Buying an E4 and THEN asking someone else for an upgrade service via a public forum is unlikely to elicit many, if any, responses. Such users could try starting a new E4 upgrade thread and operate a co-operative 'self help' service to each other. If you want the higher performance you need to put the effort in and not ask others to take risks by upgrading for money. There are likely good Samaritans who will do the work for free if they can afford the time. I support the Lowe HF receiver series in the UK for free. That is my hobby and my choice.

PLEASE PLEASE PLEASE do not clog up this thread with 'I am a newbie and need to be 'spoon fed' the process for upgrading an E4'. Put the effort in, read the thread fully and ask questions from a position of knowlwdge. It is far more likely to elicit a helpful response if you have demonstrated that you made the effort to read this large thread (Book  ;D )

Aurora
The one thing I really enjoy about your postings is your honesty and down to earth views.
If only the newbies would READ them!

What I can see from the newbies postings is a sort of panic.... I bought this things, NOW I need the baby steps given to me.  (problem is, the steps ARE in this thread, sometimes multiple times... all that needs to be done is to read and use the search to find them)!

Just reading through the thread is a very good look at the history of the Ex series and the knowledge that has been learned by digging into the firmware, and what people have discovered.... maybe it should be a required class course in school!!!!   :-DD :-DD

One thing that does bother me is sometimes the lack of spelling checks and grammar.

I know not everyone speaks English as their primary language, and that they may have problems with grammar and spelling, but some posters need to spend a little more time and re-read their posts and correct their errors... it does make it hard to read.

Thank you for your "words of wisdom" and common sense!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pomonabill221 on December 21, 2014, 08:58:46 pm
I have noticed in a lot of posts that some say... "on page 278, you will find....".
This is usually a reference to information that a previous poster asks about.

Only problem with this reference is, what if a reader has his forum preferences set to display 50 posts per page?!?!
I have this set so I am not constantly going to the next page... just more convenient for me, and possibly others as well.

SO the latest page, latest post is not on page 4xx, but 145.  NOW the reference to a particular page doesn't mean anything and is not accurate.

It would be ALOT more accurate to actually mention the post number(s) instead, as these don't change.

Just a thought to ponder.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 21, 2014, 09:17:48 pm
Ok. What I like to say is - let's talk about electronics here. What forum this is? Where, how cheap,
after week I get my camera and then I need help for first steps... And no word about money!
This is hobby and with your stuff you can hack how much you want and no one lost money
because we do not buy more expensive camera anyway. We only buy them more and play
what games we like.

With my paper and calculator it took only 2 days and I can too enable zoom now.
This wasn't that hard because of clues what mr tmbinc left and because I can read.
What was first? Writing or reading? Here I see writing is first : )
I am not hacker, thats why this took so long. I repair usually for free all kind of things and can't
watch broken stuff. Flir make camera and broke this before selling it with lower price and name.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on December 21, 2014, 09:57:52 pm
Installed menu .5 hack and modified the .rsc file., Followed the instructions and everything works good here including the manual range setting with e4 2.3.0 1.2L. Strangely in .4 I couldn't get the FLIR logo to disappear, but after installing .5 its gone and appears to stay gone this time. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 21, 2014, 10:04:38 pm
Ok, just to join in on this latest elitist anti newbie conversation, I just recently started participating in this thread after buying a used E4, however I have been following it off and on for over 6 months.  In a way I think I can see both sides of this, as a new E4 owner looking to upgrade its performance, I would like to find reasonably clear instructions on how to do this, and to be honest there are not any, a few people have tried to compile a rough step by step, but give no reference into how to do this with steps like install the v0.4.zip hack....  The problem is as a new owner one has to then go spend hours locating this zip file, and this assumes they have the skills to know that to do with it when it is found.  The other problem is these so called step by step instructions get get buried dozens of pages back from the current page, and get out of date.  The end result is you have to be at least part way into the "in crowd" to perform the hack, you get there by pouring over hundreds of pages of messages, going back and forth within the thread, filtering out a lot of junk, and out dated information, and once you get done you find that the necessary information could have easily been compiled into a one page post that included links not just obscure references to a handful of files.  If such a reference, perhaps in the form of a wiki, or locked thread existed then maybe we could do away with so many newbie where do I start messages.  I also don't blame the newbies for asking, I posted a similar sort of question a few weeks ago, but only after reading hundreds of messages in this thread, after all these people have spent hundreds of dollars on an E4 and don't want to turn it into a brick due to lack of information..

Now can we please stop arguing over what dues people need to pay to participate in this thread, give the newbies a reasonable and up to date real step by step guide that is linked off of message number 1, and get back to exploring the workings of the E4.  I had planned to explore the dates on the files in my 1.2L updated to 2.3.13 E4 this afternoon, but instead I find myself spending my time reading over all this junk, and writing the above message.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on December 21, 2014, 10:28:08 pm
I have noticed in a lot of posts that some say... "on page 278, you will find....".

Only problem with this reference is, what if a reader has his forum preferences set to display 50 posts per page?!?!

+1
Page numbers are meaningless. And even if it was consistent,  finding one post on a page of 50 is hardly trivial
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 21, 2014, 10:56:22 pm
@Isaac-1

Nicely volunteered   ;D

I look forward to seeing your concise and informative new thread detailing how to upgrade the various versions of E4. I started and supported the "E4 Useful information thread" for a similar reason but I am not permitted to detail hacking techniques due to employer restrictions.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

I believe I have been quite generous with my time in that thread and helpful to many readers.

How many people hack their E4 after getting help here? I have to wonder why a concise and detailed upgrade thread has yet to be started by at least one of them to help others. Hmmmm ?

There is no elitist element in my comments, only common sense and good manners  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 22, 2014, 05:47:05 am
cool  ;)  menu hack done ! I just found that connection timeout can be fixed by disable and enable flir device……100% success rate. No need for reboot e4 or PC  :clap: :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 22, 2014, 05:53:33 am
Ok. What I like to say is - let's talk about electronics here. What forum this is? Where, how cheap,
after week I get my camera and then I need help for first steps... And no word about money!
This is hobby and with your stuff you can hack how much you want and no one lost money
because we do not buy more expensive camera anyway. We only buy them more and play
what games we like.

With my paper and calculator it took only 2 days and I can too enable zoom now.
This wasn't that hard because of clues what mr tmbinc left and because I can read.
What was first? Writing or reading? Here I see writing is first : )
I am not hacker, thats why this took so long. I repair usually for free all kind of things and can't
watch broken stuff. Flir make camera and broke this before selling it with lower price and name.

God! you can enable 2.3 zoom now?   ;) Is it possible to release the file or method now? THX!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 22, 2014, 07:08:04 am
Now can we please ... give the newbies a reasonable and up to date real step by step guide that is linked off of message number 1,

Please do. Also publish information in the newspapers, run an ad on television, post on facebook and youtube, then watch half a dozen newbies joining a week saying "I have no clue where to start give me step by step instructions "
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Matthieu on December 22, 2014, 11:35:39 am
Hello

Yesterday i will test for upgrade my flir E4 2.3 to E8 but when i used set_permantly-RNDIS.fif (find in e4hack3c in this tread) i can't connect me to my E4 with 192.168.0.2 and i can't remove RNDIS because he is not connect ....
I think i forget to make something but i don't know what.

I need your help
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 22, 2014, 11:54:12 am
Hello

Yesterday i will test for upgrade my flir E4 2.3 to E8 but when i used set_permantly-RNDIS.fif (find in e4hack3c in this tread) i can't connect me to my E4 with 192.168.0.2 and i can't remove RNDIS because he is not connect ....
I think i forget to make something but i don't know what.

I need your help
Thanks

Did you install drivers from support.flir.com? In your device manager Flir should be listed as a network adapter while it is in RNDIS mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Matthieu on December 22, 2014, 12:39:17 pm
Hello

Yesterday i will test for upgrade my flir E4 2.3 to E8 but when i used set_permantly-RNDIS.fif (find in e4hack3c in this tread) i can't connect me to my E4 with 192.168.0.2 and i can't remove RNDIS because he is not connect ....
I think i forget to make something but i don't know what.

I need your help
Thanks

Did you install drivers from support.flir.com? In your device manager Flir should be listed as a network adapter while it is in RNDIS mode.

Yes i have installed flir tools and flir device driver and when i go to FlirinstallNet I can see my Cam with an adresse but i can't connect in
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 22, 2014, 02:19:36 pm
Which version of Windows are you using?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Matthieu on December 22, 2014, 03:19:30 pm
I use W8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 22, 2014, 03:53:14 pm
Got the upgrade done thanks although I'm not sure why apart from one person
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 22, 2014, 03:57:34 pm
Hello

Yesterday i will test for upgrade my flir E4 2.3 to E8 but when i used set_permantly-RNDIS.fif (find in e4hack3c in this tread) i can't connect me to my E4 with 192.168.0.2 and i can't remove RNDIS because he is not connect ....
I think i forget to make something but i don't know what.

I need your help
Thanks
All you need is to disable and then enable the "flir usb video" in device manager , then timeout notice will be fixed
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 22, 2014, 04:30:09 pm
Did you already try to change the menu with '<ToolBar name="scale_scale_manual"/>' in the file 'toolbar-config.xml' to make a change button on the camera scaleMenu in stead of toggling from unlock tot lock in scaleMenu for manual setting of temperature? Or can't the menu not be changed so easily as I say or think?
In the flir updatepack 2.3.0 are more ToolBar names for the file toolbar-config.xml. Can they easily put into the camera or is this dangerous for bricking the camera? I think you did maybe already try this?
Fre
I have bit different files in my camera, there are more menu stuff and more commands.
Then I can see what becomes visible when I change or hack something. I release only stuff what working
correctly and there no others test lines in files. That _manual" have no affect so far but I add first zoom
what is actually digital zoom and in 8x mode show you 40x30 image. Before I played with reso I saw
this is its minimum thermal resolution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 22, 2014, 05:16:18 pm
I use W8

Several people have reported similar problems using Windows 8, if possible try again using Windows 7
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Matthieu on December 22, 2014, 05:25:20 pm

All you need is to disable and then enable the "flir usb video" in device manager , then timeout notice will be fixed

Where can i make that? can you explain me?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 22, 2014, 08:45:19 pm
I need help. I don't know yet anything about files I am using. These are from first 2.3.0Menu_Upgrade.zip
They are smaller than inside ADDMENU-BETA3. Who made them or who can make them? I can't use
ADDMENU-BETA3, in 2.3.0 camera picture is black. But something I can't do here. That manual temp
scale is fighting back. And there is black holes in conf.cfc files. What might be after
.caps.config.image.zoom.maxFactor double 8 to the # IDXXXXXX? Somehow PIP too is not cooperative
with me... Or something is blocked in UI/conf.cfc whose contents I have no clue... yet
All other stuff might be done in near future.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on December 22, 2014, 09:57:02 pm
Did you already try to change the menu with '<ToolBar name="scale_scale_manual"/>' in the file 'toolbar-config.xml' to make a change button on the camera scaleMenu in stead of toggling from unlock tot lock in scaleMenu for manual setting of temperature? Or can't the menu not be changed so easily as I say or think?
In the flir updatepack 2.3.0 are more ToolBar names for the file toolbar-config.xml. Can they easily put into the camera or is this dangerous for bricking the camera? I think you did maybe already try this?
Fre
I have bit different files in my camera, there are more menu stuff and more commands.
Then I can see what becomes visible when I change or hack something. I release only stuff what working
correctly and there no others test lines in files. That _manual" have no affect so far but I add first zoom
what is actually digital zoom and in 8x mode show you 40x30 image. Before I played with reso I saw
this is its minimum thermal resolution.

Are you just guessing at what commands might work and what lines to add or do you have something to compare against like a dump of an actual e8 file and trying to copy them over and see if they work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on December 22, 2014, 11:09:02 pm
I need help. I don't know yet anything about files I am using. These are from first 2.3.0Menu_Upgrade.zip
They are smaller than inside ADDMENU-BETA3. Who made them or who can make them? I can't use
ADDMENU-BETA3, in 2.3.0 camera picture is black. But something I can't do here. That manual temp
scale is fighting back. And there is black holes in conf.cfc files. What might be after
.caps.config.image.zoom.maxFactor double 8 to the # IDXXXXXX? Somehow PIP too is not cooperative
with me... Or something is blocked in UI/conf.cfc whose contents I have no clue... yet
All other stuff might be done in near future.

I believe Taucher was the guy who did the magic on the first menu patch. Haven't seen too many posts from him
as of late, hope he is still out there!! Nice work BTW Janekivi!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Justanotherguy on December 23, 2014, 12:25:47 am
 :box:Recent Zoro purchase arrived. 2.3.0  :(.

Not a big deal. Performed the upgrade on a win xp machine.  Picture much better, Flir Tools reports full resolution. Thank you to everyone who contributed to that, and thank you to Flir for making this camera. Oh, I don't want to open debate about Flir downgrading units to make a range, but that noise generator is shocking. I can imagine Flir salesmen telling big lies to prospective customers "oh, look how much better picture is on E8". I don't feel so bad about upgrading my E4 resolution.

I also uploaded 2.3.0_Menu_5.  It took a while to copy over, and I now note the "Special Editon" in place of the 2.3.0 revision on the boot up splash screen. The extra colour palettes are great. I am pleased.

Question: How do I revert camera to full original out of box condition? I assume I run 2.3.0 Fimware update as released by Flir. It would be good to be able to fully factory reset camera if I ever need to.


I tried running the 2.3.0_Menu_Restore (included with the Menu_5 zip), but it doesn't make any difference. I also note the camera fails to connect. I am only using RNDIS_temporary.

I don't want to break anything, so I have stopped fiddling with it for now. (Waiting for my lens to come from China for some close up PCB work and general electronics - what I want to use the camera for.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 23, 2014, 06:43:48 am
Are you just guessing at what commands might work and what lines to add or do you have something to compare against like a dump of an actual e8 file and trying to copy them over and see if they work?
Not exactly, I have stuff from ADDMENU-BETA3 but conf.cfc contents I guessing and calculating by notepad and calculator. There I lost my track after zoom lines... I can't change anything before I knew what I changing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Northdynamic on December 23, 2014, 01:42:08 pm
:box:Recent Zoro purchase arrived. 2.3.0  :(.

Not a big deal. Performed the upgrade on a win xp machine.  Picture much better, Flir Tools reports full resolution. Thank you to everyone who contributed to that, and thank you to Flir for making this camera. Oh, I don't want to open debate about Flir downgrading units to make a range, but that noise generator is shocking. I can imagine Flir salesmen telling big lies to prospective customers "oh, look how much better picture is on E8". I don't feel so bad about upgrading my E4 resolution.

I also uploaded 2.3.0_Menu_5.  It took a while to copy over, and I now note the "Special Editon" in place of the 2.3.0 revision on the boot up splash screen. The extra colour palettes are great. I am pleased.

Question: How do I revert camera to full original out of box condition? I assume I run 2.3.0 Fimware update as released by Flir. It would be good to be able to fully factory reset camera if I ever need to.


I tried running the 2.3.0_Menu_Restore (included with the Menu_5 zip), but it doesn't make any difference. I also note the camera fails to connect. I am only using RNDIS_temporary.

I don't want to break anything, so I have stopped fiddling with it for now. (Waiting for my lens to come from China for some close up PCB work and general electronics - what I want to use the camera for.)

See Reply #5783 Here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg544085/#msg544085 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg544085/#msg544085)

It's a good idea "for all 2.3 owners, I think" to grab the firmware before it is updated so you can revert to the original 2.3.0 firmware incase the camera fails to boot. I've already had to do this once.

Make sure you are not in RNDIS mode and apply the firmware with FLIRInstallNet.exe

It takes a while so do not unplug or interrupt the process until completed. Also make sure you have the drivers installed, they can be found on page 1 of this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Justanotherguy on December 23, 2014, 02:50:02 pm

It's a good idea "for all 2.3 owners, I think" to grab the firmware before it is updated so you can revert to the original 2.3.0 firmware incase the camera fails to boot. I've already had to do this once.

Make sure you are not in RNDIS mode and apply the firmware with FLIRInstallNet.exe

It takes a while so do not unplug or interrupt the process until completed. Also make sure you have the drivers installed, they can be found on page 1 of this thread.



 :-[   I did not think to take copy of firmware.  My only option I think is to do a "software upate" ( if it lets me) in Flir tools. I am not planning on reverting anytime soon, but it would be good to know.


My lens from china turned up, and also my lens holder I found on thingverse  http://www.thingiverse.com/thing:407201 (http://www.thingiverse.com/thing:407201)  and had printed locally.  I also did a comparison with our existing Fluke Ti10. This is not scientific test or attempt to make comparison, just the best we had before and the reality of what we can do now with the Flir E4.  Enjoy:

Before and after. This is picture of laptop power supply. You can see before picture was soon after turning on laptop.  After upgrade, power supply was much hotter. Note, this is a cheap poor quality power supply purchased for like $10 on ebay (delivered from china!) for my old laptop. It is very dangerous as it gets very hot >80degrees C. I also had to add extra insulation inside. Beware buying "cheap". I never leave adaptor unattended.
(http://www.imagesup.net/?di=814193451832)

Noise generator makes me very angry.  :rant:

Upgrade makes me happy.  :box: 


Upgraded Flir compared to Fluke ( remember not fair comparison as stated above, I dont want to get into discussion. )
(http://www.imagesup.net/?di=114193451849)

3D high Res ABS printed holder (100% fill). Found on Thingverse. I searched for Flir E4.  Nice solution, but not sure it is the best ( we like it though ).
(http://www.imagesup.net/?di=8141934518310)

Lens in Camera.
(http://www.imagesup.net/?di=714193451834)

First samle image. 20mm dia, 50mm focus as recommended by mikeselectricstuff. Lens purchased on eBay.
0805 resistor in top left running at about 30 degrees C.  I think we will get better with more practice, and maybe better lens placement, but this is now useful tool for us.
(http://www.imagesup.net/?di=6141934518412)


Note: Image meta data removed/replaced/edited and images grabbed with screen tool. Do not trust image dimensions or metadata. (not paranoid, just careful)




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 23, 2014, 03:42:25 pm
I am missing some thing from restore but anyway this and so firmware update do not delete added stuff fom camera.
My restore was generally only for situation when something goes wrong and camera does not booting. Then you
can revert some things without ftp by FLIRInstallNet.exe
If you need restore with cleanup I make something for next but now I like to make to you zoom for xmas. Only
some testers needed before.
And don't forget we all have something else to do for work and something else is important too, this is only hobby here.
That was my thought before...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nkw on December 23, 2014, 06:26:09 pm
Just to add another data point, I ordered from Zoro when the second 25% coupon code was posted. Shipped from Spartanburg, SC and arrived yesterday. Inside was an early Christmas present of 1.22 software with an April 2014 calibration date. I was eventually able to configure the camera with TiConfig (thanks marphy!). The hardest part was finding a working XP installation to get Flir's own drivers working. I was not able to to get them working in either Windows 8 or 10, they would install and recognize the camera then I would get the "ThermaCAM connecting to 192.xxxx" type message, but it would not connect to the camera, nor was the IP address ping-able. Finally got the drivers working in a Windows XP Pro virtual machine running under vmware.

While waiting for the cam to arrive I watched mikeselectricstuff's youtube teardown videos all the way through -- both were really really great.

As for Flir -- I am definitely in the category that would not have purchased one of these had the hack^h^h^h^h customer installed upgrade not been available. I can't blame them for using the same hardware and differentiating the models with software limits on resolution, but the noise generator? Really? That seems a bit much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 23, 2014, 07:38:01 pm
Please do not afraid me or E4 with 2.3.0 2.1L
I only said world is round thing and you can't make profit with free tool.
You got something, you must give something. And read before writing.
But I am nobody here, just newbie and hobbyist like most of us.
And 2.3.0 firmware from factory - this is more hack'able than previous
models as you can see here. My first hack's based on new features of
this software. And if you think logically - all other features are there.
Most of them I seen already after I switched from calculator to pc.
Notepad I continue to use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 23, 2014, 07:58:02 pm
Just to add another data point, I ordered from Zoro when the second 25% coupon code was posted. Shipped from Spartanburg, SC and arrived yesterday. Inside was an early Christmas present of 1.22 software with an April 2014 calibration date. I was eventually able to configure the camera with TiConfig (thanks marphy!). The hardest part was finding a working XP installation to get Flir's own drivers working. I was not able to to get them working in either Windows 8 or 10, they would install and recognize the camera then I would get the "ThermaCAM connecting to 192.xxxx" type message, but it would not connect to the camera, nor was the IP address ping-able. Finally got the drivers working in a Windows XP Pro virtual machine running under vmware.

This compares closely to my experience. Same order timeframe, mine shipped from Greensboro NC, same 1.22 software.

I set out to do the FTP-based update from a Win 8 machine, and couldn't connect to the camera. This may have been because I didn't disable all my other network interfaces. I tried again on a Win7 machine, this time with TiConfig. After a couple of false starts, once I installed the RNDIS driver and disabled my other network adapters, the upgrade went smoothly. Uploaded the E8 config, uploaded the menu package, unplugged the camera, removed and replaced battery, powered camera back up. Even while it was initializing, the flat-field image on the display was obviously far cleaner than before, thanks to the added-noise reduction.

So, the steps that worked:

1) Download and install TiConfig (http://bit.ly/1hycWlB (http://bit.ly/1hycWlB)).
2) Download and install RNDIS drivers, using the link helpfully offered from within TiConfig.
3) Disable both wireless and wired network adapters in Windows.
4) Run TiConfig again.
5) Plug in camera.
6) Follow instructions from TiConfig's page (http://marcowuen.wordpress.com/2014/04/08/ticonfig-thermal-imager-configuration-tool/ (http://marcowuen.wordpress.com/2014/04/08/ticonfig-thermal-imager-configuration-tool/)).

Some may need to install .Net 3.5 as a separate step; I already had a more recent .Net version, so I didn't need to do this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nkw on December 23, 2014, 08:24:16 pm
I set out to do the FTP-based update from a Win 8 machine, and couldn't connect to the camera. This may have been because I didn't disable all my other network interfaces. I tried again on a Win7 machine, this time with TiConfig.
For what it is worth, even with disabling all other network interfaces in both Windows 8 (on two machines) and 10, I was not able to connect in any way to the camera IP. This software would configure the RDNIS Flir network interface with an IP, and then say it was trying to connect to the camera (at the interface IP + 1), but then fail. The IP address the software indicated for the camera was not ping-able either. I tried setting (and not setting) the "Network Address" in the driver settings, but it made no difference.

While trying to figure out the issue, I ran across http://flir.custhelp.com/app/answers/detail/a_id/987/~/usb-connection-problem-with-flir-ex-series-cameras (http://flir.custhelp.com/app/answers/detail/a_id/987/~/usb-connection-problem-with-flir-ex-series-cameras), which discusses a USB connection issue between Windows and the Flir EX series. However the note seems to state it is an issue that effects firmware version 2.1.0 and Windows 7 and XP, but not Windows 8 (even though the note has a specific install procedure for Windows 8 ). Also reading the PDF it seemed to be pretty goofy in that these "flirusb.inf" files had to be installed on a per USB port basis and appeared to deal with the Video/Imaging device side of things. I didn't try installing these files in Windows 8, and decided to just use XP for the install.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JerryTN on December 23, 2014, 10:15:37 pm
Well it does appear that's it's just a matter of chance as to which software version one will receive when ordering the E4. It may be 1.22 or 2.3 for the moment. Thanks to all the support being provided as it has allow about every feature available to all versions of software so as not to matter as much on which version one gets.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaeliv on December 24, 2014, 02:37:19 am
How did you guys find out / what's the best way to be notified about Zoro promotions, the 25%-30% off ones ? Do they send out e-mails if you're subscribed ?
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JerryTN on December 24, 2014, 05:02:42 am
Promotional emails and by doing a Google search for Zoro coupons or promotional codes.  Usually they will show up that way if one is available.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 10:21:05 am
Some encouraging words for all of you.
What was on first day here and what I know now... I got camera and... same day, first thing was black
screen. But first words came with no tears... I seen this stuff first time and that RC4 crypt too. I can do
only simple things and all other stuff I break before to simple things. You can laugh there and I laugh
too, all that time I studied with that crypt analysis - there wasn't any crypt left any more. Breaking
that 160 bit key take all of earth computers millions of years. But what key - I can edit it with notepad
like all other stuff in camera after few bits changed in dll. Honestly, I found only open window to sneak
in with new menu files. All other stuff was here before, I done what I do best: copy-paste : )))
with notepad of course : )))
Find your own best ability and harness it where is possible to do something... useful.
Money is only paper with numbers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 24, 2014, 12:40:48 pm
Congratulations Janekivi.

Amazing what have achieved....

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 24, 2014, 02:06:46 pm
janekivi, I love the screen photo with that last message :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on December 24, 2014, 02:32:44 pm
janekivi,

although i dont have a FLIR, i must say: congratulations! You are doing great work, and i'm sure that many people appreciate it.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 03:22:12 pm
Is there something going on with the PM system or you don't answer to them?
I already sent dozen of them but all I see is silence. Sometimes 1 o2 I got.

Edit: I was 100% sure, first answer is "what we are missing here... "
: ))))))))))) But I missing feedback and other PM answers here.
I had wish to save a little attachment here with next message today but
have no test results yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 24, 2014, 04:01:03 pm
Wow Janekivi, you did it.  :clap:
Congratulations! My respect for your achievements.
I like the photo with the new menu.
It's much better as the beginning.

I don't know if the PM works....
You have to give your personal emailadress to the forum, I think.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 24, 2014, 04:13:56 pm
Is there something going on with the PM system

Just sent you a test PM message, see if you received it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 24, 2014, 04:29:43 pm
Is there something going on with the PM system or you don't answer to them?
I already sent dozen of them but all I see is silence. Sometimes 1 o2 I got.

Edit: I was 100% sure, first answer is "what we are missing here... "
: ))))))))))) But I missing feedback and other PM answers here.
I had wish to save a little attachment here with next message today but
have no test results yet.

Just send you a PM too. It must work, I hope. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 24, 2014, 04:43:43 pm
Is there something going on with the PM system or you don't answer to them?
I already sent dozen of them but all I see is silence. Sometimes 1 o2 I got.

Edit: I was 100% sure, first answer is "what we are missing here... "
: ))))))))))) But I missing feedback and other PM answers here.
I had wish to save a little attachment here with next message today but
have no test results yet.
waiting for your amazing guide?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on December 24, 2014, 05:55:47 pm
How to make a complete firmware backup of a factory E4 1.22 or 2.3.0? A backup which can be used for recovery if something goes wrong?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 24, 2014, 06:04:27 pm
See my post #5894

EDIT: Using this method you can back up files that otherwise you cannot if you had used ftp *after* you boot the camera up. However it is still not a 100% complete backup, some exe files from Windows folder still not accessible, but since we do not change them then it should not matter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 06:50:14 pm
I sent test packages away many days ago and so far I have exactly 0 response.
With someone we changed 2-3 letters and when I waiting feedback, there is silence.
May be I can only change my own conf.cfc...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on December 24, 2014, 07:18:54 pm
I just saw your PM that was sent yesterday a few hours ago, and replied then (this forum does not have the most visible of PM notices, compared to some other forums I use).  I still need to post a longer PM reply, but I was on my way out of the house to do some last minute Christmas shopping when I saw it, and now have to leave again to deal with a minor plumbing problem at my elderly mother's house about 15 miles away.  If I don't get back on here tonight, let me wish everyone on the forum a merry Christmas, the next 4-5 days will be very busy here between home and work stuff.  I have not seen a test package file, but if you want to send it to me I would be glad to try to apply it when I get a little free time (perhaps Saturday)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 07:53:47 pm
No problem, as I said there is other important things too.
But I sent many of them and people needed zoom here badly and then - silence. All gone.
I waited many days but I promised something today and in my country this day is ticking to the end...

Do not misunderstand. I don't want anything. I like to you have what you want.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 24, 2014, 09:44:45 pm
Ok Janekivi,
It works, thank you very much.
I first did hack my original config.cfg , so I lost high resolution. My fault. That's wrong from me.

Then I did the hack on the highresolution config.cfg out of the camera and it works.  :D
You did a good job.
Did you all the work the same way as this? With Python?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 10:20:49 pm
Please please please have all some copies of all your files somewhere for that time when
something goes wrong. We cant make all of them when needed. And after that feel free
to edit menu contents where you want. But this I can say, that clear thermal screen is
cool feature. It's very good with those alarm color palettes too. : )
But other menu needs little fixes somewhere. I have next challenge here...

Edit: with zoom you have too nothing practical to do without clear thermal screen.
Switch color to white hot and start observe in "drone" mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 10:35:09 pm
Did you all the work the same way as this? With Python?
I think you like to know how I did this. Python I see first time too. I done this with notepad.exe
and calc.exe in programmer mode and changing Hex and Dec mode. I took one conf.cfg file
from this thread and changed its contents to match with real data from camera what I saw
with [rls] command. Then I tested it in camera by changing numbers in here and there.
This is how I found patterns in places. Camera decoded it for me, I used restartapp.
And so on... who care... what we are missing and what next?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 24, 2014, 10:48:26 pm
That Christmas present from janekivi - thank you

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 11:06:49 pm
What you may do with zoom I wrote in last messages. But I read always manuals afterwards.
If you can get \FlashFS\system\appcore.d\config.d\conf.cfc file from camera, you are qualified
to hack. Backup this too somewhere and copy it to python27 directory with this zip contents.
I made here readme too and afterwards feel free to edit presets and other stuff if you have
backup of course. My versions is in zip file and some of originals you find in 2.3.0 firmware fif.

Almost forgot: I have E4 2.3.0 1.2 from factory. Got it... date is in my first message. And
with this and for this I made all stuff. Got here one only, that's why I need you for testing.

Merry Christmas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 24, 2014, 11:15:14 pm
Did you all the work the same way as this? With Python?
I think you like to know how I did this. Python I see first time too. I done this with notepad.exe
and calc.exe in programmer mode and changing Hex and Dec mode. I took one conf.cfg file
from this thread and changed its contents to match with real data from camera what I saw
with [rls] command. Then I tested it in camera by changing numbers in here and there.
This is how I found patterns in places. Camera decoded it for me, I used restartapp.
And so on... who care... what we are missing and what next?

Testing is good for me. I will do it with my camera. It is the same E4 2.3.0 1.2 from factory you have.
I would like the box with hot and cold spots in it, but I think this is not the most easy one?
In white hot the zoom looks like "drone" indeed.  :)
Merry Christmas

@Janekivi. I see you added scale-scale-manual too in *.xml file. Does it work in the menu or do we still have to toggle the spotmenu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 24, 2014, 11:39:00 pm
Manual was there from factory actually. May be someone can help with xml and rcc
and we get this working in other way than in readme.txt
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on December 24, 2014, 11:57:43 pm
Installed the hack according to the instructions. Works perfectly on the first shot on 2.3.0 1.2L. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 25, 2014, 12:34:51 am
Manual was there from factory actually. May be someone can help with xml and rcc
and we get this working in other way than in readme.txt

On the internet is a video from someone who is showing his hacked E4 menu. And in scale-menu there are 4 choices in stead of 3.
Auto, lock, manual .......and unlock. I only didn't find the *.xml file that contents the unlock-sentence.
Maybe this unlock-choice have to do with the toggling of manual setting?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 25, 2014, 01:09:02 am
Unlock is probably redundant. The camera would unlock anyway when Auto or Manual are selected.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 25, 2014, 01:21:33 am
Manual was there from factory actually. May be someone can help with xml and rcc
and we get this working in other way than in readme.txt

Yes Manual option was in the toolbar-config.xml but not displayed/not working. I think a proper facet.rcc file may be needed. There was stuff posted before to unpack and repack rcc file but it was Linux code that needed compilation, and that is a foreign language to me.

I figure you can put whatever you want in toolbar-config.xml, but if there is no support for it in facet.rcc it will not work and/or may even not be displayed in the menu, as it is the case with Manual scale that comes in factory 2.3.0 toolbar-config.xml file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 25, 2014, 02:32:57 am
What you may do with zoom I wrote in last messages. But I read always manuals afterwards.
If you can get \FlashFS\system\appcore.d\config.d\conf.cfc file from camera, you are qualified
to hack. Backup this too somewhere and copy it to python27 directory with this zip contents.
I made here readme too and afterwards feel free to edit presets and other stuff if you have
backup of course. My versions is in zip file and some of originals you find in 2.3.0 firmware fif.

Almost forgot: I have E4 2.3.0 1.2 from factory. Got it... date is in my first message. And
with this and for this I made all stuff. Got here one only, that's why I need you for testing.

Merry Christmas
janekivi,unfortunately to say, there is no zoom icon for me but the more color mode. I'm wondering why?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on December 25, 2014, 06:01:06 am
What you may do with zoom I wrote in last messages. But I read always manuals afterwards.
If you can get \FlashFS\system\appcore.d\config.d\conf.cfc file from camera, you are qualified
to hack. Backup this too somewhere and copy it to python27 directory with this zip contents.
I made here readme too and afterwards feel free to edit presets and other stuff if you have
backup of course. My versions is in zip file and some of originals you find in 2.3.0 firmware fif.

Almost forgot: I have E4 2.3.0 1.2 from factory. Got it... date is in my first message. And
with this and for this I made all stuff. Got here one only, that's why I need you for testing.

Merry Christmas
janekivi,unfortunately to say, there is no zoom icon for me but the more color mode. I'm wondering why?

Did you create the new conf file using python from the other files he supplied like the instructions say and then use the new one that was created to overwrite the existing one on the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 25, 2014, 09:50:17 am
janekivi,unfortunately to say, there is no zoom icon for me but the more color mode. I'm wondering why?
May be more colors from previous hack but this time you forgot fif-file?
Look inside toolbar-config.xml what my hack using
Look inside ui_control.rsc what files my menu hack using
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 25, 2014, 10:03:11 am
-= How I can use all features of my camera =-
(disable that rndis mode)
connect camera to pc
run Flir Tools
import pictures
all menu working on all pictures
from right you can change all numbers, colors
add spots, alarms, colors
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 25, 2014, 11:46:52 am
What you may do with zoom I wrote in last messages. But I read always manuals afterwards.
If you can get \FlashFS\system\appcore.d\config.d\conf.cfc file from camera, you are qualified
to hack. Backup this too somewhere and copy it to python27 directory with this zip contents.
I made here readme too and afterwards feel free to edit presets and other stuff if you have
backup of course. My versions is in zip file and some of originals you find in 2.3.0 firmware fif.

Almost forgot: I have E4 2.3.0 1.2 from factory. Got it... date is in my first message. And
with this and for this I made all stuff. Got here one only, that's why I need you for testing.

Merry Christmas

janekivi... I think I love you ;D
Everything works like a charm. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 25, 2014, 01:01:46 pm
janekivi... I think I love you ;D
Everything works like a charm. Thanks!
Please love other people too. And Flir.
I'm here only the last in that row.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 25, 2014, 02:58:46 pm
It's took a good week to read and 're read the thread to fully absorb everything . Well done to you all . It's almost like a book with some very clever people writing it . I'm no programmer or computer buff but might be a silly question but here goes. Could one not copy an e8 program and wipe an e4 program and load the e8 program ? .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on December 25, 2014, 03:26:47 pm
janekivi : Thank you.
I'm gonna try to install the zoom later, I don't know how to exactly do it, I've some reading to do first.
I already got the res. hack installed, it took me quite a while the first time.
I should be able to find out by myself, I'm always a bit scare when it is time to do something to my camera.

Thanks a lot and Merry Christmas to every body from Canada!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comanche3 on December 25, 2014, 04:37:32 pm
Zoom works ! THX !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 25, 2014, 05:08:22 pm
It's took a good week to read and 're read the thread to fully absorb everything . Well done to you all . It's almost like a book with some very clever people writing it . I'm no programmer or computer buff but might be a silly question but here goes. Could one not copy an e8 program and wipe an e4 program and load the e8 program ? .
What?! We want more!! E8 is too... insufficient
I'm playing with 3 spots here. For moving them we need touch screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 25, 2014, 06:17:39 pm
@Leoib,

Sadly transplanting an E8 file system intro the E4 is not a simple task.

1. You would need a means to extract every file on the E8 and a way to transplant them into the E4
2. You would have the E8 donor calibration data in your E4 and that will not match your cameras Microbolometer. Calibration and NUC files are unique to each camera.

This was an idea proposed early on in the E4's life but sadly it has nit been achieved by anyone to date due to the calibration data issue.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 25, 2014, 08:17:59 pm
It's took a good week to read and 're read the thread to fully absorb everything

Why do you see troubles?
(1) look to your firmware version.
(2) go to the first post from mike and follow the corresponding link
(3) follow the instruction for resolution hack in the linked post ( like here https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297) )
(4) if you need more help (i.e. RNDIS and hidden menu) go back to first post from mike and check the another links

that's all
further hacks like special menus are not necessary (only nice gimmicks)

If you don't understand this instructions, you should not hack a Ex.
You can make an expensive paperweight  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 26, 2014, 06:51:41 am
janekivi,unfortunately to say, there is no zoom icon for me but the more color mode. I'm wondering why?
May be more colors from previous hack but this time you forgot fif-file?
Look inside toolbar-config.xml what my hack using
Look inside ui_control.rsc what files my menu hack using
janekivi,I followed all the steps in your guide,but it didn't work^^I got only the more color mode.There is no zoom icon.help! What can I do now?
BTW,the size of modified conf.cfc is 6608,is that right?
I upload my modified conf.cfc in attachment,please check it,Thx!!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 26, 2014, 07:52:51 am
I have x-ray view in some situations and trained it on my conf.cfc but we can't see inside
crypted files just like that (Exactly for that the crypting is done). And there is all other files
must be in right state.

This hobby is for those who have this hobby. You know what you are doing.
This isn't "must be" hobby. If you can you may like to try pip (http://)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 26, 2014, 09:45:21 am
Another Christmas magic from janekivi: PIP mod for E4

Thank you janekivi,  seems you are being busy this Christmas.
 ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 26, 2014, 09:58:17 am
Ok. Reach to the limits of my known world.
After looking in Exx software and adding 3 measuring spots I start thinking,
is there way to see zoom menu on screen without seeing other menu at same time?
What is Exx MenuPopup?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on December 26, 2014, 06:10:16 pm
Janekivi - many thanks again for your and everyone elses efforts. Much appreciated.

I've applied res update and palettes with no problems but the zoom won't work. So far - (camera 1.2L 2.3.0 correct size of conf.cfc) run the Python, it updated conf.cfc and created the old version. I copied the conf.cfc back to the camera in \\flashFS\system\apppcore.d\config.d and the time stamp changed on the file on the camera so it looks like it must have transferred. After reboot there is no extra menu option.

Any ideas?  :(

Paul

D'oh!  :palm:  problem solved - realised that the rename.txt only covers half of it. In case anyone else has problems, after changing the conf.cfc file run the zoom fif file and this adds in the zoom option to the menu structure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 26, 2014, 06:47:06 pm
Ok. Reach to the limits of my known world.
After looking in Exx software and adding 3 measuring spots I start thinking,
is there way to see zoom menu on screen without seeing other menu at same time?
What is Exx MenuPopup?

Are your menu hacks compatible with the older 1.2x series firmware? Anyone tried it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 26, 2014, 07:08:30 pm
D'oh!  :palm:  problem solved - realised that the rename.txt only covers half of it. In case anyone else has problems, after changing the conf.cfc file run the zoom fif file and this adds in the zoom option to the menu structure.
Actually readme.txt contains that part before conf.cfc patching.
Like in previous guide it's 5. row
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 26, 2014, 07:45:03 pm
Fantastic, I just come home and see the pip-upgrade.  :)
Thank you, Janekivi. A fine Christmas present.  :clap:
It works good. Nice job.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 27, 2014, 02:31:15 pm
Janekivi - many thanks again for your and everyone elses efforts. Much appreciated.

I've applied res update and palettes with no problems but the zoom won't work. So far - (camera 1.2L 2.3.0 correct size of conf.cfc) run the Python, it updated conf.cfc and created the old version. I copied the conf.cfc back to the camera in \\flashFS\system\apppcore.d\config.d and the time stamp changed on the file on the camera so it looks like it must have transferred. After reboot there is no extra menu option.

Any ideas?  :(

Paul

D'oh!  :palm:  problem solved - realised that the rename.txt only covers half of it. In case anyone else has problems, after changing the conf.cfc file run the zoom fif file and this adds in the zoom option to the menu structure.
Paul10000, I met the same problem that there is no zoom icon after using modified conf.cfc.I'm wondering where is the zoom fif file and how to run the zoom fif file,Thx!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on December 27, 2014, 03:17:03 pm
Janekivi is of course quite right - the instructions are correct in the readme - I thought it referred to run the RNDIS fif file.

The zoom fif file is in the zip package where you found the zoon_conf.py file !     entitled 2.3.0_Menu_Upgrade.fif        548KB in size
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 27, 2014, 04:29:33 pm
Back in the beginning there was black screen...
and then I saw the light with fif file.
It working on all and in all modes.
No ftp, no rndis needed.
And I saw this is good.
And that's how this all is started.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on December 27, 2014, 05:45:29 pm
Note that the biggest sale of the year for the E4 is coming this Monday. Stay tuned.  Could be under $600 each.

Good job on menu mod.  I just need to find a old windows 7 PC to do it.  That FLIRtools software doesn't install on a VM right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 27, 2014, 06:42:44 pm
@janekivi @Paul10000 Thank you! zoom hacking  success!
I finally found what's wrong with my hacking procress.I used the version 5 of menu hacking instead of that in 6.1 folder,that's all!
BTW,zoom is so cool!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 27, 2014, 06:46:47 pm
 O0 Now,I got the two functions which are my best  love^^^^zoom and manual temp scale  :-+ 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 27, 2014, 09:19:07 pm
I must learn that menu programming too.
I wanted it badly but now it's over the Ex limits already and
too cramped (don't know right word). In some cases all info
covering 75% of screen.

I like how this E6 transforms 00:24 -> 00:53 -> and in the men hands who knows best
https://www.youtube.com/watch?v=lGDkbrhyIzY (https://www.youtube.com/watch?v=lGDkbrhyIzY)

You can try this 3 spots (http://). You can move them to best positions in file
or on the workplace you change camera angle and distance from object.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on December 27, 2014, 11:09:30 pm
Note that the biggest sale of the year for the E4 is coming this Monday. Stay tuned.  Could be under $600 each.

Good job on menu mod.  I just need to find a old windows 7 PC to do it.  That FLIRtools software doesn't install on a VM right.

Who/where is this sale happening?

Is it safe to assume that the hack still works on the latest version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ThermalGuru on December 27, 2014, 11:38:37 pm
Keep in mind if you plan to make a purchase and want to use the Flir redemption offer that you need to purchase before Dec 31st.

See: http://www.flir.com/instruments/display/?id=64494 (http://www.flir.com/instruments/display/?id=64494)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 27, 2014, 11:51:24 pm
Ok great. 3 spots are also working. It is a sort of variant of spot measurement. It is useful for doing and reading different temperature measurements near each other at the same time. Thank you, Janekivi.  :) You invented a new measurement for Flir.  ;)
Do you also have programmed hot spot and cold spot measurement for the E4? In the measurement box?
I think, that seems very easy for finding the hottest and coldest spot by only pointing around a workplace.  Only the programming seems not so easy because of the big amount of extra sentences in different files, I think. But....we never know. You did already great work.  :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2014, 12:10:41 am
Boxing Day present from janekivi, 3-spot measure.

Will keep my E4 warmed up and ready for another one on New Year's Eve
 ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on December 28, 2014, 05:10:26 am
So, do the new hacks of the 2.3.0 FW have capabilities and functionality beyond the hacks available for the 1.22 and prior FW?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on December 28, 2014, 06:59:02 am
So, do the new hacks of the 2.3.0 FW have capabilities and functionality beyond the hacks available for the 1.22 and prior FW?
For normal use the most functions seems to work.

But insulation (Isotherm) was not enabled, as far as i know.
And 2 half implemented Measurements (Line and Circle) will also missing. For the normal Camera user surely not important... but this functions will be measured and can readout, but will not be displayed on screen.

But interesting to know is... how much Spots and Boxes are usable?
I have set all to a limit of 5, so I can have 5 spots and 5 Boxes at the same time (well... it is not a really good idea, because it slows down the camera)

and... are difference measurement and ref temp also enabled?

I sadly have much to do last time...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2014, 08:10:01 am
So far the following mods on 2.3.0

resolution
additional palettes
zoom
pip
3-spots measure

workarounds:

manual scale
jpg quality

other:

web interface
battery icons

ftp login without boot (in RNDIS permanent mode, just connect usb cable)
user: anonymous
psw: NcFTP@

Attached is a set of pics before and after resolution mod. Much noise was cured.

EDIT: Also (from earlier in this thread) when battery is charging, pressing Left and Right cursor buttons together will display battery charging progress information.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 28, 2014, 10:31:25 am
There is,some great effort off you guys far beyond what I understand hats off to you lot. . I'm curious what distance would an e8 read at and does the zoom option zoom the sensor or just the visual screen ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 28, 2014, 12:01:43 pm
The zoom is digital only on the E4-E8 models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 28, 2014, 02:56:37 pm
Ok thanks for that
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 29, 2014, 05:39:54 am
Note that the biggest sale of the year for the E4 is coming this Monday. Stay tuned.  Could be under $600 each.

It's Monday where I am. Details, please?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaeliv on December 29, 2014, 06:40:20 am
Note that the biggest sale of the year for the E4 is coming this Monday. Stay tuned.  Could be under $600 each.

It's Monday where I am. Details, please?
Since it's Monday now for you you're probably out of luck ... this might be US only.
Zoro.com is selling them for 696.50 currently. Use code SAVENOW30.
They do mention something about international shipping ... I'm actually curious about how that works, let us know if you order.
For those that have a Upromise mastercard - you can get an aditional 10% back - making this $625 ...
Or use MrRebates.com for $25 back in cahsback ... if you're into that.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KK on December 29, 2014, 06:45:45 am
Zorro.com sale 30% off


Code- SAVENOW30

From 16:00-22:00 UTC 12/29/14
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaeliv on December 29, 2014, 07:11:40 am
Zorro.com sale 30% off
Code- SAVENOW30
From 16:00-22:00 UTC 12/29/14

FYI It's Live now... not starting at 16:00 UTC ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pingo on December 29, 2014, 07:39:06 am
Hello. Has there been anything written regarding camera temperature calibration? I see that in cold weather (even above 0°C), reported temperatures are too low by many degrees. Has anyone tried recalibrating it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: The_Raven on December 29, 2014, 11:01:49 am
Everything worked fine with a 2.3.0 E4 (resolution, zoom, pip...).  :)
The only thing is that i can not set jpg-quality to 100.
When i log in with telnet and run "rset .image.services.store.quality 100" i get:
rset: failed to contact server

So whats wrong?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 29, 2014, 11:07:28 am
Hello. Has there been anything written regarding camera temperature calibration? I see that in cold weather (even above 0°C), reported temperatures are too low by many degrees. Has anyone tried recalibrating it?

Calibration is not straightforward and can only be done with appropriate knowledge and equipment.
What you can and should look at is the settings for reflected temperature and emissivity of what you are looking at (among other things). Thermal cameras are not quite "point and shoot" if you want accurate absolute readings.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on December 29, 2014, 01:48:43 pm
hey guys...

I improved my software and now it takes 3 seconds to get a full radiometric image from the Camera (Resolution must be 320x240 and USB with RNDIS).

If the image is arrived, it could be analyzed, interpolate, sharpen, stored....

have fun  :-+
Link (or see footer):Thermoviewer_007_release (http://joe-c.de/modules/download_gallery/dlc.php?file=72)

edit: link now correct
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 29, 2014, 02:56:59 pm
Since it's Monday now for you you're probably out of luck ... this might be US only.
Zoro.com is selling them for 696.50 currently. Use code SAVENOW30.

Ah, I see. I got mine from Zoro with an earlier 25% coupon (yes, I'm US). It would have been great to save another $50, but not great enough to do a return-and-rebuy, and after the reminders on this thread, I'm not really comfortable doing the hack-and-flip-on-eBay thing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaeliv on December 29, 2014, 03:41:57 pm
Since it's Monday now for you you're probably out of luck ... this might be US only.
Zoro.com is selling them for 696.50 currently. Use code SAVENOW30.

Ah, I see. I got mine from Zoro with an earlier 25% coupon (yes, I'm US). It would have been great to save another $50, but not great enough to do a return-and-rebuy, and after the reminders on this thread, I'm not really comfortable doing the hack-and-flip-on-eBay thing.
what reminders on this thread prevent you from hacking/flipping on eBay ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 29, 2014, 05:22:19 pm
@michaeliv,

Simple....FLIR may pursue you as you will be a seller of what they perceive as a 'Fake' product. They have done it before. It may sound illogical but that is the route that their legal bods have taken.
To date FLIR have directed their pursuit of such sellers via ebay and via dealers who supplied the camera. They can obtain your home address and details through these means.

At least one person on this forum has 'gone dark' after being directly contacted by FLIR with threats of legal action.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 29, 2014, 08:02:57 pm
For development there is more data needed...

To seeing how much free space there is on flash, you can add this line to "Camera information":
Code: [Select]
<ui_model_item type="SettingItem" ID="STORAGE"  label="ID_SETUP_STORAGE"  value="*" nextModel="hiddenServiceSettingsModel"/>I add all interesting stuff if I ever get done something... or crashing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 29, 2014, 08:11:03 pm
humm.... is that video I see????

Might pick up another e4 from zoro while it is 30% off. (need the business expense!!)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 29, 2014, 08:22:45 pm
Ok, this is only picture
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 29, 2014, 09:58:05 pm
On the one screen it looks like zoom is gone and it has a lightbulb? So only single shot works but it has a film strip? Do you think video recording is available? or is that just when the camera is connected to computer?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 29, 2014, 10:43:31 pm
This is from Exx files, I replaced many of them.
There zoom menu is popup but I cant use it, yet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 29, 2014, 11:59:38 pm
I improved my software
..
Link (or see footer):Thermoviewer_007_release (http://"joe-c.de/modules/download_gallery/dlc.php?file=72")

The link is broken, the quotation marks from the url should be removed

Also can you make English menus?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on December 30, 2014, 12:56:03 am
The one feature I wish we could unlock would be WiFi / Bluetooth. From the teardown video I see it has the area for ithe chips on the pcb. adding a chip shouldn't be too hard for one with the correct equipment. I would order the chips and try if I knew the correct part #
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 30, 2014, 10:19:43 am
Wlan din't come visible... may be first hardware needed for this.

Is there someone who have 2.3.0 E4 camera and done reso hack and
like to have more menu but didn't have tried anything yet? PM me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on December 30, 2014, 11:53:08 am
Thank you Janekivi.  :clap:
You achieved it.
I feel to have an E9. All the menu's are working fine and also can be combined with each other.
It is the almost perfect camera now.
It seems like you want to make an E10.  ;) :D
Very good and precise work.
My respect for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: centaurian on December 30, 2014, 01:00:13 pm
janekivi: Is that menu zoom hack only for E4, or it works on E5 too? I would like to see that on my E5 :).
Since conf.cfc for E5 has different size, then it likely will need different patch...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 30, 2014, 02:02:14 pm
janekivi: Is that menu zoom hack only for E4, or it works on E5 too? I would like to see that on my E5 :).
Since conf.cfc for E5 has different size, then it likely will need different patch...
Don't try patch on conf but other stuff is the same. In the future we can try change E5 too.
Delta killed my conf.cfc file when there wasn't support in cfc file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yf025 on December 30, 2014, 05:01:24 pm
For development there is more data needed...

To seeing how much free space there is on flash, you can add this line to "Camera information":
Code: [Select]
<ui_model_item type="SettingItem" ID="STORAGE"  label="ID_SETUP_STORAGE"  value="*" nextModel="hiddenServiceSettingsModel"/>I add all interesting stuff if I ever get done something... or crashing
god ^^look at these icons! So far you arrived indeed amazed me much :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on December 30, 2014, 07:12:18 pm
I run into trouble every time i try to install the new menu hack.

The FLIRInstall keeps saying that i don't have enough space? :

Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding /FlashBFS/system/arctic.pal
Failed to add /FlashBFS/system/arctic.pal - There is not enough space on the disk.

Adding /FlashBFS/system/lava.pal
Failed to add /FlashBFS/system/lava.pal - There is not enough space on the disk.

Adding /FlashBFS/system/rainhc.pal
Adding /FlashBFS/system/bootlogo_legal.bmp
Adding /FlashBFS/system/appcore.d/factory.d/ui_control.rsc
Failed to add /FlashBFS/system/appcore.d/factory.d/ui_control.rsc - There is not enough space on the disk.

Adding /FlashBFS/system/ui.d/presets.d/preset_centerspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_nomeasure.rsc
Adding /FlashBFS/system/ui.d/toolbar-config.xml
Adding /FlashBFS/system/ui.d/facet.rcc

Has anyone else bumped in to the same problem?  ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 30, 2014, 07:41:44 pm
Very soon this is not new menu any more... but...
There is very small free room, and rcc file is biggest one.
But this is flash and first thing is to shut it down and take battery off for minute and take another shot.
If there is black screen, you can use fif file anyway. For that purpose I made it.
In your case I see soft must boot fine. But if.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on December 30, 2014, 07:45:29 pm
Very soon this is not new menu any more... but...
There is very small free room, and rcc file is biggest one.
But this is flash and first thing is to shut it down and take battery off for minute and take another shot.
If there is black screen, you can use fif file anyway. For that purpose I made it.
In your case I see soft must boot fine. But if.

I'll take the batteries out and give it a try in an hour or so.. Or are you telling me there's a new Menu coming, Janekivi???  ;D anyways, thanks a lot for all your time you're spending upgrading these things!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on December 30, 2014, 11:25:48 pm
Just received my flir E4 before I begin could be a stupid question do we install the latest software version '5.0 (5.0.14283.1002)'or an older version?

Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on December 31, 2014, 12:33:23 am
Are these updates to the hack being released somewhere else? It seems like everyone is commenting in pip, spot metering etc, but I don't see where any files got posted since the zoom update.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 31, 2014, 03:42:15 am
Look closer in janekivi's posts, sometime it is url links embedded in text, not attachments.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 31, 2014, 08:33:04 am
This is for educational purposes to show you what I'm doing here and how I can edit
crypted conf files. Before there I wrote how they are not wery scary any more if I studied
and compared them with notepad and calculator. There are examples to show this.

And finally I broke this RC4 crypt in my camera with notepad and calculator.

For my camera I can do after that everything I like and change conf.cfc contents
and experiment whatever I like. Look the latest screenshots.

Edit: and first sucessful edit was "zoom false" to "zoom true" without any help what no one is willing to give here
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 31, 2014, 10:45:13 am
To seeing how much free space there is on flash, you can add this line to "Camera information":
Code: [Select]
<ui_model_item type="SettingItem" ID="STORAGE"  label="ID_SETUP_STORAGE"  value="*" nextModel="hiddenServiceSettingsModel"/>

Ok that worked, thanks janekivi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on December 31, 2014, 11:04:31 am
Dear Janekivi,

Your menu hack rocks. It is relatively an easy hack after resolution upgrade. Now my device has totally functional menu items. It is better than E8 now. I was dreaming Hotspot and coldspot feature on my device and now I have it. All other features are working with additional functionality.  I think even E8 owners may think to do the same hack also :). Thanks for your precious work.

PS: I'm offering Mike to make this threat's name as "E4 HEAVEN" :)

Cheers

Tugbay
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 31, 2014, 11:14:33 am
o.0 ... de-noising?

only for 2.3?
I think, no. In all cameras it's set to true. By default it is false.
This is simplest DIY experiment to do. Delete conf file and you have default settings.
Noise is false then and gone. With crypted file this can be done by distaracting one bit
anywhere in this line:

      CRLF.caps.config.image.targetNoise.enabled bool trueCRLF

After that it will be false and value is 0 too.
By distracting this line somewhere you lost value to 0 and noise gone:

      CRLF.caps.config.image.targetNoise.targetNoiseMk int32 135CRLF

Best noise is by view with hi contrast rainbow.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 31, 2014, 12:21:02 pm
And now this is good time to reveal 2014 menu for Ex 2.3.0.
But you must agree this is only hobby and you are experimenting with your own toy.
After that this is not tool any more and can't be used in business. This is calibrated
piece of equipment and have factory support what you need in business. But it can
be reverted and locked to toy state any time and you lost your tool.


We steal some of ideas from high end cameras and combine them here.
You can't make money, do work or provide service with "stolen" tool.

If you do not like this you do not have to use it.

New E4 2.3.0 menu
*  One thing I invented here is true "No measurements" if there is no measurements.
I wanted it this way and done it. I hope we can see it in new firmwares, with logo of course : )
*  There is now Storage free room in Settings -> Device settings -> Camera information ->
*  In Exx is no Lock in Temperature scale too and there now only AUTO and MANUAL
Manual is same as locked if you do not move it
*  JPG save quality can be set to 100% by selecting No measurements or Center
spot one time. After reboot it's gone and you must select one of them. This not
help if one of them selected already after boot. You must select another or something
else and same back.

All other stuff is made by you here and collected from this thread. I changed only one
file more to make it to working in 2.3.0
How to use them you find out from factory Ex and Exx manuals

And howto... you can't get something out of me so easily. I want to make you think
and read more. That's why here is no point to point help files anywhere. I hide things
and let you work harder.
This is hobby and experimentig it is. You can buy right final thing from shop but lost
then all that joy you get by doing this by yourself.
___________________________________________________________________
New version 2.3.0_menu_2014_EX_6 have support for E4, E5 and E6 (feedback needed).
And I belive E8 can use some of menu without conf hack (please share E8 conf with me).
3-spot preset is replaced with "CenterHotColdSpot" but you can rename any of them to
"preset_threeSpots.rsc" to have it under this menu button. And some minor fixes.
There is 2.3.0_Menu_Restore.fif for replacing some key files back to original state.

But for other cases when you like to make personal conf file, there is some requirements.

If updated menu is very strange, probably files are not replaced correctly and in
\FlashBFS\system\appcore.d\factory.d  is extra xxxui_control.rsc
Delete this and ui_control.rsc too, after that reapply fif or copy here ui_control.rsc
from fif. And in EX_6 was missing ToolBar name="colorMenu". Nobody noticed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2014, 12:48:16 pm
Excellent message ! I like the comments regarding hobby use only and the need to do some research. Users will benefit from such investigation. Well done creating such an upgrade for the E4.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 31, 2014, 12:48:22 pm
Excellent message ! I like the comments regarding hobby use only and the need to do some research. Users will benefit from such investigation. Well done creating such an upgrade for the E4.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on December 31, 2014, 05:41:10 pm
And now this is good time to reveal 2014 menu for Ex 2.3.0.

While i don't have a FLIR, i just wanted to thank you a lot for your work! A friend of mine has an E4, but somehoe he can't register here to say thanks himself. So, many thanks from him to you as well! And have a good new years eve, you surely deserve it.

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on December 31, 2014, 07:13:33 pm
And main question I forgot in reveal. What we are missing here.
Almot all is there and all that can fill 75% of your screen already.
What we are missing can you develop and make to working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 31, 2014, 08:17:51 pm
It is a frosty last day of 2014 and nothing can be more warming than a set of new hot menus. :-+
Thanks janekivi, amazing accomplishment.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 01, 2015, 01:20:59 am
It can be seen that E4 sensitivity is indeed 0.1 degree Celsius or better, if to use either Below or Above palette and point the camera to an object that has a temperature gradient. The palettes allow to change the threshold with 0.1 degree C step, so you can observe the image changing as you increase/decrease threshold level by 0.1 degree C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 01, 2015, 07:45:32 am
Has anyone got this menu update to work with PIP and Zoom? When I install the menu upgrade the zoom and pip icons vanish and if I try to put them back on they just never show up.... Any help is appreciated thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: centaurian on January 01, 2015, 09:18:10 am
Emoticon: those functions works for me....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on January 01, 2015, 12:26:06 pm
They are working for me either
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Paul10000 on January 01, 2015, 04:50:16 pm
Amazing extras but I've also lost the zoom icon since installing the latest 2014 menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 01, 2015, 04:55:43 pm
Did you apply the 2014 mod on top of what you already had? I understand you are supposed to use the cfc file that only had  resolution  mod. This approach worked for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 01, 2015, 05:36:13 pm
Did you apply the 2014 mod on top of what you already had? I understand you are supposed to use the cfc file that only had  resolution  mod. This approach worked for me.

I tried it both ways I tried it adding them in on top of existing hacks (pip and zoom vanish), then I did a flat install of 2.3.0 did the reso (using .4 version I had on my comp) and then installed 2014 menu hack, at that point again no zoom, no pip. Tried to install them on top of it after installing 2014 menu fresh over an original reso hack, still nothing. I even extracted the fif files to see what I was missing or hadn't changed, but I'm not seeing it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 01, 2015, 05:45:01 pm
If you know what you're doing and have "resolution hack only" conf.cfc
then you are qualified to hack menu this time.
That's how it says in readme. Ok, I say.

If you apply 2.3.0 firmware for repair, you see it does not delete anything extra
from camera and does not touch FlashFS folder and does not touch your conf.cfc file.
You get it back only from your backup and there is chance you have it where first reso
hack made backup directory "backup-datetime" in Python27.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on January 01, 2015, 05:50:53 pm
I have the same issue. When applying new menu, i get everything except Zoom, PIP and also no manual temp setting, only "lock" mode.

I have tried both installing over the prior menu as well as using the only res-conf, but it remains the same.  ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 01, 2015, 06:25:34 pm
Slow things down.
Put back conf.cfc file what you think is from factory - reso must be 80x60 and noise is back (135).
Do not have multiple files in \FlashFS\system\appcore.d\config.d\ because it's reading all of them
no matter what name they have.
Put back original common_dll.dll - this can be done in 10 different ways, best if you say stopapp
You must have hacked dll and reso hacked conf. This is can be done now by reso hack v0.4.zip
If you patch this conf to add menu, what we see now?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 01, 2015, 06:55:53 pm
Do not rename and store original files on the camera for backup purpose. Move them to your PC for backup.

Aslo make sure you use all of the files in 2014 pack, not only the cfc file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 01, 2015, 07:42:46 pm
Some want more, some ask what I do now with all that stuff.
I hope there is something to anyone in here.
We may do little gallery here, but not from all combinations.
Actually there is 1372 different combinations of use now.
4 - Image mode
7 - Measurement
12 - Colors (Gray and White hot is the same but you want always "more" : ) )
4 - Zoom
You can use any combinations of them in any time.
And if you select different Measurement and after that Digital camera,
this adds 7 x 4 zoom modes.
If I calculated it correctly...?
You may add to this Temp scale too if you like.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikhail076 on January 01, 2015, 08:19:58 pm
thanks janekivi for your amazing work.
whether it is possible to make hot and cold spots locations simultaneously at 2.3.0 as it works at 1.22 menu update?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 02, 2015, 12:29:54 am
@michaeliv,

Simple....FLIR may pursue you as you will be a seller of what they perceive as a 'Fake' product. They have done it before. It may sound illogical but that is the route that their legal bods have taken.
To date FLIR have directed their pursuit of such sellers via ebay and via dealers who supplied the camera. They can obtain your home address and details through these means.

At least one person on this forum has 'gone dark' after being directly contacted by FLIR with threats of legal action.

Aurora
There were a few people selling on eBay but FLIR really cracked down, I talked to one guy who had a few units left but he said he had no problem selling them in the private market. He sold them for around $1100 iirc. Which isn't bad considering the situation(there was no 2.3 hack available and 1.22 was sold out everywhere)


Now as far as this 2.3.0 firmware, I have a few questions if anyone would be willing to answer(I may look into ordering a 2.3 unit and uploading a new video for YouTube on how to do the hack as I did with the other videos)

Is 2.3 the newest firmware?
How does the new hack compare to the 1.22 hack?
Does the hack work on all units?

I think it would be great to use the answers to these questions and have mike update the first post to easily direct those not familiar or who have been out of the scene for a little bit. Please don't make me actually read  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 02, 2015, 12:36:38 am
I don't think you'll get much sympathy with that attitude. I'm guilty of skimming a lot too, but I had to read like 100 pages on this thread as I ran into various problems until I felt like I had any kind of had even a glimmer of a handle on how to do things. Why spend $1000 on the device if you can't spend the time to figure it out to make sure you wont ruin it out of the box?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 02, 2015, 12:55:03 am
I don't think you'll get much sympathy with that attitude. I'm guilty of skimming a lot too, but I had to read like 100 pages on this thread as I ran into various problems until I felt like I had any kind of had even a glimmer of a handle on how to do things. Why spend $1000 on the device if you can't spend the time to figure it out.
Don't get me wrong, I thoroughly read the first 300+ pages and am very knowledgable on these units(up until 1.22) and have done many of these cameras and have spent hours on end helping a numerous fix their mistakes or upgrade their cams. People still email me on youtube asking for help on 1.22, I think combined they have over 10k views(you can find them in the first post). However I know that many of the posts on this thread have been repeated questions that I think would be helpful if everyone could have in one place.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 02, 2015, 02:13:33 am
Slow things down.
Put back conf.cfc file what you think is from factory - reso must be 80x60 and noise is back (135).
Do not have multiple files in \FlashFS\system\appcore.d\config.d\ because it's reading all of them
no matter what name they have.
Put back original common_dll.dll - this can be done in 10 different ways, best if you say stopapp
You must have hacked dll and reso hacked conf. This is can be done now by reso hack v0.4.zip
If you patch this conf to add menu, what we see now?

Tried this, same thing, there still is no pip or zoom on the toolbar. I also manually moved over the RCC and other files manually after that just to see if it would do anything. Also when I look at toolbar-config.xml the stuff needed for zoom and pip appears to be in there. I'm certain it's something with the conf.cfc. Is there a way I can just mod the missing parts into the cfc myself? How are you modifying conf.cfc directly? When I open it in notepad its all garbled chinese symbols are you loading it with some other program? Or just using an old file along side and figuring out what the garbled parts mean with your calculator method?

Side note, is it possible to make your own palettes from scratch?

Also have you tried to enlarge the box for the "hotspot"\"coldspot" setting or does that put too much strain on the processor and cause it to lock up?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on January 02, 2015, 03:19:35 am
I don't think you'll get much sympathy with that attitude. I'm guilty of skimming a lot too, but I had to read like 100 pages on this thread as I ran into various problems until I felt like I had any kind of had even a glimmer of a handle on how to do things. Why spend $1000 on the device if you can't spend the time to figure it out.
Don't get me wrong, I thoroughly read the first 300+ pages and am very knowledgable on these units(up until 1.22) and have done many of these cameras and have spent hours on end helping a numerous fix their mistakes or upgrade their cams. People still email me on youtube asking for help on 1.22, I think combined they have over 10k views(you can find them in the first post). However I know that many of the posts on this thread have been repeated questions that I think would be helpful if everyone could have in one place.

I've read the entire thread, including a few dozen messages that were later removed. It's interesting to see the evolution of the e4 hacks. The current hacks are the result of many brains thinking together, which is quite impressive given the disconnectedness of users in typical forums.

I'd guess that Flir has sold thousands and thousands of e4 cameras that would still be sitting on the shelf if not for the hack. Perhaps Flir believes that all of these e4 customers would have sprung for e8 cameras if no hack was available, but I'm guessing that only a handful of them would have dropped $4000 for what these e4 customers see as being a hobby expenditure.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on January 02, 2015, 04:15:57 am
DaveWB would also be great if you can make a video on the menu it would be a great help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 02, 2015, 10:02:47 am
thanks janekivi for your amazing work.
whether it is possible to make hot and cold spots locations simultaneously at 2.3.0 as it works at 1.22 menu update?
I have only one 2.3.0 E4 and experimenting with this.
Some things didn't come visible but I finished with it for this year and released it like this.
Everyone can experiment more and add other missing parts and this I like to see here.
Update is adding all of them for this. And this is here too:
<ToolBar name="measure_spot_cold_spot"/><!-- HACK: center + hot + cold (cool function)-->
May be facet.rcc modifications needed... I can't do it yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nick xung on January 02, 2015, 01:22:53 pm
:) :)
I used a tripod and moved the cam a little while recording.

I record a RAW movie with Flir E40 with this commands (a batch script)
Code: [Select]
rset .image.services.rtrecord.filename \StorageCard\001.seq
rset .image.services.rtrecord.count 90
rset .image.services.rtrecord.frequency 30
rset .image.services.rtrecord.active true
delay 5
rset .image.services.rtrecord.store true


- with .image.services.rtrecord.active start the record (90 frames with 30 fps)
- the clip is stored in memory
- the command .image.services.rtrecord.store save the movie clip from memory to flash

I can't use a counter larger  as 160 frames -> the Flir E40 goes to out of memory

Code: [Select]
\>memory
           69% memory load.
     94,957,568 bytes total physical RAM.
     29,454,336 bytes available physical RAM.

after 160Frames = 24MB
\>memory
         98% memory load.
      94,957,568 bytes total physical RAM.
      2,727,936 bytes available physical RAM.




I haven't yet tried this with Flir E4

rls gives the same switches

Code: [Select]
.image.services.rtrecord: (6)
rw--rw------1- 0 root   root   <a> action                  "RECORD"
                 ["RECORD" "PLAYBACK"]
rw--rw------1- 0 root   root   <b> active                     false
rw--rw------1- 0 root   root   <i> count                         16
                 [2, 1000]
rw--rw-------- 1 root   root   <a> filename        "\Temp\default.seq"
rw--rw------1- 0 root   root   <d> frequency                     10
                 [0.01, 60]
rw--rw------1- 0 root   root   <b> store                      false

you can select a frequency of [0.01, 60]  ;)
HOW to get these commands into work?just copy it to E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on January 02, 2015, 03:15:58 pm

Tried this, same thing, there still is no pip or zoom on the toolbar. I also manually moved over the RCC and other files manually after that just to see if it would do anything. Also when I look at toolbar-config.xml the stuff needed for zoom and pip appears to be in there. I'm certain it's something with the conf.cfc. Is there a way I can just mod the missing parts into the cfc myself? How are you modifying conf.cfc directly? When I open it in notepad its all garbled chinese symbols are you loading it with some other program? Or just using an old file along side and figuring out what the garbled parts mean with your calculator method?

Side note, is it possible to make your own palettes from scratch?

Also have you tried to enlarge the box for the "hotspot"\"coldspot" setting or does that put too much strain on the processor and cause it to lock up?


Emoticon: Have you tried janekivis advice, resetting the camera to stock; Reverse hack and start all over from scratch?

I did this and got PIP and Manual temp, but still no Zoom, don't know what are causing it though
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 02, 2015, 03:37:29 pm
Actually there is 1372 different combinations of use now.
4 - Image mode
7 - Measurement
12 - Colors (Gray and White hot is the same but you want always "more" : ) )
4 - Zoom

Does anybody know the difference between this and the good old Taucher menu mod done on the FW 1.19.x?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 02, 2015, 04:17:36 pm
whether it is possible to make hot and cold spots locations simultaneously at 2.3.0 as it works at 1.22 menu update?

Also have you tried to enlarge the box for the "hotspot"\"coldspot" setting or does that put too much strain on the processor and cause it to lock up?

If you look inside FlashBFS\system\ui.d\presets.d\ then you may find there what you want (taking into account you applied 2.3.0_Menu.fif to your camera). Then you may delete/rename/backup preset_threeSpots.rsc and then copy/rename existing preset_centerHotColdSpot.rsc to preset_threeSpots.rsc

As for the box size one may look inside corresponding .rsc file, change box size/location and recalculate CRC32. I use WinSCP for that purpose.

All credits going to janekivi of course as those extra *.rsc files were already there waiting for next release I suppose.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 02, 2015, 05:00:36 pm
You already moving the way I like to see but I told many times here -
we don't need CRC in 2.3.0 if in dll this procedure is hacked.
I even don't know how to calculate it : )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 02, 2015, 05:11:40 pm
You commented first about CRC32 as I was in process of editing .rsc files without changing # CRC32 line :) as I noticed that some of your .rsc files have this line and some don't have it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 02, 2015, 05:19:32 pm
If I change contents then I delete this number.
Tried many calculators in the beginning with no success to get
same number but there wasn't big point to have it there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 02, 2015, 05:29:04 pm
Found that if you delete #CRC line but leave <cr><lf> in the end of file than you may 7-Zip it and then look inside new archive. CRC there will be exactly what you need. All this is not relevant here as common_dll.dll was patched to skip this test.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 02, 2015, 05:41:25 pm
Wow, interesting finding on using a Zip-er to get CRC32. I was using a Python script found elsewhere in this thread.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Myrulken on January 02, 2015, 06:35:06 pm
Hey everyone that's got troubles with not getting the full menu.

Access your camera with FileZilla or similar, go to FlashBFS/system/appcore.d/factory.d folder and look at the files there.
The menu hack adds a file there with the name "Ui_control.rsc". But i noticed that i had another file there, named "xxxui_control.rsc". I deleted the xxx one and suddenly everything worked like a charm.

Big thanks to janekivi that helped me getting this solved!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 02, 2015, 06:35:31 pm
OK. Easy it is http://crc32-checksum.waraxe.us/ (http://crc32-checksum.waraxe.us/)
Paste text and done. But without dll hack many things not working anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 02, 2015, 06:41:57 pm
Wow, interesting finding on using a Zip-er to get CRC32. I was using a Python script found elsewhere in this thread.

it is useful in quick comparison of several versions of the same file - just drop it to 7-zip window and one will see CRCs in real time
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 02, 2015, 07:54:25 pm
As I said, 2.3.0 is easy to hack version now.
Couple of  things you need:
-use Set_RNDIS_permament
-connect with telnet and ftp
-you need restartapp.bat from old software
(in telnet I must type first command to introduction and after second
command all working and I can't reuse that command, I must retype it)
Now you can start experiments. Change something in file, no need for CRC,
upload it, type restartapp, no full restart, see results.
And so on.

(Old software does not need CRC too if you hack the same procedure in dll)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 02, 2015, 11:03:37 pm
I bricked my 2.3.0 camera the other day when I played with USB/RNDIS modes in terms of I could not connect to it anymore by either way, though the camera still worked fine. It took me 4 hours to find a way to get it back, but could took half a minute had it had the hidden USB mode selection menu working. In native 2.3.0 you can get to the menu but cannot change selection. If we could find a way to unlock that menu that would be great.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 02, 2015, 11:20:55 pm
I have a question for Aurora or other experts here. What would be the right way to test E4 sensor gradient ? I have attached a image from Flir Tools of my E4 thermal pic after a couple of minutes after power up with the lens cover closed . The gradient seemed to be 0.6 degree C from coldest to hottest and a round blob can be seen in the center of the thermal image. The palette span was tweaked for 1 degree C in Flir Tools. I am not sure if the 0.6 degree is OK or an indication of a poor thermal compensation, and if testing like this with the lens cover closed would be a right thing to do or not, so seeking your advice.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 02, 2015, 11:48:34 pm
Thermal gradient is best tested by aiming the camera at a surface of uniform temperature and emissivity. A Black Body source is specified by manufacturers for such tests.

House walls can have a thermal gradient across their surface. A painted sheet of metal at room temperature would likely do for the tests that you are interested in however. Paint the metal sheet with matt black cellulose, acrylic or enamel paint from a spray can. Try to keep the paint thickness thin and even to avoid differences in the surface emissivity.

I have tested my E4 previously and it DOES have a thermal gradient at narrow spans. I am not concerned with such at the E4 price point though. From memory, early testing of the E4 showed that the transmission range from the outer to centre of the E4 lens had to be compensated for in the calibration tables, and an area at the centre of the camera image did display a gradient compared to the periphery of the image. Such gradients only become apparent when working at narrow spans however and are not of concern to many.

I should state that I do not consider the E4 to be a truly radiometric thermal camera as its accuracy as you move away from a target at 30C decreases. Accuracy at low temperatures close to 0C is appalling ! For the money, the E4 is great value and we have to forgive some of the compromises that had to be made to keep the BOM cost down, such as not using a Germanium lens. If I was the owner of a genuine, ex factory, E8, I might not be so forgiving however !

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 03, 2015, 12:07:54 am
-use Set_RNDIS_permament

FWIW, permanent has never worked for me, only temporary. :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2015, 12:24:58 am
A painted sheet of metal at room temperature would likely do for the tests that you are interested in however. Paint the metal sheet with matt black cellulose, acrylic or enamel paint from a spray can. Try to keep the paint thickness thin and even to avoid differences in the surface emissivity.

Thank you Aurora, I guess you mean paint it black ? Probably a copper plate or may be as simple as a door brass kick off plate would work better than aluminum in terms of temperature evenness across the plate. Or may be a aluminum black oxidized finished sheet would work too, being already black and having very thin coating.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 03, 2015, 12:46:08 am
At room temperature a small (A4 size) metal passive plate should not have significant temperature gradient across its surface. A heated plate would be a very different matter.   For the test you requested any thin Matt paint should work as it is the paint chemistry that provides the emissivity to a greater extent than colour. white and metal colours should be avoided however. Gloss paint can produce reflectivity issues. Be aware of narcissus effect where the camera sees itself on the target surface and its warm micro bolometer creates a hot spot. To see this effect look at a window or mirror with the camera.
Corroded aluminium will have better emissivity  than shiny aluminium but I would not like to predict its evenness and a blotchy image may result.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 03, 2015, 01:12:03 am
Had the resolution hack installed and working. Installed the menu hack and the noise generator seems to be back and I have the missing zoom/pip menu items problem.

PS- The following is NOT the problem; no such files in that folder:

Hey everyone that's got troubles with not getting the full menu...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2015, 02:06:28 am
Installed the menu hack and the noise generator seems to be back
Intersting, That confirms my observation, i too noticed noise, though it is much milder than on a factory 2.3.0. When have time i would like to go back and step through the process trying to find where noise comes back.

How much noise do you see comare to the original state?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 03, 2015, 04:05:31 am
How much noise do you see compared to the original state?
I think it's less. I may have another E4 to compare it to over the weekend. Could it be due to "more sensitivity" because of the palette? FWIW, I installed the "V4" resolution hack about a month ago, and the "2014 Menu" hack this evening. Maybe previous versions of the menu hack installed/configured something that's omitted from the latest hack?

Attached is a capture with the shutter closed, so you can see the noise:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 03, 2015, 04:15:21 am
And here's a capture with rainbow high contrast... Might not be less:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2015, 05:09:51 am
The one with the lens cover closed looks very similar to what I have, same cross pattern and identifiable vertical columns of a darker color. If I move the camera the darker colored columns remain in place as if they exist because of calibration deficiency or something.  They are barely visible and do not typically spoil images but I can still see them on the live screen when pointing on walls. When the camera runs I can also see (pseudo)random faint horizontal strips of noise similar to what you could see on a analog TV screen when was a interference signal nearby. I think I saw something like this discussed in SEEK camera topic, do not know if the two are of  a same nature, since some SEEK people seem to be former FLIR folks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 03, 2015, 05:27:38 am
I don't think the (post-resolution-hack) pre-menu-hack camera exhibited that noise. Maybe something in the config file is munged, and I wonder if it involves the nonworking zoom/pip issue.

Janekivi is very close :-+ but no magnum of Champagne yet. :'( Wish I had time to hack away at this too.

PS- I also don't have manual temp range; it's just auto and lock.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 03, 2015, 08:50:17 am
[...]
In native 2.3.0 you can get to the menu but cannot change selection. If we could find a way to unlock that menu that would be great.

Just a thought for a workaround:
You were able to set the image quality to 100 with those measuring spot preset files. Maybe it's possible to use this for RNDIS as well? Might not be the best solution but I think that would be still better than using FIF files all the time.
Something like: No spot = RNDIS+UVC, Center spot = UVC+MSD

In Set_RNDIS_Permanent.fif a new file with following commands is generated:
Code: [Select]
.system entry
.system.usbmode text "RNDIS"
So you should only have to add those lines to the preset files as you desire.

And in the ressource tree the following possible values are listed:
Code: [Select]
.system: (17)
[...]
rw--r---r---1p*2 root   root   <a> usbmode              "RNDIS_UVC"
                 ["RNDIS" "MSD" "UVC" "RNDIS_UVC" "RNDIS_MSD" "UVC_MSD" "RNDIS_UVC_MSD"]
[...]

I think there's a good chance this will work :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 03, 2015, 09:10:36 am
If you do not remember what the noise is you can put factory conf back and see it with rainbowHC.
I didn't touch all in conf file and you can test them all by telnet
When I connect it I give couple of DIR and then test this:
rls .caps.config.image.targetNoise
rls .caps.config.image.zoom
rls .caps.config.ui.fusion.PIP
...
and all other
But conf hack is tested successfully 100 times now... I think : )
I use Total Commander from it's beginning an it has built in file compare and ftp and... all things.
If I'm not sure I can always test my file in right window against camera ftp file in left window with
compare and see if they not the same.
So replace files in camera with ftp and compare with your factory backup if there is made something
extra files. If fif can't replace file it renames old and then adds new (how I too replace files what in use)
After that there is small chance with conf.cfc in ui.d directory. Delete it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 03, 2015, 11:16:19 am
Using 'preset_centerHotColdSpot.rsc' code instead of any other working *.rsc is fine but why not to find corresp menu icon?

Wonder where 'preset_*.rsc' file names are connected to ToolBar name="measure_*"?
One suspect is 'facet_ui_qml.dll'. It has some interesting strings inside:
facet_ui_qml.dll from 2.3.0
Code: [Select]
ID_AUTO_COLD_SPOT   Ic_MeasureToolPreset_SpotMinBox measure_spot_min_box   

ID_AUTO_DELTA_TEMP  Ic_MeasureToolPreset_DeltaTmeasure_delta_t 1addDeltaT(int, const QVariant&, const QVariant&)   1updateDeltaTRefTemp() 

ID_AUTO_DELTA_SPOT  Ic_MeasureToolPreset_DeltaS measure_delta_s

ID_THREE_SPOTS  measure_three_spots

ID_FIVE_SPOTS   Ic_MeasureTool_Spot3    .image.sysimg.measureFuncs.spot.5   measure_five_spots  userPresets noUserPreset   

ID_AUTO_HOT_SPOT    Ic_MeasureToolPreset_SpotMaxBox .image.sysimg.measureFuncs.mbox.1   measure_spot_max_box    caps.config.ui.measure.presetException  chino1  Ic_MeasureToolPreset_SpotCenter measure_spot_center

ID_NO_MEASUREMENTS  Ic_MeasureToolPreset_SpotHide   measure_spot_hide   

compare it to facet_ui_qml.dll from 1.18.7:
Code: [Select]
ID_AUTO_DELTA_TEMP  Ic_MeasureToolPreset_DeltaT measure_delta_t 1addDeltaT(const QVariant&) 2triggered(const QVariant&) 1updateDeltaTRefTemp()  2selected()

ID_AUTO_DELTA_SPOT  Ic_MeasureToolPreset_DeltaS measure_delta_s

ID_AUTO_CENTER_HOT_COLD_SPOT    Ic_MeasureToolPreset_MaxMinCenter   measure_spot_cold_spot 

ID_AUTO_COLD_SPOT   Ic_MeasureToolPreset_SpotMinBox measure_spot_min_box   

ID_AUTO_HOT_SPOT    Ic_MeasureToolPreset_SpotMaxBox .image.sysimg.measureFuncs.mbox.1   measure_spot_max_box   

ID_CENTER_SPOT  Ic_MeasureToolPreset_SpotCenter measure_spot_center

ID_NO_MEASUREMENTS  Ic_MeasureToolPreset_SpotHide   measure_spot_hide   

ID_TOOLBAR_MEASUREMENT  Ic_MeasureTool_Spot measurementMenu

This can explain why 'measure_spot_cold_spot' doesn't work anymore when used in 'toolbar-config.xml'. Any ideas where to look? May be one knows good resource viewer to look inside those *.dlls for icons? If they stored as bitmaps it could be possible copy-paste icons from 1.x.x file to 2.3.0 file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on January 03, 2015, 03:01:34 pm
Sky, is that lack of a space between DeltaT and measure in the 2.3.0 file on the line ID_AUTO_DELTA_TEMP  Ic_MeasureToolPreset_DeltaTmeasure_delta_t .... in the original file, or did that accidentally get inserted in the copy/paste?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 03, 2015, 03:25:02 pm
I have a problem with the camera Flir E4. 2.3.0 I deleted a file by mistake common.dll.dll.
At this time, the camera shows only the logo and nothing else. Is there any possibility to
save the file in the system? Earlier I made a backup of the system but I can not upload.
Is there any chance to run the camera?
Good if you have backup. Some files you can restore with 2.3.0 update from flir.
If you have files use ftp with
user:   anonymous
psw:    NcFTP@
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mariuszko on January 03, 2015, 03:33:46 pm
Many thanks for your reply it all works  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 03, 2015, 03:56:59 pm
Sky, is that lack of a space between DeltaT and measure in the 2.3.0 file on the line ID_AUTO_DELTA_TEMP  Ic_MeasureToolPreset_DeltaTmeasure_delta_t .... in the original file, or did that accidentally get inserted in the copy/paste?

Suppose I accidentally removed space there while making text readable. In fact it is not space but 0x00 delimiter in 'facet_ui_qml.dll'. You may open the file in any hex editor and check it by yourself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2015, 05:49:41 pm
Just a thought for a workaround:
You were able to set the image quality to 100 with those measuring spot preset files. Maybe it's possible to use this for RNDIS as well?

Yes i thought of this workaround before, have not tried it yet but should work.

RNDIS_UVC_MSD mode did not work and bricked my camera. I eventually reset the camera to factory default and reinstalled flir device drivers, one these or both gave me a ftp access again so i could delete the offending file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 03, 2015, 08:58:49 pm
As you noticed I didn't get "pip small" working. All is there except here
.ui.setup.fusion.PIPsmall
file contains data - ui_pipfusion.rsc
in here it is - .registry.ui.setup.fusion.PIPsmall
May be there is solution somewhere?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 03, 2015, 09:10:16 pm


This can explain why 'measure_spot_cold_spot' doesn't work anymore when used in 'toolbar-config.xml'. Any ideas where to look? May be one knows good resource viewer to look inside those *.dlls for icons? If they stored as bitmaps it could be possible copy-paste icons from 1.x.x file to 2.3.0 file.

In post #888 and #910 are some files to download that are decrypted for use with earlier firmware. In this files are also icons.
I think these files are also used by Janekivi.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 03, 2015, 09:27:01 pm
I remember my first post here... it was like a yesterday : )
I got my files from here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg541860/#msg541860 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg541860/#msg541860)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 03, 2015, 09:31:43 pm
[...]
RNDIS_UVC_MSD mode did not work and bricked my camera. I eventually reset the camera to factory default and reinstalled flir device drivers, one these or both gave me a ftp access again so i could delete the offending file.

This behavior has also been observed prior to firmware 2.3.0 . Even I tried it a while ago with my camera (fw 1.19.8 ) and it didn't work. It seems to be some kind of driver issue or incompatibility with the cam itself. Was no big deal back then but if the USB menu isn't working then it is of course.

I try to look into the USB menu tomorrow. Maybe I can find something. The menu itself is there, the commands for setting the USB mode are working, so there only can be a link missing between those two.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 03, 2015, 09:51:04 pm
Does anybody know the difference between this and the good old Taucher menu mod done on the FW 1.19.x?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)

To answer my own question, for people like me who got the resolution hack on the FW 1.19.x, installed the Taucher menu and then disappeared as happy customers do, see below....

It seems those guys here are now light years beyond the point I stop to follow this thread (Feb 2014).
Now there is for example a 3 spots measurement which I didn't see in the Taucher menu see here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg575788/#msg575788 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg575788/#msg575788)

also a funtion which set the stored jpeg quality seems pretty atractive. It looks like the Dragon janekivi took the Exx config files and then shaped them to fit pefectly an E4 to get many super powers I don't even know.

Tempted to undo the resolution hack to the FW 1.19.x, upgrade to 2.3.0 and then get all the new goodies you bastards created (still trying to find out the official way to do that). I am scared to death to brick my unit thow, I hope the old HW 1.0 will survive the upgrade to 2.3.0, without any collateral effect.

Thanks for let me read/skim over the 1000 (and increasing) pages I overlooked.

What a beautiful mess, what will be the end of this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on January 04, 2015, 04:50:06 am
zucca, much of the progress on 2.3.0 has been accomplished by Janekivi in the last 30-45 days, before then about all we had was the resolution hack, and some extra color pallets.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Justanotherguy on January 04, 2015, 09:00:10 am
zucca, much of the progress on 2.3.0 has been accomplished by Janekivi in the last 30-45 days, before then about all we had was the resolution hack, and some extra color pallets.

In my opinion, the resolution is like 99% of the useful function for me, the rest is like topping on the cake. Don t misunderstand me, I agree Janekivi has done great work (true "hacking", thank you for menu hacks removing flir logo and extra pallets). I don't need anything else as I am using camera mostly with extra lens (see my earlier post).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 04, 2015, 09:48:54 am
I keep reso hack separated from my menu hack and this is like a tribute for his work.
I could incorporate it but no. And you can use it separately.
This is good self control if you don't download my menu addon!  :-+
As I said there is by default 1372 different combinations of use now and you can
make more from 3 spot preset: 5 spot,  14 spot, hot cold spot and so on...
and sometimes there is something useful to see what's going on with your object.

And yes, this menu makes better toy from it and now here is more stuff for playing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: thekoos on January 04, 2015, 04:24:29 pm
Does anyone have a link to a copy of the E4 hack "v02.zip" for Version 2.3.0 file?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 04, 2015, 11:03:33 pm
For anyone interested in thermal calibration references (Black Bodies) I have uploaded some pictures of the inside of an IsoTech plate radiator Black Body here:

https://www.eevblog.com/forum/testgear/thermal-camera-black-body-calibration-check-source-inside-the-isotech-988/msg580476/#msg580476 (https://www.eevblog.com/forum/testgear/thermal-camera-black-body-calibration-check-source-inside-the-isotech-988/msg580476/#msg580476)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 05, 2015, 02:27:06 pm
-you need restartapp.bat from old software
(in telnet I must type first command to introduction and after second
command all working and I can't reuse that command, I must retype it)

Dear janekivi
I have restartapp.bat from 1.18.7 and
1. it fails to start 'prodapp.exe' as there is no such file anymore
2. it fails to terminate appcore process
3. it end with 'libpng error: [20][20][20][20]: invalid chunk type'
4. most of the time camera hangs after execution of the batch file

Would you mind to post your version of restartapp please?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 05, 2015, 04:34:34 pm
I don't know where I got my wersion but with it I done... may be 2014 restarts for this menu hack
Any error you may see with it is not a problem. Shorter delay is not working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 05, 2015, 06:55:16 pm
@sky
There is stopapp. bat file on the camera , you could try replacing the processes list in janelivi's file with what is in there. And remove prodapp line. Pls let us know if worked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gozi on January 05, 2015, 07:22:52 pm
Hi!
I need big help!
I have a Flir E4 device. Firmware 2.3
Accidentaly I deleted the content of the FlashBFS/System folder through FTP.
Since then I can't connect through FTP and the camera - of course - not working.
All I can do is to switch it to RNDIS mode.
I don't have any backup files for the device.
How could I fix my problem?
Could someone help me please?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 05, 2015, 07:40:45 pm
This is not big problem
(there can be bigger problems : ) )
Download this and run fif with FLIRInstallNet
FLIR Ex (2.3.0) Update Pack  (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.3.0_update_pack.zip)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gozi on January 05, 2015, 08:26:02 pm
Thank you very much for your help! You've saved my life.  :D
(Upgrade is progressing...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 05, 2015, 08:35:54 pm
After that you have factory common_dll.dll but conf.cfc is... what it was...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jfields on January 06, 2015, 12:02:35 am
Hi there. I am a newbie and didn't mean to double post, but it seems the Newbie Q&A thread is not as active as this one.
I am about to purchase an E4B and I would like to know if it can be hacked the same way as the E4. Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 06, 2015, 02:42:59 am
maybe I'm just tired, or a stupid noob, but I'm not having any luck
I run: FLIRInstallNet
browse to: Set_RNDIS_temporary.fif
Click: Run FiF

Then get:

Quote
Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Camera command usbfn RNDIS


Timeout waiting for camera response
Camera update completed

Ok


as the output.

I but when I open a command window and run ipconfig, this is what I get:

Quote

C:\Users\T>ipconfig

Windows IP Configuration


Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Tunnel adapter Local Area Connection* 12:

   Connection-specific DNS Suffix  . :
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6abd:2d:bc3:3f57:fffb
   Link-local IPv6 Address . . . . . : fe80::2d:bc3:3f57:fffb%5
   Default Gateway . . . . . . . . . : ::

Tunnel adapter isatap.{7581A323-7EC1-47C1-AAD5-038726D03316}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

C:\Users\T>
no luck finding it or connecting with ftp


FWIW, I'm using win 8.1

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 06, 2015, 04:33:09 am
Dunno if this is your problem, but a while back I posted my solution to a somewhat similar problem, one that several others seem to have had with Win7/8: Windows Firewall. In my case, With Win7, although I'd already given permission to access that subnet, and to the Winderz FTP app to access that subnet, A SECOND ENTRY for Winderz FTP (that hadn't been there before) magically appeared during hack attempts, and finally when I gave permission to this second entry for Winderz FTP everything worked. So, MAYBE this is the realm of your problem, a security/permissions issue? :-//

(I've been a tuxer since 2009/WinXP and only have one Win/MSFT box running "just in case" so it'd be better if those much more familiar look into this.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 06, 2015, 05:04:25 am
Quote

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Is that what the camera configures or this is your computer's LAN? Disconnect the camera  and run ipconfig again. If the above address stays , it is your computer's IP and your router IP, try powering off the router and reconnect the camera.
Best though is to use a XP computer or virtual machine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on January 06, 2015, 05:23:46 am
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gozi on January 06, 2015, 08:42:05 am
Dear Janekivi,
The resolution and menu hack was succesful. It's beautiful. Thank you for your help!
 :clap: :clap: :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 06, 2015, 09:02:49 am
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?

See my post #6302 what it should be
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lofitohifi on January 06, 2015, 10:41:38 am
Got my E4 yesterday with the zoro 30% discount
1.2L V 2.30
After 1hr the resolution hack was perfectly working.  ^-^
Thanks for all your work and information!! :-+
(Didn't dare to work on menus yet)

edit:
Menu now installed - perfect  -  thanks janekivi!! :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 06, 2015, 04:30:51 pm
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?
This is normal when you do not apply correctly conf.cfc patch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on January 06, 2015, 07:45:59 pm
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?
This is normal when you do not apply correctly conf.cfc patch.

No errors were shown and it did appear successfully updated.
Do I have to get my backup "conf.cfc" and try again?  Will this cause any errors since it has already been applied.

Is there anything else I need to do before I reply the menu?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on January 06, 2015, 08:52:04 pm
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?

I had the same experience when I used conf.cfc from hi-res hack backup (from Python backupxxxx folder) instead of conf.cfc from camera. So I reapplied hi-res hack and then got right conf.cfc from camera for janekivi Python script.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 06, 2015, 08:55:52 pm
Simple situation when conf allowing only one spot

rls .caps.config.image.sysimg.measureFuncs.spot.maxCount

You must miss something more in menu too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on January 06, 2015, 09:14:45 pm
Just added the new menu hack and when selecting 3 spots nothing really happens.  The circle target is a little to the left on the screen as if it's stuck.  Is that normal?

I had the same experience when I used conf.cfc from hi-res hack backup (from Python backupxxxx folder) instead of conf.cfc from camera. So I reapplied hi-res hack and then got right conf.cfc from camera for janekivi Python script.

I used the "conf.cfc" from the camera with the hack res applied not the one which Python created in backup folder.  I believe the one that's in the backup folder is the original one from Flir.

In my case it must be something else I did wrong along the way.

Damn so close. :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: blaster on January 07, 2015, 03:02:59 am
This is interesting I retraced my steps and I found out that I used my "conf.cfc" which didn't have the res hack. |O
After trying one more time I finally got it to work.
Below is the installation being completed successfully.

Connected
Installation started...
Adding /FlashBFS/system/arctic.pal
Adding /FlashBFS/system/lava.pal
Adding /FlashBFS/system/rainhc.pal
Adding /FlashBFS/system/bootlogo_legal.bmp
Adding /FlashBFS/system/appcore.d/factory.d/ui_control.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_centerHotColdSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_centerspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_coldspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_deltaSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_deltaTemp.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_fiveSpots.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_hotColdSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_hotspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_nomeasure.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_threeSpots.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_twoHotSpots.rsc
Adding /FlashBFS/system/ui.d/toolbar-config.xml
Adding /FlashBFS/system/ui.d/design_ui.xml
Adding /FlashBFS/system/ui.d/facet.rcc
Process local command: SHOW "Camera will now restart",7
User selected YES
Camera command restart
Close TELNET link
Process local command: DISCONNECT
Disconnecting...
Camera update completed

Now it works and thanks to janekivi for helping me out and all his hard work and other that pinched in.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2015, 03:26:00 am
Another step accomplished - .rcc is extracted  ;D

deRcc attachment is the code used to unpack - repacking should work somehow like that

Thanks. Also, typo in instructions. That should be qmake -project && qmake && make (not -profile).


Can someone help compile this and post back a ready to use executable?

I did use debian/ubuntu and did use apt-get to install the QT-development environment - It didn't make sense to setup the whole stuff on windows too (just to make a binary for unpacking a file that needs unpacking just once).

Qmake is from the QT-development env - so as soon as you have a working QT development environment set up, then you can make use of the code. Hope that helps a bit.

(yes, I read backlog and know this is "ancient")
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2015, 03:45:57 am
I need help. I don't know yet anything about files I am using. These are from first 2.3.0Menu_Upgrade.zip
They are smaller than inside ADDMENU-BETA3. Who made them or who can make them? I can't use
ADDMENU-BETA3, in 2.3.0 camera picture is black. But something I can't do here. That manual temp
scale is fighting back. And there is black holes in conf.cfc files. What might be after
.caps.config.image.zoom.maxFactor double 8 to the # IDXXXXXX? Somehow PIP too is not cooperative
with me... Or something is blocked in UI/conf.cfc whose contents I have no clue... yet
All other stuff might be done in near future.

I believe Taucher was the guy who did the magic on the first menu patch. Haven't seen too many posts from him
as of late, hope he is still out there!! Nice work BTW Janekivi!!
Yep and thanks - menu goes on me, but the real work was done by FLIR - they just disabled stuff in order to make the Ex product less attractive (what a design goal ... market segmentation bulls***) ... I've just suspected that if they crippled the resolution, then they probably had crippled other functions as well... and guess what - so it was.
The most troubling parts were the missing preset files because it seems the multi-spot-programs were constructed in a somehow exotic fashion - caused lots of lockups until that cause was identified.
There's also the "advanced measurement" mode where one can define boxes and stuff.. but that's even worse (crashy) and more intended for cameras in static setups and industrial applications (measure average of surface and similar tasks)...

Regarding manual scale: I've read in the update notes that Flir factory-enabled this in the E8 branch ... so it could be tied to the device-string or product-string in newer firmwares... there is direct binary access to the res-tree from within the running binaries - wouln't be hard for Flir to implement a mechanism to override any config files on boot this way.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 07, 2015, 03:56:57 am
Actually there is 1372 different combinations of use now.
4 - Image mode
7 - Measurement
12 - Colors (Gray and White hot is the same but you want always "more" : ) )
4 - Zoom

Does anybody know the difference between this and the good old Taucher menu mod done on the FW 1.19.x?
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)

Flir did change the firmware to increase protection/checksumming/encryption of the config files, they have removed some entry-vectors - and as far as I can tell there were also some changes made to internal data-structures (res-tree incl. names).

If you don't have 1.x firmware running then just don't bother with the older files unless you're trying to understand about some historic inner workings of the camera - but be aware of internal structural changes between the FW releases.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: arekm on January 07, 2015, 02:48:53 pm
Hi there. I am a newbie and didn't mean to double post, but it seems the Newbie Q&A thread is not as active as this one.
I am about to purchase an E4B and I would like to know if it can be hacked the same way as the E4. Thank you!

Here E4B is almost 1/5 cheaper than regular E4... Unfortunately I didn't find any information about hacking state of E4B, too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 07, 2015, 03:17:25 pm
I think I use other menu files for this year release.
Must learn unpacking and packing.
Small peek in 2015 menu for 2.3.0 E4
How to edit saved images.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on January 07, 2015, 04:40:27 pm
janekivi TUNING
:-)
Super
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 07, 2015, 04:55:27 pm
I have here Ic_Colorize_PalettePredator_Def.png
You remember this film... Schwarzenegger... Minigun = no forest
Where I can get this palette? Or can someone make this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 07, 2015, 06:09:12 pm
I think I use other menu files for this year release
We want, as Billy Gibbons of ZZ Top said, "the old stuff, the new stuff, and everything in between"
 :D
Quote
Small peek in 2015 menu for 2.3.0 E4
Please tell us this all works
 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 07, 2015, 06:22:11 pm
Sometimes I can move added box and sometimes no.
Arrows are reserved to scale which is manual by default or something...
Centering working always, and other buttons too - cancel, save, delete, select...
If I holding down archive button it forces camera to Calibrate.
I think there is possible to use some button for my "zoom popup" idea...

In Exx you must hold finger on touch.
That table adding to image is working too but... touch screen keyboard...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 07, 2015, 08:08:49 pm
If you don't have 1.x firmware running then just don't bother with the older files unless you're trying to understand about some historic inner workings of the camera - but be aware of internal structural changes between the FW releases.

Taucher! Good to see you again! Let me put it in a easy way. Did you upgraded your HW1.0 E4 to the 2.3.x FW? If not do you believe it is possible without getting stuck with the low resolution for the rest of my days?

The new janekivi menu looks attractive... and my mouth is watering...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Prodigy on January 07, 2015, 08:20:28 pm
[...]
In native 2.3.0 you can get to the menu but cannot change selection. If we could find a way to unlock that menu that would be great.

Just a thought for a workaround:
You were able to set the image quality to 100 with those measuring spot preset files. Maybe it's possible to use this for RNDIS as well? Might not be the best solution but I think that would be still better than using FIF files all the time.
Something like: No spot = RNDIS+UVC, Center spot = UVC+MSD

In Set_RNDIS_Permanent.fif a new file with following commands is generated:
Code: [Select]
.system entry
.system.usbmode text "RNDIS"
So you should only have to add those lines to the preset files as you desire.

And in the ressource tree the following possible values are listed:
Code: [Select]
.system: (17)
[...]
rw--r---r---1p*2 root   root   <a> usbmode              "RNDIS_UVC"
                 ["RNDIS" "MSD" "UVC" "RNDIS_UVC" "RNDIS_MSD" "UVC_MSD" "RNDIS_UVC_MSD"]
[...]

I think there's a good chance this will work :)

Hi guys,
My first post here and I think it might save you all some time.
instead of loading/unloading any temp or permanent RNDIS FIF file, try holding the right button while powering up your camera from a cold state, this will take you straight into RNDIS mode  ;)
Good luck
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 07, 2015, 10:14:14 pm
I can't set usb mode in hidden menu.
But I captured this video from usb after some hacking.
With phone cam it was bit fuzzy
E4 2015 beta menu (http://wikisend.com/download/551856/2015_B_O.1.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on January 07, 2015, 10:26:59 pm
Hi guys,
My first post here and I think it might save you all some time.
instead of loading/unloading any temp or permanent RNDIS FIF file, try holding the right button while powering up your camera from a cold state, this will take you straight into RNDIS mode  ;)
Good luck
you welcome,

nice... I never noted this before. I tried it with my 1.19.8 Camera and it brings the camera in the Black-Screen-Mode (RNDIS is active, no Password, Files in FlashBFS are not in use...).
Good to know  ^-^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 07, 2015, 11:12:16 pm
Wow Janekivi,
if you make something, you make it perfect.  :-+
It looks like you did something wonderful again.
The E4 is turned into an E.....9.....10...11?
 ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 08, 2015, 01:36:16 am
This is for anyone else out there who may not have played with one of those focus tools people were making early in this thread... I had one made and shipped to me today... WOW my focus was significantly off from the factor! My outdoor images are razor sharp now compared to what they used to be. For anyone else out there I can say you might end up like me and have a camera with significantly messed up focus and not even really know it. It was totally worth the $12 it cost me to have one of these printed it's almost like it's own resolution hack by itself!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 08, 2015, 02:32:15 am
@Emoticon,

Have you read my E4 Useful information thread ?It includes some comment on the E4 focus point. Fixed focus simple lenses as used in the E4 are a compromise between sharp focus in the near and far field. You may well have had a poorly set lens but have you checked the focus at the specified minimum focus distance ? It is possible to set a sharp focus at infinity and totally mess up the lens focus at closer distances.

I hope you have achieved an improvement in your cameras focus but it is worth checking for negative effects of such a 'tweek'.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 08, 2015, 03:20:54 am
instead of loading/unloading any temp or permanent RNDIS FIF file, try holding the right button while powering up your camera from a cold state, this will take you straight into RNDIS mode  ;)
Good luck

Thanks for the information. I could not get it to work though on my 2.3.0, but may be I am doing it wrong. I can see the black screen and the camera seems to go to RNDIS but does not activate a proper IP. Can you give a bit more details as to what the cold state is and if a USB cable should be connected or not when doing this. Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 08, 2015, 03:23:56 am
My outdoor images are razor sharp now compared to what they used to be.
Why don't you post a couple of them, thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 08, 2015, 01:06:42 pm
Btw - I'm still lacking time, but this might be worth an investigation:
http://hackaday.com/2013/11/17/getting-a-shell-on-any-android-device/ (http://hackaday.com/2013/11/17/getting-a-shell-on-any-android-device/)

-> changing the sense-resistor and checking out if the Ex starts showing something else... a serial console (despite it's winCE and not android) would be awesome, but as there are internal pins I somehow doubt they did that... but heh - who knows!

Edit: link to whitepaper:
http://greatscottgadgets.com/infiltrate2013/ossmann-osborn-bhusa2013-whitepaper.txt (http://greatscottgadgets.com/infiltrate2013/ossmann-osborn-bhusa2013-whitepaper.txt)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 08, 2015, 01:41:47 pm
If you don't have 1.x firmware running then just don't bother with the older files unless you're trying to understand about some historic inner workings of the camera - but be aware of internal structural changes between the FW releases.

Taucher! Good to see you again! Let me put it in a easy way. Did you upgraded your HW1.0 E4 to the 2.3.x FW? If not do you believe it is possible without getting stuck with the low resolution for the rest of my days?

The new janekivi menu looks attractive... and my mouth is watering...
Thx - I kept my camera at the unencrypted firmware (never touch a running system).
I'm happy to see there's additional functionality coming with janekivi's menu (editing) ... will take a look at backporting that if the older firmware provides that functionality and just needs it enabled... my top target would still be video recording but that seems to rely on the (crashing) media-server...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 08, 2015, 05:09:49 pm
@Emoticon,

Have you read my E4 Useful information thread ?It includes some comment on the E4 focus point. Fixed focus simple lenses as used in the E4 are a compromise between sharp focus in the near and far field. You may well have had a poorly set lens but have you checked the focus at the specified minimum focus distance ? It is possible to set a sharp focus at infinity and totally mess up the lens focus at closer distances.

I hope you have achieved an improvement in your cameras focus but it is worth checking for negative effects of such a 'tweek'.

Aurora

I use my camera at more that 4 feet and further about 99.9% of the time, so this woks much better for me. I used an awl to make a dent in the outside of the adjustment ring at the factory setting so it doesn't effect the baffling and influence the image in any way. Anyway all I have to do is line that mark up with the top of the ring and I'm right back to the original setting whenever I want. I have also not noticed a significant difference in temp readings.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 08, 2015, 05:23:14 pm
A good result for you then  :-+ ..... I will have to play with mine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on January 08, 2015, 06:17:03 pm
@Emoticon

I have also not noticed a significant difference in temp readings.

Could you elaborate on "significant"? Is it just the spot values which are out because the refocussing has focussed the heat spots better onto the camera or something else? Similar to the fact that improved resolution gives more accurate results?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 08, 2015, 07:05:01 pm
@Emoticon

I have also not noticed a significant difference in temp readings.

Could you elaborate on "significant"? Is it just the spot values which are out because the refocussing has focussed the heat spots better onto the camera or something else? Similar to the fact that improved resolution gives more accurate results?

I don't have the known calibration heat source to be able to say the exact difference it made, but the focus tool that I had made allows the camera to see through it while you focus. In adjusting the focus with the camera in a rubber jaw vise I did not see a temperature fluctuation of more than 1 degree F on the center spot in either direction while finding the sweet spot on my particular camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 08, 2015, 10:51:07 pm
instead of loading/unloading any temp or permanent RNDIS FIF file, try holding the right button while powering up your camera from a cold state, this will take you straight into RNDIS mode
I could not get it to work though on my 2.3.0, but may be I am doing it wrong. I can see the black screen and the camera seems to go to RNDIS but does not activate a proper IP.

I haven't even been able to get the black screen on my 2.3.0; the camera just comes up as normal. :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 08, 2015, 11:31:43 pm
When I connect it I give couple of DIR and then test this:
rls .caps.config.image.targetNoise
rls .caps.config.image.zoom
rls .caps.config.ui.fusion.PIP

Three times now I've rolled back to factory and installed resolution hack, then latest menu hack, but the above returns no results.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 09, 2015, 04:02:13 pm
You must connect to camera with telnet, PuTTY,
192.168.0.2 port 23 no login no password
I type then "dir" because first answer I get is always "Bad command..."
and if I press up arrow to reuse typed commands, the first command is not reusable,
I must retype it... always.
If you get answer like "Bad command or filename" to rls command or other
you must turn camera on, retype the command and don't forget restart
sometimes... this is windows.

Something like this is successful hacks:
Code: [Select]
Welcome to the Windows CE Telnet Service on IRCAM9646

FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>dir
Bad command or filename

\>rls .caps.config.image.targetNoise
enabled                     true
targetNoiseMk                  0

\>rls .caps.config.image.zoom
enabled                     true
maxFactor                      8

\>rls .caps.config.ui.fusion.PIP
enabled                     true
locked                      true

\>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 09, 2015, 04:30:05 pm
Thx - I kept my camera at the unencrypted firmware (never touch a running system).

Alles Klar, I will do the same then. If someone will upgrade an HW 1 to FW 2.3.0 please post the result.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 09, 2015, 05:25:50 pm
and if I press up arrow to reuse typed commands, the first command is not reusable,
I must retype it... always.

Weird.... Up key works for me fine in Putty
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 09, 2015, 05:28:54 pm
On the side, if you need good gloves for very very cold temperature there is an amazing deal right now:

https://www.eevblog.com/forum/buysellwanted/fs-%28uk%29-cryogenic-gauntlets-%28size-9%29/msg583537/#msg583537 (https://www.eevblog.com/forum/buysellwanted/fs-%28uk%29-cryogenic-gauntlets-%28size-9%29/msg583537/#msg583537)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 09, 2015, 10:15:46 pm
Now I digging and mining in menu files and found cool stuff for adding but some strings are confusing:
ID_SETUP_SAVE_IMAGE_RESOLUTION_SUPER_BRIEF IMAGE_RESOLUTION_SUPER
ID_SETUP_SAVE_IMAGE_RESOLUTION_NORMAL_BRIEF IMAGE_RESOLUTION_NORMAL
but .ui.userSettings.saveImageResolution is integer and default it is 0
What is this?

And some finds. Preview is allowing to edit image before saving and second trigger press saves it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 09, 2015, 10:53:40 pm
Now I digging and mining in menu files and found cool stuff for adding but some strings are confusing:
ID_SETUP_SAVE_IMAGE_RESOLUTION_SUPER_BRIEF IMAGE_RESOLUTION_SUPER
ID_SETUP_SAVE_IMAGE_RESOLUTION_NORMAL_BRIEF IMAGE_RESOLUTION_NORMAL
but .ui.userSettings.saveImageResolution is integer and default it is 0
What is this?
That seems to be another menu for setting up save image resolution but heck knows what that means. I was able to get it into the settings menu and ID_SETUP....  thingies resolve to the text labels on the left side of the menu and IMAGE_RESOLUTION... thingies resolve to Super and Normal options on the right side,  and they are accordingly 1 and 0 numerals in ui.userSettings.saveImageResolution but same as with USB options i can see them but cannot change them from the menu. Also not clear what their meaning is, they do not affect JPEG quality setting if changed via telnet rset. I can see this image resolution setting changing in the menu when i set it via telnet. I tried to compare full rls resourse tree with this set to Super and then to Normal but could not figure out what it did.

Quote
And some finds. Preview is allowing to edit image before saving and second trigger press saves it.
That is kool !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 09, 2015, 11:07:54 pm
Cool???
You haven't seen nothing yet...
I upload little video for you : )

http://wikisend.com/download/260172/2015_B_O.2.avi (http://wikisend.com/download/260172/2015_B_O.2.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 09, 2015, 11:45:28 pm
You have been very busy.  :)
It looks like you have implanted FlirTools into the camera. 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on January 10, 2015, 12:20:10 am
 :o

How much stuff is tucked away in there?!

Great work, janekivi!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 10, 2015, 12:26:04 am
@janekivi,

Very clever work indeed.

I am a firmware 1.19 user and was satisfied with the improvements made with the original resolution and menu upgrades. I still am but it is very interesting to see what you are achieving with your changes to the E4.

You have provided options that are on my high end cameras and they look good too. An E4 with a supercharger  ;D

Most impressive I must say  :-+

Now to go back in this thread and read how you are achieving such excellent improvements on a camera that was not supposed to be upgradeable without a great deal of encryption manipulation  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 10, 2015, 12:28:20 am
Cool???
You haven't seen nothing yet...
I upload little video for you : )

http://wikisend.com/download/260172/2015_B_O.2.avi (http://wikisend.com/download/260172/2015_B_O.2.avi)
Impressive! Looks alot different than the menu hacks I am used to in 1.22 :D I'll have to check with Evan from TEquipment and see if he still offers the EEVBlog discount
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mtdoc on January 10, 2015, 12:36:40 am
very impressive Janekivi!.

Even though I barely tap the features in my originally upgraded E4 - I now have feature envy.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 10, 2015, 02:26:27 am
You haven't seen nothing yet...
I think Janekivi should see some bottles of champagne from everyone soon. :-+ :clap: O0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 10, 2015, 04:33:32 am
Cool???
You haven't seen nothing yet...
I upload little video for you : )

http://wikisend.com/download/260172/2015_B_O.2.avi (http://wikisend.com/download/260172/2015_B_O.2.avi)

FYI If you record video with virtualdub you can get 15fps video recordings, I think VLC Player is also capable of it too. Great job BTW!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 10, 2015, 05:16:49 am
I believe that you can set the frame rate to cap at 15 FPS but your still only getting 9 FPS of valid data. To get more then that some one would have to look into unlocking the frame rate witch has been avoided so far due to not wanting to raise legal issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 10, 2015, 07:48:54 am
Those videos I made with WinXP and Mediaplayer Classic.
I select there video "320x240 3.75" - is this fps? There no other options.
Then xVid MPEG-4 and they are small enough but may be I find other
software what is working for me and have more options.

And Ic_MeasureTool_ProfileGraph had wrong name in rcc, I repack it.
This is Graph icon for line. May be I'm digging in wrong place. I took
Exx software, may be I must get something from upper end.

What camera have cool stuff without need for touch screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 10, 2015, 05:15:26 pm
some strings are confusing:
ID_SETUP_SAVE_IMAGE_RESOLUTION_SUPER_BRIEF IMAGE_RESOLUTION_SUPER
ID_SETUP_SAVE_IMAGE_RESOLUTION_NORMAL_BRIEF IMAGE_RESOLUTION_NORMAL
but .ui.userSettings.saveImageResolution is integer and default it is 0
What is this?
That seems to be another menu for setting up save image resolution but heck knows what that means.

Here is a screenshot
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 10, 2015, 05:23:12 pm
You remember my last video preview... actually, all this is working in realtime too.
And there is alarm with sound - there was place on board for buzzer?

Now I wondering here, you had all this and more easily available all the time
and nobody wasn't turn them on? They didn't talk to everyone?
(in nonencrypted machines)

But now I'm in trouble and must say goodbye to my hideGraphics
in Nomeasure preset because measure option is using this and after "Clear"
all is clear... and nothing you add there comes visible after that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 10, 2015, 05:45:56 pm
HideGraphics is not a big loss.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 10, 2015, 07:23:01 pm
More measurements is better than less or nomeasurement.... :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on January 11, 2015, 05:51:10 am
thanks janekivi for your hard work. New menu is working like a charm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 11, 2015, 08:58:20 am
Good but all my things is not working like I want...
Something I can do. For example all spots and boxes not movable always
but they can be deleted and you can add new and move this. And to settings
menu I can't add things I want. For example MSX focus value in
resource=".image.fusion.userDistance" is changeable
but how I can change .ui.userSettings.hideGraphics
to false or true?
http://wikisend.com/download/605102/2015_B_0.3.avi (http://wikisend.com/download/605102/2015_B_0.3.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 11, 2015, 10:31:45 am
For example all spots and boxes not movable always

You may be stretching the camera beyond its capabilities
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 11, 2015, 12:07:51 pm
Ok! Thanks for hint.
I found from T6xx software some needed stuff to add.
This is expanding my playground.
Give more hints and do your own experiments too.  :-+

It have .caps.config.image.services.store.superResolution.enabled
for IMAGE_RESOLUTION_ULTRAMAX :(

(But I stole from it "TimeLapse". Saves images after time you set, min 15 sec.
And I can rotate stuff on screen now. Don't tell to anybody)

Yeah... and what you think, how big in T6XX all icons and other stuff is... logo is half of screen
Where I get igons I need or how to resize?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 11, 2015, 08:42:53 pm
In post #888 and #910 are some files to download that are decrypted for use with earlier firmware. In this files are also icons.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2015, 04:43:27 am
:-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Garball on January 12, 2015, 04:59:00 am
So I've read about 20 pages of the blog and it's really hard to know what to do because instructions are spread over 430 pages. I want to buy a new E4 but it would be great if there was a sticky for the latest up to date instructions (unless I'm missing something). I'm technically ok with UNIX and have a Windows 7 laptop somewhere.

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mamalala on January 12, 2015, 05:27:20 am
:-DD

I'm wondering if it would be possible to simply add a touchscreen overlay to the display? I mean, does the processor have the pins for that exposed or on a (unpopulated) connector somewhere?

Greetings,

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2015, 06:35:30 am
May possibly have a switch in the software somewhere to allow using E4 hard keys. Will keep looking
 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2015, 06:51:00 am
So I've read about 20 pages of the blog and it's really hard to know what to do because instructions are spread over 430 pages. I want to buy a new E4 but it would be great if there was a sticky for the latest up to date instructions (unless I'm missing something). I'm technically ok with UNIX and have a Windows 7 laptop somewhere.

Thanks.

Be realistic, nobody will sit and dig through 400 pages to write instructions for you and then keep them current , since you want "the latest up to date". How do you expect one to do this.
But i will make it easier for you- all necessary information for a new e4 is in the last 50 pages. I did not read the whole thread either.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 12, 2015, 02:37:11 pm
There was table and I can select data to table and save but... touch
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg582236/#msg582236 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg582236/#msg582236)
Now I disabled it and have there "Sketch". Pen is useless but I can add markers.
For recording I found "TimeLapse" and "Screening".
For Measuretools I found 2 "User Presets" - you can make them and save.
Advanced measuretools - Line have "Center and Rotate"
Alrms can be set.
About HideGraphics - clear screen - they have programmable button on some cameras
and this function can be set to it.

What I found out, there some things needs enabling in many places and many things.
With that video recording - I need help. I can't figure out that easily what I must enable
and set in resource. I need [rls -rl > \FlashIFS\allsettings-yourcameratype.txt] from
camera which have video, from EXX is good.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 12, 2015, 05:19:32 pm
I want to buy a new E4 but it would be great if there was a sticky for the latest up to date instructions (unless I'm missing something).
So, buying instructions...
There was info where is the cheapest deals but actually this is "Flir E4 Thermal imaging camera teardown" and we taking 2.3.0 software apart right now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on January 12, 2015, 05:40:23 pm
Here is instructions for resolution hack for 2.3.0. I am re posting this with a few edits to the original:

(originally posted by compet17)

STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)
-----------------------------------------------------------------------------------------

(If somebody finds an error in this procedure, please tell me immediately and I will correct it)

- Get FlirTools from Flir website (free download) PC version recommended (Note: V5 does not work on Win XP...)
Get 4.1 here:http://cdn.cloud.flir.se/update/flir tools/4.1.14066.1001/flir tools.zip (http://cdn.cloud.flir.se/update/flir tools/4.1.14066.1001/flir tools.zip)
- Install FlirTools on your PC
- Get the files "Set_RNDIS_temporary.fif" and "Set_RNDIS_permanent.fif" from this forum here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg531346/#msg531346).
- If you want to use the "permanent" file, you also need "remove_RNDIS_Permanent.fif"
   (Temporary.fif sets the USB of your cam to RNDIS mode UNTIL A REBOOT. Permanent does the same but it stays in RNDIS until YOU RUN   
     REMOVE.fif)
- Get E4 hack "v04.zip" for Version 2.3.0 here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297).
- I assume that the installation of FlirTools does also install the camera driver. If not install it manually. Links are found in this thread
- Get PYTHON version 2.x (not version 3.x!) from the Python website and install it. This is needed to run the hack script. It's a programming language.

- Connect your E4 via USB to your PC and turn it on
- Go to "Programs(x86)/Flir systems/Flir Tools/bin and execute FLIRInstallNet.exe (this is part of the FlirTools software installed in step 2)
- Select the Set_RNDIS_xxxxxxx.fif (permanent or temporary) and click RUN FIF button.
  (A timeout error is normal after the command has succeeded because USB is now set to RNDIS mode)
(On mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)
- Wait a moment and open a CMD window, then enter IPCONFIG
- An additional network connection should be listed with IP Address 192.168.0.1 and gateway 192.168.0.2
- Enter "FTP", then "open 192.168.0.2" and a connection to your cam should be established
- Login with user "flir" and password "3vlig"
- Issue a "dir" command and the files and directories of your cam are listed.
- If all that works, type "quit" to exit and close ftp connection.

- copy the hack files from the v04.zip into the PYTHON folder.
- open CMD, use the command cd and go into python folder and enter "python apply.py apply 192.168.0.2"
- it will read two files from your cam and stores them in a backup folder, then it will do some magic with the files.
- you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera.

- In case you get an error 500 at the upload, you have to upload the files manually by FTP:

*** Only in case of error 500 ***
- Open CMD and FTP again and connect to your camera as before
- go to the indicated folders (cd /foldername/foldername/foldername)
- check the folder with "pwd" to make sure you're in the right one
- Use the lcd command to change to your local directory where the conf and common files are.
- put the files to the correct folders (put filename)

MAKE SURE YOU PUT THE RIGHT FILES INTO THE RIGHT FOLDER!!!
***------***

- Reboot your cam by removing/inserting the battery
- Be happy!!!

- It is possible that the measuring spot is off center after reboot. Turn the spot off/on in the setup menu of the cam and it should be centered.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2015, 06:06:28 pm
gemrough,
Now expect them saying my zoom/pip/scale/whatever not working please help
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on January 12, 2015, 06:23:51 pm
gemrough,
Now expect them saying my zoom/pip/scale/whatever not working please help

LOL I know....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2015, 07:42:46 pm
...that is why a new person should go 50 pages back and read.

And it is not hard to do, two months ago i had no idea about the camera. By now i learned how to navigate through the file structure, learned some QML, had good start using information others posted, and now can try different  tweaks by myself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Garball on January 13, 2015, 01:53:14 am
Thank you Gemrough, I'm know this will help countless others too.  It would be great if the moderator could stick this into a sticky at the beginning if the post so it doesn't get lost.

And Bud, I'm a new poster here and appreciate your feedback. However, the great thing about organizing this information is that it's more likely to get used by others, including myself. Frankly I don't have time to read thru hundreds of posts and aggregate bits and pieces of instruction that may or may not work.

I'm buying my E4 from shop fluke.ca for $995 CAN. I suspect e price will go up 18% due to the Canadian dollar crash. Great deal if your buying in US dollars though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on January 13, 2015, 02:55:35 am
965$ at amazon.ca + free shipping. All in canadian $
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 13, 2015, 03:05:25 am
Frankly I don't have time to read thru hundreds of posts and aggregate bits and pieces of instruction that may or may not work.
Then you wont get your unit loaded with _all_ of the updates.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 13, 2015, 06:35:48 am
I really suggest doing some reading. The work that so many people have put into this thread is nothing short of amazing and really wont get the full use out of the unit unless you do.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 13, 2015, 08:27:51 am
Great picture, OrBy  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 13, 2015, 08:40:14 am
Thank you Gemrough, I'm know this will help countless others too.  It would be great if the moderator could stick this into a sticky at the beginning if the post so it doesn't get lost.

Already done
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ringmaster on January 13, 2015, 11:55:35 pm
Big thank you to janekivi and the other early guys who made this possible!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 14, 2015, 06:08:02 pm
This is great! Thanks to all and thanks for help.

But now I reached to the limits with  2015 menu for 2.3.0.
I have all kind of measurement tools and other stuff but turns out
the T4XX, T6XX and the others do not have them all at once.
Another thing I don't know is the resources - what is necessary for what.
Conf samples from older cameras in this thread is not usable, they changed
resource tree and my E4 missing many things at all.
And what we are missing -
video
panorama
all kind of stuff what asking touch screen or more buttons

We continue our work.

Experimental stage 04 and 05, all items you see in here is not working
2015_B_0.4.avi (http://wikisend.com/download/278622/2015_B_0.4.avi)
2015_B_0.5.avi (http://wikisend.com/download/727486/2015_B_0.5.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amator on January 14, 2015, 07:02:15 pm
I have done the e4-e8 resolution  "upgrade" for my flir E4B camera. Thanks for You and others.  It's working really great, the only think that make my unhappy is probably bad pixel, that wasn't visible before (in the lower resolution).
P.S.
It's not a bad pixel, but only dust behind the lens (inside the camera)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 14, 2015, 08:47:12 pm
Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?
(About measures: I have here custom spot and box max and "delta spot to box max")
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on January 14, 2015, 10:31:33 pm
Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?
(About measures: I have here custom spot and box max and "delta spot to box max")
To the first Question... yes... see Attachment -> Isotherm
In Resource Tree it is also possible, to setup an Email notification... but i cant get this working.

And about the second... i never seen this Display type before (meaning the Setting in the center below)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 14, 2015, 10:52:17 pm
My measurement boxes wasn't part of the question, they are just... part of the testing.
But now
I don't understand anything about signture stuff but stuck here with conf lenght.
I found out that he knows exactly where (I think) signature is beginning and I
can't write anything behind that point. I can delete signature and make conf
smaller but not bigger. So the conf size is limited... ( again  |O ).
And ui conf not accepted at all  :-//
After looking inside common_dll.dll I found rows
Code: [Select]
RSA1 blabla..............................................................................blabla
Any probable_VAL!   Hxdsf ekj6l-ja*k_mlxccUkmt+25,HqKWQxd   S T m p K e y C o n t   %02X    CFC
Code: [Select]
.text:001052E4     LDR     R1, =aHxdsfEkj6lJaK_ ; "Hxdsf ekj6l-ja*k_mlxccUkmt+25,HqKWQxd"is this some sort of key?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 14, 2015, 11:31:26 pm

Experimental stage 04 and 05, all items you see in here is not working
2015_B_0.4.avi (http://wikisend.com/download/278622/2015_B_0.4.avi)
2015_B_0.5.avi (http://wikisend.com/download/727486/2015_B_0.5.avi)

That's really a great toy with many possibilities.
You almost need a manual for it.  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 15, 2015, 01:14:56 am
has anyone gotten this to work in win8?

I've used FLIRInstallNet.exe,
Set_RNDIS_permanent .fif,
and now the flir tools is showing the camera as:"Local Area Connection - 169.254.239.1"
Windows control panel is showing "FLIR camera network device"
under the properties for it  shows
Quote
Connection-specific DNS Suffix:
Description: FLIR Camera Network Device
Physical Address: ?00-40-7F-0B-9E-DB
DHCP Enabled: Yes
Autoconfiguration IPv4 Address: 169.254.239.0
IPv4 Subnet Mask: 255.255.0.0
IPv4 Default Gateway:
IPv4 DNS Server:
IPv4 WINS Server:
NetBIOS over Tcpip Enabled: Yes
Link-local IPv6 Address: fe80::5dc8:1700:47a5:ef00%9
IPv6 Default Gateway:
IPv6 DNS Servers: fec0:0:0:ffff::1%1, fec0:0:0:ffff::2%1, fec0:0:0:ffff::3%1

It doesn't show up when running ipconfig, and I'm unable to ftp to the 169.254.239.0 ip.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on January 15, 2015, 01:23:05 am
Make sure your network adapter in your pc is set correctly. Try setting the adapters address to 169.254.239.100 and see if that helps  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 15, 2015, 02:06:50 am
Make sure your network adapter in your pc is set correctly. Try setting the adapters address to 169.254.239.100 and see if that helps  ;)

getting closer.
now ftp is telling me:

Quote
Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on January 15, 2015, 02:40:01 am
Go to the command prompt and try to ping the cameras ip address when it is connected. If pinging comes back failed you have something going on that is prohibiting communication to the camera. If this is something you have never done before, at the command prompt simply type ping "space" "cameras ip address".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 15, 2015, 12:05:36 pm
Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?
To the first Question... yes... see Attachment -> Isotherm
In Resource Tree it is also possible, to setup an Email notification... but i cant get this working.
This is working. You can change all in here:
.image.sysimg.measureFuncs.isotherm
Code: [Select]
.image.sysimg.measureFuncs.isotherm.1: (19)
rw--rw--rw--np*1 root   root   <b> active                     false
rw--rw--rw--np 2 root   root   <a> attr               "transparent"
                 ["solid" "transparent" "unchanged" "linked"]
rw--rw--rw--np 1 root   root   <i> calcMask                    0x14
                 [0x0, 0x14]
r---r---r---1- 0 root   root   <a> changed                   "TEMP"
rw--rw--rw--np 2 root   root   <a> color                     "blue"
                 ["palette1" "palette2" "red" "green" "blue" "yellow" "cyan" "magenta" "gray" "palette" "ycbcr"]
rw--rw--rw--np 2 root   root   <i> colorCb                        0
                 [16, 240]
rw--rw--rw--np 2 root   root   <i> colorCr                        0
                 [16, 240]
rw--rw--rw--np 2 root   root   <i> colorY                         0
                 [16, 235]
rw----------0- 0 root   root   <b> commitResult               false
rw----------0- 0 root   root   <b> finalCalc                  false
rw--rw--rw--np 1 root   root   <i> high                       12114
rw--rw--rw--np 1 root   root   <d> highT                  294.34999
rw--r---r---0- 1 root   measure <u> highValid                     ""
rw--rw--rw--np 0 root   root   <u> label                        "1"
                 [32]
rw--rw--rw--np 1 root   root   <i> low                        10701
rw--rw--rw--np 1 root   root   <d> lowT                   273.14999
rw--r---r---0- 1 root   measure <u> lowValid                      ""
rw----------0- 0 root   root   <a> preCalc                       ""
rw--rw--rw--np 2 root   root   <a> type                     "below"
                 ["below" "above" "interval" "fixScaleAbove" "dualAbove" "dualBelow" "invInterval" "dewpoint" "fixScaleBelow"]
With telnet this is in realtime, now I must only make menu for this...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 15, 2015, 12:48:59 pm
Go to the command prompt and try to ping the cameras ip address when it is connected. If pinging comes back failed you have something going on that is prohibiting communication to the camera. If this is something you have never done before, at the command prompt simply type ping "space" "cameras ip address".

ping works

Quote
Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

Ping statistics for 169.254.239.100:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

169.254.239.200
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

 
I'm getting this at the command prompt also.

Quote
Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 169.254.239.200

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Tunnel adapter isatap.{7581A323-7EC1-47C1-AAD5-038726D03316}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Local Area Connection* 12:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{BC68158C-C486-4AE1-9156-FD419F72164E}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

when I try to ftp from the command prompt

Quote
ftp> open 169.254.239.200
> ftp: connect :Connection timed out
ftp>

when I try to use filezilla to ftp

Quote
Status:   Connecting to 169.254.239.200:21...
Error:   Connection timed out
Error:   Could not connect to server
Status:   Waiting to retry...
Status:   Connecting to 169.254.239.200:21...
Error:   Connection timed out
Error:   Could not connect to server
Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".
Error:   Could not connect to server
Status:   Waiting to retry...
Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".
Error:   Could not connect to server

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 15, 2015, 01:12:20 pm
Looks like your network adaptor isn't picking up the camera. Have you tried disabling all the other adaptors before connecting your camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 15, 2015, 04:12:37 pm
@krom

Did you install the flir device drivers on your computer?  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on January 15, 2015, 09:02:14 pm
This is working. You can change all in here:
.image.sysimg.measureFuncs.isotherm
...
With telnet this is in realtime, now I must only make menu for this...
A menu sounds interesting for functions like that. But I also know and use the internal UART with a micro controller (speed is similar to telnet)... so I can make a additional hardware button for the functions I want.
Because that I spend no time to improve the camera menu yet... maybe later...

Here the full Resource Tree if you wish to discover.
There I found also the other functions like radiometric video sequence or other nice things I used in my Software (see here (http://joe-c.de/pages/posts/waermebildkamera_flir_ex_159.php#Software)).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: heavybarrel on January 15, 2015, 10:27:43 pm
ping works

Quote
Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

Ping statistics for 169.254.239.100:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

169.254.239.200
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

 
I'm getting this at the command prompt also.

Quote
Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 169.254.239.200

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Looks like you pinged the network adapter, wasn't the cameras reported address 169.254.239.2 ?? I didn't go back and look.
You might not be using the correct ip address to connect to the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 16, 2015, 09:03:24 am
ping works

Quote
Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128


I'm getting this at the command prompt also.

Quote
Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100

You were pinging the PC side of the link. And by extention you were also trying to make an ftp connection to an ftp server on your PC, which presumably isn't there.

The E4 will have a different IP.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on January 16, 2015, 12:08:32 pm
You have to use Windows 7 or older in order for this to work properly.  I have tried everything with windows 8 and just wasted a ton of time.  Emulators dont seem to work either.  This should be noted in the hack instructions and main link as no one knows this is an issue at first.

ping works

Quote
Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128


I'm getting this at the command prompt also.

Quote
Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100

You were pinging the PC side of the link. And by extention you were also trying to make an ftp connection to an ftp server on your PC, which presumably isn't there.

The E4 will have a different IP.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 16, 2015, 10:46:38 pm
Hi!
Menu updates with name like this were temporary and they disappearing.
You must read forward from it and then you find newer ones...
Or if you really need it I have all my old files somewhere.

I had nothing to do and replaced old menu and conf back... nostalgic...
and did here test with noise. After 800 it disappears and 900 1000 2000 were clear.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on January 17, 2015, 09:29:01 am
Slightly off subject but is there. A way to maybe plug Bluetooth adapter in the port and pick picture up on a phone ? . I managed to transfer pictures to phone via usb connection but sending video via Bluetooth much better .can it be done
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 18, 2015, 09:57:29 am
After looking inside common_dll.dll I found rows
Code: [Select]
RSA1 blabla..............................................................................blabla
is this some sort of key?
Yes seems to be a RSA public key, could be the one used for signatures
data structure: RSA1
next 4 bytes: 00 04 00 00 (little endian ) ->  00 00 04 00 ->1024, the modulus length
next 4 bytes: 01 00 01 00 (little endian ) ->  00 01 00 01 -> 65537, the exponent
next 128 bytes: the modulus

Microsoft says "All values are in little-endian format.". Not sure what that means for the modulus. Does it have to be completely reversed or every other 2/4 bytes (depending on the processor bus width) have to be reversed. May be someone more knowledgeable could comment.

But do we still care about this key providing signature check was patched ?



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 18, 2015, 03:54:24 pm
No...
But what you think that noise is doing?
.caps.config.image.targetNoise.targetNoiseMk
There I have "measure tool" "line" with "graph", no other measurements.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 18, 2015, 06:26:23 pm
Based on prior discussions it is believed that the noise setting is to control camera sensitivity, perhaps to set the desired figure of sensitivity in the camera specification.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 18, 2015, 09:28:49 pm
No...
But what you think that noise is doing?
.caps.config.image.targetNoise.targetNoiseMk
There I have "measure tool" "line" with "graph", no other measurements.

The explanation is simple: it's intentional worsening of the picture quality to allow a gradient between different models!
So one shall pay 5-6k extra to get the resolution enabled and the artificial noise turned down or removed....

Just set it to zero for best performance - it's just a completely evil function with no benefit whatsoever for the user.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 18, 2015, 09:43:43 pm
Based on prior discussions it is believed that the noise setting is to control camera sensitivity, perhaps to set the desired figure of sensitivity in the camera specification.
It would be nice to prove this once and for all with an E8 config file - It's so long since I've been messing with the E4 that I've forgotten the details but maybe someone should email Dave with step-by-step instructions to read out the config from his E8....
A lower default noise value would seem a pretty plausible explanation for the different sensitivity specs.


 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on January 18, 2015, 09:57:10 pm
The explanation is simple: it's intentional worsening of the picture quality to allow a gradient between different models!
So one shall pay 5-6k extra to get the resolution enabled and the artificial noise turned down or removed....

Just set it to zero for best performance - it's just a completely evil function with no benefit whatsoever for the user.
I agree with you... just set to zero and have nice values  :-DMM

@janekivi
nice one... do you have changed something or just activated the measurement line?
I activate it also on my 1.19.8 and the line is measured and could be readout but it was not shown in display.
Same with mcircle, this have also values but was not shown on display.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 18, 2015, 10:22:11 pm
Regarding the noise generator...... IIRC even the top of the Exx range still has the noise generator working but at a very low level (5?). There were some theories that some noise was required for image processing but I know nothing of that technique. I have left mine set to 5 as in the top spec Exx camera.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 18, 2015, 11:15:15 pm
Regarding the noise generator...... IIRC even the top of the Exx range still has the noise generator working but at a very low level (5?). There were some theories that some noise was required for image processing but I know nothing of that technique. I have left mine set to 5 as in the top spec Exx camera.

Aurora

IMHO it's just there to have the option to sell even higher spec'ed devices with the same sensor ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 18, 2015, 11:28:16 pm
@Taucher,

Yep that is the way FLIR seem to play the game.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on January 19, 2015, 10:45:46 am
Does anyone know if a normal car micro-b  car charger is compatible with the E4? I'm pretty sure that it would be but I'd be a little concerned about magic smoke. I'm thinking of using a genuine Samsung S2 type, not a cheap china type or anything.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 19, 2015, 01:04:25 pm
The FLIR E4 OEM charger is rated at a higher current than the everyday phone chargers. This is to enable faster charging at up to 2A rather than the more common phone rate of up to 800mA.

I bought some high current car chargers that were designed for a tablet as they tend to have higher rated chargers. I think mine were 2.5A.

Most devices that can fast charge at higher currents will charge at a slower rate if a phone charger is used, but there is the risk of overloading the charger and it getting very hot. Much depends upon the charger design. As you state, avoid cheap car converters as they can be risky. I personally would not wish to wreck my E4 internal charge management by using a charger that suddenly goes series short and applies >12V to the 5V input.

HOWEVER, the E4 is permitted to take a charge from a standard 500mA USB port without harm to the E4 or USB supply. Some charge management IC's can detect when they have reached the maximum current draw (voltage drop detection ?) and will work fine below that level.

I decided to play safe and use a correctly rated car charger. I recommend that you hunt down a reputable brand tablet charger that is rated the same of higher than the FLIR OEM unit. You are then safe and will get the E4 charged in the fastest possible time.

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 19, 2015, 01:41:44 pm
Quote
[/qOn mine I had to disconnect and hard reboot for the change to show up.... which meant I had to use the permanent file.  I had to use a win 8 PC.  After the Hard reboot I moved to a win XP PC)quote]

MY FIRST POST:

Hi my first post, I was looking for the Flir TG165 on the web and end here... fine forum anyway, 24 years ago I worked at the Tektronix factory
in the Netherlands adjusting scopes...

This topic is a long read btw, here is my question, to upgrade a Flir E4 tic do I realy need a Win 8 and maybe a Win XP PC? I have only a Win 7 pro PC...

Thanks, G. van der Veen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Justanotherguy on January 19, 2015, 01:52:21 pm
The FLIR E4 OEM charger is rated at a higher current than the everyday phone chargers. This is to enable faster charging at up to 2A rather than the more common phone rate of up to 800mA.

I bought some high current car chargers that were designed for a tablet as they tend to have higher rated chargers. I think mine were 2.5A.

Most devices that can fast charge at higher currents will charge at a slower rate if a phone charger is used, but there is the risk of overloading the charger and it getting very hot. Much depends upon the charger design. As you state, avoid cheap car converters as they can be risky. I personally would not wish to wreck my E4 internal charge management by using a charger that suddenly goes series short and applies >12V to the 5V input.

HOWEVER, the E4 is permitted to take a charge from a standard 500mA USB port without harm to the E4 or USB supply. Some charge management IC's can detect when they have reached the maximum current draw (voltage drop detection ?) and will work fine below that level.

I decided to play safe and use a correctly rated car charger. I recommend that you hunt down a reputable brand tablet charger that is rated the same of higher than the FLIR OEM unit. You are then safe and will get the E4 charged in the fastest possible time.

Aurora



The USB "charger" is missnamed, the USB port on your computer or the wall wart you plug into the wall socket is simply a power supply at 5V with a rating typically of 0.5A up to 2.1A.

Here is a really important bit,  THE CHARGE REGULATION IS DONE WITHIN THE DEVICE PLUGGED INTO THE POWER SUPPLY.  NOT IN THE POWER SUPPLY.
Read up about lithium battery charging requirements. Example of an implementation here: https://www.adafruit.com/products/259 (https://www.adafruit.com/products/259) 

I'd be a rich man if I had  0.00001 penny everytime I see nonsense spouted about having to use the exact "usb charger" with xxx device.
No device should be designed relying on current regulation to be performed by the "usb charger" ( i.e. wall wart/USB port) .

I myself have become so fed up with all the USB wall warts for all my gadgets, we dont have enough space in the kitchen when we are trying to charge all our devices. I am making a 5V power supply brick with a bunch of USB sockets, I am fusing each port at 2.5A with a slow blow fuse, just incase a duff device goes short circuit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on January 19, 2015, 04:13:49 pm
[...] to upgrade a Flir E4 tic do I realy need a Win 8 and maybe a Win XP PC? I have only a Win 7 pro PC... [...]

Welcome aboard! :)

I did the hack (for a TIC wit firmware 1.19.8 ) with just a Windows 7 Professional (x86) machine and had (and still have) no issues. Some users had issues with Windows 7 and used a Windows XP machine, some users had issues with Windows 8 and used either a Windows 7 or XP machine. As far as I know there's no way to be certain but the best way is to follow the instructions (e.g. install the FLIR network driver before plugging in the camera or disable all other network adapters and security software (firewall,...) if you have issues).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 19, 2015, 04:38:44 pm
@justanotherguy,

If your comments were aimed at me....please read my message again.

I don't see anyone talking about the charger being the current regulator....as I have stated it is the charge management chip (in the E4) that dictates the current flow. Yep that's what I said, nothing about the charger. What I did say is to use a suitably rated charger for the job. A power supply not rated for the task will either perform poorly or overheat, depending upon design.

As for the term USB charger, it stems from history when any power supply for charging that plugged into a USB port was called a USB charger, simple as that. The correct terminology would likely be " a 5V d.c supply providing XXXXmA capabillity" But most prefer to just say, a USB charger. Me ? I don't care so long as people understand Voltage and Current ratings appropriate to the task.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 19, 2015, 05:03:50 pm
No...
But what you think that noise is doing?
.caps.config.image.targetNoise.targetNoiseMk
There I have "measure tool" "line" with "graph", no other measurements.
Sorry about this mess here... This wasn't so much question and I knew the answer,
the sensor is too good but you must feel - this is #¤%&@£$€
This was only graphic illustration and follow-up to my noise value test.

And introduction to my next menu upgrade for advanced users
who have needs for better measurement tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 19, 2015, 07:07:34 pm
After a hour or so reading this topic, it is not always "easy" to move the E4 to a E8! are there any Dutch readers who have been successful?
Sometimes its handy to write in your own language.
Image : where I live...

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 19, 2015, 07:46:05 pm

.......
And introduction to my next menu upgrade for advanced users
who have needs for better measurement tools.

??  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 19, 2015, 07:48:38 pm
After a hour or so reading this topic, it is not always "easy" to move the E4 to a E8! are there any Dutch readers who have been successful?
Sometimes its handy to write in your own language.
Image : where I live...

Garrett

Ik zond je een PM.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectroEend on January 21, 2015, 09:20:36 am
RNDIS IP address issue.

First of all many thanks to all the guru's out here that did an awfull good job! I love my E4 Big Plus with hires and extra menu's.

I'm too having problems getting the E4 with 2.3 to behave like a good DHCP server. Beats me why.

I tried two PC's (W7 64bit) and both showed same issue. IP address given is wrong and starts with 169.254. There's also no Gateway or DNS address. You will also only see lots of bytes sent and zero bytes received.  No point in trying to communicate with the unit via virtual network.

I disabled everything on the PC (firewal, virus scanner, all other network interfaces, resident programs) but nothing changed. I resetted everything 10 times at least and plugged the E4 out & in a 100 times perhaps. I removed the E4's battery a few times.

I used Set_RNDIS_temporary.fif and the trick with pressing the right button when switching on the E4 (you get a black screen with backlight slightly visible).

A 'new' network adapter will pop up but always with strange IP address, no gateway or DNS address.

I was about to give up and rebooted the PC with the LAN attached, E4 still in RNDIS mode and everything else back to "normal".

As you guessed: for what ever reason I got a DHCP LAN connection that works (I'm typing this now) and a valid connection to the E4. Thus I started Filezilla and worked on the E4 without problems.

The only thing I changed was that I gave the interface (when it had a wrong IP address but could be managed) a fixed address of 192.168.0.1 and set the DNS and gateway to 192.168.0.2. When the virtual interface pops up again it'll remember the settings.

When I'm brave enough in the near future I'll try DHCP again for the virtual interface.  :-) for now I'm a happy camper.

Any suggestions for a more stable RNDIS connection are welcome.

BR, Donald
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 22, 2015, 12:25:07 am
Going to update the YouTube video series with a how to for 2.3. Nice work janekivi and everyone else involved.
Maybe I did something wrong but does the 3 spot measurement work or any of the hotspot measurements?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 22, 2015, 06:20:42 am
As my reply #6302 suggests, it does work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 22, 2015, 06:41:24 am
As my reply #6302 suggests, it does work.
Ahh totally missed that, odd mine just moves the crosshairs to the #1 spot. I will try removed the menu hack and re-applying.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 22, 2015, 07:39:57 am
Here is a free tip for E4 users. I think E4 has a potential design problem with the usb connector (I guess same sh!t with other Ex models). The cap that covers the connector is made from stiff rubber, so with the cap cover opened and USB cable attached, the cap pushes quite hard on the USB cable tale. I think this eventually may damage the microUSB connector on the camera. Until recently I used a piece of conductive foam stuck between the camera case and the rubber cap, as shown in the left screenshot. Now I bought a right angle USB cable and the problem was eliminated. It is also more convenient to have the cable running to the side rather than up from the camera - see the right screenshot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 22, 2015, 11:52:18 am
It's interesting that firmware version 1.22.0 is still online: http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v1.22.0_update_pack.zip)

Hi. That url isn't working for me. Could someone please upload (dropbox?) a copy of that fw update somewhere? And perhaps of other versions as well? Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 22, 2015, 12:44:04 pm
Additional information that i have not seen yet in this thread:

When camera is in RNDIS permanent mode, you can FTP to it even if it is turned off but is connected to USB. However the login  is not flir/3vlig. The login credentials in this case are:

user:   anonymous
psw:    NcFTP@

Once connected (i use WinSCP) you can browse the filesystem, make a backup of the Flash, transfer files 2-way. This may also help if you bricked your camera, if you know which files you want to replace.

Do not power the camera on, just plug the usb cable in to use this login.

It should be possible to even reflash the firmware in this mode (using FLIRInstallNet.exe) if the camera is bricked.

EDIT:
Kids don't try it at home. You have to know what you are doing.

The T559504$A.pdf, @ 1.3.3.4 says:

"CIFS
PC network file access service. This service makes it possible to map a drive letter on the PC to the camera file system. The appropriate client software is built into all relevant windows versions. By default, only the image folders are accessible in this way. To access the whole flash file system, mount the xxx.xxx.xxx.xxx/root$ drive. Use user name "flir" and password "3vlig"."

Does that work? I mean, for the whole flash file system?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 22, 2015, 12:47:25 pm
If someone had the files for the firmware "upgrade" to go from 1.11/1.12 to 1.8 (or 1.9 what ever it was) could one not do this and "upgrade" a 2.3.0 to the older firmware?

Anybody has got a copy of these files? Please?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 22, 2015, 02:03:02 pm
Here is a free tip for E4 users. I think E4 has a potential design problem with the usb connector (I guess same sh!t with other Ex models). The cap that covers the connector is made from stiff rubber, so with the cap cover opened and USB cable attached, the cap pushes quite hard on the USB cable tale. I think this eventually may damage the microUSB connector on the camera. Until recently I used a piece of conductive foam stuck between the camera case and the rubber cap, as shown in the left screenshot. Now I bought a right angle USB cable and the problem was eliminated. It is also more convenient to have the cable running to the side rather than up from the camera - see the right screenshot.

Aurora and I were talking about that around https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356999/#msg356999 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg356999/#msg356999). I never even unrapped the lead that came with the unit for that fact. There is also a 3d printable frame file floating around that props open the rubber flap but still allows access so it does not press on the lead.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 22, 2015, 02:28:52 pm
Oops, i missed that discussion, thanks OrBy, good info.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on January 22, 2015, 09:08:10 pm
I was at a trade show the other day with a FLIR product booth, and after being asked if I owned a FLIR camera (I told him yes an E4 and left it at that) the official FLIR rep at the booth told me that FLIR is now offering software updates when units are sent in for re-calibration where one can get their E4 upgraded to an E5,E6,E8 specs for the cost difference of the models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 22, 2015, 11:02:32 pm
I was at a trade show the other day with a FLIR product booth, and after being asked if I owned a FLIR camera (I told him yes an E4 and left it at that) the official FLIR rep at the booth told me that FLIR is now offering software updates when units are sent in for re-calibration where one can get their E4 upgraded to an E5,E6,E8 specs for the cost difference of the models.
LOL tell him you already did that for free
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Apollo11 on January 23, 2015, 06:49:46 am

http://support.flir.se/CustHelp/FirmwareDownload/rss/camfeed.xml (http://support.flir.se/CustHelp/FirmwareDownload/rss/camfeed.xml)
Quote
FLIR Ex Series (1.22.0)
Montag, 10. März 2014 12:40

Main improvements

    Improved shutter handling.
    Various bug fixes.

source firmware: http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=196)
Hi Folks, 1st post here and a big THANK YOU to all for this amazing thread  :-+

FLIR removed the old EX 1.22 Update Package from their website,  Please could someone who may have downloaded it kindly upload/post a link to the 1.22 Update Pack file? A big thanks .

Mine's an old E4 1.1L / 1.19.8 (Calibration Dec 2013). Even with stock 80x60 reso it's quite useful machine to find cold drafts around the house ;).  But my E4 having intermittent issues with shutter laggy or even unresponsive and occasional lockups - so I want to try the 1.22 f/w upgrade to see if that makes any difference.  Thanks again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on January 23, 2015, 09:44:30 am
But my E4 having intermittent issues with shutter laggy or even unresponsive and occasional lockups - so I want to try the 1.22 f/w upgrade to see if that makes any difference.  Thanks again!

Please keep us posted in case if you will upgrade FW1.98 HW1 E4 to FW 2.3 and then get the high res.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on January 23, 2015, 02:53:24 pm
I was at a trade show the other day with a FLIR product booth, and after being asked if I owned a FLIR camera (I told him yes an E4 and left it at that) the official FLIR rep at the booth told me that FLIR is now offering software updates when units are sent in for re-calibration where one can get their E4 upgraded to an E5,E6,E8 specs for the cost difference of the models.

Suppose that answers the question if the E4 was given bolometers etc which didn't pass the requirements of the E8. Obviously not if they can make the upgrade just like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aargee on January 23, 2015, 06:44:22 pm
For those worried about the pressure the cover puts on the USB cable, I use a simple clothes peg on the base of the rubber cover to hold it off from putting pressure on the cable. (I'm pretty sure that's been mentioned before as well!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on January 23, 2015, 06:56:07 pm
I was at a trade show the other day with a FLIR product booth, and after being asked if I owned a FLIR camera (I told him yes an E4 and left it at that) the official FLIR rep at the booth told me that FLIR is now offering software updates when units are sent in for re-calibration where one can get their E4 upgraded to an E5,E6,E8 specs for the cost difference of the models.

Sweet! Now, if I send in an E8 for re-calibration, can I get them to downgrade it to an E4, and send me the $5K cost difference as a credit? Because if they'll do that, I'm totally buying out Zoro's stock of E8's the next time a 25-30% off coupon comes around...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 23, 2015, 07:55:43 pm
When I got my camera there was
.image.flow.digitalFilter.spatial.apr3x3.replacedPixels  98
from this they made E4...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matthewxd on January 24, 2015, 04:57:32 am
Hello,
Thank you very much for your hard work and good instructions.  I did the resolution hack for my new Flir E4 v2.3.0, followed the instruction 'STEP BY STEP INSTRUCTIONS for Flir E4 (Firmware 2.3.0) for beginners (How I did it... and it worked)' ( Reply #6491 on: January 13, 2015). 

Every step is fine. But the last step 'python apply.py apply 192.168.1.2' give me errors: error_perm('550 File unavailable ...' as shown in the attached file.

I booted the Flir E4. The screen is very clean now with lens closed, not as noisy as before. The image looks better(see attached images). The jpeg image file size is more than 110K, bigger than before. The menu and settings are the same as before.

What is wrong with the above error message? Are the files uploaded to the camera successfully? Do I need to do again?

Thank you very much in advance for your comment about this issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 24, 2015, 09:38:18 am
You have all done and this is normal if you don't stop app.
You can read this from attached screenshot here:

You may have to run "stopapp" before you can overwrite common_dll.dll.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on January 24, 2015, 02:15:40 pm
Curiously is there any way for a live feed to a smartphone . Can some dongle be plugged in to ish port on camera and teanfer a live feed to the smart phone . There is live feed on pc but it is via usb lead no idea of the benefits of that tho .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on January 25, 2015, 01:31:23 pm
Here is a little Python script to convert between conf.cfc and  conf.cfg on 2.3. Just execute

cfccfg.py XXXXXXXXXXXXXXXX conf.cfc conf.cfg

where XXXXXXXXXXXXXXXX is the string returned by suid command on camera. You can convert the file back to cfc using the same command:

cfccfg.py XXXXXXXXXXXXXXXX conf.cfg confBack.cfc

Please note:
where XXXXXXXXXXXXXXXX is the string returned by suid command on camera.
You can convert the file back to cfc using the same command:
but remember, you can use this to get working conf only in one condition.
Otherwise you need to replace last 16 bytes and write there new beginning
address of signature. But you don't need signature and CRC represented there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on January 25, 2015, 01:45:33 pm
Greetings
I want to ask whether, after a complaint camera, I can upload files back ("hack E8" common_dll.dll a conf.cfc).
Or should I create a new one?
Firmware 2.3.
About faulty thermo sensor:-(
Thanks for the info.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 25, 2015, 04:06:53 pm
where XXXXXXXXXXXXXXXX is the string returned by suid command on camera.
You can convert the file back to cfc using the same command:
but remember, you can use this to get working conf only in one condition.
Otherwise you need to replace last 16 bytes and write there new beginning
address of signature. But you don't need signature and CRC represented there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kolb on January 25, 2015, 04:28:25 pm
Hello all! Been lurking for a while but this is my first post. Hope it's not in the wrong place. If it is, please feel free to move it or direct me.

I'm in need of assistance from someone that knows what they are doing on these.  I have a FLIR E4 with firmware 1.22 that I had a buddy do the update on.  The resolution is great now, multiple color palettes are available, and I get the "special edition" banner at boot up.  I am having a problem where the MSX is not working, or available in the menu, but the digital camera does work.  Also, the menu for the "crosshairs" doesn't make any changes and occasionally freezes up.  If this is something you could help me with, I would gladly send PayPall, check, cash, first born child etc. for your time and effort.  I'm a little scared to mess with it more as it SEEMED the instructions were pretty clear but I know NOTHING about these things. ANY help would be greatly appreciated. Please PM if you can help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 25, 2015, 04:57:00 pm
In the last 7 days I have been digging through 4500 messages, only  2065 to go... ;D
Just seen the YouTube video about the 1.22 hack, makes the mod more clear, any change for a 1.23 firmware mod clip?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 26, 2015, 06:12:09 am
In the last 7 days I have been digging through 4500 messages, only  2065 to go... ;D
Just seen the YouTube video about the 1.22 hack, makes the mod more clear, any change for a 1.23 firmware mod clip?
2.3 video coming sometime this week
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 26, 2015, 06:14:34 am
Hello all! Been lurking for a while but this is my first post. Hope it's not in the wrong place. If it is, please feel free to move it or direct me.

I'm in need of assistance from someone that knows what they are doing on these.  I have a FLIR E4 with firmware 1.22 that I had a buddy do the update on.  The resolution is great now, multiple color palettes are available, and I get the "special edition" banner at boot up.  I am having a problem where the MSX is not working, or available in the menu, but the digital camera does work.  Also, the menu for the "crosshairs" doesn't make any changes and occasionally freezes up.  If this is something you could help me with, I would gladly send PayPall, check, cash, first born child etc. for your time and effort.  I'm a little scared to have my buddy mess with it more as it SEEMED the instructions were pretty clear but I know NOTHING about these things. ANY help would be greatly appreciated. Please PM if you can help.
Sounds like he messed up the CRC, check your email I can help you out for free. or check out my video on youtube(check the first post)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kolb on January 26, 2015, 06:46:31 am
DaveWB - PM sent
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 26, 2015, 08:15:23 am
Thanks DaveWB, I want to use the TIC for my hobby astronomy, I have a large Newton type telescope which is highly automated for remote imaging.
Some parts of the telescope are heated to prevent dew, but for optimum imaging results the telescope should have the same temperature on any part.
The TIC can show us (I'm not the only user) heat spots.
And we can use the telescope as 'lens' for the E4 by removing the E4 lens and make a special adaptor to attach the E4 on the telescope focuser,
having a 1550mm F3.8 mirror 'lens' for a TIC!, for several reasons this isn't easy, we must also modify the telescope in some way.

The image show the telescope still inside my home.

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 26, 2015, 04:13:46 pm
Before doing anything else make sure the mirrors actually transmit IR to make sure that's even possible. Telescope mirrors sometimes use different coatings than a bathroom mirror for example and the reflective coating is usually on the surface rather than behind the glass on most mirrors. Cross your fingers because it will only be possible to even think about doing that with a Newtonian refractor. SCT or something like that wont work because the lenses certainly won't transmit IR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Co6aka on January 26, 2015, 04:15:50 pm
And we can use the telescope as 'lens' for the E4...
Nope, you can't (not unless you change all of the lenses in the telescope to ones made from a material that passes LWIR.)

And PS- Your focal distances will probably be slightly off too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on January 26, 2015, 06:57:28 pm
Since he has a Newton type telescope (reflecting telescope), the only optical lenses are on the eye piece.

Even if his mirrors where made of just glass they will work for LWIR since they can't penetrate it. So any glass object becomes a mirror.

But I guess it will depend on how his mirrors are made and the type of coating since they are probably first surface mirrors, so the material will dictate if they can reflect the infrared wavelength range that the sensor can detect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on January 26, 2015, 08:09:35 pm
The type of telescope he's talking about uses curved mirrors only. The only lenses would be the eyepiece but what's he's doing is called prime focus where you remove the eyepiece and focus directly into the E4 sensor. If his mirrors reflect LWIR it should be theoretically doable. I'm not sure though that it would be worth doing because the device would not really see through the atmosphere well enough to provide any data. He could use it for long range terrestrial viewing though if the mirrors work. But the temp readings would be wayyyy off.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 26, 2015, 08:14:26 pm
No lenses inside,  only two mirrors and they are highly IR reflective.

Odd, can't no longer access hidden menu, beyond 'camera information' menu, I have E4 1.2L    2.3.0 software. still original.
I did install drivers and download some images from the E4 to my pc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on January 26, 2015, 08:17:53 pm
I've been meaning to try this, but I was thinking to use one of the cheap ZnSe "close-up lenses" as a primitive "eyepiece". But it's not likely to happen in the foreseeable future.

Nearly every reflecting telescope uses a thin front-surface layer of aluminum, and aluminum's reflectivity is plenty high throughout the IR range. (Its emissivity is probably plenty low, too, which should help.) My only concern would be whether a very thin layer (much thinner than a single wavelength) would have different reflectance properties; I doubt it, but this is way outside my areas of study.

At 10-20x the normal wavelength, your mirror will appear superb, but you can also expect only 1/10-1/20th the resolution that you get in visible wavelengths, if I'm remembering my optics correctly. It'll likely be a good match for the low-resolution detectors we're working with, though.

The one thing I've found puzzling is "what would I look at?" Besides the Moon, which shows up clearly on a 320x240 Flir imager, I'm not sure what celestial targets would be bright, warm, and extended enough to show up. What are your thoughts? (Perhaps this would best be discussed on an astronomy forum...!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 26, 2015, 08:47:44 pm
Good!  :D hidden menu is back, it was and is: 'camera information' menu, then 'model' menu, then press right button for 10 seconds :palm:

The moon in the focal plane of my telescope is 13 mm, (on the sensor), in the E4 the whole image would be the moon!
With just the E4 (un-mod) it is only a few pixels...
Other target would be the nebula like the large Orion nebula, with the E4 the nebula would be gone, A galaxy could be awesome.
I have made a few Near IR images with my IR modified DSLR camera, tomorrow I will upload here a example.
btw, many of the images from the Hubble Space Telescope are made in the Far Infrared.

Today I bought a screen protector (for a Apple S6+) 2 for 10 Euro.
I also need a tool to unscrew the lens, I found some 3D print drawings here on EEV, lets pimp Flir!


Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 26, 2015, 08:49:13 pm
I've been meaning to try this, but I was thinking to use one of the cheap ZnSe "close-up lenses" as a primitive "eyepiece". But it's not likely to happen in the foreseeable future.

The one thing I've found puzzling is "what would I look at?" Besides the Moon, which shows up clearly on a 320x240 Flir imager, I'm not sure what celestial targets would be bright, warm, and extended enough to show up. What are your thoughts? (Perhaps this would best be discussed on an astronomy forum...!)
Aircraft.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miguelvp on January 26, 2015, 09:42:57 pm
I've been meaning to try this, but I was thinking to use one of the cheap ZnSe "close-up lenses" as a primitive "eyepiece". But it's not likely to happen in the foreseeable future.

The one thing I've found puzzling is "what would I look at?" Besides the Moon, which shows up clearly on a 320x240 Flir imager, I'm not sure what celestial targets would be bright, warm, and extended enough to show up. What are your thoughts? (Perhaps this would best be discussed on an astronomy forum...!)
Aircraft.

Interesting, would he be able to locate satellites as well?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on January 27, 2015, 01:20:33 am
I've been meaning to try this, but I was thinking to use one of the cheap ZnSe "close-up lenses" as a primitive "eyepiece". But it's not likely to happen in the foreseeable future.

The one thing I've found puzzling is "what would I look at?" Besides the Moon, which shows up clearly on a 320x240 Flir imager, I'm not sure what celestial targets would be bright, warm, and extended enough to show up. What are your thoughts? (Perhaps this would best be discussed on an astronomy forum...!)
Aircraft.

Ugh. Good luck tracking them. (Yes, there are advanced amateurs who can do it. I'm not one of them.)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrflibble on January 27, 2015, 07:07:28 am
Interesting, would he be able to locate satellites as well?
Maybe the ISS? That's pretty big and has a well published orbit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: decomp on January 27, 2015, 08:09:44 am
But my E4 having intermittent issues with shutter laggy or even unresponsive and occasional lockups - so I want to try the 1.22 f/w upgrade to see if that makes any difference.  Thanks again!

Please keep us posted in case if you will upgrade FW1.98 HW1 E4 to FW 2.3 and then get the high res.

Hi!
I'm new to this forum.
I haved... an higres E4. I upgraded to fw 2.3.0 from fw 1.22.

I try to apply hack v04.zip and the hack don't work.

 = CONNECT TO FTP
 = CREATING BACKUP DIR backup-20150125231816
 = RETR /FlashBFS/system/common_dll.dll
 = RETR /FlashFS/system/appcore.d/config.d/conf.cfc
Traceback (most recent call last):
  File "C:\Users\Grazia\Downloads\v0.4\v0.4\t1\apply.py", line 90, in <module>
    assert found, "UNKNOWN %s: digest/len is %s" % (name, h)
AssertionError: UNKNOWN conf.cfc: digest/len is 6320

Now I have a E4 loweres...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on January 27, 2015, 09:17:07 am
Quote
Maybe the ISS? That's pretty big and has a well published orbit.

ISS is 100m wide or so, but still a point in the sky, image is shot with a telescope from the ground and show ISS (Space Station) transit the sun.
(Google image), a transit takes only a few seconds.

Sorry I have no good IR images I promised yesterday.

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on January 27, 2015, 02:03:44 pm
Thanks DaveWB, I want to use the TIC for my hobby astronomy, I have a large Newton type telescope which is highly automated for remote imaging.
Some parts of the telescope are heated to prevent dew, but for optimum imaging results the telescope should have the same temperature on any part.
The TIC can show us (I'm not the only user) heat spots.
And we can use the telescope as 'lens' for the E4 by removing the E4 lens and make a special adaptor to attach the E4 on the telescope focuser,
having a 1550mm F3.8 mirror 'lens' for a TIC!, for several reasons this isn't easy, we must also modify the telescope in some way.

The image show the telescope still inside my home.

Garrett

Hello, I will follow your work, I made a quick and dirty test with my telescope:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg435324/#msg435324 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg435324/#msg435324)

By the way wonderful telescope you have there, is a beast, 16" ? Mine is 8" F5
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on January 27, 2015, 06:27:54 pm
Just curious the temp scale is manual and the smallest difference is 2 can this be made smaller and can the maximum 280 be higher ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 27, 2015, 06:59:58 pm
No.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 27, 2015, 08:01:15 pm
I need the file /FlashBFS/system/web/service/Diag/Reconfig.asp", or better yet a copy of the entire web folder of an E4/E5/E6/E8 that has a working "Activate Service Mode" web interface menu item. Or better yet a copy of the entire filesystem. Please. Send to jorge at jorgechamorro dot com. Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 28, 2015, 06:23:32 am
AssertionError: UNKNOWN conf.cfc: digest/len is 6320
Did not you read the Readme in v0.4 package... What is your conf file length? It says if the conf file length is not 6608 then this hack is not for you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on January 28, 2015, 07:16:51 am
I need the file /FlashBFS/system/web/service/Diag/Reconfig.asp", or better yet a copy of the entire web folder of an E4/E5/E6/E8 that has a working "Activate Service Mode" web interface menu item. Or better yet a copy of the entire filesystem. Please. Send to jorge at jorgechamorro dot com. Thank you!
What firmware version was this found on? I can check for you through a couple people I have helped.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 28, 2015, 08:35:21 am
I need the file /FlashBFS/system/web/service/Diag/Reconfig.asp", or better yet a copy of the entire web folder of an E4/E5/E6/E8 that has a working "Activate Service Mode" web interface menu item. Or better yet a copy of the entire filesystem. Please. Send to jorge at jorgechamorro dot com. Thank you!
What firmware version was this found on? I can check for you through a couple people I have helped.

I have a 2.3.0 but its web folder comes almost empty (?). I'm trying things with a webfolder I found in this thread, but it's missing that file ("/service/Diag/Reconfig.asp"), which is referenced by the service menu item button that's setup in web/service/inc/servicemenu.inc#L164:

Code: [Select]
if ( CamType == "Z" )
  menuRow("Activate Service Mode", "/service/Diag/Reconfig.asp", "submenu1", selectedMenu == "mnuDiagReconfig");

I'd need a copy of a complete, working webfolder from a previous FW version...

Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 28, 2015, 10:28:26 am
There is Flir E4 owners who are testing my new "2.3.0 Menu 2014 Advanced update".
Some things with this may be hard to understand. I can give a little guide from things
I figured out so far. Sometimes camera needs restart too... there is windows : )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 28, 2015, 01:24:53 pm
There is Flir E4 owners who are testing my new "2.3.0 Menu 2014 Advanced update".
Some things with this may be hard to understand. I can give a little guide from things
I figured out so far. Sometimes camera needs restart too... there is windows : )

While reading this I was wondering where to fetch that file until realizing that you probably didn't
post a preliminary  "2.3.0 Menu 2014 Advanced update" but must have sent it around
in private - this way you have the overhead of distributing the files and it's limiting the people
who might take a look at it (can be helpful or not).

While I'm already writing... here some old info that might help: with advanced measurements
I had the strong impression that we can't fix stuff anything inside the bytecode where the
camera will lock up etc.. It probably never had to do those functions and the only reason why
those functions exists is likely just due to the fact that developers used a common source.

In my experience any function depending on the preset.d folder or -more generally said-
writing some files seemed to be _at least_ a bit sluggish (most likely due to the extra I/O).
IMHO there's a good chance that the Ex series runs a hardware that is simply not as capable
in regard to I/O performance as the higher models - thereby causing all sorts of "wonderful"
effects by running into deadlocks or waiting for the (slow) file-I/O-reply.

From my own experience the following did help a lot:
- clear versioning, describing version changes and keeping a backlog of what has changed
- openness (post everything, sometimes somebody else will be able to assist - helped me several times)
- some ignorance (you will get private requests like "I can't open cmd or copy a file but want to ..."
 
Last but not least:
Keep on going  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 28, 2015, 02:28:14 pm
When this is complicated and not easy to use and understand (but advanced users can handle this)
I didn't release it yet to avoid big pile of letters. But if you know what to expect from camera,
all this is working very fine in everiday use. Now I must only see what I must limit with conf and
what enable-disable befor to show it to bigger group.
If somebody like to play more with E4 where is 2.3.0_menu_2014 already and can replace files and
patch conf and restore it, I'm happy to share this update for testing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on January 28, 2015, 06:19:08 pm
I fully agree with Janekivi.  :)
Before distributing it has to be almost monkey proof. Otherwise it brings people in big trouble. And that is not what anyone on this forum wants. Now some people are already having trouble with the highreso hack. Mostly because they don't want to spend some spare time to read the former posts.
Sometimes because they are simply not able to understand what they are supposed to do.
To avoid too many 'crash questions' I think Janekivi is doing the right method.
Keep on going. We all appreciate your efforts.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on January 28, 2015, 06:58:17 pm
Just a small update on cfccfg.py for 2.3. It now drops the signature/tail from the .cfg file. You can also make changes to  the .cfg in plain text before converting back to .cfc, the file tail is created with the proper file size info (the signature is set to all 0). Note that you need the "HIRES" patch  first in order to skip the CRC/signature check for this to work.

I tested adding a few lines to the .cfg file (comments, putting back 80x60 resolution...), convert to .cfc and use that on camera. Seems to work fine.

original post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 29, 2015, 02:28:39 am
Well, I finally got an xp machine to use, and networking is working fine, but now I can't find the v04.zip file. 
Searching on here is returning 0 posts, dunno if its an issue on my end or the forum's. 
Does any one have a link, I'm going crosseyed trying to read through all the posts to find it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Isaac-1 on January 29, 2015, 05:03:51 am
Look at the messages posted around mid October for the V0.4 file, I think this is around page 375
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GeorgeOfTheJungle on January 29, 2015, 12:40:53 pm
Well, I finally got an xp machine to use, and networking is working fine, but now I can't find the v04.zip file. 
Searching on here is returning 0 posts, dunno if its an issue on my end or the forum's. 
Does any one have a link, I'm going crosseyed trying to read through all the posts to find it

To set RNDIS mode:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg531346/#msg531346 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg531346/#msg531346)

The v0.4.zip file:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: decomp on January 29, 2015, 10:51:16 pm
But my E4 having intermittent issues with shutter laggy or even unresponsive and occasional lockups - so I want to try the 1.22 f/w upgrade to see if that makes any difference.  Thanks again!

Please keep us posted in case if you will upgrade FW1.98 HW1 E4 to FW 2.3 and then get the high res.

Hi!
I'm new to this forum.
I haved... an higres E4. I upgraded to fw 2.3.0 from fw 1.22.

I try to apply hack v04.zip and the hack don't work.

 = CONNECT TO FTP
 = CREATING BACKUP DIR backup-20150125231816
 = RETR /FlashBFS/system/common_dll.dll
 = RETR /FlashFS/system/appcore.d/config.d/conf.cfc
Traceback (most recent call last):
  File "C:\Users\Grazia\Downloads\v0.4\v0.4\t1\apply.py", line 90, in <module>
    assert found, "UNKNOWN %s: digest/len is %s" % (name, h)
AssertionError: UNKNOWN conf.cfc: digest/len is 6320

Now I have a E4 loweres...

Wrong wrong wrong was my original post!
After the upgrade from e4 fw 1.22-hires to 2.3.0, the resolution remain the same hires (320x240). Infact the cfc file maintain the format of 1.22 fw. I only loose the extra feature of the menus. The upgrade restored the factory menu of the fw 2.3.0 e4 camera.

Now I need to understand on how to modify cfc to enable extra functions (2014-menu) available on the 2.3.0 fw.

How can I do that?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: krom on January 30, 2015, 12:53:14 am
Look at the messages posted around mid October for the V0.4 file, I think this is around page 375

Thanks!  found it, and it worked perfect on the first try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lofitohifi on January 30, 2015, 03:56:27 pm
20% off at Zoro, voucher code: TOUCHDOWN
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on January 31, 2015, 08:10:47 pm
I did menu for factory E4 2.3.0 and then I had many ideas for advanced update.
Now I have some amount of leftover stuff of "extras" for play. They aren't
very useful in everyday use for everyone. This stuff is for hackers and
that's not all- there is more to find (I hope).
But how I represent this?
I have lines you must add to menu, lines for conf and may be picture from
screen - what this is give to you. And everybody can find more and add their
stuff. I see a mess in my mind...

What I have here:
  Sketch in archive
  Table in archive
  Text in archive
  Voice in archive
  Report making (pdf) in archive
  Preview before save
  Prompt to add annotation after save:
    PROMPT_NONE
    PROMPT_NOTE
    PROMPT_TEXT
    PROMPT_VOICE
    PROMPT_SKETCH
    PROMPT_ALL
  Screening recording mode
  Advanced measurement tools checkbox in settings
  You can write custom preset in 3-spot file
  Super image resolution. In better cameras this is for:
    UltraMax Technology
    With a resolution of 320 x 240, the FLIR T460 includes 76,800 data points
    in each image. Making a very good image into a great image, the FLIR UltraMax
    feature effectively doubles the resolution to 640 x 480 and the total pixels
    to 307,200. UltraMax is a digital superresolution technology that uses the data
    from a quick burst of images to create a new image with more pixels, greater
    accuracy, and reduced image noise. Sixteen original images are captured in under
    half a second. These images are slightly misaligned due to natural human movement,
    giving extra data points to be used in the resulting UltraMax image. Image bursts
    are stored on the infrared camera, then downloaded and combined using the included
    FLIR Tools software for PC or Mac.
    (I'm sure we can't see this in EX)

There can't be done pip small and I do not see panorama in resource tree.
I'm sure, there is missing stuff for movie too. Some lines can camera add to
resource tree. My tree is twice of lenght compared to first look to camera.
What I like to find is "Hide Graphics" and "JPG compression quality" to settings
menu. And what is .caps.config.image.services.store.incompatible.level.
I see some diferences in camera, like less info in archive, but...
What is .image.services.store.format. How to use this, what mode or setting
select them.
["FFF" "FFF+PNG" "FFF+JLS" "FFF_no_pixels" "FFF_seq" "FFF_append" "FFF_visual"
"FFF_visual+PNG" "JPEG" "JPEG+PNG" "JPEG_no_IR" "JPEG_no_pixels" "JPEG_visual"
"JPEG_visual_small" "JPEG_fusion" "JPEG_fusion+PNG" "JPEG_fusion+JPG"
"JPEG_fusion_large" "IR+visual_combo" "fusion+visual_combo" "fusion+large_combo"
"PNG_no_IR" "PNG_visual" "AFF" "JPEG_panorama"]
And more... more... more...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 01, 2015, 03:05:22 am
Waiting on a few things for the video but man oh man is this 2.3 hack both awesome and "interesting"(messed up the camera just like janekivi first did when he first hacked his camera). After hours of messing around and having a spare camera to get a few files from all I can say is BACKUP BACKUP BACKUP BACKUP your camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 01, 2015, 10:13:12 am
If you all READ my files, what the third line say:
--------------------------
          DISCLAIMER:
        YOU DO THIS AT YOUR OWN RISK. THERE IS RISK TO BRICK YOUR CAMERA.
>>   ALWAYS MAKE BACKUP COPIES BEFORE CHANGING OR REPLACING ORIGINAL FILES.
--------------------------
And all my stuff is made as it is, I done all things on purpose and if you rename files or edit something,
you are on your own. I use separate files to fool flir and do not touch original ones, they are dummies
for applaunch to check.

What secrets I have there... on first page of settings you see "Free enhanced menu".
If someone like to sell this to you - this is free, you don't need to pay him, I made it.
But more important is this - may be you don't like it here (I have second one too in there).
Then you look and see how this is done, you delete it and there is no this line in settings now.
But later in bed you start thinking - "what I can write there..." and now you start customize
menu files and I have more friends to hack this software.

And today I have even more stuff in my camera than when I wrote last message.
I had to borrow more icons from T4xx files...

-----------------
Maybe you are try there "menu advanced update" without  "menu" : )
This is complicated because you need menu before update
and this is made on purpose like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 813infiniti on February 01, 2015, 04:16:09 pm
Anyone able to tell me what was in the following file?

/FlashFS/system/appcore.d/factory.d/rndis.rsc

I was trying to enable UVC mode and thought I was erasing the ZRNDIS.RSC file, my mistake.

If anyone could tell me what was inside that, i would like to recreate it and put it back as before, thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 01, 2015, 05:31:56 pm
You need Set_RNDIS_permament.fif and you find this in e4hack3c.zip
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)
But after that I did this with telnet command:
   rset .system.usbmode RNDIS_UVC
and this is realtime (for me it is) and stay this way after reboot too.
In resource tree I see possible modes:
["RNDIS" "MSD" "UVC" "RNDIS_UVC" "RNDIS_MSD" "UVC_MSD" "RNDIS_UVC_MSD"]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: flirRMA on February 01, 2015, 05:55:12 pm
hello ,
I tried to unlock the resolution, but after 3h of test :box: I do not get out crc code  :-// , test it on winxp and win7 crc01 ezcrc01 nothing works ( unable to open the file ) ,  who can do it for me ,  I provides him my conf.cfg i have a flir i3.

thx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 01, 2015, 07:27:22 pm
Here is image from Mike's tear-down video.
As you can see there is a aperture, it is smaller then the sensor, why?
This aperture could be a diaphragm to get higher F# for higher image quality?, just like most lenses for photo camera's.

I want to use my E4 (still original) for my astronomy hobby, to check unwanted heat sources on my telescope (some parts of the telescope are heated others cooled).
A hi-res E4 can be used as far-IR imager by removing the small lens (the telescope mirrors reflect heat very good).
If this will work well on celestial objects like the moon, planets, stars, I want (must) enlarge that aperture to get a fully illuminated sensor (less vignetting).

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 03, 2015, 11:36:00 am
 :phew: I have seen all 441 pages in this topic and read all messages of the last 90 pages or so.
A lot pages or messages are removed, it looks like a lot of important info is not here because it was send by Private Message.
From no-where I must suddenly use Python, Putty, Telnet...

It looks like this topic is on his last leg?

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: freqjn on February 03, 2015, 04:59:35 pm
@ GARRETT64

I have been following development for a while and read through too many of the pages. I never got to see what was posted before Freq_ge and Aurora deleted their posts and their deleted posts are not available in the wayback machine(somebody please correct me on this). Other than Freak_ge and Aurora's post deletions do you have a more specific example of a post deletion or modification?

From my brief searching the first mention of Python is by Nilock222 on page 18 of this thread as of the 441 pages that now exist. 


It would be really handy if someone could figure out the CRC algorithm on the files - I think this is the true key to opening many other goodies


Looks like it is just a standard 32 bit CRC like used in the ZIP format. Here's a short python script to calculate it for a file:

Code: [Select]
import sys
import zlib
with open(sys.argv[1], 'r') as fp:
    crc = zlib.crc32(fp.read()) & 0xffffffff
    print '0x%08x' % crc
Have you checked this with any of the files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 03, 2015, 06:35:49 pm
Telnet, PuTTY I use 20 years but python is new animal. I have seen basic and pascal.
When I started with computers there wasn't browsers and all this talk were in news-
groups through telnet window only. But my powertool is notepad. Once I did whole online
document register for government with php and mysql while hearing about them first time.
Then I just started from clear screen and doing my typing and copying and pasting. I told,
I can do only simple things. I'm old-school guy. I have ax-type soldring iron, 200W.

But now I correcting my files. First release is original but somehow when I replaced right file,
first release got deleted. And now the counter is 0 again but in 2.3.0_menu_2014_EX_6_fix.zip
is now all CRC corrected and in menu file all palettes in right place. I got opportunity to test
this file in 1.22 to 2.3.0 updated E4. I made to him new conf and without dll patch finally
my menu is working, advanced too. More tests needed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dorcy on February 03, 2015, 08:57:30 pm
just went through the directions to hack the resolution of th e4 2.3.  Can someone tell me which format to download Python. I assume its one of the winx86 formats but which one???
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 04, 2015, 08:08:09 am
just went through the directions to hack the resolution of th e4 2.3.  Can someone tell me which format to download Python. I assume its one of the winx86 formats but which one???
Thanks
It really doesnt matter as long as its 2.7 the zip just means you have to extract it, the .exe would be a bigger file but you wouldnt have to extract it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: warcow on February 04, 2015, 10:17:29 am
I did the resolution hack for the 2.3.0 E4 when it was just released and now check the forums to see some progress with menu hacking. Is it easy to do the menu hack with the resolution hacked E4? I downloaded the 2.3.0+menu_2014.zip but it is not clear to me what I should do exactly.

So far still really happy with the resolution hack, we use the Flir often to measure our light fixtures, led chips and electronics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on February 04, 2015, 10:41:25 am
Yes you can do menu hack smoothly on a reso-hacked e4. Janekivi published his menu hack separately in respect to tmbinc who has made reso-hack in first place. Great thanks to both for their shares.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 05, 2015, 12:02:33 pm
Hi
In the last few days I learned to make a FTP to a device with Filezilla and / or CMD and use CMD on files :)
I have back-up all files in my E4, CMD can read the E4 files, and Python is also recognized by Windows, so far so good.

In the step by step instruction (see image) I read;
"If all that works, type "quit" to exit and close ftp connection"
and a few lines further:
"it will read two files from your cam and stores them in a backup folder"
Question: how can Python read files from the camera if the ftp connection is closed?

And also:
" you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera"
"In case you get an error 500 at the upload, you have to upload the files manually by FTP"
thus in both cases I must manually upload the files?

Garrett





Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 05, 2015, 12:12:24 pm
Last night I made a image from the (clear) sky: Its cold out there! ;D

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on February 05, 2015, 12:27:09 pm
Welcome
Great job guys very, impressed . I plan to buy 2 FLIR E4 and do the upgrade. Where to get the best price in Europe FLIR E4?

greet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 05, 2015, 06:10:11 pm
Hi,

I just seem to have bricked my E4 V2.3 the same way as fp |O. Was it ever unbricked? I don't see any encouraging news in the messages I read.


Hi guys,

bad news, I now have a very expensive paperweight: downgrading went fine (well, except for a couple of complains here and there but not of them looked that bad. didn't think to copy/paste the log before hitting "reboot"....) and then, upon reboot of the unit, I got a FAT partition mounted on my laptop with 2 files, ERROR.TXT which says "no error" (how ironic) and TYPEINFO.TXT which has

FLIR cam boot
MSDcmd 1.3
ASCO


and then 2 serial (including the one from the unit) and the ethernet MAC of the unit. The unit itself just displays the FLIR logo.

I suppose my best bet is to return it, unless somebody has any brilliant ideas ? (don't feel sorry. Gambling implies losses...)

So there *is* something lurking at the firmware level, I would say...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on February 05, 2015, 07:11:41 pm
Did you try to re-install fw 2.3  .fif file over flirinstallnet.exe ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 05, 2015, 09:42:58 pm
As in "fp" case, the camera is not recognized by flirinstallnet. It just appears as a "ASCO" mounted disk.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on February 05, 2015, 11:06:21 pm
Dear giff999

As I remember, janekivi has troubled as you said when he first start to work on this advanced menu hack.
See posts 5747-5748-5749 on page 384. He managed to install it by pushing all buttons at the same time on camera. You can try to do the same thing.

Hope that works.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 06, 2015, 12:41:28 am
Thanks for the suggestion but I got the black screen before and re-flashed the camera without problem. This is different (I  changed a few files in nk.bin and re-flashed. Everything loaded fine until reboot). I get the FLIR logo but the camera is in some kind of mode waiting to be "factory" loaded I guess. I have now opened the camera in order to connect to the serial port, I just need to get a connector now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 06, 2015, 03:06:23 am
Last night I made a image from the (clear) sky: Its cold out there! ;D
If it was an E4 how did you manage to get -40 if specification is -20 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 06, 2015, 03:09:28 am
I just seem to have bricked my E4 V2.3 the same way as fp
Was a reason to downgrade ? I'd think a doctored 2.3.0 has more features than earlier firmwares.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 06, 2015, 03:21:59 am
I didn't downgrade, I just modified the 2.3 firmware and ended-up in the same situation. Gambling didn't pay this time but at least I will have a lot of fun trying to get it back to work :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 06, 2015, 08:21:10 am
Not sure if this was posted before.
With the WEB package added, E4 becomes a web camera (though a slow refresh rate) with the following change:

 \FlashBFS\system\web\inc\usermenu.inc

uncomment the line that starts with
  menuRow("Web Camera",...

Now in RNDIS mode use a browser to connect to 192.168.0.2 and use the "web camera" link in the left pane as shown in the attached screenshot. A mouse click on the picture brings up a settings screen as shown in the second screenshot, where the picture size and refresh rate can be changed.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 06, 2015, 08:25:28 am
Quote
If it was an E4 how did you manage to get -40 if specification is -20 ?

I have still a non-hacked E4 2.3.0/ 1.2L , maybe the temperature range has been extended to -40C?

I'm still waiting for a answer to my 2 questions on page 441/ reply# 6613, I think the answer is simple but I don't see it... so many things to learn!

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 06, 2015, 02:21:54 pm
Yes the answer is the Python script takes care of the ftp connection. Only if it fails you will need to logon in manual mode and upload the files mentioned.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: muvideo on February 06, 2015, 02:30:40 pm
Its cold out there! ;D

Garrett

2.7K  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 06, 2015, 05:01:39 pm
2.3.0 E4 1.2L have temp range from -40 ... +280 but calibrated measure range is -20 ... +250.
Outside from this range temperatures have * before number. *-23  *258 and so on. After +280
there is  >280 and lower than -40 there is <-40.0
But in cosmos, yes, there is minimum 2.7 Kelvin or -270.45 Celsius.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on February 06, 2015, 05:37:46 pm
And automatically and logically the avg value gets the same sign as the min or max value.  :) As I see in the pictures.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Qualitek on February 06, 2015, 07:17:59 pm
Hi everyone,
I did the resolution hack on my camera, but now every time I try to change toolbar-config_Z3.xml or any xml, the camera won't boot!
why so?  am I doing something wrong?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 06, 2015, 08:55:05 pm
Yes. You can't touch "protected" files like applaunch.dat and those which listed in it
# doCRC FlashBFS\system\appcore.exe 1812480 3954364497
# doCRC FlashBFS\system\common_dll.dll 1224192 3691234647
# doCRC FlashBFS\system\appcore_dll.dll 708608 3352418829
# doCRC FlashBFS\system\progressapp.exe 29184 464017185
# doCRC FlashBFS\system\defaultusr.exe 5120 2332166433
# doCRC FlashBFS\system\chargeapp.exe 32768 4157672503
# doCRC FlashBFS\system\ui.d\design_ui_Z3.xml 36473 748083417
# doCRC FlashBFS\system\ui.d\facet_Z3.rcc 293928 3897467070
# doCRC FlashBFS\system\ui.d\toolbar-config_Z3.xml 1263 2286214514
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Qualitek on February 06, 2015, 09:40:45 pm
Thanks janekivi for your reply.
Isn't the menu hack achieved by modifying those files?
common_dll is part of that list and if am correct it's patched during reso hack!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 06, 2015, 10:09:27 pm
For this firmware I found open window to sneak in and use custom files
and let those dummy files stay there for applaunch to check ;)

dll and conf patch are not needed for my menu. This is tested with 1.22 to 2.3.0
updated E4 lately too. So any EX (like full reso E8) can use them just like that.
But in this case they are missing some things.
(For this you need with CRC and fixed 2.3.0_menu_2014_EX_6_fix.zip)

I got camera here and lost picture like you
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg542098/#msg542098 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg542098/#msg542098)

and here I have new menu
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg543931/#msg543931 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg543931/#msg543931)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 06, 2015, 11:19:50 pm
Sometimes I play with old conf and this noise is great with rainbow high contrast : )))
But what I found out is with new advanced menu files there is in archive edit mode
manual temperature with original conf file.

Now I have too small external lense for close view. But I'm a menu fan. For this I enabled
external optics and have now settings in Measurements parameters for IR compensation.
I don't know is this for play only or there is any practical use for this. This change temp
readings if I change parameters there
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fp on February 07, 2015, 08:32:24 am
Hi,

I just seem to have bricked my E4 V2.3 the same way as fp |O. Was it ever unbricked? I don't see any encouraging news in the messages I read.



Well, the short answer is "no".

The long answer, for those who still remember, is that I returned the camera and got a refund, which I then used to purchase a new one (the first dealer was out of stock), even managing to find an older firmware unit. I kept silent at the time because who knows who is reading what in this thread...

Anyway, it's pretty amazing how fast 1.22 was broken back then, and my hat is off to the recent progress on 2.3 !!
(backporting some of that to the old, pre 1.22/1.2L firmware would be interesting, but I have no time to experiment at the moment)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 07, 2015, 08:48:27 am
Quote
Yes the answer is the Python script takes care of the ftp connection. Only if it fails you will need to logon in manual mode and upload the files mentioned


Thanks bud, I'm still playing and learning with several of many the CMD commands, when I convinced myself with the use of CMD I will do the E4 upgrade.
Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 07, 2015, 03:21:21 pm
I think i need some help here.

I got a 1.22 E4 and upgraded using the 1 step tool provided from this forum

while I was able to upgrade to E8, i was unable to get the custom menu.

I saw a blog that mentioned about cutting paper inserts and fitting ZnGe lenses and his screenshots has a high and low temperatures within the box and mine didn't

(http://www.robotroom.com/IRTest/Flir/Aluminum-can-without-macro-lens-infrared.jpg)



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 08, 2015, 12:05:14 am
I think i need some help here.

I got a 1.22 E4 and upgraded using the 1 step tool provided from this forum

while I was able to upgrade to E8, i was unable to get the custom menu.

I saw a blog that mentioned about cutting paper inserts and fitting ZnGe lenses and his screenshots has a high and low temperatures within the box and mine didn't

(http://www.robotroom.com/IRTest/Flir/Aluminum-can-without-macro-lens-infrared.jpg)
I was never a fan of that 1 click tool as I had problems with it, luckily I was able to figure it out. I would suggest doing the hack the traditional route.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 08, 2015, 01:45:50 am
I think i need some help here.

I got a 1.22 E4 and upgraded using the 1 step tool provided from this forum

while I was able to upgrade to E8, i was unable to get the custom menu.

I saw a blog that mentioned about cutting paper inserts and fitting ZnGe lenses and his screenshots has a high and low temperatures within the box and mine didn't

[img]http://www.robotroom.com/IRTest/Flir/Aluminum-can-without-macro-lens-infrared.jpg[/i mg]
I was never a fan of that 1 click tool as I had problems with it, luckily I was able to figure it out. I would suggest doing the hack the traditional route.

Thanks but will I encounter any problems if I manually upgrade the menu options even though the e4 has been upgraded to e8 or after 1 step upgrade??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 08, 2015, 02:24:15 pm
This is the serial port debug output on my 2.3 bricked E4 (there's a few bad characters in there). I haven't been able to get any feedback from sending characters to debug or console so I guess input is disabled or waiting for a special sequence.

?C!ootloader 16.7L for ASCO (Apr 28 2014 08:52:39)
PMIC wake up: R5=40h E_SEQ_RDY  R6=1h E_nONKEY
PMIC status:  R1=50h VBUS_SEL VBUS_DET  R2=a1h COMP_DET GP_FB2 CHG_ATT
Fuel gauge check: res=1, voltage=4102
?Uset reason (0x00000000): Power ON
?R)=i Valid image length is [0xaa7f58]
?CUnsecure OS image detected

Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel.

Initiating image update in 1?seconds. ?
Launching flash image  ...
+InitSpecifiedEthDevice
INFO: Trying to initialize the built-in USB/MSD...
MSD:: initialization
?STi USB initialization completed
?UT(
Qtach: High speed
?UT(
Qtach: High speed
?UT(PMIC setting limit to 500 mA (res = 1)
?]supported command 0xa1
unsupported command 0x88
unsupported command 0xa1
?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 08, 2015, 06:08:04 pm
If you have "FLIR Install 2" open and refresh it after pressing enter on "Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel." does it see the camera?
(one can hope it could be that easy)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: coolelectrictools on February 08, 2015, 07:30:25 pm
pretty sure i'm going to be buying a e4 really soon pretty interesting you can upgrade it

i've read back about 100 pages or so

how easy or hard is it to do these upgrades with basic computers skills?

what could i research to make the upgrades easier{better understand what needs to be done} because the last thing i want to do is brick a new e4?

how far back do i need to read buying a new e4 the firmware is different on the newer ones right? Is there just the resolution and menu upgrades or is it more?

sorry for the questions they have probably been answered before
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 08, 2015, 08:18:17 pm
I will try a bit more but it doesn't seem to make a difference. I should point-out that the debug log is now encoded. At first it seemed I had the wrong RS232 settings but eventually figured-out the translation to get something readable. So maybe the port input is disabled as well as encoded if/when enabled.
 
If you have "FLIR Install 2" open and refresh it after pressing enter on "Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel." does it see the camera?
(one can hope it could be that easy)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 08, 2015, 11:31:08 pm
I am a brand newbie here and I just have some questions...

Here is the short of it. I am a homeowner / DIY'er who just purchased a FLIR E4 for my own personal use to find and seal air leaks in my home. I am astounded at the things that I have found in the first week of "playing". I have been reading this blog until my eyes have popped out of my head. At first I thought I had a good handle on things being said here, but now I have become a little confused with the conversation.

I am just interested in doing the resolution hack on my imager. I am not interested (at this time) in any of the menu hacks, unless it limits the camera's ability to work correctly. Is the basic resolution hack that Gemrough posted in thread #6488 still the proper set of instructions for my E4 1.2L ver. 2.3.0?

I have read a lot of new stuff which I believe is geared towards the menu hacks... I just need the basics.

Thanks for any help that is offered. And great job to all that have put a huge amount of time into this. It is pretty cool.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: coolelectrictools on February 09, 2015, 12:19:39 am
I am a brand newbie here and I just have some questions...

Here is the short of it. I am a homeowner / DIY'er who just purchased a FLIR E4 for my own personal use to find and seal air leaks in my home. I am astounded at the things that I have found in the first week of "playing". I have been reading this blog until my eyes have popped out of my head. At first I thought I had a good handle on things being said here, but now I have become a little confused with the conversation.

I am just interested in doing the resolution hack on my imager. I am not interested (at this time) in any of the menu hacks, unless it limits the camera's ability to work correctly. Is the basic resolution hack that Gemrough posted in thread #6488 still the proper set of instructions for my E4 1.2L ver. 2.3.0?

I have read a lot of new stuff which I believe is geared towards the menu hacks... I just need the basics.

Thanks for any help that is offered. And great job to all that have put a huge amount of time into this. It is pretty cool.

i'm kind in the same position i'll have one in about a week figured i play with it a few weeks before temping to upgrade it. I've read a ton of pages on this topic and like you I'm interested in just the resolution for now. but wondering how difficult this will be.

now does the menu and resolution upgrades make it an E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 09, 2015, 01:26:11 am
I will try a bit more but it doesn't seem to make a difference. I should point-out that the debug log is now encoded. At first it seemed I had the wrong RS232 settings but eventually figured-out the translation to get something readable. So maybe the port input is disabled as well as encoded if/when enabled.

Does space vs enter do anything different when it prompts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on February 09, 2015, 02:03:20 am
Thanks to Janekivi I found my cat today :P! We have in inside cat that somehow escaped and nobody noticed. I got my E4 and got my wife to drive around the neighborhood in the dark. It's near freezing here and I set the alarm palette to highlight anything over 60 degrees. After about 10 minutes of driving I spotted a red ball in the bushes, it was our cat and now he's home. :) Thanks lol!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 09, 2015, 02:49:24 am
Typing anything that I tried makes no difference whatsoever to anything (debug log stays the same, no USB change, no prompt, nothing).


Does space vs enter do anything different when it prompts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 09, 2015, 05:23:57 am
Typing anything that I tried makes no difference whatsoever to anything (debug log stays the same, no USB change, no prompt, nothing).

Darn. Well there goes that thought.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 09, 2015, 08:23:44 am
gif999, did you try firmware update through FLIR Tools ? Can FLIR Tools see the camera to do an update?

Also, did you try eFLIRInstall.exe (not FlirInstallNet.exe), it comes in update packages for bunch of FLIR camera models, but not sure if it works with Ex, may be worth trying.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 09, 2015, 08:30:00 am
A quick video, playing with E4 menu: a programmable button and custom popup menu

http://wikisend.com/download/544016/test.avi (http://wikisend.com/download/544016/test.avi)

We soon will need a custom user manual for  2.3.0, this thing is blowing out of proportion
  8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 09, 2015, 08:54:21 am
Done! today I have hacked my E4 (resolution only) . :-+ what a difference, gone is the noise!  :) :)

All the reading in this topic, watching several YouTube video-clips and reading other sites took me over 100 hours.
3 weeks ago I knew nothing about FTP connection, Prompt, and Python, now I can put this knowledge to my CV...

Yesterday however I was stuck with opening the Python folder with Prompt; I had [>>>] and then a Syntax error every time.
Today after some more YouTube clips I found the problem, I was knocking on Pythons wrong door!
The image point the right path to the Python folder.

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 09, 2015, 09:49:15 am
If you don't have a E4 yet this images may surprise you, this image is not just a black and white image of a kitchen sink, it is a real 100 % heat image,
no image gimmicks, no MSX tricks.
It looks like bl/w because the brushed stainless steel sink and the chrome tap reflects very good the surrounding heat from my self and the fluorescent light.

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 09, 2015, 12:50:31 pm
gif999, did you try firmware update through FLIR Tools ? Can FLIR Tools see the camera to do an update?

yes, no.

Also, did you try eFLIRInstall.exe (not FlirInstallNet.exe), it comes in update packages for bunch of FLIR camera models, but not sure if it works with Ex, may be worth trying.

 eFLIRInstall.exe is a windows CE executable. So that's not going to work.

I am starting to think that removing and reading the flash memory might be the only way to go.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on February 09, 2015, 05:23:54 pm
Yes

I am a brand newbie here and I just have some questions...

Here is the short of it. I am a homeowner / DIY'er who just purchased a FLIR E4 for my own personal use to find and seal air leaks in my home. I am astounded at the things that I have found in the first week of "playing". I have been reading this blog until my eyes have popped out of my head. At first I thought I had a good handle on things being said here, but now I have become a little confused with the conversation.

I am just interested in doing the resolution hack on my imager. I am not interested (at this time) in any of the menu hacks, unless it limits the camera's ability to work correctly. Is the basic resolution hack that Gemrough posted in thread #6488 still the proper set of instructions for my E4 1.2L ver. 2.3.0?

I have read a lot of new stuff which I believe is geared towards the menu hacks... I just need the basics.

Thanks for any help that is offered. And great job to all that have put a huge amount of time into this. It is pretty cool.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jha on February 09, 2015, 06:01:35 pm
I have special questions regarding the ftp user and pass to E4 v2.3.0!
@janekivi

Have a new Camera purchased - as usual in europe E4 v2.3.0 gets delivered now! (From Estonia!)
Did do ResHack v0.4 successfully - pass for ftp were flir/3vlig (No troubles at connection)
Did  do the Menu 230  Ex E4 patch - sucessfully  -  but old pw is not valid anymore! - instead the basic  pass: anonymous/NcFTP@
will work!
I know that the "anonymous" pass should had worked always, as it is used by FLIRInstallNet. Even if  i don't used it before.

But how can that standard user/pass been killed ? - is it in one of the files the userpasswords stored - i couldn't find - or is the flir/3vlig pass simply destroyed with that patch because of modifying ?

Thanks for help - Maybe then there is more clear!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on February 09, 2015, 09:48:16 pm
I have special questions regarding the ftp user and pass to E4 v2.3.0!
@janekivi

Have a new Camera purchased - as usual in europe E4 v2.3.0 gets delivered now! (From Estonia!)
Did do ResHack v0.4 successfully - pass for ftp were flir/3vlig (No troubles at connection)
Did  do the Menu 230  Ex E4 patch - sucessfully  -  but old pw is not valid anymore! - instead the basic  pass: anonymous/NcFTP@
will work!
I know that the "anonymous" pass should had worked always, as it is used by FLIRInstallNet. Even if  i don't used it before.

But how can that standard user/pass been killed ? - is it in one of the files the userpasswords stored - i couldn't find - or is the flir/3vlig pass simply destroyed with that patch because of modifying ?

Thanks for help - Maybe then there is more clear!
I also wonder:-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 10, 2015, 04:05:14 am
I finally brought my E4 2.3 back to life  :phew:. The console and debug serial ports are kind of working in 2.3 but they are ciphered. I had to write a small app to decode (Rx) and encode (Tx) while  communicating with the camera. Once I got that working, it was just a matter of using  the bootloader configuration menu to enable RNDIS and  set the IP address before downloading and flashing an official 2.3 NK.bin (using Visual studio 2005/windows platform builder to send the file to the camera).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on February 10, 2015, 07:27:18 am
I have special questions regarding the ftp user and pass to E4 v2.3.0!
@janekivi

Have a new Camera purchased - as usual in europe E4 v2.3.0 gets delivered now! (From Estonia!)
Did do ResHack v0.4 successfully - pass for ftp were flir/3vlig (No troubles at connection)
Did  do the Menu 230  Ex E4 patch - sucessfully  -  but old pw is not valid anymore! - instead the basic  pass: anonymous/NcFTP@
will work!
I know that the "anonymous" pass should had worked always, as it is used by FLIRInstallNet. Even if  i don't used it before.

But how can that standard user/pass been killed ? - is it in one of the files the userpasswords stored - i couldn't find - or is the flir/3vlig pass simply destroyed with that patch because of modifying ?

Thanks for help - Maybe then there is more clear!
My observation is that if the camera recorded the original files, the original name and password Again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 10, 2015, 09:55:14 am
No problems here with flir/3vlig, but the camera has to be turned on and application running. If it is plugged in to a USB port but is off, only anonymous ftp user works.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on February 10, 2015, 02:16:36 pm
No problems here with flir/3vlig, but the camera has to be turned on and application running. If it is plugged in to a USB port but is off, only anonymous ftp user works.
OK thanks for the info:-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 10, 2015, 03:43:53 pm
I have seen how flir/3vlig is not working and only anonymous is usable but this is not always.
And this is not because of hack or menu. I have only custom files in camera and done some
1025 restarts and sometimes is won't connect correctly with usb and then user flir is not
usable. Sometimes it won't connect Z drive with images folder too - no user access.
So, this is depends in what condition the camera is and then it needs reconnect or restart.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 10, 2015, 05:35:47 pm
A quick video, playing with E4 menu: a programmable button and custom popup menu
http://wikisend.com/download/544016/test.avi (http://wikisend.com/download/544016/test.avi)
We soon will need a custom user manual for  2.3.0, this thing is blowing out of proportion  8)
You like to say we can now remake drone view with programmable (down)button
and use zoom popup (with up button) from EXX
http://wikisend.com/download/882832/flir_bw_zoom.mp4 (http://wikisend.com/download/882832/flir_bw_zoom.mp4)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dorcy on February 10, 2015, 08:48:10 pm
A great big thank you to all the geniuses here on this forum. Just got my e4 2.3 resolution working. Trying to crack the menu but unsuccessful so far. cannot locate the new conf.cfc file from in the camera to do the janekivi (you are that man by the way.) python script. does the new file have a different name? I wouldnt think so. any info would be great. Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 10, 2015, 09:48:27 pm
You like to say we can now remake drone view with programmable (down)button

Yes one button operation adds convenience, I find it useful to be able to switch fast between two palettes for example, without going to the Palettes menu. A shortcut for zoom switching may also be convenient for things like home inspection.
I guess none of Ex and may be Exx have this combination of features.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 11, 2015, 02:14:27 am
A quick video, playing with E4 menu: a programmable button and custom popup menu

http://wikisend.com/download/544016/test.avi (http://wikisend.com/download/544016/test.avi)

We soon will need a custom user manual for  2.3.0, this thing is blowing out of proportion
  8)

how can I get this upgrade?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 11, 2015, 02:18:11 am


Thanks but will I encounter any problems if I manually upgrade the menu options even though the e4 has been upgraded to e8 or after 1 step upgrade??

anyone...??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 11, 2015, 07:05:54 am
how can I get this upgrade?
Stay tuned
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofisticated on February 11, 2015, 09:22:57 am
I finally brought my E4 2.3 back to life  :phew:. The console and debug serial ports are kind of working in 2.3 but they are ciphered. I had to write a small app to decode (Rx) and encode (Tx) while  communicating with the camera. Once I got that working, it was just a matter of using  the bootloader configuration menu to enable RNDIS and  set the IP address before downloading and flashing an official 2.3 NK.bin (using Visual studio 2005/windows platform builder to send the file to the camera).

Great to hear that you have a successful recovery of a dead e4.
Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 11, 2015, 02:16:26 pm
I finally brought my E4 2.3 back to life  :phew:. The console and debug serial ports are kind of working in 2.3 but they are ciphered. I had to write a small app to decode (Rx) and encode (Tx) while  communicating with the camera. Once I got that working, it was just a matter of using  the bootloader configuration menu to enable RNDIS and  set the IP address before downloading and flashing an official 2.3 NK.bin (using Visual studio 2005/windows platform builder to send the file to the camera).

 :-+ That's awesome! Please expand on the details of this when you have the time as it could be very helpful digging deeper into these units in the future.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 11, 2015, 03:46:08 pm
With this kind of sucess we can do more experiments and I release this 2.3.0 menu 2014 advanced update for E4.
This is for users who have already new menu or for all who like to make a custom conf. I have included readme's
and all hints are in guide. You can use this update in other cameras with custom conf.
New menu adds user defined presets what you can configure and save. They replace factory predefined presets.
Furthermore you can in settings adjust more measurement parameters and MSX focus distance with smaller
increments. Saved images can you edit with advanced measurement tools and change all parameters before
saving it again. I'm sure you find new recording mode for time lapse and palettes are in two groups so you can
jump up and down in their rows.
There is not clear thermal screen without graphics any more but  this can be done with programmable button
in the future. Now this screen is needed for preset making.
This menu is tested and working fine at least in one 1.22 to 2.3.0 upgraded E4 now, like my previous menu did.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 11, 2015, 04:30:11 pm
With this kind of sucess we can do more experiments and I release this 2.3.0 menu 2014 advanced update for E4.
This is for users who have already new menu or for all who like to make a custom conf. I have included readme's
and all hints are in guide. You can use this update in other cameras with custom conf.
New menu adds user defined presets what you can configure and save. They replace factory predefined presets.
Furthermore you can in settings adjust more measurement parameters and MSX focus distance with smaller
increments. Saved images can you edit with advanced measurement tools and change all parameters before
saving it again. I'm sure you find new recording mode for time lapse and palettes are in two groups so you can
jump up and down in their rows.
There is not clear thermal screen without graphics any more but  this can be done with programmable button
in the future. Now this screen is needed for preset making.
This menu is tested and working fine at least in one 1.22 to 2.3.0 upgraded E4 now, like my previous menu did.

At this rate it's going to have more functions than my phone
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 11, 2015, 04:31:55 pm
Anyone knows how to remove the battery from the bottom battery and cap housing??

I am thinking of modding it to either upgrade to a higher cap battery or allowing a simple drop-in battery compartment

I've tried removing according to the youtube video but it looks easier than it is
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 11, 2015, 05:14:04 pm
:-+ That's awesome! Please expand on the details of this when you have the time as it could be very helpful digging deeper into these units in the future.

It seem the bootloader is looking for a signature inside the NK.bin file (possibly in NK.exe at 0x80101330 but I could be way off)  and if it doesn’t match, it disables “autoboot” and sets the “Host connection” to MSD which forces the use of the serial port to get anything working again. The “debug” serial port can be used to connect to the camera but there is a substitution cypher with ASCII = (255-serialData)/2 to display what is received and serialData = 255-2*ASCII to transmit to camera, '\r' terminated lines. To get the bootloader menu, hard reboot the camera and send “space” within 1 second. You can then set the “Host connection” to rndis, the IP address to 192.168.0.2 and enable autoboot, save the changes. I then used  “Download image now”/”Download OS image with PB and save to Flash” which resulted in “BOOTME” being sent to my desktop. I had windows Visual studio 2005 running with with Windows CE 6 platform builder on my PC. As soon as I connected platform builder to the device with the NK.bin as the project file, the download started, the image was flashed and the camera booted right-up (well... almost, I had to put back some other files that I had changed in other places).

I tried to execute “Download image now”/”Download OS image with PB and save to Flash” again once my camera was fixed but the camera would not send “BOOTME” anymore. I don’t know if NK.bin needs to be corrupted for this to work or if I did something else to enable it while I was playing with the camera for a few days. Edit:I tried again after fixing-up some driver issues on my PC (uninstall/reinstall flir device driver) and it is working fine. I loaded a modified NK.bin file and executed from RAM (not flashed). It crashed because of my mods but the bootloader didn't prevent it from loading

There are other options to send the OS file that could be simpler but I didn’t try them (tftp client/server, Mass Storage Device). The Mass Storage Device sounds interesting, maybe you just leave the “Host connection” to MSD and put NK.bin in the ASCO MSD folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 11, 2015, 05:30:02 pm
Adjust the focus of the E4 lens for a wee bit sharper image at infinity

Today I made a lens tool almost like the one in one-of-Mikeselectricstuff E4 YouTube movies.
Not easy to make because polymorph cools quickly, I have been lucky to make a good one the first time.

I found out to get the best sharpness at infinity I must turn the lens 15 degree clockwise from the original position which I had marked.
In the image left is the original position, right is wee bit sharper.
Now I have 360x280 resolution @ infinity  ;D
(no grammatical errors this time?)

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 11, 2015, 07:49:13 pm
You like to say we can now remake drone view with programmable (down)button
and use zoom popup (with up button) from EXX
http://wikisend.com/download/882832/flir_bw_zoom.mp4 (http://wikisend.com/download/882832/flir_bw_zoom.mp4)
Yes one button operation adds convenience, I find it useful to be able to switch fast between two palettes for example, without going to the Palettes menu. A shortcut for zoom switching may also be convenient for things like home inspection.
I guess none of Ex and may be Exx have this combination of features.
I did this video with my E4 : )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 11, 2015, 10:33:41 pm
I finally brought my E4 2.3 back to life  :phew:. The console and debug serial ports are kind of working in 2.3 but they are ciphered. I had to write a small app to decode (Rx) and encode (Tx) while  communicating with the camera. Once I got that working, it was just a matter of using  the bootloader configuration menu to enable RNDIS and  set the IP address before downloading and flashing an official 2.3 NK.bin (using Visual studio 2005/windows platform builder to send the file to the camera).

@ gif999: I am trying to catch up as best as I can, reading all of these threads...So, what were you trying to do when you bricked your E4? Were you trying to do a resolution hack, or were you trying to upgrade the menu? I want to just do the resolution hack to mine, but I am scared to brick it. I don't think I would have the skills to bring it back to life. Everyone on here seems to have pretty decent luck with the resolution hack, it seems anyway.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 11, 2015, 11:12:24 pm
I was trying something else entirely which required me to change the OS files, not something I have seen anybody doing here.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 11, 2015, 11:58:39 pm
I was trying something else entirely which required me to change the OS files, not something I have seen anybody doing here.

Ok, thanks for the quick reply. I feel better now. I am pretty confident that I can do the hack with very little problems. I am collecting the files needed and printing excerpts from here to make sure I am prepared. I just got a little concerned when I saw that you bricked yours and was about to abort all attempts. I feel like a kid the night before Christmas. Tomorrow is THE day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on February 12, 2015, 03:21:19 am
Is it possible to enable thermal fusion mode like the E60 has? Has anyone had any success with this? You can see it in EEV #402 around 11:30 looks fairly interesting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 12, 2015, 04:23:13 am
Just wanted to give a quick  :-+ to janekivi and everyone else that's been working on 2.3.0.

I decided to upgrade from 1.18.7 to 2.3.0 today on my 1.0 E4.

I just flashed the 2.3.0 FIF and rebooted and it retained my "upgraded" status. Installed the 2014 menu FIF and had to add a little tweak to my e8.cfg and recrc it to get the manual adjustments working.

So far I really like the clean no measurements screen! Makes for "truer" video capture in UVC mode and allows me to "frame" my shots better! Also the thermal blending is a nice addition.

Cant wait till I have some more time to play with the advanced ed. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 12, 2015, 05:44:30 am
Is it possible to enable thermal fusion mode like the E60 has?
Sort of

http://wikisend.com/download/930750/test4.avi (http://wikisend.com/download/930750/test4.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on February 12, 2015, 11:32:02 am
I decided to upgrade from 1.18.7 to 2.3.0 today on my 1.0 E4.

Thanks OrBy

(http://m.memegen.com/jbm5hi.jpg)

:-+

I have a HW 1.0 E4 with FW 1.19 and I was waiting for months to see who would have been the first to jump in the dark!

...had to add a little tweak to my e8.cfg...

Can you provide a cook book for that? Details, please!

Now, people like Taucher (old dragon with Flir FW) may prefer to have an 1.19 unencrypted FW, see here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg582792/#msg582792 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg582792/#msg582792)

Personally I am not interested on clear FW. It is just my personal opinion nothing more.
I will wait a little to see if someone will report any show stopper issues with the upgrade from FW1.1x to FW2.3 on HW 1.0, and because I have no time now to play with the E4.

Oh God, now I have to read 1000 of pages to understand how to properly high res the FW 2.3 (seems like the one click is now reliable?) and finally get the janekivi menu drug in my blood system.

Very happy about the good news, Prosecco on me for everybody!

PS: anybody knows what where the differences between HW releases 1.0, 1.1, and so on?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kilobyte on February 12, 2015, 11:51:34 am
Oh God, now I have to read 1000 of pages to understand how to properly high res the FW 2.3 (seems like the one click is now reliable?) and finally get the janekivi menu drug in my blood system.
It was easier than I thought.

The instruction here are a good startpoint https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647)
I got a 550 error with the apply script but it worked.


I got my E4 yesterday. The first thing that i have done was the Resolution hack. Much cleaner and sharper image compared to the E6 here at work but with less menu functions.

And yesterday evening at home i did the menu upgrade from janekivi.
Big Thank You :-+

The feature to set the temperature scale manually is the best thing and very useful.

And with a ZnSe lens it's great to look at components  / PCBs.

BR
Kai

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 12, 2015, 02:21:33 pm
...had to add a little tweak to my e8.cfg...
Can you provide a cook book for that? Details, please!
PS: anybody knows what where the differences between HW releases 1.0, 1.1, and so on?

To start off - if your  sticking with stock firmware and features and you already have a working e8.cfg on the camera - just flash the stock 2.3.0 FIF and your done - nothing else is needed - it just worked for me.

But if your going to use janekivi's menu's you need to go through your e8.cfg line by line and make sure that you have all the entries present that he lists in his conf_contents_requirements.txt.

I had tweaked mine many times in the past but was missing the block that had:

Code: [Select]
.caps.config.ui.image entry
.caps.config.ui.image.adjust entry
.caps.config.ui.image.adjust.enabled bool  true
.caps.config.ui.image.adjust.manual bool  true

in it - but yours may differ so it's best to check.

Once I added them I used the original CRC01 hack method to re-CRC it and uploaded the E8.cfg and rebooted.

No need to touch any DLL's, run .py scripts, or mess with encrypted cfg files.

As for the differences in 1.0/1.1/1.2 + L etc... I actually emailed support yesterday about it and they indicated that it's actually config not hardware revisions. I don't think anyone has torn down anything publicly other then mike's 1.0 and shared yet to prove otherwise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 12, 2015, 02:35:12 pm
janekivi is there any way to integrate the ability to toggle NUC on and off through a menu?

Code: [Select]
# turn off auto-nuc
rset .tcomp.services.autoNuc.active false

# turn on auto-nuc
rset .tcomp.services.autoNuc.active true

I would love to see an option for it under the main settings screen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 12, 2015, 04:48:26 pm
Do not know about if auto NUC can be disabled but a press and hold on Archive button (when in live view) performs a NUC. So at any time you can do a manual NUC .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 12, 2015, 05:03:09 pm
Do not know about if auto NUC can be disabled but a press and hold on Archive button (when in live view) performs a NUC. So at any time you can do a manual NUC .

Oh yes I know about that. The idea is to power on the camera and disable the NUC'ing. Wait 5-10 min for it to warm up and stabilize temp wise. Then do a manual NUC and start recording video over UVC to a PC. This could allow for smoother capture without any text or calibration popup's with janekivi's menu installed and the clear screen option. I prefer to leave mine in UVC and MSD mode for easy capture and file export and not in RNDIS mode so having a menu option to toggle NUC'ing would help avoid having to swap modes, TELNETTing in, and manually toggling the option all the time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 12, 2015, 05:44:53 pm
We haven't found the way to add custom menu points like this. For example
jpg save quality 100 is accepted only in preset file. Menu seems to doesn't
have access to change resource values which you can set by telnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 12, 2015, 06:09:42 pm
We haven't found the way to add custom menu points like this. For example
jpg save quality 100 is accepted only in preset file. Menu seems to doesn't
have access to change resource values which you can set by telnet.

Either way your doing great work and I hope your having fun messing with things like I am!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 12, 2015, 11:09:58 pm
Thanks to everyone who has dedicated their time to make this hack available to the rest of us. I did the v2.3 resolution hack today on my E4 and it is awesome. I am astounded how much more sensitive the camera is now. I was a little confused on the last portion of the instructions where "you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera". I didn't upload those two files back to the camera, mainly because I didn't know how...

But, I actually had the Error 500 occur, and the program tried to load 4 different time, having successfully loaded it on the fourth try. In the end, it told me to reboot the camera... I did and now I have 240x320 resolution. I have no obvious menu changes, if there was suppose to be any. The only thing that I found to be a little strange is that the camera takes a very long time to boot up and sometimes it will lag trying to display photo information. Anyone have any experience with issues like I am having?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 13, 2015, 09:35:43 am
Yes, camera is slower now while resource tree is much longer now. And I have seen lag in
archive too. Everywhere is more information now and booting take longer time. After all is
readed, camera seems to run fine.
Second thing I saw here is some feel like noise is back and picture is not sharp. This is because
of new look. You can see more now and palettes bring out more contrast. I see lines like here:

http://www.flir.com/thermography/americas/us/view/?id=65982 (http://www.flir.com/thermography/americas/us/view/?id=65982)
Uncooled Thermal Camera Image of Handprint on Wall - Initial Image

But real noise you can see here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg588471/#msg588471 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg588471/#msg588471)
and here
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg589550/#msg589550 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg589550/#msg589550)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 13, 2015, 10:17:12 am
Quote
Second thing I saw here is some feel like noise is back and picture is not sharp

Its depends on what you are imaging, a object with high contrast looks sharper, the image of the lace curtain is 100% 320x240 IR image, no MSX or other tricks, it looks really sharp, the focus was adjusted for close-up (25 cm) the background is cold and thus black.
The other image is my PC desk, monitor, keyboard, mouse... the focus was adjusted for this distance, still the image looks not sharp, just poor.

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on February 13, 2015, 10:39:59 am
Since I have a interest in having a TIC from Flir I get numerous Google ads from FLUKE thermal imaging devices on almost all other websites I visit...
When will this stop Mr FLUKE?

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 13, 2015, 02:56:51 pm
If anyone else is having issues with getting strange IP addresses (instead of 192.168.0.2) and not being able to communicate with the camera anymore when connecting to a PC... Uninstalling and re-installing the FLIR device driver has solved the issue for me
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Swake on February 14, 2015, 02:18:13 am
Another successful 2.3.0 upgrade.

Started on a Win8 64-bit. Could only set the RNDIS to permanent, after hours of trying and still no connection I almost gave up.
Tried on another Win8 32-bit, with totally different hardware to no avail. The RNDIS interface never connected with the FLIR correctly.

Had to use an 'old' win7 32bit laptop. That really went smooth. Installed drivers and python, connected the camera and got a new network.
Local IP: 192.168.1.1
Flir IP: 192.168.1.2.

Backup everything with Filezila, run the resolution patch and done.
The IP's are slightly different from the 192.168.0.1 range. Reason is the thing is smart enough to recognize that range was already in use.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samsimg on February 14, 2015, 08:47:02 am
Hi all,

After spending several hours studying in this forum, getting excited and after an order at Amazon, I'm a proud owner of a FLIR E4. It's running the latest FW V2.3.0 and the V0.4 Resolution Update worked perfectly. Absolutely stunning!

However, I'm having troubles with the 2.3.0 Menu 2014 update. The enhanced menu does not work properly (no PIP, ZOOM and improved measurement) and most importantly I keep getting the following error when I run the python script:

Applying 5178 bytes of delta at 000004d8
Traceback (most recent call last):
  File "menu_conf.py", line 12, in <module>
    assert len(d) == len(delta)
AssertionError

I tried to factory reset the E4 and start from scratch again with the resolution hack and then menu hack. I'm using the conf.cfc file from AFTER the resolution hack as instructed.

Any ideas what goes wrong?

Thanks in advance!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 14, 2015, 10:04:09 am
Anyone knows how to remove the battery from the bottom battery and cap housing??

I am thinking of modding it to either upgrade to a higher cap battery or allowing a simple drop-in battery compartment

I've tried removing according to the youtube video but it looks easier than it is

Anyone???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 14, 2015, 02:06:12 pm
  File "menu_conf.py", line 12, in <module>
    assert len(d) == len(delta)
AssertionError
Right conf is in \FlashFS\system\appcore.d\config.d and lenght is 6608
What you have in C:\python27 directory?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gif999 on February 14, 2015, 02:47:39 pm
Anyone knows how to remove the battery from the bottom battery and cap housing??

I am thinking of modding it to either upgrade to a higher cap battery or allowing a simple drop-in battery compartment

I've tried removing according to the youtube video but it looks easier than it is

Anyone???

Puling straight up didn't work but pushing on the rounded side near the top to rotate the battery made it come right off.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Swake on February 14, 2015, 06:32:23 pm
Funny, there is a torrent.d folder on the flir  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Swake on February 14, 2015, 09:22:25 pm
@Mike
@Taucher
@DaveWB
@Aurora
@compet17
@gemrough
@janekivi
and because I certainly forgot someone important
@all those that have contributed and still continue to support us

THANK YOU :-+  :clap: 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samsimg on February 15, 2015, 02:36:34 am
  File "menu_conf.py", line 12, in <module>
    assert len(d) == len(delta)
AssertionError
Right conf is in \FlashFS\system\appcore.d\config.d and lenght is 6608
What you have in C:\python27 directory?

... of course I was using the a conf from the wrong directory  :palm: All is good now.

Many thanks, janekivi !!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 15, 2015, 04:52:17 am

Puling straight up didn't work but pushing on the rounded side near the top to rotate the battery made it come right off.

thanks man, I struggled with it and managed to get it off.

though it decided to pry a section of my fingernail off along with it.


I found this hourglass shaped rubber grommet that fell out, is that needed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Swake on February 15, 2015, 09:44:52 am
Now I have 360x280 resolution @ infinity  ;D
(no grammatical errors this time?)

Grammatical I don't think so. On the other hand you have achieved E9 resolution  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: freqjn on February 15, 2015, 09:12:40 pm
and yet another 2.3 upgraded :)

Had similar issues as Swake. Started the upgrade on a Win7 Pro (64) (1 of 2). After running permanent.fif, ipconfig only showed 169.254.x.x, 255.255.0.0.

Second machine tried was Win 8.1 (64) ipconfig gave same results after again releasing and renewing, also went as far as killing ipv6 on both the 1st and 2nd machine.

Beginning to think it was bricked at this point.

Three hours later achieved success on the third machine Win7 Pro (64)(2 of 2). I did not kill ipv6. I did not install Flir Tools, I only installed 32bit Flir drivers on this 3rd (64bit) machine. Ran ipconfig, after driver install, with 192.168.0.2 showing went right to Filezilla for immediate backup.


The res hack its..its....sooo pretty.

Many thanks to all participants of the discussion and EEVBlog.

This post is brought to you by the print button (above-right of the first post on each page) and (Ctrl)+(f).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 16, 2015, 08:23:12 am
If you are interested in BFIC, here is new version.

You can correct wrong MSX alignment, you can put measure points on image. There will be areas with min/max/avg and batch export to csv soon. Also I do plan to make it work with Flir tools.

https://www.youtube.com/watch?v=Fi_5pIbz-C8 (https://www.youtube.com/watch?v=Fi_5pIbz-C8)
https://www.youtube.com/watch?v=Hjrmrv8134w (https://www.youtube.com/watch?v=Hjrmrv8134w)

What are next news ???

- You can load any plain JPG and treat it as a regular thermal image
- You can open ISI images (Snapshot 525)
- Working on Fluke IS2, BMT and new FLIR BMP images - will be soon

I am also about to get rid of convert utility, which is causing problems on 32 bit systems.

Any inputs are appreciated. This tool is not dead at all :) I am just too busy with other projects.

DOWNLOAD ----> http://test.daves.cz/wrapper/wrapper.zip (http://test.daves.cz/wrapper/wrapper.zip) (about 12MB - it contains utils)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 16, 2015, 10:00:09 am
Any inputs are appreciated.

OK, since you asked...
 :)

The temperature picker in Editor causing the app to crash when moved to the left top corner. Tested several times, the error seems reproducable. Win7 x64/Intel here with 32Gb Nvidia graphics.

And by the way, would be nice the picker label to change from above  to below the probe line as it approaches top and right corners of the picture so it does not go outside of the picture frame boundaries where it is not possible to read it.
Thank you for your efforts!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 16, 2015, 10:10:26 am
A new discovery here.

I put RNDIS mode command in the config file:

.system entry
.system.usbmode text "RNDIS"

With that the camera now boots every time to RNDIS mode, even with zrndis.rsc file removed.
The only way to switch it to USB was to remove the above two lines from the conf file.

Not sure how useful that is but anyway, interesting to know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 16, 2015, 11:05:00 am
@daves,

You have my sincere thanks for your work.

I have a Snapshot 525 camera but could not lay my hands on any software to read the files that it produced. Do you have a Snapshot 525? Did you get the original software? If so I would love to obtain a copy (its freeware but now unavailable).

Keep up the good work and thank you again.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on February 16, 2015, 01:36:56 pm
I managed to dismantle the battery but not to sure if it's possible to replace the batt with a higher capacity 18650

Am i right to say the PCB at the top of the battery is the charging PCB?

Also, there are 3 pins, pos, neg and TH. What's the TH for?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 16, 2015, 02:25:04 pm
Suggest you take a look at my 'E4 useful information' thread on this forum.

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg374200/#msg374200 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg374200/#msg374200)

TH is the thermistor connection (10K NTC)

PCB on top of cell is the protection circuit and not a charger.

Somewhere in this teardown thread you will find details of upgrading the standard cell to a higher capacity.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 17, 2015, 12:12:39 pm
Do you have a Snapshot 525?
No, I just had a request to read ISI images and user sent me sample photos.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 17, 2015, 12:53:57 pm
@daves,

Ah OK, No worries. Thank you very much for providing the ISI file read capability  :-+

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dorcy on February 17, 2015, 08:56:32 pm
OK almost there. ran janeviki's python menu script and get a new .cfc file named "conf_reso_only.cfc" Do i need to change the name of the file to conf.cfc before replacing the .cfc file in the camera.
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on February 17, 2015, 09:53:50 pm
OK almost there. ran janeviki's python menu script and get a new .cfc file named "conf_reso_only.cfc" Do i need to change the name of the file to conf.cfc before replacing the .cfc file in the camera.
Thanks

No, the conf_reso_only.cfc is your backup-file.. You have to load the new made conf.cfc into the camera. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 18, 2015, 02:27:41 pm
Here's a little comparison video of a stock vs 2.3.0 upgraded. http://youtu.be/dP8R7FRYU0k (http://youtu.be/dP8R7FRYU0k)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on February 19, 2015, 07:24:00 am
Hi everyone,

I've been following this thread for a while (as a modest contributor in the early days, then as a stalker). To my defense, I was busy trying to make entry-level thermal imaging more affordable (http://hackaday.io/project/1974-tj-99-thermal-imager (http://hackaday.io/project/1974-tj-99-thermal-imager)) :)

Now, regarding the Flir E4: I'd like to have a friend buy one from US (during a busines trip) and carry it back on his flight to Europe.

Do you see any issues with this? I for one couldn't find a definitive answer to this (I'd also like to avoid any unnecessary paperwork stated in the Flir Ex export info doc. if in practice req. are more lax). Next step would probably be to ask Flir directly, but if anyone here already has any experience with this, please help me out.

Please excuse my offtopic! However, it might be that someone has an answer and that may be a good reference to others too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on February 19, 2015, 08:12:06 am
Do you see any issues with this?

I flew with a E4 in my hand luggage from US to Germany and back. Only on the way back, the german officer asked a few question about that strange device. I had to turn it on and he was playing for 5 minutes long with it. Big smiles and nothing more. That´s what happen to me
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: faza380 on February 19, 2015, 08:40:58 am
Good day. Tried to update the E 50 to E60 with nothing happened. Tell me you can do it and how?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nitroxide on February 19, 2015, 09:26:06 am
Do you see any issues with this?

I flew with a E4 in my hand luggage from US to Germany and back. Only on the way back, the german officer asked a few question about that strange device. I had to turn it on and he was playing for 5 minutes long with it. Big smiles and nothing more. That´s what happen to me

Zucca, thanks for sharing your personal experience. This is exactly the kind of response I was looking for!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on February 19, 2015, 10:06:03 am
You know there is 2.3.1 out?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 19, 2015, 06:15:51 pm
You know there is 2.3.1 out?

Download site still lists 2.3.0 for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuna on February 19, 2015, 06:20:35 pm
Got a cam here, delivered two weeks ago, 2.3.1 inside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 19, 2015, 06:22:51 pm
I saw here 2.3.13 too
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg567325/#msg567325 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg567325/#msg567325)
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg568448/#msg568448 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg568448/#msg568448)

but on firmware download page:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dimdadum on February 19, 2015, 06:45:52 pm
I have gone through this thread and understood that Windows 7 is not fully supported for this hacking purpose. Ok well, I even though tried and ended up situation where I finally managed to make resolution hack, menu hack and advanced menu hack. After those tricks spot measuring (and other spot features) was not working. Also taking picture raised a small notification window with error "appcore.exe encountered a serious..". I also lost MSX feature and while looking image information there was only few rows shown.

So here is some info of my setup:
TIC: Flir E4 1.2L
Firmware: 2.3.0
Operating System: Windows 7 x64
FTP: WinSCP
RNDIS used: permanent one

Steps so far:
- Stock setup
-> Resolution hack based on this message (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647)
-> Basic menu hack
-> Advance menu hack
-> (issues with features)
-> Resolution only conf.cfc (conf_reso_only.cfc)
-> Basic Menu Restore (2.3.0_Menu_Restore.fif)

After those steps I got the basic functions working (with basic menus and noisy low reso). I have took backups from stage after resolution hack, so there should be history files stored safety.

My main question: is there way to fully restore stock 2.3.0 firmware? After that I could try those steps again with Win XP to make sure everything is done again from beginning.

Thank you in advance for your time and support.

-J
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 19, 2015, 08:06:35 pm
Win is not problem here.
I have seen only 2 problems with update. Conf is not right and
\FlashBFS\system\appcore.d\factory.d\ui_control.rsc is not right.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bretzeljoe on February 20, 2015, 09:37:18 pm
Hi,

i have some questions regarding the e30 hack. I have a E40bx and have some trouble applying the hack.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266)

I observed some issues:

1. in FlashFS\system\appcore.d\config.d config.cfg the user Igustavocampos used the "app super" term. Is this correct?
2. Igustavocampos uploaded two e30hack.zip files. Are they different? I noticed some differences
3. In Igustavocampos manual there is a step in double:
step 9.3 \FlashFS\system\appcore.d\config.d\conf.cfg is already modified in the beginning. Is it necessary to do it again?

In the E40bx the file structure looks the same as described in Igustavocampos manual. However when I apply the hack, I loose zooming fuctionality and get no improvement in resolution or function. LuckilyI can revert it completely by re-using the old files. Does anyone else has issues with hacking the Exxbx series? Exxbx series should be the same as the Exx series, don't they? Anyone successfully applied the hack to a Exxbx series cameras. resolution is the most important thing for me.

I also checked the files/procedure from  the user funzt:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)

However the manual is rather poor or not existent, just plain files. That' sad. Do I also have to apply the CRC01.exe all the files to obtain the #CRC01 xxxxx? I would be happy if someone could help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lgustavocampos on February 20, 2015, 09:58:07 pm
bretzeljoe, hello, I just read your replay and I have some points to highlight, first and the most important, the hack was originally designed for the early e30, so I must ask you about the version of your camera, is it from before 2013?

Second, You asked about the CRC, I will revise the procedures, but to clarify, my hack lays on the supervisor structure, it is the same that goes on use when you set it to high res from the supervisor menu, but it only while powered on or while not rebooted, and was said so, send me the files you created I will revise it to you.

Third have you done a comllete backup? I can get the sup for you from there, but only if it is a camera from before 2013.

I will look forward your answer, at this very moment I am on my way home, so I may have left a mistake or two, so excuse me.

Kind regards,

Gustavo Campos
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bretzeljoe on February 21, 2015, 09:09:49 am
Hello Gustavo,

Thank you for the prompt response.
my E40bx camera is from late 2011. Firmware was just updated for your hack to the latest version as described, version number starts with 490. I performed a full backup of the FlashFS folder before starting. Then I performed the procedures you have described.

I will send you the FlashFS folder, original files and my changed files via Mailbigfile. Please send me your email via PM.

Best regards
bretzeljoe

Perhaps I found some other error. The file \FlashFS\system\services.d\config.d config cfg already contains a CRC01 number. the others files not. I deleted this line with the CRC01 number before generating a new one as described. was this not okay?
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 21, 2015, 12:37:10 pm
I did this lens holder now but temp is higher with closer view and
"External IR window compensation" menu is not for me...
with this lens compensation must be negative.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 21, 2015, 02:54:09 pm
I did this lens holder now but temp is higher with closer view
You received more energy than was emitted?
 :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 21, 2015, 05:27:58 pm
I did this lens holder now but temp is higher with closer view and
"External IR window compensation" menu is not for me...
with this lens compensation must be negative.

Makes sense due to the calibration being done with a known smaller aperture. Your allowing more energy to be gathered and focused so that calibration is no longer valid. Just think of lighting things on fire with a magnifying glass.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mike1962 on February 21, 2015, 11:30:32 pm
In the last 7 days I have been digging through 4500 messages, only  2065 to go... ;D
Just seen the YouTube video about the 1.22 hack, makes the mod more clear, any change for a 1.23 firmware mod clip?
2.3 video coming sometime this week

Hi, is the 2.3.0 video uploaded to uTube or somewhere else? Thanks, Mike
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 22, 2015, 12:26:16 am
Has anyone had this problem after their resolution hack?:

Doing an image playback in the camera itself: when I go to the image information screen my emissivity, distance, and thermal resolution are all correct. But the reflective temperature always displays 20 degrees F, the relative humidity is always 50% and the atmospheric temp is always 68 degrees F no matter what. I know that the E4 may not have the capability to record humidity or ambient temps, but the reflective temp I thought was always set by the user in the settings. No matter what I choose, the image information always displays 20 degrees F.

Before I did the hack, I had reset the camera to the factory defaults. I noticed that the default setting for reflectivity was 20 degrees C (or 68 degrees F)... I wonder if that somehow got stuck in the process, even though it now displays F.


BTW: @DaveWB, nice job on the comparison video. Really makes me want to upgrade the menu now...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 22, 2015, 01:12:41 am
I did this lens holder now but temp is higher with closer view
Can you share the link to the holder 3D files ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kezat on February 22, 2015, 06:48:20 am
I posted this in the https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/) thread, I thought I should post it here also in case anyone is still looking for a simple lens holder ;)
Yes with a supplemental lens the displayed temperature will change, I wonder how hard it would be to do some offset measurements.

"Hi guys, I designed a lens holder for 19 and 20mm lens, it is up on http://www.thingiverse.com/thing:683107 (http://www.thingiverse.com/thing:683107) if you have access to a 3D printer.


(http://i1293.photobucket.com/albums/b583/kezat/Oddball/20150214_173938_zps2510b387.jpg)


(http://i1293.photobucket.com/albums/b583/kezat/Oddball/20150214_173746_zps1c98f394.jpg)

Two quad resister arrays and a darlington transistor array IC.
(http://i1293.photobucket.com/albums/b583/kezat/Oddball/FLIR0171_zps08d4dacf.jpg)

Thin PCB trace with a simulated short.
(http://i1293.photobucket.com/albums/b583/kezat/Oddball/FLIR0183_zpsd6118ec6.jpg)

This is not using the lens but I thought it was cool, can you spot the bad capacitor? ;D
(http://i1293.photobucket.com/albums/b583/kezat/Oddball/FLIR0128_zps83d04b94.jpg)"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 22, 2015, 11:45:48 am
I made it with autocad. After receiving I trimmed it a bit...
This is for home use and must look good (it won't fit in holster with camera : )))

I have 20mm ZnSe Focal Length 4'' lens
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 22, 2015, 09:07:45 pm
Hey guys, new user. Just got my unit Direct from Flir this week. It is a v2.30 Hardware 1.2L.

And guess what..it was already resolution hacked! No joke. When i booted it up i noticed that it looked pretty good and not a low 80x60 resolution. I bought it refurbished too so it came with some images already on it. Guess the previous owner didn't clear it (has pics of his wife on it and some pcb's, house, feet, dogs...)

So I was trying to just plug it in and access the USB mass storage function to see about deleting pictures and verifying functions. Well..it wouldnt show up. Tried in windows 7 32 bit and windows 8.1 64bit. Well..it set up a network so i assumed it was already in RNDIS mode. I connected to FTP, backed up the files and then went to apply the python patch.

Got error about line 89 and that it was already patched. Went back to Filezilla and looked for the .dll and conf.cfc files and sure enough, they were much more recently modified, 11/15/2014 and 2:30 for both...strange. I then dug back through the pictures and looked at some that were prior to that date and the stated resolution was 80x60 and then those after that date were 320x240.

So this was in the hands of FLIR and they did nothing!!! They 100% sold me a E4 with better specs than they claim.

So on to menu hacks!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 22, 2015, 09:09:01 pm
Has anyone had this problem after their resolution hack?:

Doing an image playback in the camera itself: when I go to the image information screen my emissivity, distance, and thermal resolution are all correct. But the reflective temperature always displays 20 degrees F, the relative humidity is always 50% and the atmospheric temp is always 68 degrees F no matter what. I know that the E4 may not have the capability to record humidity or ambient temps, but the reflective temp I thought was always set by the user in the settings. No matter what I choose, the image information always displays 20 degrees F.

Before I did the hack, I had reset the camera to the factory defaults. I noticed that the default setting for reflectivity was 20 degrees C (or 68 degrees F)... I wonder if that somehow got stuck in the process, even though it now displays F.


BTW: @DaveWB, nice job on the comparison video. Really makes me want to upgrade the menu now...

My camera does the same thing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on February 22, 2015, 09:24:31 pm
Hey guys, new user. Just got my unit Direct from Flir this week. It is a v2.30 Hardware 1.2L.

And guess what..it was already resolution hacked!
:-DD :-DD :-DD :-DD :-DD :-DD :-DD :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 22, 2015, 10:07:03 pm
installed 2.3.0_menu_2014_EX_6_fix which seems to work..noise is back so time to research that. Seems like another user had the same issue. Noise sucks...


*edit..fixed. Full power cycle and battery removal.

The application of the hacks was super easy. Janevki...you are the man. The readme's and forum post are spot on.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 22, 2015, 11:14:14 pm
But the reflective temperature always displays 20 degrees F, the relative humidity is always 50% and the atmospheric temp is always 68 degrees F no matter what.

No such problem here. But you may want to wait for the next patch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 23, 2015, 04:31:52 pm
For better look it may be shiny... for this you can print graphics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on February 23, 2015, 05:02:19 pm
LOL that might be the one I sent back....

Hey guys, new user. Just got my unit Direct from Flir this week. It is a v2.30 Hardware 1.2L.

And guess what..it was already resolution hacked! No joke. When i booted it up i noticed that it looked pretty good and not a low 80x60 resolution. I bought it refurbished too so it came with some images already on it. Guess the previous owner didn't clear it (has pics of his wife on it and some pcb's, house, feet, dogs...)

So I was trying to just plug it in and access the USB mass storage function to see about deleting pictures and verifying functions. Well..it wouldnt show up. Tried in windows 7 32 bit and windows 8.1 64bit. Well..it set up a network so i assumed it was already in RNDIS mode. I connected to FTP, backed up the files and then went to apply the python patch.

Got error about line 89 and that it was already patched. Went back to Filezilla and looked for the .dll and conf.cfc files and sure enough, they were much more recently modified, 11/15/2014 and 2:30 for both...strange. I then dug back through the pictures and looked at some that were prior to that date and the stated resolution was 80x60 and then those after that date were 320x240.

So this was in the hands of FLIR and they did nothing!!! They 100% sold me a E4 with better specs than they claim.

So on to menu hacks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 23, 2015, 05:53:31 pm
LOL that might be the one I sent back....

Hey guys, new user. Just got my unit Direct from Flir this week. It is a v2.30 Hardware 1.2L.

And guess what..it was already resolution hacked! No joke. When i booted it up i noticed that it looked pretty good and not a low 80x60 resolution. I bought it refurbished too so it came with some images already on it. Guess the previous owner didn't clear it (has pics of his wife on it and some pcb's, house, feet, dogs...)

So I was trying to just plug it in and access the USB mass storage function to see about deleting pictures and verifying functions. Well..it wouldnt show up. Tried in windows 7 32 bit and windows 8.1 64bit. Well..it set up a network so i assumed it was already in RNDIS mode. I connected to FTP, backed up the files and then went to apply the python patch.

Got error about line 89 and that it was already patched. Went back to Filezilla and looked for the .dll and conf.cfc files and sure enough, they were much more recently modified, 11/15/2014 and 2:30 for both...strange. I then dug back through the pictures and looked at some that were prior to that date and the stated resolution was 80x60 and then those after that date were 320x240.

So this was in the hands of FLIR and they did nothing!!! They 100% sold me a E4 with better specs than they claim.

So on to menu hacks!


the high res pics and file modification was the same day you posted the modified write up on how to do the res hack. Coincidence....

You remember the serial?  when i get home i can PM it to you. Its on my old laptop.

Would like to recover the default  conf.cfc file if possible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: uski on February 23, 2015, 08:46:20 pm
LOL that might be the one I sent back....

Why did you send it back ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on February 23, 2015, 09:07:46 pm
Ordered another one from zoro @ 30% off.

LOL that might be the one I sent back....

Why did you send it back ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 23, 2015, 09:57:19 pm
Yeah after reading the thread and seeing the zoro coupon codes i thought about the same thing.

Ordered another one from zoro @ 30% off.

LOL that might be the one I sent back....

Why did you send it back ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 23, 2015, 11:43:24 pm
For those interested in thermal imaging equipment in general..... you may like to take a look at my latest acquisition...... a thermal microscope  :)  Cost....GBP35  ;D

https://www.eevblog.com/forum/testgear/thermal-camera-the-aga-680-thermal-15x-microscope-retro-tech-porn/msg616597/#msg616597 (https://www.eevblog.com/forum/testgear/thermal-camera-the-aga-680-thermal-15x-microscope-retro-tech-porn/msg616597/#msg616597)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 24, 2015, 03:13:31 am
So this was in the hands of FLIR and they did nothing!!! They 100% sold me a E4 with better specs than they claim.

I can just imagine the referb/service tech's inner monolog:

F#ck it - they are just gonna hack it anyway... <rubber stamp sound> NEXT!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: clubmkred1 on February 25, 2015, 12:05:02 am
But the reflective temperature always displays 20 degrees F, the relative humidity is always 50% and the atmospheric temp is always 68 degrees F no matter what.

No such problem here. But you may want to wait for the next patch.

So it seems as if, at least, another user has the same problem. Is there anyway to fix it so it works correctly? Do I need to undo the hack, and start over? Any ideas? Who would the next patch come from? This forum or FLIR?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 25, 2015, 01:14:30 am
You do not want patches from Flir.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: numik on February 25, 2015, 04:24:46 pm
Hello Guys I need help from you... I have realy interesting case... I bought Flir E4 camera in february 2015 (so recently). This camera has 2.3.0 frimeware. My resolution is 80x60 and I'm sure about it ;)

In /FlashFS/system/appcore.d/config.d/conf.cfc is 6608 bytes.

When I do the hack resolution I have error in "apply.py line 89" - please see screen from CMD. Is this mean that I bought hacked camera? If FileZilla I see that common_dll.dll file has different date that other files... What do you think about this? Is it any hope for me?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on February 25, 2015, 07:16:57 pm
But the reflective temperature always displays 20 degrees F, the relative humidity is always 50% and the atmospheric temp is always 68 degrees F no matter what.

No such problem here. But you may want to wait for the next patch.

So it seems as if, at least, another user has the same problem. Is there anyway to fix it so it works correctly? Do I need to undo the hack, and start over? Any ideas? Who would the next patch come from? This forum or FLIR?
All settings stuff is in
.image.sysimg.basicImgData.objectParams
ambTemp        293.14999 (20 C)
atmTemp         293.14999 (20 C)
emissivity            0.94999999 (e0.95)
objectDistance     2  (2m)
relHum                0.5 (50%)
(other settings there is for external lens)
If I change them from my "2.3.0 menu 2014" they will be saved and seen in image info too
and on report pdf too. Ext optics settings are moving too from menu.

But the same info is there and this is not affected:
.image.sysimgInstances.ref.basicImgData.objectParams
.registry.image.sysimgInstances.main.basicImgData.objectParams
 :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on February 25, 2015, 08:29:17 pm
Hello Guys I need help from you... I have realy interesting case... I bought Flir E4 camera in february 2015 (so recently). This camera has 2.3.0 frimeware. My resolution is 80x60 and I'm sure about it ;)

In /FlashFS/system/appcore.d/config.d/conf.cfc is 6608 bytes.

When I do the hack resolution I have error in "apply.py line 89" - please see screen from CMD. Is this mean that I bought hacked camera? If FileZilla I see that common_dll.dll file has different date that other files... What do you think about this? Is it any hope for me?

Mine gave me that exact error but it was actually modified and I confirmed it with the the pictures stored on the camera.

post a screen shot of your stored image stats.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 98th nobody on February 26, 2015, 05:49:10 am
Created an account so I could thank all involved in building/sharing the solution for the E4.  :-+

I ordered from Amazon and received just yesterday.  Imagine my surprise to find 1.22 firmware.  Had a calibration date of April 2014.

I upgraded menu and resolution yesterday evening with not much trouble.

Thanks again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on February 26, 2015, 05:07:10 pm
Hello guys,

I would like to ask you for help. I know mainly FLIR users are here :-DD, but many of you do have other thermal cameras :box:.
I am looking for any non Flir thermal images. Photos from Fluke, Testo and other cameras.

Why? I did update BFIC to load SNP, BMT, IRI, ISI, IS2 file formats. And I need more photos for testing purposes.
So I am looking for testers and owners of other TIC, who are interested in new software development.
One software for all Thermal Cameras.   |O

You can find more here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

Or on youtube:
https://www.youtube.com/watch?v=5WXZp4PCBgo (https://www.youtube.com/watch?v=5WXZp4PCBgo)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: relmerator on February 28, 2015, 03:27:52 pm
Hi all,

First, I wanted to say thanks for the amazing work that's been done here to open up all of the E4's capabilities.  It's truly impressive!

My E4 arrived yesterday and after the obligatory initial thermal survey of the entire house, I immediately set about the upgrade process outlined by gemrough here https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647).

I'm having trouble connecting to the camera over RNDIS -- the new adapter always comes up with the automatic address 169.254.202.x.  I've tried pinging 169.254.202.2, as well as configuring a static IP of 192.168.0.1, gw 192.168.0.2, but no luck there.  To prevent conflicts with my LAN, I disabled that adapter during this procedure.

The instructions above suggested using Set_RNDIS_permanent.fif, but I'm a bit apprehensive about that.  If I set permanent RNDIS and am still unable to access the camera over IP, am I permanently stuck in RNDIS mode?  Does doing a factory reset via the E4's menus recover from applying that FIF, or is it a one-way trip until I apply a corrective FIF (which I'd be unable to do without successful IP connectivity to the camera)?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 28, 2015, 05:38:05 pm
Hello guys,

I would like to ask you for help. I know mainly FLIR users are here :-DD, but many of you do have other thermal cameras :box:.
I am looking for any non Flir thermal images. Photos from Fluke, Testo and other cameras.

Why? I did update BFIC to load SNP, BMT, IRI, ISI, IS2 file formats. And I need more photos for testing purposes.
So I am looking for testers and owners of other TIC, who are interested in new software development.
One software for all Thermal Cameras.   |O

You can find more here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

Or on youtube:
https://www.youtube.com/watch?v=5WXZp4PCBgo (https://www.youtube.com/watch?v=5WXZp4PCBgo)

I like playing around with with BFIC but the output always shows more JPG aliasing to me compared to the stand alone flir.php. It's almost like BFIC is recompressing it more. Also can you look into adding an option to output as PNG in the future?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 28, 2015, 06:05:52 pm
Is anyone interested in panorama images?

Hey tomas123 - have you played around with ICE 2.0.3 yet? Some interesting new features but it looks like it dithers out almost all the data when you feed it the grey tiff's now. 1.4.4 still works like a charm at least still.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 01, 2015, 02:58:48 am
To prevent conflicts with my LAN, I disabled that adapter during this procedure.
I am on W7 and I have a router with 192.168.0.1 address. Disabling the LAN adapter did not work for me. But simply unplugging the PC LAN cable from the router worked and the camera boot to 192.168.0.1/2 address.

Quote
unable to access the camera over IP, am I permanently stuck in RNDIS mode?
yes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 01, 2015, 12:11:12 pm
Hey tomas123 - have you played around with ICE 2.0.3 yet? Some interesting new features but it looks like it dithers out almost all the data when you feed it the grey tiff's now.

I stitched dozen of images with the new ICE version and it works like a charm (correction of distortion etc)
no dither, see my sample

save the 1644x974 (!) image and view details with an image viewer
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139466;image)

I use this quick-and-dirty windows scripts to expand the gray level for better stitching
save panorama as 16 bit stitch.tiff and re-compress the level of stitch.tiff with
       > convert stitch.tiff +level x,y panoraw.png

(script needs Exiftool, Imagemagick 16 Bit and gnuwin awk http://gnuwin32.sourceforge.net/packages/gawk.htm (http://gnuwin32.sourceforge.net/packages/gawk.htm) )

Flir E40
Code: [Select]
@echo off
exiftool -b -RawThermalImage IR_*.jpg -w _%%f.tif
identify -verbose _*.tif | awk "{if(NR==1){min=65556;max=0};if($1~/min:/){min=((min<$2)?min:$2)};if($1~/max:/)max=((max>$2)?max:$2)}END{printf(\"%%s,%%s\",min,max)}" > level.txt
set /p level=<level.txt
echo.
echo stitch the png and then:
echo convert stitch.tiff +level %level% panoraw.png
echo.


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN IR*.jpg`) do call :over %%f
goto :eof
:over
set a=%1
echo %a:~3,4%
exiftool -b -RawThermalImage %1 | convert - -level %level% -resize 640x RAW%a:~3,4%.png

Flir E4
Code: [Select]
@echo off
exiftool -b -RawThermalImage FLIR*.jpg -w _%%f.png


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN _FL*.png`) do call :swap %%f


identify -verbose _*.tif | awk "{if(NR==1){min=65556;max=0};if($1~/min:/){min=((min<$2)?min:$2)};if($1~/max:/)max=((max>$2)?max:$2)}END{printf(\"%%s,%%s\",min,max)}" > level.txt
set /p level=<level.txt


echo.
echo stitch the png and then:
echo convert stitch.tiff +level %level% panoraw.png
echo.


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN _FLIR*.tif`) do call :over %%f
goto :eof


:swap
set a=%1
echo %a% %a:~5,4%
convert -define png:swap-bytes=on %a% _FLIR_%a:~5,4%.tif
goto :eof




:over
set a=%1
echo %a:~6,4%
convert %a% -level %level% -resize 640x RAW%a:~6,4%.png
goto :eof
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 01, 2015, 07:36:16 pm
Yup that did it.
Few little tweaks for my setup but it works!

Thanks again tomas123!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 01, 2015, 10:18:37 pm
It seems FLIR has reduced the price of the E8 to $3,995 again. I wouldn't be surprised if the 2.3.0 hack has something to do with it. :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 02, 2015, 06:23:06 am
Hey tomas123 - have you played around with ICE 2.0.3 yet? Some interesting new features but it looks like it dithers out almost all the data when you feed it the grey tiff's now.

I stitched dozen of images with the new ICE version and it works like a charm (correction of distortion etc)
no dither, see my sample

save the 1644x974 (!) image and view details with an image viewer
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139466;image)

I use this quick-and-dirty windows scripts to expand the gray level for better stitching
save panorama as 16 bit stitch.tiff and re-compress the level of stitch.tiff with
       > convert stitch.tiff +level x,y panoraw.png

(script needs Exiftool, Imagemagick 16 Bit and gnuwin awk http://gnuwin32.sourceforge.net/packages/gawk.htm (http://gnuwin32.sourceforge.net/packages/gawk.htm) )

Flir E40
Code: [Select]
@echo off
exiftool -b -RawThermalImage IR_*.jpg -w _%%f.tif
identify -verbose _*.tif | awk "{if(NR==1){min=65556;max=0};if($1~/min:/){min=((min<$2)?min:$2)};if($1~/max:/)max=((max>$2)?max:$2)}END{printf(\"%%s,%%s\",min,max)}" > level.txt
set /p level=<level.txt
echo.
echo stitch the png and then:
echo convert stitch.tiff +level %level% panoraw.png
echo.


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN IR*.jpg`) do call :over %%f
goto :eof
:over
set a=%1
echo %a:~3,4%
exiftool -b -RawThermalImage %1 | convert - -level %level% -resize 640x RAW%a:~3,4%.png

Flir E4
Code: [Select]
@echo off
exiftool -b -RawThermalImage FLIR*.jpg -w _%%f.png


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN _FL*.png`) do call :swap %%f


identify -verbose _*.tif | awk "{if(NR==1){min=65556;max=0};if($1~/min:/){min=((min<$2)?min:$2)};if($1~/max:/)max=((max>$2)?max:$2)}END{printf(\"%%s,%%s\",min,max)}" > level.txt
set /p level=<level.txt


echo.
echo stitch the png and then:
echo convert stitch.tiff +level %level% panoraw.png
echo.


for /f "usebackq delims=" %%f in (`dir /a:-d /b /oN _FLIR*.tif`) do call :over %%f
goto :eof


:swap
set a=%1
echo %a% %a:~5,4%
convert -define png:swap-bytes=on %a% _FLIR_%a:~5,4%.tif
goto :eof




:over
set a=%1
echo %a:~6,4%
convert %a% -level %level% -resize 640x RAW%a:~6,4%.png
goto :eof
Wow. impressive x10
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: WEL0058 on March 02, 2015, 05:29:15 pm
Tomas123  "I stitched dozen of images with the new ICE version and it works like a charm (correction of distortion etc)
no dither, see my sample"

WOW That is a fantastic IR image!!!   It is amazing what you can do with the extra tools.  By the it looks like one of your street lights is not working... LOL

Purchase an E40BX on eBay two weeks age but the seller forgot the battery Argh...   After testing will do the E60 update.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 02, 2015, 08:39:38 pm
By the it looks like one of your street lights is not working... LOL

I thought he just did a bad job stitching then I realized it would have been hot if it was working lol, I'm still amazed at it. I couldn't find any errors in the stitching
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2015, 11:19:47 am
background information:

I used a simple monopod to avoid horizontal movements and strong camera rotations (vertical lines)
18 images taken in 3-4 minutes

shut on the camera >10 minutes before using to prevent strong temperature drift while taking the image sequence (shutter ->  flat-field correction)

the image order is arbitrary but use a generous overlapping

see the original images of this sequence (resized to 160x120 pixel)
Code: [Select]
montage IR_*.jpg -geometry 160x+2+2 montage.jpg(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139803;image)

Hint: with the large overlapping you can delete a single image, if ICE has trouble in a specific range


compare the results

Mircosoft ICE version 2.0
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139466;image)

panorama stitched with Flir Tools+ version 4.1  (image has original size)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139808;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: infinus on March 03, 2015, 02:57:21 pm
Hi all, new to the forums. Been reading this thread for the last week or so. Lots of really great work done here. Tomas123, awesome images!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 03, 2015, 05:06:08 pm
I know mainly FLIR users are here :-DD, but many of you do have other thermal cameras :box:.
I am looking for any non Flir thermal images. Photos from Fluke, Testo and other cameras.

Why non Flir, if you have still trouble with Flir  :)

Here you find a nice Flir image from a Flir T640, where BFIC shows wrong colors in real image
source  http://www.flir.com/motorsports/ (http://www.flir.com/motorsports/)

http://www.flir.com/motorsports/flir-infrared-race-car-driver-entering-car.jpg (http://www.flir.com/motorsports/flir-infrared-race-car-driver-entering-car.jpg)
(http://www.flir.com/motorsports/flir-infrared-race-car-driver-entering-car.jpg)

swap color channels of embedded PNG with
Code: [Select]
>exiftool -embedded* flir-infrared-race-car-driver-entering-car.jpg
Embedded Image Width            : 1024
Embedded Image Height           : 768
Embedded Image Type             : PNG
Embedded Image                  : (Binary data 891296 bytes, use -b option to extract)

>exiftool -b -EmbeddedImage flir-infrared-race-car-driver-entering-car.jpg | convert - -separate -swap 1,3 -set colorspace YCbCr -combine -colorspace RGB real.jpg

(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=139832;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWR on March 04, 2015, 08:43:36 pm
Hi :)

I would appreciate a bit of help with the conversion of my new E4. :)

I get the following error when installing the FLIR Tools:
This product requires Microsoft Office 2007 or higher to be installed. The installation will now terminate.
0x80070643 – Der opstod en alvorlig fejl under installationen.

Why does it care about the Office version? (i have 2003)

I've tried with both v.5 downloaded from FLIR and the v4 that was linked to in the description, and it's the same error message.

Best regards
Soren
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 05, 2015, 03:45:05 am
Ohhhh tomas123 I just managed to take a set of pictures for a pano that spit out a level span of 10460 - 31429. The script managed to crush it down far enough that it started to dither out all the detail again once ICE was done with it. Not a big deal but hey if I can find a way to break something - odds are I will. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 05, 2015, 08:52:38 am
Are you sure, that you are working with 16 bit images?


// Imagemagick
>convert -version
Version: ImageMagick 6.8.9-10 Q16 x64 2014-11-02 http://www.imagemagick.org (http://www.imagemagick.org)
Copyright: Copyright (C) 1999-2014 ImageMagick Studio LLC
Features: DPC Modules OpenMP
Delegates: bzlib cairo freetype jbig jng jp2 jpeg lcms lqr pangocairo png ps rsvg tiff webp xml zlib

// converted Flir images (level streteched)
>identify RAW3413.png
RAW3413.png PNG 640x480 640x480+0+0 16-bit sRGB 555KB 0.000u 0:00.009

// ICE stitched panorama
>identify panoraw.png
panoraw.png PNG 562x1277 562x1277+0+0 16-bit sRGB 307KB 0.000u 0:00.001



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 06, 2015, 01:41:14 am
Yup:

Version: ImageMagick 6.9.0-8 Q16 x64 2015-02-21 http://www.imagemagick.org (http://www.imagemagick.org)

raw0528.png PNG 320x240 320x240+0+0 16-bit sRGB 99.3KB 0.000u 0:00.000

panoraw.png PNG 471x627 471x627+0+0 16-bit sRGB 66.5KB 0.000u 0:00.000

If I clip out the heaters it does not crush it out so much. Witch is why I think it comes back to skewing the range to high and causing ICE to band out.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2015, 06:01:03 am
you use a very aggressive palette  - I can't see the quality of stitching :(

I just managed to take a set of pictures for a pano that spit out a level span of 10460 - 31429.

If I clip out the heaters it does not crush it out so much.

some ideas:

(1) sometimes I also clipped out some hot spots (lamps)
i.e.
convert flirraw.png -level 16000,30000 tilexy.png
-> convert flirraw.png -level 16000,20000 tilexy.png
but you lost the informations

(2) untested: change (+/-)gamma like (+/-)level and move the lamps in a nonlinear range
  (a) convert raw.png -level 13000,30000 -gamma 3 tilexy.png
  (b) stitch tiles with ICE version 2
  (c) convert pano.png +level 13000,30000 +gamma 3 ready.png

(3) use old ICE
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 06, 2015, 12:45:22 pm
a sample
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140279;image)
Code: [Select]
>exiftool -b -RawThermalImage FLIR0015.jpg > 1.png
>convert -define png:swap-bytes=on  1.png 2.png
>identify -verbose 2.png
   Gray:
     min: 12212 (0.186343)
     max: 15611 (0.238209)

max value is 15610, but we stretch for demonstartion the level between 12212,30000
Code: [Select]
>convert 2.png -level 12212,[b]30000[/b] 3A.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140287;image)
here as jpg, some browser won't show correct grayscale in 16 bit png

and now the same image with a additional gamma correction
really better for ICE
Code: [Select]
>convert 2.png -level 12212,30000 -gamma 3 3B.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140289;image)

after stitching roll back to old values with +
Code: [Select]
>convert pano.png +level 12212,30000 +gamma 3 ready.png

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: infinus on March 06, 2015, 02:25:09 pm
Tomas123,

Since sending you a note I've been working on these scripts and have started getting really good results! I'll try to post a sample at some point.

Have you been able to stitch any panorama's with MSX?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 06, 2015, 05:32:41 pm
you use a very aggressive palette  - I can't see the quality of stitching :(

Was done to show the banding more clearly - not much of a fan of it myself.

some ideas:

(1) sometimes I also clipped out some hot spots (lamps)
i.e.
convert flirraw.png -level 16000,30000 tilexy.png
-> convert flirraw.png -level 16000,20000 tilexy.png
but you lost the informations

(2) untested: change (+/-)gamma like (+/-)level and move the lamps in a nonlinear range
  (a) convert raw.png -level 13000,30000 -gamma 3 tilexy.png
  (b) stitch tiles with ICE version 2
  (c) convert pano.png +level 13000,30000 +gamma 3 ready.png

(3) use old ICE

(1) That's a case by case thing - nice to have as an option - don't think the loss of info is that big of a deal - once it's been pano'ed I would not rely on it for accuracy anymore anyway.

(2) Sharp idea to use a gamma shift - I will give it a spin and see what happens!

(3) I keep a few spare VM's around just for reasons like this. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gmit77 on March 06, 2015, 05:37:08 pm
ciao, don't want to bother this tech discussion, just to let you know we offer a 10% discount on FLIR E4 for purchasing during this week end it is 10% OFF and free shipping over Europe.
code via PM
I can delete the message if not appropriate.
hope it helps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 06, 2015, 06:41:06 pm
Discounts are always welcome in this thread. Thanks for posting this news.
Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on March 06, 2015, 10:19:35 pm
This is just a note for people who have changed the focus on their cameras. I've taken images with the sun visible in the scene by accident before and never seen any ghosting from it (but I never intentionally looked at the sun with the camera on purpose. Today I was talking to someone with the camera resting back on my shoulder pointing at the sky. When I looked back down at it I could see a little erratically shaped bright colored looking line running across the image in the shape of the path the sun had taken across the image. I freaked out thinking I had damaged the sensor. After a minute or so the line faded away (I'm assuming the spot it was focused on returned to ambient temp). The camera automatically calibrates it out almost right away which decreases it's visibility greatly, but I could still see it. After the sensor completely cooled down it appears to be gone and scrutinizing the image where the line was doesn't seem to show any lasting damage that is being compensated for by the camera's software. I'm not sure how susceptible these cameras are to damage from the sun, but when you play with the focus and start to focus the camera more to the infinity end of the spectrum I would be much more wary of the sensor catching a glimpse of the sun from now on because the point when focused to infinity the point of light is much more concentrated on the sensor now than it was from the factory. I will also make sure the shutter is in place before I set it down outside than I was before.

I did find this from FLIR, but I'm not sure whether it applies to the E4 or these cameras that were intended for surveillance use where prolonged exposure to the sun could result by accident.

http://www.timetech.co.za/FLIR%20%20Are%20thermal%20cameras%20damaged%20by%20sun.pdf (http://www.timetech.co.za/FLIR%20%20Are%20thermal%20cameras%20damaged%20by%20sun.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 07, 2015, 12:45:26 am
I have seen ghosting after pointing my E4+ at a nice and hot campfire and it's embers. It went away on it's own after a few min.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 07, 2015, 12:57:42 pm
All of FLIRs current Vox ameras are Sun Safe.  That includes the E4.
Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: n1248 on March 08, 2015, 12:13:44 pm
Does anyone have the complete teardown document of the ISC0601B sensor?
From the net I can find only this sample http://www.systemplus.fr/wp-content/uploads/2013/05/S+C_RM101_2012-06-15_FLIR_ISC0601B-micro-bolometer_Sample.pdf (http://www.systemplus.fr/wp-content/uploads/2013/05/S+C_RM101_2012-06-15_FLIR_ISC0601B-micro-bolometer_Sample.pdf)
Is that the same as the originally posted (and now broken) link: http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf (http://www.i-micronews.com/upload/Rapports/Yole_FLIR_ISC0601B_Micro-bolometer_Sample.pdf) ?
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bubben on March 08, 2015, 05:08:42 pm
Hi! Im from sweden so sorry for my bad english :)

I have bought a Flir E4 and it comes with 1,2l and 2.3.0

I have tried the resolution hack but i got stuck.
When i try to find my E4 on "Ipconfig" i cant find anything :/
Im using windows 8.1, is that the problem?

And is there a video on 2.3.0 hack on youtube? I couldnt find it anywhere.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on March 08, 2015, 06:54:35 pm
Hi! Im from sweden so sorry for my bad english :)

I have bought a Flir E4 and it comes with 1,2l and 2.3.0

I have tried the resolution hack but i got stuck.
When i try to find my E4 on "Ipconfig" i cant find anything :/
Im using windows 8.1, is that the problem?

And is there a video on 2.3.0 hack on youtube? I couldnt find it anywhere.


I believe windows 8 has issues when doing the hack, try a win7 machine.

All of FLIRs current Vox ameras are Sun Safe.  That includes the E4.
Aurora

Excellent, hoping to grab some images of the eclipse.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 08, 2015, 11:56:42 pm
a sample
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140279;image)
Code: [Select]
>exiftool -b -RawThermalImage FLIR0015.jpg > 1.png
>convert -define png:swap-bytes=on  1.png 2.png
>identify -verbose 2.png
   Gray:
     min: 12212 (0.186343)
     max: 15611 (0.238209)

max value is 15610, but we stretch for demonstartion the level between 12212,30000
Code: [Select]
>convert 2.png -level 12212,[b]30000[/b] 3A.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140287;image)
here as jpg, some browser won't show correct grayscale in 16 bit png

and now the same image with a additional gamma correction
really better for ICE
Code: [Select]
>convert 2.png -level 12212,30000 -gamma 3 3B.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=140289;image)

after stitching roll back to old values with +
Code: [Select]
>convert pano.png +level 12212,30000 +gamma 3 ready.png

Yeah the gamma boost is really the way to go with new new ICE on these type of images - much better results:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 09, 2015, 05:24:57 pm
sorry Orby, the invers operation of -gamma ist not +gamma

see http://www.imagemagick.org/script/command-line-options.php#gamma (http://www.imagemagick.org/script/command-line-options.php#gamma)

correct is the invers value

a sample

first check max/min values of the 16 bit image
Code: [Select]
> identify -verbose e4.png
Image: e4.png
  Format: PNG (Portable Network Graphics)
  Type: Grayscale
  Depth: 16-bit
    Gray:
      min: 22992 (0.350835)
      max: 42019 (0.641169)

and stretch the level
Code: [Select]
> convert e4.png -level 22992,42019 -level 3 1.png
//now stitch 1.png with ICE
...
//the revers steps
> convert 1.png -level 0.33333 +level 22992,42019 2.png

compare the e4.png with 2.png  (identical)


PS: please post a grayscale panorama image (there are many hard color steps in your image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 09, 2015, 07:32:46 pm
sorry Orby, the invers operation of -gamma ist not +gamma

see http://www.imagemagick.org/script/command-line-options.php#gamma (http://www.imagemagick.org/script/command-line-options.php#gamma)

correct is the invers value

a sample

Code: [Select]
>convert e4.png -level 22992,42019 -level 3 1.png
//now stitch 1.png with ICE
...
//the revers steps
>convert 1.png -level 0.33333 +level 22992,42019 2.png

compare the e4.png with 2.png  (identical)


PS: please post a grayscale panorama image (there are many hard color steps in your image)

Hmmm reading the notes I think it should it be -gamma 3  to boost and process then -gamma .33333 to return it. I think you may have level in their twice by mistake. I will play more tonight and post results.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dakine on March 12, 2015, 10:58:09 am
I purchased a FLIR E4-B by accident. Will the hack still work for that model? The only thing different with the E4-B is the temperature range is not as high as the standard E series. I'm assuming the hack will work for this model but I'd like to verify it. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 16, 2015, 12:25:33 am
I purchased a FLIR E4-B by accident. Will the hack still work for that model? The only thing different with the E4-B is the temperature range is not as high as the standard E series. I'm assuming the hack will work for this model but I'd like to verify it. Thanks.
I am interested to know as well, and if you need any help with the process I'd be more than happy to help for my own/EEVBlogs education  :box:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: viacom1 on March 16, 2015, 11:03:31 am
There is going to be a flash sale at zoro.com tomorrow.  Probably 20 or 25% off. Check out the main page starting at midnight.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ToT on March 16, 2015, 07:38:49 pm
I purchased a FLIR E4-B by accident. Will the hack still work for that model? The only thing different with the E4-B is the temperature range is not as high as the standard E series. I'm assuming the hack will work for this model but I'd like to verify it. Thanks.

I hope that I'm wrong, but the temperature range seems close to that of the Flir Lepton sensor, (which would be a very bad thing).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 16, 2015, 09:11:43 pm
I purchased a FLIR E4-B by accident. Will the hack still work for that model? The only thing different with the E4-B is the temperature range is not as high as the standard E series. I'm assuming the hack will work for this model but I'd like to verify it. Thanks.

I hope that I'm wrong, but the temperature range seems close to that of the Flir Lepton sensor, (which would be a very bad thing).
Pretty sure hardware is the same, could be that it's calibrated over a more limited range.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bretzeljoe on March 16, 2015, 10:12:43 pm
Does anybody know if there is a (3D Printable) lensholder for the FLIR Exx series for a macro lens like for the E4. Since the FLIR Exx has a built-in lens attachment it should be easy to create one and install it. If anybody knows just let me know.
Title: another Zoro discount
Post by: lofitohifi on March 17, 2015, 06:14:50 am
30% off at zoro, 3hrs
11am - 2pm (ct)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dakine on March 18, 2015, 12:39:49 am
I purchased a FLIR E4-B by accident. Will the hack still work for that model? The only thing different with the E4-B is the temperature range is not as high as the standard E series. I'm assuming the hack will work for this model but I'd like to verify it. Thanks.

I hope that I'm wrong, but the temperature range seems close to that of the Flir Lepton sensor, (which would be a very bad thing).
Pretty sure hardware is the same, could be that it's calibrated over a more limited range.

I canceled the order just to be on the safe side.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on March 19, 2015, 05:26:43 am
For some strange reason I can't get FLIR TOOLS (v 5.1) and drivers (v.1.9.1) to recognize the E4. It's a hacked E4 and I just tried to rehack it
which all worked up until it errored out stating some hacked file already exists.

Win7/64 ultimate

I am trying to install Flir Tools 4.1 next.

Added:
By the way, can anyone tell me why this program (FLIR Tools) is so huge? 4.1 clocks in at 562.65MB!!!!???
It also takes a LONG time to install. This should not be such a huge thing in my opinion.

Will update this post if I can get FLIR TOOLS to recognize the hacked E4....

UPDATE: no luck. Installed uninstalled and reinstalled FLIR Tools and Flir Camera Drivers both 32bit and 64 bit versions. Camera not recognized in FLIR Tools. Some good programming there, Mr. Flir! :(

UPDATE UPDATE: seems to be a Network issue. It can't connect to "MyComputerName/Images" with error: The Network path Was Not Found.
Seems a LOT of hassle to get to a couple of small images...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daves on March 19, 2015, 08:15:16 am
By the way, can anyone tell me why this program (FLIR Tools) is so huge? 4.1 clocks in at 562.65MB!!!!???

Lol. Cant. And why it is so sloooooow?

Give a try to BFIC. Its small, fast and free:
https://www.youtube.com/watch?v=Fi_5pIbz-C8 (https://www.youtube.com/watch?v=Fi_5pIbz-C8#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sunlux on March 19, 2015, 11:45:23 pm
Hello everyone.
Sorry for my english ... I use google translator.
I would like to say thank you. A few days ago I bought E4 and upgraded its resolution. to 320x240. The picture is super.

At the beginning when the operation occurred colored vertical stripes that disappeared a moment of self-calibration of the camera. After 15 minutes use the camera the stripes not show anylonger. I have the picture of them:


My camera FLIR E4:
Model: E4 1.2L
Software: 2.3.0

How can I activate extended menu 2.3.0 software like here?

After few tests the file works/show extended menu:


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sidewinder770 on March 20, 2015, 04:11:30 pm
post removed
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ToT on March 21, 2015, 01:34:59 am
I tried to hack following the instructions in:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg585647/#msg585647)

Long story short, at the end I stupidly tried to install "Set_RNDIS_permanent.fif", as nothing seemed to happen with "Set_RNDIS_temporary.fif", and as the poster had been forced to do so himself.
Now I'm stuck with crippled RNDIS, and no USB.
"Remove_RNDIS_Permament.fif" only leads to "Connection timeout" "Operation aborted" "Close TELNET link" "No Adapter".

I have tried with Win8.1 64 and 32 bit. I don't have any older OS running.
The Flir Camera Network Device is shown in the device manager, and is reported to be working.
I have moved my router up to 192.168.0.201.
I have expanded my DHCP range to allow from 192.168.0.1 and up to .200
I have installed drivers from Flirs homepage.

The camera still doesn't turn up as 192.168.0.2. , instead ipconfig says 169.254.104.229, and Flir install 2 lists 169.254.104.230.
I installed Filezilla, (full of malware), and tried to connect to 169.254.104.230 with user flir and password 3vlig, but as expected, no luck there either.

I have restarted computers and pulled the battery from the camera numerous times.
Nothing seems to work, except for the camera it self.

I would be more than grateful for any suggestions of what to try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 21, 2015, 04:06:55 am
Try resetting to factory default using camera settings menu, see if it comes up as USB after reboot, at which point you can run remove permanent RNDIS script.

Otherwise find a Win XP (best) or Win 7 computer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ToT on March 21, 2015, 08:53:32 am
Thanks for your reply Bud.
Factory reset didn't help I'm afraid.
The camera isn't completely silent. The driver finds it, recognizes it as a Flir camera, but fails to configure.
I have a netbook that I should be able to revert to XP, with some trouble as it came with a XP DVD, but no optical drive.
It's that or an old Vista laptop, but that would feel like putting a scalpel in the hands of a baboon, just beacause he's wearing a surgical mask...  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on March 21, 2015, 10:28:01 am
IP auto configuration never worked for me. I always have to change the IP (of the FLIR network adapter) to 192.168.250.1, and the connect to 192.168.250.2.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 21, 2015, 02:32:04 pm
I have a netbook that I should be able to revert to XP, with some trouble as it came with a XP DVD, but no optical
You can install XP on a virtual machine on your 8.1, install then the FLIR network drivers in XP, plug the camera in and redirect the USB port to XP.

But before going with XP , check if there is a device on your network that is using 192.168.0.1 or 2 address, it may be a router or another computer on your LAN. With the camera unplugged run a ping command from command prompt
 "ping 192.168.0.1" and "ping 192.168.0.2" and see if any response comes back. If that is the case, unplug your computer LAN cable to isolate and try the camera again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gtatters on March 21, 2015, 04:44:00 pm
I am wondering if I could ask this forum for your assistance in a calculation involving thermal imaging? I have a FLIR SC660 as well as FLIR's R&D software but have been wanting to import images into my own R script (or Matlab) to make my own analyses easier. I am having trouble with converting from the Raw data in a .seq file and cam across your book with the helpful equations that are used.

My constraint is that we have made measurements with an external germanium window (T=0.96) so I would like to convert raw data into estimated temperature to obtain estimates the same as what FLIR's software produces. We have hours of thermal video recorded in this manner, and so we are trying to automate the conversion process without requiring the FLIR software. I know the Planck calibration constants for my camera as well as the offset value.   

The general premise is that I'm trying to track the path of the signal from the Object --> Atmosphere 1 --> IR Window --> Atmosphere 2 --> Sensor, taking into account any reflected signal that is also attenuated through the external optics.

In the attached https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx (https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx), I have shown calculations for the RAW 16 bit A/D value obtained from FLIR software (or extracted via exiftool), and my attempt to convert this to a temperature.

I thought I almost figured it out, but I keep hitting a wall.  I've applied a kludge correction factor that appears to force values but I don't know why.  Could I ask you to look over the attached spreadsheet to see what I might be doing wrong?  It's an edited version of a spreadsheet that has appeared on this forums, but I've tried to adapt equations from Minkina's book "Infrared Thermography: Errors and Uncertainties". 

Thank you for any assistance you can provide.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: meta4 on March 22, 2015, 08:10:33 am
Hello,

I have a e4 with firmware 2.3.  I am stuck at trying to login to FTP.  I'm getting bad username/password.  I've entered username: "flir" and password: "3vlig"
Username was accepted but password is not taking with 3vlig.  Any idea why password is not accepting?  I've reset and tried multiple times with same result.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ToT on March 22, 2015, 08:19:01 pm
Phew...  :P
Two things that I have learned:
1.) For the lifespan of my Flir camera, I will keep one computer running XP.
2.) The "permanent" .fif is slightly evil, and should pherhaps not be used as a last resort.

Many thanks to all contributors!
 :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 24, 2015, 08:44:42 am
...
My constraint is that we have made measurements with an external germanium window (T=0.96) so I would like to convert raw data into estimated temperature to obtain estimates the same as what FLIR's software produces. We have hours of thermal video recorded in this manner, and so we are trying to automate the conversion process without requiring the FLIR software. I know the Planck calibration constants for my camera as well as the offset value.   

The general premise is that I'm trying to track the path of the signal from the Object --> Atmosphere 1 --> IR Window --> Atmosphere 2 --> Sensor, taking into account any reflected signal that is also attenuated through the external optics.

In the attached https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx (https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx), I have shown calculations for the RAW 16 bit A/D value obtained from FLIR software (or extracted via exiftool), and my attempt to convert this to a temperature.

I thought I almost figured it out, but I keep hitting a wall.  I've applied a kludge correction factor that appears to force values but I don't know why.  Could I ask you to look over the attached spreadsheet to see what I might be doing wrong?  It's an edited version of a spreadsheet that has appeared on this forums, but I've tried to adapt equations from Minkina's book "Infrared Thermography: Errors and Uncertainties". 

Thank you for any assistance you can provide.

Hi gtatters,

you have the same state of knowledge like me.
Last year we got a nice hint from a Flir insider to the book
Quote
Source: Minkina, Dudzik: Infrared Thermography: Errors and Uncertainities, Appendix A, page 171, http://books.google.cz/books?id=6H3HyacPxnMC&pg=PA171 (http://books.google.cz/books?id=6H3HyacPxnMC&pg=PA171)
for calculating the atmosphere transmissivity ...
(see http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27530.html#msg27530 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg27530.html#msg27530) and following)

It's not sure, that current Flir cameras using exact the formula from page 58 (Minkina year 2004) for calculating inspection windows.
(Don't forget: all thermal image camera producers use different formulas).

But we know, that all kludge correction values are coded inside the exif header
http://cpansearch.perl.org/src/EXIFTOOL/Image-ExifTool-9.90/lib/Image/ExifTool/FLIR.pm (http://cpansearch.perl.org/src/EXIFTOOL/Image-ExifTool-9.90/lib/Image/ExifTool/FLIR.pm)
Code: [Select]
0x20 => { Name => 'Emissivity',                   %float2f },
    0x24 => { Name => 'ObjectDistance', Format => 'float', PrintConv => 'sprintf("%.2f m",$val)' },
    0x28 => { Name => 'ReflectedApparentTemperature', %floatKelvin },
    0x2c => { Name => 'AtmosphericTemperature',       %floatKelvin },
    0x30 => { Name => 'IRWindowTemperature',          %floatKelvin },
    0x34 => { Name => 'IRWindowTransmission',         %float2f },
    # 0x38: 0
    0x3c => {
        Name => 'RelativeHumidity',
        Format => 'float',
        ValueConv => '$val > 2 ? $val / 100 : $val', # have seen value expressed as percent in FFF file
        PrintConv => 'sprintf("%.1f %%",$val*100)',
    },
    # 0x40 - float: 0,6
    # 0x44,0x48,0x4c: 0
    # 0x50 - int32u: 1
    # 0x54: 0
    0x58 => { Name => 'PlanckR1', %float8g }, #1
    0x5c => { Name => 'PlanckB',  %float8g }, #1
    0x60 => { Name => 'PlanckF',  %float8g }, #1
    # 0x64,0x68,0x6c: 0
    0x070 => { Name => 'AtmosphericTransAlpha1', %float6f }, #1 (value: 0.006569)
    0x074 => { Name => 'AtmosphericTransAlpha2', %float6f }, #1 (value: 0.012620)
    0x078 => { Name => 'AtmosphericTransBeta1',  %float6f }, #1 (value: -0.002276)
    0x07C => { Name => 'AtmosphericTransBeta2',  %float6f }, #1 (value: -0.006670)
    0x080 => { Name => 'AtmosphericTransX',      %float6f }, #1 (value: 1.900000)
    # 0x84,0x88: 0
    # 0x8c - float: 0,4,6
    0x90 => { Name => 'CameraTemperatureRangeMax', %floatKelvin },
    0x94 => { Name => 'CameraTemperatureRangeMin', %floatKelvin }
my first look goes to unknown 0x84 and following  :)

the next step is downloading the Flir sample images from Phil (52 flir models !!)
http://owl.phy.queensu.ca/~phil/exiftool/sample_images.html (http://owl.phy.queensu.ca/~phil/exiftool/sample_images.html)
and compare to the unknown values ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: trevordd on March 24, 2015, 09:16:08 am
Hi there, guys! Nice to meet you, I am new here. I need a night vision too. I am thinking of buying rifle scopes (http://www.atncorp.com) from atncorp. What can you tel me about it? My friend says that they are very good and reliable.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 24, 2015, 09:25:15 am
Hi there, guys! Nice to meet you, I am new here. I need a night vision too. I am thinking of buying rifle scopes (http://www.atncorp.com) from atncorp. What can you tel me about it? My friend says that they are very good and reliable.

Night vision isn't the same as infrared. The former enhances the little light available and infrared detects the IR given off from everything. This isn't really the right thread to discuss rifle scopes...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gtatters on March 24, 2015, 12:19:14 pm
Thanks for the help Tomas.  Turns out I made the classic error I've always made in math....switched a plus with a minus sign.  I now no longer require my own kludge factor and all of my camera calibration constants provide a meaningful raw to temperature conversion (I still have to full check my calculations against different flir software packages but the preliminary checks with e=0.9, t=0.9 and short distances appear to be exactly the same as what ThermacamResearcher Pro produces).

My primary purpose with this was to take raw data from .seq files which are TIFF encoded, so yes I'm sure that other formats will require different procedures.

If it helps, here is my updated calculation for the inclusion of an IR window.  I use an IR window with transmission ~0.96 in the range of sensitivity of my camera.

https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx (https://dl.dropboxusercontent.com/u/7096611/thermalvids/RawtoTConversion.xlsx)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 25, 2015, 02:30:55 am
Hello everyone.
Sorry for my english ... I use google translator.
I would like to say thank you. A few days ago I bought E4 and upgraded its resolution. to 320x240. The picture is super.

At the beginning when the operation occurred colored vertical stripes that disappeared a moment of self-calibration of the camera. After 15 minutes use the camera the stripes not show anylonger. I have the picture of them:


My camera FLIR E4:
Model: E4 1.2L
Software: 2.3.0

How can I activate extended menu 2.3.0 software like here?

After few tests the file works/show extended menu:
I helped someone do their camera too and they had the same problem, wish I knew what it was...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 25, 2015, 02:53:33 am
Could be a defective batch of cameras. I raped mine in and out (2.3.0) and never seen anything like that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jim1960 on March 25, 2015, 04:19:09 pm
Hi everyone, I originally posted the below message in the "Flir E4 Teardown Q/A and newbie questions" forum on page# 10 on March 12/15 but never got a reply. So I thought I'd post it again on this forum as it is far more active, I hope someone who can help me replies as I am still really stuck. Thanks, Jim.....



Hi all, I sure have learned a lot reading the hundreds of posts on the EEVblog regarding E4 camera modifications. However, I have reached a point where I am stuck at with my E4 camera, and would like to please reach out for a mentor that could give me some advice. I have gotten as far as being able to read and access my E4's internal files with Filezilla, but am afraid to go any further as I don't want to end up bricking my E4.

My E4 is one of the newer ones, so I'm looking for help from someone who has successfully performed the resolution and menu hacks. The info on my E4 is: Model = E4 1.2L, Part# 63901-0101, Software = 2.3.0

If it is ok with you, you can contact me directly at:  thermographer007@hotmail.com

Thanks, Jim1960
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on March 26, 2015, 04:56:30 pm
Another successful hack. Just received my E4 from TME.eu today. Firmware ver. 2.3.0

The hack was performed on a Windows 7 64bit machine. The python script did return some 550 errors, but now the camera has full resolution. Just to be sure I will copy the files again manually with Filezilla.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PanzerAlexander on March 27, 2015, 10:31:58 pm
Flir B335 converted to B425
Functions added: panorama, video recording, program mode, thermal fusion!

All credits goes to Mike! many many many many thanks!  :clap:

- in camera settings set usb mode to network disk
- ftp to /FlashFS/system/gui.d/config.d/ (user: flir pwd: 3vlig)
- edit gui.cfg and replace all "false" with "true"
- put the correct CRC in the file and overwrite it in the camera
- shut down camera, remove battery, restart

Greetings from Italy

 :-+

Hello I am a complete newbie when it comes to hacking, does anyone has more detailed info on how to upgrade a flirt b335 camera than the information given above??

Thank you
Title: uestion
Post by: Maverick71 on March 28, 2015, 03:25:20 pm
Hello,

I followed all instructions which I have found here for Hacking E4 Mod 1.2L 2.3.0.
On the end, after saving the Backup (2) files the Python patch gave me this:

* uploading common_dll.dll to .....
* failed (error_perm 550 ...

*attempt 2
*failed

*attempt 3
*failed

*attempt 4
*uploading conf.cfc to ...
* PLEASE HARD-REBOOT DEVICE

On reboot my Cursor was on the Top-Left side on the Screen.
The thermal resolution looks better.
Beside the cusror the E4 works like before.
I still have got 3 color palettes.

Question: How can I proove 100% both files was uploaded and the E4 is hacked?

Regards,
Mav
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on March 28, 2015, 05:27:16 pm
I rewrote Tomas123's flir.php for batch process and added some more functions. I will post new versions only here, as update.

daves I was playing around with BFIC 0.9o today and noticed a few things:

If you enter in a offset in the editor and add a max or min point the point actually goes in on the non-offset max or min point.

It crashes when it tries to open a FLIR image file that has been opened and modified/re-saved using FLIR Tools 5.1.15036.1001. (FLIR changed some EXIF info and Phil's EXIFTool have been updated to support it. I replaced your included exiftool it with an updated version and it no longer crashes so you may just need to include an updated one)

Also it would be nice to see the ability to output to PNG to minimize JPG artifacts like flir.php can. I know there will still be some with MSX/fusion/opacity due to the real embedded image being a JPG but the color scale and the thermal image could be more clear if they never go through a lossy JPG compression cycle and could improve image output.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 30, 2015, 08:40:22 am
Flir B335 converted to B425
Functions added: panorama, video recording, program mode, thermal fusion!

All credits goes to Mike! many many many many thanks!  :clap:

- in camera settings set usb mode to network disk
- ftp to /FlashFS/system/gui.d/config.d/ (user: flir pwd: 3vlig)
- edit gui.cfg and replace all "false" with "true"
- put the correct CRC in the file and overwrite it in the camera
- shut down camera, remove battery, restart

Greetings from Italy

 :-+

Hello I am a complete newbie when it comes to hacking, does anyone has more detailed info on how to upgrade a flirt b335 camera than the information given above??

Thank you

I'm actually working on updating my B400 to the B425, but I am currently stuck on how to generate the new CRC number. The B400 has a cfg file, as opposed to a cfc, so I'm not sure if there is a different process...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 30, 2015, 11:37:41 am
Worked it out! Had to go through so many posts on here, it was an utter mission to find it.

What you need to do is first go to here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

and download the e8hack3c.zip file and extract it to your desktop (easiest place to do it). The important file you need is the CRC01.exe as this will allow you to generate a new CRC01 number required for the modifications to work.

Rather than having to type out all of the instructions, is there any particular part people are getting stuck at?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lgustavocampos on March 30, 2015, 11:39:41 am
Interesting... When I first started FlashIFS was there... Now its not... Trying to recreate it now...
Could be some corruption - might be worth renaming FlashIFS and creating a new one - renaming may be safer if contents are corrupt.

Remember FlashIFS will disappear when you connect with MSD, and will take a few secs to re-mount when USB is unplugged or USB mode changed


Quote
Got it recreated, no joy... Wondering what the contents of flashIFS are vs what you see when you MSD...

Mikesus , I was wondering how did you manage to have the partition up and running? Yesterday by mistake I formatted the internal E4 partition while it was connected through MSD, now I can see it over USB, mostly because of the type, but it won't get mounted as /FlashIFS back, I have already tried several types of partitions but none seams to work, so if you could explain what have you done back that time, I guess it may have so clue about how to fix it.

Best regards,

Gustavo Campos



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on March 30, 2015, 04:23:45 pm
I made a guide on how to perform (and revert if needed) the resolution and menu hack on 2.3.0 E4 cameras

(http://fubar.gr/wp-content/uploads/2015/03/flir-e4.jpg)

The guide is here: http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)


And here's a video demonstrating the hacked camera:

Fubar.gr #40 - Hacked FLIR E4 thermal camera demonstration (https://www.youtube.com/watch?v=0c76vu52YOI#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: meta4 on March 31, 2015, 04:20:53 am
Hello,

I have a e4 with firmware 2.3.  I am stuck at trying to login to FTP.  I'm getting bad username/password.  I've entered username: "flir" and password: "3vlig"
Username was accepted but password is not taking with 3vlig.  Any idea why password is not accepting?  I've reset and tried multiple times with same result.

Fixed problem by reinstalling firmware. 

FUBAR - great step by step guide!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Michara on March 31, 2015, 08:51:31 am
This only works with 1.1L or 1.2L model ?

Micha
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on March 31, 2015, 12:16:00 pm
This only works with 1.1L or 1.2L model ?

Micha

My E4 is 1.2L if I recall correctly.

I don't think model number really matters, only the firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Michara on March 31, 2015, 01:16:24 pm
Okay, thank you!

Micha
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: copineau on March 31, 2015, 09:00:33 pm
@ Fubar.gr
Your guide is perfect, thanks a lot!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 03, 2015, 01:53:47 pm
Hello, thank you for this great work. I upgraded my camera 2 times, first when my software was 1.21 and one month ago after upgrade to 2.3 I install advanced menu.

The reason why I am writing this post is in attached photos. First is naked thermograph in windows viewer and second is this what I can see in Flir Tool (5.1.15036.1001) when thermography is on full screen. It's ridiculous situation because in miniatur in FT I see photo like in Windows viewer (and I'm sure is like on camera screen when I shot photo).

What do you think about it? Problem is the same in another PC with FT.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 03, 2015, 02:07:10 pm
Hello, thank you for this great work. I upgraded my camera 2 times, first when my software was 1.21 and one month ago after upgrade to 2.3 I install advanced menu.

The reason why I am writing this post is in attached photos. First is naked thermograph in windows viewer and second is this what I can see in Flir Tool (5.1.15036.1001) when thermography is on full screen. It's ridiculous situation because in miniatur in FT I see photo like in Windows viewer (and I'm sure is like on camera screen when I shot photo).

What do you think about it? Problem is the same in another PC with FT.
You'll need to turn high contrast mode off in flir tools. Can't remember where it is or the exact setting. Might be linear scale.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 03, 2015, 02:37:25 pm
No, its not it;/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on April 03, 2015, 06:09:35 pm
You can adjust the colors by moving these sliders at the botom of the image

Actually the second image is better than the first. In the first one everything is prety much the same color. You can't glean much information  just by looking at it. In the second image the temperature differences are amplified so it is much easier to tell the hot and cold spots apart.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: veetee on April 03, 2015, 06:13:53 pm
I made a guide on how to perform (and revert if needed) the resolution and menu hack on 2.3.0 E4 cameras

Great guide but I ran into a little trouble.  I have a 1.22 camera that I updated to 2.3 at the suggestion of the guide to upgrade prior to beginning.  It was late and I was not thinking clearly, I should have just used the old method for 1.22.  (this is the suggestion I would make to the guide)

Editing my post to hold off on asking for help.  I need to double check my own information, I think I found a backup from 1.22 so maybe I can just downgrade. 

Thanks for the guide, really a great contribution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on April 03, 2015, 06:31:14 pm
Did the script generate the backup-xxxxxxxxxxx folder with the two files inside? If not, did you manually make a backup of the original camera files?

Did you run the 2.3.0_Menu.fif?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: veetee on April 03, 2015, 06:45:18 pm
Did the script generate the backup-xxxxxxxxxxx folder with the two files inside? If not, did you manually make a backup of the original camera files?

Did you run the 2.3.0_Menu.fif?

Thanks for the quick reply.  I thought I was ready to ask for help, but sadly have lost track of myself.  The resolution script did create backupXXXX with files, and I believe I have a full backup as well. 

I did not run the 2.3.0_menu.fif
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on April 03, 2015, 11:12:38 pm
The reason why I am writing this post is in attached photos. First is naked thermograph in windows viewer and second is this what I can see in Flir Tool (5.1.15036.1001) when thermography is on full screen. It's ridiculous situation because in miniatur in FT I see photo like in Windows viewer (and I'm sure is like on camera screen when I shot photo).

What do you think about it? Problem is the same in another PC with FT.
Hello,

the reason is a setting in the camera.
It limits the minimal span to a value to void noise gradient I think.

.image.contadj.autoAdj.TSpanMinAuto                   8

this is why the camera shows a well temperatured area and the PC shows a full span between min and max...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 04, 2015, 06:27:33 am
The reason why I am writing this post is in attached photos. First is naked thermograph in windows viewer and second is this what I can see in Flir Tool (5.1.15036.1001) when thermography is on full screen. It's ridiculous situation because in miniatur in FT I see photo like in Windows viewer (and I'm sure is like on camera screen when I shot photo).

What do you think about it? Problem is the same in another PC with FT.
Hello,

the reason is a setting in the camera.
It limits the minimal span to a value to void noise gradient I think.

.image.contadj.autoAdj.TSpanMinAuto                   8

this is why the camera shows a well temperatured area and the PC shows a full span between min and max...


I will try to change this in config file and check result, is possible to recover this termo what I made?

I dont see this in settings, here we have my cfc:


#
# Generated at 2015-02-19 20:20:30
#
.caps entry
.caps.config entry
.caps.config.name text "app E4"
.caps.config.revision text "1.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool true
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 5
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 5
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool true
.caps.config.image.sysimg.irMarkers.box.maxCount int32 5
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool true
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool true
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool true
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 3
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool true
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 3
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled true
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 3
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 5
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool true
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 5
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.ui entry
.caps.config.ui.menu entry
.caps.config.ui.menu.enabled bool true
.caps.config.ui.menu.presets bool true
.caps.config.ui.measure entry
.caps.config.ui.measure.enabled bool true
.caps.config.ui.measure.emissivityTable entry
.caps.config.ui.measure.emissivityTable.enabled bool true
.caps.config.ui.measure.localObjectParams entry
.caps.config.ui.measure.localObjectParams.enabled bool true
.caps.config.ui.measure.presetException text "userPresets"
.caps.config.ui.mode entry
.caps.config.ui.mode.enabled bool true
.caps.config.ui.mode.program bool true
.caps.config.ui.image entry
.caps.config.ui.image.adjust entry
.caps.config.ui.image.adjust.enabled bool true
.caps.config.ui.image.adjust.manual bool true
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID MyID
# CRC03 MyCRC
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on April 04, 2015, 05:06:35 pm
There is no need to change the auto min settings on the camera for everyday use. Just use the sliders in FT like was suggested or if you have the menu hack installed use the manual mode. Plus there are are a ton of separate config files on the E4. You are better off just putty'ing in and changing the setting manually unless you want to go though all 10-20 of them to find where that setting is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 04, 2015, 08:20:15 pm
Just use the sliders in FT like was suggested

Its the same photo, in the same temperature scale,  only difference is if I will open in FT or JPEG viewer so colours should be the same.

It cant help becouse:
if I will use sliders I will change the temperature scale so... 

What I have to change to repaid my camera?


There is no need to change the auto min settings on the camera for everyday use.
How I can change it to have normal and certain thermogram?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on April 06, 2015, 04:17:16 pm
I just uploaded a video showing the menus and functions of the hacked E4

The video is shot through the camera itself

Fubar.gr #40 - Hacked FLIR E4 thermal camera demonstration (https://www.youtube.com/watch?v=0c76vu52YOI#)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 07, 2015, 09:54:50 am
I just uploaded a video showing the menus and functions of the hacked E4

The video is shot through the camera itself

Fubar.gr #40 - Hacked FLIR E4 thermal camera demonstration (https://www.youtube.com/watch?v=0c76vu52YOI#)

Nice wideo;) Alarm condesation is marking everything under dew point, but you have to know humidity. What is isolation alarm I dont know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 07, 2015, 03:16:32 pm
In attachment we have 4 photos from E4 and E4+, source and from FT 5.1.

1. Original photos have always lower contrast, why is that?
2. Why contrast in picture form E4+ is stronger after opening in FT then from E4?
3. Temperatures in Sp1 are a little bit different before and after FT.

For me is f.....g strange, even if you have camera without any upgrade Flir Tool is cheating you;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on April 07, 2015, 11:06:09 pm
In attachment we have 4 photos from E4 and E4+, source and from FT 5.1.

1. Original photos have always lower contrast, why is that?
2. Why contrast in picture form E4+ is stronger after opening in FT then from E4?
3. Temperatures in Sp1 are a little bit different before and after FT.

For me is f.....g strange, even if you have camera without any upgrade Flir Tool is cheating you;)

I cant help but notice that the 4th pic the temp scale is compressed in the middle quite a bit compared to the other scales.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 08, 2015, 05:41:50 am
I cant help but notice that the 4th pic the temp scale is compressed in the middle quite a bit compared to the other scales.

thanks, I didn't notice that
Only I have this problem or everyone?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 09, 2015, 10:09:40 am
In attachment we have 4 photos from E4 and E4+, source and from FT 5.1.

1. Original photos have always lower contrast, why is that?
2. Why contrast in picture form E4+ is stronger after opening in FT then from E4?
3. Temperatures in Sp1 are a little bit different before and after FT.

For me is f.....g strange, even if you have camera without any upgrade Flir Tool is cheating you;)

1. see 2.
2. After opening with FT you have another scale (same colors but a different gamma value). This gamma value FT calculate for best view (you say contrast) over the distribution of hot and cold pixels.
3A.  You cant measure a single picture (or export as *.csv). E4 and FT calculate a mean value from another count of pixels (i.e. 4x4)
3B.  3A is wrong and the center pixel (120.5 / 160.5) is your problem: http://flir.custhelp.com/app/answers/detail/a_id/123/~/does-the-spot-meter-use-average-of-pixels%3F (http://flir.custhelp.com/app/answers/detail/a_id/123/~/does-the-spot-meter-use-average-of-pixels%3F)


a sample with "old" FT 4.1 and your image "Source E4.jpg"
export temperature with FT as test.csv
you get 320x240 temperature values (FT doubles the pixel, a simple repetition)

your spot is at position 40x30 (@80x60 Sensot Pixel)
Code: [Select]
>exiftool -config  config.txt -meas* -rawtherm* "Source E4.jpg"
Unknown format ustring at Image/ExifTool.pm line 4254, <EXIFTOOL_FILE> chunk 4.
Meas 1 Segment Length           : 0x0
Meas 1 Coordinates Byte Count   : 0x4
Meas 1 Description              : Spot
Meas 1X                         : 40
Meas 1Y                         : 30
Meas 1 Name                     : 1
Raw Thermal Image Width         : 80
Raw Thermal Image Height        : 60
Raw Thermal Image Type          : PNG

FT exports 320x240 pixels
Code: [Select]
>wc -l test.csv
240 test.csv


output the middle pixels
Code: [Select]
>head -n 122 test.csv | tail -n 4 | cut -d; -f 159-162 | tr ; " "
21,802 21,802 21,099 21,099
21,802 21,802 21,099 21,099
22,111 22,111 21,41 21,41
22,111 22,111 21,41 21,41

21,802°C @ (40,80)
21,410°C @ (41,81)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Doug on April 13, 2015, 03:25:32 pm
I have an E4 with 1.x firmware on which I've performed the resolution hack, but not the menu hack.  I now have need for one of the menu hack features.  Am I better off changing to V2.3 firmware now then re-applying resolution and menu hacks, or staying at 1.x?

Anyway, where can I download the V2.3 firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Doug on April 13, 2015, 03:34:40 pm
Found the 2.3 firmware download on the FLIR web site in the product support downloads area.
Still seeking advice on whether or or not to update from 1.x to 2.3 or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on April 13, 2015, 08:51:24 pm
Found the 2.3 firmware download on the FLIR web site in the product support downloads area.
Still seeking advice on whether or or not to update from 1.x to 2.3 or not.

Before you will start upgrade from 1.XY to 2.3 download conf.cfc from your thermocamera. Then:

1. Upgrade your camera from 1.XY to 2.3
2. Copy your .cfc to be safety
3. Copy Advenced menu files to your Camera
4. Change .cfc like in instruction Advenced menu by GuiTool
5. Put new .cfc to camera

Be happy

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hangman992 on April 14, 2015, 10:42:05 am
I have done the Hack, it works great  :-+
but now i have a "Problem"?

Is it normal that the Pictures look like this when i Point at cold surfaces?
The pattern is always the same, but only at cold things not at hot things.
Should i return the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on April 14, 2015, 05:09:55 pm
I have done the Hack, it works great  :-+
but now i have a "Problem"?

Is it normal that the Pictures look like this when i Point at cold surfaces?
The pattern is always the same, but only at cold things not at hot things.
Should i return the camera?

I have not seen that issue myself before. If you leave the camera running for 10min so the sensor has a chance to stabilize thermally - does the issue get better or worse? (The first shot you showed has the ~ in front indicating that the camera had just been turned on and is still getting ready.)

It kinda looks like it could be a mis-calibration of some sort. At any point have you adjusted the lens? Way back in this thread one of the members dug into the calibration a bit. May be worth doing some searching.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: birkhgoff on April 15, 2015, 07:14:59 am
Hi friends! The some time ago I found the Android application for recording video from Flir Ex-series, it is UsbWeb (https://play.google.com/store/apps/details?id=com.serenegiant.usbwebcamera&hl=en). This application support cameras resolution 320x240 and can record audio from internal mic of Android device.
I test and use this application with my smartphone Highscreen Boost II SE (Android 4.3) and resolution+menu hacked Flir E4 (1.2L,v.2.3.0).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on April 16, 2015, 01:07:30 pm
Hello, I have a big problem after the menu hack; there is no centre meting anymore, there are fewer meting options and no zoom.
But the biggest set-back is the resolution: its back to 80x60 pixels!
I already tried removing the battery a few times.

I have model 2.3, I did the resolution hack last January.
I did follow the guide by Fubar.gr for the menu hack.

What can I do best?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kuulapaa on April 18, 2015, 06:07:04 am
Hi guys,

Is the firmware 2.3.0 the latest one, or has there been updates since then?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cux350z on April 18, 2015, 07:44:46 pm
Hi friends! The some time ago I found the Android application for recording video from Flir Ex-series, it is UsbWeb (https://play.google.com/store/apps/details?id=com.serenegiant.usbwebcamera&hl=en). This application support cameras resolution 320x240 and can record audio from internal mic of Android device.
I test and use this application with my smartphone Highscreen Boost II SE (Android 4.3) and resolution+menu hacked Flir E4 (1.2L,v.2.3.0).

So how did you connect them together? Special usb cable? Details mate!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on April 21, 2015, 02:38:24 am
Hello, I have a big problem after the menu hack; there is no centre meting anymore, there are fewer meting options and no zoom.
But the biggest set-back is the resolution: its back to 80x60 pixels!
I already tried removing the battery a few times.

I have model 2.3, I did the resolution hack last January.
I did follow the guide by Fubar.gr for the menu hack.

What can I do best?
I haven't read his review but it sounds like you used a wrong .cfc file for the hack. Take your original backup(80x60) and start over.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: GARRETT64 on April 21, 2015, 07:03:30 am
I have reset my e4 (reverse menu and resolution hack, no problem) and done the resolution hack again, I do the menu hack later , much later...

Garrett
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on April 21, 2015, 08:47:59 am
Ok, seems like some people don't understand stuff they give advise at...

IF YOU HAVE A 1.xx CAMERA: NEVER UPGRADE YOUR CAM - JUST USE THE OLD HACKS
FLIR DID NOT ADD ANYTHING OF RELEVANCE EXCEPT MORE TROUBLE AT HACKING

EOF

Found the 2.3 firmware download on the FLIR web site in the product support downloads area.
Still seeking advice on whether or or not to update from 1.x to 2.3 or not.

Before you will start upgrade from 1.XY to 2.3 download conf.cfc from your thermocamera. Then:

1. Upgrade your camera from 1.XY to 2.3
2. Copy your .cfc to be safety
3. Copy Advenced menu files to your Camera
4. Change .cfc like in instruction Advenced menu by GuiTool
5. Put new .cfc to camera

Be happy

Title: Flir i3 to i7 Thermal imaging camera
Post by: Anastasios on April 23, 2015, 02:50:12 pm
How to permanently upgrade your Flir i3 or i5 to i7 specs! & add extra measurement menu.
120x120 pixels for the 1.Gen. & 140x140 pixels for the 2. Gen. Flir iX
Step-by-step guide:
1. Download Flir device drivers from: www.flir.com (http://www.flir.com) or get it from the Flir software CD provided &
install it on your Windows computer.
2. Download FileDate Changer from: http://www.nirsoft.net/utils/filedatech.zip (http://www.nirsoft.net/utils/filedatech.zip) a.
Open the downloaded file using e.g. WinRAR or WinZIP
b. Extract the ‘FileDate.exe’ file to your documents folder.
3. Download Notepad++ from: http://notepad-plus-plus.org/download (http://notepad-plus-plus.org/download) & install it.
4. Download Total Commander from http://www.ghisler.com/download.htm (http://www.ghisler.com/download.htm) & install it.
2
5. Download Mike’s CRC01 tool from: https://www.eevblog.com/forum/testgear/flir-e4-thermalimaging- (https://www.eevblog.com/forum/testgear/flir-e4-thermalimaging-)
camera-teardown/?action=dlattach;attach=66387
a. Open the downloaded file using e.g. WinRAR or WinZIP
b. Extract the ‘crc01.exe’ file to your documents folder.
6. Turn on your flir i3 or i5 camera.
7. Connect your Flir camera to the computer using the USB-cable, let Windows to complete the driver
installation.
8. After Windows has completed installing the drivers, disconnect the USB-cable from the camera.
9. Press menu button (left) once on your camera.
10. Depress gallery (play) button for 5 seconds…
Now you should have the gray ‘diagnostic’ screen open, release the button.
11. Press left menu button (Options)
12. Select USB mode.
13. Then change USB mode from MSD to RNDIS.
14. Now reconnect your Flir camera to the computer using the USB-cable, let Windows to complete the
driver installation.
3
15. Now start the Total Commander app.
a. Press ‘Net’ on top menu bar & select ‘FTP Connect…’ from the drop menu
b. Press ‘New connection’
c. Name the new connection (Session) e.g.: flir
d. Enter host name: 192.168.0.2
e. Enter user name: flir
f. Enter password: 3vlig
g. Select (checkbox) ‘Use passive mode for transfers (like a WWW browser)’
h. The ‘OK’ to save.
i. Press ‘Net’ on top menu bar & select ‘FTP Connect…’ from the drop menu
j. And press ‘Connect’
Now there should pop a new window & disappear after a second & two.
You are now connected to the camera ?
4
16. Now select ‘0’ flir from the left drop menu, see the red arrow below.
17. Now open the folder: FlashFS/system/appcore.d/config.d/
In that folder there is a file called: ‘conf’ with the extension .cfg
5
18. Open your documents folder in the right side window, see the red arrow below.
19. Now drag-and-drop (copy) the ‘conf.cfg’ to your documents folder.
20. But don’t close the app yet.
21. Now browse to your documents folder in Windows’s own regular explorer.
a. Select the newly copied ‘conf.cfg’ file & save a copy of the file (original backup) to a save
media.
22. Start the Notepad++ & open the copied ‘conf.cfg’ file.
23. Delete the last line with the: # CRC01 XXXXXXXX
24. Now select all the code, except the last line with the: # ID XXXXXXXXX & delete the code.
25. Now insert the new code below (next page):
6
#
# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
7
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID XXXXXXXXX
26. Now save the modified code as ‘conf.cfg’ file (overwrite).
27. But don’t close the app yet.
8
28. Start the FileDate app & drag-and-drop the modified ‘conf.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
c. But don’t close the app yet.
29. Press ‘Windows key + R’ to start ‘Run command’
30. Type: ‘cmd’ then press ‘OK’ to start windows command.
9
31. Now the Windows command is open.
a. Open your documents folder in the window command by typing e.g.: ‘cd documents’
b. When you are in the documents folder, type: ‘crc01 conf.cfg’ this will run Mike’s CRC01 tool
& generate a new line: ‘# CRC01 XXXXXXXX’ (the letters are case sensitive)
32. Return to the Notepad++ app & reopen the conf.cfg
a. Now insert the line generated by Mike’s CRC01 tool in the last line.
b. Save the file (overwrite).
33. Return to the FileDate app & repress the ‘Change Files Date’.
34. Close the FileDate app.
35. Return to the Total Commander app & drag-and-drop the modified conf.cfg to the camera.
a. In Total commander browse back to FlashFS/system/ & create a new folder by pressing F7
on your keyboard.
b. Name the new folder as: ‘gui.d’
c. Open the new folder (FlashFS/system/gui.d/)
d. Create another folder inside the /gui.d by repressing F7.
e. Name the new folder as: ‘config.d’
f. Open the new folder (FlashFS/system/gui.d/config.d/)
36. In windows explorer copy the ‘conf.cfg’ & rename the copy to: ‘gui.cfg’
37. Return to the Notepad++ & open the new ‘gui.cfg’ file
a. Delete the last line with the: # CRC01 XXXXXXXX
b. Now select all the code, except the last line with the: # ID XXXXXXXXX & delete the code.
c. Now insert the new code below:
#
# gui.cfg - i7
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.measurementMenuActive bool true
.caps.config.menu.measureAreaSubmenuActive bool false
# ID XXXXXXXXX
d. Save the modified file (overwrite).
38. Start the FileDate app & drag-and-drop the modified ‘gui.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
c. But don’t close the app yet.
10
39. Start the Windows command (Windows key + R) then type: ‘cmd’ then ‘OK’
a. Open your documents folder in the window command by typing e.g.: ‘cd documents’
b. When you are in the documents folder, type: ‘crc01 gui.cfg’ this will run Mike’s CRC01 tool
& generate a new line: ‘# CRC01 XXXXXXXX’ (the letters are case sensitive).
40. Return to the Notepad++ app & reopen the gui.cfg
a. Now insert the line generated by Mike’s CRC01 tool in the last line.
b. Save the file (overwrite).
41. Return to the FileDate app & drag-and-drop the modified ‘gui.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
42. Return to the Total Commander app & drag-and-drop the modified gui.cfg to the camera in
(FlashFS/system/gui.d/config.d/)
a. In Total Commander press disconnect
b. Remove the USB-cable from the camera.
c. Remove the battery cover by popping it off with a small flat screwdriver.
d. Press the small reset button (hard to see, use a flashlight), see the red arrow below.
e. Now the camera reset & shut off.
f. Turn on your camera, longer restart… (cold restart)
11
Congratulations! You have now permanently upgraded your i3 or i5 to i7 specs & added
measurements menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: birkhgoff on April 23, 2015, 10:36:25 pm
So how did you connect them together? Special usb cable? Details mate!

By OTG cable + micro USB cable.
Some notice! The USB Web Cam work on Android 4.3. For older versions it not availablly from Play Market:( Tested on other devices 4.0.1, 4.2. And the application work only with camera resolution 320x240 (standart QWGA resolution in application settings)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 24, 2015, 08:59:05 am
How to permanently upgrade your Flir i3 or i5 to i7 specs! & add extra measurement menu.
120x120 pixels for the 1.Gen. & 140x140 pixels for the 2. Gen. Flir iX
Step-by-step guide:
1. Download Flir device drivers from: www.flir.com (http://www.flir.com) or get it from the Flir software CD provided &
install it on your Windows computer.
2. Download FileDate Changer from: http://www.nirsoft.net/utils/filedatech.zip (http://www.nirsoft.net/utils/filedatech.zip) a.
Open the downloaded file using e.g. WinRAR or WinZIP
b. Extract the ‘FileDate.exe’ file to your documents folder.
3. Download Notepad++ from: http://notepad-plus-plus.org/download (http://notepad-plus-plus.org/download) & install it.
4. Download Total Commander from http://www.ghisler.com/download.htm (http://www.ghisler.com/download.htm) & install it.
2
5. Download Mike’s CRC01 tool from: https://www.eevblog.com/forum/testgear/flir-e4-thermalimaging- (https://www.eevblog.com/forum/testgear/flir-e4-thermalimaging-)
camera-teardown/?action=dlattach;attach=66387
a. Open the downloaded file using e.g. WinRAR or WinZIP
b. Extract the ‘crc01.exe’ file to your documents folder.
6. Turn on your flir i3 or i5 camera.
7. Connect your Flir camera to the computer using the USB-cable, let Windows to complete the driver
installation.
8. After Windows has completed installing the drivers, disconnect the USB-cable from the camera.
9. Press menu button (left) once on your camera.
10. Depress gallery (play) button for 5 seconds…
Now you should have the gray ‘diagnostic’ screen open, release the button.
11. Press left menu button (Options)
12. Select USB mode.
13. Then change USB mode from MSD to RNDIS.
14. Now reconnect your Flir camera to the computer using the USB-cable, let Windows to complete the
driver installation.
3
15. Now start the Total Commander app.
a. Press ‘Net’ on top menu bar & select ‘FTP Connect…’ from the drop menu
b. Press ‘New connection’
c. Name the new connection (Session) e.g.: flir
d. Enter host name: 192.168.0.2
e. Enter user name: flir
f. Enter password: 3vlig
g. Select (checkbox) ‘Use passive mode for transfers (like a WWW browser)’
h. The ‘OK’ to save.
i. Press ‘Net’ on top menu bar & select ‘FTP Connect…’ from the drop menu
j. And press ‘Connect’
Now there should pop a new window & disappear after a second & two.
You are now connected to the camera ?
4
16. Now select ‘0’ flir from the left drop menu, see the red arrow below.
17. Now open the folder: FlashFS/system/appcore.d/config.d/
In that folder there is a file called: ‘conf’ with the extension .cfg
5
18. Open your documents folder in the right side window, see the red arrow below.
19. Now drag-and-drop (copy) the ‘conf.cfg’ to your documents folder.
20. But don’t close the app yet.
21. Now browse to your documents folder in Windows’s own regular explorer.
a. Select the newly copied ‘conf.cfg’ file & save a copy of the file (original backup) to a save
media.
22. Start the Notepad++ & open the copied ‘conf.cfg’ file.
23. Delete the last line with the: # CRC01 XXXXXXXX
24. Now select all the code, except the last line with the: # ID XXXXXXXXX & delete the code.
25. Now insert the new code below (next page):
6
#
# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
7
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID XXXXXXXXX
26. Now save the modified code as ‘conf.cfg’ file (overwrite).
27. But don’t close the app yet.
8
28. Start the FileDate app & drag-and-drop the modified ‘conf.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
c. But don’t close the app yet.
29. Press ‘Windows key + R’ to start ‘Run command’
30. Type: ‘cmd’ then press ‘OK’ to start windows command.
9
31. Now the Windows command is open.
a. Open your documents folder in the window command by typing e.g.: ‘cd documents’
b. When you are in the documents folder, type: ‘crc01 conf.cfg’ this will run Mike’s CRC01 tool
& generate a new line: ‘# CRC01 XXXXXXXX’ (the letters are case sensitive)
32. Return to the Notepad++ app & reopen the conf.cfg
a. Now insert the line generated by Mike’s CRC01 tool in the last line.
b. Save the file (overwrite).
33. Return to the FileDate app & repress the ‘Change Files Date’.
34. Close the FileDate app.
35. Return to the Total Commander app & drag-and-drop the modified conf.cfg to the camera.
a. In Total commander browse back to FlashFS/system/ & create a new folder by pressing F7
on your keyboard.
b. Name the new folder as: ‘gui.d’
c. Open the new folder (FlashFS/system/gui.d/)
d. Create another folder inside the /gui.d by repressing F7.
e. Name the new folder as: ‘config.d’
f. Open the new folder (FlashFS/system/gui.d/config.d/)
36. In windows explorer copy the ‘conf.cfg’ & rename the copy to: ‘gui.cfg’
37. Return to the Notepad++ & open the new ‘gui.cfg’ file
a. Delete the last line with the: # CRC01 XXXXXXXX
b. Now select all the code, except the last line with the: # ID XXXXXXXXX & delete the code.
c. Now insert the new code below:
#
# gui.cfg - i7
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.menu entry
.caps.config.menu.enabled bool true
.caps.config.menu.measurementMenuActive bool true
.caps.config.menu.measureAreaSubmenuActive bool false
# ID XXXXXXXXX
d. Save the modified file (overwrite).
38. Start the FileDate app & drag-and-drop the modified ‘gui.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
c. But don’t close the app yet.
10
39. Start the Windows command (Windows key + R) then type: ‘cmd’ then ‘OK’
a. Open your documents folder in the window command by typing e.g.: ‘cd documents’
b. When you are in the documents folder, type: ‘crc01 gui.cfg’ this will run Mike’s CRC01 tool
& generate a new line: ‘# CRC01 XXXXXXXX’ (the letters are case sensitive).
40. Return to the Notepad++ app & reopen the gui.cfg
a. Now insert the line generated by Mike’s CRC01 tool in the last line.
b. Save the file (overwrite).
41. Return to the FileDate app & drag-and-drop the modified ‘gui.cfg’ file
a. Change ‘Modified Data:’ to 01-01-2005 and the time to 00:02:00
b. Press ‘Change Files Date’
42. Return to the Total Commander app & drag-and-drop the modified gui.cfg to the camera in
(FlashFS/system/gui.d/config.d/)
a. In Total Commander press disconnect
b. Remove the USB-cable from the camera.
c. Remove the battery cover by popping it off with a small flat screwdriver.
d. Press the small reset button (hard to see, use a flashlight), see the red arrow below.
e. Now the camera reset & shut off.
f. Turn on your camera, longer restart… (cold restart)
11
Congratulations! You have now permanently upgraded your i3 or i5 to i7 specs & added
measurements menu.
Cheers! ?
Erik

Great guide! It's also pretty much the same for other FLIR cameras out there that use CRC01.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on April 25, 2015, 04:40:57 am
Pictures of a thermos vacuum bottle when it was good (left) and a few months later when it apparently lost vacuum (right). When it was good, heat was only escaping slowly through the lid (left) . When it broke , heat transferred right through pretty fast as can be seen on the right picture. Still not sure what happened, it had a metal can.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on April 25, 2015, 07:14:13 am
With the metal can they typically rely on the press fit and a sealing o ring in the top of the seal to hold the vacuum in. Better ones use a fully welded seam so that there is no way for it to leak. Your obviously had a very slow leak.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 10:10:12 am
@Bud,

A very nice example of thermal imaging providing very useful information on a product failure mode.  :-+  They are also good for seeing the level of liquid gas in a bottled gas scenario (after some usage and associated mild cooling).

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 03:48:53 pm
I just got an e4 off eBay, and it didn't come with the charger. No problem, I thought, I have plenty of USB chargers. Interestingly, they won't charge the camera. A computer will, though (slowly).

Has anyone (sorry, I haven't read the nearly 500 pages of this forum thread) figured out what the official charger is doing to convince the camera to charge? Some resistor values? Or is the charger actually negotiating with the camera over the data lines and acting like a computer? The only other device I have that behaves like this are the playstation 3 controllers. :/

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 04:42:19 pm
The E4 charger is rated at 5V / 2A. It is not anything special for the E4 though.

I have the original FW1.19 and HW 1.0 platform E4.

I have used my Sony 1.8A chargers to charge my E4 without problem. The charge manager in the E4 will draw as much current as it can from the source. This can overload some 0.5A chargers or lead to a very slow charge rate.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on April 25, 2015, 04:43:50 pm
I don't think there are any special charger requirements except that your charger should be able to source enough current. I use an old blackberry charger on my desk, I leave the original in the box so I don't forget it if out and about.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 04:56:59 pm
I just did a charger test with my E4.

Sadly I do not have any 'standard' 500mA USB chargers but I did find a 700mA rated unit.
I also tried my emergency Lithium Ion battery pack that provides two current limited outputs at differing currents.

The charging lead is that which came with the SONY charger EP880 and not the FLIR lead.

Results:

FRIWO  FW7711/0.7  5V @ 0.7A max
Sony EP880 5V @1.5A max
Kit: A10 PLus 5V @ 1A max
Kit: A10 Plus 5V @ 2.1A max

All worked fine with the E4 and it began charging its battery. I could do a charge current check with my in line USB ammeter later if needed.

I was incorrect about my Sony Chargers, they are model EP880 and are rated at 1.5A and not 1.8A as I had thought. Great chargers though.

The original SONY EP880 charger costs around £5 new in the UK but can be found for less sometimes. I suggest avoiding auctions from China. You want the real item and not a copy. AFAIK EP880 chargers are available in all pin formats for different countries. One of the best USB chargers I have found for the money. The UK version even has a moving earth pin that enabled easier storage/transport  :-+

FRIWO FW7711 USB power supply is from a batch of 150 that I bought Ex Farnell. They may be found here and the various country specific adapters may be purchased separately. Data sheet is available on Farnell as well. Not recommended for the E4 though as they are only rated at 700mA. Very nice USB power supplies though. German design..

http://uk.farnell.com/friwo/1891371/adaptor-mains-gpp-usb-5-v-700/dp/1734525 (http://uk.farnell.com/friwo/1891371/adaptor-mains-gpp-usb-5-v-700/dp/1734525)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 05:01:53 pm
Interesting. Okay, I'll try another charger.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 05:36:52 pm
Okay, none of my apple chargers would charge it. Nor a Nook charger. I cheap 1A Bluetooth speaker charger did though. So maybe the unit wants the data pins shorted. Someone have a way to confirm if the Flir oem charger has the data pins shorted?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 05:48:29 pm
My Sony Charger lead is a 'straight through' 4 pin to 4 pin USB data/charge lead. The Chargers do not have the data pins shorted or connected in any way.

Have you asked the seller why the original charger is not provided ? Get him to either find it or explain its absence. Keep a record of the sellers details as sadly thermal cameras do go 'missing' if you know what I mean  ;)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 05:52:53 pm
Hmm. Then I wonder what would cause the apple and nook chargers to not work. I know they put some resistors on the data lines to indicate current capacity. Hmm. Anyone else have a 10W Apple charger to try?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 06:02:06 pm
Just connected my iPad Air 2 charger (10W) to the E4 via the Sony USB cable. Worked fine.

What version of hardware have you got ? There may have been changes since my early units build  :-//

Have you tried a different cable ? Its a long shot but some cheap cables have very thin copper conductors with associated voltage drop if the E4 is trying to draw significant current (hope that makes sense) A 500mA limited charger may not suffer as much voltage drop in the cable as one that will permit a 2A current draw. Worth checking this out.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 06:30:42 pm
I have what seems to be hardware 1.1, firmware 1.19.8 (haven't run the modifications yet (working on that now)).

I tried with two different cables (the flir cable, and another I had). The apple charger is a model A1357. But maybe Apple made some modifications....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 25, 2015, 06:40:48 pm
My E4 is the same as yours with 1.19.8 firmware and 1.1HW ( I wrongly thought it was 1.0HW).

Time to ask the seller some awkward questions in my view. It may sound weird but I have to wonder whether the charging circuit has been damaged in some way. I can't think of a failure mode that would produce your symptoms but it is still a possibility, especially if your E4 will only charge at a slow rate rather than the normal fast charge rate of <3 hours.

Sorry that I cannot be of more help to you on this. The good news is that the Lithium Ion charger IC is a commercial off the shelf type. I have the IC ID for the external charger unit but not for the one inside the E4 which may be the same ?, I can't confirm this though.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 25, 2015, 06:42:15 pm
Eh, I'll keep poking around. Could be something I'm doing that's dumb.. will post back when I know more.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on April 26, 2015, 04:35:50 am
They are also good for seeing the level of liquid gas in a bottled gas scenario
Yup, here is a proof of concept
 ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: taarau on April 26, 2015, 11:57:44 am
I need a little bit help. I bought Flir E4 on March 2014. And installed hacked firware. Now I want to upgrade it. My device model is E4 1.1 and software version 1.19.8. Can you send me instructions link, what I have to use? On first post, there are very many instructions and I don't know what to use. Don't want to brick my device. I want resolution and menu hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on April 26, 2015, 02:16:46 pm
...My device model is E4 1.1 and software version 1.19.8. .... On first post, there are very many instructions and I don't know what to use.
its the first link with Bold font weight... its called "Link to old firmware hack info for all 1.19.x versions b " ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 27, 2015, 07:49:50 pm
So, I might be an idiot. Not sure this is it, but I did get the unit charging on a newer iPad charger, with a good cable. One thing I noticed is the unit lights the screen when plugged in, but doesn't show the charging logo when "off" unless I press a button. Is that the normal behavior?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 27, 2015, 08:06:44 pm
IIRC the battery charge symbol only appears when the camera is in sleep mode rather than fully off. As you may be aware the E4 is actually put into sleep mode by the on/off button. After a period of time it drops to the fully off condition to save the battery.

Your unit appears to be behaving normally in this respect.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on April 27, 2015, 08:14:01 pm
Cool. Okay. Thanks! Weird design choices on their part. Have to wonder what of them are because the unit runs WinCE. :/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Emoticon on April 28, 2015, 11:41:47 pm
Has anyone in the US traveled domestically much with their TIC? I know things get way more complicated if you try to take one overseas. I'm considering bringing mine on a domestic trip, but the idea of putting something with a pistol grip and a trigger like the E series seems like it might not be such a good idea when running it through the X-ray and there would be no way I would trust a device like this to make it through check baggage without an airport employee to have a case of sticky fingers. Has anyone traveled with their E4? Has anyone been hassled?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kuulapaa on April 29, 2015, 11:50:18 am
Has anyone in the US traveled domestically much with their TIC? I know things get way more complicated if you try to take one overseas. I'm considering bringing mine on a domestic trip, but the idea of putting something with a pistol grip and a trigger like the E series seems like it might not be such a good idea when running it through the X-ray and there would be no way I would trust a device like this to make it through check baggage without an airport employee to have a case of sticky fingers. Has anyone traveled with their E4? Has anyone been hassled?

It's a tool, a plastic tool to be precise and doesn't look anything like gun in X-ray.

I once saw some guns and they're different, metal and everything...
They look more like this (http://kuulapaa.com/home/highspeed/index.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Detsorgsekalf on April 30, 2015, 08:28:36 am
Greetings!
Is it possible to "upgrade" FLIR i3 to i7 with a firmware version 6.5.3?
I've done all things from post #6860, but it has no effect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 01, 2015, 03:09:07 am
FYI: here is an E4 for $750 on eBay if anyone is interested: http://www.ebay.com/itm/Flir-E4-IR-camera-/261870746417 (http://www.ebay.com/itm/Flir-E4-IR-camera-/261870746417)

The seller has a rating of 1920 with 100% positive feedback.

Greetings!
Is it possible to "upgrade" FLIR i3 to i7 with a firmware version 6.5.3?
I've done all things from post #6860, but it has no effect.

There are two alternate guides linked from the first post. Have you tried those?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 01, 2015, 09:53:59 am
Greetings!
Is it possible to "upgrade" FLIR i3 to i7 with a firmware version 6.5.3?
I've done all things from post #6860, but it has no effect.

You may have incorrectly put the wrong type of line break at the end of the .cfg file after the CRC01. You need to press SHIFT + ENTER.

I've been digging around on my T620 and found this line:

Code: [Select]
.caps.config.save.fastShoot bool false
at the top of the gui file it also has this:

Code: [Select]
#
# TODO:
# Fast shot?
#
# Image adjust minMax with fusion?
#
# Generated at 2011-09-21 17:38:24
#

So it looks like it is to be implemented at some point, but my question is, what is Fast shot?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: drtoub3 on May 02, 2015, 11:42:33 pm
Hi friends! The some time ago I found the Android application for recording video from Flir Ex-series, it is UsbWeb (https://play.google.com/store/apps/details?id=com.serenegiant.usbwebcamera&hl=en). This application support cameras resolution 320x240 and can record audio from internal mic of Android device.
I test and use this application with my smartphone Highscreen Boost II SE (Android 4.3) and resolution+menu hacked Flir E4 (1.2L,v.2.3.0).

very good news , i wanted to try something like this on my nvidia shield tablet instead of my laptop .

Do i need to set USB port on my cam on ....in fact i don't know ? you gave explanation about OTG cable but i'd like to know more about settings (software and cam) .

Thanks for your help .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: drtoub3 on May 03, 2015, 07:13:33 am
Finaly after few tests, i ve made it ! Very simple in fact , in the settings menu in the software on your tablet just set resolution to 320x240 exactly as You said above and voilà !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: drtoub3 on May 03, 2015, 07:13:41 am
Finaly after few tests, i ve made it ! Very simple in fact , in the settings menu in the software on your tablet just set resolution to 320x240 exactly as You said above and voilà !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Detsorgsekalf on May 04, 2015, 06:30:06 am
There are two alternate guides linked from the first post. Have you tried those?
You may have incorrectly put the wrong type of line break at the end of the .cfg file after the CRC01. You need to press SHIFT + ENTER.
Thanks you all for all your  advices! This forum is really great! Finally it works at resolution 120x120. The problem was in cfg files (there must be a single row below #CRCxxxxx string)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 05, 2015, 09:41:07 am
There are two alternate guides linked from the first post. Have you tried those?
You may have incorrectly put the wrong type of line break at the end of the .cfg file after the CRC01. You need to press SHIFT + ENTER.
Thanks you all for all your  advices! This forum is really great! Finally it works at resolution 120x120. The problem was in cfg files (there must be a single row below #CRCxxxxx string)

Glad you got it working!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 47MHz on May 06, 2015, 09:30:35 pm
Hi guys! Do you know is it possible to get analog video signal from E4 camera (just like in E40 series)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 06, 2015, 09:36:56 pm
E4 has no native composite video output.


You can achieve composite video by using an RPi as a USB to video interface.

This is detailed in another E4 thread on recording video from the camera.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: birkhgoff on May 08, 2015, 06:20:38 pm
very good news , i wanted to try something like this on my nvidia shield tablet instead of my laptop .

Do i need to set USB port on my cam on ....in fact i don't know ? you gave explanation about OTG cable but i'd like to know more about settings (software and cam) .

Thanks for your help .
Thermal camera don't need any settings, don't need RNDIS mode. But it can be hacked to 320x240 pix resolution. The USB WEB application work on Androud v 4.3 (on v 4.0.1,v4.1 and v4.2.2 the application couldn't be install). At first, set in settings min.  resolution QVGA (320x240) - enjoy! Other settings I think don't need any comments -  it's simple
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 08, 2015, 08:08:58 pm
I got a Flir E4 today.  There seems to be a vertical banding issue where you can see columns of variation that don't move when you move the camera.  Is that normal?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 08, 2015, 08:26:11 pm
Not at all. Can you post an image of it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 08, 2015, 08:35:03 pm
It is bad.  Definitely going back.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 08, 2015, 08:54:15 pm
Definitely something wrong with the detector. You'll need to return it under warranty if purchased new.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 08, 2015, 09:45:14 pm
Thanks Chanc3 for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 09, 2015, 09:36:21 am
No problem - the best thing with FLIR, is that all their detectors have a 10 year warranty (think the E4s are included).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 09, 2015, 04:41:05 pm
Hi guys,

it seems you've talked me into purchasing this baby :) almost...

After reading hundreds of pages, I feel 'whew hoo' in my head and total mess :)

But still I have this question to ask,

Several times different users wondered, what actually E4 does with its 60 fps, but I failed to found answers in the thread...

So...

- It skips (decimates) actually taken but forbidden frames
- It averages the frames to reduce temporal noise

Does anybody really know this by this moment for sure?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 09, 2015, 05:57:35 pm
Well timed question. I only found out yesterday !

The FLIR cores that are limited to 9fps repeat the same frame several time over on the output of the Read Out (RO) electronics. In full frame rate mode every frame is passed to the output.

If the frame rate needs to be reduced by a factor of 'X' to meet ITAR then the RO electronics grab a frame, repeat it 'X' times at the output and then provides a new frame and the process continues. I thought that it was likely that frame layering was used to improve noise levels but I have seen no mention of such in the documentation that I read.

The output of the E4 core complies with the ITAR requirements and does not present the full frame rate at the RO electronics output. Changing the programming of the core frame repeat number will breach ITAR on this appliance.

Hope this answers your question.

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 09, 2015, 06:02:06 pm
The statement from FLIR on what they call slow frame rate cameras that do not require an export licence. The E4 is not mentioned by name but the same is likely to apply to it  :-//

FLIR state:

"The reduced frame rate is achieved by replicating one frame four times for NTSC, or three times for PAL video. As standard NTSC is 30 frames per second, 30 divided by 4 = 7.5 frames per second. For PAL, 25 frames per second divided by 3 = 8.333 frames per second. We refer to this configuration as "slow video". Note that slow video frames are not averaged, rather, each frame is simply produced either three or four times in succession, depending on whether the camera is set for PAL or NTSC."

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 09, 2015, 06:35:20 pm
Hi Aurora,
thanks for your reply!

so it seems, E4 appears to be a native 60 fps device, however most of the frames are replicated?! :) waste of energy!
Well done, Flir... now we know what Gods are doing to our brains in design time... decimating... |O

So...next question is obvious. Is the E4 hardware capable of pushing true 60 fps through the USB port. Let's say, I would be happy to have 60 fps recorded video!

There are some rather fast processes I would like to observe (t.ex, initial heat speading in radiator during ignition),
and in order for not to break any Laws I say, okay, I agree to see it as 9 fps realtime on screen, BUT have it in full fps recorded video! After all, being a Windows Embedded device with rather powerfull processor and memory, real-time encoding such a low resolution into *.mp4 is not a BIG DEAL even without hardware support.

do you think it is possible?
 
Thank you!



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 09, 2015, 06:57:42 pm
In short, NO.

The read out electronics are part of the microbolometer so the image data is effectively 9 new frames per second from the data source. All other processing in the camera is working with that limited fps data.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 09, 2015, 07:40:18 pm
...arghhh,

things never fit ideal...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 09, 2015, 10:25:03 pm
I can't say I'm totally convinced  that the E4 sensor doesn't output real 60fps to be avaraged by the FPGA to increase SNR, but it shouldn't be too hard to test using a moving target of a known speed, and looking at the motion blur.

Duplicated data would also require that the sensor have a full frame's worth of memory onboard - why would they go to the expense of that when they could just skip output frames? Or maybe there is some sort of analogue sample/hold going on.

I also wonder why the lens on the Ex0 is so much bigger...

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 09, 2015, 10:42:00 pm
Well timed question. I only found out yesterday !

The FLIR cores that are limited to 9fps repeat the same frame several time over on the output of the Read Out (RO) electronics. In full frame rate mode every frame is passed to the output.

If the frame rate needs to be reduced by a factor of 'X' to meet ITAR then the RO electronics grab a frame, repeat it 'X' times at the output and then provides a new frame and the process continues. I thought that it was likely that frame layering was used to improve noise levels but I have seen no mention of such in the documentation that I read.

The output of the E4 core complies with the ITAR requirements and does not present the full frame rate at the RO electronics output. Changing the programming of the core frame repeat number will breach ITAR on this appliance.

Hope this answers your question.

Aurora

What defines the "core" in this case? Mike showed that the microbolometer itself was outputting at 60Hz, I poked around a bit and found there may be some limiting going on in the WinCE display driver itself. But makes the most sense to me that it would be done in the FPGA.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 09, 2015, 11:05:00 pm
In terms of ITAR it is the Microbolometer itself that is specifically regulated in terms of distribution of >9fps capable parts.

If FLIR are complying with ITAR regulations (failure to do so is serious in the USA) in the E4, then the microbolometer module itself must be self limiting to <9fps in a manner that an end user cannot change. Them's the rules. It can still produce a data stream of 30 or 60fps so long as the useful DATA is <9fps in terms of changing content.

In my FLIR PMxxx series the microbolometer is strictly controlled as it outputs 60fps, theoretically if I removed the microbolometer from the camera, the remaining chassis loses its ITAR liability, but in the real world just about everything concerned with the production of a 60fps thermal imager appears 'locked down' in terms of distribution across borders.

I have no reason to believe that the E4 microbolometer cannot achieve higher frame rates if FLIR wish to use it in regulated cameras. They usually state that their microbolometers are full frame rate (30 or 60fps) but are factory limited when sold for non ITAR regulated applications. I understand that it is a setting within the ROC but I cannot say how it may be changed as I do not have that information.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 09, 2015, 11:08:12 pm
Hi all,

looks I've triggered the topic :)

Really, big lenses... would make sense to lower distortion, ofc, but also as a reason to get higher singnal to noise ratio for the matrix of Ex0 which is not that good in terms of temporal noise?

Good point in frames replicating or skipping (either way, effectively decimating),
is that picture doesn't 'blur' upon movement along target... okay looks more like slide show, but not blurry...

I was surprised to know that this decimating is done right on the microbolometer scale... I would also use FPGA for this, that would allow for unifying process technology for microbolometers production for different fps devices, on the other hand, not so easy to re-program - this would satisfy the ITAR.

MIkle says it is 14 bit resolution, not 16... either way, if the datastream is recorded with some streamer or deep memory oscilloscope, and then run simple statistics (built-in) like histogram, or even calculate entropy divided by degree of fredom (60 in this case) when camera is slowly panning... that would answer the question quantitively.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 09, 2015, 11:26:53 pm

MIkle says it is 14 bit resolution, not 16... either way, if the datastream is recorded with some streamer or deep memory oscilloscope, and then run simple statistics (built-in) like histogram, or even calculate entropy divided by degree of fredom (60 in this case) when camera is slowly panning... that would answer the question quantitively.
Data is definitely 14 bit.
Checking should be easier than that - just capture a few sequential frames and compare the same location in adjacent ones - noise will ensure some difference.
Of course if the duplication is analogue (sample/hold) then you may still see small differences.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 09, 2015, 11:45:07 pm
I see... thanks for the useful info,

Hmmm.... regarding 14 bit data... That implies 14th bit is jittering because of noise, and hence 14 bit means 16384 levels, the whole temperature span is divided into (-20 to 250C = 270) / 16384 = 16 MKelvins. I remember some post where a user had some 'noise' parameter adjusted, and then he measured temporal noise to be almost 15 Mkelvins instead... from that, I would conclude that

1. E4 doesn't really change the temp span in either auto or locked or manually set boundaries? No need for this, 14 bits is enough.

2. E4's microbolometer is quite good in terms of temporal noise, maybe (just maybe) it would afford even higher resolution, if ADC would allow for.

But then, I remember another post, where user claims that E8 has some 'minimal tempurature span of 4 C' while E4 has only 8C minimal temperature span. No matter, how many levels are available.

Another restriction here?

In other words, do you know whether E4 really sets (reconfigure) temperature span in hardware at ADC level, or it does not?

This is actually important question, because if it does, the series of images may be further statistically processed to get rid of temporal noise convolved with ADC noise -> and get much higher temperature gradient detail, if the temperature span is set small... otherwise, this will only slightly help to improve sharpness :(

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 10, 2015, 02:24:28 am
A doctored E4 has span 2C in manual scale mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on May 10, 2015, 02:54:46 am
How odd -- the narrowest manual range I can coax out of my hacked E4 is 4C (7.2 F). Wonder what's different between my configuration and yours?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 10, 2015, 03:14:11 am
I used whatever config janekivi published at the time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on May 10, 2015, 07:00:24 am
Hi all,

looks I've triggered the topic :)

Really, big lenses... would make sense to lower distortion, ofc, but also as a reason to get higher singnal to noise ratio for the matrix of Ex0 which is not that good in terms of temporal noise?

Good point in frames replicating or skipping (either way, effectively decimating),
is that picture doesn't 'blur' upon movement along target... okay looks more like slide show, but not blurry...

I was surprised to know that this decimating is done right on the microbolometer scale... I would also use FPGA for this, that would allow for unifying process technology for microbolometers production for different fps devices, on the other hand, not so easy to re-program - this would satisfy the ITAR.

MIkle says it is 14 bit resolution, not 16... either way, if the datastream is recorded with some streamer or deep memory oscilloscope, and then run simple statistics (built-in) like histogram, or even calculate entropy divided by degree of fredom (60 in this case) when camera is slowly panning... that would answer the question quantitively.

you do not need an extra framestore, you already have the one used to store the charge from the microbolometer elements under them, you just read it out according to the standard set for the viseo stream. I would hazard that there is a fuse bit on the die that is either blown or not blown to set the division ration of the system. Blown it is a 3 or 4 times division set by the standard in the input data from the microcontroller during initialisation, and if not blown it will set it to a full 60Hz and ignore the setup data there. Hard to unblow a fuse without destroying the die, and they can test all the dies and those that are functional but too slow at 60Hz will be downgraded to the 9FPS versions. Likely the fuse is hidden under the microbolometer array as well to prevent it from being bridged without destroying the array.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 10, 2015, 02:34:17 pm
thanks guys,

okay...this picture is looking as a proof that manually set temperature span can be set down to 2C. However, as I can observe from the feedback, not all users are blessed with such the low span  :-//

From this I conclude, that there is some setting which can be adjusted, which is default for the E8 (the latter case) to 4C and altered to 2C (the former case). Again, how it is called and where it can be adjusted? Can it be then adjusted to even smaller span? 1C? 0.5C? There are applications which would benefit greatly from such the low span setting.

Returning to the proof kindly provided, I must say that it proves nothing. If the whole span is -20C to 250C and the 14th bit is 15MKelvin (near noise), for 2C set span, we have ~7 bits (133 > 128 levels ) resolution, so this is again enough to see an unbanded image on such the low pixels count.

In other words, I still cannot see does the E4 hardware set the temperature span on its ADC or it doesn't.

But if Bud would be so kind to run simple statistics on the image, he would give us a good hint ... 7 bits are pretty visible on histogram (all the numbers falls into 128 bins not equally in count, but there are no numbers in between them - test with noise generator parameter set to 0!)

If, however, the ADC really sets its limits according manual setting, all the numbers will be different.

Also in this case thermal image entropy value calculated will be much higher than for the 7 bit image.

If the latter is true, we can de-convolute the tempral noise and much of the other types of noise by special procedures from statistical image processing, thus obtaining true, hi-res, low temperature span image and a branch of new applications for E4 arrives!

Regards,
Solare
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2015, 02:58:47 pm
Hmmm not sure if I can help here but I can comment on FLIR professional cameras.

The PM series have 2 or 3 RANGES that are manually selected. After selection the camera runs a calibration routine which suggests that something significant in the image processing path has changed. ADC reference or whatever.

The E4 is a SINGLE range camera. It captures the full span data from the microbolometer and the image processing stages that follow select the data required for a specific span and centre temperature. It is just a moveable 'window' in a large span of temperature data.

The E4 does not recalibrate when spans are selected and I have no reason to believe that the ADC reference is changed. Greater temperature capabilities are also offered on pro cameras in the form of thermal filters. These are in the optical path just in front of the microbolometer. The E4 does not need such a filter as its maximum temperature is quite low and well within an ADC single range.

With regard to the minimum span of the E4. It was 8C on the E4 STD and 4C on the E8.
Way back in the early days of the E4 investigation it was realised that there was a noise generator used to degrade the images on the E4 AND there was a minimum SPAN specification in the configuration files. The E8 spec of 4C is sensible but the camera can be set to 2C minimum span if desired. Even professional cameras suffer image noise increase at very small spans. Less than 2C span can be challenging especially when you consider the camera tolerance specs.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 10, 2015, 03:13:05 pm
thanks Aurora,

Indeed, very useful information!

If I remember correctly from your earlier posts, you are one who played a lot with ZnSe lens... have to say, nice work!

I also consider buying ZnSe lens and experiment with close-up thermal imaging, however, I don't understand certain principles of operation in such the mode:

1. We have IR window correction seeting. Obviously, IR window will attenuate, so this attenuation must be compensated.
2. But in case of lens we have rather amplification of flux, not attenuation! That should affect the opposite way, but I cannot see how we can set camera for 'negative attenuation'?
3.What do you see with 50 mm lens on larger distances (several meter). Blurry? In other words, can the outter lens be adjusted so I an focus on distant targets as well, or I need a special telescopic lens assembly for this?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2015, 03:54:05 pm
Close up lenses are little different to a pair of reading glasses in terms of how they work. This technology has been in use for many years on video presenters to enable the standard integrated lens video camera to close focus. A No2 auxilliary close up lens is placed in front of the cameras lens.  That is where I  got the idea of using ZnSe lenses with thermal cameras. A few experiments with cheaply available CO2 laser focus lenses proved that they would work OK.

Please bear in mind that the ZnSe CU lenses are auxiliary and not primary lens structures. They present only loss in the optical path and will always have a transmission of less than 100%.

The ZnSe lenses have a very good transmission figure of approximately 97% between 8um and 12um

Take a look at the graphs on this Thorlabs page

http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1781 (http://www.thorlabs.de/newgrouppage9.cfm?objectgroup_id=1781)

If a calibrated temperature reading is needed, an offset can be applied using the rough transmission figure or by testing the camera against a Black Body source whilst fitted with the ZnSe lens. Some cameras permit a lens transmission figure to be entered and these automatically compensate in the measurements.

Close-Up lenses are just that, close-up only. The depth of field is very small as well.

To produce an auxilliary telescope for the E4 you would need at least two lens elements as a minimum.
This has been covered previously by myself and others.

Take a look through my 'FLIR E4 Useful information' thread

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/)

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg339922/#msg339922 (https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/msg339922/#msg339922)

I bought all of my thermal telescopes as used parts as new ones cost a fortune and they are difficult to make at reasonable cost due to lens element prices.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 10, 2015, 05:03:07 pm
Just did a simple test for framerate.
Set up a motor with a foil segment on the shaft, set speed to around 9 revs/sec.
If it was reading at 60fps and avaraging, it should show a blurred image
If it was 9fps and duplicating it should show a sharp image of the segment once the speed was adjusted to be in sync.
Is showed a sharp image, so looks like the effective data rate from the sensor really is 9fps :(

...of course there could be some magic command you can send to it....
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on May 10, 2015, 05:07:54 pm
Might be you have to set the bit for PAL/NTSC to all zero, or there is a fuse bit. Wonder how much fuzzing you can do to the input config data stream before you brick it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 10, 2015, 05:57:34 pm
"Magic command" that unlocks everything! I like the sounding of this...  O0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2015, 06:05:13 pm
Sadly it is not a 'magic command' as such as FLIR never intended end users to change the settings.

You are dealing with changing a bit, or group of bits, by direct access methods. No friendly 'commands' here as this is not an OS based change. You are changing the ROIC settings.

It is interesting to find out that no averaging is in play and that the E4 uses just a single frame to produce its images from what is a very small and relatively inefficient lens. The Ex series microbolometer is a sensitive little beast  :-+

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2015, 06:19:24 pm
@Solare,

Just so you are aware, the matter of the E4 frame rate and associated legal issues has been discussed in this thread previously. It was agreed by those involved in 'upgrading' the E4 that it was not a good idea to pursue upgrading the frame rate. Such action would bring significant pressure to bear on FLIR to not only countermeasure such a frame rate 'hack',  but to also properly lock down the camera against other 'upgrades'. This would not benefit the greater community.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 10, 2015, 06:36:54 pm
@Aurora and 'those who may concern'!

I am happy to comply (c) :)

Really, who am I to break the Rules accepted by Community. But, in reality, I never said I was going to!

Moreover, in previous posts, I stated clearly that I am not interested in getting 60 fps in realtime, but of course, would welcome the possibility to record some 2-3 seconds of video in full 60 fps temporal resolution. Since using 2-3 seconds video to guide in realtime a manned missile in total darkness from 30 meters after downloading it to PC thru USB, sounds NONSENS even for ITAR Guys :)))) I consider matter closed.

I never insisted, or implied, that 60 fps unlock should be done. But, I wondered... what IF it could be recorded?

Since you've explained in detail that this is not technically possible, I say okay not possible means not possible, what can I do.

But what Rule on Earth can forbid me dreaming ?  >:D

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2015, 07:39:05 pm
@Solare,

Please do not take my comment as 'warning you off' , that was not my intention. It was just to let you know why the frame rate has not been greatly investigated in this thread and why you may not get answers to certain questions that you may innocently ask  :)

By the way... the "ITAR Guys" see things very much in black & white so even a short video grab at 60fps upsets them  ;)

Best Wishes

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 10, 2015, 08:44:45 pm
@Aurora

Okay

@All

Still, this is weird... replicating frames mean all the computing power is engaged in data stream processing matching 60 fps... just think of for how many hours the E4 could operate, if it really skipped the frames...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 10, 2015, 09:22:17 pm
@Aurora

Okay

@All

Still, this is weird... replicating frames mean all the computing power is engaged in data stream processing matching 60 fps... just think of for how many hours the E4 could operate, if it really skipped the frames...
Remember the sensor was developed for automotive applications, where it needs a high framerate.
For other, lower volume uses, they obviously thought it would be simpler to keep the interface the same ( and the same as earlier sensors).  Even if the sensor outputted a lower data rate they'd need an FPGA to handle it, so it doesn't really make a lot of difference..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 10, 2015, 09:55:19 pm
I have a problem
E4 updated firmware 1.19 to version 2.3.0
I acted in accordance with hack http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)
Unfortunately it does not work HACK MENU
First, the file extension "conf" is a .cfg ( my camera) and according to the description on this page conf.cfc? (new camera)
Secondly, when trying to use a Python script, there is a mistake:

applying 5178 bytes of delta at 000004d8
traceback (most recent call last:)
file "menu_conf_e4.py" line 12, in <module>
assert len(d) ==  len(delta)
assertionerror …

E8 menu exists but it is incomplete.
Does not work "MENU free enhancend menu"
etc ...

Does anyone know the solution?

PS
Camera had a previous hack to version 1.19
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 11, 2015, 05:19:17 am
Hack resolution from what I've seen has been maintained from the previous hack.
I also wrote to the people of the website "fubar" because that's where the problem was also prompted tem.
Does anyone know what is the difference between conf.cfg files and conf.cfc (conf.cfc are in newer releases of cameras)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 11, 2015, 04:11:53 pm
If anyone is interested in the hardware aspects of thermal cameras, I have been posting a teardown and analysis of a FLIR E2 here:

https://www.eevblog.com/forum/testgear/flir-thermal-camera-for-teardown-my-latest-patient-the-e2/ (https://www.eevblog.com/forum/testgear/flir-thermal-camera-for-teardown-my-latest-patient-the-e2/)

Its a work in progress and really just for fun.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 11, 2015, 05:39:25 pm
Hi all,

anybody knows what is current status and progress of development menu's, sofware and reverse engineering the E4 device?

Who is doing what? :) Open problems? New solutions?

thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 11, 2015, 07:08:14 pm
I think that for the time being, it would work out, the problem of E4 and cameras firmware update to version 2.3.0 and HACK menu (and HACK resolution)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on May 11, 2015, 07:13:57 pm
so now I'm curious... what do you get by updating to 2.3.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 11, 2015, 07:25:02 pm
Sorry but isn't Firmware 2.3.0 already hacked as well as the MENU?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 11, 2015, 08:04:17 pm
from what I see, in the software 2.3.0 is a little more powerful.
Although part of me just a function does not work, wrong hack through the menu (File issue conf.cfg / conf.cfc)
As a topic is being developed and is updated then  need to solve this problem (and also for those who carry out such update)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 11, 2015, 08:07:50 pm
Be very clear on what firmware 2.3 is and what it represents......

Firmware 2.3 came about as a COUNTERMEASURE to users upgrading their cameras.

Firmware 1.19.8 was the last non-countermeasured firmware, As such it is inadvisable to move to a later firmware. That said, Firmware 2.3 has had its defences circumvented but I have seen no real benefit to installing this later firmware. You would effectively be voluntarily installing a firmware that was designed to be non upgrade friendly.

In the end the choice is yours though

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on May 11, 2015, 08:09:25 pm
Be very clear on what firmware 2.3 is and what it represents......

Firmware 2.3 came about as a COUNTERMEASURE to users upgrading their cameras.

Firmware 1.19.8 was the last non-countermeasured firmware, As such it is inadvisable to move to a later firmware. That said, Firmware 2.3 has had its defences circumvented but I have seen no real benefit to installing this later firmware. You are would effectively be voluntarily installing a firmware that was designed to be non upgrade friendly.

In the end the choice is yours though

Aurora

That's kind of what I figured... I'm happy with 1.19.8.

As a note, anyone else see the wifi symbol show up in the menus after the menu hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 11, 2015, 08:19:12 pm
OK update to version 2.3.0 is the user's wishes
But there are people who have done upgrades and they have a problem with full support (HACK menu)
And for this reason you need to solve this problem
Nor has on many pages, clear information that the upgrade to version 2.3.0 is a problem with the menu HACK

And there is no possibility of withdrawing Software 1.19.8 ?!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 11, 2015, 08:31:41 pm
So maybe let's discuss about the issue or the configuration file conf.cfg (older versions) and conf.cfc (newer versions).
What these files are different and why the PYTHON does not modify them?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 12, 2015, 01:28:13 am
You would effectively be voluntarily installing a firmware that was designed to be non upgrade friendly.

Do you expect any more updates for 1.19 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 12, 2015, 06:19:27 am
Is a software update to 2.3.0
However, it is a problem.
However, Hack, higher resolution is maintained.
But there are problems with getting the full menu (menu hack).
The case is based, on various files conf.cfg / cfc.
You have to recognize what these files differently, and if there are still any problems?
 At least in this case there is no answer!

Can anyone share a file structure: conf.cfc? (I do not have such file) It is known that at the same time config.cfg file (a file with the old version of the camera) does not work PHYTON script.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 12, 2015, 06:36:33 pm
Can anyone share a file conf.cfc?
Is anyone working on the theme file conf.cfc / conf.cfg?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 12, 2015, 06:37:57 pm
Is it possible to go back software from 2.3.0 to the previous ver soft 1.19.8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 12, 2015, 07:22:57 pm
1.19.8 was never released as a file. 1.18.x is available for download.

The bad news is that 2.3.x is designed to prevent downgrading to earlier versions as that would have been a route back to a version that could be 'hacked'.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 12, 2015, 08:49:02 pm
theoretically because they are not published at all, but for wanting nothing difficult

Maybe I will write what does not work in my version
Menu - Free Enhanced menu (they can not go)
Image mode - There is no digital zoom
Temperature scale - in manual mode only shows me LOCK version (not is impossible to change the temperature range)

After that, nothing special is not happening disturbing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 13, 2015, 11:28:02 am
Hi all!!   Great site!  I started reading and realized how many pages were ahead of me!  Is the latest E4 Hackable for both resolution and menu? I think 2.3.0 is the latest firmware?  Any help is greatly appreciated. I just sold my i7 so I would like to order the E4 and get going on this.  Thanks in advance for any help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 13, 2015, 12:56:34 pm
@Ronsb6

Yes  :)

It is best to read the more recent posts (going back a few months)  in this thread as they pertain to the latest firmware. Read the thread backwards  ;)

 The First page has a list of useful  links that I recommend you review as and when.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 13, 2015, 06:52:40 pm
Unfortunately, this is a big mess Information
The data are inaccurate and scattered on several hundred pages.
It was necessary to so in the first post systematize information
On principle: the camera version complete description HACK (for your version of the software)
Also had to introduce a complete description of the warnings which operations on which the software does not perform.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 13, 2015, 10:48:37 pm
@ max-bit,  was your post in response to my question?  I'm having trouble understanding exactly what it means.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 13, 2015, 11:01:31 pm
@Ronsb6

Yes  :)

It is best to read the more recent posts (going back a few months)  in this thread as they pertain to the latest firmware. Read the thread backwards  ;)

 The First page has a list of useful  links that I recommend you review as and when.

Thank you. That's Great!  It should be on my doorstep by Friday!! Hopefully i will get time over the weekend to do it.
Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 14, 2015, 12:05:45 am
@max-bit
@newbies

Reading all the Thread is a Nightmare.

Yet, you have to read it at least three times to get introductory understanding.  :scared:

Either you are profi so you can adjust procedures according your needs (and your own responsibility)

Or you are a welcome guest; use whatever you found on your own risk, but follow the procedures LITERALLY.
Do not assume even a slightest difference will not matter.

It will  :'(

Do not assume people here have lots of spare time to guide you step-by-step recovering your bricked device...

Be carefull, be patient, do not hurry. Prepare your problem well. Make it attractive or even seductive for the users :)

Don't panic. After all, you will manage to achieve anything you want... after a while... mostly long while :)

Now...

@max-bit.

It seems you are using Google Translate or similar service... so really, it is difficult to understand you.
What is your native language then?



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 14, 2015, 05:37:31 am
The information is not systematized
 And it is a fact.

Of course you can wait, but the exchange of information it should be.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 14, 2015, 12:46:00 pm
@max-bit

maybe :) but this is not ideal world we live in, you know!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 14, 2015, 02:12:42 pm
Of course, not perfect, but if you can improve, because he knows a fault, it must improve ....
And yet known to have problems, why they do not describe it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 14, 2015, 02:40:24 pm
max-bit,

all information is here, do you research. There have been instructions published many times but you want to be spoon-fed. Here is what i wrote 6 months back:

Quote
" ...publish information in the newspapers, run an ad on television, post on facebook and youtube, then watch half a dozen newbies joining a week saying "I have no clue where to start give me step by step instructions "

So here we have it, your erratic posts are a good example that reinforces my that point.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 14, 2015, 05:58:27 pm
They're here, do not say no, but they are scattered over 464 pages !!!! and in nearly 7,000 posts :)

In the first post, Mike is the link
30 Mar 2015 Link is a step-by-step guide for 2.3 firmware
 find me there information that you should not update the software from 1.19.8 to version 2.3.0? (Full Hack menu, without errors)

But we do not go too far in this reflection?

The first stage
He wants to help develop software updates cameras (hardware ver 1.0) from version 1.19.8 to version 2.3.0
From what I widomo can be done completely correctly, but it is part of the person who wants to make money (ebay?, allegro (poland))

example :
http://allegro.pl/aktualizacja-przerobionych-kamer-flir-e4-do-2-3-i5273686432.html (http://allegro.pl/aktualizacja-przerobionych-kamer-flir-e4-do-2-3-i5273686432.html)

So maybe Let's work on the topic of updating the firmware to 2.3.0 Plus FullHack menu?
OK ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 14, 2015, 06:39:56 pm
max-bit,

all information is here, do you research. There have been instructions published many times but you want to be spoon-fed. Here is what i wrote 6 months back:

Quote
" ...publish information in the newspapers, run an ad on television, post on facebook and youtube, then watch half a dozen newbies joining a week saying "I have no clue where to start give me step by step instructions "

So here we have it, your erratic posts are a good example that reinforces my that point.
This. We all had to do it... You'll get a better understanding too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 14, 2015, 09:32:00 pm
I will ask again... Max-bit, what is your native language? I may help you with translation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 15, 2015, 05:21:09 am
Polish :)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 15, 2015, 11:32:48 am
Aha I knew this is one of the Slavonic language group... almong them I know some, but not Polish :) Sorry, Pan! :)

So... is your idea to sell upgrade for the E4 firmware in Poland for 560 USD ^-^?

Do they buy it for the money?  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 15, 2015, 02:37:09 pm
I'm not sold on auction sites, any updates!
OK ?
It does not make any sense, and nobody buys for $ 500
It's a joker this seller :)
I just showed you with are such cases.
and ,,,,
But again we depart from the topic ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: XOIIO on May 16, 2015, 07:31:09 am
I'm glad to hear these can still be hacked, I was fearful that by now it would be impossible, or I'd have to try and find one with old firmware form who knows where. It will probably be several months before I can afford one (have a couple other things I want to do first but should only take 3 paychecks with US currency conversion)

And hopefully by then it won't be too risky to do this and chance bricking your device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 16, 2015, 12:18:44 pm
So far so good!! I think!! 

I recieved my E4 yesterday from Flir. One day shipping!!  I read and re read the steps.  I did the res hack and it worked.  What a difference.  I went to do the menu hack and when I run "FLIRInstallNet.exe" I no longer see Flir USB video under camera. I see this "Local Area Connection 4 - 192.168.1.2" the IP address when i did the res hack was 169.254.109.230 .      I have gone over the steps many times. I don't beleive I missed anything.  I don't want to go any further in case I make a mistake.   I'm hoping one of you much more experienced forum members will know what to do.  Any help is greatly appreciated. 

Also, FlirTools no longer recognizes my E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 16, 2015, 01:39:03 pm
So far so good!! I think!! 

I recieved my E4 yesterday from Flir. One day shipping!!  I read and re read the steps.  I did the res hack and it worked.  What a difference.  I went to do the menu hack and when I run "FLIRInstallNet.exe" I no longer see Flir USB video under camera. I see this "Local Area Connection 4 - 192.168.1.2" the IP address when i did the res hack was 169.254.109.230 .      I have gone over the steps many times. I don't beleive I missed anything.  I don't want to go any further in case I make a mistake.   I'm hoping one of you much more experienced forum members will know what to do.  Any help is greatly appreciated. 

Also, FlirTools no longer recognizes my E4.

Did you do a cold boot afterwards?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 17, 2015, 10:12:59 am
So far so good!! I think!! 

I recieved my E4 yesterday from Flir. One day shipping!!  I read and re read the steps.  I did the res hack and it worked.  What a difference.  I went to do the menu hack and when I run "FLIRInstallNet.exe" I no longer see Flir USB video under camera. I see this "Local Area Connection 4 - 192.168.1.2" the IP address when i did the res hack was 169.254.109.230 .      I have gone over the steps many times. I don't believe I missed anything.  I don't want to go any further in case I make a mistake.   I'm hoping one of you much more experienced forum members will know what to do.  Any help is greatly appreciated. 

Also, FlirTools no longer recognizes my E4.

Did you do a cold boot afterwards?

OK!! I got everything working, and its back in MSD mode.  You guys were right.  I found everything i needed by going back and reading AGAIN!!!   Thank you so much for everyone that has contributed to this forum. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 18, 2015, 10:25:46 am
@all happy owners,

hi guys!

Do you remember your last days waiting for your E4 to be delivered? :)
In three days, I will be one of the Club!

Hurray!  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ronsb6 on May 18, 2015, 09:54:09 pm
@all happy owners,

hi guys!

Do you remember your last days waiting for your E4 to be delivered? :)
In three days, I will be one of the Club!

Hurray!  :-DD

I hear you! I paid $50 CAD to have it shipped faster. It came within 24 hours!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djQUAN on May 19, 2015, 02:02:48 am
Did a search and nothing came back sooo....

Does anyone have a problem with the E4 battery? Mine seems to suddenly turn off when the battery is moved or just put on the desk on its side. It seems to be a battery contact issue but once I wipe it with cloth, it will work fine for about a week or two then the problem is back again.

Anyone got a solution to it? It seems the dual contact doesn't work as well as it should.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 19, 2015, 05:21:20 am
Did a search and nothing came back sooo....

Does anyone have a problem with the E4 battery? Mine seems to suddenly turn off when the battery is moved or just put on the desk on its side. It seems to be a battery contact issue but once I wipe it with cloth, it will work fine for about a week or two then the problem is back again.

Anyone got a solution to it? It seems the dual contact doesn't work as well as it should.
I haven't had the issue however I have had an issue with the battery itself being bad (causing the camera to act all funky - lines in screen, not taking pictures.. etc)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 19, 2015, 11:42:31 pm
Resolution hack worked fine on an e4 2.3.0.  Having problems with the menu hack though.  Some things are present and some are missing.  No 3 spot mode.  No zoom.  No msgs about free enhanced menu.  What is present is pip, hotspot, coldspot, below alarm, above alarm.  Any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 12:13:41 am
Which is the procedure you have followed?

Is this the one by Fubar? How many attempts (install hack - remove hack) you have actually made before such the conclusion?
Which OS do you run?

Anyway, I will have my E4 tomorrow, and we'll see.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 20, 2015, 01:05:17 am
Yes, the fubar.  Multiple times.  Menu hack brings some stuff, but not all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: god_ukr on May 20, 2015, 07:00:33 am
Hi to all!

I did successful hack, but now receiving follow msg on my camera: Application appcore.exe encountered a serious error and must shut down
After searching, no clear fix answer been found :(
Is any one can help with this issues?

Thanks
And best regards
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 07:14:24 am
@alank

Hmmm... then my result will most probably be the same.... unless...
You still haven't told us about which OS you are using when applying the hack?

@god_ukr

You are God. Why asking? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on May 20, 2015, 08:23:57 am
Hi to all!

I did successful hack, but now receiving follow msg on my camera: Application appcore.exe encountered a serious error and must shut down
After searching, no clear fix answer been found :(
Is any one can help with this issues?

Thanks
And best regards

I've seen that message 5-6 times on my camera over the past year, each time a power reset solves it so I just assume its windows messing and dont worry.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djQUAN on May 20, 2015, 10:48:14 am
I also get that message once in a while. I usually do a cold restart and that solves it but last time it occurred I pressed some buttons and the pop up closed. E4 worked fine until I tried to save a screen cap and it won't save. Other functions worked fine.

A cold restart restored the save picture functionality.
Title: Re: Flir I3 TO I7 Thermal imaging camera teardown
Post by: Anastasios on May 20, 2015, 02:13:39 pm
FLIR i3 TO i7 PANORAMA WITH FLIR TOOLS+

(http://)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 03:02:34 pm
@All

Okay, I have it in my hands finally! Already attached cut from iPhone5 protection film on the screen. Charging... will proceed according the Fubar procedure in a couple of hours. Anybody curious is welcome :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 20, 2015, 03:05:30 pm
Solare I was using win7.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 07:23:00 pm
@All

...about to apply the cure :)

Question: this line:

"Hard reboot the camera by removing and replacing the battery. Turn on the camera again."

also known as "cold reboot"

implies that I have to just pull the battery off the unit when it is operating?!!!

or do I have to plug out the usb cable first?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on May 20, 2015, 07:29:23 pm
@All

...about to apply the cure :)

Question: this line:

"Hard reboot the camera by removing and replacing the battery. Turn on the camera again."

also known as "cold reboot"

implies that I have to just pull the battery off the unit when it is operating?!!!

or do I have to plug out the usb cable first?

I'd do both, but just pulling the battery should be enough.  I don't think the camera will stay running with just USB cable and no battery.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 07:40:07 pm
I'll explain why I have some doubts...

Operating OS have typically many files open, may be reading or even writing something from/to flash at the same moment I pull out the USB plug... I afraid the files may be corrupted and the fact that after the cure appcore.exe sometime crashes support this evidence.

On the other hand, the OS will immediately know if I pull out the USB cable, and may take actions (if this is intended), which will harm the cure or prevent it to be applied in full ... and there are recent reports that in some cases the Menu hack is not full.

So I still don't know how exactly behave... more opinions please! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 20, 2015, 07:41:45 pm
Just wait 10 seconds after copying a file.  My advice to do a cold cycle/power off is not to pull the battery, but just hold the power button solid for 15 seconds.  This will do a full power down.  Then tap power to turn it back on.  No unplugging necessary.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on May 20, 2015, 07:42:25 pm
sorry, I did this update myself.

I would unplug the usb, and then pull the battery. if you want to be safe, I would hold the power button for 1-2 seconds then release, which will put the camera to sleep, THEN pull the battery.

It's not going to see CRC32 changes and undo them, or brick, or anything... though, obviously, YMMV. Aurora should have input as well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 08:16:52 pm
Thank you guys...

Unfortunately, I haven't even approached to curing device :( I am obviously stupid  |O but I cannot install FLIR drivers ver 1.9.

Here is what I do:

-Install drivers on WinXP Pro SP3
-Reboot PC
-Hard off the camera
-Boot PC
-Login Windows
-Then I plug the USB and

IF the camera was off or stand-by it shows battery, but nothing else. However, New Drivers are found on my PC, which is FLIR USB Device, Flir Video etc., as it should be.

However, in a moment these names are replaced with Generic USB Volume and Generic USB video.


 :scared:

IF the camera was already full-on, it behaves quite the same.

I tried to manually locate and replace drivers from the Drivers installation folder. There I found 2 versions of Video USB Driver and USB device driver, among others.

But none of them installed! It keeps saying: there is no info about hardware in this *.inf WTF&!!!*@($*&$$@(&&??????????

I also tried to connect FlirInstallNet with this drivers. It does, however it lists Generic USB video only and not FLIR.

It connects to the device, but I am afraid to use 'wrong drivers' for such the important and risky operation.

I tried to GetHwInfo and check files buitton in the utility. In the first case it mostly returns empty strings in a message box.
In the second, it complains there is no CRCkit and ProdKit found...

I am about to panic :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 08:44:21 pm
...okay,

OS installed 3 drivers (while asking for permission to install 6 times though - you know this WinXP certification lab bla bla bla)

- USB Compound device
- USB video device
- USB device (listed in volumes mounted)

Also I have Generic disk appeared in Explorer with some files...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 20, 2015, 11:46:27 pm
Done.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: staze on May 20, 2015, 11:47:44 pm
:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 12:59:00 am
Hi guys,

How do I return camera to the original USB mode so I could livestream again and save files from it?

Don't tell me that I have to reverse all back :) In the Fubar procedure I found nothing about returning to the original USB mode, so I am stuck in FTP mode... help!

P.S.: Does it seems so or I am imagining things, or read something like that but it appears to me there is more noise and less frequent calibrations of the image after installing the menu hack?

I would say, especially hi frequency noise? "running lines" down the screen, pixel walking... :) vertical stripes holding on place... how do I check actual Noise setting applied in my conf file?

Min temp span can be set to 2C but really contrast is to high for such the noise. At 8C it appears okay. But I have seen here on thread much more smooth videos and snapshots, really nice... I wonder why mine is so... pixelated :)

Ofc. unless you made your images with EUR 50K camera claiming it is the E4 :)))))) Joking  ^-^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 21, 2015, 02:52:26 am
If you ran the Set_RNDIS_permament.fif, then at some point you'll need to run the Remove_RNDIS_Permament.fif to cancel it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 10:51:52 am
So if I understand you correctly, after all the hacks applied, I just run the Remove_RNDIS_Permament.fif and this will not cancel the hacks?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 21, 2015, 11:53:06 am
Yes, it just removes RNDIS mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 21, 2015, 12:03:33 pm
With regard to increased noise and lines on the displayed image. I have no such issues with the much earlier upgrade to firmware 1.19.8 / HW1.1 and do not recall others having this issue with the unencrypted cameras.

I cannot say that the newer hardware version isn't causing the issues, but I have to wonder whether some of the more recent 'enhancements' to the menu are an issue in themselves. A possible case of 'going too far' or over stretching the elastic  ;D

IIRC I have read some reports on the 2.3.x menu upgrade suggesting that it has an effect on the cameras OS speed of response. If the addition of too many enhancements has had this effect, I strongly recommend reducing the enhancements to those that are truly needed rather than 'nice to have'.

It should be remembered that the E4 microprocessor was not originally selected to run the routines of the much higher specification Exx cameras and the latest upgrade may be over taxing its resources. IIRC the Exx series has TWO processors inside it as against the E4's single processor. Why should this matter ? Well a modern thermal camera uses a lot of processing on the data that it receives from the microbolometer. That processing is designed to clean up the image. FLIR are past masters at such processing and you only have to look at images produced by the SEEK thermal camera to see what a relatively 'RAW' thermal image looks like. Not pretty !  If the processor resources are being overtaxed it may have a detrimental effect on the image processing algorithms and the cameras overall stability.

With the original upgrade to the unencrypted cameras some very clever members of this forum collected together features from higher specification cameras in the Exx series (and others). these features were never supposed to be present in the Ex series and so were grafted into the configuration.  Some features did not work and caused instability in the camera. IIRC these were relating to Delta T and Humidity. Two versions of Menu upgrade became the standards. I stuck with version 2 whilst others went on to use a later version that had the Delta T and Humidity enabled but unstable. I have not regretted that decision to stick with the Version 2 Menu upgrade. My camera is very stable.

It was noted that as more menu options were added there was a slight slowing of the cameras  OS but Menu V2 has no noticeable effect that I can see. Most users seemed happy with the excellent features that had been added, namely more Colour Palettes, Zoom function, Manual span control etc. A decision was made to stop adding less useful functionality as that could slug the processor and risked instability in the camera. I consider this a good call.

IIRC the latest menu upgrade has added a lot of extra features over and above what was originally provided in the early upgrades. Some may find the additional features useful but, for me, the E4 was never intended to have every available feature of the OS enabled. Remember, this OS is common to a large range of FLIR cameras and may be considered a common platform with only the required features enabled. If you try to add all the features to a camera that was not designed to cope with such, you are asking for trouble. The E4 can become overcrowded in terms of its displays and also its OS routines.

It would be good to have an upgrade for FW 2.3.x that had the same features as the earlier proven V2 menu. this could be used to compare the cameras OS performance and any other issues that seem to be present in the latest camera upgrade.

I leave you all with this final comment..... more is not always better  ;)

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 21, 2015, 02:21:30 pm

P.S.: Does it seems so or I am imagining things, or read something like that but it appears to me there is more noise and less frequent calibrations of the image after installing the menu hack?
If i understand correctly, calibration is performed until temperature inside the camera reaches 35C, so calibration cycles become less frequent as the camera warms up. This is normal.

Quote
"running lines" down the screen, pixel walking... :) vertical stripes holding on place...
Press and hold Archive button for 2 sec, this will force a calibration cycle, see if you get spatial noise  (stripes) calibrated out right after that, if not then something could be wrong with the camera in general, i.e. factory calibration.

Quote
how do I check actual Noise setting applied in my conf
You need to decrypt the conf file. A script to do this was published in this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 21, 2015, 02:41:52 pm
IIRC I have read some reports on the 2.3.x menu upgrade suggesting that it has an effect on the cameras OS speed of response.
Not that i can see except some lag navigating in archive, but that may be because i have too many stored pictures. Simply adding measurements does not seem to slow camera down, in fact it holds very well, the only limitation is screen size, you can only place that many measurement boxes there.

Quote
  If the processor resources are being overtaxed it may have a detrimental effect on the image processing algorithms and the cameras overall stability.

I can attest no problems with stability here, the camera never dies on me

Quote
  Some features did not work and caused instability in the camera. IIRC these were relating to Delta T and Humidity.

True for 1.19, for 2.3.0 it was sorted out and works ok.

Quote
My camera is very stable.

Same is my 2.3.0  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 04:04:13 pm
@Aurora

Nice explanation... not that I really believe that adding palette to the list of options, even without enabling it, would slow down CPU ... but the general hint is clear - keep it minimal.

I don't know yet which are other Menu options (V1, V2, etc.), I installed the one referred to from Fubar procedure, and it has extended sets of palettes, measurements but not looking overcrowded with options. T ex., no Gradient measurements, circle areas, line and stat measurements etc. Overall, interface now seems balanced, and yes, you are right promoting this philosophy.

I remember you also played with polyolefin films to protect lens... I also bought some 12 um film and it works just nice, both in IR and visible! However, I have a problem applying it... how to fix it on the E4 front? Whatever I tried, I couldn't have good fixture, without folds and it very easily sags and drops :( Sticker tape doesn't help, also string from nylon or metal do not fix reliably... how in fact you achieved this?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 04:15:06 pm
@Bud

Are all the units assembled in Estonia?

Mine is from there, as well as some other user's,  the post of whom I read in this thread... also complaining vertical stripes at cold temperatures ("they are always there, but usually are masked with bright hot details")

When I set temp span to 4C t ex., and observe room in the night when all the temperatures are close, I see the vertical stripes pretty well, they are quite wide (16 pixels or so) and non uniform, but the pattern is always there.

Upon calibrations, they 'almost' disappear on the warmed up unit, and for several seconds the image is clear; then they start to emerge, together with random pixel aliasing and drifting, effectively degrading S/N ratio. That's why I asked you is that possible somehow to set more frequent calibrations (ideally in the Menu the threshold for calibration, or 'intensity' of calibrations could be set).

My unit is factory new, calibrated in Feb 2015, so I don't think the calibration is soooo misaligned... but then I asked you and others where their/ your unit originates from... maybe Estonia is a place of origin of BAD sensors :) because my image quality is substantially inferior to yours.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 21, 2015, 04:46:55 pm
It is likely they bin them and put the ones with a less clear image in the lower models since the resolution and noise creator covers it to some degree.  I do see a similar thing in my E4 that arrived on Tuesday with the vertical stripes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 05:41:46 pm
I hate them!!!!!

They must not do that, they must put equally random sensors on equally random cameras!!!!

 >:D

Okay... I have spent 2 hours trying to locate ftool.exe version which is capable of decrypting (at least) 2.3.0 conf.cfc, so far no good... I mean, I found few, but nest they do is 'Tail part 2 failed' and that's it...

Spare on me, I cannot read anymore!!!!! Thee Who Knows where it is, raise your voice!!!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 21, 2015, 06:19:34 pm
I do not know if all cameras made in Estonia.

There is no calibration frequency setting in the menu. I'd think it is driven by internal temperature so you cannot change it. Also you cant expect cold camera to perform, you should wait till it warms up and increases time between calibration cycles, then make your judgement.

Forget about ftool, it was for earlier version of firmware, it is not working for 2.3.0. You have to locate a python script. Work this thread backwards until you find it. Decrypting your cfc will tell you if there was any errors in blindly patching the unit. You can fix any errors in a text editor and reencrypt the file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nostromo on May 21, 2015, 08:44:20 pm
Thank you all for this great topic.
I sucessfully converted my E4 1.22.0 to E8 (including the additional menu) using Marphy's TIConfig.
Easy and without any problem. I followed exactly as described in Marphy's Blog:
- Installed FLIR camera drivers
- Executed TIConfig.exe >> packages >> FLIR Ex Series >> Device Configurations >> Firmware 1.2x >> FLIR E8 Configuration (1.2x).zip >> hit “Upload to device” >> switch off / unplug / take battery out >> put battery back in turn on
- Applied the Menu Upgrade package (FLIR Ex Upgrade Beta3.zip) >> Cold start

Worked like a charm   :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2015, 10:19:48 pm
Hmmm,

just playing with my converted E4 looking out of my window at people passing by (I live on 8th floor so it is observation from 20 meters height, at the distance over 50 meters away). It was early evening and surrounding temperature was 25.

I was expecting to see walking bodies glowing white in Iron palette(assuming these are not zombies) as I believed their temperature is well above 30C. But they didn't glow white! Then, I used 'color above threshold' palette so they should appear red, while the surroundings should remain gray.

I was surprised to see that all people in my area are actually zombies, because they didn't trigger the threshold anyway... they were of course not naked, but close to that at such temperature, but they appeared only slightly warmer than surroundings, so I had to set the threshold to 25.5 before they started to emerge red in grey.

At this distance, a typical figure of man is 12 to 16 pixels high, 6 to 8 pixels wide. Quite enough I would say for successful detection. Meanwhile, my own body, although observed from 10 meters in mirror, shows 35.4 C and 36.6 with the camera at the closest possible point.

Question: are they really zombies or something is wrong with measuring distant objects temperature? 50 meters are clearly not enough for factors like humidity come into play.

P.S> I expected that even a single pixel measurement will trigger the threshold, no matter how cold the surrounding pixels are... but now I assume some interpolation or statistics is applied to a group of pixels and, basically, it results in some limiting gradient value along the chosen direction or what?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 10:54:43 am
@all,

@Mike

I also would like to re-trigger the topic about empty slots on the E4 motherboard. It is over 2,5 years from the first Mike's teardown post and we still have no idea, which IC is on the E8 board soldered in this empty slot?!! As far as I can understand, once we know what the IC is there, we can solder it in and, have wi-fi and Bluetooth enabled?

Have anyone digged into this topic specifically?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 22, 2015, 01:15:04 pm
Hmmm,

just playing with my converted E4 looking out of my window at people passing by (I live on 8th floor so it is observation from 20 meters height, at the distance over 50 meters away). It was early evening and surrounding temperature was 25.

I was expecting to see walking bodies glowing white in Iron palette(assuming these are not zombies) as I believed their temperature is well above 30C. But they didn't glow white! Then, I used 'color above threshold' palette so they should appear red, while the surroundings should remain gray.

I was surprised to see that all people in my area are actually zombies, because they didn't trigger the threshold anyway... they were of course not naked, but close to that at such temperature, but they appeared only slightly warmer than surroundings, so I had to set the threshold to 25.5 before they started to emerge red in grey.

At this distance, a typical figure of man is 12 to 16 pixels high, 6 to 8 pixels wide. Quite enough I would say for successful detection. Meanwhile, my own body, although observed from 10 meters in mirror, shows 35.4 C and 36.6 with the camera at the closest possible point.

Question: are they really zombies or something is wrong with measuring distant objects temperature? 50 meters are clearly not enough for factors like humidity come into play.

P.S> I expected that even a single pixel measurement will trigger the threshold, no matter how cold the surrounding pixels are... but now I assume some interpolation or statistics is applied to a group of pixels and, basically, it results in some limiting gradient value along the chosen direction or what?

Did you setup the parameters of the camera properly? There should be an option to set the distance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 03:03:17 pm
Yes, there are options.

But also, there is plain Physics.

The only thing which influence signal which is proportional to distance is water in air. This is set by Humidity and also by temperature sensor on the motherboard. We can only set Humidity explicitly.

Anyway, the effect of water in air is accounted for is only several percents per decade of distance. In other words, this is clearly NOT enough to make living warmblooded creatures appear at 25C at only 50 meters away.

If this is not sufficient for you, consider this.

I have some hot pixels in the very middle of the bodies (central pixels) but not on the boundary. But actual distance from the sensors pixels to the whole body is the same! If what you claim were true then, by all means, the whole body would trigger the threshold, but it doesn't.

Any other suggestions?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 22, 2015, 03:07:41 pm
@all,

@Mike

I also would like to re-trigger the topic about empty slots on the E4 motherboard. It is over 2,5 years from the first Mike's teardown post and we still have no idea, which IC is on the E8 board soldered in this empty slot?!! As far as I can understand, once we know what the IC is there, we can solder it in and, have wi-fi and Bluetooth enabled?

The E8 does not have bluetooth or Wifi
It is not known if there is any support for the unpopulated part in the Ex software. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 03:35:06 pm
hi Mike,

thanks for quick response,

but really, why is that empty slot there? I though it is populated on E8! Have you actually a chance to look inside E8? Or maybe anyone you know who did?

I bet, this motherboard is not a replica from EX0 so, even if this slot is unpopulated it might be 'reserved' for future functionality, or it might be the original design allowed for Bluetooth and wi-fi but then, due to marketing reasons they decided not to interfere with EX0 model range and thus left it unpopulated.... much likely it was a decision made already after the design was made and the motherboards were printed in bulk quantities... as it happens with marketing often last minute decision...

This could mean that if we only knew the IC which is in the EX0 responsible for the functionality, it should fit the unpopulated slot and work, if the drivers are provided (if not already there as plug-n-play option).

Anyway, thanks!

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 22, 2015, 03:55:10 pm
I gotta say Mike, I really enjoy your videos and reviews.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 22, 2015, 04:18:11 pm
hi Mike,

thanks for quick response,

but really, why is that empty slot there? I though it is populated on E8! Have you actually a chance to look inside E8? Or maybe anyone you know who did?

I bet, this motherboard is not a replica from EX0 so, even if this slot is unpopulated it might be 'reserved' for future functionality, or it might be the original design allowed for Bluetooth and wi-fi but then, due to marketing reasons they decided not to interfere with EX0 model range and thus left it unpopulated.... much likely it was a decision made already after the design was made and the motherboards were printed in bulk quantities... as it happens with marketing often last minute decision...

This could mean that if we only knew the IC which is in the EX0 responsible for the functionality, it should fit the unpopulated slot and work, if the drivers are provided (if not already there as plug-n-play option).

Anyway, thanks!

 
AFAIK we don't know much about the Ex0 - even whether it uses the same sensor.
The reason the footprints are there are that when they started designing, they wouldn't necessarily have known which variations would actually be sold, so they gave themselves some options that they could decide on later.
If a competitor launched a BT equipped unit in a similar price range, they'd have the option to compete with it  fairly quickly.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 04:23:25 pm
Btw, Mike, since you are here...

Do you still have your old original E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 22, 2015, 05:06:40 pm
Btw, Mike, since you are here...

Do you still have your old original E4?
Yes - it gets used fairly regularly.
 No plans to investigate further since establishing that the sensor is outputting 9fps.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 05:09:11 pm
Aha, so its should be a couple of meters away from you then?

Could you please find on the sticker the information about manufacture place?

Mine is Estonia. Curious what is yours, thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 05:49:35 pm
So far I am not happy with noise levels achieved after the hacks.

See attached image of two power supplies running... is what I actually have.
compare to images after hack posted elsewhere and you will understand why I am unhappy!

But in fact, there is more noise on live stream than on snapshot. It is very finely granular, pixel noise which changes with every frame so overall live video is noisy... also horizontal lines moving up and down spontaneously, and vertical stripes... calibration removes for some dozen of seconds the latter two, but not the pixel noise.

I tried to measure actual noise levels in Service menu on web-server after replacing original 2.3.0 web folder to one found in older FW versions... it loads, runs, but not all the applets are running. Noise measurements - among them :(

I used also cfccfg.py script with my SUID key to hopefully decrypt my newly created by hacks conf.cfc file, which is encrypted.
It worked, or at least I believe so, I can see there is NoiseTargetMk = 0...

Either my sensor is really really bad, or guys @ Flir found another way to spoil image...

You could help me investigating this, but I am a newbie and I don't have all the tools by my hand.

For example, how do I use:

rset command

from which shell?

Can I set explicitly the Target Noise value on the running unit?

Or do I have to modify the line in conf.cfg file decrypted before, accordingly... and then encrypt it with my SUID back to get the conf.cfc and upload it replacing the file I have now?

Is there any other tool / better way to play with noise without taking too much risk of bricking the device?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on May 22, 2015, 05:54:41 pm
Hello all I keep popping on and off. Any more updates apart from
The menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 22, 2015, 05:59:04 pm
@Solare,

Presume you are aware that small spans on the E4 do have noise in them. The smaller the span, the greater the nose content. This is just a limitation of this entry level technology. Try looking at a kettle wile it is heating, you will likely see very clean images in Auto mode as the span selected will be large.

It is very hard to obtain low noise, small temperature span, images at this price point.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 06:08:00 pm
Aurora,

I got your point :) But I intentionally set the span (not the smallest possible) which show the problem, naturally.

Even if I use autospan, and there are relatively hot objects in center view like human body, I have this fast noise in blue, it's dancing here and there. However, on videos and pictures found here on Thread, I can see excellent signal to noise ratio in all the case and little to no temporal noise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 06:26:21 pm
A brief comparison... recently on this Thread, a user on my request kindly provided his hand shot with smallest span possible - 2C. Just now I repeated the same with my arm.

The attached are jpegs (mine is radiometric I believe, FLIR006)

Enlarge and you'll see finely grained pixel noise o mine.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 22, 2015, 06:46:41 pm
Indeed you have more noise on your image.

Sadly I cannot offer an explanation for this  :(

Aurora
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 22, 2015, 06:48:18 pm
A brief comparison... recently on this Thread, a user on my request kindly provided his hand shot with smallest span possible - 2C. Just now I repeated the same with my arm.

The attached are jpegs (mine is radiometric I believe, FLIR006)

Enlarge and you'll see finely grained pixel noise o mine.

Check your config for the following section and tell us the number that is in place of the #:
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 #
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 06:59:35 pm
To start, I still have no confidence I do things in the right way... help please if I am wrong,

I use cfccfg.py script to decrypt my conf.cfc file, and then I can find the strings you requested:

.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 0

From this I would say, there should be no noise, but there is noise exactly at level ~100 mK
And you know what this noise looks artificial! I ran entropy calculator over the high frequency filter, and it is uniformly distributed!!!!!!! According Physics, should be Gaussian! But Gaussian noise is much more expensive in terms of CPU cycles to create! :)))

The user posted the first palm I believe, operate sub- 2.3.0 FW. Could it be they added 'tiny-piny offset' in dll so 0 is not zero anymore :) Just to keep us busy so to say?

That's why I would like to try different noise settings... but please tell me:

Am I using the proper tool? Since it decrypts with my SUID, it should work but I don't know, if it encrypts well. I am afraid to blindly overwrite the hacked conf.cfc in my device. Because obviously after I make changes, the CRC will be altered...

I just have no experience and need your support. Do I use the proper tool and method?

PS: I was wondering before, why the hack they removed web-server Service applet from the 2.3.0 firmware? Assume you have lost your "zero" of noise, and want to find it. What tool would help you best? Right - the Noise Measure from Service menu!

And now, it is gone... and with the old web-server this particular applet doesn't work too...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 07:20:00 pm
... if there was a friendly E8 user to share his conf.cfc, things would become clear at once...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2015, 08:53:32 pm
...ahaha,

just discovered the same type of noise on pure Digital Camera View! This by all means cannot be natural noise!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 22, 2015, 10:28:49 pm
Turn off MSX , looks you had MSX on when made your palm picture
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 22, 2015, 10:34:21 pm
Am I using the proper tool?
Yes but it is only for the cfc. You should have installed all other files as part of the usual reso and menu updates.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 22, 2015, 10:36:20 pm
Forget about worrying for CRC, it is bypassed.

The first palm pic was mine, made on a doctored 2.3.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 23, 2015, 12:04:27 am
hey Bud,

thanks...

I am too tired now so I cannot say for sure, but things went better since I did very stupid action:

- I downloaded cfccfg.py V2 instead of V1.
- I applied the script over the conf.cfc file I found on doubly hacked (res and menu) device of mine
- I got the conf.cfg file with, among others, Target NoiseMk set to exactly 0

now, without even touched this string, I re-enabled Circle section of the conf.cfc (set the values same as for the Box),
re-encrypted it back with the same script (through temporary file ofc),
 
- and uploaded it to the original directory with overwrite existing old file.
- cold reboot at this point with battery pulled off the unit

Now.. why the hack it did worked I don't know... I accepted reality that I have the worst sensor on this Thread and even didn't try to play with Noise level... obviously I was too tired after days of non-sleeping reading this because somebody suffered reading this too before so they mostly keep calm and want me to suffer too :) joking

Well, I didn't alter the NoiseMk value = 0.

But after reboot, all random pixels dancing gone!

Well I still have drifting and aliasing and banding but this is Nature of microbolometers, right?

I still have vertical stripes - but this is a Nature of manufacturing process and poor calibration (poor according our high standards ofc!) :)

But there is large part of noise which wasn't removed or influenced by, this operation.

Clearly I can see now that this is either artificial or lack of EM design, but I see the horizontal stripes running up and down like semi ghosts but not on one place like vertical stripes... you know what it reminds me?

Old analogue TV sets when operating with weak signal when there is humming 50Hz or so from nearby power mains!!!

I have 50 Hz mains here and 60Hz is actual frame rate... shit... couldn't it be just simple VIDEO issue?

Mike ! Can you here me!? Hypothetically, where and how such the humming could enter the circuit? Maybe it need Earth? :) Or it is poor screening or some screw holding wire is weak?

If I only could remove the running horizontal lines, I would be finally happy...

Because now I can see temperature temporal noise is low. But still it is not possible to benefit from this good achievement, because horizontal line interference is strong...

Mike ... what is especially interesting, the same horizontal running line is on MSX and even pure Digital Camera View!!!!
But this is absolutely different and separate device!!!! How two devices could share the same exact glitch?!!!

Maybe guys from Flir decided to introduce second noise generator :) or there is loose video cable inside... Mike what do you say?

Bud - thanks but I didn't use MSX or anything but Infrared on this photo.

Thank you guys!

P.S> The funnies thing is, that the Circles never appeared in the Menu :) Oh, screw them... BUT WHY THIS WORKED?!!! :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 23, 2015, 12:29:21 am
Solare,

You doing really well. Welcome to the club
 :)

It worked possibly because you cycled cfc encryption. That may have removed some errors caused by patching.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 23, 2015, 01:46:15 am
Jee, thanks!

 O0 I am one of the Club!

Hurray... I can safely sleep now... in my dreams, I will have it working...

Really... I 've made some additional tests and compared to this https://www.youtube.com/watch?v=aRwyxW8ET_g (https://www.youtube.com/watch?v=aRwyxW8ET_g)

What I have at the moment is central device, but with 320x240 and menu enabled and without pixelation... exactly. You see, all the picture is not steady still as on the right case. MSX is very noisy too, these blue horizontal lines appear spontaneously and heavy pixelation on dark areas... looks awful overall.

Without MSX it even looks better now, but this 'unsteadyness' really pissing me off...

I think now, once I know how to alter the conf.cfc, I will try to play with NoiseMk setting. I remember there was report that noise decrease as value decrease up to zero but then suddenly at high values like 1100 it again smooth.

Thinking of this I may assume the noise generator has several blocks each responsible for own type of image distortion - pixelization, vertical stripes (why not?), horizontal lines etc., etc. And then, IF there is a bitmask, not a single value, so overall noise is something like this

LSB0-4 - Pixelation + LSB5-8 - Vertical Stripes + MSB - 9-16 - Horizontal Lines whatever,

So the sum may be actually 5 or 45376, and it is not the fact that 5 is better especially if they applied some unknown offset...

Can't hold it any longer... sleeping...

 :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on May 23, 2015, 08:23:07 am
Solare I think you have a faulty camera or you have made an error during the upgrade. I'd uninstall the hack and if the problem remains return your camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 23, 2015, 10:52:13 am
If I would buy an E4 now, do I need to look for any specifics to be able to use the hack or do I need to buy an older model?
Could someone advise me, which one to buy?
And where in Germany is the best place to buy an E4?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 23, 2015, 11:06:36 am
Read my experience :)

You may be lucky, and maybe not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 23, 2015, 04:25:00 pm
OK, Thank you,
I will just order one next week and see what FW is installed.
May be I will have to return it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 23, 2015, 06:50:36 pm
Maybe it's a good idea to ask what is the Firmware version before placing your order?

There is nothing special in 2.3.0 what could make it better than 1.19 t ex., but both the menu and the resolution hack were in our hands for a longer while, to less problems and less risk..  for instance, files are encrypted and signed on 2.3.0, unlike 1.19. And also, old Firmware has Noise measurement wen server utility, which among others, were excluded from 2.3.0...

However there is little chance you'll find new 1.19 E4 by now... maybe refurbished would be a better (and cheaper) option?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 23, 2015, 08:55:31 pm
I looked around for a while and asked about FW versions.
Either they don't know, or it is FW v 2.3.0

But if I understand the information in this tread correctly, FW v2.30 also can be hacked, it is just a little more difficult, right?
Or are there some models of E4 with FW 2.3.0. that can not be hacked?
Thanks for any advise
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 23, 2015, 11:03:06 pm
@HiVoiltage:

Yes, it is pretty hackable... just be aware that particular sensor in your E4 may differ a lot, as I learned... if you are lucky, you get sensor from E8, then you'll get clear, nice picture. If you are not lucky, it will be bad sensor, noisy... yes, the hack will increase resolution to 320x240, but it is questionable benefit, unless your sensor is good... this is lottery :) no way to know before you buy. As I said, Flir removed possibility to measure noise in 2.3.0, so you are helpless mostly in fine tuning :(

@Mike and the Fathers Founders:

Do you know anything about ADC reference chip used actually in E4? It may be so they just started to use noisy reference, so hypothetically, if this one is located and replaced to a good one, things may improve considerably?

@All:

After setting Target NoiseMk to 135 and uploading, I had a messgaebox: ResMon.App crashed. I closed the window, disconnected USB and put the device to sleep. Then, removed the battery (my usual sequence).

After reboot, I had screen full of coloured pizels and VERY slow bootup (10 min), the device parsed some XML files and loaded something from factory.d. It looked almost bricked :)

Then, it showed temperatures 220 -270C :) crazy

Another reboot, without removing the battery, showed no problem and the noise was really changed to 135 mK. This artificial noise masked almost raw and column noise, maybe this is the purpose of the procedure for not really good sensors?

 

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 23, 2015, 11:48:53 pm
The possibility of second grade nicrobolomters has been looked into.

To date there is no evidence that this is done with the E4. My sources suggest that FLIRs image processing can cope with all manner of microbolometer issues. None of the E4 cameras that were tested failed the functional pixel specification for a FLIR core.

The noise that you describe is far more likely to come from a source other than the microbolometer and its integral ROIC. It is known that interference patterns appear on a HW1.1 E4 when the battery is getting low.IIRC the. Noise is most visible on the visible light camera. One of the DC to DC converters feeding a noise sensitive stage may be the cause of such. If it is a boost converter, life for it gets harder as battery potential drops.

I do not know how easily you can exchange your camera but if I were you  I would return it to stock build and get a refund or exchange unit.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 24, 2015, 01:05:11 am
Aurora, thanks!

Yours are the second voice for return & refund... however, my realities are such that this refund will be indeed, pain in my .... so I would rather do anything to cope with the problem, including soldering :)

Well really, I was thinking about either a better adc reference or power supply :)

Idea! Big tantalum capacitor in parallel with battery would help maybe? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 24, 2015, 03:24:22 am
Solare,

try recording a video in USB mode and see if any of these noise goes away, i.e. caused by the LCD and not by microbolometer. I used VirtualDub but probably there exist many other programs for recording USB video.
Make sure you use a codec that does not add much pixelation/noise.

EDIT: Here is a sample
http://wikisend.com/download/138290/test2.avi (http://wikisend.com/download/138290/test2.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 24, 2015, 12:57:27 pm
@Bud,

thanks, it's very curious...

What VLC version do you use for streaming? I failed to stream with the latest version 2.2.1  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 24, 2015, 01:04:01 pm
What is VLC ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on May 24, 2015, 01:28:03 pm
www.videolan.org (http://www.videolan.org) One of the best media streamers/players/converters around. If it is in a digital format then you can almost always be sure VLC will play it. Even works on those horrid RM files that the player always wants to phone home about. Can even fix corrupted files somewhat so they will play.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 24, 2015, 01:35:47 pm
Guys,

I have so far tried two VLC versions... 2.2.1 (latest) and 2.010 (2014)

Both failed... Bud, can you tell exactly what software and version are you using to stream?

@SeanB

Did you actually try the 2.2.1 version with streaming video from E4? Any success report?

The guide I have found on Flir site, also doesn't work... they also do not tell the exact software and version number... it looks different from both the 2.2.1 and 2.0.10, I couldn't recognize it and interface seems different...

UPDATE:

Managed to stream from VideoUSB device, but still not able to record (lack some M4 encoder?)
It is streaming true DirecShow Filter at 3 fps, quality is bad,  spatial and temporal noise.

Maybe it is because the unit got too warm (it shows 44C on the inside sensor while ambient temperature is over 30C), but I remember clearly in the night when it was 10 degrees below, there wasn't that many spatial pixelization (not removed by calibration proc).

Maybe put it into fridge for a while ? :0

Joking :) DO NOT DO THAT!!! it will condensate water vapor on sensor... :(




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 24, 2015, 03:01:56 pm
As i said i used VirtualDub to record my videos.
I think codecs may need to be installed separately and i used couple generic codec packages from the Net.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 24, 2015, 05:19:51 pm
B.t.w.,

I found this line in calib.rsc:

measureInfo.temporalMk double 26.017904

As far as I understand this is actually measured temporal average noise during calibration cycle?

If so, could you guys please share which number you have in this line?

Just for comparison... it's easy - RNDIS, ftp, view file in notepad, find measureInfo.temporalMk and post the value :)

No need to change, download or decrypt.

Let's start the value survey :)

P.S:  Can I CHANGE calib.rcs without bothering CRC032 changing?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 24, 2015, 06:04:52 pm
I do not think touching anything in calibration is a good idea. I never did.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 24, 2015, 07:18:35 pm
@Bud,

well, maybe it wasn't that bad idea :)

I took that risk and altered calib.rcs file without altering the CRC. The device didn't brick!

I have progress - I have further reduced spatial pixelation (temporal I reduced in my previous session, see above), including raw noise and calibration stability by factor of 3 at least. After all, I only have this nasty horizontal lines like from humming on old TV and since all other noises were reduced and this one - not, it is now the main contributor :)

Well, how I did that? Naively, as always...

I discovered there is default calibration data for the Z3 camera in the folder.

I pinned my attention to the fact that double float values in actual calib.rcs files are mostly, replica from the same resource keys in the default file, but ... they are trimmed by factor of 100 in decimal accuracy. So, actual calib.rcs uses the same default values, but of smaller numerical precision. I therefore assumed that this would lead to numerical instabilities of all sorts, lower calibration accuracy (spatial) etc.

I copied the values from the default calibration files into matching keys of actual calib.rsc files and voila! I have it after reboot.

ATT.: to those who are seduced to try this!

Always backup!!!! :)

This will not increase sensitivity or reduce temporal noise. This only improves calibration cycles and makes it hold longer and more accurately. In my case, I have over 1 minute stability in 2C temperature span (10 seconds before this modification were enough for spatial noise start to emerge noticeably, so had to always calibrate in a dark isothermic room :)

As a bonus, I can now see my shadow in matte surfaces in isothermic environments... this is pretty faint signal actually, and before it was not possible to notice.

Thanks all for your neverending help, support and understanding,

I am carrying on further experimentation!

TODO: remove those fracking horizonal temporal raws noise.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 25, 2015, 01:43:21 am
I can now see my shadow in matte surfaces in isothermic environments...

Yikes! Spooky... Now watch ghost hunters coming in droves to buy E4s
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 25, 2015, 11:03:11 am
@HiVoiltage:
Yes, it is pretty hackable... just be aware that particular sensor in your E4 may differ a lot, as I learned... if you are lucky, you get sensor from E8, then you'll get clear, nice picture. If you are not lucky, it will be bad sensor, noisy... yes, the hack will increase resolution to 320x240, but it is questionable benefit, unless your sensor is good... this is lottery :) no way to know before you buy. As I said, Flir removed possibility to measure noise in 2.3.0, so you are helpless mostly in fine tuning :(

Hello Solare,
Thanks for that feedback. I just ordered an E4 here in Germany and should get it in the next few days.
Before I attempt any hacking, is there a way of finding out if I have the good quality, high resolution E8 sensor installed?
Thanks for any feedback
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 01:39:27 pm
@HighVoltage,

High resolution is there, by design.

However, without good signal to noise ratio (low noise) this is more a toy than a tool.

After the hack will remove 'artificial noise'm you are left on your own with your particular sensor sensitivity and S|N .
If these are high and low, you are a king. If these are low and high, you are a looser :)

As far as I can tell there is a way to tell before actually applying hack. You'll need to install SetRNDIS.permanent.fif, reboot, open FTP client and look at the noise levels which where measured actually during calibration procedure. In 2.3.0., you only have TemporalNoise total. Good sensors will show 15 mK there, while bad sensors will approach 30.

Pretty good difference in visual comparison, especially if, as in my case, main contributor to the total is raw and column noise, which are usually smaller than pixel noise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on May 25, 2015, 02:04:25 pm
Good sensors will show 15 mK there, while bad sensors will approach 30.

calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 14.203512  ;D  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on May 25, 2015, 03:33:40 pm
Hmmm,

just playing with my converted E4 looking out of my window at people passing by (I live on 8th floor so it is observation from 20 meters height, at the distance over 50 meters away). It was early evening and surrounding temperature was 25.

I was expecting to see walking bodies glowing white in Iron palette(assuming these are not zombies) as I believed their temperature is well above 30C. But they didn't glow white! Then, I used 'color above threshold' palette so they should appear red, while the surroundings should remain gray.

I was surprised to see that all people in my area are actually zombies, because they didn't trigger the threshold anyway... they were of course not naked, but close to that at such temperature, but they appeared only slightly warmer than surroundings, so I had to set the threshold to 25.5 before they started to emerge red in grey.

At this distance, a typical figure of man is 12 to 16 pixels high, 6 to 8 pixels wide. Quite enough I would say for successful detection. Meanwhile, my own body, although observed from 10 meters in mirror, shows 35.4 C and 36.6 with the camera at the closest possible point.

Question: are they really zombies or something is wrong with measuring distant objects temperature? 50 meters are clearly not enough for factors like humidity come into play.

P.S> I expected that even a single pixel measurement will trigger the threshold, no matter how cold the surrounding pixels are... but now I assume some interpolation or statistics is applied to a group of pixels and, basically, it results in some limiting gradient value along the chosen direction or what?
I have the same thing . How far can these see as from what I can see not too far really . Anyway of improving distance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 03:34:25 pm
Lucky...

Guys I need more statistics! Please submit as PAOPBZ did!

Report your Noise value as:

set RNDIS -> FTP -> FlashFS/System -> Calib.rsc -> calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 03:44:18 pm
@PAOPBZ

Can I have your calib.rsc file and conf.cfg file for a closer look analysis?

You can get conf.cfg by decrypting it with Python scrips cfccfgV2.py (search on this Thread exactly match) with your SUID, which is shown on web-interface (192.168.0.2 most likely or 192.168.1.2).

cfccfgV2.py SUID conf.cfc conf.cfg in case you didn't know.

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on May 25, 2015, 04:49:01 pm
...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on May 25, 2015, 06:02:33 pm
On my 1.19.8 F/W model, I've got a temporal noise of 14.899144 mK in the calibration file. Added 05/27/2015: F/W 1.19.8, H/W 1.1. May add row / Column noise later... Added 05/29/2015: Well, here it is, right from the internal test and calibration menu:

Temporal noise  MilliKelvin Digital Units
Pixel Noise    15.19    1.29
Row Noise    9.81    0.83
Column Noise    9.11    0.77


Spatial noise      MilliKelvin    Digital Units
Pixel Noise    9.55    0.81
Row Noise    2.58    0.22
Column Noise    4.49    0.38
Uniformity    207.72    17.66


Total noise      MilliKelvin    Digital Units
Pixel Noise    13.36    1.14
Row Noise    5.26    0.45
Column Noise    5.26    0.45


Btw, since some other owner reported they "updated" their old F/W camera accidentially, I've also done that but was able to return it back to the original configuration with some tricks... Please look up my old posts from maybe five months ago.

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 07:09:26 pm
Thank you all!

More reports, please!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on May 25, 2015, 08:19:01 pm
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 13.422328
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on May 25, 2015, 08:38:24 pm
Can anyone tell me if there is a magnification lenses which can be clipped on for distance ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 08:53:27 pm
I can remember only one post dedicated to telescopic system for E4... not actual, really... long ago. Unless really expensive, it will be long tube difficult to attach, which will turn image upside down :)

@All

Please, participate in this short survey about NoiseMk value in calibration file.

So far, I am absolute looser with mine... good idea also to add camera hw version and fw vesion to this data

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 25, 2015, 09:00:13 pm
@Leoibb

What you describe is called a telescope lens and none are presently publicly available for the Ex series.

I have commercial X2 and X3 lenses and can advise that they are very expensive and do not 'clip on' to the Ex series. They cost several thousands of US Dollars new and several hundred on the secondary market.

Your challenges will be in finding appropriate lens elements at affordable prices plus making the telescope assembly and a docking ring for the E4 camera.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on May 25, 2015, 09:17:00 pm
Thankyou for the replies. Appreciated  :-\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 25, 2015, 10:44:03 pm
@Aurora

I have wrote a PM for you, but there was a glitch during submitting it, so I am not sure if it was sent actually?

Thank you!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 25, 2015, 10:47:10 pm
Nothing received

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: donkey77 on May 26, 2015, 12:57:39 pm
Just received an email linking to this for anyone interested.
http://www.digikey.co.uk/en/product-highlight/f/flir/lepton-lwir-camera-modules?WT.v_sub=5339172&WT.mc_id=em_NPA1505B.UK.Send&WT.z_email=2054_NPA1505BB0UK_mainproductlearnmore--1577-FLIR&mkt_tok=3RkMMJWWfF9wsRoku6nNZKXonjHpfsX86eoqX6C%2BlMI%2F0ER3fOvrPUfGjI4DT8ZgI%2BSLDwEYGJlv6SgFS7TBMa5j2LgNWBE%3D (http://www.digikey.co.uk/en/product-highlight/f/flir/lepton-lwir-camera-modules?WT.v_sub=5339172&WT.mc_id=em_NPA1505B.UK.Send&WT.z_email=2054_NPA1505BB0UK_mainproductlearnmore--1577-FLIR&mkt_tok=3RkMMJWWfF9wsRoku6nNZKXonjHpfsX86eoqX6C%2BlMI%2F0ER3fOvrPUfGjI4DT8ZgI%2BSLDwEYGJlv6SgFS7TBMa5j2LgNWBE%3D)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 26, 2015, 01:20:26 pm
If I am reading that right - you can get a Lepton with shutter for $131USD. Wow. I wonder if anyone is working on a portable project like Mike did to just plug one in and have a little mini imager on the cheap?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 26, 2015, 02:15:59 pm
We may soon see the Lepton 160x120 available via retail outlets as well. That will certainly be interesting and a great opportunity for all manner of bespoke projects  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on May 26, 2015, 11:22:36 pm
We may soon see the Lepton 160x120 available via retail outlets as well. That will certainly be interesting and a great opportunity for all manner of bespoke projects  :)

Aurora
I hope so, but suspect we may have to wait a bit for it.
Quote
If I am reading that right - you can get a Lepton with shutter for $131USD.
GBP131, not US$131

BTW the 25 deg Lepton works in the Flir One - needs some butchering of plastic though. And of course MSX doesn't work. Just did it as a quick hack to test it as it was easier than taking apart my tiny cam...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 27, 2015, 12:24:21 am
@Mike, @Aurora

I have sent PM for you, could you please check?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 27, 2015, 01:44:53 am
@Solare,

Nothing received except your email of yesterday asking about my relationship with FLIR.
I responded to that one already.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 27, 2015, 03:03:34 am
...and what is going on... I send PMs, they are vanishing.... finally I succeed, then you send PMs, and its vanished again .... I received nothing :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: amstel on May 27, 2015, 08:15:02 am
Hi guys,

I have found Flir E4 from 2014 with the firmware 1.22.0 for sale.
Shall I expect the sensor from E8 or is still a lottery?

EDIT: Year 2014
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on May 27, 2015, 12:59:54 pm
Another E4 at work:

F/W 1.22.0
H/W 1.1L
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 14.773907
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 27, 2015, 01:00:44 pm
Hi guys,

I have found Flir E4 from 2004 with the firmware 1.22.0 for sale.
Shall I expect the sensor from E8 or is still a lottery?

I don't think the Ex series as we know it existed in 2004 - never-mind with 1.22.0. Are you sure it's not from 2014? And to attempt to answer your question - I don't think anyone outside of FLIR really knows what quality of sensor goes into what unit right now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 27, 2015, 03:06:27 pm
Thanks, Turbo!

People more reports please! Submit your temporal noise values!

Please also add FW version info.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 27, 2015, 04:48:36 pm
Hi guys,

I have found Flir E4 from 2004 with the firmware 1.22.0 for sale.
Shall I expect the sensor from E8 or is still a lottery?

I don't think the Ex series as we know it existed in 2004 - never-mind with 1.22.0. Are you sure it's not from 2014? And to attempt to answer your question - I don't think anyone outside of FLIR really knows what quality of sensor goes into what unit right now.

There is too little statistics to make conclusions. That's why I run this survey.

In my case, Pixel Noise spatial or temporal is about 15 mK
However, spatial and temporal row and column noise is huge - at least 20 mK.

While in the early models of E4, found on this Thread (when it was possible to measure noise components on the web-service applet) these types of noise were explicitly small (4-5 mK).

I dunno what might Flir change in technology but it seems row and column noise increased by factor of 4 - 5.
Maybe they just process it faster :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 28, 2015, 01:59:41 am
@All users of the updated E4 with MENU 2014 EX and FW 2.3.0! QUESTION!!!

I have discovered I don't have two last entries in my main menu measurements option,

see https://www.eevblog.com/forum/index.php?action=dlattach;topic=21772.0;attach=138753;image (https://www.eevblog.com/forum/index.php?action=dlattach;topic=21772.0;attach=138753;image)

NO Humidity and NO Air Temperature...

I am using hacks installed according the FUBAR procedure, particularly the Menu version should be 2014 EX (not the extended update to the menu)

Do you guys also missing these two lines and

If YOU DO, how do you set then the system temperature of atmosphere and the relative humidity?

IF YOU DON'T, do you have idea why I do miss them? + idea how to get them back?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 28, 2015, 02:21:20 am
I think the values you speak of have been moved under the color menu when you select the Condensation or Insulation alarm options since that is where the values come in to play the most.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 28, 2015, 04:32:23 am
This is controlled in design_ui.xml and toolbar_config.xml

This will keep you busy for the next little while
 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 28, 2015, 07:28:42 pm
This is controlled in design_ui.xml and toolbar_config.xml

This will keep you busy for the next little while
 8)

you torturer....  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on May 29, 2015, 08:00:11 pm
My E4:

H/W 1.2L
F/W 2.30

.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 15.830595
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 29, 2015, 11:35:23 pm
Thank you! FredB! Lucky you are! (envy)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 30, 2015, 12:39:14 am
This is controlled in design_ui.xml and toolbar_config.xml

This will keep you busy for the next little while
 8)

Digging into it a little myself - the values for the menus are all there and do seem to be setup correctly comparing them to the stock 2.3.0 and prev versions as well.
I believe they were actually changed in the facet.rcc file by janekivi and that is quite a bit more involved to edit due to the need to de/re compile it for changes. :(

I don't know if janekivi wants to chime in if I am correct or not?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 30, 2015, 11:06:16 pm
I am using hacks installed according the FUBAR procedure,

Try installing the latest files janekivi posted back in Feb.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 30, 2015, 11:28:44 pm
@BUD,

already did this. The Menu is awesome, however some the most attractive features (added measurements) are glitchy.Okay, this is "by design", but still... also, the parallax cannot be changed in saved before picture. There is knob, butt is not effective.

Anybody knows how to enable parallax editing in the Updated 2014 menu | edit mode?

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 30, 2015, 11:34:39 pm
@All,

anybody has good explanation, why many thermal images have 'darker corners'? Is there any connection with diffusion, lighting, illumination, scattering, reflection, absorption, refraction and other optical effects connected to glowing of thermal irradiators (planes) and their diffusional interreflectance? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 30, 2015, 11:53:05 pm
I do not think you can adjust parallax in Edit mode on the camera, but you can with external software.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on May 31, 2015, 12:28:13 am
I'm not sure if anyone else has mentioned it, but this is now the most-viewed thread in this forum. ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 31, 2015, 07:38:43 am
My E4 just arrived from a German distributor.

FW Version 2.3.0.
Hack applied, based on FUBAR instructions on a Windows 7, 32 bit system
Result: Works perfectly for high resolution and E8 menu.

The picture difference between the standard E4 and the hacked E4 is amazing!

Here is the Sensor Noise value:
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 16.348786

What does that mean?
Is this a good sensor, but not as good as the one from FredB ?
I am happy with the pictures I am getting.
But I have no idea in regards to how a bad picture looks like and how a perfect picture is suppose to look like

Anyhow, the hack went smooth and I would like to say a BIG thank you to all people involved, making this happen.
No wonder, this is the most viewed thread on eevblog
THANK YOU ALL!


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 31, 2015, 11:15:30 am
Congratulations!

Let's say you won a lottery!

I would be just happy to have the same sensor noise value as you have!

Absolute record was something like 12.84 or so...
The absolute looser I am with 26.56

:)

You are much closer to the first than to the second :)

I think you are happy now!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on May 31, 2015, 12:09:48 pm
Thanks Solare,

Can you attach a picture of an IR image, so we can see the difference.
I will post a picture later and then we compare.
How about a picture of a warmed up oscilloscope for comparison?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on May 31, 2015, 12:19:09 pm
my e4 from december 2013
Code: [Select]
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 17.067813
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on May 31, 2015, 01:02:52 pm
My E4:

.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 14.846039
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 31, 2015, 03:05:46 pm
@High Voltage,

most likely, in this way mine picture will be even better, than yours :)

you see, I have done lots of modifications to try for compensate for low image sensor quality of my camera, so I so to say... did some overkill :)

For you, there is no need for any additional improvements.

But if you really want for fair comparison, you should not use nice cases with high temperature differences, but should compare hard cases i.e., minimum temperature span, 2C, isothermal environment (room with no heaters, air leaks or air conditioner, ideally wooden walls, closed for at least 1 day for allow temperature to set)? lowest possible temperature gradients of the surroundings. Then and only then, you can qualify noise levels and camera performance.

To measure, charge your camera, allow for at least 20 minutes to warm up the unit, THEN enter the room and make multiple shots with Black and White palette enabled.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 31, 2015, 08:20:56 pm
@tomas123, gemrough

nice, very nice!

version numbers? HW-FW-SW?

More reports, please! The picture we are getting becomes curiousier and curiousier (c) Alice :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 31, 2015, 08:24:53 pm
@All users of Janekivi Advanced Update Menu with 2.3.0 FW (original),

Can you actually change MSX parallax setting while in EDIT mode?
No..no... of course you can :)

Rephrasing...

Can you change MSX parallax setting AND HAVE THIS NEW SETTING APPLIED and in effect? Have you tried this literally?

Thank you!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on May 31, 2015, 08:34:33 pm
Not that I am aware of - I never knew that was even an option on any version. I have changed the MSX offset in post using BFIC however.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 31, 2015, 09:50:52 pm
@All users of Janekivi Advanced Update Menu with 2.3.0 FW (original)

I failed to make any use of the alarm bound to Delta, which is set between any objects!

It allows to set the 'above' and 'below' and any value, but 'above' never triggers, while 'below' triggers always!

Do you have issues like that?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 01, 2015, 12:42:13 am
@Bud

I have found this link http://wikisend.com/download/544016/test.avi (http://wikisend.com/download/544016/test.avi) you've sent some time ago, but I assume the link is broken, because I couldn't make it to download a file.

Could you please, describe what is 'programmable button' and 'custom popup menu'?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 01, 2015, 01:39:39 am
@All

The size of encrypted conf.cfc file is exactly 6.608 bytes.

If I add something to the file, its size increases.

Can anyone tell me if the size of this file allowed to be changed?

Or this will brick it?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 01, 2015, 03:54:29 am

Could you please, describe what is 'programmable button' and 'custom popup menu'?

Check the link in my reply #7042, i believe it was the same video. It goes through programmable button feature and i think at the end it also shows a small popup menu, which is just a shortcut to some features otherwise accessible via main menu.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on June 01, 2015, 01:32:42 pm
Solare, what numbers have you specifically tweaked in which files to improve your sensor quality?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 01, 2015, 01:56:44 pm
The size of encrypted conf.cfc file is exactly 6.608 ...
Can anyone tell me if the size of this file allowed to be changed?

There is a file length indicator written in the trailer of the file. Therefore when patching encrypted file it is important to not change the file size. But if you know how to decrypt and reencrypt the file, you can add/remove content in plane text and encryption procedure will update the file length field as required.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 01, 2015, 02:47:42 pm
@alank2,

There is no way 'to improve the sensor quality'. The sensor's quality is what you get when you buy it. This is lottery, no less.

Also, since actual digitizing depth of the E4 is 14 bit and full ADC span is from -40 to 282 which gives 20 mK magnitude for the LSB, these 'modifications' are only of help, when own noise levels of the sensor is above 20 mk. Your sensor is well below this value, so there will not be any LSB jitter hence, either any lower bit noise.

Furthermore, when applying modifications I did with my sensor (26.8 mK own noise), one trades speed for quality. Overall dynamics and visual when panning the E4 across the view, degrades therefore. Finally, the modifications involve calibration files changes which most user wouldn't want, at least without firm understanding of physics, which is not trivial and cannot be just 'copied' from one device to another, like t. ex, menu modifications.

So there is no 'magic way', sorry. What you have now cannot be improved.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on June 01, 2015, 02:50:14 pm
I get what you are saying Solare, I'm just curious what changes you made and what were the effects.  I've been following this thread, but didn't see/get the specifics...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 01, 2015, 02:54:05 pm
@alank2,

I think I have posted my progress in recent posts, so just take your time and read back for details,

but for this to work, you need to have poor sensor, with noise well above the LSB level. Otherwise, you just degrade the visual appearance and dynamics.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 01, 2015, 02:59:11 pm
@Bud,

have you actually received my PM?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 01, 2015, 03:43:45 pm
Yes i will reply after work
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mimmus78 on June 02, 2015, 10:09:49 pm
We will soon have cheaper IR cameras?

http://m.phys.org/_news352479907.html (http://m.phys.org/_news352479907.html)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 02, 2015, 10:20:05 pm
An interesting article.

It has previously been suggested on this forum that a DLP Projector DMD type mirror array may offer such potential. At the time we did not think it would work due to the materials used and the self heating of the DMD array.

This research seems to take the DLP projector DMD and redesigns it for use at thermal cameras wavelengths. Let us hope that this leads to high resolution thermal imaging at affordable prices.

It is interesting to note that the basic process of image collection is not new. The Inframetrics Thermasnap uses a Hewlett Packard designed mechanical image capture engine that moves a 120 pixel linear thermal detector array across the projected image field of the thermal lens, so producing an image built up of single pixel wide vertical strips (120 IIRC = 120x120 pixel image), albeit at a comparatively slow speed of 2 seconds per image !

http://www.flir.com/legacy/view/?id=51641 (http://www.flir.com/legacy/view/?id=51641)

I own one of these Thermasnap cameras and must say the images that it produces are pretty good considering the mechanical nature of the image capture engine.

This new development removes the need to move the detector array and is somewhat faster at capturing pictures  ;D

Aurora

DMD = Digital Micromirror Device

http://en.wikipedia.org/wiki/Digital_micromirror_device (http://en.wikipedia.org/wiki/Digital_micromirror_device)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on June 03, 2015, 06:23:52 am
Some docs:
http://arxiv.org/pdf/1503.04267v1.pdf (http://arxiv.org/pdf/1503.04267v1.pdf)
http://www.cv-foundation.org/openaccess/content_cvpr_2015/papers/Chen_FPA-CS_Focal_Plane_2015_CVPR_paper.pdf (http://www.cv-foundation.org/openaccess/content_cvpr_2015/papers/Chen_FPA-CS_Focal_Plane_2015_CVPR_paper.pdf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 03:19:12 pm
@All

SOS SOS SOS! :)

Okay people, I ask for your urgent help and sympathy!

I was just working with snapshots organizing (removing unnecessary files), when my device halted... after reboot, I saw lots of spatial color noise (much like on un-calibrated sensor), and it did not disappear after calibration, or multiple reboots, or even the battery pull offs.

Have anyone of you experienced the like issue? If so, what could be the problem and how you corrected this?

I personally believe that maybe somehow FS gets damaged so system cannot get access to calibration data of the sensor and hence, uses the default values. Because all other features work perfectly.

Really, people, what do we know about how FS mounts and what it does if it gets corrupted? Is there any 'disk check' or partition recovery procedure we could perform in such the case?

Situations like halts (out memory, appcore crash, reboot without saving etc., error during editing a snapshot, may appear routeenly when using device. So, sooner or later, FS gets corrupted and what then?

Thank you for your support!

UPDATE:

Situation resolved before I have time to panic. But the issue is not gone I think, so the question I addressed to you still there!

I was working with the Charger connected, so the device became quite hot with closed shutter, 53.5C according the web-service temperature log (assuming it had opportunity to add the log!)

How overheating may have resulted in this malfunction?

I just let it to stay still for ten minutes, and the first reboot did well with calibration etc.

Your honorable opinion will be?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 03, 2015, 03:36:13 pm
Pull the battery out and leave it overnight. If that wont help then can try reflashing the firmware. Do you still have access to the file system?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 04:19:56 pm
Thank you, Bud!

I think I have added the update?

While it was hot, no matter how I rebooted or pulled the battery out, id didn't help.

When I let the device to cool for 10 minutes, the usual boot even without removing battery before that, fixed the problem.

The question is, why this happened, and what the E4 system will do if the FS system gets corrupted due to some appcore crash in improper time?

I know there are utilities for WinCE 6.0 and above, which check the file system, fat etc., and allow for fixing the errors found.
But how do I run this application as there is no application install service enabled? Even without installation, how do I run it remotely?

P.S>

Patience is Value! :) But it is so hard to wait till the weekend!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 04:23:24 pm
Yes, I still have access to the FS by RNDIS mode.

I never had re-flashed the device. How do I do that? Will the re-flashing return the device info factory default mode and replace (possibly corrupted) disk image, FAT etc.? I assume I will have to re-hack from the very beginning then!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 03, 2015, 04:50:02 pm
Regarding running applications on the camera you can do it via i believe START telnet command, providing the processor can run the code. Information on the processor type and version on E4 was somewhere in this thread.  To navigate applications you typically need a VNC server to run on the camera and VNC client on your PC. You need remote desktop because the camera does not have full keyboard. There was a link published in this thread on where to get VNC that works. I confirm it works, i tried it. The other application that worked was a Registry Editor. I used that VNC to look through E4 Registry, it was fun.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 06:23:39 pm
@Bud,

Are you certain this info was actually published in this Thread, or not removed afterwards?

I did some 30 min search for keywords like "remote access, vnc, server etc." and found nothing of use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 03, 2015, 06:50:07 pm
FYI 2.3.0 firmware has locked down the ability to remotely install wince apps. You can drop in and run exe's like VNC still I think but cabs for the reg editor and file explorer cannot be loaded easily anymore.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 03, 2015, 06:52:27 pm
I only used this forum. Try searching other flir threads.
But this may not worth the efforts. You cant change Registry settings. Or you can but they not persist.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 08:13:26 pm
I see... you know, I have some experience with good old Cassiopeia BE-300 pocket PC device which also was running WinCE 6.0. So I am aware of this concept of 'Program Memory - Storage Memory', packed execution files, and deployable registry which only keeps until reboot.

There was a tiny utility which allowed however, to made changes permanent by flashing something... it was 12 years ago, so I don't remember the details!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 03, 2015, 09:38:41 pm
The reg has very little effect on these units since the FLIR UI is basically the shell but I seem to remember being able to make changes to the reg when my unit was on 1.18.7.
The fact it's running WinCE 6 as the core counts for very little as the OS was never really setup to be exposed to the end user. (The BE-300 may have been different)
Most of the core OS files reside in the NK.BIN of the OS image and I don't recall a way to update or patch that on a live system.
You would instead need to modify it offline and reflash it also at the same time bypassing any security, DRM, or check-sum measures that could be in place so that the unit does not perma-brick on first boot.
(There was at least one user here that tried to downgrade back to older version who I think had to sent it to FLIR to be fixed after it failed)
I know before I would try screwing with any of that I would want some way to back up the entire flash first just in case.

VNC stuff: http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+VNC (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+VNC)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 03, 2015, 10:27:17 pm
@OrBy

Thank you!

And how exactly do I back-up the entire flash and then re-flash it if device is bricked? Okay, not bricked, but malfunctioning? You know?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 04, 2015, 01:41:49 am
And how exactly do I back-up the entire flash and then re-flash it if device is bricked? Okay, not bricked, but malfunctioning? You know?

No way that I know of.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 04, 2015, 08:24:58 pm
@OrBy

So...suppose I have a bricked device, which before bricked, was set to RNDIS. Is this enough to re-flash default Firmware 2.3.0 ? I know, if the device was set to different mode, this can pose real headache, but if it was left in RNDIS mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 05, 2015, 04:25:17 pm
It would depend on how bricked it was. If enough of it is still running that you can get into the file system - then you may be able to get something going. I can't say more then then that as I never have run into the issue myself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 05, 2015, 05:36:38 pm
I once had a situation when i could not connect to the camera either way, but the camera was working, it is just that i could not connect, download pictures, etc. i was able to fix it by applying default settings/reset via the Settings menu, and somehow it showed up as USB drive after couple reboots, so i immediately ran the remove RNDIS script to set the camera to USB on next reboot. I used temporary RNDIS since then when playing with configuration.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 05, 2015, 08:54:21 pm
@Bud,

thank you for your comment,

but I was sure the problem is severe when it is bricked when in USB mode, you are telling the opposite?

Look... let us compare risks of letting camera stay in RNDIS or it is safer (makes it easier to repair if something goes wrong) when it is in USB mode? I thought that by setting RNDIS permanent I make it more 'recoverable', am I right or not?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 05, 2015, 11:39:32 pm
I think USB mode is safer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 06, 2015, 12:25:08 am
Aha...so one can re-flash firmware, if usb mode is enabled, no matter how device is bricked?

P.S.: finally, weeeeeekend has come! :)))
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gemrough on June 08, 2015, 10:47:53 pm
Solare are you sure the battery wasn't low? I have seen what you are describing on units with low battery. Charge battery and problem disappears.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 09, 2015, 01:02:35 am
@All

This isuue is there:

"Situations like halts (out memory, appcore crash, reboot without saving etc., error during editing a snapshot, may appear routeenly when using device. So, sooner or later, FS gets corrupted and what then?"

What's then? Can the flash drives be checkdisked etc., remotely?

@gemrough

No, unless you consider 40% as low battery.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: et328 on June 10, 2015, 12:50:58 pm
Hi all,

I just bought a Flir E4, I had read most of this thread during the week I waited for it's arrival...
I'll write here some notes how things went, maybe they help someone.

The E4 had 2.1.0 version FW. I had problems with USB driver installation. Win 7 64 and 32 both had the same issue. This package fixed those:
http://flir.custhelp.com/app/answers/detail/a_id/987/~/usb-connection-problem-with-flir-ex-series-cameras (http://flir.custhelp.com/app/answers/detail/a_id/987/~/usb-connection-problem-with-flir-ex-series-cameras)

I then upgraded to 2.3.0 firmware and did some temp tests and checked the functions.

I then put RNDIS mode on, no problems with IP-address, Flir used 192.168.1.2 for it's IP. My local network is using 192.168.0.xx (and my computer just happens to use the usual Flir IP 192.168.0.2) but looks like Flir detected this and switched to other IP address space.

Had small problem with FTP, first I tried to use my favourite program Total Commander, but it showed just empty dir. Filezilla worked fine.

Installed resolution hack, it didn't work at first, common_dll.dll was not replaced. I then used telnet to run stopapp and used Filezilla to manually upload the file. Great success, major improvement in picture resolution and noise (i.e. almost no noise).

btw. temporalMk double 13.750835 so I assume I had good luck in the sensor lottery?

Later I installed menuhack, no problems with that. I used Windows 7 64 bit for all the above things.

Big thanks to Mike, tmbinc, janekivi and everyone else who made this possible!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on June 10, 2015, 03:43:57 pm
Which hack method did you use? Cameras manually upgraded to 2.3.0 couldn't be hacked so far.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: et328 on June 10, 2015, 04:05:55 pm
Which hack method did you use? Cameras manually upgraded to 2.3.0 couldn't be hacked so far.
I mostly used your great guide since it had all the info in one place.
Maybe that upgrade problem effects only those models that had 1.xx version from the factory, this one is from May 2014 and had 2.1.0. Conf.cfc is 6608 bytes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 10, 2015, 07:07:14 pm
Firmware 2.1 upgraded to 2.3 will not cause a problem as they are both the later encrypted file system.

The issue arose for users who upgraded from the earlier unencrypted file system to the later encrypted V2.3. The two are not the same structure and this causes problems when trying to employ the FW 2.x 'hack'.

I have said it before, and will say it again here..... I can see no good reason why a user would wish to upgrade an eminently configurable 1.xx E4 to the later heavily counter-measured 2.x firmware. FLIR would love you to do so however., and they will upgrade your early camera if you ever return it to them for repair or calibration. Firmware updating is a mandatory operation as part of calibration at FLIR  ;)

Just in case anyone still has not got the message, if you have a firmware earlier than 2.x you are very fortunate and should stick with it. There are no serious countermeasures present and this makes future improvement possible with ease. IMHO the very best firmware ever released for the E4 was 1.19.x. It is totally open to all manner of upgrades and very stable. I have yet to have a lock-up or any other weird behaviour on my E4 running FW1.19 and menu upgrade Version 2.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 11, 2015, 08:59:52 pm
@et328

Congrats! You are really lucky. mine has twice that magnitude of noise!

Where did you buy it?

@Aurora

Do you have any news to share regarding my little inquiry about web-server measuring noise? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chris Epler on June 11, 2015, 10:21:59 pm
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 16.146466
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 12, 2015, 12:04:24 am
Thank you! Your FW version should be? Where did you buy it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 12, 2015, 11:24:57 am
@All

With E4, we have 45 degrees FOV without zoom.

What FOV we have with Zoom 2x, 4 x, 8x enabled? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on June 12, 2015, 02:58:44 pm
@All

With E4, we have 45 degrees FOV without zoom.

What FOV we have with Zoom 2x, 4 x, 8x enabled? :)

By simple geometry, wouldn't it have to be 22.5, 11.25, and 5.625 degrees?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 12, 2015, 03:38:52 pm
Yep I also thought so... however, on the second thought? ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 12, 2015, 07:09:05 pm
Solare,

FLIR will not provide any files or assistance for the enhancement of the E4 or any other camera from their range. They have deliberately removed some applications from the E4 in their efforts to prevent upgrade and modifications. Tech Staff at FLIR put their job at risk if known to have helped 'hack' a camera. I cannot ask anyone to do that for me.

Sorry I cannot help you with the web-server restoration.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 12, 2015, 08:15:23 pm
@Aurora,

NP, I was just wondering :) But actually, it has nothing to do with hacking, rather with evaluating the hardware quality!

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 13, 2015, 01:24:29 pm
@Solare,

No worries. FLIR are pretty sensitive about ANY changes to their basic E4. Even adding the facility that you request provides engineering access that they do not wish us to have. As they would say, the quality of the microbolometer fitted in the E4 is adequate for the stated resolution and sensitivity.

This is one of the unfortunate possibilities when upgrading an 80x60 E4 to higher specifications and removing the artificial noise that FLIR added.... you get to see the true nature of your particular hardware and not all are as good as we might wish. I am very sorry that yours is producing more noise than others. Just bad luck I feel. It is not my understanding that FLIR have deliberately degraded the microbolometers or noise figure, beyond that produced by their known noise generator.

It might also be of interest to the readership to hear that the E8 and higher spec Exx cameras all have the noise generator running and NOT set to zero. In the early days of the upgrade there was much discussion about this and some knowledgeable people suggested that some artificial noise was actually beneficial to the best operation of noise reduction algorithms ! I cannot say how FLIR's noise reduction works but it may be that they need the low level of noise that is present on most cameras.

For info, my noise generator is set to 5mK.

The Ex series cameras are fitted with a cost reduced microbolometer that made affordable thermal cameras possible. It was originally designed for the automotive industry, namely for VAG and BMW. The microbolometer was intended to provide night vision capability on these brands of car and to break new ground in construction techniques. Newer, cheaper, 'bare bones' wafer type microbolmeter formats were created and these were illuminated by cheaper GASIR lens elements. The microbolometer can be operated in a temperature stabilised of non temperature stabilised mode. In the E4 it is non-temperature stabilised and relies upon generic compensation tables centred on an ambient temperature of 30C.

Please see my post from long ago on the Autoliv camera system used in Audi and BMW cars. It is basically the same microbolometer and lens design as the E4. Mass production of the cost reduced camera core reduced the retail price.

https://www.eevblog.com/forum/testgear/audi-automotive-thermal-imaging-night-vision-camera-teardown/msg331681/#msg331681 (https://www.eevblog.com/forum/testgear/audi-automotive-thermal-imaging-night-vision-camera-teardown/msg331681/#msg331681)

In short, the Ex series, and Exx series to a degree, are compromise solutions that enable thermal cameras to be sold at a price that FLIR considers much cheaper than their more expensive heavy duty industrial cameras. These compromises in the designs are well thought through and some clever techniques are used to disguise some of the issues that may exist. FLIR are past masters of image processing  ;)  FLIR do not want a low end thermal camera to effectively compete with sales of their higher end industrial units, that is a fact. The idea of their sub £1000 E4 camera being anywhere near as good as their £35000+ cameras is not something they ever want to see  ;D
 
That's enough for now  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 13, 2015, 02:15:59 pm
@Aurora,

nice and detailed explanation, as always!

As for me, I have read most of the thread, so I am aware of many discussions, including those you've referred hereto.
But others would find this interesting, thank you!

Personally I believe that in no way possible the E4 either with good sensor or not, modified or unmodified, hacked or not hacked, may ever come close to the professional cameras with their closed loop temperature stabilized microbolometers, dry gas filled interiors and vacuum chamber that encapsulates the sensor, this is simply not to happen!

Also, in no way possible the tiny, small aperture, low optical power lens of the E4 may ever allow for quality anywhere nears the quality that large germanium optical systems may deliver.

And, single span 14-bit ADC will of course never compete with multiple switched spans and 16-bit multiple ADCs on the professional cameras.

So I disagree that 'Flir afraid of modified E4 would compete to professional cameras'.

On the other hand, consider this.

If there is a company which makes money from Thermography in any application, building, industrial, medical etc., it will by no means escape the necessity to provide customers with some sort of certification of the applied instruments and methods, which means, both the cameras and the employees that are using in, and also those, who interpret the results and prepare the reports, must be qualified, certified, approved etc., etc.

Otherwise, business buyers would never agree on how to interpret and reproduce and compare the results! That is, not the apparent quality, but standardization itself makes this industry running.

No way possible with any of altered cameras, needless to say! The altered cameras will show today this, tomorrow somewhat else, or one instance of the same altered camera type performs in a different way that the other instance.

So what on Earth the decision making personnel would do in such the situation? The associated costs invested into correcting the faults found with IR thermography, might be many orders of magnitude higher compared with cost of professional cameras and hence the risk of false positives and false negatives will outrage any 'apparent savings' when buying a cheaper camera with idea to modify it.

To summarize, what you've said is one point of view, the point of view of large companies, corporations, businesses etc.,

My point of view is different,

I believe that sub 1000 market lives and behaves in a cardinally different way than both the industrial or military market, and trying to play on this market with the attitude developed from the above two mentioned, is a mistake.

It's like with PCs, those competitors will win who will provide the most open and cheap platform with quality of the hardware BUT also with maximum configurability, which allows each buyer to get most of own camera the way he wants, and how much he will achieve, must only depend on own resourcefulness, knowledge, patience and experience invested!

Those who agree, vote up!     
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 13, 2015, 02:36:25 pm
There was a post with web server files if this is what you mean, just copy them over to e4. See my post #6624 for a little enhancement of that package (the package itself was elsewhere prior to my that post)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 13, 2015, 02:46:08 pm
@Bud

I did this, but Service menu of the pre-2.3.0 web-server doesn't seem to have working applets... I cannot measure noise in spatial and temporal, row and column values separately... cannot edit dead pixels... cases, etc., etc.

The telnet commands to which the script refers to, are still there but also, not effective. Maybe they removed some dlls as well. If you have those working web-applets for the 2.3.0, please contact me in PM.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 13, 2015, 02:49:19 pm
@Solare,

You will see no disagreement from me against your thoughts on this. Sadly large companies with somewhat inflexible viewpoints are not uncommon, especially when it comes to modifications to their products. From their point of view, the 'hacker' community is not an entity that they wish to embrace or help. Their profits will come from selling many cameras with high profit margins. Start-up companies like SEEK Thermal are trying to introduce new affordable thermal imaging equipment, but even they have fallen short on the user community engagement front.

I am very lucky to have a collection of industrial thermal cameras but it is very telling that I reach for my upgraded E4 most often when wanting to do a quick check. For the money it is still a very nice piece of kit. The use of auxiliary close-up lenses adds to its versatility as well. I understand your disappointment with the noise levels that you are finding with your E4 though. If I were to be doing some serious thermal survey work on a PCB, or a more demanding scenario, I would set up either my PM695 or SC3000 though.I would trust them to provide very accurate results with decent image quality. The associated PC software is also designed for inspection and research activities as well. FLIR TOOLS+ is not in the same league. But then they should be for the price charged  :o

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on June 14, 2015, 03:39:04 pm
Umm, what could be my problem with e8.cfg? I have E4 (1.19.8 FW) updated to E8, and now installed Taucher's beta3 menus which worked great. To get that zoom option I edited e8.cfg with Notepad++ (only one CRLF at the end etc.), and run 'CRC01 e8.cfg' with CRC01.exe from original hack, and inserted new CRC01 to e8.cfg.

Camera didn't like this new e8-file, at first it gave some appcore error message and after second boot it started with 80*60 ir resolution and some menus were lost. I tried to generate CRC01 again, and the result was the same. I uploaded original e8.cfg to restore the camera, and it worked again. I tried Taucher's EzCRC01.exe too, but it just gives MSVCP110.dll error.

Taucher's mod is very nice btw :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 15, 2015, 09:25:47 am
OT

I see that a faulty Milcam sold on ebay recently. I used to use such so was sad to miss out on it. But I would be interested to hear from the buyer if they are a fellow member of this forum. The Milcam is a Stirling cooled camera so does have the issues associated with mechanical coolers but I still like teh camera when using it. If the new owner reads this and is interested in selling the unit in the future, I would like to hear from him/her  ;)

Auction was here:

http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557 (http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557)

Aurora

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 15, 2015, 10:00:44 am
OT

I see that a faulty Milcam sold on ebay recently. I used to use such so was sad to miss out on it. But I would be interested to hear from the buyer if they are a fellow member of this forum. The Milcam is a Stirling cooled camera so does have the issues associated with mechanical coolers but I still like teh camera when using it. If the new owner reads this and is interested in selling the unit in the future, I would like to hear from him/her  ;)

Auction was here:

http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557 (http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557)

Aurora
Ah that's a shame, I didn't even see it listed and I normally have reminders setup for that sort of thing! Must have been a very quick sale!

Other that it being Stirling cooled, is there anything special about it? Can't find much spec-wise for it.

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 15, 2015, 10:28:15 am
@Chanc3

The MILCAM is a weird piece of kit. It looks like some sort of universal metal module that then has different lenses and user controls 'bolted' on. The one I used had a small wide angle lens with manual focus and a Sony camcorder battery pod bolted to the side. The only controls were : on/off, manual dead pixel detection (requiring a lens cap to be fitted), brightness and contrast controls. A CRT based viewfinder was grafted to the top of the case. The image output via the viewfinder or NTSC composite video port is monochrome only, and no colour translation is available on board. It is very much an observation tool and not a Radiometric thermal camera. The cooled sensor array provides a low noise image but that is about all that makes it better than a conventional microbolometer camera really.

It looked to be designed for harsh environments and was very rugged. Not the most friendly design or shape for handheld use. The name MILCAM provides a hint at the cameras intended end user  ;D It was sold for rugged applications in the Military but was not a dedicated military product and found its way into civilian applications as well. It does have the military type of eyepiece fitted though. For those unaware, a military eyepiece contains an rubber iris that only opens when the users eye is pressed against the large eye cup. This avoids snipers seeing the glow from the CRT and sending a 7.62mm bullet through your illuminated eye  :o  That's military sniper countermeasures in action  :)

Why would I want such a camera ? Well. sentimental reasons really. The Stirling cooler is a bit of a liability as these cameras are at least 20 years old and unless recently rebuilt, the cooler will be pretty tired and likely in need of a re-gas. This is why I do not recommend Stirling Cooled cameras to people unless they are willing to accept a short remaining life, unlike most microbolometer cameras that have a long life ahead of them, even if 15+ years old. The lenses are often coated for SW rather than LW so they cannot be used with a microbolometer LW camera core. IIRC the Minicam is a SW camera so this issue applies to its lenses. For those unaware, a lens AR coated fro SW looks like a mirroe to a LW thermal camera core and very little can be seen through it due to massive attenuation of the LW energy. I have proven this in practice with a SW lens.

Even £350 is a lot of money if the camera becomes a paperweight soon after purchase. My FLIR SC3000 is running on borrowed time as that is around 15 years old. You cannot predict when they will fail either.

I wondered if you had bought the camera as I know you also have a keen interest in  thermal cameras .

I will be working through my thermal camera collection shortly, and if I have any that need a new home, I will let you know. IIRC I now own over 36 thermal cameras of various technologies and ages  ;D

Best Wishes

Fraser (Aurora)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 15, 2015, 03:00:10 pm
@All,

I think I am fond of custom palettes for the E4 :) like those listed in https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=97182;image (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=97182;image)

Anybody succeed so far of adding custom palettes to the default list?
Any idea, how to do that?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 15, 2015, 03:28:04 pm
@Chanc3

The MILCAM is a weird piece of kit. It looks like some sort of universal metal module that then has different lenses and user controls 'bolted' on. The one I used had a small wide angle lens with manual focus and a Sony camcorder battery pod bolted to the side. The only controls were : on/off, manual dead pixel detection (requiring a lens cap to be fitted), brightness and contrast controls. A CRT based viewfinder was grafted to the top of the case. The image output via the viewfinder or NTSC composite video port is monochrome only, and no colour translation is available on board. It is very much an observation tool and not a Radiometric thermal camera. The cooled sensor array provides a low noise image but that is about all that makes it better than a conventional microbolometer camera really.

It looked to be designed for harsh environments and was very rugged. Not the most friendly design or shape for handheld use. The name MILCAM provides a hint at the cameras intended end user  ;D It was sold for rugged applications in the Military but was not a dedicated military product and found its way into civilian applications as well. It does have the military type of eyepiece fitted though. For those unaware, a military eyepiece contains an rubber iris that only opens when the users eye is pressed against the large eye cup. This avoids snipers seeing the glow from the CRT and sending a 7.62mm bullet through your illuminated eye  :o  That's military sniper countermeasures in action  :)

Why would I want such a camera ? Well. sentimental reasons really. The Stirling cooler is a bit of a liability as these cameras are at least 20 years old and unless recently rebuilt, the cooler will be pretty tired and likely in need of a re-gas. This is why I do not recommend Stirling Cooled cameras to people unless they are willing to accept a short remaining life, unlike most microbolometer cameras that have a long life ahead of them, even if 15+ years old. The lenses are often coated for SW rather than LW so they cannot be used with a microbolometer LW camera core. IIRC the Minicam is a SW camera so this issue applies to its lenses. For those unaware, a lens AR coated fro SW looks like a mirroe to a LW thermal camera core and very little can be seen through it due to massive attenuation of the LW energy. I have proven this in practice with a SW lens.

Even £350 is a lot of money if the camera becomes a paperweight soon after purchase. My FLIR SC3000 is running on borrowed time as that is around 15 years old. You cannot predict when they will fail either.

I wondered if you had bought the camera as I know you also have a keen interest in  thermal cameras .

I will be working through my thermal camera collection shortly, and if I have any that need a new home, I will let you know. IIRC I now own over 36 thermal cameras of various technologies and ages  ;D

Best Wishes

Fraser (Aurora)
Alas I did not win/buy it! But I am always on the lookout for older cameras as they are a great way of demonstrating how far the technology has moved (size-wise, not technology-wise).

I've never had the chance to dabble with SW or even MW cameras, however I am looking to get my hands on one if any do crop up.

In the meantime, I'm still playing around with an SC640 (not much I can do with this one), A655sc (working on a time-lapse with this), a T620 1st gen (trying to work out how to calibrate the PIP with 25° lens as it came with a 45°) and a B400 (again, same alignment issues with 45° and 6° lenses).

A company called iRed (www.ired.co.uk) have a good palette generator on their website, which I'm still trying to add a custom palette to an E60, but it's proving difficult. Will post back if I have any joy and will see if it can be replicated on an Ex camera.

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 15, 2015, 03:54:24 pm
Thank you,

really, palettes of the doctored E4 are not that bad at all! However, there are applications when custom palettes are preferred. Of course, I can always use the elsewhere mentioned script to convert a palette from picture to the *.pal format, and rename it to default iron.pal and here I have it.

However, I would like to have several additional palettes on a constant basis, and for this I think I need to add some symbols to the facet.rcc and conf.cfc and maybe z3.xml... but I am still at the very beginning of the Way so please those who are ahead of me and succeed with adding a custom palette to the E4, raise your voice!  :blah:

Rds.

P.S.:

@Chanc3

I didn't find any palette generator on this web-site...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nacke on June 16, 2015, 02:24:36 pm
Camera didn't like this new e8-file, at first it gave some appcore error message and after second boot it started with 80*60 ir resolution and some menus were lost. I tried to generate CRC01 again, and the result was the same. I uploaded original e8.cfg to restore the camera, and it worked again. I tried Taucher's EzCRC01.exe too, but it just gives MSVCP110.dll error.

Okay, now I have zoom :) I tried EzCRC01.exe on another windows pc and it worked. It showed that I made error with e8.cfg at first, there should be no CRC in the file when running CRC-generator on it. Someone could add to the instructions that the end of the e8.cfg file should be in form

# ID xxxxxxxx
# CRC01

to get the correct CRC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 16, 2015, 03:27:19 pm
Thank you,

really, palettes of the doctored E4 are not that bad at all! However, there are applications when custom palettes are preferred. Of course, I can always use the elsewhere mentioned script to convert a palette from picture to the *.pal format, and rename it to default iron.pal and here I have it.

However, I would like to have several additional palettes on a constant basis, and for this I think I need to add some symbols to the facet.rcc and conf.cfc and maybe z3.xml... but I am still at the very beginning of the Way so please those who are ahead of me and succeed with adding a custom palette to the E4, raise your voice!  :blah:

Rds.

P.S.:

@Chanc3

I didn't find any palette generator on this web-site...
It's not obvious, but the link is in the footer "Palette Generator". I'll post a link on Thursdays, as I'm currently in the sun in Portugal :)

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on June 16, 2015, 04:50:05 pm
OT

I see that a faulty Milcam sold on ebay recently. I used to use such so was sad to miss out on it. But I would be interested to hear from the buyer if they are a fellow member of this forum. The Milcam is a Stirling cooled camera so does have the issues associated with mechanical coolers but I still like teh camera when using it. If the new owner reads this and is interested in selling the unit in the future, I would like to hear from him/her  ;)

Auction was here:

http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557 (http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557)

Is that... does that say 1.8 to 9-degree FOV zoom?  :o

I would love to have a system with that kind of narrow FOV, especially with adjustable focus; having zoom would make it a lot easier to use (find your subject at the "wide" end and then zoom in). I don't have a specific application, but I'm thinking about things like investigating birds (esp. hummingbirds) and insects. But I'm definitely not up to rehabilitating and maintaining a Stirling system.

Yeah, I've got applications in mind to take advantage of the next thirty or so years of TIC progress...  ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 16, 2015, 06:26:24 pm
@jeffb,

IIRC the zoom is two FOV's 1.8 OR 9 Degrees. As stated however the issue will be that it is a Shortwave lens and it will also only have the stated FOV when matched to the dimensions of the Milcam's cooled sensor.

The lens is an objective and not an auxiliary type so cannot just be placed in front of a thermal cameras fixed objective. It is designed to illuminate the detector directly.

Rebuilding a TIC Stirling Cooler requires very specialist equipment that is not normally available to hobbyists. Precision parts need to be replaced, such as the piston, cylinder liner, all seals and then there is the high purity Hydrogen gas fill at some horrendous pressure  :scared:

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 16, 2015, 07:17:06 pm
Call of Duty to all Palette Lovers!

I managed to create *.pal files with the know script from prepared *.lut palettes edited in Photoshop. So far so good.

I would like to try those in FlirTool but, I didn't find any palette folder  :o

Since I am still away on business trip, I cannot just download them to my E4.

But the Problem is open, so I call for everybody's help to solve it:

How do we add custom palettes permanently?

Thanks all replying...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FredB on June 17, 2015, 06:21:05 pm
@Solare

C:\ProgramData\Flir Systems\Palettes

You can put new palettes in this folder. It works in Flirtools.
I did it already with some other palettes I found on www.

Succes!  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on June 18, 2015, 05:34:11 am
OT

I see that a faulty Milcam sold on ebay recently. I used to use such so was sad to miss out on it. But I would be interested to hear from the buyer if they are a fellow member of this forum. The Milcam is a Stirling cooled camera so does have the issues associated with mechanical coolers but I still like teh camera when using it. If the new owner reads this and is interested in selling the unit in the future, I would like to hear from him/her  ;)

Auction was here:

http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557 (http://www.ebay.co.uk/itm/FLIR-INFRAMETRICS-1-8-9-0-P-N-09980-200-56889-THERMAL-CAMERA-/331568944241?pt=LH_DefaultDomain_3&hash=item4d330c9471&nma=true&si=6F%252F1D4DGGHvo3WKYQV4KD39%252FLLA%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557)

Aurora






Hi
Aurora I won this aukction (MILCAM). I send You PM.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 18, 2015, 06:43:35 am
@FredB

Thank you!

However, I didn't find the Path:

C:\ProgramData

I use WindowsXP SP3 for works with the E4, so I only have C:\Program Files.

There is C:\Program Files\Flir systems folders, but there is no 'Palettes' folder in it (I use Flir Tools v. 4.1 I believe)

I have created the 'Palettes' folders and put my created palette into it, but it still doesn't appear in the Palettes list on the menu of Flir Tools...

suggestions?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: et328 on June 18, 2015, 06:48:23 am
suggestions?
Search under this folder: Documents and Settings\All Users\Application Data
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 18, 2015, 09:32:24 am
Thank you! It worked!

So how to set this palette on E4 permanently, that is the question...!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on June 18, 2015, 06:26:02 pm
I dont' know how system in Flir E4 works, but I'm guessing if you replaced the file "not_usefull_palette.png" with your palette with the same filename it should do the trick. ;)
It's true that this way you won't be adding new palette but replacing existing one might fulfil your needs?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 18, 2015, 06:54:52 pm
No, I want them in four rows  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 07:37:15 pm
So I may just have bought 5x E5s off eBay for a total of £500... Tbh, I doubt it's legit but PayPal has my back. They're coming from China so I'm expecting a brick in a box!

If they all do miraculously turn up, who wants a cheap E5?

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alank2 on June 19, 2015, 07:38:53 pm
Taking a Chanc3 on it?  :)  I hope it works out for you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 07:41:50 pm
Haha, I did indeed! I actually bought them all with the intention of letting a few go on here for cost, then using the rest for training and keeping one for myself!

I have a little bit of hope that it's legit, but at the end of the day it's no loss for me :)

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 07:54:10 pm
Another 5 just popped up! Worth a punt!

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on June 19, 2015, 08:44:50 pm
Another 5 just popped up! Worth a punt!

Sent from my HTC One_M8 using Tapatalk

Go on then, I'll have a punt as well :) PayPal takes the risk not me :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 19, 2015, 10:06:08 pm
What did you guys smoke?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 10:11:42 pm
You never know! :D seller looks legit haha

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 19, 2015, 10:15:31 pm
You are not telling us you just paid 500 pounds for actually, cats in the bag, are you?! What does it mean 'looks legit'? Was he a Chinese type of Jesus?  :popcorn:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on June 19, 2015, 10:23:21 pm
PayPal has a problem not me...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 19, 2015, 10:28:28 pm
I don't get it...  |O Why you keep saying it's PayPal's problem? Does PayPal guarantee that you actually receive what is written by the merchant in the order line?! I thought, PayPal only guarantees the merchant will receive your money at the moment you receive what the merchant declares to be what is written in the order line. And it is not the same, because merchant may believe that the E5 with this image go without sensors t ex.. now how PayPal in any way could take responsibility on its own for the third's party declarations coincides with your expectations?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on June 19, 2015, 10:44:42 pm
PayPal treats sellers like crap and charges them extortionate fees.

PayPal treats buyers very well indeed, any sign of a problem and they refund your payment immediately. Buyer protection rules.

I imagine that before the day is out I'll get an email from PayPal saying they have cancelled the transaction and refunded my payment. If they don't then I have up to 180 days to report any issue.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 10:46:20 pm
You are not telling us you just paid 500 pounds for actually, cats in the bag, are you?! What does it mean 'looks legit'? Was he a Chinese type of Jesus?  [emoji14]opcorn:
They have been a member for awhile and has relatively good feedback!

Will post back when my rocks in a box turn up! Haha - only time I like paypal!

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 19, 2015, 10:49:55 pm
PayPal has a problem not me...

That was what those folks were thinking in the "Best eBay deal ever ..." saga with multimeters (you can search the forum for it). Some ended up with "unpaid item" record in their eBay account.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on June 19, 2015, 10:55:03 pm
PayPal has a problem not me...

That was what those folks were thinking in the "Best eBay deal ever ..." saga with multimeters (you can search the forum for it). Some ended up with "unpaid item" record in their eBay account.

Been there, done that, got the tee-shirt(s). All unpaid items were deleted soon after. Buyers have SO got the advantage on eBay and with PayPal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 19, 2015, 10:56:12 pm
Only time I've taken a punt like this was with some 3TB drives. Seller promptly removed items, but PayPal covered them all.

Nothing to lose!

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 21, 2015, 02:36:38 pm
As suspected, too good to be true :D will have to hunt for that elusive bargain.


Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 21, 2015, 10:18:18 pm
For those with a general interest in thermal camera technology, I provide a couple of links below to the reverse costing reports of the SEEK Thermal camera> The important detail is sadly blurred as they wish to sell the report for over $3000.

There are two versions of the report so I provide links to V1 and V2 in case there are differences.

V1:

http://www.systemplus.fr/wp-content/uploads/2015/01/S-C_RS201_Seek-Thermal-Camera_Sample.pdf (http://www.systemplus.fr/wp-content/uploads/2015/01/S-C_RS201_Seek-Thermal-Camera_Sample.pdf)

V2:

http://www.systemplus.fr/wp-content/uploads/2015/01/S-C_RS201_Seek-Thermal-Camera_Sample_V2.pdf (http://www.systemplus.fr/wp-content/uploads/2015/01/S-C_RS201_Seek-Thermal-Camera_Sample_V2.pdf)

With reduced microbolometer manufacturing cost we will hopefully see a significant increase in affordable thermal imaging technologies for a range of uses. The SEEK camera has demonstrated that a Raytheon microbolometer with decent resolution may be viable at low cost of production.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 22, 2015, 10:36:00 pm
Very interesting reports, Aurora, thank you!

However, from what I've seen on YouTube, the quality of the Seek Thermal image is inferior to Flir E8+... and this is not only due to halved number of pixels... the optics is also much smaller, and focusing is not perfect, image occurs as blurry as the reports are :)

More to that... I feel skeptical about microbolometer sizes sub 17 um... consider the wavelength of LIR upper limit - 14 um, when the size of sensor is smaller than the wavelength, image goes bad with Airy optical resolution limit effect... although theoretical value is 1/2 lambda, any microscope user would confirm that actually image starts to degrade at about 1.0 - 1.5 lambda. It is still possible to reconstruct (resolve) close pixels with heavy digital processing... however, this clearly wasn't done with Seek Thermal devices.

The E8+ is, on the other hand, an older technology with much larger pixel (~36 um if I am not mistaken), and that means that no image degradation due to wavelength limit is there even close. Indeed, with proper focusing, one can get each pixel clearly resolved and very sharp edges.

So I vote for the E8+, albeit it is much more expensive.

@All

guys, don't fall asleep! keep the Thread running! :)

I again call for your help with permanently set added Palettes... who knows what about this, how this could be done?

Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 29, 2015, 06:30:39 pm
It's interesting that FLIR hasn't released any new firmware in a long time. I wonder if they've given up on trying to stop people from hacking their cameras. :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 29, 2015, 06:53:45 pm
It's interesting that FLIR hasn't released new firmware in a long time. I wonder if they've given up on trying to stop people from hacking their cameras. :D
It's more likely that they have been incredibly busy with the likes of the C2, moisture meter, One V2 etc. I suspect if things ever quieten down a bit... BAM new firmware!

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 29, 2015, 07:06:52 pm
It would be fair to say that hacking a FLIR E4 is no longer the simple task that I enjoyed with Firmware 1.19. I suspect that the rate of end user upgrading has dropped off significantly since Firmware 2.xx was released. As far as FLIR are concerned, this likely is the end of the story for them. Equipment will always be hacked, it is the rate of occurrence that FLIR will have wanted to impact with their countermeasures. The Hack did not break ITAR so it was purely an internal policy matter. The cost of further Firmware development is likely now greater than the concern over the low hack rate.

Slightly OT but consider what has just happened in the FLIR Camp..... they have just released a new 2nd Generation FLIR ONE camera for both iOS and Android at an amazing price. That is to say, a 160x120 pixel FLIR thermal camera for your phone costing only $249. Being a FLIR product it should deliver on its promises, and so many potential owners of thermal camera technology may consider it a cheap way into the thermal world. It is, after all, at least a 1/3 the price of the E4, still has MSX, and possesses reasonable resolution....... all without the need to hack it. What is not to like ?

It will be interesting to see what FLIR does with its future line up of thermal cameras. I wonder if the 80x60 and 120x90 resolution units will be dropped in favour of new budget models having the cheaper LEPTON 160x120 pixel core and higher end units having conventional 320x240 cores. I am still VERY surprised that the new FLIR ONE is so reasonably priced yet the new C2 contains an original 80x60 LEPTON core at a far higher price point of ~$700. Weird, damned weird.

Interesting times

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on June 29, 2015, 10:18:09 pm
Ah... finally... somebody alive on this Thread :) I though, everybody's gone to Hawaii :)))

I am soon returning back to my dirty business with improving my E4 expierence... just wait :)

I was away for a while on a business.

Nice to see you guys!

P.S> Palettes?  >:(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 29, 2015, 10:30:47 pm
C2 is a tool, Flir One is a gadget.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 29, 2015, 10:42:47 pm
C2 is a toy, Flir One is a toy ;)

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 29, 2015, 11:02:59 pm
@Bud,

So why did FLIR not place the 160x120 LEPTON core in their new cool "tool". That is the bit that confuses me.

At $700 it certainly deserves the higher resolution core. Maybe that will be in the C3  ;D

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 30, 2015, 01:29:59 am
Aurora,

you probably just have answered your own question. There *should be* C3, then C4 etc. A company should leave itself room to release new products. C3 will become priced lower but still exist, and with a new model introduced the total revenue will be bigger than if having just one model.

Tools do not need to be "cool", people buy tools because they want to use them on the job. Imagine a construction guy dancing around at a construction site with his smartphone and Flir One,  with its flimsy lightning connector being the only support to the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on June 30, 2015, 07:05:04 am
Hi
Is anyone working on a software upgrade to version 1.19.8 up to 2.3.0 and using HACK?
All I know is (based on personal experience):
1. Updating is possible, increased resolution is maintained. However, they do not operate certain features, symptoms:
 - The camera (up) runs longer
 - Do not operate (free) extended menu (the meniu settings)
 - When you turn on the camera (full restart), it takes about 2 minutes to be able to read and write images to internal memory
 - Does not work manually change the scope of termperature.

The problem (probably) is associated with a file conf.cfc and conf.cfg
 In older cameras is located file conf.cfg
 In the new cameras is conf.cfc file?
 I did not get so far no information on the matter.
 I would ask that someone presented a sample file conf.cfc (structure)

Feel free to common solve the problem
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gasburner on July 01, 2015, 09:38:54 pm
Hello Guys,

I got a question, with a new E40 is it possible to downgrade to a older firmware version
Is there hack to be expected for the newer Firmware versions, i mean are people active with trying ?

Model: E40 1.0
Serial 645xxxxx
Software: 3.18.0

Thanks for the help
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 01, 2015, 09:41:57 pm
I wasn't aware the new E40s had updated firmware - have you tried the usual means to get into the cfg file?

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gasburner on July 01, 2015, 09:47:06 pm
Not yet Chanc3, just wanted some feedback before trying. And get familiar with the problems i can maybe encounter
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 01, 2015, 09:49:08 pm
I'm very familiar with the older E60 (2012 model) and the 2014 model, so if you need any config files let me know. They are pretty straightforward to modify.

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gasburner on July 01, 2015, 10:01:36 pm
Thanks, that would be of great help  :-+. How can you distinguish the model year ? have no clue to be honest.
Is there a guide here somewhere within a post for the Exx models, would like to know bit more from them.
I saw a lot off posts on the Ex but couldn't find to much on its big brothers.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gasburner on July 01, 2015, 10:05:53 pm
I have bought it from Amazon USA, and it arrived today in Mexico after a long travel. Have no clue if they delivery out of their own stock and can be older types, or maybe they come directly from Flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 01, 2015, 10:11:49 pm
Obvious difference is that the newer models have MSX (older ones have different hardware, which isn't capable).

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 05, 2015, 08:31:25 pm
Is there a guide here somewhere within a post for the Exx models, would like to know bit more from them.
I saw a lot off posts on the Ex but couldn't find to much on its big brothers.

 

see topic 19 of my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

and this thread
https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: acarleton2000 on July 06, 2015, 04:32:24 am
Hey I'm looking to upgrade or downgrade at first to the E4 model from an i5 model Flir. I have owned the i5 for a while and wanted to upgrade it to the i7 specs but try as I may I can't get it to work. Always ends up going down in resolution. Not exactly sure what's wrong but I figured if the hack for the E4 works then that is the way to go.  So my concern is that I am going to run into the same problems with this upgrade?!  wish I had time to read all of the pages to see the answer that is probable on page 145 but.....  Really just looking for some information from the pros who have done this before and had great success!  And someone to tell me what the heck I'm doing wrong with the i5 before I get rid of it!  Still going to upgrade tho :-+ Tooooo many better features with the newer cams!!

Thank you all!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 06, 2015, 10:46:05 am
I have owned the i5 for a while and wanted to upgrade it to the i7 specs but try as I may I can't get it to work. Always ends up going down in resolution. Not exactly sure what's wrong

do you know my post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
with this nice step-by-step guide
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490)

and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)
??

don't forget:
Code: [Select]
max 120x120 pixels for the 1.Gen.  Flir iX
max 140x140 pixels for the 2. Gen. Flir iX
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 06, 2015, 11:28:46 am
I have owned the i5 for a while and wanted to upgrade it to the i7 specs but try as I may I can't get it to work. Always ends up going down in resolution. Not exactly sure what's wrong

do you know my post:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
with this nice step-by-step guide
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490)

and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)
??

don't forget:
Code: [Select]
max 120x120 pixels for the 1.Gen.  Flir iX
max 140x140 pixels for the 2. Gen. Flir iX

It's probably that or you're not putting a LB as opposed to a CR
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gasburner on July 07, 2015, 03:58:18 pm
Thanks a lot Thomas 123, i hope i can be off help with making some guides.

Is there a guide here somewhere within a post for the Exx models, would like to know bit more from them.
I saw a lot off posts on the Ex but couldn't find to much on its big brothers.

 

see topic 19 of my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

and this thread
https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: acarleton2000 on July 08, 2015, 03:43:21 am
Tomas123- Hey thanks for the reply!!  I have followed that step by step 4 different times and every time I end up with the same result, it backs down to what looks like an "i1" ha  :-DD So Im not sure what is wrong with my process but I have made sure to follow it to a T! My Camera is the all black version, I am assuming it's the 2nd gen cam although I can't find information telling me one way or another.  I ended up forcing the update to the latest firmware version which it already had to insure that I had it back to factory specs and code. I just wasn't 100% sure I had it back to an i5.  Would be pretty sad if I bricked my 1400$ camera!

Chance3- Im not sure what you are referring to with "not putting a LB as opposed to a CR" but I will look through the file system to see if I can find a reference to that.

Thanks again for your help!  Really is fun to change these cameras into a higher model haha!  Thanks FLIR ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: acarleton2000 on July 08, 2015, 03:58:53 am
Also forgot to mention I don't get the change in the menu either. No measurements section?!?! Does anyone have the i7 file system they could post in a zip?  I'm aware I would have to calculate the checksum for my serial #.  Or is this my mistake? Going through the Step-By-Step everything works as described in the PDF for me so.....? ? ?

Thanks again for the help everyone!  I'm dead in the water without your help!!!

And a special thanks to those responsible for creating the guides to follow! Nice and easy when you can go step by step. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 08, 2015, 06:46:30 am
Tomas123- Hey thanks for the reply!!  I have followed that step by step 4 different times and every time I end up with the same result, it backs down to what looks like an "i1" ha  :-DD So Im not sure what is wrong with my process but I have made sure to follow it to a T! My Camera is the all black version, I am assuming it's the 2nd gen cam although I can't find information telling me one way or another.  I ended up forcing the update to the latest firmware version which it already had to insure that I had it back to factory specs and code. I just wasn't 100% sure I had it back to an i5.  Would be pretty sad if I bricked my 1400$ camera!

Chance3- Im not sure what you are referring to with "not putting a LB as opposed to a CR" but I will look through the file system to see if I can find a reference to that.

Thanks again for your help!  Really is fun to change these cameras into a higher model haha!  Thanks FLIR ;)
Sorry, I should have been more clear.

Rather than pressing Enter at the end of the serial number, you need to press Shift+Enter to then put CRC in.

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on July 08, 2015, 07:08:06 am
is there anyway of removing the battery charging symbol ? even though it remains on the screen for just a few seconds, it is starting to burn into the screen itself.  I am starting to see a very faint imprint of the battery logo when the e4 is used.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: acarleton2000 on July 08, 2015, 12:17:33 pm
Tomas123- Hey thanks for the reply!!  I have followed that step by step 4 different times and every time I end up with the same result, it backs down to what looks like an "i1" ha  :-DD So Im not sure what is wrong with my process but I have made sure to follow it to a T! My Camera is the all black version, I am assuming it's the 2nd gen cam although I can't find information telling me one way or another.  I ended up forcing the update to the latest firmware version which it already had to insure that I had it back to factory specs and code. I just wasn't 100% sure I had it back to an i5.  Would be pretty sad if I bricked my 1400$ camera!

Chance3- Im not sure what you are referring to with "not putting a LB as opposed to a CR" but I will look through the file system to see if I can find a reference to that.

Thanks again for your help!  Really is fun to change these cameras into a higher model haha!  Thanks FLIR ;)
Sorry, I should have been more clear.

Rather than pressing Enter at the end of the serial number, you need to press Shift+Enter to then put CRC in.

Sent from my HTC One_M8 using Tapatalk



Chanc3- Thank you I will give that a shot this morning!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 08, 2015, 04:46:39 pm
is there anyway of removing the battery charging symbol ? even though it remains on the screen for just a few seconds, it is starting to burn into the screen itself.  I am starting to see a very faint imprint of the battery logo when the e4 is used.

It's been covered.

http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+battery+symbol (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+battery+symbol)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: acarleton2000 on July 08, 2015, 05:22:02 pm
Just a quick update this morning,

I went through the process once again and tried the method that Chanc3 suggested with the same negative results.  The only thing I can think of is perhaps the date changer is not working correctly because I put in the time and date and it tells me that it completed the change but the date that shows up on the file is one day earlier and when copied to the  camera it has today's date???  Also, is there supposed to be an extra line at the end of the code string in the config file? I'm referring to a blank line at the end below the checksum? In addition to these two , my third question is when I copy the config.cfg text out of the PDF it has a separation 3 or 4 lines before the end and a "7" in that space.  I compared the two from the PDF and the copied text in notepad++ and felt it should not be there. 

These three are the only things I can figure I am doing wrong?

All help is appreciated. I can start a new topic with all of this information if that would be more appropriate?! Kinda feel Im hijacking the "E4" topic.


Thanks again for the help all!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on July 09, 2015, 01:47:02 am
is there anyway of removing the battery charging symbol ? even though it remains on the screen for just a few seconds, it is starting to burn into the screen itself.  I am starting to see a very faint imprint of the battery logo when the e4 is used.

It's been covered.

http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+battery+symbol (http://lmgtfy.com/?q=site%3Ahttp%3A%2F%2Fwww.eevblog.com%2Fforum%2Ftestgear%2Fflir-e4-thermal-imaging-camera-teardown+battery+symbol)



I've searched for it but no results. so thanks for being a dick.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 09, 2015, 04:48:19 am
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333561/#msg333561 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333561/#msg333561)

replace the existing files in FlashBFS/system/battery.icons
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 17, 2015, 05:34:54 pm
tomas123 - I can't remember if I ever asked you about it before, but have you ever though about adding an option to your FLIR.PHP script to scale the scale to fit different sized images better? (different sized pano's vs regular images)

Are you still using/update it? (I still prefer it over FLIR Tools or BFIC since you can get such nice loss-less output and its remarkably error tolerant!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 17, 2015, 09:52:11 pm
 :palm:
Sorry, but I make the post procession after panorama stitching with Flir Tools.
It's a good tool and works great with gigapixel flir images  :)

My flir.php is only a proof of concept for exiftool and imagemagick (reverse engineering).
You can simple modify the source code.

Flir Tools uses a non linear scale depending from histogram. This gives the best colors.
annoying is the permanent overlaid scale and the missing offset correction für MSX
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on July 17, 2015, 11:51:42 pm
@Thomas

You are saying, it is possible to stitch multiple images with FlirTools (not FlirTools +) to form a Panorama? How?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 18, 2015, 02:48:56 am
:palm:
Sorry, but I make the post procession after panorama stitching with Flir Tools.
It's a good tool and works great with gigapixel flir images  :)

My flir.php is only a proof of concept for exiftool and imagemagick (reverse engineering).
You can simple modify the source code.

Flir Tools uses a non linear scale depending from histogram. This gives the best colors.
annoying is the permanent overlaid scale and the missing offset correction für MSX

No worries. I think I kinda figured it out (at least the way I like it). Also fixed a few things that were bugging me and grabbed a few more palettes to play with.
New spin on a old pic:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 18, 2015, 08:56:05 am
No worries. I think I kinda figured it out (at least the way I like it). Also fixed a few things that were bugging me and grabbed a few more palettes to play with.
New spin on a old pic:
:-+
please post the code
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 18, 2015, 04:11:20 pm
No worries. I think I kinda figured it out (at least the way I like it). Also fixed a few things that were bugging me and grabbed a few more palettes to play with.
New spin on a old pic:
:-+
please post the code

It's a fairly dirty hack that only works if you leave the default resize at 200%. I don't know enough about the syntax of PHP to cull out the resize percentage from the command line (specifying the percentage from the command line also never worked for me for some reason so I always just ended up editing the default at line 120 in the PHP script anyway) I also prefer it resized 200% so that issue is not worth looking into for me.

Starting at around line 258

Code: [Select]
// draw color scale
$H=$exif[0]['RawThermalImageHeight']*2*.9;
exec($convert . ' -size 16x'.$H.' gradient: ' . $pal . ' -clut -mattecolor ' . $font_color . ' -frame 1x1 -set colorspace rgb -mattecolor gray -frame 1x1 "gradient.png"');

// if your imagemagick have no freetype library remove the next line
exec($convert." gradient.png -background ".$frame_color." ".$font." -fill ".$font_color." -pointsize 15 label:\"$Temp_max\260C\" +swap -gravity Center -append  label:\"$Temp_min\260C\" -append gradient.png");

The second line I added the \260's to get the degrees symbols to make it a bit more presentable.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on July 19, 2015, 08:03:34 am
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333561/#msg333561 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg333561/#msg333561)

replace the existing files in FlashBFS/system/battery.icons

thanks.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on July 19, 2015, 08:06:22 am
Please post your modified files?
I attached them, but it's not rocket science and only a first go. At first look it seems dark enough though to avoid that burn in effect.
To remove the burn in effect faster, it would be probably better to invert the image and use it for some time.

Also found something that I don't know if anyone else has figured out - if you power it off and it's on the charging screen - if you press left and right at the same time you get a some charging stats:
Interesting. At least I didn't know. Thanks for the info.

any idea if there's a limit or restriction on the bitmap file? I am thinking of changing the grayscale colour to black so that it shows nothing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on July 19, 2015, 06:07:45 pm
Would somebody be so kind to put all *.pal palette file into one zip and post it here. :-+
Tnx.

P.S.
I searched A LOT but I have only found a few palettes. (Which I think were added later by E4 users).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 19, 2015, 06:19:35 pm
Make your own: www.ired.co.uk/palettes

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on July 19, 2015, 06:25:42 pm
I know how to make my own but I would really like to have Flir's original palettes...  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on July 20, 2015, 12:04:42 pm
I managed to extract them from android apk file...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 20, 2015, 03:28:37 pm
Attached is tomas123's PHP script with the changes I made to it, a small batch file that I use it run it, and over 100 palettes that are I have pulled out of this thread. (not compatible with FLIR Tools however).

You will still have to edit the PHP to point to your file paths and you should read though the batch file to understand how it works or edit it to suit your needs, but the quick and dirty is just drag an image onto it (must be in same folder) then type in the file-name of the palette (no need for .png) and wait for it to finish. (And don't use the --resize option in his PHP, since I broke it with my changes.)

tomas123's PHP script
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on July 20, 2015, 04:29:37 pm
Nice. Thank you.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on July 21, 2015, 06:42:15 pm
I don't know i this useful for someone but when You need inverted palette, rename it to bw.pal in
camera /FlashBFS/system/. Make backup from pal files first of course. Then You have original -
let's say Iron behind "White hot" and inverted Iron behind "Black hot" menu button.
After rename restart is not needed : )
Then all the alarm palettes is using Your new bw palette too, of course.

Rainbow is here:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 22, 2015, 02:17:33 pm
Give a try to BFIC. Its small, fast and free:

I wonder if you could add support for radiometric panorama images.

EDIT: ...and/or frames extraction from .seq / .fff radiometric video files
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 22, 2015, 05:12:09 pm
So I may just have bought 5x E5s off eBay for a total of £500... Tbh, I doubt it's legit but PayPal has my back. They're coming from China so I'm expecting a brick in a box!

If they all do miraculously turn up, who wants a cheap E5?

Sent from my HTC One_M8 using Tapatalk

So what did you get?
 :popcorn:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 22, 2015, 05:43:12 pm
So I may just have bought 5x E5s off eBay for a total of £500... Tbh, I doubt it's legit but PayPal has my back. They're coming from China so I'm expecting a brick in a box!

If they all do miraculously turn up, who wants a cheap E5?

Sent from my HTC One_M8 using Tapatalk

So what did you get?
 [emoji14]opcorn:
Scammed! Haha, was too good to be true! But I got all my money back.

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ownz_3255 on July 23, 2015, 04:17:33 pm
Hello everybody
I'm currently trying port this mod to Flir Bxxx/Txxx models, so I would like to know if anyone can send me any full ftp backups so I can research on it.

I need full backups for these models:
E4-E8 firmware v1.xx
E40-E60 any firmware
B200~B425 / T200~T425 any firmware


Any help would be greatly appreciated  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 23, 2015, 04:18:48 pm
Ah sorry, forgot about this, will send over B400 tomorrow

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ownz_3255 on July 23, 2015, 04:33:58 pm
Thank you, Chanc3.

If anyone else has a Bxxx/Txxx camera and want some help, just pm me
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on July 24, 2015, 10:33:23 pm
The temperature range of the FLIR B400 can be extended to 1,200° C by buying an upgrade from FLIR. I wonder if it can be upgraded for free via hacking.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 24, 2015, 10:46:47 pm
In the PM5xx and PM6xx series the high temperature filter was fitted in all cameras but was not enabled unless FLIR entered the required option activation 'key'. I understand that the activation of that camera series HT filter via 'hacking' is possible as a dealer once asked me whether I had managed to enable it yet.... he said it was a simple change  of setting in the firmware. I have not spent any time looking at the PM series firmware though.

With regard to the B400, if the filter is not an option that needs to be physically retro fitted, it should be possible to enable it in the firmware, but where that 'switch' resides I have no idea, sorry.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 24, 2015, 10:48:33 pm
Think you can turn it on in the service menu! I'll have a play when I'm in the office

Sent from my HTC One_M8 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ownz_3255 on July 25, 2015, 12:23:18 am
Yes, it can. the -20-120°C and 0-350°C in my unit came factory calibrated, but only the first was activated. The 1200°C case still can be used without calibration.

Enabling these settings is the easiest thing in these cameras, all you need to do is activate the network mode, enter the camera IP in your web browser(iexplore works better) and enter the service menu. Then, use the flir/3vlig login and go Calibration - System Calibration - Enable/Disable Cases. I suggest you also go to Image Correction - Select Case and select the case you want to the camera use at boot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bob127 on July 30, 2015, 03:00:01 am
Does this hack still work? I read a few people saying it didn't work.

http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

Some guy posted a comment about not having any luck?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 30, 2015, 04:01:32 am
If the firmware version is the same there would be no reason for it not to work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 01, 2015, 02:03:35 pm
Who knows the diameter of the lens from Flir E4? I made  telephoto lenses. Perhaps they will be working with Flir E4 . If it is less than 12.5mm.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 01, 2015, 02:14:57 pm
The Ex series uses a 6mm diameter lens that I have already used with 12.5mm diameter auxiliary ZnSe lenses for CU work.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 01, 2015, 02:21:17 pm
Thanks for the answer. One more question. Is it good that the holder?
 http://www.thingiverse.com/thing:187166 (http://www.thingiverse.com/thing:187166) 
 I want to use it for a telephoto lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 01, 2015, 02:34:16 pm
That mount certainly works well for close-up lenses but it is not really that suitable to hold any sort of weight as it can pop out of the large case aperture into which it uses a friction fit.

With a small diameter auxiliary lens and the wide FOV of the Ex series, it is important to place the lens as close as possible to the cameras fixed objective to avoid vignetting. Some of the alternative lens holders position the auxiliary lens too far away from the objective as they are deigned for 20mm diameter lenses only.

I have some beautifully made aluminium close up lens holders made for me by a fellow forum member. These friction fit into the neoprene aperture that surrounds the lens objective. Sadly they are also unsuitable for any significant load bearing, and so unsuitable for your lens.

I believe that the lens holder that you referenced is a good start point as it spreads the load well, but it will likely need some elastic bands or similar retainers to firmly secure it t the camera.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pelule on August 06, 2015, 08:44:07 pm
Quote
Hi everyone

I created a step-by-step guide with pictures how to permanently upgrade i3 & i5 to i7 specs & how to add the extra measurements menu.

Link: http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu (http://www.filedropper.com/howtoupgradeyourfliri3ori5toi7specsextramenu) Link updated 16-03-2015
Quote

Link does not work. Is the file remove?
BR
PeLuLe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on August 06, 2015, 10:50:29 pm
download copy frome here:
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 08, 2015, 08:01:33 am
I made a lens holder for Flir e4. His mount I do not like. Not reliably. I want to make a secure attachment. I do not have the opportunity to make the necessary measurements of the size. Who has the E4. Please tell us the dimensions. Needed are highlighted in red in the drawing. I want to make the bracket as in the second figure. Thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 10, 2015, 10:55:41 am
Can you repost a zoomed image of the top left dwg? The one with 5 measurements of the side view. Hard to see line detail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 10, 2015, 12:55:42 pm
Please. I increased the image. I do not have the E4. Maybe someone will offer a better lens mount. I will have the opportunity to take Flir E4 only a few minutes to test the zoom lens. Therefore, immediately I want to make a good mount.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chipper on August 10, 2015, 11:41:46 pm
Hello!

I have an E4, and I'm wondering if any of the experts here have seen an E4 behave this way


As I have another device, a T-Series, the NUC process is a bit more *mechanical* sounding... I'm wondering what might be getting stuck in there that would become free or move when tapped or another NUC is done??

Also, as I purchased this device with the software enhancement AND have access to other & higher grade devices, it would seem the thermal sensitivity does NOT get upgraded IMO. I've compared to T-Series (not fair I realize) and I'm nearly certain that while the detector resolution is enhanced, that either the balometer is lower quality OR the sensitivity is still at .15 vs the E8's .06

Anyone have any ideas.. could some dirt or similar get in front of whatever mechanical apparatus is part of the EX's NUC process? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 11, 2015, 03:14:00 am
Most likely to be the mechanical Flat field correction shutter getting stuck. Dust ingress is not normally a problem.

You can see the shutter operation if you unscrew the lens. You will  likely need the lens tool though.Rectification requires disassembly.

I have had cameras suffer FFC shutter spring detachment which makes them stay in the wrong position once the FFC is completed.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chipper on August 11, 2015, 05:45:44 am
Most likely to be the mechanical Flat field correction shutter getting stuck. Dust ingress is not normall a problem.

You can see the shutter operation if you unscrew the lens. You will  likely need the lens tool though.Rectification requires disassembly.

I have had cameras suffer FFC shutter spring detachment which makes them stay in the wrong position once the FFC is completed.

Aurora

Thanks Aurora, I think I tend to agree.. shutter intermittently getting stuck. I'm wondering if parts are available or ? I could mail to Manu for repair, but there are pros/cons to such..

Thanks again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 11, 2015, 12:39:07 pm
No parts available for repairs.

FLiR will repair cameras that are under warranty, but if you bought it second hand, the warranty may, or may not be valid.

FLIR will upgrade the camera to the latest firmware as part of any repair.

The FFC shutter is a simple design. It may just be a simple alignment issue, or a spring that needs to be re attached. There isn't much to go wrong with it.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on August 15, 2015, 09:40:30 pm
I also wasn't happy with anything available on the web as a lens holder, so I designed my own. It's still only intended as a makro extension (for PCB / electronics analysis) but I think it would be rigid enough for a small telephoto configuration as well (see attached photos - don't mind the dust please). So far the bottom of the adapter is flat, the next generation will have a ridge around the circumference since the bezel of the E4 lens is a little convex and so the holder will tilt a little horizontally (no issue at all for the macro lens).  If you're interested in this configuration, I'm prepared to provide the 3D file (STEP or whatever you like...)

Cheers,
Thomas

P.S. the lens is locked in place with a circlip on top of an O-ring

Thanks for the answer. One more question. Is it good that the holder?
 http://www.thingiverse.com/thing:187166 (http://www.thingiverse.com/thing:187166) 
 I want to use it for a telephoto lens.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 15, 2015, 11:15:46 pm
@TurboTom
 seems to be the best one I've seen so far   :-+

Yes please share the files for 3D printer, I'd like to try it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 15, 2015, 11:27:29 pm
@turbotom,

Very nice lens holder sir :)

I would love the 3D file for my personal use. The original file format (in case I need to modify it) plus the STL would be great.

Best Wishes

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 16, 2015, 06:19:24 am
I'll be glad to get 3D file. This is a beautiful solution to the macro lens. But even so, I think that the additional fixing on the sides give rigidity. If you have time please make the necessary measurements to me. I want to make the side latches.
And I have more questions:
1. ABS plastic shrinks during cooling. You make amendments to this problem?
 2. What is the diameter of the lens you used the?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 16, 2015, 03:20:55 pm
On ABS shrinkage..... The 3D printer calibration routine involving a test print compensates for the shrinkage. At least it does on my UP! Mini  :)

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on August 17, 2015, 08:00:05 am
Here's an archive containing the STL and a STEP version of the lens holder:
http://www.turbinemuseum.de/files/Flir-Linsenfassung.zip (http://www.turbinemuseum.de/files/Flir-Linsenfassung.zip)
We've got a Zortrax 3D printer at work that I used to produce these parts and I don't have to bother about shrinkage at all, yet warpage is sometimes a problem, depending on the filament material used and the orientation of the model.

Hope this helps....

Cheers,
Thomas

P.S. lens diameter for this holder is one inch.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on August 17, 2015, 02:20:26 pm
Please. I increased the image. I do not have the E4. Maybe someone will offer a better lens mount. I will have the opportunity to take Flir E4 only a few minutes to test the zoom lens. Therefore, immediately I want to make a good mount.

Okay, near as I can tell, the three measurements from the face (left side of your drawing) to the side of the camera are 0.175", 0.620", and 0.763".
The vertical height of the straight section of the "FLIR" indent on the left side of your drawing is almost exactly 1.25".
I'm not sure what you're looking for with the green lines ("Depth?") on your drawing. If it's the depth of the "FLIR" indent, that measures about 0.060" (the plastic panel bearing the "FLIR" logo is 0.060, but the inner bevel of the indentation is slightly deeper than that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 17, 2015, 07:25:40 pm
Thank you. I do not know of only two sizes. In the drawing, they are with question mark. Please write them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 19, 2015, 03:52:35 am
P.S. lens diameter for this holder is one inch.

@turbotom, I wonder if can you change the files for 20mm lens ?

Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TurboTom on August 19, 2015, 06:51:45 pm
Hey Bud -

no problem at all, here's the link:

http://www.turbinemuseum.de/files/Flir-Linsenfassung-20mm.zip (http://www.turbinemuseum.de/files/Flir-Linsenfassung-20mm.zip)

Cheers,
Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 19, 2015, 07:22:36 pm
Hi TurboTom,

Many thanks for your work on this design. Your sharing it is much appreciated.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 20, 2015, 02:02:43 am
@TurboTom

Thank you for your efforts and contribution!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 20, 2015, 06:23:03 am
New spin on a old pic:

A crude copycat using my E4 and free ImageJ software ( stitching + Look Up Table )


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kert06 on August 20, 2015, 08:55:36 pm
hey

yesterday my camera started to show a spot, i haven't used this camera a lot, just casually doing shots here and there

what could be the cause of this? how can i fix this? warranty?

also this is a flir E4 with modified software (higher resolution image)

thank you

(http://i.imgur.com/xXmEFH5.jpg)
(http://i.imgur.com/Q4XAt6p.jpg)
(http://i.imgur.com/Pr3Rwns.jpg)
(http://i.imgur.com/Orx3VYz.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 20, 2015, 09:10:29 pm
Panic not. It is a spec of dust on the mibrobolometer window.

It isn't that easy to clean though. The lease invasive route is via the lens mount.
Remove the lens by unscrewing it with one of the lens tools that have been designed on this forum.
Buy or borrow a large camera puffer air duster (not an aerosol type) The best ones for this task are a rubber rugby ball shape with a brass pointed nozzle. They are also sold for building site/DIY work... they are used to blow debris out of drill holes.
Blow the dust off of the microbolometer window that sits behind the square FFC shutter aperture. Take great care to not touch the microbolometer window with the air duster nozzle.
Refit the lens and adjust focus for best image near and far.

Where does the dust or spec come from ? The E4 is not built in a clean room and some dust and manufacturing swarf can exist within its case and float around over time and use.

Alternatively .... return the camera to FLIR for a clean. It will have its firmware upgraded to the latest version though.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kert06 on August 20, 2015, 09:42:30 pm
Thank you Aurora.

I'll clean it myself. I suspected it's dust, but not on the inside.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 20, 2015, 10:00:16 pm
If its dust, it is behind the FFC shutter and will be on the microbolometer germanium/GASIR window. I have seen this type of issue many times.

Lens surface dust (on front or rear lens element) does not produce the well define spot.

I hope the air dusting solves the problem for you  :-+

All the Best with this task.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on August 21, 2015, 06:58:27 am
I had dust on mine once, just appeared after I tore one of the newer ones down to check hardware differences (found none). I went the long way about it, dismantled (again)  and cleaned with a camera sensor cleaning kit, I found that the air duster didn't shift it.
The kit was something like this:
http://www.ebay.co.uk/itm/10-PCS-Sensor-Cleaner-Cleaning-Swab-Kit-CMOS-CCD-DDR-15-for-APS-C-Camera-DC580-/371258849349?hash=item5670c07845 (http://www.ebay.co.uk/itm/10-PCS-Sensor-Cleaner-Cleaning-Swab-Kit-CMOS-CCD-DDR-15-for-APS-C-Camera-DC580-/371258849349?hash=item5670c07845)

Aurora is better versed in these things than me and may be able to advise if the chemical cleaning of that particular sensor was a smart idea or not.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pantheron on August 23, 2015, 06:04:27 pm
Hello,

i bought an FLIR E4 Yesterday by Conrad electronic in Germany with FW 2.30 and the hacks Resolution + Menu (at this point Thanks to Fubar.gr) works like a charme :)
my targetnoisemk is 16.x.

Regards
Pantheron
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on August 24, 2015, 01:46:37 pm
New spin on a old pic:

A crude copycat using my E4 and free ImageJ software ( stitching + Look Up Table )

Nice! I will play around with that when I get a bit more time.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ben321 on August 29, 2015, 05:20:30 am
Has FLIR yet created a countermeasure to the E4 320x240 resolution firmware mod? For example, have they replaced the chip in all newly manufactured E4 units with a Lepton (the old version) which actually does only have a physical 80x60 resolution? Or maybe they altered the firmware to now include encryption (or even a separate hardware encryption/decryption chip, that was not present in previous versions of the E4) to prevent unauthorized firmware from being used? Anybody here have a heads-up on if such countermeasures have yet been deployed by FLIR?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 29, 2015, 02:51:43 pm
No to all of the above. The Ex series remain capable of 320x240. FLIR do not intend to retool for the E4 to use LEPTON. That will be a completely new camera model.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ben321 on August 29, 2015, 07:41:49 pm
No to all of the above. The Ex series remain capable of 320x240. FLIR do not intend to retool for the E4 to use LEPTON. That will be a completely new camera model.

Aurora

They didn't even add encryption to it? I'd think they'd want to do that, out of fear that customers would stop buying the E8, in favor of buying an E4 and then hacking it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 29, 2015, 09:47:19 pm
They added encryption in firmware 2.3 ages ago. This was circumvented as you will see in this thread.

A professional user is unlikely to hack kit for official use. The general public are less likely to buy an E8.
This has been discussed in this thread.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on August 30, 2015, 02:50:36 pm
i usually do my homework, but it is 200+ pages from my last visit...

any new features since firmware 1.18.8 with hack 3 (6 nov 2013) which i currently have?

and another thing - for some reason plastic (i assume that it is some plastic as i can scratch it with a needle although i would swear that it is a glass judging by the cracks) that protect LCD on my camera has some (so far) small cracks, any other options than replacing it with some acrylic?

actually it is a bit strange - i always paid a lot attention to this camera, i don't have a single mark on the casing anywhere yet somehow i have a 2 cm crack and 2 smaller ones and i have no idea how or when that happened
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 31, 2015, 04:44:40 am
Probably there was not any updates for that version. The last few months it was pretty much about 2.3.0, which was raped to the extent one would possibly never be able to use all of the features that were unlocked/added.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on August 31, 2015, 05:59:10 pm
I made a prototype of the lens holder. Look. Perhaps something can be done better.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on August 31, 2015, 09:15:48 pm
interesting design, i would definitely go for some telephoto lenses if the price is right

i do have two macros for electronic work but some telephoto that would have 10-15m focus would be great for roof, gutters, chimneys inspections from the ground

and perhaps something with ~100m focus for spotting animals and such

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on September 01, 2015, 05:05:03 am
The holder of the zoom lens. It remains conduct a test.
What price do you think is good? Lens X3.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Axelbert on September 01, 2015, 01:42:02 pm
Hi to everybody.
Just "upgraded" my E30bx to E60, following the instruction provided.
I changed the conf.cfg file in the following directories:
FlashFS\system\appcore.d\config.d\conf.cfg
FlashFS\system\services.d\config.d\conf.cfg
FlashFS\system\ui.d\config.d\conf.cfg

What about the:
FlashFS\system\service\appcore.d\config.d\conf.cfg ?

In the E60goodies.zip I didn't find anything about it.
Can you help me ? ???

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on September 04, 2015, 10:05:01 am
Hi to everybody.
Just "upgraded" my E30bx to E60, following the instruction provided.
I changed the conf.cfg file in the following directories:
FlashFS\system\appcore.d\config.d\conf.cfg
FlashFS\system\services.d\config.d\conf.cfg
FlashFS\system\ui.d\config.d\conf.cfg

What about the:
FlashFS\system\service\appcore.d\config.d\conf.cfg ?

In the E60goodies.zip I didn't find anything about it.
Can you help me ? ???

Please check this: https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/msg744366/#msg744366 (https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/msg744366/#msg744366)
I upgrade my camera from E30bx to E60bx, in attachment 2 or 3 post under last one you have my all conf.cfg
But I didnt touch conf.cfg from "FlashFS\system\service\appcore.d\config.d\conf.cfg", where do you red about modification this?



My question is, could someone write oryginal text from conf.cfc from E4? I have to send it back to flir but lost original conf.cfc
Is needet to change time to old on my PC when I will put conf.cfc on my camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 04, 2015, 05:07:20 pm
I do not think anyone else's conf file would work, since each one is encrypted with its own  camera-specific key and then signed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 04, 2015, 06:12:29 pm
@ Jumbo,

Just send it back to FLIR as it is (hacked). FLIR do not care and just re flash it to the latest firmware and 80x60 resolution.

That is, of course, if the fault is not due to a botched hack.... In which case you will possibly get charged for the repair. Even if you were to install the original Conf file FLIR can see that the file system has been played with.

What is the fault  on the camera ?

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on September 05, 2015, 08:30:09 pm
I do not think anyone else's conf file would work, since each one is encrypted with its own  camera-specific key and then signed.

I would like only change customs to default


@ Jumbo,

Just send it back to FLIR as it is (hacked). FLIR do not care and just re flash it to the latest firmware and 80x60 resolution.

That is, of course, if the fault is not due to a botched hack.... In which case you will possibly get charged for the repair. Even if you were to install the original Conf file FLIR can see that the file system has been played with.

Aurora

I'm from west Europe and camera will be send to Estonia, maybe there is different?

@ Jumbo,

What is the fault  on the camera ?

Aurora

Strange temperature if I compare with my new E30bx and E4 non hacked from my friend, the temperature sometimes is 4 or 5 degrees more. I thing is problem with calibration. I had this problem when I bought it more then one year ago and Flir in that time recalibrated E4 for me but maybe not too god.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 05, 2015, 11:39:21 pm
The E4 is not temperature stabilised and relies upon an offset table to compensate for the drift in the microbolometer at differing ambient temperatures. The offset table is generic across all cameras and not 'tuned' to a particular microbolometers characteristics. FLIR advised me that some cameras will behave better than others at differing ambient temperatures. The table is centred on a microbolometer die temperature of 30 Degrees C.

5 degrees C is quite an error but common as you try to measure low temperatures approaching or below 0 Degrees C.

If FLIR have already carried out calibration on your camera since manufacture, it suggests you specific camera may be suffering a hardware related inaccuracy issue. As you will see above though, the E4 is not exactly an accurate piece of radiometric thermal imaging equipment but it should meet the basic spec at the stated ambient temperature. For accuracy, the offset table needs to be a custom map for a particular camera or the microbolometer needs to be temperature stabilised as in the case of my PM series cameras that used a Peltier element and closed loop stabilisation system.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 06, 2015, 11:26:54 am
The table is centred on a microbolometer die temperature of 30 Degrees C.

It's possible, that Flir heat the microbolometer in low-cost cameras to 30 Degrees C?
After power-up the camera, there is a few minutes an asterik before the temperature values on the display.

After the manuell shut down the camera is a long time in standby modus (>30min).
In my E40 there is inside a red LED, visible through the SD card slot, which glow in standby modus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 06, 2015, 12:46:12 pm
@Tomas123

Not exactly.... The microbolometer is not actively heated. The microbolometer generates its own internal heat as a result of the on die electronics (ROIC etc) this self generated heat normally raises the die temperature to approximately 30 Degrees C. I say approximately as there is no control over the temperature. It just settles at an equilibrium point but this could be 28C or 32C, it cannot be held stable.

The offset table was centred on 30degrees C as that is the natural operating temperature of the die at normal ambient temperatures of around 20 Degrees C.

The reason for the tilde symbol next to the temperature reading after start-up is that the microbolometer die will be at ambient and needs time for its die to rise in temperature to the equilibrium point of around 30C. Until it hits that equilibrium the readings are not considered accurate as the offset table is not able to compensate.

All of the above comes from direct discussions with FLIR  ;)

With regard to the power down sequence on the camera. The camera drops back to a low power standby mode that facilitates a fast start. After a period of time the camera drops back to the full sleep mode that consumes minimal power. It takes longer to start from sleep as it is a cold boot rather than a warm boot from standby. It's very much like modern laptop behaviour.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 06, 2015, 02:16:57 pm
thank you for your clarification  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 06, 2015, 07:37:55 pm
I recall there is a http web page on E4 where you can read temperature from a few temp sensors in the camera. Should also be readable via telnet session. The stock e4 does not have the web folder , it can be just copied to it, the source was provided somewhere in this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 06, 2015, 07:53:35 pm
Most microbolometer based thermal cameras contain the following temperature sensors.....

1. Chassis temperature
2. Microbolometer temperature (at least 2 sensors normally used)
3. FFC shutter flag temperature (or the air around said flag)
4. If a Germanium lens is present ... The lens temperature
5. If a Peltier temperature stabiliser is present ... Hot and cold sides of the Peltier element.

The cameras radio metric temperature measurement routines need much of this sensor data in order to provide accurate and repeatable temperature measurements.

For those wondering why the temperature of a Germanium lens is needed....Germanium changes its transmission spec as its temperature rises. The greater the temperature the lower the transmission percentage until at 100 degrees C it is almost opaque to thermal IR wavelengths. The effect only really starts to become an issue when the lens temperature rises above 50 Degrees C though.

In situations where the Germanium lens is exposed to very high temperatures, such as a furnace, steps are taken to cool the lens assembly. Cooled Air or fluid cooling lens jackets are commonly used.
Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 06, 2015, 08:03:28 pm
Aurora, you should write a book, man. I would certainly buy one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on September 07, 2015, 08:13:19 am
Most microbolometer based thermal cameras contain the following temperature sensors.....

1. Chassis temperature
2. Microbolometer temperature (at least 2 sensors normally used)
3. FFC shutter flag temperature (or the air around said flag)
4. If a Germanium lens is present ... The lens temperature
5. If a Peltier temperature stabiliser is present ... Hot and cold sides of the Peltier element.

The cameras radio metric temperature measurement routines need much of this sensor data in order to provide accurate and repeatable temperature measurements.

For those wondering why the temperature of a Germanium lens is needed....Germanium changes its transmission spec as its temperature rises. The greater the temperature the lower the transmission percentage until at 100 degrees C it is almost opaque to thermal IR wavelengths. The effect only really starts to become an issue when the lens temperature rises above 50 Degrees C though.

In situations where the Germanium lens is exposed to very high temperatures, such as a furnace, steps are taken to cool the lens assembly. Cooled Air or fluid cooling lens jackets are commonly used.
Aurora


Interesting, I recall seeing a very expensive TI system on a drying furnace which was monitoring for ignited material on the output of the dryer. It had an air blower creating a narrow curtain of air just in front of the camera (though not pointing at the camera). I assume this was to prevent heating of the lens by convection?

(Also +1 to the book suggestion)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on September 07, 2015, 08:24:33 am
For those wondering why the temperature of a Germanium lens is needed....Germanium changes its transmission spec as its temperature rises. The greater the temperature the lower the transmission percentage until at 100 degrees C it is almost opaque to thermal IR wavelengths. The effect only really starts to become an issue when the lens temperature rises above 50 Degrees C though.

In situations where the Germanium lens is exposed to very high temperatures, such as a furnace, steps are taken to cool the lens assembly. Cooled Air or fluid cooling lens jackets are commonly used.
Aurora
That sounds like a pretty big disadvantage... are there any advantages to using Germanium compared to, for example, chalcogenide glass as found in the E4? Does it offer higher optical quality?

At least Umicore's advertising (http://eom.umicore.com/en/infrared-optics/blanks/#GASIR (http://eom.umicore.com/en/infrared-optics/blanks/#GASIR)) certainly makes their chalcogenide glass material sound far superior to Germanium.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on September 07, 2015, 09:24:52 am
Strange temperature if I compare with my new E30bx and E4 non hacked from my friend, the temperature sometimes is 4 or 5 degrees more. I thing is problem with calibration. I had this problem when I bought it more then one year ago and Flir in that time recalibrated E4 for me but maybe not too god.

Not being funny, but have you setup the camera with the same parameters? Emissivity, Tref etc?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on September 10, 2015, 10:54:16 am
Did the test lens X3 on Flir e5. Works. Not available E4 with friends.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2015, 01:54:21 pm
Uho,

Very nice work  :-+

It is such a pity that FLIR does not give user access to the image reversal function in order to correct the lens inversion. Most thermal cameras have the feature but few provide it as a menu option.

Aurora
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on September 10, 2015, 02:12:48 pm
I was able to make the lens, without flip the image only X2. If more than the increase - or flips, or loss of sensitivity.
Yes. The menu is do not have enough to flip image.
I tested it on Flir E5. Without camera. Its dimensions are different from the E4. In the company I have not found such a thermal imager. Who knows about the different versions of the E5? Do they really are different?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on September 10, 2015, 02:15:21 pm
I was able to make the lens, without flip the image only X2. If more than the increase - or flips, or loss of sensitivity.
Yes. The menu is do not have enough to flip image.
I tested it on Flir E5. Without camera. Its dimensions are different from the E4. In the company I have not found such a thermal imager. Who knows about the different versions of the E5? Do they really are different?
Do you mean i5?

Yes, it can be hacked to the i7 (either 120x120 or 140x140 depending on generation). The actual microbolometer inside is like 280x280
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on September 10, 2015, 02:30:36 pm
Yes. Thank you. Indeed I5. I was told E5. I ignored the letter. I had a little time .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MikaJ on September 11, 2015, 08:11:18 am
Thanks for all that have worked hacking E4! Just bought from Farnell this week one and in 15minutes it was upgraded with Fubar instructions without any problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on September 12, 2015, 04:47:20 am
I've taken some photos with the MSX distance set incorrectly and the optical and thermal images do not line up.

Is there any way to fix it in FLIR Tools?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 12, 2015, 05:31:20 am
You can try BFIC

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg610799/#msg610799 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg610799/#msg610799)

I do not think FLIR Tools has adjustment for MSX offset.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fubar.gr on September 12, 2015, 09:47:36 am
Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrweek on September 15, 2015, 02:39:58 pm
I upgrade my cam successfully with rom E4 1.2L 2.3.0, Thanks for the excellent information.
My Question is the watermark “flir” in the lower left corner is missing after the upgrade,
but some people posted the photos in forum, the watermark is still there although the cam is upgraded.
I wonder to know can I control the watermark display on the screen and how ?
Thanks a lot ^i^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 15, 2015, 03:53:48 pm
I've taken some photos with the MSX distance set incorrectly and the optical and thermal images do not line up.

Is there any way to fix it in FLIR Tools?

I would look inside the jpg-binaries and patch the (constant) hex values for distance in the exif header

with exiftool you can watch two flir distance parameters
 
Code: [Select]
$ exiftool -focus*  FLIR0080.jpg
Focus Step Count                : 70
Focus Distance                  : 0.0 m
I think, that "Focus Distance" is zero by the fixed focus camera Ex

For Flir Exx I wrote here something to this values:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24224.html#msg24224 (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,4898.msg24224.html#msg24224)
(http://u88.n24.queensu.ca/exiftool/forum/index.php?action=dlattach;topic=4898.0;attach=657)

the simplest way, to found the correct byte sequence is exiftool -v5
Code: [Select]
$ exiftool -v5  FLIR0080.jpg | grep -B300  -i focus
  | | FilterSerialNumber =
  | | - Tag 0x021c (32 bytes, string[32]):
  | |     041c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
  | |     042c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
  | | PlanckO = -7652
  | | - Tag 0x0308 (2 bytes, int16s[1]):
  | |     0508: 1c e2                                           [..]
  | | PlanckR2 = 0.0276008248329163
  | | - Tag 0x030c (4 bytes, float[1]):
  | |     050c: 20 1b e2 3c                                     [ ..<]
  | | RawValueMedian = 12444
  | | - Tag 0x0338 (2 bytes, int16u[1]):
  | |     0538: 9c 30                                           [.0]
  | | RawValueRange = 624
  | | - Tag 0x033c (2 bytes, int16u[1]):
  | |     053c: 70 02                                           [p.]
  | | DateTimeOriginal = ...R..
  | | - Tag 0x0384 (10 bytes, undef[10]):
  | |     0584: e5 c2 9c 52 2e 02 00 00 00 00                   [...R......]
  | | FocusStepCount = 70
  | | - Tag 0x0390 (2 bytes, int16u[1]):
  | |     0590: 46 00                                           [F.]
  | | FocusDistance = 0


You have luck. FocusDistance has a fixed byte offset to the constants PlanckO / PlanckR2.
It' simple to patch this values in a batch script.

more informations about the tag positions in the exif header you get from exiftool source code
http://cpansearch.perl.org/src/EXIFTOOL/Image-ExifTool-10.00/lib/Image/ExifTool/FLIR.pm (http://cpansearch.perl.org/src/EXIFTOOL/Image-ExifTool-10.00/lib/Image/ExifTool/FLIR.pm)
scroll down to 0x390 ff
Code: [Select]
# FLIR camera record (ref PH)
%Image::ExifTool::FLIR::CameraInfo = (
    GROUPS => { 0 => 'APP1', 2 => 'Camera' },
    PROCESS_PROC => \&Image::ExifTool::ProcessBinaryData,
    FIRST_ENTRY => 0,
    NOTES => q{
        FLIR camera information.  The Planck tags are variables used in the
        temperature calculation.  See
        L<http://u88.n24.queensu.ca/exiftool/forum/index.php?topic=4898.msg23972#msg23972>
        for details.
    },
    0x00 => {
        # use this tag only to determine the byte order
        # (the value should be 0x0002 if the byte order is correct)
        Name => 'CameraInfoByteOrder',
        Format => 'int16u',
        Hidden => 1,
        RawConv => 'ToggleByteOrder() if $val >= 0x0100; undef',
    },
    # 0x02 - int16u: image width
    # 0x04 - int16u: image height
    # 0x0c - int32u: image width - 1
    # 0x10 - int32u: image height - 1
    0x20 => { Name => 'Emissivity',                   %float2f },
    0x24 => { Name => 'ObjectDistance', Format => 'float', PrintConv => 'sprintf("%.2f m",$val)' },
    0x28 => { Name => 'ReflectedApparentTemperature', %floatKelvin },
    0x2c => { Name => 'AtmosphericTemperature',       %floatKelvin },
    0x30 => { Name => 'IRWindowTemperature',          %floatKelvin },
    0x34 => { Name => 'IRWindowTransmission',         %float2f },
    # 0x38: 0
    0x3c => {
        Name => 'RelativeHumidity',
        Format => 'float',
        ValueConv => '$val > 2 ? $val / 100 : $val', # have seen value expressed as percent in FFF file
        PrintConv => 'sprintf("%.1f %%",$val*100)',
    },
    # 0x40 - float: 0,6
    # 0x44,0x48,0x4c: 0
    # 0x50 - int32u: 1
    # 0x54: 0
    0x58 => { Name => 'PlanckR1', %float8g }, #1
    0x5c => { Name => 'PlanckB',  %float8g }, #1
    0x60 => { Name => 'PlanckF',  %float8g }, #1
    # 0x64,0x68,0x6c: 0
    0x070 => { Name => 'AtmosphericTransAlpha1', %float6f }, #1 (value: 0.006569)
    0x074 => { Name => 'AtmosphericTransAlpha2', %float6f }, #1 (value: 0.012620)
    0x078 => { Name => 'AtmosphericTransBeta1',  %float6f }, #1 (value: -0.002276)
    0x07C => { Name => 'AtmosphericTransBeta2',  %float6f }, #1 (value: -0.006670)
    0x080 => { Name => 'AtmosphericTransX',      %float6f }, #1 (value: 1.900000)
    # 0x84,0x88: 0
    # 0x8c - float: 0,4,6
    0x90 => { Name => 'CameraTemperatureRangeMax', %floatKelvin },
    0x94 => { Name => 'CameraTemperatureRangeMin', %floatKelvin },
    0x98 => { Name => 'UnknownTemperature1', %floatKelvin, Unknown => 1 }, # 50 degrees over camera max
    0x9c => { Name => 'UnknownTemperature2', %floatKelvin, Unknown => 1 }, # usually 10 or 20 degrees below camera min
    0xa0 => { Name => 'UnknownTemperature3', %floatKelvin, Unknown => 1 }, # same as camera max
    0xa4 => { Name => 'UnknownTemperature4', %floatKelvin, Unknown => 1 }, # same as camera min
    0xa8 => { Name => 'UnknownTemperature5', %floatKelvin, Unknown => 1 }, # usually 50 or 88 degrees over camera max
    0xac => { Name => 'UnknownTemperature6', %floatKelvin, Unknown => 1 }, # usually 10, 20 or 40 degrees below camera min
    0xd4 => { Name => 'CameraModel',        Format => 'string[32]' },
    0xf4 => { Name => 'CameraPartNumber',   Format => 'string[16]' }, #1
    0x104 => { Name => 'CameraSerialNumber',Format => 'string[16]' }, #1
    0x114 => { Name => 'CameraSoftware',    Format => 'string[16]' }, #1/PH (NC)
    0x170 => { Name => 'LensModel',         Format => 'string[32]' },
    # note: it seems that FLIR updated their lenses at some point, so lenses with the same
    # name may have different part numbers (eg. the FOL38 is either 1196456 or T197089)
    0x190 => { Name => 'LensPartNumber',    Format => 'string[16]' },
    0x1a0 => { Name => 'LensSerialNumber',  Format => 'string[16]' },
    0x1b4 => { Name => 'FieldOfView',       Format => 'float', PrintConv => 'sprintf("%.1f deg", $val)' }, #1
    # 0x1d0 - int16u: 0,12,24,25,46
    # 0x1d2 - int16u: 170,180,190,380,760,52320
    0x1ec => { Name => 'FilterModel',       Format => 'string[16]' },
    0x1fc => { Name => 'FilterPartNumber',  Format => 'string[32]' },
    0x21c => { Name => 'FilterSerialNumber',Format => 'string[32]' },
    0x308 => { Name => 'PlanckO',           Format => 'int32s' }, #1
    0x30c => { Name => 'PlanckR2',          %float8g }, #1
    0x338 => { Name => 'RawValueMedian',    Format => 'int16u', Groups => { 2 => 'Image' } },
    0x33c => { Name => 'RawValueRange',     Format => 'int16u', Groups => { 2 => 'Image' } },
    0x384 => {
        Name => 'DateTimeOriginal',
        Description => 'Date/Time Original',
        Format => 'undef[10]',
        Groups => { 2 => 'Time' },
        RawConv => q{
            my $tm = Get32u(\$val, 0);
            my $ss = Get32u(\$val, 4) & 0xffff;
            my $tz = Get16s(\$val, 8);
            ConvertUnixTime($tm - $tz * 60) . sprintf('.%.3d', $ss) . TimeZoneString(-$tz);
        },
        PrintConv => '$self->ConvertDateTime($val)',
    },
    0x390 => { Name => 'FocusStepCount', Format => 'int16u' },
    0x45c => { Name => 'FocusDistance',  Format => 'float', PrintConv => 'sprintf("%.1f m",$val)' },
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 15, 2015, 03:57:44 pm
two years ago we discussed in the imagemagick forum about a best fit subimage search:
overlay a thermal with a visible image  ;)
http://studio.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23318#p97884 (http://studio.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23318#p97884)
(http://www.fmwconcepts.com/misc_tests/compare/result-0.png)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 15, 2015, 06:03:56 pm
My Question is the watermark “flir” in the lower left corner is missing after the upgrade,
but some people posted the photos in forum, the watermark is still there although the cam is upgraded.
I wonder to know can I control the watermark display on the screen and how ?
Thanks a lot ^i^
Why do you want the logo? It just occupies valuable space.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mrweek on September 16, 2015, 02:06:28 am
Why do you want the logo? It just occupies valuable space.
Because other guy's posts have the watermark, I am questioning is there something go wrong or my cam is angry about the upgrade :-[ 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 16, 2015, 02:39:47 am
There may be different versions of the files in the update packages. Some may have the logo patched or disabled, others may not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: marcins on September 17, 2015, 08:41:43 am
Hi all
Got today my E4 from PASS, firmware 2.3.0 +5% discount with voucher
and not only :)
what was in the box :
E4 with battery, charger, and usb cable,call certyfikate,
+ at no extra cost!!!
Amazon Gift Voucher £50
E series Pouch £21.60
E series Battery(extra one) £66
E series Car charger £43.20

is this normal and everyone get extrass??
very impressive first order there:)

now is charging and will do hack on it:)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 17, 2015, 10:49:13 am
FLIR operate specials that include the items you listed.

The USA normally get the best deals first but the E4 has been out For some time so we are now seeing the specials here in the UK. IMHO PASS are a very good company with which to do business. They treated me well in the past.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nightsquint on September 18, 2015, 12:12:50 pm
Greetings,

Another happy owner of a brand new (now hacked) E4 (bought two weeks ago), thanks to Mike, Fubar, and countless others who made all the hacks work  :clap:  :-+

Model: E4 1.2L
Serial: 6396xxxx
Part: 63901-0101
Software: 2.3.0
Last cal: July 2015

.info.temporalMk double 13.300059 (quite good)

See attached for dead pixels. E4 screen photographed using a mobile phone camera.
The dead pixels (dark spots) flicker and some supposedly "dead" pixels come to "live" able to register at higher thermal inputs.
But then, other "dead" pixels are really really dead (no amount of resuscitation & slapping helps).

Cheers  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 18, 2015, 12:25:54 pm
Those dead pixels are normal and your camera isn't bad at all. The dead pixel map and correction sort all this out for you. The normal spec of a microbolometer is 99.8% active pixels with 99.9% active on the more expensive arrays.

DO NOT SLAP YOUR E4 ! This isn't a kids toy !

Doing so can actually create new dead pixels, requiring the dead pixel map to be re written.

Fraser

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nightsquint on September 18, 2015, 01:19:02 pm
Completely agree with you Fraser...those resuscitation & slapping were meant as a joke  :-DD (reminds me of analog pressure gauges)
I wonder whether dead pixels are inevitable defects during production, not to mention new dead pixels spring up during the course of the detector's lifetime...
Anyway, I'm extremely happy with my E4 and now trying to figure out how to video stream via RNDIS without lugging a notebook & running Flirtool.
Earlier in this thread someone mentioned using rasberry pi of some sorts...I guess I better start digging...

Cheers   :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 18, 2015, 02:31:15 pm
@nightsquint.

You were only joking.... :phew: You would be amazed at how many times someone has brought a piece of equipment to me for repair and said that they had given it a good shake and thump yet it was still faulty  :o

Dead pixels are a production defect, but an acceptable one. Digital cameras also have defects in their CCD or CMOS arrays. They are also dealt with using a dead pixel map and correction algorithms. New dead pixels can appear over time but the dead pixel map can be updated to capture them. The microbolometer is pretty reliable which is why FLIR give you a 10 year warranty on that component. I have only one camera out my collection of 42 that has new dead pixels. It is my TESTO 880 and that has 3 visible dead pixels on its Amorphous Silicon array. I would not worry too much about issues with the FLIR VOX microbolometer. It is decent quality.

The E4 is an amazing little camera I hope you get much use and enjoyment from it.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on September 18, 2015, 02:49:48 pm
Hi all!

Sorry for being absent for so long, had reasons.

About your new camera's dead pixels.

If the calibration procedure is performed well, there should not be any dead pixel 'visible' normally, even after applying the hack.
I mean, they are there, but not visible because they are interpolated according the dead pixel map!

So if the pixels you can see are dead and visible normally after applying the hack, something is definitely wrong with your dead pixel map file!

I would apply for a replacement in such the case.

However, if you manually removed the dead pixel map file or switched this dead pixels interpolation function off, then you can see actual dead pixels for your camera.

So a question to you: how exactly you made the pixels visible, or they are visible after the hack?

thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nightsquint on September 18, 2015, 03:37:50 pm
@Fraser,

Thanks for the insights. But really, in this day & age, I would've thought microbolometer productions have reached that stage with no dead pixels although microbolometers are technically more difficult (hence more costly than CCD / CMOS) to produce due to the technology involved. Guess we're not there yet.


@Solare,

Yes you were right. I did turn off the dead pixel masking through telnet, just to take a peek inside the naked detector for flaws ;D
With the mask on, it's picture perfect (no visible dead pixels).

Cheers  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on September 18, 2015, 04:33:01 pm
aha,

I thought you did this :)

Which command do you use for this check?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nightsquint on September 18, 2015, 05:24:51 pm
@Solare,

Something like...rset .???CombGainDeadMap??? Either set to false or true to show or hide dead pixels.
Sorry I do not remember as I am away from my computer now.
But I found it on this thread, way back then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: marcins on September 19, 2015, 11:50:07 pm
Thx for all to make this Hack Possible

all works great ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: murcielago on September 20, 2015, 12:16:56 pm
I found a flir E30 but the firmware version is much older than the one campos posted.

would it still work?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 21, 2015, 07:50:26 am
update your firmware and follow this threads


Resolution upgrade Flir E30/E40/E50 to E60 and i3/i5 to i7
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
  you must edit your crc01 inside E60 goodies.zip:
    https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)
  a nice history from E30 (without WLAN)  to E60 (with WLAN)
    https://www.eevblog.com/forum/profile/?area=showposts;u=89829 (https://www.eevblog.com/forum/profile/?area=showposts;u=89829)
   and https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266)
watch for alphabetically order
   https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380267/#msg380267 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380267/#msg380267)
i3/i5: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)

and
https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/testgear/flir-e40-upgrade-configuration/)
Title: Flir E5 Thermal imaging camera teardown
Post by: lou on September 22, 2015, 02:20:55 am
Hello,
 I have an E5 and would like to to improve the resolution. Fubar suggested I search this thread for the correct files and method.  To Quote" For your E5 you’ll have to follow the relevant guide in the EEVblog forum."  I have searched and not been successful to this point. Can anyone point me in the correct direction?  He said that his method for the E4 will not work because some files are different. 

Thanks, Lou
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 22, 2015, 02:41:26 am
This post claimed support for E5

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg534297/#msg534297)

You may need to investigate further what exactly that was about
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on September 25, 2015, 01:29:23 pm
For those who want to realign MSX - there's an easier way to do it without needing to reverse engineer the FLIR file format  :-+
You can also use it to add MSX to pictures from cameras without MSX (ie. Therm-App converted images)

What you need:

1. In FLIR Tools, activate the FLIR Tools Plus trial (if you need more time for your trial, there's a painfully obvious way to defeat the 30day limit). Make sure that Word Reporting is activated (press "i" under license options).

(http://puu.sh/knBvb/c01f1d440d.png)

2. In Word, open the FLIR Tools+ tab and press "IR Viewer"

(http://puu.sh/knBAn/4c259bcdc4.png)

3. Right click -> Open and open your Radiometric JPEG. Then, select "Image Fusion"

(http://puu.sh/knBDJ/86ca30c9fe.jpg)

4. Press "Open Photo" to use a alternative photo or to load your own one for a non-MSX camera. Otherwise, it's obvious from here.

Make sure your alignpoints are spread evenly across the image for the most optimal alignment. (I know mine are not spread out. Do as I say, not as I do.)

(http://puu.sh/knBXk/25587f042e.jpg)

5. You can press "Reference Point X" buttons to zoom in.

(http://puu.sh/knBLw/62edfa0b49.jpg)

6. Right-click -> Save As to save a Radiometric JPG with your new alignment data built in. This can be opened in FLIR Tools.

(http://puu.sh/knC0d/f025283822.jpg)

7. Volia! You just aligned your MSX / added MSX to a non-MSX image!

(http://puu.sh/knCbV/375eecc2a9.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 25, 2015, 08:03:36 pm
A good hint.
I forgot to mention this feature of the word plugin.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 26, 2015, 04:13:38 pm
We know, how to remove the flir logo in the E4 images.

But by using Flir Tools we get the flir logo back.

After using mediaextract (http://panzi.github.io/mediaextract/ (http://panzi.github.io/mediaextract/) ) I'm sure, that the logo is a PNG Byte sequence in the dll
C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll

Code: [Select]
>build-win32\mediaextract.exe --formats=image "C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll"
Extracting 0x00000000 ... 0x001a6120 (1.64871 MB) from C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll
Writing 16.7119 kB to .\Flir.Modules.Common.dll_0017bf29.png
Extracted 1 file of 16.7119 kB size.

$ identify  Flir.Modules.Common.dll_0017bf29.png
Flir.Modules.Common.dll_0017bf29.png PNG 1029x353 1029x353+0+0 8-bit sRGB 17.1KB 0.000u 0:00.000

as attachment the extracted file
 
Anybody knows, how to replace the embedded logo png in the dll with a transparent image of same pixel size (but smaller file size).
Code: [Select]
$ convert -size 1029x353 xc:none 1029x353.png
A simple binary search and replace doesn't work (after then I have the same dll size but wrong dll checksum??)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on September 30, 2015, 12:35:19 pm
Hello, wanted to ask a quick question. My mate is interested in buying  a thermal camera.
Salesman was talking up the C2 pocket one. I keep suggesting e4 for hackability. Anyone tried hacking C2? i assume same/similar hardware/firmware?

Also for streaming to pc, is flirtool adequate, etc.

Keysight have a thermal camera, but not sure who makes that one.

Cheers.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 30, 2015, 03:38:44 pm
C2 is only 80x60 resolution and so limited for detail work. The E4 is a completely different beast. Far superior in all respects, even at its native 80x60 resolution. The fact that is may be changed to 320x240 resolution makes it the best value complete thermal imaging camera available today. The Thermal App also appears to be a decent camera but you have to use it with a host phone so is not IMHO as ergonomic. I own 42 thermal cameras, most are professional Industrial models, but I would not be without my little E4. It  is a very nice camera, and very convenient to have around.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 01, 2015, 01:36:34 am
Hello, wanted to ask a quick question. My mate is interested in buying  a thermal camera.
Salesman was talking up the C2 pocket one. I keep suggesting e4 for hackability. Anyone tried hacking C2? i assume same/similar hardware/firmware?

Also for streaming to pc, is flirtool adequate, etc.

Keysight have a thermal camera, but not sure who makes that one.

Cheers.
C2 uses the lepton sensor, so the sensor is natively 80x60, and therefore cannot be hacked.

What is your mate going to use it for?

Depending on your budget, it may be worth considering a E40 or a used/refurb E30 or E40 - they can be hacked to E60 spec for the same if not better image quality than the Therm-App, manual focus and also the ergonomics and durability of the E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 01, 2015, 01:42:43 pm
I made a universal holder for the lens. You can put a macro lens and a zoom lens. Holders of Series Flir E are slightly different from the holders of the series I .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 01, 2015, 02:34:36 pm
Nice work, as ever, Uho

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 01, 2015, 06:40:02 pm
More photos holders. Made of ABS.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 05, 2015, 06:39:08 am
Finally found info on the Lens in the FLIR E4/5/6/8. I've searched before and all of the datasheets neglect to mention the f/stop of the lens. Luckily this (http://www.ivytools.com/v/flir-brochures/ex-series/flir-e8-technical-data.pdf) document does.

The lens is f/1.5 - this explains the relatively bad performance at low temperature differentials, but also a very nice hyperfocal distance (amount of distance that's in focus at one time, allowing for the "focus-free" operation) and also the ability to view high temperatures without switching to a low-gain mode or adding a mechanical high temp filter.

Compared with the f/1.3 lenses on the Exx series, this means that the Ex series lens has 75% of the IR transmission of the Exx series based on f-stop alone. However the chalcogenide glass used in the Ex lens may also have different transmission properties compared to the germanium lens in the Exx series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Detsorgsekalf on October 05, 2015, 12:43:47 pm
Greetings
Can you tell me how to remove FLIR logo and other staff from thermal images in jpeg?
I use Flir i3 (with i7 hack).
Thank you
Yauheni (from Belarus)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on October 06, 2015, 11:25:38 am
Hello quick question, can the flir tools do video or time lapse? to see which parts heatup, how long etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pelule on October 06, 2015, 12:39:50 pm
Just a short update.
Have upgradet my Flir-I3 to Flir-I7 on Win-7/64-Bit without any problem.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 06, 2015, 10:37:21 pm
Hello quick question, can the flir tools do video or time lapse? to see which parts heatup, how long etc.
FLIR Tools supports radiometric video, however I don't know how you can capture it from the E4. There's another thread around here about streaming raw data from the E4, however I don't think anyone has gotten that into the FLIR .seq (sequence / video) file format yet.

Here's a example that I made of what you can do;
https://youtu.be/AtyIH_8M808

If you want live radiometric video streaming and recording, then perhaps consider paying a bit more for a E30 or E40 (then hacking to E60), as those natively support radiometric video streaming over USB to FLIR Tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 07, 2015, 01:55:22 am
This is a link to a post with a Linux program for radiometric video streaming for E4 with instructions

https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg748735/#msg748735 (https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg748735/#msg748735)

Also the doctored E4 can do time lapse shots on its own but I believe the smallest time interval between shots that can be configured is 15 sec.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 07, 2015, 03:15:14 am
Does anyone have any information on the FLIR T600? Someone I know has been eyeing a very good deal for a T600.

Since the FLIR T600 is 480 x 360, do you think it would be hackable to 640x480? As far as I know FLIR doesn't make a 480 x 360 sensor. I would imagine the software on the Txxx isn't that different to that of the Exx series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 07, 2015, 07:17:51 am
Hello quick question, can the flir tools do video or time lapse? to see which parts heatup, how long etc.

as bud said the E4 can


(1) save direct short *.seq files in memory

see "[15.] save a radiometric 16 bit video as *.seq "
in my link list: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)


(2) steam RAW video under Linux/OS X  with patched USB driver
see my link list: https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604 (https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604)

with the workflow from encryptededdy you can convert every RAW stream (seek, opgal, flir)  into a Flir Tools *.seq:
video:
https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg764924/#msg764924 (https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg764924/#msg764924)

single raw frame:
https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg757076/#msg757076 (https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg757076/#msg757076)
sample: https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg756988/#msg756988 (https://www.eevblog.com/forum/testgear/opgal-therm-app-first-smartphone-thermal-imager-to-ship/msg756988/#msg756988)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 07, 2015, 03:37:52 pm
Does anyone have any information on the FLIR T600? Someone I know has been eyeing a very good deal for a T600.

Since the FLIR T600 is 480 x 360, do you think it would be hackable to 640x480? As far as I know FLIR doesn't make a 480 x 360 sensor. I would imagine the software on the Txxx isn't that different to that of the Exx series.

My sources have told me this is indeed the case. Have also been on the lookout for a T600 as they do tend to go for cheap!

FYI, I've hacked my T620 to T640 features as it was already at 640x480.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 08, 2015, 12:12:54 am
Does anyone have any information on the FLIR T600? Someone I know has been eyeing a very good deal for a T600.

Since the FLIR T600 is 480 x 360, do you think it would be hackable to 640x480? As far as I know FLIR doesn't make a 480 x 360 sensor. I would imagine the software on the Txxx isn't that different to that of the Exx series.

My sources have told me this is indeed the case. Have also been on the lookout for a T600 as they do tend to go for cheap!

FYI, I've hacked my T620 to T640 features as it was already at 640x480.
Do you think the hardware is the same as the T650sc? Since that camera does radiometric video recording straight to memory card, I was wondering if the T6xx could do it too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 08, 2015, 07:48:12 am
Does anyone have any information on the FLIR T600? Someone I know has been eyeing a very good deal for a T600.

Since the FLIR T600 is 480 x 360, do you think it would be hackable to 640x480? As far as I know FLIR doesn't make a 480 x 360 sensor. I would imagine the software on the Txxx isn't that different to that of the Exx series.

My sources have told me this is indeed the case. Have also been on the lookout for a T600 as they do tend to go for cheap!

FYI, I've hacked my T620 to T640 features as it was already at 640x480.
Do you think the hardware is the same as the T650sc? Since that camera does radiometric video recording straight to memory card, I was wondering if the T6xx could do it too.

I don't believe so, although I could be wrong. I have an older model of the T620 (non-MSX version), which has different hardware thus cannot be upgraded to include the newer features UltraMax etc. I believe it could be the case with the newer version however, unless of course it is a different card reader/writer hardware-wise.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 09, 2015, 03:03:09 pm
some new informations:

I found here a very interesting Flir source code, which included all necessary informations for Flir Exif headers (FFF) and calculating temperatures from sensor values:
Quote
    http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=143 (http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=143)
    FLIR GEV Demo Source Code (1.7.0)
    A sample on how eBUS SDK can be used in a IR application.

I wrote details for fff.h and exiftool here:
http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,6763.0.html (http://u88.n24.queensu.ca/exiftool/forum/index.php/topic,6763.0.html)

PvSimpleUISampleDlg.cpp contains all calculations, like tau_atm etc:
Code: [Select]
double PvSimpleUISampleDlg::doCalcAtmTao(void)
{
    double tao, dtao;
    double H, T, sqrtD, X, a1, b1, a2, b2;
    double sqrtH2O;
    double TT;
    double a1b1sqH2O, a2b2sqH2O, exp1, exp2;
    CTemperature C(CTemperature::Celsius);
   
#define H2O_K1 +1.5587e+0
#define H2O_K2 +6.9390e-2
#define H2O_K3 -2.7816e-4
#define H2O_K4 +6.8455e-7
#define TAO_TATM_MIN -30.0
#define TAO_TATM_MAX  90.0
#define TAO_SQRTH2OMAX 6.2365
#define TAO_COMP_MIN 0.400
#define TAO_COMP_MAX 1.000

    H = m_RelHum;                   
    C = m_AtmTemp;
    T = C.Value();        // We need Celsius to use constants defined above
    sqrtD = sqrt(m_ObjectDistance);
    X  = m_X;
    a1 = m_alpha1;     
    b1 = m_beta1;
    a2 = m_alpha2;
    b2 = m_beta2;
   
    if (T < TAO_TATM_MIN)
       T = TAO_TATM_MIN;
    else if (T > TAO_TATM_MAX)
       T = TAO_TATM_MAX;
       
    TT = T*T;
   
    sqrtH2O = sqrt(H*exp(H2O_K1 + H2O_K2*T + H2O_K3*TT + H2O_K4*TT*T));
   
    if ( sqrtH2O > TAO_SQRTH2OMAX )
       sqrtH2O = TAO_SQRTH2OMAX;
       
    a1b1sqH2O = (a1+b1*sqrtH2O);
    a2b2sqH2O = (a2+b2*sqrtH2O);
    exp1    = exp(-sqrtD*a1b1sqH2O);
    exp2    = exp(-sqrtD*a2b2sqH2O);
   
    tao     = X*exp1 + (1-X)*exp2;
    dtao    = -(a1b1sqH2O*X*exp1+a2b2sqH2O*(1-X)*exp2);
    // The real D-derivative is also divided by 2 and sqrtD.
    // Here we only want the sign of the slope! */
                                                         
    if (tao < TAO_COMP_MIN)
        tao = TAO_COMP_MIN;      // below min value, clip

    else if (tao > TAO_COMP_MAX)
    {
        // check tao at 1 000 000 m dist
        tao  = X*exp(-(1.0E3)*a1b1sqH2O)+(1.0-X)*exp(-(1.0E3)*a2b2sqH2O);

      if ( tao > 1.0 )    // above max, staying up, assume \/-shape
          tao = TAO_COMP_MIN;
      else
          tao = TAO_COMP_MAX; // above max, going down, assume /\-shape
    }
    else if ( dtao > 0.0 && m_ObjectDistance > 0.0)
        tao = TAO_COMP_MIN;   // beween max & min, going up, assume \/

    // else between max & min, going down => OK as it is, ;-)

    return( tao);
}


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Le_Bassiste on October 09, 2015, 03:25:01 pm
this
http://www.techpowerup.com/reviews/EVGA/SuperNOVA_G2_650/5.html (http://www.techpowerup.com/reviews/EVGA/SuperNOVA_G2_650/5.html)
gave me a chuckle...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 13, 2015, 02:46:23 pm
Hey all.

I bought a used FLIR i5. The first generation that apparently is 80x80 in resolution. I applied everything in the instructions in the PDF here:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=85490)

After resetting the camera I seem to have a less grainy image, but the crosshair and top-left-measurement is missing. Also, a new menu item was supposed to appear which did not happen.

Anyone else being successful with the first generation i5? What could have gone wrong?

I used a win7 computer to modify the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 13, 2015, 03:28:31 pm
Most mistakes with E4 comes from wrong using crc01, wrong editer and wrong cr/lf.
with another cameras like Exx, ix, Bx you have a risk of copy a wrong config file to the camera

see my link list in signature for further informations
top 20: "Resolution upgrade Flir E30/E40/E50 to E60 and i3/i5 to i7 "

I think, the best way is only edit your config file (see your fpga resolution) and not copy another config to your camera.
see https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)

Code: [Select]
.caps.config.image.settings.fpgaResolution.resIR int32 144
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 13, 2015, 03:47:34 pm
But the first generation i7 is only supposed to support 120x120, should I edit 144 to 120 in that line then?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 13, 2015, 03:59:10 pm
Here is the config.cfg from my i5 as it was from the start:

Code: [Select]
#
# ZCam Radiometric - Measurement active + 1 spot + no isotherm + 1 mbox
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "FLIR i5"
.caps.config.revision text "1.7"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 0
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID 393012482
# CRC01 c92ed0cf

cannot find the line you suggested to change
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 13, 2015, 06:55:31 pm
I bought a used FLIR i5. The first generation that apparently is 80x80 in resolution.
hm, your config file look newer
Code: [Select]
.caps.config.revision text "1.7"and there are no resolution keys inside

I suggest to make a full copy of all your registry keys with rls.exe (connect with ftp).

see
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918)
and edit the path \FlashIFS to your filesystem (like your jpg folder)

then we know all internal keys and the hardware resolution

Code: [Select]
>rls -h
usage: rls [switches] [resource [resource...]]
switches:
       -a <address>  server address (default 127.0.0.1)
       -p <port>     server port (default 0x5678)
       -u <name>     user name
       -w <pw>       password
       -r            list recursive
       -l            list using long format (-ll/-lll for longer)
       -o            list only value without quotes, etc.
       -t            dump complete transparent data (req. -l)
       -f <file>     binary dump of resource value to <file>
       -j <file>     dump transparent data as JPEG <file>
       -i            ignore value hints, print unformatted
       -n            do not copy transparent data
       -s            debug dump complete subscriber data
       -v <ver>      force protocol version <ver>
resource:            resource name or path, or "##<childno>"
long format interpretation:
rwcdrwcdrwcd0p*1 user grp <a> name "value"
||||||||||||||||   |   |   |    |
||||||||||||||||   |   |   |    + resource name
||||||||||||||||   |   |   +----- resource type
||||||||||||||||   |   +--------- owner groupid
||||||||||||||||   +------------- owner userid
|||||||||||||||+----------------- open count
||||||||||||||+------------------ not default value
|||||||||||||+------------------- persistent
||||||||||||+-------------------- num subscribers
|||||||||||+--------------------- delete (other)
||||||||||+---------------------- create (other)
|||||||||+----------------------- write  (other)
||||||||+------------------------ read   (other)
|||||||+------------------------- delete (group)
||||||+-------------------------- create (group)
|||||+--------------------------- write  (group)
||||+---------------------------- read   (group)
|||+----------------------------- delete (owner)
||+------------------------------ create (owner)
|+------------------------------- write  (owner)
+-------------------------------- read   (owner)

http://www.xmailserver.org/wmconsole.html (http://www.xmailserver.org/wmconsole.html)
Quote
rls [KEY/RVAL]            = Lists the current registry key or the specified KEY
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 13, 2015, 09:10:26 pm
I get stuck in that the wmconsole .cab won't install due to "operation failed" from pkgmgr. Anywhere I could find a regular install .exe of that app?

Maybe i need a step-by-step...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 13, 2015, 09:55:51 pm
Sorry, ignore my hint to wmconsole help.

rls.exe is on board
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 06:11:38 am
so i'm logged in via ftp on total commander. How do I run rls.exe on the camera, "command unrecognised" is what I get, I think I still need a more thorough description on how to do things. Yes, I'm a noob when it comes to these things...

by the way, in "/FlashFS/system" I have a file called "fpga_isc0601_120x120_c16.bin". Could that be an indication that my camera has already been hacked to highest res?

Attached is an image diectly off the camera, aimed at my wood stove.

(http://forumbilder.se/ECREU/ir-0034)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on October 14, 2015, 06:11:59 am
Hi all!

A question to Gurus!

Some thermal camera calculate "thermal flux", in form of two functions: Power and PowerLoss. I had opportunity to play with the first function, which calculates power, in BTU/hour*square foot. I converted these unit into Watts per meter2, with the formula found elsewhere, and run some tests with measuring low temp areas, room temperature (22C) and a hot plate. The result of the calculations should be thermal flux from the surface into "absolute zero" space :) More or less it fits the Stefan-Boltzman Law and 4th power of absolute temperature, but I noticed that for low temperature and high temperature, the accuracy is low, error is about 20%. While for the room temperature error in negligible - some 2 percents or below.

Note: this has nothing to do with calibration, RFB, etc., because it merely calculates power of temperature of all and each of the pixels, then summing.

Question: why so?

Possible suggestions:

1. They do not actually use Stefan-Boltzman formula, but instead, use some Plank derived integration over the angle and spectral range. Would be kewl!

2. They apply some "corrections" to account for non uniformity of emissivity over the spherical angle

3. They screwed up...

What you as Guru, know about how Power is calculated in thermal cameras? Power Loss is another story, but still,

if I wanted to calculate power loss, I would calculate Power of the surface in focus, and then rotated camera 180 degrees and calculate Power of the scene onto which my surface is looking. Then I'd use a difference as a result - radiative  power loss. Is this approach valid?

If it is, I am afraid this 20% on the absolute scale error, will be even more important in measuring relative difference... :(

So... you opinions are welcome!

thank you all!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 10:38:51 am

Attached is an image diectly off the camera, aimed at my wood stove.

(http://forumbilder.se/ECREU/ir-0034)

Your image is never out of cam. There are no radiometric datas inside the jpg.
Code: [Select]
>exiftool IR_0034.jpg
ExifTool Version Number         : 9.91
File Name                       : IR_0034.jpg
File Size                       : 15 kB
File Modification Date/Time     : 2015:10:14 12:36:55+02:00
File Access Date/Time           : 2015:10:14 12:36:31+02:00
File Creation Date/Time         : 2015:10:14 12:36:55+02:00
File Permissions                : rw-rw-rw-
File Type                       : JPEG
MIME Type                       : image/jpeg
JFIF Version                    : 1.01
Resolution Unit                 : None
X Resolution                    : 1
Y Resolution                    : 1
Image Width                     : 240
Image Height                    : 240
Encoding Process                : Baseline DCT, Huffman coding
Bits Per Sample                 : 8
Color Components                : 3
Y Cb Cr Sub Sampling            : YCbCr4:2:0 (2 2)
Image Size                      : 240x240
Megapixels                      : 0.058


can you post me a directory listing from your camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 11:02:51 am
Certainly. I finally read the whole post you linked and installed winspc. This is the tree listing from the copy, oddly, some files in the \windows directory failed co copy to the computer, but anyway:

Code: [Select]
Folder PATH listing
Volume serial number is 00000200 180E:9152
C:.
|   conf.cfg
|   Control Panel.lnk
|   Printer.swap
|   tree.txt
|   
+---FlashFS
|   +---system
|   |   |   appcore.exe
|   |   |   appcore_dll.dll
|   |   |   applaunch.dat
|   |   |   appservices.exe
|   |   |   bitapp.exe
|   |   |   bt.exe
|   |   |   bw.pal
|   |   |   bwr.pal
|   |   |   calib.rsc
|   |   |   camtorrent.exe
|   |   |   cemgrc.exe
|   |   |   cetlstub.dll
|   |   |   clientshutdown.exe
|   |   |   cmaccept.exe
|   |   |   commonproxy.dll
|   |   |   common_dll.dll
|   |   |   conmanclient2.exe
|   |   |   conmanclient3.exe
|   |   |   default.rsc
|   |   |   defaultusr.exe
|   |   |   default__gui.rsc
|   |   |   default__services.rsc
|   |   |   default__syslog.rsc
|   |   |   devicedma.dll
|   |   |   dumpcoff.exe
|   |   |   edbgtl.dll
|   |   |   fpga.bin
|   |   |   fpga_c16_2v5.bin
|   |   |   fpga_c25_2v5.bin
|   |   |   fpga_isc0601_120x120_c16.bin
|   |   |   fpga_isc0703_120x120_c16.bin
|   |   |   fpga_isc0703_c16.bin
|   |   |   fpga_isc0703_c25.bin
|   |   |   freeze.exe
|   |   |   ftest.exe
|   |   |   fvd.dll
|   |   |   fvd.exe
|   |   |   gui.exe
|   |   |   gui_common_benchmarking.dll
|   |   |   gui_common_definitions.dll
|   |   |   gui_common_handlers.dll
|   |   |   gui_common_stringresourcehandler.dll
|   |   |   gui_common_unmanageddllimports.dll
|   |   |   gulim.ttf
|   |   |   i2c.exe
|   |   |   i5gen1.txt
|   |   |   iron.pal
|   |   |   kitcrc.exe
|   |   |   kits.exe
|   |   |   level.exe
|   |   |   logo.bmp
|   |   |   mingliu.ttf
|   |   |   msgothic.ttf
|   |   |   nuc.exe
|   |   |   palette.exe
|   |   |   prodapp.exe
|   |   |   prodisapi.dll
|   |   |   prodspec.rsc
|   |   |   pwri2c.exe
|   |   |   rainbow.pal
|   |   |   rclone.exe
|   |   |   rcreate.exe
|   |   |   rdelete.exe
|   |   |   rdump.exe
|   |   |   recall.exe
|   |   |   resmon.exe
|   |   |   restartapp.bat
|   |   |   restree.dll
|   |   |   rfind.exe
|   |   |   rls.exe
|   |   |   rpatch.exe
|   |   |   rreload.exe
|   |   |   rset.exe
|   |   |   rverify.exe
|   |   |   simsun.ttf
|   |   |   span.exe
|   |   |   stats.rsc
|   |   |   stopapp.bat
|   |   |   store.exe
|   |   |   supv.exe
|   |   |   syslog.exe
|   |   |   syslog_intf_dll.dll
|   |   |   taskmgr.exe
|   |   |   tcpconnectiona.dll
|   |   |   tcpipc.dll
|   |   |   torrenterrorcodes.xml
|   |   |   torrenterrorcodes.xsd
|   |   |   torrenterrorcodes.xsl
|   |   |   torrenterrorcodes.xsx
|   |   |   tprls.exe
|   |   |   treeproxy.dll
|   |   |   version.exe
|   |   |   zbitmaps.dll
|   |   |   zstringresources.dll
|   |   |   
|   |   +---appcore.d
|   |   |   +---config.d
|   |   |   |       conf.cfg
|   |   |   |       
|   |   |   \---factory.d
|   |   |           addprocs.rsc
|   |   |           adjust.rsc
|   |   |           palette.rsc
|   |   |           power.rsc
|   |   |           removeprocs.rsc
|   |   |           time.rsc
|   |   |           usb.rsc
|   |   |           
|   |   +---combtabs.d
|   |   |       combtab.appkit
|   |   |       combtab.prodkit
|   |   |       
|   |   +---cs
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---da
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---de
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---el
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---en
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---es-es
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---fi
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---fr
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---gui.d
|   |   |   \---config.d
|   |   |           gui.cfg
|   |   |           
|   |   +---hu
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---it
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---ja
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---kits.d
|   |   |       appkit.rev
|   |   |       confkit.rev
|   |   |       prodkit.rev
|   |   |       
|   |   +---ko
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---maps
|   |   |       ds250C_we.crs
|   |   |       ds250C_we_ap_fi_le.gan
|   |   |       
|   |   +---nb-no
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---nl
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---pl
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---pt-pt
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---ru
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---service
|   |   |   \---appcore.d
|   |   |       +---config.d
|   |   |       |       conf.cfg
|   |   |       |       
|   |   |       \---factory.d
|   |   |               rndis.rsc
|   |   |               
|   |   +---services.d
|   |   |   \---factory.d
|   |   |           buttons.rsc
|   |   |           
|   |   +---stats
|   |   |       AutoLock.log
|   |   |       AutoOff.log
|   |   |       ColorScale.log
|   |   |       DisplayIntensity.log
|   |   |       Emissivity.log
|   |   |       ImageArchive.log
|   |   |       Language.log
|   |   |       MainMenu.log
|   |   |       Material.log
|   |   |       PowerCable.log
|   |   |       ReflectedTemp.log
|   |   |       Reflectivity.log
|   |   |       RemoveAllImages.log
|   |   |       RemoveImage.log
|   |   |       RestoreDefault.log
|   |   |       SDcard.log
|   |   |       SetTime.log
|   |   |       USBcable.log
|   |   |       VK_DOWN.log
|   |   |       VK_F2_up.log
|   |   |       VK_LEFT.log
|   |   |       VK_P_up.log
|   |   |       VK_RETURN_up.log
|   |   |       VK_RIGHT.log
|   |   |       VK_R_up.log
|   |   |       VK_S_up.log
|   |   |       VK_UP.log
|   |   |       
|   |   +---sv
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---syslog.d
|   |   |   \---factory.d
|   |   |           button_log.rsc
|   |   |           gui_log.rsc
|   |   |           i2clog.rsc
|   |   |           
|   |   +---torrent.d
|   |   |   |   err_checkpoint.rsc
|   |   |   |   
|   |   |   \---setup.d
|   |   +---tr
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   +---web
|   |   |   |   black-240x320.mov
|   |   |   |   ctrlcam.asp
|   |   |   |   index.asp
|   |   |   |   results.css
|   |   |   |   results.xsl
|   |   |   |   rtp.asp
|   |   |   |   smallcam.asp
|   |   |   |   sysinfo.asp
|   |   |   |   webcam.asp
|   |   |   |   webpopup.asp
|   |   |   |   
|   |   |   +---images
|   |   |   |       a320.gif
|   |   |   |       cross.gif
|   |   |   |       dotted_16x12.gif
|   |   |   |       flirtrans.gif
|   |   |   |       infracam.gif
|   |   |   |       t-cam.gif
|   |   |   |       thermacamp640.gif
|   |   |   |       z-cam.gif
|   |   |   |       
|   |   |   +---inc
|   |   |   |       camtype.inc
|   |   |   |       restree.inc
|   |   |   |       sitewidgets.inc
|   |   |   |       usermenu.inc
|   |   |   |       versions.inc
|   |   |   |       
|   |   |   +---service
|   |   |   |   |   datentime.asp
|   |   |   |   |   index.asp
|   |   |   |   |   
|   |   |   |   +---calib
|   |   |   |   |       accmeas.asp
|   |   |   |   |       accmeasmeasure.asp
|   |   |   |   |       accmeasprotocol.asp
|   |   |   |   |       accmeasremove.asp
|   |   |   |   |       accmeasselect.asp
|   |   |   |   |       accmeassetobjpar.asp
|   |   |   |   |       index.asp
|   |   |   |   |       syscalib.asp
|   |   |   |   |       syscalibactivate.asp
|   |   |   |   |       syscalibaddlenscase.asp
|   |   |   |   |       syscalibcalculate.asp
|   |   |   |   |       syscalibeditlimits.asp
|   |   |   |   |       syscalibeditmeas.asp
|   |   |   |   |       syscalibenadisa.asp
|   |   |   |   |       syscalibmeasure.asp
|   |   |   |   |       syscalibprotocol.asp
|   |   |   |   |       syscalibselect.asp
|   |   |   |   |       syscalibswitch.asp
|   |   |   |   |       
|   |   |   |   +---caminfo
|   |   |   |   |       accprot.asp
|   |   |   |   |       calibprot.asp
|   |   |   |   |       components.asp
|   |   |   |   |       index.asp
|   |   |   |   |       opspec.asp
|   |   |   |   |       
|   |   |   |   +---diag
|   |   |   |   |       bit.asp
|   |   |   |   |       bitinteractive.asp
|   |   |   |   |       bitselftest.asp
|   |   |   |   |       highres.asp
|   |   |   |   |       index.asp
|   |   |   |   |       noise.asp
|   |   |   |   |       noisemeasure.asp
|   |   |   |   |       noiseresults.asp
|   |   |   |   |       post.asp
|   |   |   |   |       postlog.asp
|   |   |   |   |       reconfig.asp
|   |   |   |   |       servicedue.asp
|   |   |   |   |       statistics.asp
|   |   |   |   |       
|   |   |   |   +---eeprom
|   |   |   |   |       edcaminfo.asp
|   |   |   |   |       edcomp.asp
|   |   |   |   |       edlens.asp
|   |   |   |   |       index.asp
|   |   |   |   |       
|   |   |   |   +---focus
|   |   |   |   |       alignment.asp
|   |   |   |   |       index.asp
|   |   |   |   |       
|   |   |   |   +---imgcorr
|   |   |   |   |       gainmap.asp
|   |   |   |   |       gainmapcalc.asp
|   |   |   |   |       gainmapcold.asp
|   |   |   |   |       gainmapresult.asp
|   |   |   |   |       gainmapselcase.asp
|   |   |   |   |       gainmapwarm.asp
|   |   |   |   |       imgcorrselcase.asp
|   |   |   |   |       index.asp
|   |   |   |   |       operability.asp
|   |   |   |   |       operabilitylog.asp
|   |   |   |   |       pixkill.asp
|   |   |   |   |       staticmap.asp
|   |   |   |   |       staticmapcalc.asp
|   |   |   |   |       staticmapcold.asp
|   |   |   |   |       staticmapprepare.asp
|   |   |   |   |       staticmapresult.asp
|   |   |   |   |       staticmapwarm.asp
|   |   |   |   |       
|   |   |   |   +---inc
|   |   |   |   |       accmeasprottempl.inc
|   |   |   |   |       calibprottempl.inc
|   |   |   |   |       eepromlock.inc
|   |   |   |   |       errorcodes.inc
|   |   |   |   |       servicemenu.inc
|   |   |   |   |       serviceutils.inc
|   |   |   |   |       
|   |   |   |   \---tdrift
|   |   |   |           curcomp.asp
|   |   |   |           index.asp
|   |   |   |           logging.asp
|   |   |   |           sensors.asp
|   |   |   |           
|   |   |   \---styles
|   |   |           flirweb.css
|   |   |           
|   |   +---zh-chs
|   |   |       zstringresources.resources.dll
|   |   |       
|   |   \---zh-cht
|   |           zstringresources.resources.dll
|   |           
|   \---tmp
|       |   caldata.log
|       |   CoarseResult.fff
|       |   eFINST_20151013122954.log
|       |   eFINST_20151013123235.log
|       |   eFINST_20151013124342.log
|       |   eFINST_20151013150113.log
|       |   eFINST_20151013151244.log
|       |   eFINST_20151013152808.log
|       |   prod.log
|       |   ProductionResults.xml
|       |   results.xml
|       |   results.xsl
|       |   TempoDiffImage.fff
|       |   torrent.txt
|       |   Torrent.xml
|       |   TorrentError.xml
|       |   UsedForAim.fff
|       |   
|       +---images
|       |       BB150_0.fff
|       |       BB250_0.fff
|       |       BB80_0.fff
|       |       BB8_0.fff
|       |       cold.fff
|       |       focus.fff
|       |       image_control_150.fff
|       |       image_control_20.fff
|       |       TestImage.fff
|       |       warm.fff
|       |       
|       \---stage
|               calib.xml
|               calib0.xml
|               imgquality.xml
|               onchip.xml
|               operability.xml
|               operability0.xml
|               
+---My Documents
+---Network
+---profiles
|   \---default
+---Program Files
|       Command Prompt.lnk
|       
+---StorageCard
|   +---images
|   |   \---DirA
|   |           IR_0001.jpg
|   |           IR_0002.jpg
|   |           IR_0003.jpg
|   |           IR_0004.jpg
|   |           IR_0005.jpg
|   |           IR_0006.jpg
|   |           IR_0007.jpg
|   |           IR_0008.jpg
|   |           IR_0009.jpg
|   |           IR_0010.jpg
|   |           IR_0011.jpg
|   |           IR_0012.jpg
|   |           IR_0013.jpg
|   |           IR_0014.jpg
|   |           IR_0015.jpg
|   |           IR_0016.jpg
|   |           IR_0017.jpg
|   |           IR_0018.jpg
|   |           IR_0019.jpg
|   |           IR_0020.jpg
|   |           IR_0021.jpg
|   |           IR_0022.jpg
|   |           IR_0023.jpg
|   |           IR_0024.jpg
|   |           IR_0025.jpg
|   |           IR_0028.jpg
|   |           IR_0029.jpg
|   |           IR_0030.jpg
|   |           IR_0031.jpg
|   |           IR_0032.jpg
|   |           IR_0033.jpg
|   |           IR_0034.jpg
|   |           
|   \---Temp
+---Temp
|   |   kernel.log
|   |   postlog.txt
|   |   
|   +---Autosave
|   |       default.rsc
|   |       default__gui.rsc
|   |       default__services.rsc
|   |       default__syslog.rsc
|   |       
|   +---AutoTemp
|   |       default.rsc
|   |       default__gui.rsc
|   |       default__services.rsc
|   |       default__syslog.rsc
|   |       
|   +---AutoTempAbsolute
|   \---Obex
\---Windows
    |   applauncher.exe
    |   AutoloadCheck.exe
    |   ceconfig.h
    |   cgacutil.exe
    |   cmd.exe
    |   combtab.osimgkit
    |   connmc.exe
    |   control.exe
    |   diskutil.exe
    |   faddev.dll
    |   FIS.dll
    |   flash.exe
    |   FMQ.dll
    |   fragfs.exe
    |   fsver.exe
    |   FTPD.tmp
    |   i2cdev.dll
    |   net.exe
    |   netmui.dll
    |   osimgkit.rev
    |   ps.exe
    |   pwri2cdev.dll
    |   shell.exe
    |   sspdev.dll
    |   usbfn.exe
    |   vfmdev.dll
    |   
    +---Desktop
    +---Programs
    |       Command Prompt.lnk
    |       Windows Explorer.lnk
    |       
    +---Recent
    \---www
        |   current-httpd.log
        |   
        \---wwwpub
                default.htm
               

I try again to attach a file straight from the camera, this time without copying it to the computer first.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 11:13:44 am
Sorry, ignore my hint to wmconsole help.

rls.exe is on board

Code: [Select]
Folder PATH listing
|   |   |   rls.exe
|O

your thermal image is 80x80
Code: [Select]
C:\WINDOWS\System32>exiftool -raw* IR_0032.jpg
Raw Thermal Image Width         : 80
Raw Thermal Image Height        : 80
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 8650 bytes, use -b option to extract)

now follow my first suggest:

I suggest to make a full copy of all your registry keys with rls.exe (connect with ftp).

see
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg337918/#msg337918)
and edit the path \FlashIFS to your filesystem (like your jpg folder)

then we know all internal keys and the hardware resolution

Code: [Select]
>rls -h
usage: rls [switches] [resource [resource...]]
switches:
       -a <address>  server address (default 127.0.0.1)
       -p <port>     server port (default 0x5678)
       -u <name>     user name
       -w <pw>       password
       -r            list recursive
       -l            list using long format (-ll/-lll for longer)
       -o            list only value without quotes, etc.
       -t            dump complete transparent data (req. -l)
       -f <file>     binary dump of resource value to <file>
       -j <file>     dump transparent data as JPEG <file>
       -i            ignore value hints, print unformatted
       -n            do not copy transparent data
       -s            debug dump complete subscriber data
       -v <ver>      force protocol version <ver>
resource:            resource name or path, or "##<childno>"
long format interpretation:
rwcdrwcdrwcd0p*1 user grp <a> name "value"
||||||||||||||||   |   |   |    |
||||||||||||||||   |   |   |    + resource name
||||||||||||||||   |   |   +----- resource type
||||||||||||||||   |   +--------- owner groupid
||||||||||||||||   +------------- owner userid
|||||||||||||||+----------------- open count
||||||||||||||+------------------ not default value
|||||||||||||+------------------- persistent
||||||||||||+-------------------- num subscribers
|||||||||||+--------------------- delete (other)
||||||||||+---------------------- create (other)
|||||||||+----------------------- write  (other)
||||||||+------------------------ read   (other)
|||||||+------------------------- delete (group)
||||||+-------------------------- create (group)
|||||+--------------------------- write  (group)
||||+---------------------------- read   (group)
|||+----------------------------- delete (owner)
||+------------------------------ create (owner)
|+------------------------------- write  (owner)
+-------------------------------- read   (owner)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 11:51:30 am
I see that rls.exe is onboard, but how do I execute it? If I go to the copy on my windows computer it says it is not a valid win32 application. If I type the command in winspc command box when connected to the camera it says it cannot recognise the command? Please describe how to do it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 11:55:24 am
in Germany we say: "you are a hard nut"

google
Code: [Select]
site:www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown telnet
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 12:12:19 pm
Ok, thank you for your patience

I installed putty and the rls command returns "bad data" and no file is created. If I type "rls -rl" I get info but it keeps filling up the screen. Any thought on what is the problem?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 12:44:56 pm
Ok, I managed to extract all info from putty by copy to clipboard in sections and puzzle it together. Phew!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 14, 2015, 01:05:40 pm
Ok, I managed to extract all info from putty by copy to clipboard in sections and puzzle it together. Phew!

And then somebody tells you that Putty has a log function  :-X
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 01:20:39 pm
 :-DD

That's on me :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 04:31:11 pm
Ok, I managed to extract all info from putty by copy to clipboard in sections and puzzle it together. Phew!

bad news, your sensor is only 80x80
Code: [Select]
i5

.image.flow.framebuffer.geom:
r---r--------- 0 root   root   <i> bitsPerPixel                  16
r---r--------- 0 root   root   <i> height                        80
r---r--------- 0 root   root   <i> width                         80


.calib.detector.geom:
rw--rw-------p*0 root   root   <i> imgPixX                       80
rw--rw-------p*0 root   root   <i> imgPixY                       80

compare the values with an unpatched Flir E40
image 160x120 <-> sensor 320x240
Code: [Select]
E40

.image.flow.framebuffer.geom: (3)
r---r--------- 0 root   root   <i> bitsPerPixel                  16
r---r--------- 0 root   root   <i> height                       120
r---r--------- 0 root   root   <i> width                        160


.calib.detector.geom: (8)
rw--rw-------p*0 root   root   <i> imgPixX                      320
rw--rw-------p*0 root   root   <i> imgPixY                      240

we need 17 posts to check it  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 04:35:39 pm
Okay. If you are 100% sure, then - I'll live with that.


Thank you so much for your help and time spent on this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 05:17:01 pm
But hey, what's up with this section then:

Code: [Select]
.caps.config.image.settings:
r---r--------- 0 root   root   <b> enabled                     true
r---r--------- 0 root   root   <i> resIR                        120
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 14, 2015, 07:09:37 pm
Ok, I managed to extract all info from putty by copy to clipboard in sections and puzzle it together. Phew!

bad news, your sensor is only 80x80
Code: [Select]
i5

.image.flow.framebuffer.geom:
r---r--------- 0 root   root   <i> bitsPerPixel                  16
r---r--------- 0 root   root   <i> height                        80
r---r--------- 0 root   root   <i> width                         80


.calib.detector.geom:
rw--rw-------p*0 root   root   <i> imgPixX                       80
rw--rw-------p*0 root   root   <i> imgPixY                       80

compare the values with an unpatched Flir E40
image 160x120 <-> sensor 320x240
Code: [Select]
E40

.image.flow.framebuffer.geom: (3)
r---r--------- 0 root   root   <i> bitsPerPixel                  16
r---r--------- 0 root   root   <i> height                       120
r---r--------- 0 root   root   <i> width                        160


.calib.detector.geom: (8)
rw--rw-------p*0 root   root   <i> imgPixX                      320
rw--rw-------p*0 root   root   <i> imgPixY                      240

we need 17 posts to check it  :(
That's so odd...

I'm pretty sure they don't make a 80x80 sensor. The lowest res non-lepton sensor is a 80x64 50 micron sensor that you find in the FLIR A5.

Unless they're using the ULIS Pico80P, but that's very unlikely.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 07:58:46 pm
ok, you don't give up.

The next proof is your calibration file. The calibration with bad pixel mapping is taken by full resolution.

your calibration file name is ds250C_we_ap_fi_le.gan
Code: [Select]
.registry.calib.detector.deadPixMap.ds250C_we_ap_fi_le:
rw-dr--------- 0 root   root   <a> fileName        "ds250C_we_ap_fi_le.gan"
rw-dr--------- 0 root   root   <i> type                         100

you find it here
Code: [Select]
+---FlashFS
|   +---system
|   |   +---maps
|   |   |       ds250C_we_ap_fi_le.gan

you can read the gain map with exiftool

here a sample from a E40
Code: [Select]
$ exiftool ds250C_we_ap_fi_le_static.gan
File Type                       : FLIR
File Type Extension             : fff
Gain Dead Map Image Width       : 320
Gain Dead Map Image Height      : 240
Gain Dead Map Image Type        : TIFF
Gain Dead Map Image             : (Binary data 153804 bytes, use -b option to extract)

 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 08:28:53 pm
Ok.

exiftool output for ds250C_we_ap_fi_le.gan:

Code: [Select]
ExifTool Version Number         : 10.02
File Name                       : ds250C_we_ap_fi_le.gan
Directory                       : .
File Size                       : 13 kB
File Modification Date/Time     : 2000:01:01 00:34:00+01:00
File Access Date/Time           : 2015:10:14 12:44:10+02:00
File Creation Date/Time         : 2015:10:14 12:44:10+02:00
File Permissions                : rw-rw-rw-
File Type                       : FLIR
File Type Extension             : fff
MIME Type                       : application/unknown
Creator Software                :

but there's another file in the maps directory called "ds250C_we.crs" mentioned, among other places, here in the allsettings-file:
Code: [Select]
.registry.calib.detector.data:
rw-dr--------- 0 root   root   <x> ds250C_we

with the exiftool output:
Code: [Select]
ExifTool Version Number         : 10.02
File Name                       : ds250C_we.crs
Directory                       : .
File Size                       : 13 kB
File Modification Date/Time     : 2000:01:01 00:29:00+01:00
File Access Date/Time           : 2015:10:14 12:44:09+02:00
File Creation Date/Time         : 2015:10:14 12:44:09+02:00
File Permissions                : rw-rw-rw-
File Type                       : FLIR
File Type Extension             : fff
MIME Type                       : application/unknown
Creator Software                :
Coarse Map Image Width          : 80
Coarse Map Image Height         : 80
Coarse Map Image Type           : TIFF
Coarse Map Image                : (Binary data 13004 bytes, use -b option to extract)

That kind of convice me that you are right, tomas123. But I just can't help to wonder why the resolution 120x120 is suggested here and there in filenames and the allsettings-file. Could it be that the sensor has different "modes"? ...But I'm not the one to speculate on this, all you other people here have way more knowledge about how it's normally done...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 08:51:15 pm
 the fw is the same for all ix cameras (all resolutions)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on October 14, 2015, 08:54:36 pm
@ Maxpax:
Back then I successfully upgraded my i3 (bought about 3 years ago) with the instructions from this (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229) post. When I look at your original config file, then all the lines essential for the hack are missing. Which means that you have a later hardware revision and / or firmware version. And please note the last line of the linked post. My TIC was able to do the full 144 but it seems yours really only can do 80.

And the 120 you mentioned here (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg777572/#msg777572) are from the config file you copied from the pdf with the instructions. Because the "new" config file is successfully loaded (which means you did all the # ID and # CRC01 stuff correctly :) ) this parameter is set but sadly because of the hardware / firmware this parameter doesn't do anything. :( And even if it did, you really seem to have only a 80 sensor.

And the timestamp from January 1st 2000 is just a default time if the actual time isn't set, this doesn't mean the TIC is 15 years old. :)

I have no idea why the i-Series has three different types of sensors but it seems that you just have the wrong one. :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on October 14, 2015, 09:52:42 pm
Hello,
try to go to: FlashFS\system\maps\  there should be a *.gan file
ds150C_we_ap_fi_le_static.gan (from FlirC2)
ds250C_we_ap_fi_le.gan (from Flir i3... later enhanced to 120x120)
ds250C_we_ap_fi_le_static.gan (from Flir E4... later enhanced to 320x240)

I guess... this Calibration file was ever in the full resolution of the Camera.
Try to decode it with my Dev Tools file to image decoder:
http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder (http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder)

from the i3 and E4 i get a 320x240 resolution, the C2 brings only 80x60... it has a Lepton core.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 14, 2015, 11:04:29 pm
@ Maxpax:
You wrote that exiftool can't read your
ds250C_we_ap_fi_le.gan
Please zip and upload your gan file. I will check it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 14, 2015, 11:31:08 pm
vielen dank!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 15, 2015, 07:00:34 am
just for fun some exiftoool and imagemagick magics.

your ds250C_we_ap_fi_le.gan has the Flir Tag FFF_TAGID_DeadMap = 4 (see pdf)
with the config.txt file from attachment we can extract the RAW 80x80 image

Code: [Select]
>exiftool -config config.txt ds250C_we_ap_fi_le.gan
ExifTool Version Number         : 9.91
File Name                       : ds250C_we_ap_fi_le.gan
File Size                       : 13 kB
...
File Type                       : FLIR
MIME Type                       : application/unknown
Creator Software                :
Embedded Image Width            : 80
Embedded Image Height           : 80
Dead Map                        : (Binary data 12800 bytes, use -b option to extract)

>exiftool -config config.txt -b -DeadMap ds250C_we_ap_fi_le.gan > 1.hex

now convert with IM
Code: [Select]
>convert -depth 16 -endian lsb -size 80x80 gray:1.hex  t2.png
resize for better bad pixel peeping
Code: [Select]
>convert t2.png -filter point -resize 320x resize.png(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=176461;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on October 15, 2015, 07:37:05 am
Still no idea where FLIR is getting these 80x80 sensors.

Perhaps in the later versions some image processing (specifically downscaling) got moved on chip?

But that would make no sense because the E4 doesn't do that...

hmm...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Maxpax on October 15, 2015, 10:09:28 am
My i5 is blue and gray, not black. I think it is one of the earlier versions of i5, and therefore one of the older designs. I suppose it is quite natural to change designs i the beginning of new models as a company gains in understanding from testing, customer feedback, ideas on how to achieve cheaper/simpler manufacturing and not least, providers who approach the company with deals on technology parts, such as sensors.

Anybody want to buy it?  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 17, 2015, 06:13:52 pm
sorry for double posting

I published in the seek thread an excel sheet to show, why the RAW values of an E4 microbolometer (response of "A/D Counts") are linear to radiance [W / m^2] (per nm wave length) and not linear to temperature [Kelvin]. The difference is not great.

https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg779709/#msg779709 (https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/msg779709/#msg779709)
(https://www.eevblog.com/forum/testgear/yet-another-cheap-thermal-imager-incoming/?action=dlattach;attach=176885;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: brobbuilder on October 18, 2015, 04:52:15 am
Would be cool to get a firmware on the i-series that dumps full rez (320x230) to SD, since the screen can't handle more than 140x140.

We never did figure out the pinouts on those, did we?  If we did, the hazard cams from BMWs/Audis might finally be reusable, since they use the same sensor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on October 28, 2015, 08:43:45 am
Hello,

I changed E30bx to E60bx and its really clear view now, thanks eevblog  :clap:
but is it possible to change settings in video mode to turn of staff on right?


If you don't understand me I attached picture below.
On first its all staff (temperatures, point etc.) on second its what I would like to have on video mode.

I would like to clear screen only on video mode - not on picture mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 28, 2015, 11:44:21 am
Hello,

I changed E30bx to E60bx and its really clear view now, thanks eevblog  :clap:
but is it possible to change settings in video mode to turn of staff on right?


If you don't understand me I attached picture below.
On first its all staff (temperatures, point etc.) on second its what I would like to have on video mode.

I would like to clear screen only on video mode - not on picture mode.

You can turn it all off in one of the settings panels - I'll have to dig out my E60 and see if I can find it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on October 28, 2015, 08:44:49 pm
Hello,

I changed E30bx to E60bx and its really clear view now, thanks eevblog  :clap:
but is it possible to change settings in video mode to turn of staff on right?


If you don't understand me I attached picture below.
On first its all staff (temperatures, point etc.) on second its what I would like to have on video mode.

I would like to clear screen only on video mode - not on picture mode.

You can turn it all off in one of the settings panels - I'll have to dig out my E60 and see if I can find it.

From menu I can only switch off left site
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on October 29, 2015, 07:48:20 am
With telnet you can use commands like
Code: [Select]
rset ui.userSettings.overlayLogo false
It's a sample from my Flir Exx old version without MSX
For more informations google this string on eevblog
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on October 30, 2015, 11:49:37 am
Or you can delete the logo.bmp file! (Make sure you have a backup).

Good news for those with an i50 - I have successfully upgraded the GUI to include better measurement functionality and I have also updated the IR resolution to 240x240! (up from 140x140). Funnily enough, the i60 only goes up to 180x180 I think.

Does anyone have an InfraCAM SD? I picked one up dead cheap the other day but it doesn't get past the boot screen (doesn't even show it loading up). I've tried connecting to it and pulling off the files so I can inspect them, but FTP only seems to work very briefly - any ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: simclardy1 on November 03, 2015, 02:48:23 am
 :scared: celebrate! not scared.

I managed to get the resolution resolved. I managed to get the menus updated. Problem. the picture in picture and thermal fusion are on the menu but I can't operate them? the other thing is Bluetooth and wifi don't seem to do anything? I don't care too much about this but the fusion or pip would be a plus. The succeeded to activate: camera record, resolution, dots, delta, isotherm, zoom.....wow it's really cool.
Thanks to mike, and everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: simclardy1 on November 03, 2015, 03:42:33 am
I got it! I had to edit the appcor config file a bit more. I made a mistake on the framegrab entries.
cheers! if I can help a newbie like me let me know.  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lefedor on November 03, 2015, 05:35:03 pm
Hi, I'm new in this topic, need scope owner help with my thermal sensor (have sensor (flir photon camera) with dead electronics):

(http://www.flir.com/uploadedImages/Overview-FPA-Packaging.png)

Is here exists any fella with oscilloscope (with logic analyzer may be, but i guess it's not critical) and also brave, enthusiastic and open to make few start up/initialization measurements on his sensor pins?
Looking for both owners of 'I' series and 'E' series.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stylius on November 06, 2015, 09:34:57 am
Hello. Now i am planing bu flir e4. So now are softwar wersion what not posible hack? or latest firmware is 2.3 and no new version? Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 06, 2015, 10:04:58 am
Currently all versions up to 2.3.0 can still be modified.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on November 06, 2015, 10:25:57 am
Over a million views on this thread now - you can't buy that sort of publicity!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 06, 2015, 10:27:32 am
FLIR love this! I do know they think it is slightly unfair on those who pay full price for the E8 (I suspect the major price cuts are in response to this thread), however at the end of the day, there is no such thing as bad publicity!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on November 06, 2015, 02:07:52 pm
...at the end of the day, there is no such thing as bad publicity!

Well, Siglent might disagree (https://www.eevblog.com/forum/testgear/siglent-they-filed-a-'wrongful-trademark-claim'/)...  >:D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on November 06, 2015, 03:37:27 pm
Over a million views on this thread now - you can't buy that sort of publicity!

1,015,731 / 754 = 1347 view per day
That is impressive.
Flir must love this thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 06, 2015, 10:34:49 pm
Hey folks -- I have an E4 that I hacked when this first was possible.  I think I'm running the older firmware.  Do I just install 2.30 using the Flir tools then hack again using the guide or is there a different route I need to take before updating to 2.30?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 06, 2015, 11:08:44 pm
No known good reason to upgrade to 2.3.0 and some have had difficulty upgrading old cameras then attempting  a re-hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 06, 2015, 11:38:23 pm
+1

Leave your camera alone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mavro on November 07, 2015, 02:26:37 am
+1

Leave your camera alone.

OK -- will do -- thought 2.3.0 added blending and a few other options I didn't have.  I'm actually quite happy with it as is.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on November 07, 2015, 01:09:57 pm
I don't know if anybody has already seen this but Martin J. Lorton did a video where he compared his E4 with firmware 1.15.5 to another one with firmware 2.1.0 and then performed an update on his one to 2.3.0 .

https://www.youtube.com/watch?v=jjchMByfKTQ (https://www.youtube.com/watch?v=jjchMByfKTQ)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stylius on November 10, 2015, 03:59:18 pm
Please let me know. If i buy new, with 2.3 version, can i have meniu like e8? or posible hack onli resoliution? Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Blue on November 10, 2015, 05:54:28 pm
Hi Guys,


I just bought an E4 (1.2L , 2.3.0) and applied the hacks as written in the first post. (http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/))
That worked quite well. Took about one hour (I also made a complete backup).

I wanted to have a zoom function and be able to set the temp scale. I found somewhere 2.3.0_Menu_6.1(zoom).zip. After changing the config file there was no zoom. Bummer. Then I applied the supplied menu upgrade fif. Humm. Some menu items were missing.
Back to the first post and applied the 2.3.0 menu as described in the original first post. And suddenly I got the additional menus and zoom and be able to set the temp scale.

Nice.

Oh, for those interested calib.rsc:

.calib.nrdp.ds250C_we_ap_fi_le.measureInfo entry
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.spatialDu double 0
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.spatialMk double 0
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalDu double 1.1672618
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 12.568249

The original calib.rsc numbers were zero (???)

Anyway, I think I'm happy with it.

Are there other items that I could change or apply?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on November 15, 2015, 10:24:34 am
With telnet you can use commands like
Code: [Select]
rset ui.userSettings.overlayLogo false
It's a sample from my Flir Exx old version without MSX
For more informations google this string on eevblog

Thanks for help.
For people who dont know telnet. If You would like to turn off logo in IRcamera E30bx on old firmware you have to

1. open Start at windows XP and click "run"
2. write "Telnet" and click enter
3. write "open ip" ip = 192.168.0.1 or 192.168.0.2 etc.
4.
Code: [Select]
rset ui.userSettings.overlayLogo false
how to turn of battery status?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 15, 2015, 12:23:09 pm
in the registry path for ".ui.userSettings" you find another nice switches like hideGraphics etc.
try it and give us a feedback

Code: [Select]
.ui.userSettings: (56)
rw--r---r---2p*2 root   root   <a> AddOnLens                 "$OFF"
                 ["$OFF" "45" "15"]
rw--r---r---0p 0 root   root   <d> AlarmThreshold           19.990C
                 [2.2e+002, 2.3e+003]
rw--r---r---1p*1 root   root   <d> AtmTemp                  20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p 1 root   root   <b> ContAutoFocusExists        false
rw--r---r---1p*1 root   root   <d> Emissivity            0.94999999
                 [0.01, 1]
rw--r---r---1p*1 root   root   <d> ExtOptTemp               20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> ExtOptTrans                  100
                 [1, 1e+002]
rw--r---r---0p 0 root   root   <i> FocusPos                      98
                 [0, 100]
rw--r---r---1p 1 root   root   <d> ObjDistance                    1
                 [0, 1e+003]
rw--r---r---2p*2 root   root   <a> Palette              "$iron.pal"
                 ["$arctic.pal" "$bw.pal" "$iron.pal" "$lava.pal" "$rainbow.pal" "$rainhc.pal"]
rw--r---r---2p*2 root   root   <b> PaletteReversed            false
rw--r---r---1p*1 root   root   <d> ReflTemp                 20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> RelHum                        50
                 [1, 1e+002]
rw--r---r---2p*2 root   root   <a> TempRange                    "0"
                 ["0" "1"]
rw--r---r---0p 0 root   root   <a> autoAddForm               "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> autoPowerOff     "$OPTION_MIN_5"
                 ["$OFF" "$OPTION_MIN_5" "$OPTION_MIN_20"]
rw--r---r---1p 1 root   root   <b> compassExists              false
rw--r---r---2p 2 root   root   <a> culture         "German (Deutsch)"
                 ["German (Deutsch)" "Finnish (Suomi)" "English" "Dutch (Nederlands)" "Swedish (Svenska)" "Chinese (simplified)" "Greek (??????)" "Czech (?esko)" "French (Français)" "Portuguese (Português)" "Chinese (traditional)" "Hungarian (Magyar)" "Japanese" "Spanish (Español)" "Italian (Italiano)" "Danish (Dansk)" "Polish (Polski)" "Korean" "Norwegian (Norsk)" "Turkish (Türkçe)" "Russian (???????)"]
rw--r---r---1p 1 root   root   <a> cultureTest                 "de"
                 ["de" "fi" "en" "nl" "sv" "zh-CHS" "el" "cs" "fr" "pt" "zh-CHT" "hu" "ja" "es" "it" "da" "pl" "ko" "no" "tr" "ru"]
rw--r---r---2p 2 root   root   <a> dateFormat         "$YYYY-MM-DD"
                 ["$YYYY-MM-DD" "$YY-MM-DD" "$MM/DD/YYYY" "$MM/DD/YY" "$DD/MM/YYYY" "$DD/MM/YY"]
rw--r---r---0p 0 root   root   <a> debugMode                 "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---3p 2 root   root   <a> distUnit          "$METER_SHORT"
                 ["$METER_SHORT" "$FEET_SHORT"]
rw--r---r---0p*0 root   root   <b> emissTableActive            true
rw--r---r---0p 0 root   root   <i> emissTableIndex                0
                 [0, 99]
rw--r---r---1p 1 root   root   <b> gpsExists                  false
rw--r---r---2p*2 root   root   <b> hideGraphics               false
rw--r---r---1p 1 root   root   <a> histogramRegion "$HISTOGRAM_REGION_FULL"
                 ["$HISTOGRAM_REGION_FULL" "$HISTOGRAM_REGION_LARGE" "$HISTOGRAM_REGION_SMALL"]
rw--r---r---1p*1 root   root   <a> imageNaming     "$IMAGE_NAMING_SEQ"
                 ["$IMAGE_NAMING_SEQ" "$IMAGE_NAMING_DATE"]
rw--r---r---0p 0 root   root   <i> ipAddress1                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress2                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress3                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress4                     0
                 [0, 255]
rw--r---r---1p 1 root   root   <a> isothermType              "$OFF"
                 ["$OFF" "$MENU_MEASURE_ISO_ABOVE" "$MENU_MEASURE_ISO_BELOW" "$MENU_MEASURE_ISO_INTERVAL"]
rw--r---r---0p 0 root   root   <i> isothermTypeNumber             4
                 [4, 4]
rw--r---r---2p*2 root   root   <a> lcdIntensity    "$OPTION_MEDIUM"
                 ["$OPTION_HIGH" "$OPTION_MEDIUM" "$OPTION_LOW"]
rw--r---r---1p 1 root   root   <b> overlayLogo                 true
rw--r---r---2p*2 root   root   <a> overlayShowAtmTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowEmiss          "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowObjDist        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRefTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRelHum         "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p 2 root   root   <a> overlayShowTime           "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <a> programButton   "$PROGRAM_BUTTON_HIDE_GRAPHICS"
                 ["$PROGRAM_BUTTON_HIDE_GRAPHICS" "$PROGRAM_BUTTON_INVERT_PALETTE" "$PROGRAM_BUTTON_TOGGLE_PALETTE" "$PROGRAM_BUTTON_VIEW_MODE" "$PROGRAM_BUTTON_IMAGE_ADJUST" "$PROGRAM_BUTTON_NUC" "$PROGRAM_BUTTON_SAVE" "$PROGRAM_BUTTON_PREVIEW" "$PROGRAM_BUTTON_TORCH" "$PROGRAM_BUTTON_ZOOM"]
rw--r---r---1p 1 root   root   <d> referenceTemp            20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---0p 0 root   root   <b> resetImageCounter           true
rw--r---r---1p 1 root   root   <i> setTime                        0
                 [0, 1]
rw--r---r---1p 1 root   root   <b> setupCalibrateTouch         true
rw--r---r---1p 1 root   root   <b> setupResetDefaults          true
rw--r---r---2p 2 root   root   <a> setupVideoFormat"$SETUP_VIDEO_FORMAT_NTSC"
                 ["$SETUP_VIDEO_FORMAT_PAL" "$SETUP_VIDEO_FORMAT_NTSC"]
rw--r---r---2p 2 root   root   <a> simultaneousSave           "$ON"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <b> simultaneousSaveSupported   true
rw--r---r---3p 2 root   root   <a> tempUnit               "$TEMP_C"
                 ["$TEMP_C" "$TEMP_F"]
rw--r---r---2p 2 root   root   <a> timeFormat      "$TIME_FORMAT_24"
                 ["$TIME_FORMAT_12" "$TIME_FORMAT_24"]
rw--r---r---1p 1 root   root   <i> timeZone                       0
                 [0, 2147483647]
rw--r---r---2p 2 root   root   <a> torch             "$OPTION_AUTO"
                 ["$OFF" "$OPTION_AUTO"]
rw--r---r---2p 2 root   root   <a> trigAction      "$TRIG_DIRECT_ONLY"
                 ["$TRIG_NORMAL" "$TRIG_DIRECT_ONLY" "$TRIG_PREVIEW_ONLY"]
 

you get all valid registry entries with
Code: [Select]
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>rls -l
.: (16)
rw--r---r----- 0 root   root   <e> appl                           
rw------------ 0 root   root   <e> calib                           
rw--r--------- 0 root   root   <e> caps                           
rw--r---r----- 0 root   root   <e> dump                           
rw--rw--r----p 0 root   root   <e> image     
...

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 16, 2015, 11:29:06 am
I've attached a 240x240 IR image taken from my newly hacked i50! Wasn't expecting such a jump! Does anyone have an i3/5/7 they could try hacking to 320
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 16, 2015, 11:52:06 am
your raw image size 180x180 (same value get from Flir Tools)
Code: [Select]
>exiftool -RAW* IR_0003.jpg
Raw Thermal Image Width         : 180
Raw Thermal Image Height        : 180
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 43986 bytes, use -b option to extract)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 16, 2015, 12:47:47 pm
your raw image size 180x180 (same value get from Flir Tools)
Code: [Select]
>exiftool -RAW* IR_0003.jpg
Raw Thermal Image Width         : 180
Raw Thermal Image Height        : 180
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 43986 bytes, use -b option to extract)

That's interesting! So it is interpolating it to 240x240 to fill the screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 16, 2015, 02:23:27 pm
That's interesting! So it is interpolating it to 240x240 to fill the screen?

yes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on November 16, 2015, 07:21:23 pm
in the registry path for ".ui.userSettings" you find another nice switches like hideGraphics etc.
try it and give us a feedback

Code: [Select]
.ui.userSettings: (56)
rw--r---r---2p*2 root   root   <a> AddOnLens                 "$OFF"
                 ["$OFF" "45" "15"]
rw--r---r---0p 0 root   root   <d> AlarmThreshold           19.990C
                 [2.2e+002, 2.3e+003]
rw--r---r---1p*1 root   root   <d> AtmTemp                  20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p 1 root   root   <b> ContAutoFocusExists        false
rw--r---r---1p*1 root   root   <d> Emissivity            0.94999999
                 [0.01, 1]
rw--r---r---1p*1 root   root   <d> ExtOptTemp               20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> ExtOptTrans                  100
                 [1, 1e+002]
rw--r---r---0p 0 root   root   <i> FocusPos                      98
                 [0, 100]
rw--r---r---1p 1 root   root   <d> ObjDistance                    1
                 [0, 1e+003]
rw--r---r---2p*2 root   root   <a> Palette              "$iron.pal"
                 ["$arctic.pal" "$bw.pal" "$iron.pal" "$lava.pal" "$rainbow.pal" "$rainhc.pal"]
rw--r---r---2p*2 root   root   <b> PaletteReversed            false
rw--r---r---1p*1 root   root   <d> ReflTemp                 20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> RelHum                        50
                 [1, 1e+002]
rw--r---r---2p*2 root   root   <a> TempRange                    "0"
                 ["0" "1"]
rw--r---r---0p 0 root   root   <a> autoAddForm               "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> autoPowerOff     "$OPTION_MIN_5"
                 ["$OFF" "$OPTION_MIN_5" "$OPTION_MIN_20"]
rw--r---r---1p 1 root   root   <b> compassExists              false
rw--r---r---2p 2 root   root   <a> culture         "German (Deutsch)"
                 ["German (Deutsch)" "Finnish (Suomi)" "English" "Dutch (Nederlands)" "Swedish (Svenska)" "Chinese (simplified)" "Greek (??????)" "Czech (?esko)" "French (Français)" "Portuguese (Português)" "Chinese (traditional)" "Hungarian (Magyar)" "Japanese" "Spanish (Español)" "Italian (Italiano)" "Danish (Dansk)" "Polish (Polski)" "Korean" "Norwegian (Norsk)" "Turkish (Türkçe)" "Russian (???????)"]
rw--r---r---1p 1 root   root   <a> cultureTest                 "de"
                 ["de" "fi" "en" "nl" "sv" "zh-CHS" "el" "cs" "fr" "pt" "zh-CHT" "hu" "ja" "es" "it" "da" "pl" "ko" "no" "tr" "ru"]
rw--r---r---2p 2 root   root   <a> dateFormat         "$YYYY-MM-DD"
                 ["$YYYY-MM-DD" "$YY-MM-DD" "$MM/DD/YYYY" "$MM/DD/YY" "$DD/MM/YYYY" "$DD/MM/YY"]
rw--r---r---0p 0 root   root   <a> debugMode                 "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---3p 2 root   root   <a> distUnit          "$METER_SHORT"
                 ["$METER_SHORT" "$FEET_SHORT"]
rw--r---r---0p*0 root   root   <b> emissTableActive            true
rw--r---r---0p 0 root   root   <i> emissTableIndex                0
                 [0, 99]
rw--r---r---1p 1 root   root   <b> gpsExists                  false
rw--r---r---2p*2 root   root   <b> hideGraphics               false
rw--r---r---1p 1 root   root   <a> histogramRegion "$HISTOGRAM_REGION_FULL"
                 ["$HISTOGRAM_REGION_FULL" "$HISTOGRAM_REGION_LARGE" "$HISTOGRAM_REGION_SMALL"]
rw--r---r---1p*1 root   root   <a> imageNaming     "$IMAGE_NAMING_SEQ"
                 ["$IMAGE_NAMING_SEQ" "$IMAGE_NAMING_DATE"]
rw--r---r---0p 0 root   root   <i> ipAddress1                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress2                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress3                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress4                     0
                 [0, 255]
rw--r---r---1p 1 root   root   <a> isothermType              "$OFF"
                 ["$OFF" "$MENU_MEASURE_ISO_ABOVE" "$MENU_MEASURE_ISO_BELOW" "$MENU_MEASURE_ISO_INTERVAL"]
rw--r---r---0p 0 root   root   <i> isothermTypeNumber             4
                 [4, 4]
rw--r---r---2p*2 root   root   <a> lcdIntensity    "$OPTION_MEDIUM"
                 ["$OPTION_HIGH" "$OPTION_MEDIUM" "$OPTION_LOW"]
rw--r---r---1p 1 root   root   <b> overlayLogo                 true
rw--r---r---2p*2 root   root   <a> overlayShowAtmTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowEmiss          "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowObjDist        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRefTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRelHum         "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p 2 root   root   <a> overlayShowTime           "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <a> programButton   "$PROGRAM_BUTTON_HIDE_GRAPHICS"
                 ["$PROGRAM_BUTTON_HIDE_GRAPHICS" "$PROGRAM_BUTTON_INVERT_PALETTE" "$PROGRAM_BUTTON_TOGGLE_PALETTE" "$PROGRAM_BUTTON_VIEW_MODE" "$PROGRAM_BUTTON_IMAGE_ADJUST" "$PROGRAM_BUTTON_NUC" "$PROGRAM_BUTTON_SAVE" "$PROGRAM_BUTTON_PREVIEW" "$PROGRAM_BUTTON_TORCH" "$PROGRAM_BUTTON_ZOOM"]
rw--r---r---1p 1 root   root   <d> referenceTemp            20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---0p 0 root   root   <b> resetImageCounter           true
rw--r---r---1p 1 root   root   <i> setTime                        0
                 [0, 1]
rw--r---r---1p 1 root   root   <b> setupCalibrateTouch         true
rw--r---r---1p 1 root   root   <b> setupResetDefaults          true
rw--r---r---2p 2 root   root   <a> setupVideoFormat"$SETUP_VIDEO_FORMAT_NTSC"
                 ["$SETUP_VIDEO_FORMAT_PAL" "$SETUP_VIDEO_FORMAT_NTSC"]
rw--r---r---2p 2 root   root   <a> simultaneousSave           "$ON"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <b> simultaneousSaveSupported   true
rw--r---r---3p 2 root   root   <a> tempUnit               "$TEMP_C"
                 ["$TEMP_C" "$TEMP_F"]
rw--r---r---2p 2 root   root   <a> timeFormat      "$TIME_FORMAT_24"
                 ["$TIME_FORMAT_12" "$TIME_FORMAT_24"]
rw--r---r---1p 1 root   root   <i> timeZone                       0
                 [0, 2147483647]
rw--r---r---2p 2 root   root   <a> torch             "$OPTION_AUTO"
                 ["$OFF" "$OPTION_AUTO"]
rw--r---r---2p 2 root   root   <a> trigAction      "$TRIG_DIRECT_ONLY"
                 ["$TRIG_NORMAL" "$TRIG_DIRECT_ONLY" "$TRIG_PREVIEW_ONLY"]
 

you get all valid registry entries with
Code: [Select]
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>rls -l
.: (16)
rw--r---r----- 0 root   root   <e> appl                           
rw------------ 0 root   root   <e> calib                           
rw--r--------- 0 root   root   <e> caps                           
rw--r---r----- 0 root   root   <e> dump                           
rw--rw--r----p 0 root   root   <e> image     
...



Thanks, I will try at few days and write what happens.

BTW. is it possible to turn on calibration for 600 degree? just turn on even if there will be mistake +/- 20 degree?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on November 17, 2015, 12:50:24 pm
in the registry path for ".ui.userSettings" you find another nice switches like hideGraphics etc.
try it and give us a feedback

Code: [Select]
.ui.userSettings: (56)
rw--r---r---2p*2 root   root   <a> AddOnLens                 "$OFF"
                 ["$OFF" "45" "15"]
rw--r---r---0p 0 root   root   <d> AlarmThreshold           19.990C
                 [2.2e+002, 2.3e+003]
rw--r---r---1p*1 root   root   <d> AtmTemp                  20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p 1 root   root   <b> ContAutoFocusExists        false
rw--r---r---1p*1 root   root   <d> Emissivity            0.94999999
                 [0.01, 1]
rw--r---r---1p*1 root   root   <d> ExtOptTemp               20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> ExtOptTrans                  100
                 [1, 1e+002]
rw--r---r---0p 0 root   root   <i> FocusPos                      98
                 [0, 100]
rw--r---r---1p 1 root   root   <d> ObjDistance                    1
                 [0, 1e+003]
rw--r---r---2p*2 root   root   <a> Palette              "$iron.pal"
                 ["$arctic.pal" "$bw.pal" "$iron.pal" "$lava.pal" "$rainbow.pal" "$rainhc.pal"]
rw--r---r---2p*2 root   root   <b> PaletteReversed            false
rw--r---r---1p*1 root   root   <d> ReflTemp                 20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---1p*1 root   root   <d> RelHum                        50
                 [1, 1e+002]
rw--r---r---2p*2 root   root   <a> TempRange                    "0"
                 ["0" "1"]
rw--r---r---0p 0 root   root   <a> autoAddForm               "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> autoPowerOff     "$OPTION_MIN_5"
                 ["$OFF" "$OPTION_MIN_5" "$OPTION_MIN_20"]
rw--r---r---1p 1 root   root   <b> compassExists              false
rw--r---r---2p 2 root   root   <a> culture         "German (Deutsch)"
                 ["German (Deutsch)" "Finnish (Suomi)" "English" "Dutch (Nederlands)" "Swedish (Svenska)" "Chinese (simplified)" "Greek (??????)" "Czech (?esko)" "French (Français)" "Portuguese (Português)" "Chinese (traditional)" "Hungarian (Magyar)" "Japanese" "Spanish (Español)" "Italian (Italiano)" "Danish (Dansk)" "Polish (Polski)" "Korean" "Norwegian (Norsk)" "Turkish (Türkçe)" "Russian (???????)"]
rw--r---r---1p 1 root   root   <a> cultureTest                 "de"
                 ["de" "fi" "en" "nl" "sv" "zh-CHS" "el" "cs" "fr" "pt" "zh-CHT" "hu" "ja" "es" "it" "da" "pl" "ko" "no" "tr" "ru"]
rw--r---r---2p 2 root   root   <a> dateFormat         "$YYYY-MM-DD"
                 ["$YYYY-MM-DD" "$YY-MM-DD" "$MM/DD/YYYY" "$MM/DD/YY" "$DD/MM/YYYY" "$DD/MM/YY"]
rw--r---r---0p 0 root   root   <a> debugMode                 "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---3p 2 root   root   <a> distUnit          "$METER_SHORT"
                 ["$METER_SHORT" "$FEET_SHORT"]
rw--r---r---0p*0 root   root   <b> emissTableActive            true
rw--r---r---0p 0 root   root   <i> emissTableIndex                0
                 [0, 99]
rw--r---r---1p 1 root   root   <b> gpsExists                  false
rw--r---r---2p*2 root   root   <b> hideGraphics               false
rw--r---r---1p 1 root   root   <a> histogramRegion "$HISTOGRAM_REGION_FULL"
                 ["$HISTOGRAM_REGION_FULL" "$HISTOGRAM_REGION_LARGE" "$HISTOGRAM_REGION_SMALL"]
rw--r---r---1p*1 root   root   <a> imageNaming     "$IMAGE_NAMING_SEQ"
                 ["$IMAGE_NAMING_SEQ" "$IMAGE_NAMING_DATE"]
rw--r---r---0p 0 root   root   <i> ipAddress1                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress2                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress3                     0
                 [0, 255]
rw--r---r---0p 0 root   root   <i> ipAddress4                     0
                 [0, 255]
rw--r---r---1p 1 root   root   <a> isothermType              "$OFF"
                 ["$OFF" "$MENU_MEASURE_ISO_ABOVE" "$MENU_MEASURE_ISO_BELOW" "$MENU_MEASURE_ISO_INTERVAL"]
rw--r---r---0p 0 root   root   <i> isothermTypeNumber             4
                 [4, 4]
rw--r---r---2p*2 root   root   <a> lcdIntensity    "$OPTION_MEDIUM"
                 ["$OPTION_HIGH" "$OPTION_MEDIUM" "$OPTION_LOW"]
rw--r---r---1p 1 root   root   <b> overlayLogo                 true
rw--r---r---2p*2 root   root   <a> overlayShowAtmTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowEmiss          "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowObjDist        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRefTemp        "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p*2 root   root   <a> overlayShowRelHum         "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---2p 2 root   root   <a> overlayShowTime           "$OFF"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <a> programButton   "$PROGRAM_BUTTON_HIDE_GRAPHICS"
                 ["$PROGRAM_BUTTON_HIDE_GRAPHICS" "$PROGRAM_BUTTON_INVERT_PALETTE" "$PROGRAM_BUTTON_TOGGLE_PALETTE" "$PROGRAM_BUTTON_VIEW_MODE" "$PROGRAM_BUTTON_IMAGE_ADJUST" "$PROGRAM_BUTTON_NUC" "$PROGRAM_BUTTON_SAVE" "$PROGRAM_BUTTON_PREVIEW" "$PROGRAM_BUTTON_TORCH" "$PROGRAM_BUTTON_ZOOM"]
rw--r---r---1p 1 root   root   <d> referenceTemp            20.000C
                 [2.2e+002, 1.3e+003]
rw--r---r---0p 0 root   root   <b> resetImageCounter           true
rw--r---r---1p 1 root   root   <i> setTime                        0
                 [0, 1]
rw--r---r---1p 1 root   root   <b> setupCalibrateTouch         true
rw--r---r---1p 1 root   root   <b> setupResetDefaults          true
rw--r---r---2p 2 root   root   <a> setupVideoFormat"$SETUP_VIDEO_FORMAT_NTSC"
                 ["$SETUP_VIDEO_FORMAT_PAL" "$SETUP_VIDEO_FORMAT_NTSC"]
rw--r---r---2p 2 root   root   <a> simultaneousSave           "$ON"
                 ["$ON" "$OFF"]
rw--r---r---1p 1 root   root   <b> simultaneousSaveSupported   true
rw--r---r---3p 2 root   root   <a> tempUnit               "$TEMP_C"
                 ["$TEMP_C" "$TEMP_F"]
rw--r---r---2p 2 root   root   <a> timeFormat      "$TIME_FORMAT_24"
                 ["$TIME_FORMAT_12" "$TIME_FORMAT_24"]
rw--r---r---1p 1 root   root   <i> timeZone                       0
                 [0, 2147483647]
rw--r---r---2p 2 root   root   <a> torch             "$OPTION_AUTO"
                 ["$OFF" "$OPTION_AUTO"]
rw--r---r---2p 2 root   root   <a> trigAction      "$TRIG_DIRECT_ONLY"
                 ["$TRIG_NORMAL" "$TRIG_DIRECT_ONLY" "$TRIG_PREVIEW_ONLY"]
 

you get all valid registry entries with
Code: [Select]
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>rls -l
.: (16)
rw--r---r----- 0 root   root   <e> appl                           
rw------------ 0 root   root   <e> calib                           
rw--r--------- 0 root   root   <e> caps                           
rw--r---r----- 0 root   root   <e> dump                           
rw--rw--r----p 0 root   root   <e> image     
...



Thanks, I will try at few days and write what happens.

BTW. is it possible to turn on calibration for 600 degree? just turn on even if there will be mistake +/- 20 degree?

You can do that in the service menu, although I don't have an E4 to test that with... it works for other FLIR cameras however.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 17, 2015, 02:50:47 pm
I wrote here something about the new Flir One G2 with Lepton 160x120.
https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504 (https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504)

I shot comparison photos with Flir One G1, Flir One G2 , Flir E4 and Flir E40 from a motherboard.
The temperature scale is auto-level, but Flir tools use a different "gamma correction" for the color scale of E40.

Flir One G1 Lepton 80x60
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=182641;image)

Flir One G2 Lepton 160x120 Mode: ThermalLinearFlux14BitImage (real Lepton 3 resolution)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=182630;image)


Flir One G2 Lepton 160x120 with hacked config file
Flir added a fake noise, but you see it only with minor temperatur spans
a sample: https://www.eevblog.com/forum/thermal-imaging/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504 (https://www.eevblog.com/forum/thermal-imaging/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504))
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=183002;image)

Flir Ex 320x240
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=182634;image)


Flir Exx 320x240
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=182636;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 17, 2015, 05:32:55 pm
Ohhhh that just makes me want one of the Exx series so much more - the detail you get from that lens is so crispy!
Anyone have one they want to get rid of cheap?  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 17, 2015, 06:00:42 pm
Don't forget, that the Ex has a fixed focus wide-angle lens (hyperfocal distance from near to infinite) and the Exx has a manuell focus tele lens with a very small depth of field until about 5m.

It's often hard to set the right focus on the Exx. So I mostly remove the palette and set the focus on a grayscale image.
Also on a smooth iron palette it's hard to set a perfect focus (on a rainbow palette it's impossible).
I love both cameras (Ex / Exx) for different applications.
I'm really amazed about the image quality of the cheap (gadget) Flir One G2 compared with a hacked E4 = E8  :-+ :-+
In Germany we get 20 FlirOne G2 for the price of one E8  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on November 18, 2015, 10:32:05 pm
Don't forget, that the Ex has a fixed focus wide-angle lens ...
it does not have to remain so  :-/O

but it's a bigger project...

BTW... thanks for your compare.
i will probably buy a F1G2 next time.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on November 19, 2015, 03:10:39 pm

You can do that in the service menu, although I don't have an E4 to test that with... it works for other FLIR cameras however.

I did it! ;) so

instruction for dummies like me;)

1. Connect EXX in RNDIS mode by USB to computer with Windows XP
2. Open browser and write address 192.168.0.2 (ip of camera can be else)
3. Cick Service menu, then active and wait 60 sec
4. Go to Calibration->Enable/Disable Cases
5. Click 0 C to 650 "Enable" Submit


BTW. why when I try to turn ON from 200 to 1200 there is a message "No RBF"
Is here 3D printable lens for EXX? 45 Degree?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 19, 2015, 06:28:00 pm
1. Connect EXX in RNDIS mode by USB to computer with Windows XP
2. Open browser and write address 192.168.0.2 (ip of camera can be else)
3. Cick Service menu, then active and wait 60 sec
4. Go to Calibration->Enable/Disable Cases
5. Click 0 C to 650 "Enable" Submit

Hmmmm - sounds interesting - but it wont work for cameras that have been updated to 2.3.0 due to the service menu files being removed.

I do wonder how hard it would be to restore the needed files?

I am going to look into this when I get home as I have quite a bit backed up from the prev firmware's.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TimmyWilkins on November 19, 2015, 07:56:39 pm
Hey guys, thanks for the hard work and investigating... Just got my E4 the other day and have a quick question. I'm running mostly Linux and while I've found instructions that  describe how to get to the USB mode menu setting [see below], when I get there, I can't actually change the current MSC + UVC mode (meaning: no matter which option I select, it does not change the current mode).

Does anyone have any advice on how to change the USB mode via the menu?

I have the an E4, 2.3.0, 1.2L.

Thanks!

e.g. http://andrew.daviel.org/E4-blog.html (http://andrew.daviel.org/E4-blog.html)
 "Settings/Device Settings/Camera Information by pressing and holding the right cursor for some ten seconds. A new menu appears with USB mode, Export information and Version information"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on November 19, 2015, 08:32:37 pm
Is someone able to solve this problem?
(associated with upgrading the cameras from 1.19.8 to 2.3.0):

More on the site "fubar" http://fubar.gr/hacking-the-flir-e4/] [url]http://fubar.gr/hacking-the-flir-e4/ (http://[url)[/url]  (comments)

E4 updated firmware 1.19 to version 2.3.0
 Unfortunately it does not work HACK MENU
 First, the file extension “conf” is a .cfg ( my camera) and according to the description on this page conf.cfc? (new camera)
 Secondly, when trying to use a Python script, there is a mistake:

applying 5178 bytes of delta at 000004d8
 traceback (most recent call last:)
 file “menu_conf_e4.py” line 12, in
 assert len(d) == len(delta)
 assertionerror …

E8 menu exists but it is incomplete.
 Does not work “MENU free enhancend menu”
etc …
PS
 Camera had a previous hack to version 1.19
Hack resolution from what I’ve seen has been maintained from the previous hack.
 I also wrote to the people of the website “fubar” because that’s where the problem was also prompted tem.
 Does anyone know what is the difference between conf.cfg files and conf.cfc (conf.cfc are in newer releases of cameras)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 20, 2015, 01:49:32 am
1. Connect EXX in RNDIS mode by USB to computer with Windows XP
2. Open browser and write address 192.168.0.2 (ip of camera can be else)
3. Cick Service menu, then active and wait 60 sec
4. Go to Calibration->Enable/Disable Cases
5. Click 0 C to 650 "Enable" Submit

Hmmmm - sounds interesting - but it wont work for cameras that have been updated to 2.3.0 due to the service menu files being removed.

I do wonder how hard it would be to restore the needed files?

I am going to look into this when I get home as I have quite a bit backed up from the prev firmware's.

Well I believe I have restored all the needed files to operate the service menu but I am running into "Production application not available!" errors on any pages that require access to prodapp.exe. The file is present but any attempt to start it seems to silently fail as I cannot see in in the PS list.

I remember talk of messing around with it in older versions but I seem to be coming up short on a solution.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 20, 2015, 02:57:40 am
Does anyone have any advice on how to change the USB mode via

Let me save you time. The answer is no you cant change it in 2.3.0, either stock or doctored one. Just accept this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TimmyWilkins on November 20, 2015, 06:15:38 am
Does anyone have any advice on how to change the USB mode via

Let me save you time. The answer is no you cant change it in 2.3.0, either stock or doctored one.

Ok, I thought there might have been some trick, like using another button or holding it down for longer...

Just accept this.

I've been getting this a lot recently! Will do!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jumbo on November 20, 2015, 11:02:49 am
1. Connect EXX in RNDIS mode by USB to computer with Windows XP
2. Open browser and write address 192.168.0.2 (ip of camera can be else)
3. Cick Service menu, then active and wait 60 sec
4. Go to Calibration->Enable/Disable Cases
5. Click 0 C to 650 "Enable" Submit

Hmmmm - sounds interesting - but it wont work for cameras that have been updated to 2.3.0 due to the service menu files being removed.

I do wonder how hard it would be to restore the needed files?

I am going to look into this when I get home as I have quite a bit backed up from the prev firmware's.

Well I believe I have restored all the needed files to operate the service menu but I am running into "Production application not available!" errors on any pages that require access to prodapp.exe. The file is present but any attempt to start it seems to silently fail as I cannot see in in the PS list.

I remember talk of messing around with it in older versions but I seem to be coming up short on a solution.


Sorry, You misunderstand me, I have E30
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 20, 2015, 11:16:43 am
A little way back in this thread we were asked about upgrading from firmware 1.19 to 2.3 and whether the hack could still be applied.

The response from others and me was to leave the camera at firmware 1.19. Sadly the reason for this is as you have experienced. IIRC some clever members of this forum managed to circumvent the encrypted protection applied by FLIR to firmware 2.3. The work-around does not work well with cameras upgraded from firmware 1.19 to 2.3 as the file structures are different. Firmware 2.3 was also stripped of useful 'engineering' functionality so that such could not be utilised to aid hacking. It was FLIRs most serious attempt to prevent the E4 upgrade to date.

Firmware 1.19 is the last firmware that not only performed well, but is also eminently suitable for upgrades and changes. It does not contain any serious anti hacking protection, or sanitisation of engineering files. Firmware 2.3 may have been tamed by members of this forum, but it remains a hobbled version of 1.19. Any improvements made to 2.3 are offset by what is lost in terms of adaptability.

For anyone thinking of upgrading from 1.19 (or 1.21/1.22) to 2.31, think very carefully about what you will gain and lose. At this time there is no reversion route back to 1.19.

Just my 2 cents as a long term user of the technology.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 20, 2015, 11:22:53 am
the firmware 1.19.8 does not support "Realtime raw radiometric data streaming via UVC"

successful upgraded the E4 from 1.19.8 to 2.3.0 with Flir Tools
The resolution hack survived the update (nothing else to do).

the RAW stream grabbing now works fine :)

see details for RAW streaming:
https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604 (https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604)
(https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?action=dlattach;attach=170013;image)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 20, 2015, 11:29:15 am
I added in my old post a picture from a hacked Flir One Gen 2
The Flir library make an internal upscale to 200%

 
I wrote here something about the new Flir One G2 with Lepton 160x120.
https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504 (https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/msg801504/#msg801504)

I shot comparison photos with Flir One G1, Flir One G2 , Flir E4 and Flir E40 from a motherboard.
The temperature scale is auto-level...

Flir One G2 Lepton 160x120 with hacked config file
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=183002;image)

Flir Ex 320x240
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=182634;image)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 20, 2015, 11:34:30 am
@Tomas123,

Some users are using the RPi and other hosts for video streaming out of firmware 1.19, but not RAW data (?). The decision to upgrade to 2.3 is dependant upon what is gained Vs what is lost. With no reversion route, the decision is not simple for some users who may need a more adaptable firmware.

I personally do not need or want streaming out of my camera so the decision to stick with 1.19 is easy.

Thanks for highlighting one of the positives relating to 2.3.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 20, 2015, 12:11:33 pm
@Fraser
I think, that no more than 3 eevblog readers use the raw streaming feature  :'(

PS: What do you think about the image quality of the new Lepton sensor?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 20, 2015, 01:49:23 pm
The new Lepton 3 performance is limited by the lens system and the small microbolometer is a compromise solution in order to achieve its diminutive dimensions. That said, I am VERY impressed with what FLIR have achieved with this core. It's tiny 😀

I am a little disappointed that FLIR have seen fit to have MSX permanently enabled and to do their usual trick of degrading the image quality so that the cheaper product line does not impact on the more expensive product lines. It's just the companies marketing policy at work but it would be great to 'tweak' the APP to enable the cameras full capabilities. The cropping of the image was also an unpleasant surprise. If MSX alignment was the issue, a suitable visible light camera lens should have been used to match the thermal camera FOV. I believe the issue is actuall more to do with the poor performance of the thermal camera lens and its associated distortion. Somewhat of a waste of good pixels though.

All in all, I believe the F1G2 and the LEPTON 3 used within it, offer excellent value for money and performance in line with what I would expect of FLIR in this market segment.

And at least FLIR make their SDK freely available to users without any jumping through hoops or NDA's 👍

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 20, 2015, 02:35:20 pm
I think, that no more than 3 eevblog readers use the raw streaming feature  :'(

Without a easy way for it to run on winblows - even with the awesome instructions I think it went over 99.99% of peoples heads...
I have been working with computers for 25 years and have so rarely needed to touch linux I would without question call myself a n00b and I got it running - but it was much more of a time investment then I normally put in and can see why there was so little feedback on it.

Still a cool feature none the less!

With 2.3.0 and the newer menu hack you can get very similar (but not raw) output without extra graphics on the screen on winblows with common tools already as well so that could be a contributing factor as well.

Sorry, You misunderstand me, I have E30

Ahhh - yes that could make a difference!

Still though - restoring the engineering menu on E4+ with 2.3.0 could be useful.  Still playing around trying to find out what could be stopping the prodapp service from running or if it needs other files from other folders (not just the exe) to work correctly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 20, 2015, 02:40:43 pm
And at least FLIR make their SDK freely available to users without any jumping through hoops or NDA's 👍

The SDK is freely avaible, after an email registration. With the SDK it's simple to write apps without MSX, but currently nobody develop a nice app  :(

I think, that the Flir One "SDK License Agreement" contains no more mantraps as other license agreement
http://developer.flir.com/register/ (http://developer.flir.com/register/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 20, 2015, 03:08:16 pm
FLIR are running F1G2 'hacker' events around the world at the moment. An interesting concept to encourage new APP development, and community buy-in to the platform.  The term 'Hacker' is not really appropriate to these events though. Developer events would be a more accurate term IMHO. Sadly we could see FLIR wishing to limit any true hacking of the hardware or firmware at such events as it likely does not suit their business model.

Maybe FLIR recognise that the user community could be a wonderful 'developer soup' from which to gain new and interesting applications that promote the product line.

I wish SEEK Thermal was as forward thinking. It could have lead to many excellent new APPS for that platform.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 20, 2015, 03:08:25 pm
FLIR are running F1G2 'hacker' events around the world at the moment. An interesting concept to encourage new APP development, and community buy-in to the platform.  The term 'Hacker' is not really appropriate to these events though. Developer events would be a more accurate term IMHO. Sadly we could see FLIR wishing to limit any true hacking of the hardware or firmware at such events as it likely does not suit their business model.

Maybe FLIR recognise that the user community could be a wonderful 'developer soup' from which to gain new and interesting applications that promote the product line.

I wish SEEK Thermal was as forward thinking. It could have lead to many excellent new APPS for that platform.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on November 20, 2015, 04:11:14 pm
Holder for macro lenses. Designed for Flir E-series. New model. Perhaps someone interesting. https://youtu.be/UG-XuUb1GrU
In the photo the photo of your hand. Black dots are pores. Through them, the skin is cooled.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on November 20, 2015, 05:29:39 pm
Nice images, for macro work the modified E4 plus a 3d printed lens holder beats a standard E60 hands down.
For maximum effect try rainbow or rainbow high contrast palettes, would make those images even more impressive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Detsorgsekalf on November 23, 2015, 09:42:09 am
Greetings
Is it possible to measure area on a thermal image using FLIR Tools?
Can you help me to create panorama from i3 (upgraded to i7) images?
The panorama from flir tools plus is very bad.
I've read post #2085 from tomas123 about it, but I didn't understand it well.
Thank you
Yauheni
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 24, 2015, 03:27:25 pm
Can you help me to create panorama from i3 (upgraded to i7) images?
The panorama from flir tools plus is very bad.
I've read post #2085 from tomas123 about it, but I didn't understand it well.

What steps are you having issues at? Are you seeing errors?
I have played with making pano's quite a bit using tomas123's script.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on November 26, 2015, 12:58:39 pm
I am often asked about my telephoto lens for Flir E-series. I sent the lens to  friend for the test. He made a lot of tests. In the photo some of them. Comparison of digital and optical zoom. The use of the diaphragm in front of the eyepiece. Aperture increases depth of field and contrast but also increases noise. This is well illustrated by the example of the walls of the house. Some apartments have external insulation. Distance to wall about 80m.
 The results of the tests are good but I want to do even better.
Title: Locking the temperature range after restart
Post by: lwi004 on November 26, 2015, 01:36:42 pm
Hi

I have an E8+......

Can't rememebr which of the latest menu  hacks but somehwere in Dec 2014. It's 2.3.0

Is there anyway of keeping the manual range between shutdowns?

Thanks.

I'm wondering if the new presets in the advanced 2014 menu hack of Janekivi would solve this? ---------- Just installed latest update - No it doesn't save the temperature range in a preset!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pauloven on November 26, 2015, 04:20:04 pm
Nice! the first telephoto I see for E series>>>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomtom007 on November 26, 2015, 04:52:48 pm

You can do that in the service menu, although I don't have an E4 to test that with... it works for other FLIR cameras however.

I did it! ;) so

instruction for dummies like me;)

1. Connect EXX in RNDIS mode by USB to computer with Windows XP
2. Open browser and write address 192.168.0.2 (ip of camera can be else)
3. Cick Service menu, then active and wait 60 sec
4. Go to Calibration->Enable/Disable Cases
5. Click 0 C to 650 "Enable" Submit


BTW. why when I try to turn ON from 200 to 1200 there is a message "No RBF"
Is here 3D printable lens for EXX? 45 Degree?

How to switch to the Service Menu?

I have an E5 with 1.1L hardware and 1.22 firmware. Telnet and FileZilla are working perfect. Upgrade Resolution and Menu no problem.
When I type in 192.168.0.2 I get the Main Menu. When I change to the Service Menu und
type in the User Name: flir    and the Password: 3vlig     I get the error massage, that the web side
is not found. I have a Flir B50 and there are no problems......   

Do anyone know the reason why I cannot switch into the Service Menu?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 26, 2015, 07:09:03 pm
I have an E5 with 1.1L hardware and 1.22 firmware. Telnet and FileZilla are working perfect. Upgrade Resolution and Menu no problem.
When I type in 192.168.0.2 I get the Main Menu. When I change to the Service Menu und
type in the User Name: flir    and the Password: 3vlig     I get the error massage, that the web side
is not found. I have a Flir B50 and there are no problems......   

Do anyone know the reason why I cannot switch into the Service Menu?

I believe it was removed in later firmware's. I have managed to put back the web components but there is a application required to be running as well to allow the more advanced features of the service menu to work that I have not been able to get running. (prodapp.exe)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on November 26, 2015, 08:40:02 pm
Yes unfortunately with the later versions the service menu is not available.

I'm hoping to find a workaround to extend the range to 650C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on November 27, 2015, 12:28:09 am
I have an E5 with 1.1L hardware and 1.22 firmware. Telnet and FileZilla are working perfect. Upgrade Resolution and Menu no problem.
When I type in 192.168.0.2 I get the Main Menu. When I change to the Service Menu und
type in the User Name: flir    and the Password: 3vlig     I get the error massage, that the web side
is not found. I have a Flir B50 and there are no problems......   

Do anyone know the reason why I cannot switch into the Service Menu?



Hi! You mentioned "prodapp.exe". May it happen we could use one from the earlier firmware then? I have just checked the application on my 2.3.0, it is not there. Maybe if we add one from the earlier firmware, it will work? Where can I get one?

I believe it was removed in later firmware's. I have managed to put back the web components but there is a application required to be running as well to allow the more advanced features of the service menu to work that I have not been able to get running. (prodapp.exe)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 27, 2015, 06:07:52 am
Hi! You mentioned "prodapp.exe". May it happen we could use one from the earlier firmware then? I have just checked the application on my 2.3.0, it is not there. Maybe if we add one from the earlier firmware, it will work? Where can I get one?

I restored a copy from a prev backup and it fails to run when called. I also tried stopping the 2.3.0 appcore and starting the matching one for the prodapp and it will not run as well. It likely needs more or too much has changed in 2.3.0 - but I have been unable to determine what.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: irgendjemand on November 28, 2015, 08:43:24 pm
I just got a new Flir E4 (after waiting for 2 weeks for that dealer to get it, so this was not out of stock ...) and that one has Software 2.8.0
Hidden menu tells me it was last calibrated 2015-11-20 - wow that was just a week ago.

Is there already any experience with resolution and menu enhancements for this release?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on November 29, 2015, 02:54:28 am
Well, we all knew this will happen sooner or later... bad luck for you! Unless you are a joker and making a joke of us, this means that all the hacks are not applicable any more.

For the other guys on the Community, please post all the relevant info you have about the new firmware release, so newbies could read and escape buying the brick...

For the one who posted this, please post your last 4 serial number digits. This will also help to avoid unnecessary trouble for the newbies.

Thank you! 

P.S.: so far, no 2.8.0 firmware download is available on the Flir website. Those who remember previous firmware change - can you remember when the new firmware became available on the site after they started to ship it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: irgendjemand on November 29, 2015, 07:26:15 am
>Unless you are a joker and making a joke of us, this means that all the hacks are not applicable any more.
At first I did not trust my eyes, especially because 2.3.0 and 2.8.0 look a bit similar.

>For the other guys on the Community, please post all the relevant info you have about the new firmware release, so newbies could read and escape buying the brick...
I don't have much information, because I don't know what to look for. I did a backup of the files that can be copied via FTP
Looking at version information the menu tells me the only difference to my other E4 is:
appkit 2.1.6
fvd 18.0.91.0

>For the one who posted this, please post your last 4 serial number digits. This will also help to avoid unnecessary trouble for the newbies.
I am not sure about the structure of the serial. I guess the first 3 digits are always the same. Followed by 5 individual digits. These 5 digits are different from my other Flir E4 that is 1,5 years old. Wouldn't it be better to post the first 5 digits?
I guess the best idea if you want to buy one is get hold of it and check for the software release in the camera menu.

To be honest, I will return this one to the dealer I try to get hold of an older one.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: HighVoltage on November 29, 2015, 10:00:01 am
keep in mind, that there are sellers offering the E4 brand new with hack applied already, for those that are not sure if it will work or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on November 29, 2015, 07:49:18 pm
Hi
I am new user of hacked flir E4 and have a few question.

1) is it normal when I set emissivity OTHER THAN 0,95 it will be displayed on the screen and if set 0,95 will NOT be displayed?

2) Have installed trial version of flir  tools + and according to this video https://www.youtube.com/watch?v=xxdMrcxofao (https://www.youtube.com/watch?v=xxdMrcxofao) I see there capture buttons (1:23). But I don't have them, why? (BTW I can stream and record via Flir IR Camera Player).

3) my flir IP is 192.168.1.2. I can see System Information http://192.168.1.2/SysInfo.asp (http://192.168.1.2/SysInfo.asp) but when click Service Menu http://192.168.1.2/service/index.asp (http://192.168.1.2/service/index.asp) have only "The requested URL was not found."

4)
I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
When the E4 is busy charging you press the LEFT button and the RIGHT button at the same time for a while.
Edit: to clarify, the camera should be attached to usb or charger (obviously) and powered down.
How to close batery stats?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 29, 2015, 08:55:45 pm
Hi
I am new user of hacked flir E4 and have a few question.

1) is it normal when I set emissivity OTHER THAN 0,95 it will be displayed on the screen and if set 0,95 will NOT be displayed?

2) Have installed trial version of flir  tools + and according to this video https://www.youtube.com/watch?v=xxdMrcxofao (https://www.youtube.com/watch?v=xxdMrcxofao) I see there capture buttons (1:23). But I don't have them, why? (BTW I can stream and record via Flir IR Camera Player).

3) my flir IP is 192.168.1.2. I can see System Information http://192.168.1.2/SysInfo.asp (http://192.168.1.2/SysInfo.asp) but when click Service Menu http://192.168.1.2/service/index.asp (http://192.168.1.2/service/index.asp) have only "The requested URL was not found."

4)
I can't open the battery stats on the Flir E4.
What do you mean with "hold LEFT + RIGHT cursor"?
When the E4 is busy charging you press the LEFT button and the RIGHT button at the same time for a while.
Edit: to clarify, the camera should be attached to usb or charger (obviously) and powered down.
How to close batery stats?


1) Yes - that's what mine does. (hardware v1.0, firmware v2.3.0)

2) FLIR cripples that feature so it can only be used with higher end cameras. If you want to record, use some of the many other tools out there that can be found by using search.

3) FLIR have removed that function from later firmwares - no public method of restoring it has been found yet that I am aware of if your on 2.3.0. If you are on an older version it may be possible but some one else would have to chime in and verify that.

4) To get rid of the power meter percentage on the charge screen you need to reboot the camera totally. This can be done by removing the battery and power cord, or while the camera is on - press and hold the power button for longer then 5 seconds till the screen goes blank.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 29, 2015, 09:43:35 pm

2) Have installed trial version of flir  tools + and according to this video I see there capture buttons (1:23). But I don't have them, why? (BTW I can stream and record via Flir IR Camera Player).


more infos here:
Realtime raw radiometric data streaming via UVC
https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604 (https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on November 29, 2015, 11:00:43 pm
Realtime raw radiometric data streaming via UVC
https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604 (https://www.eevblog.com/forum/testgear/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/msg729604/#msg729604)

"You need a E4 firmware 2.3.0!!"

Have fw 1.21.0 hw 1.1L
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 29, 2015, 11:11:22 pm

successful upgraded the E4 from 1.19.8 to 2.3.0 with Flir Tools
The resolution hack survived the update (nothing else to do).

the RAW stream grabbing now works fine :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on November 30, 2015, 03:04:14 pm
Menu hack also survived?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on November 30, 2015, 05:40:51 pm
Menu hack also survived?

There are newer menu hacks for the newer firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 30, 2015, 05:51:14 pm
sorry, I don't use the menu hack because I'm happy with the native menu functions of E4
image post processing is my world  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on December 01, 2015, 12:53:33 pm
There are newer menu hacks for the newer firmware.
Yes, but this hacks are for new camares with 2.3.0 firmware. I read if have old firmware should not update to 2.3.0 becouse of problem with hacks

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg656886/#msg656886 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg656886/#msg656886)
Quote
IF YOU HAVE A 1.xx CAMERA: NEVER UPGRADE YOUR CAM - JUST USE THE OLD HACKS
FLIR DID NOT ADD ANYTHING OF RELEVANCE EXCEPT MORE TROUBLE AT HACKING

http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)
Quote
There seems to be some issue with cameras that have been upgraded from 1.xx to 2.3.0. For the time being it is recommended to NOT upgrade the camera and use the hack technique for 1.xx firmwares described in the eevblog thread instead.

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg670530/#msg670530 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg670530/#msg670530)
Quote
I have a problem
E4 updated firmware 1.19 to version 2.3.0
I acted in accordance with hack http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)
Unfortunately it does not work HACK MENU

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg691117/#msg691117 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg691117/#msg691117)
Quote
The issue arose for users who upgraded from the earlier unencrypted file system to the later encrypted V2.3. The two are not the same structure and this causes problems when trying to employ the FW 2.x 'hack'.


PS
1. I can't change isolation value (18 on screenshot); when click up/down button I change color palette, but not value. How to change value?
2. I changed temparature range to manual. When click up/down button temparature range (higher and lower)  is changing. They are changing together. Can I change high and low range independently?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nowlan on December 01, 2015, 01:27:33 pm
I was wondering if possible to change the custom boot message on the enhanced flirs, to include "property of <name>" contact <phone>".
Is the image just a plain jpeg?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 01, 2015, 02:00:57 pm
@MYU

2. Use left/right buttons to select a limit , then up/down to change the selected limit
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 01, 2015, 02:13:58 pm
I was wondering if possible to change the custom boot message on the enhanced flirs, to include "property of <name>" contact <phone>".
Is the image just a plain jpeg?

I did it to mine - if I remember correctly it's just a bmp.

MYU - doing anything to the camera aside from using it the way FLIR intended carries risks. 100 people could have no issues but then by fluke 1 person may brick their camera. I am not telling you to do anything - I can only offer my experience. I had a 1.0/1.18 camera that was hacked and menu modded and I upgraded it to 2.3.0 and applied the new menu mod to it and it works fine for me. Yes I lost the web service menu but I find the camera better for what I use it for and have encountered no other issues.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 01, 2015, 03:11:01 pm
just following up on the post a couple of days ago.

I bought an E4 from a UK test equipment company last week, which was delivered on Friday 27/11/15.

My plan was to upgrade the E4 for the higher resolution and I was expecting to see Firmware 2.3.0. I got 2.8.0!!!! I have been able to put the E4 into RNDIS mode and backup the files onto my 64bit Windows 7 machine, however I dont want to run those Python scripts on V2.8.0 and Fubar my new E4.

not sure what to do, as the only reason I bought was because of the upgrade option. Clearly I can send the E4 back and buy another one with confirmed firmware version, but it seems a bit unfair on the seller.

is it realistic to expect some kind of hack on 2.8.0 at some point, based on the previous history and the determination of some very talented people to help this community.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on December 01, 2015, 03:22:11 pm
I have insulation and condensation alarm but can't access to thesea alarms submenu as can see in video (9:13)
https://www.youtube.com/watch?v=dP8R7FRYU0k (https://www.youtube.com/watch?v=dP8R7FRYU0k)

My fw 1.2.1, hack done with this instruction
https://www.youtube.com/watch?v=oXJYv_MxIHw (https://www.youtube.com/watch?v=oXJYv_MxIHw)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 01, 2015, 10:45:48 pm
MYU - They are there on my 2.3.0 modded one.

Some one with a modded 1.21/1.22 may need to chime in and say if they have those menu's - it could be that the menu mods for earlier versions do not support those sub menu's. You may not be missing anything - they may simply not be there in the first place.

I believe janekivi who did the 2.3.0 menu mods went quite a bit deeper then what was done in the past to expose more features  :-+ - his advanced menu offers more then I could ever use so I never installed it - just the normal one is awesome.

Dave before you send it back you should set something up to record the screen and go though all the menus/screens/sub menus and upload it so we can see what if anything has changed of importance. Also that backup you made may come in handy to some of the more talented people here so zipping and uploading it as well may be helpful with future hacks. (only if your OK with your s/n being public)

I whipped up a little script that you can run if you have ffmpeg and the FLIR drivers installed that does a good job of recording the screen on even a low end tablet you can read about here: https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg609274/#msg609274 (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg609274/#msg609274)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 02, 2015, 09:41:23 am
For those wanting extra menu features on earlier cameras the consensus is that it's risky to do anything other than the "known good" modification for your firmware version. Besides all the menu features are available in Flir Tools for post processing which is good enough for most applications.
During most thermal imaging you want to get good images first then analyse them on Flir Tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 07:25:26 pm
What's the general consensus?

I have an E4 with 2.8.0 firmware. I bought it so that I could mod it to give the increased resolution.

Do I return it, or wait for a hack?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on December 02, 2015, 08:01:47 pm
What's the general consensus?

I have an E4 with 2.8.0 firmware. I bought it so that I could mod it to give the increased resolution.

Do I return it, or wait for a hack?

Did you try the 2.3.0 hack(make sure you back everything up)? What is the calibration date? Any different features?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 02, 2015, 09:34:21 pm
Really 2.8.0 or is this just a typo for 2.3.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 10:05:04 pm
I have a camera here with v 2.8.0 firmware!

someone else posted that they had one as well a week ago.

I have just tried to apply the Python script for 2.3.0 and got an error message in cmd.exe

will take a screenshot and try to upload it.

DaveWB,

looking at the menus available to me this camera seems pretty basic. there don't seem, or I haven't found them yet, any advanced options like dew point detection or choices to change the on screen display info.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 10:09:02 pm
this is what happened when I tried the 2.3.0 update with 2.8.0 firmware
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 02, 2015, 10:16:53 pm
Dave - I don't know how you made that screenshot - but I can read anything of use from it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 10:27:57 pm
neither di I.lol

try this one

calibration certificate says 23rd November 15
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 10:30:13 pm
lol. nightmare. try this one
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 02, 2015, 10:33:02 pm
now you see where I get my name. its not you its me!

try this one
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 03, 2015, 03:09:30 am
now you see where I get my name. its not you its me!

try this one

I never used any auto patcher for mine since I started on  1.18.7 so I am not quite sure how it works - but the error kinda looks like you ran it once, it didn't work do it's in a dirty state, so you ran it again and now it's giving you an error that it tried and failed before and you need to clean it up before trying again to get the real error.

Some one who has actually used that before may be of more help at this point.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 03, 2015, 03:00:19 pm
my two cents:
I don't understand why "all" Ex owners need the overloaded extented menus with PiP, alarms etc.
https://en.wikipedia.org/wiki/Feature_creep ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 03, 2015, 05:06:00 pm
Hi Tomas!

I'm not interested in any menu hacks! I just want to get my E4 working at its native resolution. Hopefully someone will be able to help me.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 03, 2015, 05:39:21 pm
Something to keep in mind - we don't know if there has been a hardware update to go with this new 2.8.0 firmware.

I do remember seeing a lepton fpga bin with the 2.3.0 firmware package. If they re-spun the hardware on the E4 - it could already be at it's max at 80x60.

More details really should be know about these new 2.8.0 units before any attempt at modding them is made.

We should see a file system backup, perhaps a macro picture of the lens area, and more details from the device info screen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on December 03, 2015, 07:03:27 pm
Hi
In the last few days I learned to make a FTP to a device with Filezilla and / or CMD and use CMD on files :)
I have back-up all files in my E4, CMD can read the E4 files, and Python is also recognized by Windows, so far so good.

In the step by step instruction (see image) I read;
"If all that works, type "quit" to exit and close ftp connection"
and a few lines further:
"it will read two files from your cam and stores them in a backup folder"
Question: how can Python read files from the camera if the ftp connection is closed?

And also:
" you will find newly created conf.cfc and common_dll.dll in that folder and upload them back to the camera"
"In case you get an error 500 at the upload, you have to upload the files manually by FTP"
thus in both cases I must manually upload the files?

Garrett
If all your files are in the same folder all you have to do is open cmd, switch directories to that folder (ex. "cd C:/Python27"), then in cmd write
"python apply.py apply 192.168.0.2"

first word is python for the app
second is to run the apply.py "program"
apply is to tell it to run the apply command
192.168.0.2 is the ip of your cam(you can check this by typing ipconfig into cmd) sometimes it is 192.168.1.2 for people or something similar

after that it should automatically upload the files to the camera, if it fails go into FileZilla and upload them manually(i've never seen anyone have to do this)

Then take the .cfc file in the camera(MAKE SURE YOU "REFRESH" THE DIRECTORY IN FILEZILLA TO UPDATE TO THE NEW CFC FILE) and drop it in the python27 folder where all your files are and click/run the menu_conf.py, then take the new conf.cfc file it created and upload it to the camera. after this you just go into flirinstallnet and run the 2.3.0 menu.fif file and wa la you have a fully modified cam.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 04, 2015, 08:47:18 am
I have a camera here with v 2.8.0 firmware!

someone else posted that they had one as well a week ago.

I have just tried to apply the Python script for 2.3.0 and got an error message in cmd.exe
Be happy that you only got an error message and not a ... in germay we say ... paperweight  ;)

don't forget the history of resolution hacks:
The first generation of Ex used only a uncrypted config file with a simple crc checksum
The second generation used a crypted config file
The third generation adds a hard coded resolution entry inside the ROM or FPGA because "we" hacked the common_dll.dll

You can ugrade the first generation of E4 with uncrypted (!) config files to FW 2.3 (simple use Flir Tools) without loosing the resolution hack. Therefore also the second generation has a hard cooded ROM/FPGA resolution entry.

If I don't know what I do, I would never run a third generation common_dll.dll patch script over FW 2.8.0 !!!!

The next steps are looking inside all logs (like ppr.log and prod.log) and then get a full list off the registry with
> rls -r -l
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 04, 2015, 10:20:36 am
If someone can point me to a software update to 2.8.0 (or just scraped from the device), I'd be happy to take a look.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 04, 2015, 11:55:30 am
Cheers guys.

Tmbinc,

Let me know exactly what you want, in an ideal work, and i will set it up/ download it ect ect.

I already backed up the camera when I connected to it with Filezilla.

Fyi. The passwords for 2.3.0 seemed to work with Filezilla, however I couldn't get the passwords to work when accessing the cameras IP address through a browser.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 04, 2015, 12:33:19 pm
Is there a way to create a palette and define the actual temperature range in it as well? Eg anything below 25C is always blue , going through a colour range and then everything above 125C is always black for example?

As i cannot seem to find a way of locking the manual scale range after a restart etc, I'm wondering if I can do the same thing by defining a pallet which only covers the range I'm interested in and doesn't shift depending on the min and max.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 04, 2015, 01:13:42 pm
Is there a way to create a pallette and define the actual temperature range in it as well? Eg anything below 25C is always blue , going through a colour range and then everythimng about 125C is always black for example?

As i cannot seem to find a way of locking the manual scale range after a restart etc, I'm wondering if I can do the same thing by defining a pallet which only covers the range I'm interested in and doesn't shift depending on the min and max.

Thanks

https://www.iredltd.co.uk/palettes/ (https://www.iredltd.co.uk/palettes/) change the underflow and overflow
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 04, 2015, 02:09:17 pm
Thanks Chanc3

I may be being a bit dim today (or one of my senior moments). But how do I define a Fixed TEMP as the underflow and overflow points?

To me it seems, it will still use the range which is being decided  on by the camera, as opposed to me having fixed the range in the actual palette.

At a guess I don't understand what all the parameters are doing!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 04, 2015, 02:33:45 pm
Thanks Chanc3

I may be being a bit dim today (or one of my senior moments). But how do I define a Fixed TEMP as the underflow and overflow points?

To me it seems, it will still use the range which is being decided  on by the camera, as opposed to me having fixed the range in the actual palette.

At a guess I don't understand what all the parameters are doing!!

You need to look at it this way:

Range - The minimum to maximum temperatures the camera can detect (in most cases it's -30°C to 160°C)
Level - What the user has set the camera to, e.g. 10-25°C
Span - is the difference, so with the example above, it is 15°C

You won't be able to change the range to anything other than the preset ranges, most cameras have two, some 1, few have 3.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 04, 2015, 02:55:05 pm
Thanks for the clarification. Is it therefore possible to fix the level in the palette?

As mentioned I would like to store a set level in the camera of +25 to +125 for electronics testing but every time I switch the camera off, I need to go back and maually set it again.

Thanks in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 04, 2015, 04:28:32 pm
Thanks for the clarification. Is it therefore possible to fix the level in the palette?

As mentioned I would like to store a set level in the camera of +25 to +125 for electronics testing but every time I switch the camera off, I need to go back and maually set it again.

Thanks in advance

I don't think .PAL files actually contain any temp data or set values like that in them.

The palette is dynamic and will always change depending on what your looking at unless you lock the temperature scale into a manual mode.

Unfortunately FLIR decided to clear manual mode when you suspend or power off Ex cameras. (likely to aid in usability for simpler users - "ahhh I messed something up" - rebooted/fixed)

This seems to me like a coded function so it does not look like there is a way to stop it via config files. (Some one else should check - I didn't look hard)

However there is software that I have seen on this form that looks like it could quickly set the values if you have your E4 connected to a PC. (most things can be controlled via telnet if you do your homework)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 04, 2015, 08:58:43 pm
Hi Orby,

Do you mean that by using telnet I can permanently change the level or just that I can do it manually everytime but a bit quicker. AS the unit is moved round the wor karea, keeping it tied to a PC is a no-go.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 04, 2015, 09:20:40 pm
Hi Orby,

Do you mean that by using telnet I can permanently change the level or just that I can do it manually everytime but a bit quicker. AS the unit is moved round the wor karea, keeping it tied to a PC is a no-go.

Not perm - just quicker manually.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lwi004 on December 05, 2015, 07:58:51 pm
That's a shame. Permanent would have been so much nicer.....  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 05, 2015, 08:16:19 pm
Hello
someone managed to unlock firmware 2.8.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 05, 2015, 08:27:37 pm
I own a Flir E6 and it would be nice, to also have the 320x240 Resolution. I managed to downgrade to 2.3.0 but now, i dont have the matching conf.cfc Delta-File. I didn't read all the 499 pages. So, did someone had success with an Flir E6?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Blue on December 05, 2015, 11:04:44 pm
Hi,

I did not like the resolution of my E4->E8 device.
I returned it after reversing it back to the original E4.

Now I got a therm-app. Much nicer!!!! Higher resolution, better germanium lens than an E8 (hacked E4) and that for the price of a E4.

Have a look at https://www.flickr.com/groups/therm-app-users/discuss/ (https://www.flickr.com/groups/therm-app-users/discuss/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on December 06, 2015, 04:37:12 am
I own a Flir E6 and it would be nice, to also have the 320x240 Resolution. I managed to downgrade to 2.3.0 but now, i dont have the matching conf.cfc Delta-File. I didn't read all the 499 pages. So, did someone had success with an Flir E6?
Downgrade? Did the unit have 2.8.0? Yes E6 has been done.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 06, 2015, 02:18:38 pm
Yes, i downgraded it with the official 2.3.0 Firmware files and the included manual. Before, it was 2.8.0. Menu hack is working, But for the res-hack i need the E6 specific diff of the config file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 06, 2015, 04:44:49 pm
matmoe ? Where you can download the 2.3.0 firmware downgrade E4?
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 06, 2015, 06:27:57 pm
The Filename is "flir_ex_pn639_v2.3.0_update_pack.zip" and i think, i downloaded it with the Flir Tools Software. I used it to downgrade my E6, so i dont know if its working with all Ex based cameras (Manaul says: This Notice to customer applies to FLIR Ex series cameras (S/N prefix: 639).).

I've uploaded it. Here is the download link: http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)

The manual says:

Code: [Select]
1 Manually updating FLIR Ex series cameras

1.1 Applicability
This Notice to customer applies to FLIR Ex series cameras (S/N prefix: 639).

1.2 Introduction
FLIR Ex series cameras can be manually updated by loading a special configuration file (*.fif) using FLIR Tools.

1.3 Procedure
Note Make sure that the battery is fully charged before following this procedure.
Follow this procedure:

1. Install FLIR Tools on your computer. FLIR Tools can be downloaded from http://support.flir.com/tools.
2. Start the camera.
3. Connect the camera to the computer using a USB cable.
4. On the Help menu in FLIR Tools, click Check for updates. This displays a dialog box.
5. Press SHIFT+CTRL+ALTand click anywhere inside the framed area in the screenshot below. This displays a Windows Explorer pane.
6. In the Windows Explorer pane, go to the unzipped folder on Desktop.
7. In the folder, select the *.fif file.
8. In the same folder, select the eFLIRInstall.exe file.
9. Click Update.
10. Disconnect the camera when asked to do so.


This starts the update process. The installation progress is displayed on the camera screen.

If you use it for downgrading, its on your own risk: DONT BLAME ME IF IT BRICKS YOUR CAMERA!
I thought, if its from the manufacturer, it should eather be working or doesn't allow downgrading. And it worked.....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 07, 2015, 08:54:38 am
2.3.0 downgrade comes upload file * .fif using FLIRInstallNet.exe ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 47MHz on December 07, 2015, 10:59:27 am
 >:( >:( >:(

Guys, be careful with downgrade your new 2.8.0 camera with 2.3.0 firmware. I bricked two of my E4 trying to reflash them from 2.8.0 to 2.3.0 ;( One of them - black screen, no reaction to power button, and the other one hangs with FLIR logo.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 07, 2015, 11:25:38 am
47MHz - Thanks for the warning. The problem arose when the downgrade, or when applying the hack? Let us know if you corrected it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 07, 2015, 12:14:05 pm
Ups ...
Send to flir service
Besides, I think it's a very stupid idea to install the old version of "forced"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 47MHz on December 07, 2015, 01:48:18 pm
47MHz - Thanks for the warning. The problem arose when the downgrade, or when applying the hack? Let us know if you corrected it.

I was trying to downgrade the firmware from 2.8 to 2.3 and this is the result  |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 07, 2015, 02:05:09 pm
Hello
someone managed to unlock firmware 2.8.0?

No ones even manged to make a backup of it available so that anyone who is interested would be able to attempt to try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 07, 2015, 06:49:38 pm
Can someone create or send me the needed "conf.cfc.delta.e6" File?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 07, 2015, 10:29:01 pm
Here's the delta for 2.3.0 E6:

conf.cfc.delta.e6:

[(1068, '\x02\x04'), (1116, '\x03\x06'), (5443, '\x04\x05')]

Unfortunately it has the same size as the e5 config file, so my script can't auto-detect. Easiest is to just take the v0.4 hack, and overwrite conf.cfc.delta.e5 with the e6 delta.

Do it on your own risk!

47MHz, let me know if you can't send the bricked one back to service.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on December 08, 2015, 06:28:55 am
Goddamnit, you mean THE VERY WEEK I decided to finally buy an E4 we get notice that Flir have released a new firmware?!

I'm sure we'll get this one hacked in due time too but the timing makes me sad. Maybe my unit will be older stock with 2.3.0 on it... -crosses fingers-

No ones even manged to make a backup of it available so that anyone who is interested would be able to attempt to try.

What's the process for making a backup? I'm happy to do this when my camera rocks up, if it has 2.8.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 08, 2015, 09:42:56 am
Does someone know how to dump the kernel (and not just the filesystem)?

My WinCE experience is pretty limited.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 08, 2015, 01:06:13 pm
"Sadly" now i'm on 2.3.0. Maybe its working with telnet an some oldschool file-edit/print/cat/copy commands. Does WinCE have autostart or something like autoexec.bat. It might be helping, copying the files before they will be locked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on December 08, 2015, 01:46:33 pm
Does someone know how to dump the kernel (and not just the filesystem)?

Last time I checked (2 years ago...) you could unpack the update and extract the files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on December 08, 2015, 02:01:59 pm
I wasn't able to find an update to 2.8.0. All we have are devices with that firmware on it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 08, 2015, 08:43:55 pm
So THIS is really crazy! Its working!!!  :clap: :clap: :clap: :-+ :-+ :-+
!! THANK YOU ALL !!
Resolution Hack to 320x240 and Advanced Menu

After reading several hunderts of postings and help from some members its working ;)
Did it with the common_dll.dll patch with the E4HACK-2 v0.4 and then decrypted the conf.cfc, edited all the settings (conf_contents_requirements_fix.txt helped a lot!!) fixed CRC-Checksum with crc03.exe an encrypted it again. Did some further changes on the menu structure and BAM it worked! thank you ALL very much!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on December 08, 2015, 10:34:08 pm
So THIS is really crazy! Its working!!!  :clap: :clap: :clap: :-+ :-+ :-+
!! THANK YOU ALL !!
Resolution Hack to 320x240 and Advanced Menu

After reading several hunderts of postings and help from some members its working ;)
Did it with the common_dll.dll patch with the E4HACK-2 v0.4 and then decrypted the conf.cfc, edited all the settings (conf_contents_requirements_fix.txt helped a lot!!) fixed CRC-Checksum with crc03.exe an encrypted it again. Did some further changes on the menu structure and BAM it worked! thank you ALL very much!!

Just to clarify, your camera originally was an E6 with 2.8.0 but you successfully downgraded it to 2.3.0 and applied the res/menu hacks?

If i've gotten that right, could you detail exactly what steps you took to successfully downgrade and hack the camera? 47MHz mentioned last page that they'd tried downgrading and bricked two cameras, so there must be something different you did...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on December 09, 2015, 06:19:21 am
I just received my unit (ordered from TRIO Test & Measurement (http://www.triotest.com.au/shop/) in Adelaide) and it has a cal date of Sept 3, came with 2.3.0 on and hardware 1.2L (i will apply the hacks once it's charged a bit)

The first mention of 2.8.0 came with a cal date of Nov 20th, so somewhere between those two dates is when the revision hit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 09, 2015, 09:42:59 am
Help - Flir tools updating the tools I will not open images stored on a PC or downloaded from the camera. Buzz writes folder does not contain any files.You do not take the problem?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yogort1 on December 09, 2015, 02:30:16 pm
Is it possible to change camera's ID and part number? Is there a file in the software that is editable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 09, 2015, 03:36:43 pm
Is it possible to change camera's ID and part number? Is there a file in the software that is editable?

I believe some of that information is stored on the EEPROM. Depending on the version of firmware you have you may or may not be able to access it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 09, 2015, 07:29:25 pm
Just to clarify, your camera originally was an E6 with 2.8.0 but you successfully downgraded it to 2.3.0 and applied the res/menu hacks?

If i've gotten that right, could you detail exactly what steps you took to successfully downgrade and hack the camera? 47MHz mentioned last page that they'd tried downgrading and bricked two cameras, so there must be something different you did...

Puh exactly? I've tried so many stuff, i can only offer you that parts i still remember ;)
I bought a Flir E6 1.2L With Serial 6396...... and Softwareversion 2.8.0
Flir Tools said, there is an update firmware available to 2.3.0, so i downloaded it. I didn't found the firmware version 2.8.0 to download. So it would be a bad idea to "update" from 2.8.0 to 2.3.0 without the option to upgrade back to 2.8.0.
Then i found this thread.... No risk no fun. 2.8.0 = no fun and when flir allows to start the installation of an older firmware, it should be working. I up/downgraded to 2.3.0 like i already described. Some long minuteslater,  the camera is booting up an working - YEAH!
Then reading hunderts of postings and downloading the tools later, the Hack is working. WIN!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on December 10, 2015, 03:18:42 am
My Sept 3 camera has been successfully hacked, and I've already found a couple of things wrong insulation-wise with it :)

Hmm. Interesting. 47MHz said their E4s bricked when just running the 2.3.0 upgrade to downgrade them, so perhaps the E4 alone has had some changes made?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 10, 2015, 02:11:34 pm
Perhaps they finally respun the E4 to use the lepton core - since it looks like the code to support it has be present in some way since the 2.3.0 update that may be it for upgrades. Would really be nice if some one with a E4 v2.8.0 would perhaps take some pictures of the lens area, or provide a backup of the file system so interested people can take a peek.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Discombobulated Dave on December 10, 2015, 11:22:40 pm
That's a shame if the E4 can't be hacked.

I'm sending mine back then. If I leave it any longer I will loose the option to return it.

Will try to source an E4 with 2.3.0 firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: neggles on December 11, 2015, 03:18:21 am
Perhaps they finally respun the E4 to use the lepton core - since it looks like the code to support it has be present in some way since the 2.3.0 update that may be it for upgrades. Would really be nice if some one with a E4 v2.8.0 would perhaps take some pictures of the lens area, or provide a backup of the file system so interested people can take a peek.

Possible. Doesn't seem hugely likely since I'm not sure the Lepton can actually meet the E4's required performance, but possible. In which case I bought mine just in time!

That's a shame if the E4 can't be hacked.

I'm sending mine back then. If I leave it any longer I will loose the option to return it.

Will try to source an E4 with 2.3.0 firmware.

If they haven't made any hardware changes, then it's almost certainly still hackable - but there're still a few pre-hacked units on eBay so I'd probably go down that route instead for now (if you're not interested in being a guinea pig)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MrAureliusR on December 12, 2015, 09:23:52 pm
Interesting comment about potential firmware in FLIR cameras... I'm assuming he's talking about FLIR anyway.
Skip to 9:05
https://youtu.be/zVJGY2bZ-Ko?t=9m6s (https://youtu.be/zVJGY2bZ-Ko?t=9m6s)

https://www.youtube.com/watch?v=zVJGY2bZ-Ko (https://www.youtube.com/watch?v=zVJGY2bZ-Ko)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 12, 2015, 10:38:05 pm
The cat image he used in the presentation certainly comes from FLIR. It is used regularly in advertisements and, unedited, has the FLIR logo top left. I have seen it stated as from a FLIR One G1.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 14, 2015, 08:58:03 am
Someone tried to downgrade from 2.8.0 to 2.3.0 using FirTools ??? It offers "upgrade" to version 2.3.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: leoibb on December 14, 2015, 06:42:12 pm
What other cameras have better resolution than the e 8
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on December 14, 2015, 09:51:01 pm
What other cameras have better resolution than the e 8

There are lots of cameras with higher resolutions, but they are extremely expensive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 14, 2015, 10:42:00 pm
What other cameras have better resolution than the e 8

T1K series with a 1024x768 sensor would be a start...  :-+

A steal of a buy around 40K USD.  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ct on December 14, 2015, 11:24:33 pm
matmoe,
Do you know what version of the Flir Tools you had installed on your computer when you downgraded the firmware?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 15, 2015, 06:10:56 pm
Zoro and T-Eq are tried for 2.3.0 and failed. They both ship 2.8.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 15, 2015, 07:20:40 pm
Do you know what version of the Flir Tools you had installed on your computer when you downgraded the firmware?

Version 5.3.15320.1002
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ct on December 15, 2015, 09:23:21 pm
Thanks matmoe.
I have Flir E4 1.2L, firmware 2.8.0, S/N 6396xxxx, calibration Dec. 3 . When I check for updates, using the same Flir Tools v 5.3.15320.1002, it doesn't show the option to "update" to 2.3.0  :(. It just shows that it's the current version. If I would have seen that option, I might have try it as well, but I'm not comfortable to do a force "update" after I saw that there are people with bricked devices.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 15, 2015, 10:09:31 pm
CT -  Please can you copy files from the camera and give some of these guys who know what to do with them?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 15, 2015, 10:46:30 pm
Hi All,

Just joined. I've been reading your posts for a few weeks now. I ordered an E4 from from T-eq on Nov-24, will get it tomorrow. I think I just missed the boat for the older firmware.

Anyways, if anyone wants me to post any pics of any hardware, plz let me know, cause if there's been a hardware change, I will probably just send it back.

Btw, the files that matmoe uploaded, there is a .fif file in it, it looks like a Zend or IonCube encoded php file, but don't take my word for it, could very well be something else. I didn't try to deZend it or anything though.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 15, 2015, 10:48:36 pm
Also, 47Mhz,

could you give the steps that you took that got you bricked, this could help us from getting bricked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 15, 2015, 10:55:25 pm
> 2 anonyman,

I bet you will have 2.3.0 :) you are one of the luckiest man to take these few cameras in very last moment before they disappeared.
When you have it in your hands, please tell us if it is so.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 15, 2015, 11:32:44 pm
Actually i'm pretty sure it will be the new firmware, because when i ordered, there was one in stock and then the next day I got an email saying that it has been delayed and then they ran out of stock.

I'm thinking the 2 weeks delay was because they have been manually updating the firmware's on each and every one of the new cameras they send out.

Anyways, will know tomorrow.

My main purpose of the camera is to find insulation and air leaks, as we are remodeling my house and there is one room which is colder then the rest of the house and I can't seem to find out where the cold is coming from, or there are so many cold spots, don't know where to start plugging them.

But if there has been a hardware change, I will just buy one off Ebay and send this one back. The new firmware I can live with as there will probably be a hack for it sooner or later.

Will post with the details tommorrow.

thanks all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ct on December 15, 2015, 11:45:01 pm
Sofia,
I should be able to do that, if I find a way to save the files from the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FivePoint03 on December 16, 2015, 04:02:04 pm
Can anyone tell me where to buy an E4 from that will be suitable for upgrade to E8. I'm in the UK.

I think Santa wants me to have one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 16, 2015, 10:22:07 pm
Which OS you are running?

What is exact version number of FLIR Tools you used for the update?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 16, 2015, 10:52:03 pm
And what is your camera hardware version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 16, 2015, 10:52:50 pm
I received my E4 camera today. Software V 2.8.0.

Model E63900 T198547

Here is the thing, it has pixels, like around 8 at the very bottom and 4 at the top. They are only visible when the camera is in 'Device Settings' and only when you scroll up and down.  Does anyone else have these or should I ask for a replacement.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2015, 01:27:22 am
So the hardware version has not changed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on December 17, 2015, 08:41:03 am
@ anonyman:
Which color do these pixels have? I have the first version of the E4 with a pretty old firmware but I sometimes see "stuck pixels" too. But they aren't stuck, it's just a software error. On closer look you can see that these pixels are just "transparent" which means you can see just one or more pixels of the thermal image, even if you have settings opened. It sometimes happens also if you look at saved images on the device. Move the camera a bit around (from hot to cold, so the thermal image changes color) and see if the color of the pixel changes, then it's most certainly one of these transparent pixels in the menu overlay. Try rebooting your camera or remove the battery for a few seconds and try again.

Hope this helps  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 17, 2015, 10:05:11 am
I received my E4 camera today. Software V 2.8.0.

Model E63900 T198547

Here is the thing, it has pixels, like around 8 at the very bottom and 4 at the top. They are only visible when the camera is in 'Device Settings' and only when you scroll up and down.  Does anyone else have these or should I ask for a replacement.

Thanks

It is normal. They do it all the cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 17, 2015, 10:16:16 am
I think that might be a problem with the system downgrade to win 7 or higher.
I'm in win7 unstable connection to the camera. Win XP without problems.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 17, 2015, 10:40:56 am
>didn't use flir tools used the guides above and followed the directions exactly. Computer was old windows xp.

But in the guides above it is exactly about how to use FlirTools for updating! Or you mean some other 'guides above', pls. specify.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 17, 2015, 12:44:06 pm
>didn't use flir tools used the guides above and followed the directions exactly. Computer was old windows xp.

But in the guides above it is exactly about how to use FlirTools for updating! Or you mean some other 'guides above', pls. specify.

Also, I'm not clear what he meant. Use instructions "txt" which is enclosed in the package at
"2.3.0 update." ???
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 17, 2015, 01:11:35 pm
@ anonyman:
Which color do these pixels have? I have the first version of the E4 with a pretty old firmware but I sometimes see "stuck pixels" too. But they aren't stuck, it's just a software error. On closer look you can see that these pixels are just "transparent" which means you can see just one or more pixels of the thermal image, even if you have settings opened. It sometimes happens also if you look at saved images on the device. Move the camera a bit around (from hot to cold, so the thermal image changes color) and see if the color of the pixel changes, then it's most certainly one of these transparent pixels in the menu overlay. Try rebooting your camera or remove the battery for a few seconds and try again.

Hope this helps  :)

Thanks Stefbeer,

The pixels are whitish, like stuck pixels. Are more visible in the medium intensity, also they change saturation when I open and close the camera shutter. Only visible in 'Device Settings' because the background & foreground color is just right. They are not visible in any image.

I will take the battery out for a few minutes today and see what that does.

And if no luck, I  will try to upload a pic tomorrow, that is if my digital camera will even catch the pixels.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on December 17, 2015, 01:39:16 pm
:-+ I just unboxed a new e4 that was bought as a Christmas present when I looked & realized that a 2.8.0 firmware was afoot. Panic set in and then I went back and read backwards from the end of this topic (as I have followed since the beginning) so that I could see where I had missed the new firmware since ordering the camera. I used the download link from for the downgrade to 2.3.0 from
Here is the link to his download: http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)

I used the guide from
http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

I downloaded everything the web page described and performed the procedures in the exact sequence and manner described and in less than 1/2 hour (most of which was spent swearing at old laptop while trying to remember DOS commands and finally Googling them in frustration) & it all worked like a charm!

The camera hardware version 1.2L, Camera software version 2.8.0,  My computer was dell laptop using windows xp service pack 3, Flir Tools version 4.0.1 but when i read the txt file (included in the download from Matmoe that looks to be from Flir) it describes how to manually choose the firmware file to install so I don't think it really matters.

I really have spent more time trying to iron out questions than i did enhancing the camera. If you follow the links/guides from the original authors quoted above it is really simple.  Best of luck to you all. ;D

I went back in and edited the post hopefully this answers questions
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 17, 2015, 02:34:39 pm
@ anonyman:
Which color do these pixels have? I have the first version of the E4 with a pretty old firmware but I sometimes see "stuck pixels" too. But they aren't stuck, it's just a software error. On closer look you can see that these pixels are just "transparent" which means you can see just one or more pixels of the thermal image, even if you have settings opened. It sometimes happens also if you look at saved images on the device. Move the camera a bit around (from hot to cold, so the thermal image changes color) and see if the color of the pixel changes, then it's most certainly one of these transparent pixels in the menu overlay. Try rebooting your camera or remove the battery for a few seconds and try again.

Hope this helps  :)

Seems to be a small bug in all firmware versions, no real consequences just a little silly looking.

Thanks Stefbeer,

The pixels are whitish, like stuck pixels. Are more visible in the medium intensity, also they change saturation when I open and close the camera shutter. Only visible in 'Device Settings' because the background & foreground color is just right. They are not visible in any image.

I will take the battery out for a few minutes today and see what that does.

And if no luck, I  will try to upload a pic tomorrow, that is if my digital camera will even catch the pixels.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 17, 2015, 02:53:12 pm
2 Navynuke:

So, after you updated your post, it is not that confusing, just to summarize:

- you used FlirTools old version (which exactly?) on Windows XP (which exactly SP?)
- you proceeded as described in the *.pdf found in the upgrade archive folder attached (2.3.0) step by step
- when succeed, you applied standard Fubar procedure to unlock your camera and it worked

This means, you effectively used FlirTools, but in some other way than 'upgrade camera' usual way.

Please confirm every line of this list above and provide the detailed info because people here might follow and get their cameras bricked (2 "bricked" reports so far against 2 "success" reports makes 50% chances for success!)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 07:31:23 am
Currently it is not possible to downgrade the firmware 2.8.0 to 2.3.0.
Just because someone writes that he did - I was writing nonsense (cheating?)
If someone on success which will showcase images.
But so you see number serial with the revised firmware.
! I do not advise to experiment !
It will end certainly damage the software and the camera itself.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 18, 2015, 11:58:46 am
Currently it is not possible to downgrade the firmware 2.8.0 to 2.3.0.
Just because someone writes that he did - I was writing nonsense (cheating?)
If someone on success which will showcase images.
But so you see number serial with the revised firmware.
! I do not advise to experiment !
It will end certainly damage the software and the camera itself.

How do you know that it is not possible to downgrade ??? You're perhaps trying ??? How did you come?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 12:08:25 pm

Take your camera firmware 2.8.0 and try, or upgrade FV to 2.8.0 firmware itself ...
And there is no evidence that this is possible (and it is not possible!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 18, 2015, 04:20:18 pm
Not that I am doubting anything anyone has written here but so far not a single person that claims to have 2.8.0 downgraded or otherwise has show a screen shot, uploaded a backup, or put any video of it on youtube or the like. But many have requested hacks or help with their units - how is that going to be possible if no one wants to provide the tools needed to even begin to look into it?

I know I am not going to go out and buy a new unit just to get 2.8.0 firmware - I have a working 2.3.0 unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on December 18, 2015, 04:56:42 pm
Been there done that!

I quoted the original post by matmoe

Use flir tools pick manual firmware package (link from his post) and let it do the rest. Takes very little time and loads 2.3.0 quite effortlessly.

The tools to do this are already on the forum. READ the posts before naysaying.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 05:15:59 pm
So, again, I repeat.
Upgrading from version 2.8.0 is not possible to version 2.3.0 and certainly using the update tool from FLIR.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 18, 2015, 06:00:54 pm
 :wtf: ;D

"one of us is crying, one of us is lying..."

Who is who that is the question! Consider well before applying any upgrades: if you are mistaken, you either miss an opportunity, or loose the device!

(shit shit shit)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 18, 2015, 06:06:29 pm
The downgrade from 2.8.0. to 2.3.0 worked! I have a Flir E6 wich was delivered with 2.8.0, and now i've got the version 2.3.0 with resolution and menu hack running. The only evidence i can bring, are those images of my FlirStuff Folder. I did the downgrade like it was described in the dokcument "Manuel ipdating FLIR Ex series cameras" shown in the attachments .

BUT as i already said. Its up to you! Maybe its working and maybe you will brick your device. I don't know why it maybe doesn't work on some devices....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 06:19:09 pm
WTF ?
Please two photos:
The first picture where number firmware 2.8.0 and SN xxxxxxx
and the second picture where number firmware 2.3.0 and SN xxxxxxx

SN XXXXXX (firest picture) = SN XXXXXXX (second picture)
OK ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 18, 2015, 06:21:12 pm
Here screenshots of my camera

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 18, 2015, 06:23:41 pm
Please two photos:
The first picture where number firmware 2.8.0 and SN xxxxxxx

This is not possible, because i did no photos when i was on 2.8.0. I'm sorry, but at this point you have to trust  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 06:24:05 pm
It has to be visible number !!!
And it has to be seen yet this number to version 2.8.0
This picture proves nothing, sorry
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 06:25:46 pm
In that case, this can be considered untrue
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on December 18, 2015, 06:26:31 pm
Matmoe: thank you for the 2.3.0 package it worked perfectly for me...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 06:34:30 pm
At the moment it is not confirmed
If I see pictures which are in line numbers, it will be a confirmation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 18, 2015, 06:34:46 pm
It has to be visible number !!!
And it has to be seen yet this number to version 2.8.0
This picture proves nothing, sorry

Pah! I certainly will not post my serial number. And its ok when you decide for yourself, that its not true. It worked for me and that is nice   O0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 18, 2015, 06:38:01 pm
So do not confirmed.
Sorry

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 18, 2015, 08:03:50 pm
guys guys don't argue so violently!

you are both right... I think we will go a long way with slow accumulating statistics :) Not to mention that guys from FL** will certainly monitor this blog and can anonymously even post confusing messages :)

Now... we need desperate volunteers! Who wants to bet 1,000 or above one guy against another? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on December 18, 2015, 09:47:05 pm
It has to be visible number !!!
And it has to be seen yet this number to version 2.8.0
This picture proves nothing, sorry

Pah! I certainly will not post my serial number. And its ok when you decide for yourself, that its not true. It worked for me and that is nice   O0
Are you able to provide a serial range? Like maybe the 63000 range or so? I have helped people modify cameras that were up to the 62,000 range which would be serial number 63962000. (All serials start with 639 and then the unit number)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on December 19, 2015, 02:49:09 am
I've been following this thread for quite a while now, and the standard response to new claims has always been "cool! show us how to do it", or possibly "it's not working for me, help me figure out what I'm doing wrong", not "YOU'RE LYING". I have to say that I don't think much of the new approach.   >:(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Navynuke on December 19, 2015, 03:05:27 am
I agree wholeheartedly I really only threw out what worked for me to try to help others out that might have also ordered a gift for Christmas. The 2.3.0 zip file that matmoe got while his version of flir tools was offering "upgrade" to 2.3.0 from 2.8.0 was likely an error on fl**'s part that they offered the upgrade to any firmware version other than 2.3.0 and released cameras with newer 2.8.0 firmware before they update the servers that flir tools checks for upgrade availability.

If that is the case then matmoe  deserves even more credit from everyone who enhances their 2.8.0 camera.

I am fairly sure that someone will figure out a way to break the 2.8.0 firmware but the fact that it was this easy to downgrade and it happened so fast is a "Christmas" miracle!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bobber on December 19, 2015, 04:14:59 pm
I received my Flir E4 today and I immediately checked the firmware version which was 2.8.0.
I downgraded to 2.3.0 on a Windows 7 32 bit computer and it worked like a charm  :phew:.
After testing and verifying that it worked correctly I used the resolution and menu hack.

All well! Now I have a fully functional E4 with zoom etc..

Many thanks to you all for the hard work.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on December 19, 2015, 08:20:27 pm
I finished making the macro lens holder. Why make it so hard you ask.
 1. Reliability of fastening of the lenses.
 2. Versatility.
 3. The ability to get low distortion image.
 For some works you can use a simple plastic holder. But if you want a large zoom  the idea of one lens does not work well. The photo shows some image distortion if you use the  lens ZNSE F25mm.  Two lenses F38.1mm did work better. Distortion less.
 Can set different lenses in different sequences to obtain
the required degree of zoom when in macro mode from 1X to 8X. More expensive germanium lenses maximum diameter of 28 mm will provide low distortion (spherical and chromatic aberrations and distortions type "pillow"/"sheet"), the best ratio signal/noise. More
cheap lenses from zinc selenide small diameter will allow you to obtain a budget option with low cost optics, but still applicable for simple works. Thus, the adapter provides maximum
flexibility in the use of available lenses, cheaper or more expensive.

For example, in the medical - photo palm. The use of macro lenses for diagnostics of electronics - photo phone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: radhaz on December 19, 2015, 10:15:59 pm
Do you have the STL file for the lens holder available?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on December 20, 2015, 06:59:21 am
I did the 3D model. The forum participants tsmith35, Solare, mardaso helped in the measurements and tests. The holder contains a lot of detail. Not only plastic. Tubes for the lenses are made of aluminium alloy. Anodized  necessary. For  of pushers I did the brass screws. Pushers contain rubber anti-slip elements. For manufacturing these parts need a lot of equipment.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ct on December 20, 2015, 03:37:30 pm
Thank you matmoe, Navynuke and neggles. Because of you ;) I bit the bullet and downgraded my new Flir 2.8.0 to 2.3.0, successfully!!!

Flir E4 1.2L
Serial 63968xxx
Windows XP, 32 bit
FLIR Tools v4.1.14066.1001 - run as admin
flir_ex_pn639_v2.3.0_update_pack.zip from http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)
Comodo Internet Security - disable

Before the update, I deleted all saved images and did reset device settings to factory default.

Happy Holidays to everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 20, 2015, 03:39:40 pm
Are you able to provide a serial range? Like maybe the 63000 range or so? I have helped people modify cameras that were up to the 62,000 range which would be serial number 63962000. (All serials start with 639 and then the unit number)

It starts with 63967xxx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 20, 2015, 06:17:02 pm
 :blah:

it proves nothing - I saw a camera with 2.3.0 starting with 639670xx
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: solarforce on December 20, 2015, 06:47:17 pm
I saw 63968XXX with 2.3.0 :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 20, 2015, 07:22:17 pm
before or after you downgraded the E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: solarforce on December 20, 2015, 07:34:11 pm
New one. Begining of 63968XXX serie.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 21, 2015, 12:15:10 am
I thought I would also chime in my series is 63967 and the software as I already earlier said is the 2.8.0.

Could someone help me decide if I should be worried about those pixels I see when in the 'Device Settings' I don't exactly remember the menu name.

I haven't tried to downgrade my firmware just yet, would be nice to hear from that one person on how he got his cameras bricked.

Also how inadvisable is it to use Windows 7 instead of Windows XP. The only laptop I have with Windows XP  has problems and the only way for me would be to install it on another laptop. I mean I have no problem with installing XP on a laptop if there is a risk with Win 7.

Also one thing I wanted to add. LCD's or at least in my knowledge have a native resolution, has anyone tried to set their laptop resolution on a setting other then the native? So then the higher resolution is basically the native resolution for these cameras.  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 21, 2015, 11:48:16 am
2 Anonyman,

screw it... these pi?els, unless they are on radiometric image permanently, is not a trouble at all... they appear there because of a simple masking bug of E4 interface. One may be able to correct this, but I won't do this in my view unnecessary work associated with increased risks to ruin something important in the camera. My advise - live with that as I do :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 21, 2015, 12:27:33 pm

Quote
2 Anonyman,

screw it... these pi?els, unless they are on radiometric image permanently, is not a trouble at all... they appear there because of a simple masking bug of E4 interface. One may be able to correct this, but I won't do this in my view unnecessary work associated with increased risks to ruin something important in the camera. My advise - live with that as I do :)

Advice Taken,

Thanks All for your advice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 21, 2015, 10:27:48 pm
hi Guys;

I think this information can be useful to someone.
I bought i few toys last week on Batter Fly.
You can see the post of the Toys here - https://www.eevblog.com/forum/chat/the-official-2015-christmas-pressies-thread/msg826013/#msg826013 (https://www.eevblog.com/forum/chat/the-official-2015-christmas-pressies-thread/msg826013/#msg826013)

I few days before the purchase of the Flir E4, I searched a lot on this forum about the hack, and notice the apparent difficulty of doing the hack with new firmware 2.8.0.
I notice that Batter fly had E4 in stock and i thought that could had lucky to get one with the old firmware. And yes, i was right.
The Flir E4 arrived today, and it has the 2.3.0 firmware. Now lets do the Hack.
youtube video - https://youtu.be/uGSiunW_9SI (https://youtu.be/uGSiunW_9SI)
(http://s28.postimg.org/jqmk8z5nd/IMG_7047.jpg) (http://postimg.org/image/jqmk8z5nd/)

Batter Fly E4 - http://www.batterfly.com/shop/flir-e4?filter_name=flir%20e4 (http://www.batterfly.com/shop/flir-e4?filter_name=flir%20e4)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anonyman on December 22, 2015, 06:50:25 am
CONFIRMED!!

I'm down to 2.3.0. I also took picks from the previous version. I won't post them publicly.

Matmoe is the MAN.  :clap: Repeat. Matmoe is the man.  :clap:

I would follow Matmoe's directions. Read them carefully.

I used Window XP 32bit  SP3 and Fl tools 4xxxxxxx.

It took me about 2 hours to get the nerves to do it and then it took around 15 mins for the work.

Now I will be working on step two tonight.



UPDATE:  DONE.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 22, 2015, 04:27:05 pm
 ;D  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on December 22, 2015, 05:10:33 pm
Tried in a VM, but no go, so now doing Windows update on a copy on bare metal that has not been booted since 2009, so I can get SP3 for it. Apparently the tools need SP3 to install, otherwise they fail in an endless restart required loop.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 22, 2015, 08:13:16 pm
For your information. I used Windows 10 64Bit for Downgrade. I onlystill have problems with rndis network connections after restarting the camera, also on Win7 64.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: LizardLik on December 22, 2015, 11:26:51 pm
Hello everybody! :) I have a very important question. Last year I bought Flir E6. Can I also flash it as E4? :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 23, 2015, 01:10:39 am
Certainly, you can NOT.

But you can re-flash it as FLIR E6 :)

Seriously, what hardware/ software versions do you have? Pls. take a look in the menu and write us about the details.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: LizardLik on December 23, 2015, 08:48:12 am
Quote
Seriously, what hardware/ software versions do you have? Pls. take a look in the menu and write us about the details.

Model: E6 1.2L
Serial number: 6393XXXX
Software: 2.3.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 23, 2015, 11:17:50 am
Yes I believe this cam can be hacked with the latest hack to get 320x240 resolution. Although, the hack was designed for the E4, so there are potential problems of incompatibility. If you are handy, you can adapt one, and then install the extended menu. However, if you are not too experienced I recommend that somebody help you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 02:14:45 pm
The Flir E4 arrived today, and it has the 2.3.0 firmware. Now lets do the Hack.

Hack Done! Used Win32 Xp.

Now back to the Windows 8.1, installed Flir IR Camera Player 2.3.5, but it can't get image. Anyone with this problem?
Is it possible to record the live stream video with flir tools?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 23, 2015, 02:36:07 pm
Flir Tools should live stream any E4 via USB. Check you didn't leave the camera in RNDIS mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 02:53:14 pm
Flir Tools should live stream any E4 via USB. Check you didn't leave the camera in RNDIS mode.

Yes, i can get live stream from flir tools, my question is if it is possible to record the live stream?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on December 23, 2015, 03:28:37 pm
I *think* recording mode is just for E30-E60. Another user came up with this a while back:
https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918 (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918)

That said a UVC stream should be able to be captured using something on your normal PC, never tried it though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on December 23, 2015, 03:39:04 pm
Live stream does record with VLC, it is just another video device to it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 03:41:37 pm
Live stream does record with VLC, it is just another video device to it.

humm.. interesting.... i will check this!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on December 23, 2015, 03:52:32 pm
Live stream does record with VLC, it is just another video device to it.

humm.. interesting.... i will check this!

Here we go, did a quick one. Zipped to avoid the annoying filename quirks of SMF. Just extract the inner file, which did not compress at all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 03:55:43 pm
Live stream does record with VLC, it is just another video device to it.

humm.. interesting.... i will check this!

Here we go, did a quick one. Zipped to avoid the annoying filename quirks of SMF. Just extract the inner file, which did not compress at all.

thans for you rtime SeanB.

Are you using USB ou RNDIS?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on December 23, 2015, 04:06:39 pm
Plain USB, though I am using Linux, where the camera shows up as a video device naturally. Still have to get it running properly on Windows, looks like i will have to dig up a Win7 instance instead of the XP one, which I only use when absolutely needed. Hint, it was last booted in 2009 according to the logs......
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 04:09:37 pm
Plain USB, though I am using Linux, where the camera shows up as a video device naturally. Still have to get it running properly on Windows, looks like i will have to dig up a Win7 instance instead of the XP one, which I only use when absolutely needed. Hint, it was last booted in 2009 according to the logs......

I'm at work, but as soon i get to home i will try in win 8.1 and them i give feedback!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: solarforce on December 23, 2015, 04:45:08 pm
My E4 works with Flir IR camera player. I'm using Windows 7 64bit ( i used it to hack my camer too, and it works, i do it several times :)).
But the captured video is mirrored, i don't know why.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: VincentJ on December 23, 2015, 05:19:12 pm
I bought my E4 today and sucsesfully downgraded to 2.3.0 from factory installed 2.8.0. Then I followed http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) instructions and semibricked my E4 meaning it never showed in ipconfig and now its not showing in any program. I think I killed its USB interface. E4 works fine but I can't get USB connection establish. I think its stuck on Set_RNDIS_permament.fif.
It only shows up in Device manager (see pic.)

Can someone help?  :-BROKE :-\

EDIT/UPDATE:

Everything is fine now, I just forget to install driver pack... Now I have E4 fully updated to E8 specs and resolution!
Thank You guys for your hard work!  :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 23, 2015, 07:12:17 pm
Try disconnecting your computer from the network to avoid possible IP address conflict, then connect the camera and check with ipconfig if you have camera IP now showing. If it is there you then can connect to the camera via ftp and delete file

flashfs/system/appcore.d/factory.d/zrndis.rsc

This will return the camera to USB mode after reboot.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on December 23, 2015, 07:12:40 pm
I bought my E4 today and sucsesfully downgraded to 2.3.0 from factory installed 2.8.0. Then I followed http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) instructions and semibricked my E4 meaning it never showed in ipconfig and now its not showing in any program. I think I killed its USB interface. E4 works fine but I can't get USB connection establish. I think its stuck on Set_RNDIS_permament.fif.
It only shows up in Device manager (see pic.)

Can someone help?  :-BROKE :-\

(http://)

Restore factory settings in the camera you tried?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on December 23, 2015, 08:02:21 pm
Plain USB, though I am using Linux, where the camera shows up as a video device naturally. Still have to get it running properly on Windows, looks like i will have to dig up a Win7 instance instead of the XP one, which I only use when absolutely needed. Hint, it was last booted in 2009 according to the logs......

I'm at work, but as soon i get to home i will try in win 8.1 and them i give feedback!

SeanB, I got it. It worked well in VLC. Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on December 23, 2015, 08:15:54 pm
2 Vincent,

please give the details... which OS you are running (including SPs)?

What is exact FLIR Tools version you used?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: VincentJ on December 23, 2015, 08:44:55 pm
2 Vincent,

please give the details... which OS you are running (including SPs)?

What is exact FLIR Tools version you used?

Windows 7 Ultimate 32bit SP1 on Dell Latitude D420 laptop
FLIR Tools Version 4.1.14066.1001
FileZilla 3.14.1 and Python 2.7
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pekingduk on December 24, 2015, 04:48:11 pm
I bought my E4 today and sucsesfully downgraded to 2.3.0 from factory installed 2.8.0. Then I followed http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) instructions and semibricked my E4 meaning it never showed in ipconfig and now its not showing in any program. I think I killed its USB interface. E4 works fine but I can't get USB connection establish. I think its stuck on Set_RNDIS_permament.fif.
It only shows up in Device manager (see pic.)

Can someone help?  :-BROKE :-\

EDIT/UPDATE:

Everything is fine now, I just forget to install driver pack... Now I have E4 fully updated to E8 specs and resolution!
Thank You guys for your hard work!  :-+

where did you download the 2.3.0 firmware from and how did you get the unit to downgrade from 2.8.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on December 24, 2015, 06:28:40 pm
where did you download the 2.3.0 firmware from and how did you get the unit to downgrade from 2.8.0?
Just start reading from page ~500
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: facesnorth on December 25, 2015, 02:02:41 am
Hi guys, I must be missing something on the downgrade process from 2.8.0 to 2.3.0.  I've read all the pages from 500 to current, as well as the various guides.  I'm following the PDF that matmoe uploaded with instructions on how to downgrade the firmware.  However, in Flir Tools 4.1.14066.1001 when I try and go to Help and then Update, it simply tries to update Flir Tools to 5.3.1XX, not my camera.  I can't get around that.  I've tried disabling my network connection as well, but then I just get an error.  How do I simply downgrade the camera firmware and not Flir Tools itself?

FYI, using Windows 7 32-bit and a Flir E4 1.2L with Serial 639XXXXX.  My camera is currently in standard USB mode, not RNDIS.

Thanks!

edit: I went through the upgrade to 5.3.1XX and then was able to perform the firmware downgrade to 2.3.0 successfully.  I didn't see this mentioned anywhere yet.  I'm completing the remaining steps as we speak.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: facesnorth on December 25, 2015, 02:37:26 am
My camera is at 2.3.0 and I'm back in RNDIS mode.  Tried the python apply.py apply 192.168.0.2 and am getting this error:


edit: I deleted the folders and re-unzipped them and started the process over and it worked!

edit2: Aaaaand it's done!  Resolution plus menus.  Thanks in particular to Mike for the original find, FUBAR for the helpful guide, and matmoe for the 2.3.0 firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pekingduk on December 25, 2015, 01:47:56 pm
where did you download the 2.3.0 firmware from and how did you get the unit to downgrade from 2.8.0?
Just start reading from page ~500

Thanks - after I posted, I found everything I needed in the thread.  Fortunately, my unit was delivered with 2.3.0 firmware so I did not have to downgrade after all.  Followed the directions using a Windows 7 32-bit VMWare virtual machine.  Took about a half hour after installing all the required apps.  Had a little issue with the VMWare network setup in the virtual machine but that was resolved pretty quickly.  The instructions were incredibly detailed and easy to follow. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: megafix on December 27, 2015, 07:16:00 pm
Is anybody aware of the hardware differences between an E30 (P/N 490xx F/W 2.23.14) without MSX feature and a newer E40 (P/N 645xx/646xx F/W 4.10.0) with MSX?

• 49001-1601 FLIR E30 without cam (discontinued beginning of 2012)
• 49001-1701 FLIR E30bx without cam (discontinued beginning of 2012)
• 49001-1801 FLIR E30 Mod.2012 with cam (discontinued end of 2013)
• 49001-1901 FLIR E30bx Mod.2012 with cam (discontinued end of 2013)

• 64501-0101 FLIR E40 (incl. Wi-Fi)
• 64501-0501 FLIR E40bx
• 64502-1001 FLIR E40
• 64601-0101 FLIR E40 (9 Hz incl. Wi-Fi)

Unpacking the CE firmwares both seem to be sharing the same hardware platform (SLCO Liston E2). The newer firmware runs Qt user interface.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 28, 2015, 07:52:12 pm
I have an old Exx without MSX and invested a year ago some times, to find the differences between the firmwares / hardwares.
I think, it's a part of the FPGA firmware  :-\ and I haven't make some hot firmware experiments to avoid a bricked camera.

Good luck!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: megafix on December 28, 2015, 08:36:52 pm
I have an old Exx without MSX and invested a year ago some times, to find the differences between the firmwares / hardwares.

The E30 and E30bx never made it to MSX support. But comparing the firmware of the E30 Mod.2012 (with 2MP camera) and an E40 with MSX I see a lot of similarity. Unfortunately I never saw the hardware itself.

They are running a Windows CE Kernel for ARM (Thumb Enabled).

Both seem to be based on a NXP (Freescale) i.MX27 multimedia applications processor ARM926EJ-S™ with ARM9™. Bluetooth and WiFi is a Marvell SDIO8688. Power Management is a MC13892 PMIC (Power Management Integrated Circuit).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on December 29, 2015, 05:01:15 pm
Hi
I tried flirs tools + for 30 days trial. 30 days left. Now when start flir tools it start as + version and need to enter licence key or close the program. I want us program in standard free version, not + version. Tried uninstall and install again, but still can't run free version.
How to fix it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: megafix on December 29, 2015, 08:31:57 pm
Hi
I tried flirs tools + for 30 days trial. 30 days left. Now when start flir tools it start as + version and need to enter licence key or close the program. I want us program in standard free version, not + version. Tried uninstall and install again, but still can't run free version.
How to fix it?

I did a quick installation of FLIR Tools(+) 5.3.15320.1002.

To reset FLIR Tools export the registry key "HKLM\SOFTWARE\Wow6432Node\FLIR Systems" to a .reg File (just in case you want it back). Afterwards delete this key assuming you are running a 64 bit version of Windows. Next time you restart FLIR Tools it will recreate the registry key.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: megafix on December 29, 2015, 09:04:01 pm
I have an old Exx without MSX and invested a year ago some times, to find the differences between the firmwares / hardwares.
I think, it's a part of the FPGA firmware  :-\ and I haven't make some hot firmware experiments to avoid a bricked camera.

Looks like the device can still be started from TFTP boot in case something goes wrong :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MYU on January 02, 2016, 02:01:49 pm
1. Did someone try telnet app for android to run command
Code: [Select]
--- Code: ---# turn off auto-nuc
rset .tcomp.services.autoNuc.active false
# turn on auto-nuc
rset .tcomp.services.autoNuc.active true
to disabe nuc popup while video recording on smartphone?

2. How many frames per second can you record on android device? I can only 10; was expecting 15 (as can get in flir ir camera player or virtualdub on pc).
Only this work on my xperia https://play.google.com/store/apps/details?id=com.serenegiant.usbwebcamera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 03, 2016, 08:39:51 pm
1. Did someone try telnet app for android to run command
Code: [Select]
--- Code: ---# turn off auto-nuc
rset .tcomp.services.autoNuc.active false
# turn on auto-nuc
rset .tcomp.services.autoNuc.active true
to disabe nuc popup while video recording on smartphone?

2. How many frames per second can you record on android device? I can only 10; was expecting 15 (as can get in flir ir camera player or virtualdub on pc).
Only this work on my xperia https://play.google.com/store/apps/details?id=com.serenegiant.usbwebcamera

1. Yes it works but I never tried it on smartphone - I use a HP Stream 7 tablet with win 10 on it.

2. The unit only puts out 9-10 real FPS. When your record at 15 you are getting duplicate frames so this really does not matter.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on January 07, 2016, 09:15:04 am
Hello Everyone
Have we all come to the agreement that the file matmoe provided will successfully downgrade to 2.3?
Im getting my new flir e4 in tomorrow and Im hoping I can downgrade if I have 2.8.

Thank you All and a special thanks to matmoe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on January 08, 2016, 01:50:09 am
Hello Everyone
Have we all come to the agreement that the file matmoe provided will successfully downgrade to 2.3?
Im getting my new flir e4 in tomorrow and Im hoping I can downgrade if I have 2.8.

Thank you All and a special thanks to matmoe

To answer my own question: Received flir e4 today and it came with 2.8. Tried file and Success! The downgrade file worked. Time to apply hack. Will post updates
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 08, 2016, 02:27:19 am
2. The unit only puts out 9-10 real FPS. When your record at 15 you are getting duplicate frames so this really does not matter.

I recall stepping through frames of a video made on Windows using Virtual Dub, it was 15 frames but out of 15 were 3 duplicates and 3 frames blended. So only 9 unique frames.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JAKEMON48 on January 10, 2016, 03:02:39 am
So the Hack will not work with Windows 64 Bit Ultimate edition?  It seems the only thing that I am having trouble with is (Shift+Ctrl+ Alt)  does noting but highlight the Camera in FLIRTOOLS.  It does not open an explorer window to allow me to select the appropriate 2.3.0 upgrade file.

I loaded the Filezilla and Python without a problem.  I am able to FTP with Camera   Am I missing something?

Thanks    8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aniol on January 10, 2016, 12:41:30 pm
Can the changes made in version 2.8? If you can make do with version 2.8 downgrade is 2.3. If it does not work back to 2.8? Where to buy version 2.3? Sorry for the language.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 10, 2016, 03:44:53 pm
I haven't been following this thread recently - can someone PM me with the definitive info for 2.8 so I can add it to the resources at the start of the thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on January 10, 2016, 06:19:11 pm
I haven't been following this thread recently - can someone PM me with the definitive info for 2.8 so I can add it to the resources at the start of the thread.

Hello Mike
The file needed to downgrade was posted by MATMOE
Here is the file http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)

All thats needed is to manually select this file in the firmware area within flir tools. I successfully downgraded mine using this file and then ran the 2.3 hacks in order to unlock all the options
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: aniol on January 10, 2016, 06:50:51 pm
So every e4 can be changed from version 2.8 to version 2.3?

What are the symptoms after an unsuccessful downgrade from version 2.8 to version 2.3.
Is the camera stops working? The rest of the equipment is working properly?
How to repair such damage? Is it enough to upload a version 2.8 to work properly? Where to download version 2.8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on January 10, 2016, 10:31:02 pm
@aniol:
The only difference i noticed is that, on firmware 2.3.0 the camera does more often recalibrating. Has anyone observed this behavior?
There is no 2.8.0 firmware to download. Also, there is no way back.
Before i did the downgrade, i downloaded all files over ftp 2.8.0. But i don't know, if this would help if i brick my device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JAKEMON48 on January 10, 2016, 11:38:53 pm
Hello Everyone.  I just successfully Modified my  E4 that was 2.8.0 using the Hacks in this forum.   I am Using Windows Ultimate 64 Bit SP 1.
The Flying Windows + R  cmd did not work for me.   I just ran the cmd prompt as administrator and everything worked just fine.  No problems using the current FLIR Tools 5.3.15320.1002.

I also used the Current FLIR Device Drivers as well as The 2.3.0 Upgrade zip package downloaded from the FLIR website.
I am pleased to confirm that the members that worked diligently to unleash the power of the E4 have done a most excellent job!
Hip, Hip, Hurray    You Guys Rock!! :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: JAKEMON48 on January 10, 2016, 11:44:36 pm
BTW.
On the Boot Up Screen  It now says FLIR Special Edition
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rassi on January 12, 2016, 11:49:22 am
Hello Everyone.  I just successfully Modified my  E4 that was 2.8.0 using the Hacks in this forum.   

Looks like it, but i need to get confirmation before ordering.  It´s sure that every E4 from any store can be still hacked? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on January 12, 2016, 12:03:01 pm
It´s sure that every E4 from any store can be still hacked? :)
I don't think that anyone can confirm that for you.
But since many users were successful, I would say the odds are good.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: man_of_stars on January 12, 2016, 12:04:06 pm
I just ordered mine, delivery expect next week.
I have my Virtual Win 7 setup already with all needed configurations. 
@Rassi: Seems we are at same country. Private message me if you want to share the 'experience'
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on January 12, 2016, 03:48:44 pm
I just ordered mine, delivery expect next week.
I have my Virtual Win 7 setup already with all needed configurations. 
@Rassi: Seems we are at same country. Private message me if you want to share the 'experience'

I had issues with with win 7 32bit. I ended up using xp and it worked perfectly.
Title: Another success story...
Post by: 1187Shooter on January 12, 2016, 09:36:58 pm
Hi all... new guy here... just wanted to say thanks for the wealth of knowledge here, and for the overwhelming support from all of the members.
I have a pair of E4s at work, one with 1.211.22 and one with 2.1.0 firmware.
I showed my boss this thread, and with his blessing, I got the older model up and running at full resolution and with the expanded menu... it is a night and day difference... like comparing my old Nokia flip phone display to my S6. My boss and I are very pleased with the results. The E4s were bought as a test to see if they could compete with the $5000+ Fluke cameras we also have. They are definitely a better purchase for our purposes, especially now...
Now to work on the 2.1.0 unit... from what I'm reading, I'll need to follow the 2.3.0 steps for this one.
We have lots of hard running motors, gear boxes, conveyors, rollers, etc. that we are constantly monitoring, and every bit helps.
I'd like to try to re-house one of the units in an enclosure that I can set in place to monitor a fixed motor or piece of equipment, so will be reviewing the teardown video again thoroughly... as well as the video recording portions of this thread.
A question about the crosshairs... can it be manipulated to change the shape/size etc. easily? Is it an image file overlaid on the display? If not, is there a way to overlay an image on the display? Seems to me that with a Windows based device it should be possible, but I don't know much about WinCE.
I've got plenty of other questions, but I'm going to get back to reading through all of the posts again to pick up what I missed the first time. I'm sure the answers to my crosshair questions are in there somewhere too.
Cheers!



Edited for pics... the first 4 are from the 2.1.0 E4, unmodified, the second 4 are taken side by side from the modified 1.22 E4/8.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: facesnorth on January 13, 2016, 10:10:45 pm
@aniol:
The only difference i noticed is that, on firmware 2.3.0 the camera does more often recalibrating. Has anyone observed this behavior?
There is no 2.8.0 firmware to download. Also, there is no way back.
Before i did the downgrade, i downloaded all files over ftp 2.8.0. But i don't know, if this would help if i brick my device.

I didn't pay enough attention on 2.8.0 to notice as a comparison, but I definitely have noticed my E4/upgraded to E8 (downgraded from 2.8.0 to 2.3.0) does an awful lot of calibrating.  I assumed it was normal, but it can be a bit distracting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 13, 2016, 11:54:38 pm
Slightly off-topic, but the number of pages in this thread seems to have greatly dropped. Did someone do a mass deletion of posts, or is each page showing more posts now?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 13, 2016, 11:55:54 pm
Most non temperature stabilised thermal cameras need to do more FFC events until the microbolometer has reached self heating thermal equilibrium. Once at that point the period between FFC events should increase.

My temperature stabilised cameras have a much longer period between FFC events as the Peltier element maintains a small delta T with time.

It is possible to increase the period between FFC events on a thermal camera but this can be at the cost of accuracy and noticeable pixel drift. There is even an option to stop FFC events for video recording on some cameras.

The E4 is not badly behaved in terms of FFC event regularity.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brumby on January 14, 2016, 03:02:53 am
Did someone do a mass deletion of posts,
No

Quote
or is each page showing more posts now?
Yes

Refer: https://www.eevblog.com/forum/chat/important-poll-new-forum-categories-reorg/msg840777/#msg840777 (https://www.eevblog.com/forum/chat/important-poll-new-forum-categories-reorg/msg840777/#msg840777)  (or somewhere around there)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KCD on January 14, 2016, 09:55:43 pm
Hello I am new here and found this by looking for Flir E4 >:D I have a few questions that looking over the hundreds of pages of posts...

. I have E4 and am going to upgrade. Current Firmware 1.22. I did not download any tools or software as of yet. My understanding is to keep it at 1.22 then do the resolution and menu hacks?


Does it need to be windows xp - 32 bit?  I currently have 7 with 64bit Ultimate.


FLir Drivers. is there a certain one or universal?

Flir tools is there a version I need to use?

Filezilla version?

Anything else I am missing before I get started?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 15, 2016, 01:35:03 am
I have an original 1.19 camera  that works great and I did this a long long time ago, I never updated flir tools for fear it would detect my cameras new features and all has been good! Today I opened up flir tools and there is a O (zero with a line through it) on all of my library pictures. Is this some countermeasure by flir that finally got me?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on January 15, 2016, 01:42:21 am
I have an original 1.19 camera  that works great and I did this a long long time ago, I never updated flir tools for fear it would detect my cameras new features and all has been good! Today I opened up flir tools and there is a O (zero with a line through it) on all of my library pictures. Is this some countermeasure by flir that finally got me?

Measure point?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 15, 2016, 01:45:51 am
I did change the measurement point in the camera is this what you mean?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on January 15, 2016, 01:48:10 am
I did change the measurement point in the camera is this what you mean?

post a picture
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 15, 2016, 01:49:57 am
I just took a few pictures and they show up fine in flir tools with all the information about the pics etc. But my old pictures all have a Zero with a line through it on all the old photos.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on January 15, 2016, 01:54:52 am
I think I got it, flir tools is showing thumbnails of the old pictures it somehow has in it's data but there is no picture folder containing the pictures anymore since I had a hardrive failure a few months back. So I just went crazy thinking there was some new countermeasure but in fact it's a folder error. Thanks! I only found out because you said @post a picture@ and realized I had no way to do that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mahi on January 22, 2016, 08:40:52 am
Recently I got myself a FLIR E4 and with the information in this thread and fubar.gr (http://fubar.gr/hacking-the-flir-e4/) I managed to enable both the high resolution mode and the enhanced menu. Naturally I had seen seen before and after sample images but I was still blown away by the difference. It's like an entirely different tool. Many thanks to everyone who contributed in making this possible! :-+

A few observations that may or may not help others:

FLIRInstallNet.exe recognized the E4 as "USB Video Device" (in non-RNDIS mode), not as "FLIR USB Video". FLIR Tools had no issues to communicate with the E4, though. I could see the firmware version and serial number in FLIR Tools. I tried in 32-bit Windows XP and 32-bit Windows 7 (both virtual machines) and the FLIR device drivers were installed. I even tried to manually update the drivers of the USB video device in Device Manager but that did not work. The E4 was never recognized as "FLIR USB Video" which got me worried but in the end it did not matter. I managed to apply the hack successfully.

I could not make FLIRInstallNet.exe run the *.fif files (button greyed out) until I actually switched on the E4. After hooking up the E4 to my computer, the battery charging screen appeared and it was recognized as a camera and storage device in Windows - so I assumed the connection was okay - but FLIRInstallNet.exe refused to run the *.fif files. It took me a while until I realized I had to switch on the E4. The instructions at fubar.gr (http://fubar.gr/hacking-the-flir-e4/) did not explicitly mention this, so maybe I did something wrong, but in the end everything worked.

My E4 came with firmware 2.8.0 which I had to downgrade to 2.3.0 first. I used the firmware package provided by matmoe earlier in this thread (link (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg815386/#msg815386)). Upgrade (or rather downgrade) instructions are in the included PDF file - read it if you don't want to waste time figuring out how to install a custom firmware with FLIR Tools like I did.

Just like matmoe and facesnorth I have the impression that the E4 calibrates more often after downgrading firmware 2.8.0 to 2.3.0. I did not really time the intervals before the downgrade so I do not have hard numbers. Keep in mind that there is currently no way back to 2.8.0 if you don't like 2.3.0! Nevertheless, the benefit of having the high resolution mode and enhanced menu far outweighs the higher calibration frequency in my opinion. In fact it's not just the resolution that increases - the thermal sensitivity does as well (<0.15°C for the E4 against <0.06°C for the E8) and the noise levels are orders of magnitude lower. Subtle details are much easier to spot and something like a hand print on a wall was much, much longer visible after the hack than before.

The boot screen now shows "FLIR Special Edition" instead of just "FLIR". This change came with the enhanced menu hack ("2.3.0_Menu.fif" includes a new boot image). Fraser posted more details what the Special Edition entails (link (https://www.eevblog.com/forum/thermal-imaging/flir-e4-the-useful-information-thread/msg358555/#msg358555)).

For reference, the temporalMk of my E4 (requested by Solare (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg680074/#msg680074)):

Code: [Select]
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 12.863767
Before and after thermal image (MSX disabled):

(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=195628;image) (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=195630;image)

(pictures taken hours apart so the temperature differences between before and after may not be relevant, but just look at all the detail in the after picture)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 22, 2016, 12:10:30 pm
Do you know a solution for permanent disabling the Flir logo (imprint)?
Code: [Select]
> rset .ui.userSettings.overlayLogo false
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 27, 2016, 05:50:55 am
There are at least couple ways. One is to patch the logo graphics in the facet file to make the logo transparent (I believe this was what janekivi did in his menu upgrade package and you can see the result above). The other way is to unpack the facet file and edit desktop.qml to disable loading the logo. Then reassemble the facet file.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on January 27, 2016, 08:48:56 am
Thank You for detailed answer.

Nobody answered to this question ;-)
We know, how to remove the flir logo in the E4 images.

But by using Flir Tools we get the flir logo back.

After using mediaextract (http://panzi.github.io/mediaextract/ (http://panzi.github.io/mediaextract/) ) I'm sure, that the logo is a PNG Byte sequence in the dll
C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll

Code: [Select]
>build-win32\mediaextract.exe --formats=image "C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll"
Extracting 0x00000000 ... 0x001a6120 (1.64871 MB) from C:\Program Files\FLIR Systems\FLIR Tools\bin\Flir.Modules.Common.dll
Writing 16.7119 kB to .\Flir.Modules.Common.dll_0017bf29.png
Extracted 1 file of 16.7119 kB size.

$ identify  Flir.Modules.Common.dll_0017bf29.png
Flir.Modules.Common.dll_0017bf29.png PNG 1029x353 1029x353+0+0 8-bit sRGB 17.1KB 0.000u 0:00.000

as attachment the extracted file
 
Anybody knows, how to replace the embedded logo png in the dll with a transparent image of same pixel size (but smaller file size).
Code: [Select]
$ convert -size 1029x353 xc:none 1029x353.png
A simple binary search and replace doesn't work (after then I have the same dll size but wrong dll checksum??)
(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=173181;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on January 27, 2016, 08:58:06 am
@LOGO:
Actually that TOOLS behaviour is expected as the tools are using the stored measurement data rather than the displayed imagelayer - this allows changing palettes etc. etc. etc ... but comes with a re-reaction of the visible image layer. I'm more worried about the tools always calling home and reporting metrics to google analytics :)

PS: The first logo-removal was with my menu-hack as I decided that it takes up valueable pixels just for nothing - and we already know who built the camera :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: srpape on January 27, 2016, 09:36:46 pm
Looks like there's a 2.11.0 up on the website now.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on January 27, 2016, 10:00:52 pm
Looks like there's a 2.11.0 up on the website now.

Yup! flir_ex_pn639_v2.11.0_update_pack.zip shows available.
So who is going to be the first to test it out?  :-DD  :popcorn:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Brumby on January 28, 2016, 05:10:41 am
Not me ....

.... but then my E4 is still in the 'dreaming' stage.   :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on January 28, 2016, 01:55:58 pm
Flir probably done in version 2.11.0 anti downgrade  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 28, 2016, 04:36:32 pm
Do FLIR post change logs anywhere? They used to have an RSS feed, but it is no longer used :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sonic.bionic on January 29, 2016, 09:01:12 am
Hello,

yep, i just tried to order new Flir E4 and seller told me that all new cameras are now equipped with 2.11.0. firmware....
So, i will have to wait to see is it possible to downgrade this firmware or not...  :box:





Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on January 30, 2016, 04:30:56 am
Looks like there's a 2.11.0 up on the website now.

Here we go again...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: man_of_stars on January 30, 2016, 11:57:23 am
I have successfully downgraded from 2.11.0 to 2.3.0 SW and installed the hacks.

I ordered my camera Jan 11th and it took almost 3 weeks to arrive, apparently FLIR wanted to
ship with newest SW.

I used Win 10 for the downgrade, FlirTools version 5.3.15320.1002.
Hack was done with Win 7 Ultimate 32-bit laptop.

I don't have any evidence from the 2.11.0 as I was too excited to try if the downgrade will work or not.
Believe me or not, it worked for me :) Thank you all for the instructions and support!

I noticed that there is new version for FlirTools available v. 5.4.15351.1001 it was published 20th Jan, I did not dare to try that one.



Title: E4
Post by: dazler on February 01, 2016, 09:49:00 pm
How does the hacked e4 compare to the therm-app as far as reading temp of walls, ceiling and to see the studs.
As in the video of mjlorton it was easy to see the studs and hand heat signature with the therm-app but not so much with the regular not hacked e4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on February 02, 2016, 01:55:53 am
Not the same environment but if you look in the Therm-App thread you'll find the TA has better sensitivity at detecting smaller temperature difference than the E4/8, mainly due to the lens on the E4/8 being terrible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 02, 2016, 03:27:23 am
You can see the studs with the doctored E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on February 02, 2016, 02:23:53 pm
Handprints are easy with the hacked E4, too. This is from two seconds of contact on a heavy hardwood table top. (Fingers were cold, as you can see from the shot of my hand.  :D )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: böjebba on February 02, 2016, 09:21:23 pm
I just want to say thanks to everyone that have made it possible to make a useable thermal camera from the Flir E4. Without the possibility to increase the resolution, I had not even considered to buy a Flir.
I bought the Flir E4 in January that came with Firmware 2.8. Followed the instructions and the links in the first post to downgrade to 2.3 and install the hack and the extra tools.
Used Virtualbox with Win 7 32 bit all way.
My only issue was the USB-ports in Virtualbox.  It worked a lot better with the Virtualbox extension pack  :P

Once again, THANKS!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 03, 2016, 07:54:51 am
Hi, I have a FLiR E30 which I imported from a U.S. Supplier and its the full 30 fps version.
I would like to know if anyone else has done the E30 to E60 "conversion" on a 30 fps unit without it being then restricted to 9 fps. I can't find an explicit reference to fps in the config files ( I could have missed it ).
I don't know if the frame rate is hardware or software limited, but I would assume (don't like doing that) if it is a security requirement that it would be set by the hardware. Does anyone know this for sure?

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 03, 2016, 08:10:29 am
I have fiddled about with both the older and newer generation E60s, both 30Hz models and have not reduced it at all. As long as you have a backup, you should be fine.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 03, 2016, 08:28:44 am
Thanks for that!
I'll give it a go with a bit more confidence now  :)
And thanks to the all guys who worked this out in the first place.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 03, 2016, 11:05:48 am
Hi, upgrade done and all working, even seem to have the wifi module and lamp ( can just see the lamp through the plastic cover + have connected to my phone over wi-fi ) I am thinking there is probably a camera under there too, if anyone has managed to remove that cover, could they share how they got it out, I could not find a teardown on the E30 - E60 series, and I think I would have to bugger up the bottom rubber on the handle to remove the screen/keypad/battery cover part ( last 2 screws are under a glued on section of rubber ) which I may do if its absolutely necessary to get the visible camera cover off.
Thanks again :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 03, 2016, 11:13:01 am
Could you confirm what firmware and model number the e30 is? I think the cover around the digital camera and lamp is just glued on...

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 03, 2016, 11:31:37 am
Hi, Part number is 49001-1601 model is E30 0.10 "software" (firmware I think) version is 2.23.14
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dazler on February 03, 2016, 06:57:22 pm
thank for the photos, it does look way better than the regular e4.

this is the video I was talking about
https://www.youtube.com/watch?v=OWiyd2LYF24 (https://www.youtube.com/watch?v=OWiyd2LYF24)
at around min 26 you can see the therm-app finding stud on the wall
at 28:30 the flir e4
at 30:00 the handprint.

I wonder how would a hacked e4 performed in that same scenario.

As the e4 goes for around 1k and the therm-app for 1.6k I might not need that much detail.
but don't know if I will later regret not spending that extra $ and get the therm-app.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: man_of_stars on February 03, 2016, 08:22:09 pm
From what I can see, enhanced E4 outperforms the therm-app significantly!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 04, 2016, 06:07:51 am
Hi, just spent a few hours stripping the whole camera down in order to find out how that lens was held in, and you are right, it's just bloody glued on |O
I had convinced myself there was a screw holding it in place, and didn't want to trash the cover by snapping it, so I dismantled the whole thing ( have lots of photos if anyone else wants to see whats inside ) to discover there were no screws under the camera/LED/WiFi boards. So with glue being the only possibility, I pried the cover off with a jewelers screwdriver and that was all I needed to do in the first place ( just like Chanc3 said ). :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 04, 2016, 07:49:19 am
Sorry! I should have checked ours, but both of them were out of the office on jobs. Glad you worked it out though. Will make future repairs nice and easy Haha

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: targit on February 05, 2016, 03:45:46 am
Hi, No worries Chanc3, it was an interesting way to kill a few hours anyway  :-/O
If anyone else is doing the E30 upgrade, here are some pics of whats under the cover and one way to make the holes and refit it. after drilling the holes out I filed with a fine needle file and the results look OK without getting  too fussy over the finish inside the holes.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 05, 2016, 07:05:31 am
This is a sample of a handprint viewed with the doctored E4

26.avi (http://wikisend.com/download/901030/26.avi)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on February 06, 2016, 06:26:05 am
From what I can see, enhanced E4 outperforms the therm-app significantly!
mjlortons video seems to have a ~3 degree temp delta, whereas the image by Bud has a ~8 degree temp delta.

Same with the handprint, jeffB's image has a 8 degree (celcius) delta whereas mjlortons video shows a 2 degree delta.

Here's a comparison using very small temperature deltas.

Therm-App:

Noise and resolution test
(http://puu.sh/knAcN/566f2341c8.jpg)

FLIR Hacked E4, Hacked E40, FLIR One (G1):
a sensitivity test
Flir E40 (hacked 320x240), Germanium (?) lens
(https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/?action=dlattach;attach=118921;image)

Flir E4 (hacked 320x240),  Chalcogenide Glass lens
(https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/?action=dlattach;attach=118923;image)

Flir One => Lens FOL 2 (80x60)
(https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/?action=dlattach;attach=118925;image)

As you can see at low temperature deltas the Therm-App does much better than the hacked E4 and is near the hacked E40.

Still not the same target temperatures though (only the same delta), so still not a super accurate comparison.

Please note that I used the Therm-App and the included lens (with f/1.1 aperture), whereas mjlorton used the Therm-App TH and it's included lens (with f/1.4 aperture, much darker).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bill W on February 06, 2016, 03:39:46 pm
Those seem to show up that that E4 hack has only sorted out the resolution and not the 'added' noise, while the E40 hack may have also sorted out the noise.
Standard specs for NETD (which are at f/1.0, at the sensor, under sensor test conditions of course, so not like it is used in the camera with an f 1.3 lens !):

E4 = 150mK
E8 = 60mK
E40 = 70mK
E60 = 50mK

Just being a Chalcogenide lens is not the issue, f number could be or it is image 'dishancement'.  Indeed the E4 noise is very blotchy suggesting a low resolution itself which contributes to what is for a 320 a rather horrid image. 

Bill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2016, 05:05:47 pm
As Bill W has stated, the noise generator destroys the E4 performance and that was FLIR's intention for that budget model.

I manually edited my noise generator setting in the configuration file of my FW 1.19.8 E4 camera and the noise was reduced dramatically. I think I set the injected noise to 5mk in the belief that some noise was possibly needed in the image processing stages. IIRC the E60 also has its noise generator set to 5mk when shipped. I have to upgrade my second E4 soon so will try a setting of zero for the noise generator.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 06, 2016, 06:50:20 pm
5mK on the E60? Can you advise where I can check that figure?

On the E60 I use for work I think the noise is set to 35mK as I can see this line in the conf.cfg file:
.caps.config.image.targetNoise.targetNoiseMk int32 35

It's been my intention to modify that for a while, it's on the long "todo" list. In some respects the stock E60 looks noisier than the modified E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2016, 07:09:27 pm
Sorry this is way back somewhere in this thread when we were looking at the differences between the low end and high end units. I may even be mistaken, but I know there was much discussion about whether a noise generator was needed for video processing algorithms and it was decided that a low setting of 5mk was appropriate. Others set the noise generator to zero without adverse effect. I have been meaning to do the same.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 06, 2016, 07:27:22 pm
Ok I just used google to search this thread for 'noise generator' and all the info is there on the topic. I was in error, the E60 does not have its noise generator set to 5. It is 35 as you say. I think we were all a bit surprised that the noise generator was active on the most expensive models, hence the concern about turning it off completely.

Just enter this search string into Google to read more on the topic......

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/)  noise generator
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on February 06, 2016, 11:13:42 pm
I wonder how high in the range you have to go to get no noise generator... T460? T460sc?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on February 06, 2016, 11:15:04 pm
Indeed the E4 noise is very blotchy suggesting a low resolution itself which contributes to what is for a 320 a rather horrid image. 
IMO what's happening is that the noise is being generated THEN noise reduction is applied to the generated noise. Due to the high amount of noise the noise reduction is working overtime thereby generating the blotchy image.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 07, 2016, 06:50:14 am
Downgrade confirmed working from 2.8.0 to 2.3.0 using the most up to date software version of Flir Tools which was 5.4.15351.1001.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 07, 2016, 11:35:48 am
I think we were all a bit surprised that the noise generator was active on the most expensive models, hence the concern about turning it off completely.
The E60 is not the most expensive Flir model, therefore also this camera is crippled  ;)

I wrote in 2013 something about the real sensor noise and the noise generator.
At that time it was possible to do some nice noise measurements with the "old" service menu.
The "hardware" pixel noise of my E40 was <30mK.


targetNoiseMk is a noise generator in mK (conforming with NETD/ thermal sensity in Flir Datasheets of the selected cam)
Formerly I stacked some noisy images with Registax or AviStax  to subtract out the randomly noise and it works great!!

after setting targetNoiseMk to zero, stacking of images don't improve results  :(

here a sample from a Flir E40 (old cam hacked formerly from 160x120 to 320x240)
in service menu I can measuring the noise

Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  60 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      61.28      12.13
Row Noise        14.84      2.94
Column Noise     13.67      2.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      25.69      5.09
Row Noise         7.08      1.40
Column Noise      7.82      1.55
Uniformity      198.23     39.25

Total noise        MilliKelvin      Digital Units
Pixel Noise       67.01     13.27
Row Noise          9.71      1.92
Column Noise      10.10      2.00


and now without noise (cam temperature is 25 Grad):
Code: [Select]
rset .caps.config.image.targetNoise.targetNoiseMk  0 (MilliKelvin)

 Temporal noise        MilliKelvin      Digital Units
Pixel Noise      19.85      3.93
Row Noise         6.39      1.26
Column Noise      8.64      1.71

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      18.98      3.76
Row Noise         4.70      0.93
Column Noise      5.54      1.10
Uniformity      210.23      41.63

Total noise        MilliKelvin      Digital Units
Pixel Noise      28.96      5.73
Row Noise         5.76      1.14
Column Noise      7.66      1.52


see the differences (NETD is 0,03 °C @ 25°C)

Quote
http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters (http://gs.flir.com/surveillance-products/surveillance-technology/imaging-technotes/IR_Technology_Parameters)
Uncooled infrared cameras systems are typically a little noisier, in the range of 30 - 120mK. Noise in an image can be spatial or temporal.
Spatial noise is noise across the image at any given point in time. It is perceived as an unchanging fixed pattern on top of the image.
Temporal noise is noise at any point in the image over time. It is perceived as the static that moves in an image.
NETD is typically the measure of both these noise types.

remarkably Flir dont't disable the noise generator at the top cams of a serie (Flir E4 -> E8 , Flir E30 -> E60)

I have a untouched config file from a E60 with 40mK noise
Code: [Select]
#
# Generated at 2011-04-28 17:34:36
#
.caps entry
.caps.config entry
.caps.config.name text "app E60"
...
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 40
...
# ID 490xxxxx

The data sheet for E60 says the Thermal sensitivity (N.E.T.D) @30°C is 50mK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on February 07, 2016, 11:50:47 am
Interesting, thanks guys.
Sure does seem that Flir want to differentiate the mid range E40-E60 from the Txxx models using noise as a factor.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on February 07, 2016, 08:08:29 pm
Well,

Naturally device with bigger and especially, GE lens will perform better. However, big lens is only part of success in making temp. hi-res photos. Our baby E4 can perform very well if doctored in a proper way ;)

On the photo:

a wardrobe section with dresses, hangers and aluminium (gold anodized) shoulder, back surface is white PVC (matt).

Peculiarities:

- as I am taking the shot standing in front of it, I myself is big but poor IR lamp :) This creates contrast on shiny surfaces, while air micro-convection creates contrast for the dresses;

- notice reflection of camera itself and its sensor in the back white PVC sheet;

- aluminium, although anodized, looks colder. This is okay since even anodized aluminium has typical emissivity of 0.75
 
- thermal shadow of the shoulder on the PVC white back - doesn't appear on visual DC camera shot;

- camera reliably reads temp. difference of 0.1C between thermal shadow and the non-shaded area;

- overall temperature range shown is only 0.9C (autolevel);

- all objects are readable and recognizable, and blopping noise is moderate; most artifacts are JPEG compression (although I use 100 quality); in fact, on live scene these are minor part of the noise (so far I didn't manage picture to be saved in alternative format as PNG, while still be one file);

- no digital post-processing was applied, only gamma was corrected

0.9C vs. 1.1C:

Adding only 20% to the temp span, we gave it drastic improvement! I think, if I had 1.2C object, the quality would become comparable to E60 (under certain conditions). But I don't have a full pack of champagne bottles, unless you send me one for testing the camera (but I may not return it in full!)  :-DD

So don't blame our baby E4 for bad images, blame yourself for not giving it proper treatment :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 07, 2016, 11:31:10 pm
you don't set the level to auto level ;)
but I see the same noise like in my E4 image above
(https://www.eevblog.com/forum/testgear/flir-one-thermal-imaging-camera-teardown-and-hacks/?action=dlattach;attach=118923;image)
I don't say, that this result is bad!



For hardware enthusiasts and pixel peepers I found my service menu noise measurements of my Flir E4 from 2014:
(compare with E40 two posts above)
Code: [Select]
\>rls .registry.caps.config.image.targetNoise
enabled                     true
targetNoiseMk                  0

\>rls .system.tempsens
TSBoard                  317.285
TSFpa                    316.633
TShutterDigFilt1       322.03729
TShutterDigFilt2               0

// Service Menu
Temporal noise        MilliKelvin      Digital Units
Pixel Noise      17.50      1.63
Row Noise      11.02      1.02
Column Noise      9.59      0.89

Spatial noise        MilliKelvin      Digital Units
Pixel Noise      12.51      1.16
Row Noise      2.71      0.25
Column Noise      4.32      0.40
Uniformity      178.43      16.59

Total noise        MilliKelvin      Digital Units
Pixel Noise      17.86      1.66
Row Noise      4.81      0.45
Column Noise      5.89      0.55

We get a better N.E.T.D of 18mK (opposite 29mK with E40) but the images of E4 are significant noisier.
I think, this is a result of the better F-Stop of the E40 lens.

this measurement results are rarely in this forum
google found with
Code: [Select]
site:eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown MilliKelvin Spatial noiseonly this post
On my 1.19.8 F/W model, I've got a temporal noise of 14.899144 mK in the calibration file. Added 05/27/2015: F/W 1.19.8, H/W 1.1. May add row / Column noise later... Added 05/29/2015: Well, here it is, right from the internal test and calibration menu:

Code: [Select]
Temporal noise  MilliKelvin Digital Units
Pixel Noise 15.19 1.29
Row Noise 9.81 0.83
Column Noise 9.11 0.77


Spatial noise    MilliKelvin Digital Units
Pixel Noise 9.55 0.81
Row Noise 2.58 0.22
Column Noise 4.49 0.38
Uniformity 207.72 17.66


Total noise    MilliKelvin Digital Units
Pixel Noise 13.36 1.14
Row Noise 5.26 0.45
Column Noise 5.26 0.45
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on February 08, 2016, 12:06:58 am
I updated the image to be autolevel as requested. To my view, it looks even better, regardless the fact it is 0.9C vs. 1.2C. try to estimate the radius of blob from your bottles and mine objects. It clearly don't appear to reach the E60, but close, very close.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaeliv on February 08, 2016, 07:47:41 am
Hi, I have a FLiR E30 which I imported from a U.S. Supplier and its the full 30 fps version.
I would like to know if anyone else has done the E30 to E60 "conversion" on a 30 fps unit without it being then restricted to 9 fps. I can't find an explicit reference to fps in the config files ( I could have missed it ).
I don't know if the frame rate is hardware or software limited, but I would assume (don't like doing that) if it is a security requirement that it would be set by the hardware. Does anyone know this for sure?

Thanks
I used to have a Flir E30. I Upgraded it to a Flir E60. To do so I used the E60 config files, not the E8 config files. The frame rate obviously did not go down.
IMO(not backed up by anything) : The frame rate is hard-coded into firmware and not editable via config files. If you manage to hack the firmware you might be able to increase the frame rate but you will probably be limited by processor speed. The E4 sensor outputs native 60fps but the extra frame data is discarded.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on February 12, 2016, 12:01:35 am
I just sold my e4 that I had upgraded to an e8 to buy a e30bx that the person sold as hacked to an e60, and it is but the bluetooth when turned on shuts itself off in about 1 second so no bluetooth is possible, and the wlan can not connect to even open networks. I already backed up everything and my thoughts where to start from scratch but the info is not nearly as complete as doing an e4 so I was wondering if maybe there was something else to try before starting at the beginning. Thanks!
Title: Flir E5: Application Error after hard reset H E L P !
Post by: tomtom007 on February 12, 2016, 08:37:59 pm
Hello,
I have an E5 with Firmware 1.22 and 1.1L Hardware. I made the hack as described. I works perfect. Then I made a hard reset by pressing the button for making photos while switching power on. The E5 makes a reboot and I got the Application Error massage. In the Windows is the following text: Application appcore.exe encounter a serious error and must shut down. When I press OK for closing the Windows, the E5 shows only the thermal Image. It is not possible to got to the menu and no key is working. Only the Power-Off Switch will work. Is there anyone who has an Idea??? Is there any file I have to erase or to modify? I stored the old files to the E5, but no results...

Today I solved the problem. I made a Firmware Update to 2.3.0 by Hand with the FLIRInstallNet Program. Everything works good!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 12, 2016, 09:04:47 pm
It shouldn't have persisted after restoring the backup. Which files did you replace?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 12, 2016, 09:05:48 pm
I just sold my e4 that I had upgraded to an e8 to buy a e30bx that the person sold as hacked to an e60, and it is but the bluetooth when turned on shuts itself off in about 1 second so no bluetooth is possible, and the wlan can not connect to even open networks. I already backed up everything and my thoughts where to start from scratch but the info is not nearly as complete as doing an e4 so I was wondering if maybe there was something else to try before starting at the beginning. Thanks!
Try restarting it and applying the hack again.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sharpharp on February 12, 2016, 11:23:26 pm
Hi all,

Just about to buy a new Flir e4, what is the current firmware they come with?

Can I do the downgrade to run the hack?

I read that the resolution can be upped to an e8, but what about the thermal sensitivity?
On the e4 it is <0.15, on the E6 onwards its <0.06 -Will the hack also unlock the thermal sensitivity?

Is there any other reason why to buy an E6 or E8 which can't be achieved by a hacked E4?

Also, a main dealer in the Uk told me that the E4 comes with the latest firmware which cannot be modified, is this correct?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on February 13, 2016, 12:54:11 am
Well I connected to the service menu 192.168.02 and it just shows the * sign at the spot where the bluetooth/wifi module is, so I guess I might not have the actual hardware in mine like some people have had. Mine is one of the last built of the e30bx units sept. 2013 in case someone is looking at buying one. I didn't really need the bluetooth just wanted it if you know what I mean.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 13, 2016, 09:04:48 pm
Downgraded a 2.8.0 camera to 2.3.0 then upgraded it to 2.11 for the heck of it and then downgraded it again and it all worked perfectly, same method as downgrading a 2.8 camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sharpharp on February 16, 2016, 01:40:18 am
Hey guys,

Got my E4 today, its the following:

model: E4 1.2L
part number: 63901-0101
Software 2.3.0

Is this good for doing the hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ElectricGuy on February 16, 2016, 02:08:30 am
Hey guys,

Got my E4 today, its the following:

model: E4 1.2L
part number: 63901-0101
Software 2.3.0

Is this good for doing the hack?

Yes. Read first post!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pinkus on February 16, 2016, 10:21:06 am
Well I connected to the service menu 192.168.02 and it just shows the * sign at the spot where the bluetooth/wifi module is, so I guess I might not have the actual hardware in mine like some people have had. Mine is one of the last built of the e30bx units sept. 2013 in case someone is looking at buying one. I didn't really need the bluetooth just wanted it if you know what I mean.
yes, this will be the case. Somewhere (can't find it now) a serial # range was posted so you can check upfront if a E30 will come with or without the hardware for bluetooth and wifi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 16, 2016, 03:13:25 pm
Forget the e4... Get the new FLIR X6900sc with 1000 fps
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on February 16, 2016, 05:38:09 pm
Well I connected to the service menu 192.168.02 and it just shows the * sign at the spot where the bluetooth/wifi module is, so I guess I might not have the actual hardware in mine like some people have had. Mine is one of the last built of the e30bx units sept. 2013 in case someone is looking at buying one. I didn't really need the bluetooth just wanted it if you know what I mean.
yes, this will be the case. Somewhere (can't find it now) a serial # range was posted so you can check upfront if a E30 will come with or without the hardware for bluetooth and wifi.
It's bugging me now so I am on the hunt for a e40bx to modify lol Thanks for the confirmation, I searched but did not find a serial number post on hardware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: -jeffB on February 16, 2016, 06:40:04 pm
Forget the e4... Get the new FLIR X6900sc with 1000 fps

Nah. No built-in display, non-ergonomic handle. It doesn't even plug into my phone.  ::)

Any idea what the price range will be on this? US$30K, or higher?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 16, 2016, 06:55:48 pm
Haha yea I was just kidding but I'm sure the price is outrageous. I'd rather have 30 E4's...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hedis on February 17, 2016, 02:53:44 am
Is it possible to modify the E40bx to a E60 and get the +650*C range or will it me limited to +120*C as the E60bx?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 17, 2016, 05:10:01 am
Is it possible to modify the E40bx to a E60 and get the +650*C range or will it me limited to +120*C as the E60bx?
Probably, however there aren't many resources as to what firmwares are upgradeable
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 17, 2016, 07:01:46 am
Is it possible to modify the E40bx to a E60 and get the +650*C range or will it me limited to +120*C as the E60bx?
You can enable new ranges in the service section of the camera (plug it in to PC via USB and go to 192.168.0.2 in Internet explorer).

Any new ranges that are added are not calibrated, thus the readings can be inaccurate.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Hedis on February 17, 2016, 07:46:09 am
You can enable new ranges in the service section of the camera (plug it in to PC via USB and go to 192.168.0.2 in Internet explorer).

Any new ranges that are added are not calibrated, thus the readings can be inaccurate.
Thanks for the answer! Any feeling about how much off it could be in uncalibrated ranges? (1*C/10*C/100*C?)

Is it possible to adjust the calibration values yourself if you have anything to calibrate it against?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 17, 2016, 10:34:09 am
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on February 17, 2016, 12:00:51 pm
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.
But for whatever they charge for a normal calibration... did they calibrate the higher ranges for you too? :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 17, 2016, 03:55:09 pm
There are two forms of 'calibration' service.

1. Calibration confirmation aka Confidence check.

The service provider owns a number of Calibrated Black Body thermal sources. The camera is checked against the sources and an accuracy report produced. No actual calibration is carried out so the camera remains unchanged.

This is what I carry out on my cameras using my own Black Body thermal sources.

2. Full Calibration including repair and certification.

The service provider runs calibration software, specific to a camera, and a set of Calibrated Black Body thermal sources to calibrate the camera. Such full calibration checks and adjusts the cameras calibration tables against known accurate sources. It will also often include updating of the dead pixel maps and NUC tables. After such full calibration, the camera performance is certified as meeting the OEM original specification for that model of camera.

The full calibration is time consuming and so expensive. Many users opt for the simpler and so cheaper confidence check and associated report.

As a side note, the FLIR and NEC industrial thermal cameras that were available in the late 1990's have an excellent reputation for meeting OEM specified calibration accuracy over many years, and even decades. This may be due to the quality of components used and temperature stabilisation employed on the microbolometer. More recent offerings in the thermal camera market are apparently less stable in terms of calibration and an annual calibration check is recommended.

I have a TESTO thermal camera that has developed three dead microbolometer pixels. Having spoken to several calibration houses it is apparent that the only way to get the dead pixels updated in the dead pixel map is to have a full and expensive calibration by a TESTO service agent. Most generic calibration houses do not have access to the required calibration and dead pixel map editing software

The full calibration routine for an NEC AVIO industrial thermal camera is quite tedious. The calibration software forces the technician to go through a set routine with appropriate thermal sources and only then can the NUC and dead pixel map be updated. Updating the maps is done manually using pixel co-ordinates. A long winded and time consuming task. Hence it is expensive and why confidence checks are normally carried out rather than a full calibration.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on February 17, 2016, 04:49:38 pm
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.
But for whatever they charge for a normal calibration... did they calibrate the higher ranges for you too? :P

Haha alas not, as this was only a "confidence check" (see what Fraser wrote above).

Interestingly, I activated a new range on a camera that went back to FLIR for a full recalibration, with the hopes that they would calibrate it, but alas they must have good records somewhere, as they just turned it off again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 19, 2016, 08:45:07 pm
Newest use of the Lepton Core:
http://www.technobuffalo.com/2016/02/18/cat-s60-rugged-smartphone-features-with-integrated-thermal-camera/ (http://www.technobuffalo.com/2016/02/18/cat-s60-rugged-smartphone-features-with-integrated-thermal-camera/)

$600 pricetag  :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: frenky on February 19, 2016, 09:59:01 pm
Newest use of the Lepton Core:
http://www.technobuffalo.com/2016/02/18/cat-s60-rugged-smartphone-features-with-integrated-thermal-camera/ (http://www.technobuffalo.com/2016/02/18/cat-s60-rugged-smartphone-features-with-integrated-thermal-camera/)

$600 pricetag  :o
S60 thread: https://www.eevblog.com/forum/thermal-imaging/caterpillar-s60-phone-with-integrated-thermal-camera/
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sharpharp on February 21, 2016, 09:00:30 pm
Thanks for the info guys, got my E4 done today, super resolution and menu hack.
All works great.

Is there anything missing features that still need to be hacked?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gunny on February 22, 2016, 01:32:41 am
hey guys, looking to get the e4 and hack it (higher resolution). from what i understand, you need a certain version (2.3?) in order to do the hack, and if its a higher version like 2.8, youd have to use a downgrade program. im just not totally sure what the newest version is and if its hackable or not. is there a certain place to order this camera to insure its software is compatible with the hack? where would you recommend i buy this thing?

thanks  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 22, 2016, 04:51:27 am
Thanks for the info guys, got my E4 done today, super resolution and menu hack.

And the original firmware version was ...?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sharpharp on February 22, 2016, 11:23:19 am
Thanks for the info guys, got my E4 done today, super resolution and menu hack.

And the original firmware version was ...?

v2.3.0.

So is there any mods that the E4 is missing which are in the E8?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 23, 2016, 09:40:50 pm
Thanks for the info guys, got my E4 done today, super resolution and menu hack.

And the original firmware version was ...?

v2.3.0.

So is there any mods that the E4 is missing which are in the E8?
The real question is "So is there any mods that the E8 is missing which are in the E4 Upgraded?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 24, 2016, 12:13:46 am
+1
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on February 24, 2016, 02:36:55 pm
Hey guys you can get 2.3.0 firmware into EPROM for changing E4 / E8 or could somehow change the flirtools?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: birkhgoff on February 25, 2016, 07:17:44 am
Hi friends! I have Flir E4 full hacked. Flir Tools suggests to update a firmware to version 2.11.0. Somebody knows an updating essence?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 25, 2016, 02:08:43 pm
The real question is "So is there any mods that the E8 is missing which are in the E4 Upgraded?

- less noise (better NETD)
- some minor menu hacks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 26, 2016, 09:05:20 pm
Hi friends! I have Flir E4 full hacked. Flir Tools suggests to update a firmware to version 2.11.0. Somebody knows an updating essence?
You already have a camera that is better than any eX model so there is never a purpose to update unless it is an official free e8 plus upgrade which will happen never haha
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 01, 2016, 01:18:55 am
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.

What camera model did you use?

As far as I could tell, not all FLIR cameras don't measure temperatures that high, and I don't think anyone has managed to increase the range of their E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: encryptededdy on March 01, 2016, 04:27:03 am
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.

What camera model did you use?

As far as I could tell, not all FLIR cameras don't measure temperatures that high, and I don't think anyone has managed to increase the range of their E4.
Yeah, I'm pretty sure the higher end FLIR Cameras use a ND filter to achieve the higher temp ranges, so I don't think it's possible on the E4 without hardware mods.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 01, 2016, 07:25:17 am
In this instance it was an A655sc and P620. They both can go that high, but need the calibration.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on March 01, 2016, 08:58:44 am
I accidentally sent one of our work IR cameras off for a calibration "check" with an extra range I enabled and it failed due to how much it was out. I enabled the 300-1500°C range and at 450°C  the camera was a whopping 32°C out (356% of tolerance), which is massive considering at the 0-500°C range, at 450°C it was out by 4°C.

In the service menu, I believe it is possible to calibrate your device, however I'm not sure as to the correct procedure.

What camera model did you use?

As far as I could tell, not all FLIR cameras don't measure temperatures that high, and I don't think anyone has managed to increase the range of their E4.
Yeah, I'm pretty sure the higher end FLIR Cameras use a ND filter to achieve the higher temp ranges, so I don't think it's possible on the E4 without hardware mods.

In my experience even the Exx range has difficulty once exposed to temperatures >650°C. Strange things happen with the auto range, i.e it starts to detect negative temperatures at the bottom of the range that just are not there. Not a real issue for me (or most people into electrical/building apps) but I noticed it while taking some pictures for  neighbouring firm of their impressive new industrial gas burner just out of curiosity.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kuschelg on March 02, 2016, 06:41:38 pm
Hi,

I got a E4 with firmware 2.8 and tried to downgrade using tmushy's package (http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)) but my Windows 7 complains about it not being a Win32 application.

Any success or recommendations for my situation?

Thanks,
Sascha
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 03, 2016, 05:46:41 pm
Hi,

I got a E4 with firmware 2.8 and tried to downgrade using tmushy's package (http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)) but my Windows 7 complains about it not being a Win32 application.

Any success or recommendations for my situation?

Thanks,
Sascha
Did you run as administrator?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dlp on March 04, 2016, 11:20:51 pm
Hello
I just boguht a new unit that has firmware V2.11.0.

Can this be downgraded to perform the hack?

TIA
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 04, 2016, 11:22:52 pm
Read previous posts, yes I believe it is possible.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bmwnomad on March 05, 2016, 12:12:01 am
Hello
I just boguht a new unit that has firmware V2.11.0.

Can this be downgraded to perform the hack?

TIA
Yes, I just purchased a Flir E4, came with 2.11.00, downgraded to 2.3 and performed the hack with no problems.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on March 05, 2016, 12:22:29 am
no problems so far

just wait...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 05, 2016, 07:04:05 am
Flir is baking new firmware revisions like crazy...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 05, 2016, 11:10:27 am
Flir is baking new firmware revisions like crazy...
You have to wonder why, considering how long this product has been around....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2016, 02:07:32 pm
FLIR use a common base firmware that it then configures for specific models of camera. They continue to develop the base firmware and roll it out across the current camera models. Good investment in their product range IMHO.

This was why the E4 was capable of exceeding the capabilities of the E8. It includes features from the Exx series.

Interestingly, I have not seen any new firmware for the F1G2. Maybe because it's firmware is specific to it, so the return on investment in firmware development is lower.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on March 05, 2016, 04:34:34 pm
The firmware of F1G2 is only a "simply" lepton2usb wrapper.
The major part of Flir know how is shifted to the Flir One App.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2016, 05:59:38 pm
@Tomas123

Ah yes I see the difference.

Sadly the only way forward on the F1G2 APP front is with third party solutions as FLIR have hobbled the performance deliberately, so will not be improving it any time soon.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: newbster on March 05, 2016, 09:16:45 pm
Hi all I downgraded to firmware 2.3 and then successfully increased the resolution.  However when I tried to connect to the FTP server to perform the menu hack the IP address was no longer the same.  It appears to have switched to the default 169.245.167.x address. With this new IP address I can ping and switch between the set_permanent_RNIDS/remove_RNIDS fif files with no problem but when I try to connect to the FTP server I receive Connection attempt failed with "ECONNREFUSED - Connection refused by server".

Any ideas why it switched to 169.245.167.x after increasing the resolution and how to connect to the FTP server?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on March 06, 2016, 07:44:50 pm
2newbster:

...and your camera initial firmware was?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Taucher on March 08, 2016, 12:56:25 pm
Hi friends! I have Flir E4 full hacked. Flir Tools suggests to update a firmware to version 2.11.0. Somebody knows an updating essence?

NTARS - Never Touch A Running System!  ^-^
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 08, 2016, 06:55:31 pm
Hi friends! I have Flir E4 full hacked. Flir Tools suggests to update a firmware to version 2.11.0. Somebody knows an updating essence?

NTARS - Never Touch A Running System!  ^-^
But 2.11 upgrades the thermal image to 32,000x24,000!!!  :-DD :-DD :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on March 08, 2016, 08:57:06 pm
320,000 x 240,000 ... wavelengths :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dlp on March 12, 2016, 07:25:13 am
Hello
I just boguht a new unit that has firmware V2.11.0.

Can this be downgraded to perform the hack?

TIA
Yes, I just purchased a Flir E4, came with 2.11.00, downgraded to 2.3 and performed the hack with no problems.

I can't even get close to downgrading the firmware to 2.3. My flir tools won't allow me access to the embedded files in my camera. When I check for updates in flir tools the camera doesn't even show as connected.

I have windows 7 64bit. Also tried it on a 32bit xp machine.

Any help greatly appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 12, 2016, 07:32:09 am
Hello
I just boguht a new unit that has firmware V2.11.0.

Can this be downgraded to perform the hack?

TIA
Yes, I just purchased a Flir E4, came with 2.11.00, downgraded to 2.3 and performed the hack with no problems.

I can't even get close to downgrading the firmware to 2.3. My flir tools won't allow me access to the embedded files in my camera. When I check for updates in flir tools the camera doesn't even show as connected.

I have windows 7 64bit. Also tried it on a 32bit xp machine.

Any help greatly appreciated.
Do you have the FLIR device drivers installed?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 17, 2016, 04:06:36 am
Flir tools is trash and is hit or miss. I tried upgrading my flir tools the other day and it was telling me that I had to uncheck Flir Word reporting as only 32bit versions of word is supported... I was never given the option to check or uncheck anything.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 17, 2016, 07:25:50 am
Flir tools is trash and is hit or miss. I tried upgrading my flir tools the other day and it was telling me that I had to uncheck Flir Word reporting as only 32bit versions of word is supported... I was never given the option to check or uncheck anything.
There is an options tab on the first dialogue page, click that and it's all in there. If you have issues with the reporting element you need to uninstall first.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 21, 2016, 07:48:03 am
Flir tools is trash and is hit or miss. I tried upgrading my flir tools the other day and it was telling me that I had to uncheck Flir Word reporting as only 32bit versions of word is supported... I was never given the option to check or uncheck anything.
There is an options tab on the first dialogue page, click that and it's all in there. If you have issues with the reporting element you need to uninstall first.
Uninstalled the entire program, and then tried reinstalling it but it kept giving me that WORD error. I know someone else that had the same problem.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 21, 2016, 07:58:36 am
I'll send you a link to a special removal program they released for this problem. Are you using 5.5.?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 22, 2016, 12:13:33 am
I'll send you a link to a special removal program they released for this problem. Are you using 5.5.?

Sent from my ONE A2003 using Tapatalk
Yes
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yzman on March 22, 2016, 01:57:40 am
Hi Everyone ! New here myself and wanted to start by saying thanks for all your great input on the E4 it is very much appreciated :)

For anyone trying to downgrade from 2.11 (I assume this applies to 2.8 also) and are having the the issue where "flir tools upgrade window" appears and not the e4 firmware upgrade window, the following worked for me. I installed 4.1.14xxxxxxx which is the xp version still available on the flir website. I used windows 7 home premium 32 bit edition. Follow this path:
Start/all programs/FLIR Systems/"right click" on FLIR tools/properties/Compatibility tab/check "Run this program in compatibility mode for:" choose "Windows xp (Service Pack)" also check "Run this program as administrator". Click "Apply and then Click "Ok"

Next follow MATMOE's instructions and everything should work. It worked for me, I successfully downgraded 2.11 to 2.3   e4 1.2L s/n 6397xxxx

This may work for other versions of windows. I did test on Windows 10 pro 64 bit I got the menu to appear but never tested the firmware downgrade because I am too afraid lol best to leave well enough alone haha.

Using windows 10 follow path: windows symbol(start menu)/All Apps/Flir Systems folder/right click on "Flir Tools icon"/"more"/"open file location"/right click on "Flir Tools icon"/Compatibility tab/ check "Run this program in compatibility mode for:" choose "Windows xp (Service Pack)" also check "Run this program as administrator". Click "Apply and then Click "Ok"

I can't speak to whether the firmware downgrade will work on other versions of windows other than win 7 home prem 32 bit but the above should get you to the point where you can actually attempt it.

I would also like to add that my camera does the same amount of calibrating before the downgrade as it does after, nothing seems to have been affected by the the downgrade as far as I can tell.

Regards,

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: yzman on March 22, 2016, 03:07:18 am
That should read "service pack 3" for both instances
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: snk_pl on March 28, 2016, 07:13:32 pm
Hello all,
I got i3 mk1. with newest firmware 4.3.2. I had no problem to upgrade to i7 120x120pix. I found on flir site second firmware (I think for mk2) version 6.5.3.

Of course I got error that is not Ix and so on. In install package there is a cmd file and can be modified to ignore version check. I am too scared of bricking system so don't want to force installation. I only tried to switch fpga_isc0601_120x120_c16.bin file and bricked system ;) got only green screen no gui loading. After hard evening I manage to copy backup file and it is working back at 120x120.

I have 2 questions

1) Is there a hardware difference in mk1 and mk2. Anyone got teardown photo of PCB?
2) Is there a checksum for fpga bin, like in appkit.rev to copy also? (this a could try but then a checksum for appkit.rev itself)

I know i'm newbie on forum, but didn't have to write anything before so I was unregister.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 29, 2016, 06:20:23 am
This is E4 thread , perhaps you could start a new thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: snk_pl on March 29, 2016, 06:46:07 am
There are quite few posts about iX in this thread, also iXX posts and eXX posts so besides this thread is about E4 teardown it has info about majority of flir upgradeable cameras
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on March 29, 2016, 06:53:34 am
Hello all,
I got i3 mk1. with newest firmware 4.3.2. I had no problem to upgrade to i7 120x120pix. I found on flir site second firmware (I think for mk2) version 6.5.3.

Of course I got error that is not Ix and so on. In install package there is a cmd file and can be modified to ignore version check. I am too scared of bricking system so don't want to force installation. I only tried to switch fpga_isc0601_120x120_c16.bin file and bricked system ;) got only green screen no gui loading. After hard evening I manage to copy backup file and it is working back at 120x120.

I have 2 questions

1) Is there a hardware difference in mk1 and mk2. Anyone got teardown photo of PCB?
2) Is there a checksum for fpga bin, like in appkit.rev to copy also? (this a could try but then a checksum for appkit.rev itself)

I know i'm newbie on forum, but didn't have to write anything before so I was unregister.
Did you just replace the firmware with i7 version? All you need to do is modify the conf.cfg and gui.cfg files!

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: snk_pl on March 29, 2016, 07:55:43 am
Hello all,
I got i3 mk1. with newest firmware 4.3.2. I had no problem to upgrade to i7 120x120pix. I found on flir site second firmware (I think for mk2) version 6.5.3.

Of course I got error that is not Ix and so on. In install package there is a cmd file and can be modified to ignore version check. I am too scared of bricking system so don't want to force installation. I only tried to switch fpga_isc0601_120x120_c16.bin file and bricked system ;) got only green screen no gui loading. After hard evening I manage to copy backup file and it is working back at 120x120.

I have 2 questions

1) Is there a hardware difference in mk1 and mk2. Anyone got teardown photo of PCB?
2) Is there a checksum for fpga bin, like in appkit.rev to copy also? (this a could try but then a checksum for appkit.rev itself)

I know i'm newbie on forum, but didn't have to write anything before so I was unregister.
Did you just replace the firmware with i7 version? All you need to do is modify the conf.cfg and gui.cfg files!

Sent from my ONE A2003 using Tapatalk
Yes, I know. I have no problem going from 60x60 to 120x120. I'm trying next step to go from i7mk1 (120x120) to i7mk2 (140x140) that's why I ask about hardware diffrence. My sensor is isc0601 so I got 320x240 hardware. Limiting factor is FPGA binary but as i try to change it, FPGA stop boot. That's why I not convince if full firmware change to mk2 could brick mk1 model if mk2 fpga bin brick FPGA mk1.

Got windows? ;)  :-DD
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dza on April 03, 2016, 08:25:57 pm
Hi Everyone ! New here myself and wanted to start by saying thanks for all your great input on the E4 it is very much appreciated :)

For anyone trying to downgrade from 2.11 (I assume this applies to 2.8 also) and are having the the issue where "flir tools upgrade window" appears and not the e4 firmware upgrade window, the following worked for me. I installed 4.1.14xxxxxxx which is the xp version still available on the flir website. I used windows 7 home premium 32 bit edition. Follow this path:
Start/all programs/FLIR Systems/"right click" on FLIR tools/properties/Compatibility tab/check "Run this program in compatibility mode for:" choose "Windows xp (Service Pack)" also check "Run this program as administrator". Click "Apply and then Click "Ok"

Next follow MATMOE's instructions and everything should work. It worked for me, I successfully downgraded 2.11 to 2.3   e4 1.2L s/n 6397xxxx

This may work for other versions of windows. I did test on Windows 10 pro 64 bit I got the menu to appear but never tested the firmware downgrade because I am too afraid lol best to leave well enough alone haha.

Using windows 10 follow path: windows symbol(start menu)/All Apps/Flir Systems folder/right click on "Flir Tools icon"/"more"/"open file location"/right click on "Flir Tools icon"/Compatibility tab/ check "Run this program in compatibility mode for:" choose "Windows xp (Service Pack)" also check "Run this program as administrator". Click "Apply and then Click "Ok"

I can't speak to whether the firmware downgrade will work on other versions of windows other than win 7 home prem 32 bit but the above should get you to the point where you can actually attempt it.

I would also like to add that my camera does the same amount of calibrating before the downgrade as it does after, nothing seems to have been affected by the the downgrade as far as I can tell.

Regards,

I had an issue with the firmware downgrade describe above, performed in the same manner as I was having a problem with flir tools 5.x. While I was able to get from 2.11 to 2.3.0, I seem to have lost the factory calibration of the thermal sensor. My thermal images look terrible now, high noise particularly around the edges. Image is in the (639)72xxx serial number range and was manufactured late Jan 2016.

The resolution and menu hacks did not cause or correct the issue.

The worst part of this is that this is my second E4, the first one got stolen. Had no issues with the unlocking then (from 2.3.0) and the thermal images were phenomenal.

While I am still able to perform inspections with this, my reports will suffer greatly.

I am thinking about trying to push the factory 2.3.0 firmware again and see if it changes, would also be willing to pay to have it recalibrated if this is possible. Any suggestions?

UPDATE: I removed the resolution and menu enhancements, no change. I then pushed 2.3.0 again (this time I was able to get the latest Flir Tools 5 to work) but the problem was still there. I then upgraded back to 2.11.0 and the sensor was calibrated again. From there I tried 2.3.0 once more, the problem came back. Jumping back up to 2.11.0 and the problem went away again. Will share some pics.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dza on April 03, 2016, 10:20:27 pm
These pics show the drop in image quality I saw when going from 2.11.0 to 2.3.0...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on April 04, 2016, 10:34:55 pm
Hi guys,

I bought Flie E4 about 1,5 year and upgarde to E8. It was cool, but now i Thing E4(e8) is not to good for me. I do a lot of bouildnig inspection and e4(8) have very bed focus (this camera haven't go focus). Now I wanto to buy FLIR E40 oraz FLIR E30 and upgarade to E60.

e60 is much better because it has a focus adjustment and a smaller viewing angle, which gives a more accurate picture. With E4 (8) I can not do an good picture of the building higher than 8-9 meters.

I have a question for You, I want to buy FLIR E30 from 2013, and I am not sure it is posible to upgarde this model to e60. software: 2.23.14. Can You help me Guys?

this camera which I want to buy:

http://www.ebay.co.uk/itm/152040589101?ssPageName=STRK:MESELX:IT&_trksid=p3984.m1555.l2649 (http://www.ebay.co.uk/itm/152040589101?ssPageName=STRK:MESELX:IT&_trksid=p3984.m1555.l2649)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dza on April 04, 2016, 11:13:56 pm
These pics show the drop in image quality I saw when going from 2.11.0 to 2.3.0...

UPDATE 2: It seems to be working now. Not sure exactly what I did that made it work but I have Res/Menu enhancements running 2.3.0. It used to always show "Special Edition" when booting, noise was present. Funny last night just before I went to bed, it was no fucking good. Today I pick it up and it is OK. Now it just says FLIR and the noise issue is gone. Very relieved!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on April 04, 2016, 11:25:28 pm
@SWAGGYD

Yes, it's works fine with this firmware:

Firmware Feed Flir Exx
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127)
FLIR Exx P/N:490xx (2.23.14) Update Pack
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on April 05, 2016, 01:24:49 am
@SWAGGYD

Yes, it's works fine with this firmware:

Firmware Feed Flir Exx
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127)
FLIR Exx P/N:490xx (2.23.14) Update Pack
Do you know which firmwards do/don't work with  the EXX series upgrade? Was looking at picking up an E40 with MSX however the information on here is few and far between.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on April 05, 2016, 03:42:11 am
I think they all upgrade to e60 specs, mine is 2013 e30 with 492xx and followed all the 490xx instructions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on April 05, 2016, 08:32:53 am
@SWAGGYD

Yes, it's works fine with this firmware:

Firmware Feed Flir Exx
http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127 (http://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=127)
FLIR Exx P/N:490xx (2.23.14) Update Pack
Do you know which firmwards do/don't work with  the EXX series upgrade? Was looking at picking up an E40 with MSX however the information on here is few and far between.

I don't think there are any counters to any Exx firmware versions yet. I was able to reduce the noise factor on our E60 which is manufactured March 2015. A CRC01 checksum lets you mod the cfg file which is unencrypted.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 05, 2016, 08:50:07 am
You may not have Bluetooth or wifi functionality as this may have been in later models.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 05, 2016, 07:21:49 pm
Good Evening,

I got a fresh Flir E4 with 2.11 firmware.
I downloaded the Flir Tools XP version directly from their site and installed it on XP 32 bit.
After that I followed MATMOE's instructions / the ones that come on a *.PDF file with the downgrade file.
I downloaded the downgrade package - http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)

Now when the downgrade process to 2.3 is done, the camera itself is working fine but i got this "ring-of-crap" on the screen which can be seen on the photos below. The ring is like static on every picture, no matter what you are shooting.

I havent done any hacks on it yet and aint gonna before this issue gets solved, spose I need to wait a miracle what happened to dza over a night. Was it xmas over there ? =D

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 05, 2016, 07:27:22 pm
Read post #7762. Have you done a hard reset?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 05, 2016, 07:42:08 pm
Ahoy!

Ye I briefly removed the battery and it didnt do anything, now I took it off for 10 seconds or so and powered the cam back on and ring-of-crap is gone!

Next step is to apply the hack, will do it tomorrow if I got enough time on my hands.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 05, 2016, 07:43:09 pm
Great, glad you got it working.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 06, 2016, 06:19:40 pm
Ahoy!

Now I got the res and menu hack both done but the ring-of-crap is back :<
I did take the battery off several times for different periods of time but its no use. Need to sleep over night and hope it gets fixed on its own.

So new E4´s with 2.11 can easily be downgraded to 2.3 with MATMOE's instructions and from there just follow FUBAR's instructions for the res and menu hacks, not sure how common this ring-of-crap issue is tho.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 06, 2016, 07:38:16 pm
Now I took the battery off and watched some TV and after that, the ring-of-crap was gone. Fully working now with all the shiz included, its magic I tell you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on April 06, 2016, 08:21:54 pm
Condensation on your lens can make your images look awful, may be an explanation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 07, 2016, 12:11:02 pm
Its not condensation because the cam has been inside the house the whole time, but it seems that taking the battery off for long enough fixes this issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: k4rlhp on April 07, 2016, 01:32:50 pm
Now I took the battery off and watched some TV and after that, the ring-of-crap was gone. Fully working now with all the shiz included, its magic I tell you!

Thanks for this post.
I've been waiting for someone to try this with recently bought E4 unit v2.11 before attempting myself.
Now this weekend got some interesting stuff in the pipeline.

Regards!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Skone on April 07, 2016, 08:27:20 pm
Let me know how its working out. A friend of mine was interested in buying one for himself aswell and ofc I need to hack it for him. Tho I old him that theres always a chance to get it bricked.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: faith80 on April 08, 2016, 07:29:33 am
Hello!

First of all, I want to say thank you and congratulate everyone involved in making this hack  :)

Second, I want to share with you my experience regarding the update.
I have a brand new v2.11 E4 which I succesfully managed to downgrade to 2.3 using Windows Vista 32bit and the latest FLIR Tools from Flir website. After that, I applied both resolution and menu hacks, everything going smoothly and without any problems. Unfortunately, I ended up with a problem, all the images have this "noise" on them (maybe this is similar to Skone's issue with the "ring of crap"?) especially in the upper left corner (you can see in the pictures below). My guess is that the image sensor has some problems (this being the reason it ended up in an E4 instead of an E8) which were not visible when camera was operating in lower resolution.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dza on April 08, 2016, 07:46:40 pm
Hello!

First of all, I want to say thank you and congratulate everyone involved in making this hack  :)

Second, I want to share with you my experience regarding the update.
I have a brand new v2.11 E4 which I succesfully managed to downgrade to 2.3 using Windows Vista 32bit and the latest FLIR Tools from Flir website. After that, I applied both resolution and menu hacks, everything going smoothly and without any problems. Unfortunately, I ended up with a problem, all the images have this "noise" on them (maybe this is similar to Skone's issue with the "ring of crap"?) especially in the upper left corner (you can see in the pictures below). My guess is that the image sensor has some problems (this being the reason it ended up in an E4 instead of an E8) which were not visible when camera was operating in lower resolution.

Having gone through this, try power cycling by removing the battery and letting it sit for a bit. It is funny, in my experience what actually did it was letting it sit on the charger overnight. I know that sounds crazy, but I had tried power-cycling it multiple times before going to bed and I was still experiencing issues.

And from what I understand, each pixel of the sensor changes voltage based on the temperature it is exposed to. Not all pixels are created equal, which is why they get calibrated at the factory, a method for compensating the small variances in each pixel . I think the noise is from the camera failing to recognize the factory calibration (do not know much else about the inner workings or why it would sometimes recognize this and sometimes not). I do know the factory calibration still exists, when I went back to 2.11 from 2.3, the noise went away. I did experience some other issues, FLIR tools seemed to be unhappy with my thermal images and would not let me make adjustments or add to reports. That issue went away once I reverted back to 2.3
Title: Back panel teardown
Post by: sky@eevblog on April 11, 2016, 11:53:12 am
Hello! Have a problem with scratched protective window of the screen. May be someone could advice how to better access it.
It appears the glass is held by the same plastic back plate which holds the buttons and should be opened from outside without tear down of the camera. I see at least two 3mm plastic clips deep in the middle of the left and right sides of the screen. Picture attached. But afraid to break it without prior knowledge. If someone knows how to open it please share.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 11, 2016, 02:42:55 pm
Sorry cannot help with the removal and from what I have seen FLIR did not design it to be easy !

I have always had excellent results polishing out any scratches using proper plastics polish rather than stuff like Solvol Autosol or toothpaste as they are too harsh. I use NOVUS plastic polishes and managed to buy the three bottle sample kit quite cheaply. well worth having on the shelf and mine has lasted for several years of use. It is used in Pinball machine restoration to good effect. I just polished the piano black surface of a Buffalo External CD/DVD drive and it came up like a mirror  :)

Video advert from NOVUS

https://www.youtube.com/watch?v=9qvGnFecVDs (https://www.youtube.com/watch?v=9qvGnFecVDs)

I bought my NOVUS from Pinball Heaven as I am in the UK. It is more commonly available and cheaper in the USA. Apparently Harley Davidson showrooms stock it.

Small size set (with cloths):

http://www.ebay.co.uk/itm/Acrylic-polish-scratch-remover-Novus-Polish-1-2-3-VALUE-set-6-Novus-Cloths-/251973776852?hash=item3aaaceb5d4:g:4jEAAOSwrklVZNCi (http://www.ebay.co.uk/itm/Acrylic-polish-scratch-remover-Novus-Polish-1-2-3-VALUE-set-6-Novus-Cloths-/251973776852?hash=item3aaaceb5d4:g:4jEAAOSwrklVZNCi)

Large size set:

http://www.ebay.co.uk/itm/Novus-Plastic-Polish-8fl-oz-237ml-Novus-1-2-3-acrylic-cleaner-scratch-/251969300521?hash=item3aaa8a6829:g:7usAAOSwl8NVXyw7 (http://www.ebay.co.uk/itm/Novus-Plastic-Polish-8fl-oz-237ml-Novus-1-2-3-acrylic-cleaner-scratch-/251969300521?hash=item3aaa8a6829:g:7usAAOSwl8NVXyw7)


Large sizes are available from Amazon:

http://www.amazon.co.uk/Novus-plastic-scratch-remover-plastics/dp/B005F2ZX0U/ref=sr_1_1/280-7528572-5075240?ie=UTF8&qid=1460385649&sr=8-1&keywords=novus+plastic+polish (http://www.amazon.co.uk/Novus-plastic-scratch-remover-plastics/dp/B005F2ZX0U/ref=sr_1_1/280-7528572-5075240?ie=UTF8&qid=1460385649&sr=8-1&keywords=novus+plastic+polish)

NOVUS 1-2-3 can be found on ebay as a sample kit.

http://www.ebay.co.uk/itm/like/150667894330?limghlpsr=true&hlpv=2&ops=true&viphx=1&hlpht=true&lpid=122&chn=ps&googleloc=9046149&poi=&campaignid=207297426&device=c&adgroupid=13585920426&rlsatarget=aud-133395220866%3Apla-142405555266&adtype=pla&crdt=0&ff3=1&ff11=ICEP3.0.0-L&ff12=67&ff13=80&ff14=122&ff19=0 (http://www.ebay.co.uk/itm/like/150667894330?limghlpsr=true&hlpv=2&ops=true&viphx=1&hlpht=true&lpid=122&chn=ps&googleloc=9046149&poi=&campaignid=207297426&device=c&adgroupid=13585920426&rlsatarget=aud-133395220866%3Apla-142405555266&adtype=pla&crdt=0&ff3=1&ff11=ICEP3.0.0-L&ff12=67&ff13=80&ff14=122&ff19=0)


You used to be able to get screen protectors that had a gel adhesive that effectively filled and hid scratches. My TomTom Classic satnav has one fitted and it has lasted many years.

My advice, try polishing first and only replace as a last resort. Uses suitable tape to mask the edges of the screen and prevent polish getting under the rubber lip. The Ex series use a very sift and easily scratched plastic for the screen. It should polish very easily. Do not be tempted to machine polish it with a Dremmel tool or similar
Title: Re: Back panel teardown
Post by: joe-c on April 11, 2016, 08:04:17 pm
... May be someone could advice how to better access it... If someone knows how to open it please share.
the front plate is glued to the Case. if you press a little bit harder from inside you get it off.  :-/O

but I think the polishing way described from Fraser is the better way, if you will use the Case like before.
Title: Re: Back panel teardown
Post by: sky@eevblog on April 12, 2016, 07:04:45 pm
joe-c and Fraser thank you for detailed explanation and advice. Will try to go polishing way first. Another idea is to cut the transparent plastic window through and open front plate by pulling pushing the remainders of the window. May be some hot air could help as well? Strange but as I mentioned two plastic clip locks are clearly visible in the middle of the left and right sides of the screen. So they used clips and glue? And the keyboard has no serviceable parts as well?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 12, 2016, 07:49:18 pm
For deep scratches you can use 1200, then 1500 grit wet and dry paper. Ensure you use it wet. That will remove a deep scratch with ease and can still be easily returned to clear using the NOVUS Polish. I have done this on battered multimeter screens.

If you go down the route of removing the screen plastic you will have the challenge of which material to replace it with. Polycarbonate is my preferred choice but this still suffered scratching in use. You will also lose the decorative elements of the OEM screen.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on April 17, 2016, 02:57:51 pm
hey guys,

to those who experienced this 'ring of crap' issue, please be warned that this is due to a change in calibration maps loading order in the new 2.11 (and possibly later) firmware, compared to earlier versions (2.8 and below).  This can be fixed manually with tweaking calib.rsc parameters.

Unfortunately, it is NOT a single and easy 1 step fix, which can be reproduced on your particular camera.

I mean, it is NOT, I repeat: NOT permanent or shareable.

To remove the ring for once, you have to power down the device, disconnect your battery and let it rest overnight (discharge some flash section  with temporarily recorded offset parameters).

Then, on the next power-on cycle, the ring of crap will go away.

However, it WILL come back, if you let it work for considerable while, especially let it getting warm.

To remove it again, please perform the procedure again.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 17, 2016, 03:50:12 pm
@Solare,

Ooooo that's not good news Thanks for the information though.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svdheijden on April 18, 2016, 08:31:53 am
@Solare, so the loading order is not baked into the firmware then. Seems like a (for now) succesfull anti-hack attempt from Flir then?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 18, 2016, 02:09:20 pm
The solution would be re instatement of a later firmware after the upgrade using firmware 2.3. FLIR do release periodic firmware update files so when they release an update, install it and hope the resolution upgrade sticks ? You might lose the additional menus though.

Another route for investigation is looking at restoring firmware 2.11 from 2.3 manually using the copy of the system taken before the rollback to version 2.3.

With the later firmwares containing encryption, such may not be so simple though. If someone can get the latest firmware update file from FLIR CS that might be a solution so long as the upgrade does not revert the camera to standard spec for an E4.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on April 19, 2016, 02:04:29 am
TLDR;
With slight modifications of the 2.3  hack, I was able to create 2.11 hack. There is no more ring of crap and the need to downgrade from 2.11 to 2.3.
NOTE: This is not a 2.8 hack.Not sure if there are problems of upgrading from 2.8 to 2.11. For 2.8 use the downgrade to 2.3.

You will need the original 2.11 common_dll.dll and conf.cfc to be on the device before applying the 2.11 hack. If you downgraded to 2.3, revert the hacks, upgrade back to 2.11.

Details of what i did:

Today I received my E4 with 2.11 firmware and calibration certificate from 22 Feb 2016. Downgraded to 2.3, backed up all of the original content and used the instructions for the hack here - http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/.) As expected, after the procedure I got the "ring of crap". Reading Fraser's post, I tried to go back to 2.11 while the patch was applied. Downloaded the update pack from here http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.11.0_update_pack.zip. (http://cdn.cloud.flir.se/swdownload/assets/cameradownload/flir_ex_pn639_v2.11.0_update_pack.zip) Strangely, the res hack appeared to persist after the upgrade to 2.11. BUT, the "Image mode" menu was deactivated and there was no spot metering. Going back and forth between 2.3 and 2.11, I found out that the problem was in common_dll.dll (which is overwritten by the upgrade from 2.3 to 2.11).

I looked at the Python scripts and disassembled common_dll.dll to figure out how the 2.3 hack was working. After few hours, I found out that if I just change the offsets in common_dll.dll.delta, so that the signature checks are disabled in the 2.11 version of the file (the offsets for 2.11 are slightly different than those for 2.3) and followed the exact same procedure in http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/), except the downgrade to 2.3, I now have res hack and menu hack working, and the ring of crap is gone. Didn't need to change the conf.cfc.delta files. I guess the de-activated "Image mode" menu and the missing Spot Metering were just a side effect of the signature check failures, because they were in a different place within common_dll.dll.

I am attaching the modified script package (removed e6 files, as they seem to work slightly differently at first glance) and an image from the camera after the fixes. Use http://www.7-zip.org/download.html (http://www.7-zip.org/download.html) to decompress the attached .zip file. It is actually a .7z file, with changed extension, so I can attach it here. When using .zip, the file is slightly bigger than the allowed attachment size of 1000KB.

Happy hacking and the usual - "You do this on your own risk."
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 19, 2016, 02:50:50 am
2lps,

Excellent investigation into the issue and great solution.

Congratulations on solving this problem and thank you for sharing the details

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svdheijden on April 19, 2016, 08:00:08 am
Awesome 2lps! You rock!  :-+ I'll be getting an E4 in the next month so i'll probably be using it then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on April 19, 2016, 10:44:59 am
@2lps and the guys,

congrats, you made this procedures persistent. This is a very good achievement for those who only want to install hires and simplest menuhack on their new camera. Which means, for the majority of us. Now the majority can install the hacks on the 2.11 firmware.

I have checked the new hacks and they really work. No ring of crap. No calibration issues. Awesome.

Drawbacks if any? Yes, unfortunately but quite expected.

Any advanced functions beyond the standard hacks require careful revisions now before being used on the 2.11 camera. Some of them I discovered to cease working, some malfunction. Some survived.

With this said, I would NOT recommend to those who don't experience any calibration issues like Ring-Of-Crap etc., and have their cameras running smoothly on 2.3.0 downgraded from the above version numbers, and using or plan to use the advanced features mentioned elsewhere,

to back-upgrade the core files to the 2.11 with this new hacks.

#1 rule = Never Touch A Running System, applies.

The E4 device is, besides it is look very simple, a fairly bold bunch of technologies, where many levels of software and hardware are orchestrated together and it is really easy to break this symphony into to all sort of glitches, with most of them do not appear immediately but delivered with delays no before you discover them by chance.

2.3.0 platform, on the other hand, it already tested thoroughly, so those who seek reliability, stick to it for a while.

@2pls, again, many thanks for a good job done!

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on April 19, 2016, 11:19:30 am
I was satisfied that I got the basic functionality running. I am not aware of all the previous improvements, but if you notice something is not working, please share.

It was pure luck that what I did work at all. This is my first thermal camera, and before watching the tear down and reading this thread few weeks back, I had no idea of how the camera works. I intended to wait few weeks/months in order to get a better understanding. Well, if someone has any problems, please share them. We can work together to try to fix them. And yes, if it was not for this hack, I would have not bought the camera at all. I was looking at some DIY solutions in order to learn the technology and experiment for fun. But couldn't miss such a great deal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on April 20, 2016, 12:13:48 am
I love this thread
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ben321 on April 24, 2016, 09:18:34 pm
TL;DR :
10 Jan 2016 There is a new firmware, V2.8, which needs to be downgraded to 2.3 for the hack to work.

Anybody managed to get a hack for V2.8 yet?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svdheijden on April 25, 2016, 12:34:20 pm
I just ordered an E4. Curious to see which firmware its ships with!  :-+ And excited to try and hack it of course!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calvin12 on April 29, 2016, 03:02:28 pm
I have a E4 that I got a few years ago, ver 1.22. I hacked it when I got it for the upgraded resolution. I was just looking up info on it and see there is 2.3 with menu hacks also. The site I was at said there are issues bumping 1.22s to the newest hacks and referenced back to here to get more info. I don't see anything here showing any 1.22 to 2.3 and new hacks being a problem. I just want to verify if this is OK to do or not.
If it is I assume I'd need to bump up to 2.3. then do the hacks is that correct?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 01, 2016, 12:51:16 am
I have a E4 that I got a few years ago, ver 1.22. I hacked it when I got it for the upgraded resolution. I was just looking up info on it and see there is 2.3 with menu hacks also. The site I was at said there are issues bumping 1.22s to the newest hacks and referenced back to here to get more info. I don't see anything here showing any 1.22 to 2.3 and new hacks being a problem. I just want to verify if this is OK to do or not.
If it is I assume I'd need to bump up to 2.3. then do the hacks is that correct?
Just do the 1.22 hack... there is no purpose or need to upgrade to 2.3. If it ain't broke dont fix it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: svdheijden on May 01, 2016, 05:49:09 am
I just ordered an E4. Curious to see which firmware its ships with!  :-+ And excited to try and hack it of course!

Got the E4 and did the resolution and menu hacks... And it worked like a charm! The E4 came with firmware 2.11. Thanks for the hack guys!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: calvin12 on May 04, 2016, 04:22:04 pm
I have a E4 that I got a few years ago, ver 1.22. I hacked it when I got it for the upgraded resolution. I was just looking up info on it and see there is 2.3 with menu hacks also. The site I was at said there are issues bumping 1.22s to the newest hacks and referenced back to here to get more info. I don't see anything here showing any 1.22 to 2.3 and new hacks being a problem. I just want to verify if this is OK to do or not.
If it is I assume I'd need to bump up to 2.3. then do the hacks is that correct?
Just do the 1.22 hack... there is no purpose or need to upgrade to 2.3. If it ain't broke dont fix it...

the old 1.22 hack did not have the menu upgrades. has the 1.22 hack been changed to include those changes?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: habeeb408 on May 06, 2016, 12:45:51 am

Anybody managed to get a hack for V2.8 yet?

The V2.8 cannot be hacked, but once you downgrade it to 2.3, it can be done: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: habeeb408 on May 06, 2016, 12:56:41 am

Have anyone bought new E4 lately?
Are they still shipping units with 1.2L and 2.1.0?
Any news?

Bought two from Grainger a week ago. 1.1L and 1.22 on both

What day are the calibration dates?

Also is there any solution to record streaming video from E4?
Or it is only flir tool+ ?


You can record videos using a raspberry pie: https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918 (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg365918/#msg365918)
Title: FIX! FOR LOSS OF MSX + OTHER FUNCTIONS AND ERROR CONNECTING TO SERVER FILEZILLA
Post by: habeeb408 on May 06, 2016, 06:55:31 pm
FIXED!! For 1) connection to server error and 2)loss of MSX and other functionalities (like temp cursor) after hack:
The video I am referring to is: https://www.youtube.com/watch?v=oXJYv_MxIHw (https://www.youtube.com/watch?v=oXJYv_MxIHw)
1)For connection error on FireZilla: Right click on FireZilla > Run as Administrator > Take battery out of E4 > Put battery Back >Start E4 >Connect Cable > RFID Select (cam info then hold right button 10 secs)>login (1:15 in this video) = Tadaa!! (hopefully!)
2)For Loss of functions go to: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505)
The reason you loose functionality is because the resolution hack was UNSUCCESSFUL. Download the generator at the EEVBLOG > get conf.cfc file from FileZilla (1:32 in this video) > SAVE THIS ORIGINAL FILE SOMEPLACE SAFE > copy conf.cfc onto the generator folder you just downloaded (where cfc_generator and other files are) > run cfc_generator >follow the directions (you just have to upload the original conf.cfc file to the generator and click the steps in the generator until you have the new made file) > follow video from 4:32 (rename original file and change new file name to conf.cfc before dragging onto firezilla)> ALL DONE!! PLEASE UP VOTE SO IT HELPS OTHERS!!?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: quadrobro on May 13, 2016, 02:04:43 pm
Hi guys, I've followed this thread on and off for about a year now and am ready to pull the trigger. After catching up a bit, it appears the downgrade isn't the best method, which begs the question, what version is ideal to hack for greatest ease and functionality?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kultakala on May 14, 2016, 02:58:10 pm
Hi Guys,

Today i got my E4. It is E4 1.2L with SW 2.11.0.
It took me 4 hours to apply the hacks...  only because it took me so long to get and install a win7 32 bit and set all up in a virtual box  :phew:

The hacks were working fine and it took only about 15 minutes.
I followed the instructions for 2.3.0 but with using the hack files from post #7788, thanks to 2lps.

And of course thanks for all people involved in making this posible  :-+

The images look good and everything works good.
Btw, this is in my calib.rsc > .calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 13.134015

Greetings from Germany!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 14, 2016, 03:51:15 pm
Mine is as follows (bought from a German seller):

Model: E4 1.2L
Serial Number: 6397****
Part Number: 63901-0101
Software: 2.11.0
Calibration  date: 22 Feb 2016

.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalDu double 1.1954776
.calib.nrdp.ds250C_we_ap_fi_le.measureInfo.temporalMk double 13.062092

I converted the dead pixel map to a .png (see https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg343464/#msg343464 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg343464/#msg343464)).
 
There are 132 dead pixels out of 76800, which gives 99.832% functional pixels. According to this post from Fraser https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg343716/?topicseen#msg343716, (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg343716/?topicseen#msg343716,) 99.8% is the spec for the the cheaper sensors.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iG0R on May 16, 2016, 08:23:47 pm
Hi, colleagues.
I got my E4 with the following characteristics:
Model: E4 1.2L
Serial Number: 6397****
Part Number: 63901-0101
Software: 2.11.0
Calibration  date: 8 Apr 2016

But I faced with one problem - when i'm trying to enter into the camera with username: flir and password: 3vlig i'm getting the error: "Error 530 bad username/password" :(
Anything can be advised on this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on May 16, 2016, 08:38:47 pm
Hi, colleagues.
I got my E4 with the following characteristics:
Model: E4 1.2L
Serial Number: 6397****
Part Number: 63901-0101
Software: 2.11.0
Calibration  date: 8 Apr 2016

But I faced with one problem - when i'm trying to enter into the camera with username: flir and password: 3vlig i'm getting the error: "Error 530 bad username/password" :(
Anything can be advised on this?

What program are you using?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 16, 2016, 09:18:59 pm
Is the camera booting normally?

While I played with some files, I messed something and was not able to use flir/3vlig.
Fortunately, you can use the anonymous user - do not enter any user name/password. Not sure what permissions it has, but I just checked and you can download/upload files to the file system. I was also able to backup the camera files. I used the anonymous user to correct my mistake and the camera booted normally after that.

I don't see any update of the 2.11 package on Flir's site (last one is from 21 Jan 2016), so flir/3vlig should be working if the camera is booting normally.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dertoid on May 16, 2016, 11:20:41 pm
Hi all and let me apologize in advance for my noobness.
Just recently got into FLIR toys (got bts-xr 100mm and One 2gen).
My friend gave me an 'upgraded' E4 as a gift a week ago.
It's fully functioning as 'E8+' with all the bells and whistles.
The about page reads:
E4 1.2L
2.3.0
Free enhanced menu.
No calibration date displayed.

Now, i understand that there's an 2.11 update (got it from flir site) and a corresponding hack (post 7788).
Questions:
1. What are the benefits of 2.11? Any changelogs public?
2. What is the best course of action to apply 2.11 hack from current camera state (2.3.0 with hack)? If possible in some detail (no, i can work with python etc - my problem is the correct sequence of actions in flir's case); and
3. Do i need the original files that came on the camera 'pre-hack'? Because that can be quite hard or even impossible.

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iG0R on May 17, 2016, 05:54:49 am
What program are you using?

TotalCommander and FileZilla

Is the camera booting normally?

Yes, it is booting normally.

While I played with some files, I messed something and was not able to use flir/3vlig.
Fortunately, you can use the anonymous user - do not enter any user name/password. Not sure what permissions it has, but I just checked and you can download/upload files to the file system. I was also able to backup the camera files. I used the anonymous user to correct my mistake and the camera booted normally after that.

I don't see any update of the 2.11 package on Flir's site (last one is from 21 Jan 2016), so flir/3vlig should be working if the camera is booting normally.

 Oh, thank you very much, I'll try it.

Update: Yes, yes! It's working :) Anonymous user is working.
But I can't understand, why it all happened?

PS. Also I tried to use Windows 8.1 64bit and 10 64bit to hack the camera, but there is something wrong with flir_device_drivers, because camera couldn't obtain right IP, always 169.254.x.x. Even if I manual write down IP 192.168.1.2 I can't connect to it.
I've read that some people could access camera in Windows (8.1 and 10) 64bit but I could not understand how they do it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 17, 2016, 08:04:17 am
...
Questions:
1. What are the benefits of 2.11? Any changelogs public?
2. What is the best course of action to apply 2.11 hack from current camera state (2.3.0 with hack)? If possible in some detail (no, i can work with python etc - my problem is the correct sequence of actions in flir's case); and
3. Do i need the original files that came on the camera 'pre-hack'? Because that can be quite hard or even impossible.
...

Take a look at this post from Solaris: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg922176/#msg922176 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg922176/#msg922176)
If I was you, I would just keep 2.3. I am not aware of any benefit of 2.11 vs 2.3 (which doesn't mean there is not any). Also it seems that there are some advanced things, which don't work currently with 2.11 (not sure what are they).

To your questions:
1. I don't think there are public change logs.
2. Ideally, you need the original files and revert the hacks. Upgrade to 2.11. Apply the 2.11 hack.
3. You can do it without the original files and reverting the hacks, but you need to know what you are doing. This is actually how I made the 2.11 hack. There was the so called "ring of crap" when downgrading to 2.3, probably because of the way the calibration is done in 2.11, so I didn't have a choice, but use 2.11
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 17, 2016, 08:20:14 am
Update: Yes, yes! It's working :) Anonymous user is working.
But I can't understand, why it all happened?

I don't know why flir/3vlig is not working. Are you sure you don't add an additional symbol to the user name/password. Using the correct letter case?. You can try with root/3vlig too.

PS. Also I tried to use Windows 8.1 64bit and 10 64bit to hack the camera, but there is something wrong with flir_device_drivers, because camera couldn't obtain right IP, always 169.254.x.x. Even if I manual write down IP 192.168.1.2 I can't connect to it.
I've read that some people could access camera in Windows (8.1 and 10) 64bit but I could not understand how they do it.

I also couldn't do it with Windows 10, so used Windows 7 64 bit.

Switching the camera to RNDIS mode in Windows and then using Ubuntu also works. I think I needed to manually set the IP there.

There is a secret menu Settings --> Device Settings --> Camera Information. Then hold the right navigation button for some seconds. A new screen appears with the following entries:

USB mode >
Export Information
Version Information >
Latest calibration

There are options to change the USB mode there directly from the camera, instead of using FlirInstallNet.exe in Windows, but at the moment nothing happens when you change them. There may be another way to switch it to RNDIS mode and use only Ubuntu, but I am not aware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 17, 2016, 09:34:25 am
Actually, after reading how it was done in Linux (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417547/#msg417547 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417547/#msg417547) and https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417771/#msg417771 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417771/#msg417771)) I was able to connect using Windows 10.

You still need to set manually the IP of the interface after switching to RNDIS mode using the Set_RNDIS_temporary.fif. But use 192.168.250.1 for the IP. Then you will be able to connect to the camera using 192.168.250.2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kai-74 on May 17, 2016, 10:04:26 am
Hi...

My Name is Kai and i`m from Germany.

I found this Thread while i was interested in an Flir E6.

But with the informations found in this Thread i bought an E4!   :-)

My Camera seemed to be a little bit longer in the sstore, because it came with Firmware 1.22.
Unfortunately i made an update to 2.11.

But the Backup Files from 1.22 are still there.

Now to my Problems wit the 2.11 Hack..

The Hack itself worked without any issues, but the Result was not as expected.

1) The center Cursor was missing and i was not able to restore it by disabling and enabling it.

2) There was a bit of "ring of crap" in the image

3) When taking a picture the camera reported a serious Problem with appcore.exe and it has to be restarted.
This problem persists after every restart.

4) There was a lot of the extended Menu missing.

Do you have some suggestions for what i should do now?

Thank you in Advance!

...and sorry for my english...   :-D

Viele Grüße
Kai
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kultakala on May 17, 2016, 10:21:42 am
Hi Kai,

I am not an expert, just bought an E4 last week and hacked it successfully.
But did you remove the battery for a while before starting the E4 again ?

Greetings,
Olaf
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 17, 2016, 10:23:21 am
[...]
Do you have some suggestions for what i should do now?
[...]

Did it work fine after upgrading from 1.22 to 2.11, but before applying the 2.11 hack?

So:
1. The camera came with 1.22 and no hacks.
2. You upgraded to 2.11
3. Then applied the 2.11 hack?

If it worked fine before applying the hack, can I get /FlashBFS/system/common_dll.dll (the one currently on the camera). It is possible that during the upgrade from 1.22 to 2.11 it was not replaced (e.g for compatibility reasons). The 2.11 hack modifies it, but for each version it is different, so the offsets in the hack may not be the same, and the patched code may be completely different. The resolution hack doesn't do anything but change the resolution and noise generator values in conf.cfc and disable the signature checks in common_dll.dll.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 17, 2016, 11:41:46 am
Hi everyone!  I have been watching this thread for months now, and finally took the plunge.  I found a used E4 for $450 on Amazon which was too good to pass up.  I'm partially expecting to receive a box of rocks, but if not I look forward to hacking mine!

Thanks to all the hackers who developed these methods!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kai-74 on May 17, 2016, 11:42:03 am
Hi kultakala,

Thank you for your Reply... Yes, i removed it every time after changing anything.
I removed the Battery over Night to see if it get better, but no improvement...

Hi 2lps,

The camera was working fine with 1.22, and it was not hacked.

After upgrading to 2.11 the camera worked as expected, before the Hack was applied.
I reverted the Hack, because not being able to take pictures makes no sense.  :-D

I hope you can help me and i will send the common_dll.dll to you when i'm at home.

Thank you!!!
   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dertoid on May 17, 2016, 03:36:30 pm
...
Questions:
1. What are the benefits of 2.11? Any changelogs public?
2. What is the best course of action to apply 2.11 hack from current camera state (2.3.0 with hack)? If possible in some detail (no, i can work with python etc - my problem is the correct sequence of actions in flir's case); and
3. Do i need the original files that came on the camera 'pre-hack'? Because that can be quite hard or even impossible.
...

Take a look at this post from Solaris: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg922176/#msg922176 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg922176/#msg922176)
If I was you, I would just keep 2.3. I am not aware of any benefit of 2.11 vs 2.3 (which doesn't mean there is not any). Also it seems that there are some advanced things, which don't work currently with 2.11 (not sure what are they).

To your questions:
1. I don't think there are public change logs.
2. Ideally, you need the original files and revert the hacks. Upgrade to 2.11. Apply the 2.11 hack.
3. You can do it without the original files and reverting the hacks, but you need to know what you are doing. This is actually how I made the 2.11 hack. There was the so called "ring of crap" when downgrading to 2.3, probably because of the way the calibration is done in 2.11, so I didn't have a choice, but use 2.11

Ok, i obtained original files for my camera. Will wait a bit more for people to chime in regarding 2.3/2.11 differences, then perform the update/hack.
Oh, and mega thanks for about 'extended' menu -> resulted in:
25feb16 cal date.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 17, 2016, 09:07:51 pm
[...]
Do you have some suggestions for what i should do now?
[...]

Did it work fine after upgrading from 1.22 to 2.11, but before applying the 2.11 hack?

So:
1. The camera came with 1.22 and no hacks.
2. You upgraded to 2.11
3. Then applied the 2.11 hack?

If it worked fine before applying the hack, can I get /FlashBFS/system/common_dll.dll (the one currently on the camera). It is possible that during the upgrade from 1.22 to 2.11 it was not replaced (e.g for compatibility reasons). The 2.11 hack modifies it, but for each version it is different, so the offsets in the hack may not be the same, and the patched code may be completely different. The resolution hack doesn't do anything but change the resolution and noise generator values in conf.cfc and disable the signature checks in common_dll.dll.

So, after few messages, it appears that we succeeded. The problem was not common_dll.dll, but the conf.cfc. The 2.11 hack didn't patch it correctly (probably there are some differences).

We used the 1.22 procedure for the resolution hack:
https://www.youtube.com/watch?v=oXJYv_MxIHw (https://www.youtube.com/watch?v=oXJYv_MxIHw)

Now the res hack works too. It appears that the 2.11.0 menu hack (which is actually the same as the 2.3.0) works with the 1.22 --> 2.11 upgrade, and there was no need to use the 1.22 menu hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kai-74 on May 17, 2016, 09:13:03 pm
Thank you so much!

Great Job 2lps!

I'm so lucky...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 18, 2016, 12:19:36 pm
I have a few questions (probably "noob" questions but I'm excited and want to talk about my E4 before it gets here)


Thanks again to everyone who worked on unleashing the full potential of these cameras!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: iG0R on May 18, 2016, 04:03:58 pm
I tried to figured out why I couldn't access camera with standard login\password.
In my case when I use VirtualBox+IE10.Win7.For.Windows.VirtualBox.zip(from Microsoft official site https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/windows/ (https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/windows/)) I can access camera with anonymous login\password, but when I use physical PC with Windows 7 32bit - I need to enter flir\3vlig to access camera. It's a very strange camera ftp server behavior. :-//
I also tried to use root\3vlig, root\indigo and other standard login\password that are used to access camera, but they were not fit.

Switching the camera to RNDIS mode in Windows and then using Ubuntu also works. I think I needed to manually set the IP there.
There is a secret menu Settings --> Device Settings --> Camera Information. Then hold the right navigation button for some seconds. A new screen appears with the following entries:
USB mode >
Export Information
Version Information >
Latest calibration
There are options to change the USB mode there directly from the camera, instead of using FlirInstallNet.exe in Windows, but at the moment nothing happens when you change them. There may be another way to switch it to RNDIS mode and use only Ubuntu, but I am not aware.

Yes, I knew about this possibility to change USB modes,
Settings --> Device Settings --> Camera Information -> pushing on "Set" button during 12sec. ->  USB mode > RNDIS*
but, as you mentioned, this technique doesn't work in 2.11.0

Actually, after reading how it was done in Linux (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417547/#msg417547 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417547/#msg417547) and https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417771/#msg417771 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg417771/#msg417771)) I was able to connect using Windows 10.
You still need to set manually the IP of the interface after switching to RNDIS mode using the Set_RNDIS_temporary.fif. But use 192.168.250.1 for the IP. Then you will be able to connect to the camera using 192.168.250.2
As I see in screenshots, you didn't enter Default Gateway and despite that you were able to connect the camera in Windows10? Hm, very strange.

2lps
Thank  you very much for your help.
And many thanks to all people who made the hack possible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 20, 2016, 01:16:43 am
My E4 just came in!  One thing, the pictures on it look really smooth already.  Does this look like 80x60 or 320x240?  It looks nothing like the "stock" pictures from the device.  Is there a chance mine is already modded?


(http://i.imgur.com/RFHT7m0.jpg)(http://i.imgur.com/4a8G7KT.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on May 20, 2016, 04:11:34 am
My E4 just came in!  One thing, the pictures on it look really smooth already.  Does this look like 80x60 or 320x240?  It looks nothing like the "stock" pictures from the device.  Is there a chance mine is already modded?


(http://i.imgur.com/RFHT7m0.jpg)(http://i.imgur.com/4a8G7KT.jpg)
Looks upgraded already, where'd you get it from?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 20, 2016, 11:17:47 am
Looks upgraded already, where'd you get it from?
I was looking at the Amazon page for the E4, and saw there was a "used" offer for $450.   I bought it instantly since I have never seen one that low.  The unit itself is 1.2L with software 2.3.0.  (But I don't know how much it has been tampered with)

I'm just glad I actually got an E4, for what I paid I was expecting to get a box of rocks in the mail.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on May 20, 2016, 12:24:39 pm
check the sensor resolution with exiftool:

Code: [Select]
>exiftool -rawtherm* myimage.jpg
Raw Thermal Image Width         : 320
Raw Thermal Image Height        : 240
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 55611 bytes, use -b option to extract)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 20, 2016, 12:46:32 pm
Looks like it's modded:

Code: [Select]
D:\FLIR Stuff>exiftool.exe -rawtherm* FLIR0006.jpg
Raw Thermal Image Width         : 320
Raw Thermal Image Height        : 240
Raw Thermal Image Type          : PNG
Raw Thermal Image               : (Binary data 49033 bytes, use -b option to extract)

D:\FLIR Stuff>
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hikanio on May 20, 2016, 04:33:25 pm
I am about to get a E30 with serial number 492xx from late 2013 and I am really curious if this one comes with the wifi/bluetooth module or not.

So far I could not manage to find out what exact model this might be, I would expect a 49001-1801 model.

I have been playing around with the firmware on the Flir C2 for a while as it works pretty similar to the other Flir models.
But except modifying the startup screen I was not able to improve the C2 by any means due the humble hardware and sensor.

So I am really looking forward to get my hands on the E30 and finally see some better IR images than this 80x60 Lepton blobs. ;-)

Cheers
hikanio
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 21, 2016, 02:11:41 am
Hi everyone!  I installed the menu hack tonight, and everything seemed to work right off the bat.  I powered down (soft off) and back on, and had horrible ring-of-crap, but then turned it off and on about 10 more times and never got the ring of crap.  I never removed the battery, just soft off and on.  Is ROC a random occurrence?

I'm a little nervous since my camera arrived modified, I never got a chance to back up the "clean" config files.  How bad of an issue is that?  Also, being modified out of the box, I don't know what version the camera came with.  Is there a way to tell?  Does it matter?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2016, 12:11:51 pm
ROC is inherent to the lack of steps in the hacking procedure apllied to the cameras which are inconsistent to certain firmware| software versions combinations. If it came once, it will come again. Typically, after extended use of camera, or over-warming. Suspected versions according my experience are: 2.3.0, 2.8.0 and the downgraded.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hikanio on May 21, 2016, 12:39:32 pm
Flir E30 49001-1801 Serial # 492xx Success Report

Successfully updated the IR resolution, VIS resolution and E60 menu functions. :-)

Just a biit surprised, that the cam saves image files without the vis picture if not in thermal fusion or pip mode.
This is a slight discomfort as it prevents any Tools MSX conversion of the picture.

Also the 492xx cameras seem to miss the cmmunications board so wifi and bluetooth could not be enabled.

If anybody could confirm that the lack of the of the slbwver hw component really means the physical absence of the communications modul, it could save me from further investigation. ;-)

If anybody needs help with patching his Exx, you'll be welcome.

Cheers
hikanio


Edit: Post copied to 40 Thread:
https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on May 21, 2016, 02:08:07 pm
Flir saled different hardware versions of E30 (the first model miss a real camera)

user funzt successful upgraded an E30 with  ID 490xxxxx 

https://www.eevblog.com/forum/profile/?area=showposts;u=89829 (https://www.eevblog.com/forum/profile/?area=showposts;u=89829)



thx Taucher
I put my E60 file as template.cfg in your great EzCRC01-V01-static
and that works!!! :clap:
and my E30 accepted it -->  :-+
now work with ui.d and wlan.....

there is a better thread for your questions:
https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/)
Flir E40 Upgrade & Configuration
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 21, 2016, 02:22:46 pm
ROC is inherent to the lack of steps in the hacking procedure apllied to the cameras which are inconsistent to certain firmware| software versions combinations. If it came once, it will come again. Typically, after extended use of camera, or over-warming. Suspected versions according my experience are: 2.3.0, 2.8.0 and the downgraded.   

Interesting!   I had attributed it to the menu hack, but I also used it for like 45 minutes straight staring at my urine in the toilet bowl (my girlfriend thinks I am weird now)

Is there a recourse for preventing the ROC?  I read some of the posts which had some success.  My camera has a calibration date of 03/07/2016 so I highly suspect it was downgraded before I got it (it was used and resolution hacked when it arrived)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 21, 2016, 07:46:41 pm
It might be possible to recover, if you have the original files.

What was your original firmware version, do you know? I cannot tell unless you tell you serial, which is not welcome here for a reason, but my guess is that you might have 2.11. What is the version now, as read in the Menu?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 21, 2016, 09:15:48 pm
The version now is 2.3.0, model is E4 1.2L, calibration is 2016-03-07, serial starts with 63975xxx (if that's the right amount of information)

Since mine came hacked, I have no copies of the "pure" files but I did make a backup of the files as they are on the camera now.   Not sure how much of a help that is.  So far the ROC has only happened once, I don't know if some get it more than others.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DoricLoon on May 22, 2016, 12:07:36 am
Hello Forum,

I've been keen on getting a thermal imager for a while now but felt it hard to justify the price of a decent one. The ability to upgrade the E4 to 320x240 definately swings the balance for me.
I had ordered an E4 from ebay with the intention of carrying out the mod. After ordering it I asked the vendor which firmware version the unit carried. Happily he responded with V2.3.0 which has clear and proven upgrade path  :) The following morning while rumaging through the posts in this thread I saw a bit about discounted units with lower sensitivity and temperature range. Immediate panic button went (lower spec model under the same model name?) Checked the ebay listing again and sure enough, not in the description but in the E4 spec table which followed the listing were the reduced (non standard) specs  :palm: Fortunately the seller was willing to cancel and refund.  :phew: So beware of cheaper than normal E4's there could be a nasty surprise.

So my question is this. Since the E5 is now available at the same price as the E4 (£723 @RSWWW) do all of the hacks work equally well on the E5?

I haven't seen any mention of firmware beyond 2.11 so presumably all existing models have (by the hard work of others  :clap:) the ability to be upgraded. Just thought that if sensor quality control goes on a sliding scale dependent on the model? Hacking the E5 rather than the E4 has less chance of dead pixels?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2016, 12:49:06 am
 :popcorn:

This is definitely 2.11.0 downgraded to 2.3.0 and then hacked the one you have there. It is known to have ROC, and, although can be manually tuned to remove it, this requires individual work with given camera (not trivial or reproducible solution, sorry).

The best option for you might be rollback to the 2.11.0 and try it with the new procedure discovered by 2 pls. So far, people do not report ROC after it.

Good luck!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 22, 2016, 01:56:43 am
This is definitely 2.11.0 downgraded to 2.3.0 and then hacked the one you have there. It is known to have ROC, and, although can be manually tuned to remove it, this requires individual work with given camera (not trivial or reproducible solution, sorry).

Is this tuning more skilled or just laborious?  I have some free time, but I'm still pretty new to WinCE hacking.

The best option for you might be rollback to the 2.11.0 and try it with the new procedure discovered by 2 pls. So far, people do not report ROC after it.

Good luck!
Is the upgrade something that can be reverted?  I know people have downgraded before (obviously mine was downgraded) but is there any extreme risk to it?  I'm very much a "measure twice cut once" type of guy when it comes to this stuff.




This reminds me of the PSP hacking scene back in 2005.  Everyone wanted software version 1.50 and went to great lengths to get a unit with that version.  Then the epic cat-and-mouse game began with Sony who kept patching exploit holes and locking people out of games until they updated.  The hackers would take the official firmwares, and patch them to still allow unsigned code.  Having a fully patched and homebrew capable PSP was a source of pride. 

The PSP was a device that had so much potential, but Sony wasted it on trying to force people to buy crappy ports and movies they already owned on a $30 UMD that only played in the PSP.  The homebrew scene was way more fun.  Ironically I spent most of my time playing Gameboy games on an emulator an listening to internet radio.   They even got it to boot Windows 95.   

Eventually the hackers figured out that there was a factory menu activated by an eeprom inside the battery of all things and the mystique of using exploits and patching custom firmwares disappeared.   But still, the real heroes were the homebrew software developers that really unlocked the potential of the PSP, just like the folks here are doing with the E4.  Brings a tear to my eye.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Solare on May 22, 2016, 09:36:02 am
Everything can be done with a proper treatment, some amount of time, certain skills and knowledge and lots of will :) So you are not forbidden to try your best! Just be aware people here including me cannot really help you if something goes wrong.

What I am saying is that it is not a matter of patching something or updating few files or changing a string or too, i.e., it is not reproducible and shareable easily. You may be aware already that some files are specific to your camera, which means, cannot be shared, but only carefully edited with understanding each step and its effect on the camera, and controlling every loop and every branching of possibilities, and adjusting your hacking accordingly. Truly, this is really manual, individual and personal hacking, which is so much unlike "patch and go" hack we have here with E4 - E8+

That's why, I strongly recommend you to find original files from your camera and restore them, and them proceed as advised.

If this is absolutely impossible, try upgrading your camera back to 2.11.0. and re-apply the hacks (modified procedure and files for the 2.11.0). That may not work though, if some of original files is missing. In this case, ROC will persist.

You are on your own here, so take your risk responsibly!



 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 23, 2016, 05:08:34 pm
I guess I don't understand what is happening well enough to go and make changes!   To me, that the camera works great until it's restarted while warm indicates that it has all the calibration it needs to function properly.  Still, not having the original files worries me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 23, 2016, 10:36:21 pm
I used the "2lps" method and was able to upgrade to 2.11 and apply the reshack, as well as keep some of the advanced menu options.

What I did, basically (not to imply these methods are anything I came up with) was:


So far I haven't seen the ring of crap, but I suspect it's indeed fixed if 2lps had success with it.   I'm pretty miffed about the lack of the more advanced menu options.  Ironically I liked the "no display" option the most, as there was nothing on the screen but the image.  Less stuff to distract me.  If there's a way to remove the FLIR logo and temperature scale I'd consider 2.11 to be a real winner.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 24, 2016, 09:25:52 pm
Well, I broke it.

I decided to downgrade to 2.3.0 to experiment with the Ring of Crap some more, and when I did I managed to get 80x60 and ROC at the same time.  Totally not fair.  I did the reshack python script and it's still stuck at 80x60 on 2.3.0.  Tried uploading my backed up common_dll.dll (that was working on 2.3.0 when I got the camera) and no change.  Defeated, I went back to 2.11.0 and now that is at 80x60 too, and 2lps's patched common_dll.dll isn't even fixing that.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 24, 2016, 09:50:59 pm
With 2.11 firmware:

1. Upload the backup of your conf.cfc to /FlashFS/system/appcore.d/config.d/
2. Upload common_dll.dll (downloaded from my URL) to /FlashBFS/system/
3. For the menu hack, upload the ui_control.rsc (I sent you a message with a download URL) to /FlashBFS/system/appcore.d/factory.d/
4. Restart

It is safe to execute the hacks when you have the original conf.cfc. Yours is already patched and I am not sure what happens when you try to patch it again. This is why I am sending you individual files, extracted from the hacks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 24, 2016, 10:19:47 pm
Step 3 from my previous post is when you already have the menu hack applied. E.g. you applied it on 2.3.0 and then upgraded to 2.11. It will work based on when you made the backup of conf.cfc - before you applied the menu hack or after it.

If your backup of conf.cfc is before the menu hack, then instead of copying an individual file in step 3, just apply the complete menu hack again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 24, 2016, 10:54:36 pm
My 2.11 upgraded camera had no config.d directory inside appcore.d, but I copied it over from a backup of the original files that were on my camera when I got it.   Sadly I'm still stuck at 80x60 even with the new common_dll.dll.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 25, 2016, 03:36:25 am
Are you sure that you are looking at the correct folder?

There is FlashFS and there is FlashBFS. The conf.cfc is inside /FlashFS/system/appcore.d/config.d/
There is also /FlashBFS/system/appcore.d/, where there is no config.d folder, which is fine.

The only thing in common_dll.dll is the removed signature checks for the conf.cfc. I think there is a manual method, where you can decrypt conf.cfc, make the necessary modifications, re-calculate the CRC and encrypt it back. The original 2.3.0 automated hack had problems with CRC recalculation, and that is why there was need to patch the common_dll.dll.

The resolution and some of the advanced menu options are in conf.cfc and if you have problems with a patched common_dll.dll (given that you copied it to the correct place), then there is problem with conf.cfc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 25, 2016, 11:37:25 am
This makes a lot of sense.  I was definitely working with FlashBFS instead of FlashFS.

Does anyone know what the B stands for?  I get the "flash filesystem" part, but what is the B?

Thank you so much for your help so far, I'm slowly getting the hang of this stuff!   How long until someone ports Linux to the E4?   Now that would be fun!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 25, 2016, 09:37:38 pm
That did it!  I moved the conf.cfc from the camera as it arrived to me (unknown lineage but with a working reshack on 2.3.0) to /FlashFS/system/appcore.d/config.d/

I've still got the limited menu set, but I'm going to look at the ui_control.rsc file some more.  At least it's plain text.  Holy grail for me will be the removal of the flir logo and scale bar when "no measurement" is selected.  The color pallets are nice to have too. 

Can the conf.cfc be decrypted anymore?  I tried ftool.exe and got an error.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on May 25, 2016, 10:02:17 pm
Probably for the menu, you can just apply the menu hack.

The ftool is for the 1.x version of conf.cfc. For 2.x you can use cfccfg_V2: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959) (there is a link to the original post of how to use it - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600))

To get your SUID:
0. Put the camera into RNDIS mode
1. Open the command prompt and telnet to the camera:
telnet 192.168.0.2

You will gain access to the FLIR Command Line Interpreter

2. CD to FlashFS/system/

\>cd FlashFS/system/

3. Execute suid.exe
\FlashFS\system\>suid

The SUID necessary for cfccfg_V2.py will be printed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 26, 2016, 03:25:02 am
Very cool!  Thank you.   It's nice to see what the conf.cfc actually has in it.    I see that my serial number and a "CRC03" are at the very bottom, then a line of a bunch of gibberish.   The rest of it is very plaintext though.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lazarus4_ on May 28, 2016, 11:00:14 am
Hello.

I applied the Res and Menu hack from 2lps on my E4 @ FW 2.11.0.
Everything worked just fine. The only problem I got is that after the Menuhack
the FLIR imprint on the pictures I take isn´t  visible anymore. Still I would like to have the
logo in every picture I take. Is there any way to make this possible again?

I tried the command "> rset .ui.userSettings.overlayLogo true" via telnet but it shows "bad data" as a result.
Anyone can help me?

THX
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: electr_peter on May 29, 2016, 10:42:02 pm
I noticed that E4 camera have frozen 2 times already. Picture froze, buttons did not respond. Holding power key restarted camera. Camera froze at seemingly random times (possible at calibration stage), otherwise 99.9% of time works fine. Device E4+ with 2.11 FW

Question - is there a way to know what caused this issue? Is there a log for failures in internal files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 29, 2016, 11:56:34 pm
Mine has locked up a few times.  It will either:


However, my camera is heavily molested so some of that may be my error.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: electr_peter on May 30, 2016, 04:32:41 pm
mct75, symptoms you described does not fit in my case. Camera just froze in operation, still showing last frame with coloured thermal pattern and markers - no extra weird behaviour was noticed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Lunasix on June 02, 2016, 07:30:43 am
Great post !

I have applied the hack with success, and increase in quality is impressive. Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: godfrey on June 05, 2016, 09:24:58 am
Having a few major issues.

A couple of years ago, I bought two E4's with 1.22 firmware.  One was easily and successfully modified back then, the other sat, until tonight.  I followed the instructions, but for whatever reason -- the images look jagged and half the menu items are missing...spot measurement, msx, etc...not to mention, it no longer shows up as a webcam when connected to my MacBook Pro (factory 1.22 did). 

I edited the conf.cfc file without issues.  I imported the menu3beta (or whatever the file is called) -- and while it looks slightly better, it doesn't look anywhere near what the other looked like, and certainly doesn't look like my E60.


Is there a way I can either revert back to the original 1.22 firmware and start over or move to a newer version and go from there?


Getting desperate -- have to ship this out soon to a friend who I'm donating it to.


Any help would be greatly appreciated.



Phil
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 07, 2016, 07:52:51 pm
Did you make a backup? Restore it, then try it again.


Sent from my iPad using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: godfrey on June 07, 2016, 08:47:59 pm
Did you make a backup? Restore it, then try it again.

Out of complete stupidity, I did not...however, 2lps was very kind in assisting me resolve the issue.  A backup will be made though!

For whatever reason, my E4 didn't quite like the conf.cfc file.  It's imaging was slightly improved, but there was aliasing shown on the LCD, but the rendered images taken by the camera didn't show it as much.  We tried changing CRC03 slightly, we tried other conf.cfc files and after a few sleepless nights, it finally took and decided to behave.

Happily, the imager still shows up as a webcam, so they'll be able to record (albeit externally) directly from the imager.


I could not have done it without the help of 2lps and the EEVblog community.  Thank you so much, everyone!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on June 08, 2016, 02:47:11 pm
Did you make a backup? Restore it, then try it again.

Out of complete stupidity, I did not...however, 2lps was very kind in assisting me resolve the issue.  A backup will be made though!

For whatever reason, my E4 didn't quite like the conf.cfc file.  It's imaging was slightly improved, but there was aliasing shown on the LCD, but the rendered images taken by the camera didn't show it as much.  We tried changing CRC03 slightly, we tried other conf.cfc files and after a few sleepless nights, it finally took and decided to behave.

Happily, the imager still shows up as a webcam, so they'll be able to record (albeit externally) directly from the imager.


I could not have done it without the help of 2lps and the EEVblog community.  Thank you so much, everyone!

Glad you got it sorted.

I finally managed to get hold of an E4 to upgrade (albeit not mine!). It had 2.3.0 firmware and 1.2L hardware. Interestingly I was able to turn on RNDIS using the hidden menu, which was still accessible? Did anyone else find this?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: komy14 on June 08, 2016, 07:27:44 pm
Dear Sir,

I just got E4 v2.11 and downgrade firmware to 2.3

But I read topic #7788 and use script modify and try to make like this http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

But when I try to Resolution hack in cmd it found some problem.

(http://i7.photobucket.com/albums/y281/komy14/a1_zpsm36euwni.jpg)

I don't know how to do?

Please advice me too.Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on June 08, 2016, 08:59:39 pm
It means that you have tried to run the hack before and it already created a patched version of common_dll.dll and conf.cfc in the FLIRreshack directory. Just delete the common_dll.dll and conf.cfc from the FLIRreshack directory (the same location, where the apply.py script is) and run it again.

You did upgrade back to 2.11 using the update pack, right?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 08, 2016, 10:28:19 pm
Interestingly I was able to turn on RNDIS using the hidden menu, which was still accessible? Did anyone else find this?

This is news to me. We could get to the menu but changing options had no effect.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bingo07 on June 09, 2016, 03:23:28 am
Just recently purchased a Flir e4 that came with fw 2.11.0.  I followed the directions posted at http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) along with the files posted by 2lps and i believe everything went fine.

Question. How can I verify that the resolution is indeed 320x240 and menu hack took.  Thanks 2lps and everyone else for making the hacks available.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: komy14 on June 09, 2016, 03:38:54 am
It means that you have tried to run the hack before and it already created a patched version of common_dll.dll and conf.cfc in the FLIRreshack directory. Just delete the common_dll.dll and conf.cfc from the FLIRreshack directory (the same location, where the apply.py script is) and run it again.

You did upgrade back to 2.11 using the update pack, right?

Thanks for 2lps

my detail:

First my e4 come with firmware 2.11
(http://i7.photobucket.com/albums/y281/komy14/102085.1_zpsysivafbn.jpg)

and I downgrade firmware to 2.3 with Flirtool and file from MATMOE -  http://s000.tinyupload.com/?file_id=00983732806372988148 (http://s000.tinyupload.com/?file_id=00983732806372988148)
(http://i7.photobucket.com/albums/y281/komy14/102115.1_zpspn9nsvfd.jpg)

I install program need for upgrade into pc (windows7-32bit) :)

and Switching camera to RNDIS mode.

and I connect e4 with filezila and backup all file in e4 and put 3 folder(FLIRfif, FLIRmenuhack and FLIRreshack) into drive c:

(http://i7.photobucket.com/albums/y281/komy14/a2.1_zps6jvxkxjx.jpg)

in folder FLIRreshack

(http://i7.photobucket.com/albums/y281/komy14/a7.1_zpstpib7lp1.jpg)

and run cmd it found problem.

(http://i7.photobucket.com/albums/y281/komy14/a1_zpsm36euwni.jpg)

and see in older FLIRreshack again.

(http://i7.photobucket.com/albums/y281/komy14/a6.1_zps7ncuck5f.jpg)

I don't know what wrong and how to fix it?

please help me too. ???










Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on June 09, 2016, 05:22:11 am
I sent you a personal message. Please check your inbox.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: komy14 on June 09, 2016, 11:01:10 am
Dear all,

Thanks you so much for 2lps,now I roll back firmware and reverse it all,and try again.


It's work!!!!

Thank you for this board and 2lps.

Cheers.

(http://i7.photobucket.com/albums/y281/komy14/FLIR0056_zpsimeqedvq.jpg)

(http://i7.photobucket.com/albums/y281/komy14/FLIR0061_zpseul9lmpa.jpg)

(http://i7.photobucket.com/albums/y281/komy14/raw_zpsdymjauam.jpg)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Faith on June 09, 2016, 12:20:15 pm
Wow. I have just stumbled upon this thread. I always thought that high resolution Thermal Imagers were super expensive because the manufacturing of a 320x240 sensor would be very expensive to produce.

And now I see that a Thermal Imager the price of a FLIR E4 actually has a 320x240 sensor inside but is artificially limited?

I really wonder just how much more in sales FLIR would make if they made an official 320x240 Thermal Imager at this kind of price range without the need for a hack.

Even if it were double the price of the FLIR E4 I'm sure it would sell.

Not just amongst professionals but also those who wish to purchase one for fun or curiosity.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on June 09, 2016, 07:14:59 pm
Wow. I have just stumbled upon this thread. I always thought that high resolution Thermal Imagers were super expensive because the manufacturing of a 320x240 sensor would be very expensive to produce.

And now I see that a Thermal Imager the price of a FLIR E4 actually has a 320x240 sensor inside but is artificially limited?

I really wonder just how much more in sales FLIR would make if they made an official 320x240 Thermal Imager at this kind of price range without the need for a hack.

Even if it were double the price of the FLIR E4 I'm sure it would sell.

Not just amongst professionals but also those who wish to purchase one for fun or curiosity.

They're definitely not super expensive to produce. For example, the Therm-App is a 384 × 288 camera retails for less than $1,000. Assuming the market for these cameras continues to grow, companies like FLIR and Fluke will eventually have to reduce their prices to stay competitive. Of course, the big companies have the advantage of being brand names and could make sales at higher prices for a bit longer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: spud244 on June 11, 2016, 02:53:15 pm
Hey guys, I recently bought a used E4 with firmware 2.3.0 after reading this thread in hopes of upgrading the resolution. However, it seems to be not working for me. For starters, this camera has a conf.cfg file that is 6297 bytes. And before I knew that I would get the following error:

= CONNECT TO FTP
= CREATING BACKUP DIR backup-20150401094151
= RETR /FlashBFS/system/common_dll.dll
= RETR /FlashFS/system/appcore.d/config.d/conf.cfc
Traceback (most recent call last):
File “apply.py”, line 70, in
http://ftp.retrbinary( (http://ftp.retrbinary()“RETR ” + name, tmpfile.write)
File “C:\Python27\lib\ftplib.py”, line 414, in retrbinary
conn = self.transfercmd(cmd, rest)
File “C:\Python27\lib\ftplib.py”, line 376, in transfercmd
return self.ntransfercmd(cmd, rest)[0]
File “C:\Python27\lib\ftplib.py”, line 339, in ntransfercmd
resp = self.sendcmd(cmd)
File “C:\Python27\lib\ftplib.py”, line 249, in sendcmd
return self.getresp()
File “C:\Python27\lib\ftplib.py”, line 224, in getresp
raise error_perm, resp
ftplib.error_perm: 550 File unavailable (e.g., file not found, no access)


Any help would be appreciated, thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bangbang99 on June 11, 2016, 08:32:58 pm
Another focusing tool for Flir E4. Matches perfectly, easy to make (2 minutes), safe for the camera due to softness of the material.
Instruction:
1) Take a plastic bottle caps with diameter of sealing part 17mm
2) Heat up the bottle caps top part (see photo) to soften the light.
3) Insert immediately to the E4 cameras lens opening to make initial form.
4) Heat 1/3 of the tools working side to soften the light and insert the tool again (matching previous angular position).
5) Repeat 3 - 4 times to form full shape. 
6) Enjoy 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Gen2ux on June 11, 2016, 08:52:21 pm
Many thanks to Dave and the EEVblog community, I purchased an E4 and hacked to E8 usability.  I now have a fully functional thermal camera that has shown me all sorts of good...and bad.   :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: godfrey on June 11, 2016, 09:05:22 pm
This is probably buried deep in this thread somewhere.  Found some things on Thingaverse that can be printer for the FLIR's (even a few from eevblog!).

http://www.thingiverse.com/search?q=FLIR (http://www.thingiverse.com/search?q=FLIR)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bangbang99 on June 11, 2016, 09:50:18 pm
Just an easy way to play a couple of times with lens without need to by the perfect tool :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gotrice on June 19, 2016, 03:08:34 am
my Flir E4 just arrived, it came with software 2.11 and model 1.2L. i cant exactly find a guide to hack it with software 2.11. do i have to downgrade the software, just like for version 2.8? i did noticed a few people have been successful hacking software 2.11...

if someone can help me with a step by step guide to hacking my E4 it would be greatly appreciated. thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on June 19, 2016, 09:53:47 am
my Flir E4 just arrived, it came with software 2.11 and model 1.2L. i cant exactly find a guide to hack it with software 2.11. do i have to downgrade the software, just like for version 2.8? i did noticed a few people have been successful hacking software 2.11...

if someone can help me with a step by step guide to hacking my E4 it would be greatly appreciated. thank you

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: brickedMyE4 on June 19, 2016, 05:58:44 pm
Hi, I'm new here...
I manage to brick my E4 with FW version 2.11. 
First Downgrade it to 2.3 successfully(using https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)) and then following this http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)  install resolution hack, and it worked.
Than I try to install Menu hack and it wasn't working correctly. Then I tried to install this https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
Now i get wrong password when try to login in FTP, but I can still access file thru windows explorer without password. And then after FLIR logo I get blank screen.
Is there some way to upload eFLIRInstall.exe and Z3comb_v2.3.0.fif to force reinstall?
I tried manually to do this, but still nothing on LCD after FLIR logo.
I did backup FlashSF but not FlashBSP.  I tried to remove hack, but still nothing. I still have common_dll.dll and conf.cfc files.
When type default gateway into browser i get this: See image in attachment...
EDIT:
I found this ftp://192.168.0.2/FlashIFS/FLIRUpdate/ (http://ftp://192.168.0.2/FlashIFS/FLIRUpdate/) and it contains  eFLIRInstall.exe and Z3comb_v2.3.0.fif
Now I'm trying to find way to start eFLIRInstall or to put it in autorun. Any suggestions?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on June 19, 2016, 08:31:49 pm
1. Return the original conf.cfc and common_dll.dll to the camera
* Copy the original conf.cfc to /FlashFS/system/appcore.d/config.d/
* Copy the original common_dll.dll to /FlashBFS/system/

2. Upgrade back to 2.11 using the update pack found here - https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880) This will fix the problem with not booting properly.

3. Use the 2.11 files to do the res and menu hack from here - https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: brickedMyE4 on June 20, 2016, 12:16:13 am
Thank you for response. I did try that but didn't work.
I can't update with FLIR Tool 4.1. It won't open bottom half of window. So I unpacked 2.3 .fif file with winrar, and manually copy files to FlashBSP and get it up and running but it was missing half of menu, ftp was ok.
Then I tried same with 2.11, and get back black screen. Then I tried telnet and it worked, so I run  eFLIRInstall.exe Z3comb_v2.3.0.fif and it was doing something, but nothing on screen appeared, and i hear usb restart. But still black screen. Moved back files manually for 2.3 and get it to work. Applied resolution hack, then menu hack and get almost all option available, no 3 point and difference temp. Everything else seams to work.
I also tried to update it with last version of flir tool, but still nothing...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: takeo on June 20, 2016, 04:04:36 pm
I am looking to buy an e4 with the hopes of updating it to e8 specs.

Are all current versions of the e4 upgradeable to the e8?  Or must I make sure the version I buy has a particular firmware installed?

Sorry for the newbie questions...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kitsune-denshi on June 20, 2016, 06:33:55 pm
I just thought I'd report that I successfully upgraded my E4 that came with 2.11 firmware using the files provided by 2lps (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880).

I used the current version of FLIR tools and drivers under Windows 7 x64, everything went without any problems and the whole procedure was done in less than 10 minutes.

Thank you very much for providing the hack for 2.11!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EEprom on June 23, 2016, 09:12:42 pm
hey guys , I would buy a new E4 to do some tests . I checked on the website flir the latest firmware version turns out to be 2.11 , then today I would have probably buying it this firmware release . If so, I can turn it to E8 directly ? or do I downgrade to firmware 2.03 and then apply the patch? Thanks  ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on June 26, 2016, 11:01:34 pm
With slight modifications of the 2.3  hack, I was able to create 2.11 hack.
congrats, you made this procedures persistent. This is a very good achievement for those who only want to install hires and simplest menuhack on their new camera.
I've read through the thread but no one has indicated what functions are missing if applying 2lps's hack to a 2.11 camera.
Can anyone say what are the specific missing functions that are present in any of the other versions but missing from 2lps's 2.11 hack ?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on June 26, 2016, 11:12:03 pm
  • Has anyone taken the core out of an E4 and used it in other "hosts"?  I know the Leptons can be connected to other boards
The interface of this sensor is undocumented. As far as I know no one has used this sensor in anything else. Also the sensor is 60 FPS natively and it would seem that FLIR is just discarding frames and dropping it to 8FPS.

  • Is it possible to cool the sensor and get better performance?
You won't get any significant image quality improvements. Even if you manage to cool it near 0K, the on-sensor ADC will still be the limiting factor ( I think it's 12-14 bits ).


    C
    • I know a few have messed with other lenses.  Is there a go-to Germanium lens to use?  I read that Germanium lenses are better
I don't know of anyone messing with other lenses, I know they added a lens on top of the current one ( not replace the current one ), in order to change the focal length. I don't think you'll get noticeable improvements from a germanium lens, the only significant improvement you can do is get a wider aperture lens, but then that gets too complicated.

  • Has anyone hacked the battery?  I'm guessing it's just an 18650 in a plastic case.  Not something I'm going to pay $50 for!

Yes the battery appears to be 18650 in a plastic case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on June 27, 2016, 12:02:30 am
(snip)

Many thanks!  I would love to see some research into adapting the sensor to another "host," the WinCE environment just seems so limited.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on June 27, 2016, 08:19:27 pm
Many thanks!  I would love to see some research into adapting the sensor to another "host," the WinCE environment just seems so limited.

The sensor's output is quite raw compared to what you get from a Lepton - be prepared to do a ton of lens, pixel, gain, and image corrections to it before your going to get anything remotely useful/visible. There is an entire FPGA in the Ex line dedicated to "preparing" the sensors output before WinCE gets the feed. Lepton's have that processing power already embedded in the package - witch is why they are able to be bolted on/in to everything + kitchen sink. Also reading back though this thread - the FPS limit may be burnt into the sensor itself - the output is 60Hz but is the same frames are being sent many times cutting the effective rate for ITAR compliance. (I would love this to be proved otherwise!)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on June 27, 2016, 09:43:04 pm
The sensor's output is quite raw compared to what you get from a Lepton - be prepared to do a ton of lens, pixel, gain, and image corrections to it before your going to get anything remotely useful/visible. There is an entire FPGA in the Ex line dedicated to "preparing" the sensors output before WinCE gets the feed. Lepton's have that processing power already embedded in the package - witch is why they are able to be bolted on/in to everything + kitchen sink. Also reading back though this thread - the FPS limit may be burnt into the sensor itself - the output is 60Hz but is the same frames are being sent many times cutting the effective rate for ITAR compliance. (I would love this to be proved otherwise!)
Yes indeed this has not been tested. What I can point out is that if ITAR requires that the sensor itself be restricted to 8fps and not the entire device, the seek camera seems to be violating this, since it's very likely outputting 25-30 different frames which are being averaged out in the MCU. It's not necessary true about the processing required though there's obviously dead pixel masking + calibration data adjustments + uniformity corrections being applied. The most compute intensive task is IMO the MSX. I'm curious if anyone knows if the older non-MSX models had an FPGA.
Also, does no one know what is missing from the 2.11 hack vs the old full ones ? :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Onyx12 on June 28, 2016, 01:59:31 pm
Hey there, I just got The E4 today with Firmware 2.11.0
Wanted to do the hack and put the Camera in RNDIS Mode.
When I used "ipconfig" to get The IP Adress it showed up that The device isn´t connected.
Also filezilla doesn´t get a connection.
Flirinstallnet didn´t show "USB CAMERA DEVICE". There was The IP 192.168.0.2 in this field.
I used Win7 Ultimate 32bit.

Anyone an idea where my mistake is?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on June 28, 2016, 03:10:53 pm
Hey there, I just got The E4 today with Firmware 2.11.0
Wanted to do the hack and put the Camera in RNDIS Mode.
When I used "ipconfig" to get The IP Adress it showed up that The device isn´t connected.
Also filezilla doesn´t get a connection.
Flirinstallnet didn´t show "USB CAMERA DEVICE". There was The IP 192.168.0.2 in this field.
I used Win7 Ultimate 32bit.

Anyone an idea where my mistake is?
How did you try to put the camera in RNDIS mode ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Onyx12 on June 28, 2016, 05:53:12 pm
I used the fubar tutorial.
Just ran the flirInstallNet and selected the SET_permantent_RNDIS.fif
Without downgrading to 2.3.0

UPDATE: Sorry for wasting your time!!!
Just got a problem with the installation of the drivers.
Now everything worked fine!
Thanks to all of you Guys
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MF-jockey on June 30, 2016, 11:19:36 am
Another focusing tool for Flir E4. Matches perfectly, easy to make (2 minutes), safe for the camera due to softness of the material.
Instruction:
1) Take a plastic bottle caps with diameter of sealing part 17mm
2) Heat up the bottle caps top part (see photo) to soften the light.
3) Insert immediately to the E4 cameras lens opening to make initial form.
4) Heat 1/3 of the tools working side to soften the light and insert the tool again (matching previous angular position).
5) Repeat 3 - 4 times to form full shape. 
6) Enjoy 8)

I made such a tool, but it doesn't work at my new Flir E4 lens. The tool-material is to soft and the lens to strong fixed.
Now I will order a tool (3D printed) with a hole, also to watch the focus point.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 01, 2016, 02:47:28 am
Question!

I have successfully reshacked my 2.11.0 device using the 2lps method. I do not believe the "menu hack" is applied yet although I did get some extra functionality after the res hack in the menu system. Am I able to zoom at all with this E4? Does anyone have a 2.11.0 menu hack applied after doing the 2lps res hack and get zoom?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 01, 2016, 03:44:33 am
Also, does no one know what is missing from the 2.11 hack vs the old full ones ? :(

Question!

I have successfully reshacked my 2.11.0 device using the 2lps method. I do not believe the "menu hack" is applied yet although I did get some extra functionality after the res hack in the menu system. Am I able to zoom at all with this E4? Does anyone have a 2.11.0 menu hack applied after doing the 2lps res hack and get zoom?

That means "zoom" is one of the missing item?
I planned to buy one but I'm changing my mind :  (
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 01, 2016, 04:03:14 am

Enhanced E4 menu functions

Image Mode:
Thermal MSX
Thermal
PiP Large
PiP Small
Digital Camera (Visual)

Measurement:
No measurements
Centre Spot
Auto hot spot
Auto cold spot
Center+Hot+Cold
Delta hot spot-Spot
Delta hot spot-Temp

Colour:
Iron
Raindow
Gray
Blue below 'x' temp
Red above 'x' temp
Rainbow High Contrast
White=hot
Black=hot
Arctic
Lava
Detect Condensation
Detect Insulation deficiencies
Interval

Temperature Scale:
Auto
Lock
Manual (set upper temp, lower temp or shift both + or -)
Unlock

Zoom (electronic):
1x - 320x240 pixels
2x - 160x120 pixels upscaled to 320x240
4x -   80x60 pixels upscaled to 320x240
8x -   40x30 pixels upscaled to 320x240


Can anyone hacked a 2.11 test which items are missing?
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 01, 2016, 06:00:29 am
I am very curious to know if the menu hack even works on a 2.11.0 reshacked device. Anybody able to use zoom functions on a 2.11.0? I don't want to apply the hack if no one has been able to apply it on this version. Dont want a brick either. Loving the res hack however.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 01, 2016, 06:27:18 am
I am very curious to know if the menu hack even works on a 2.11.0 reshacked device. Anybody able to use zoom functions on a 2.11.0? I don't want to apply the hack if no one has been able to apply it on this version. Dont want a brick either. Loving the res hack however.
Would you mind telling the purchase date, software /hardware version and the calibration date of your device?
I am going to order one if the newest version can be hacked just like the old one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 01, 2016, 09:03:09 am
Update:  My model is a 1.2L with 2.11.0 from the factory model as of Jan of 2016. Did the 2.11.0 menu hack after I had already done the res hack.  It seems the only thing it added was 3 point measurement, a few more color choices, a splash screen that says "special edition", and thats about it. I was really looking forward to get zoom to work. Any status on zoom?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 01, 2016, 09:25:55 am
@2lps and the guys,

congrats, you made this procedures persistent. This is a very good achievement for those who only want to install hires and simplest menuhack on their new camera. Which means, for the majority of us. Now the majority can install the hacks on the 2.11 firmware.

I have checked the new hacks and they really work. No ring of crap. No calibration issues. Awesome.

Drawbacks if any? Yes, unfortunately but quite expected.

Any advanced functions beyond the standard hacks require careful revisions now before being used on the 2.11 camera. Some of them I discovered to cease working, some malfunction. Some survived.

With this said, I would NOT recommend to those who don't experience any calibration issues like Ring-Of-Crap etc., and have their cameras running smoothly on 2.3.0 downgraded from the above version numbers, and using or plan to use the advanced features mentioned elsewhere,

to back-upgrade the core files to the 2.11 with this new hacks.



.....  It seems the only thing it added was 3 point measurement, a few more color choices, a splash screen that says "special edition", and thats about it. I was really looking forward to get zoom to work. Any status on zoom?

So only "3 point measurement, a few more color choices" survived?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on July 01, 2016, 11:14:10 am
Update:  My model is a 1.2L with 2.11.0 from the factory model as of Jan of 2016. Did the 2.11.0 menu hack after I had already done the res hack.  It seems the only thing it added was 3 point measurement, a few more color choices, a splash screen that says "special edition", and thats about it. I was really looking forward to get zoom to work. Any status on zoom?

2.11 has most of these, including zoom - https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg973883/#msg973883 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg973883/#msg973883)
Actually, the 2.11 menu hack is absolutely the same as the 2.3 one. The only difference between 2.3 and 2.11 is in the reshack, and how the common_dll.dll is patched to remove the signature checks. The 2.11 common_dll.dll is modified, and the 2.3 hack offsets didn't patch the correct bytes.

To me it appears, that you didn't copy the updated conf.cfc, created by the menu hack - http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) (scroll to Menu Hack). A lot of the additional menu options are activated by changing conf.cfc, including zoom.

Quote
Go to command line interface (Windows key + R, cmd) and type:

cd \FLIRmenuhack

python menu_conf_e4.py

This will rename the original conf.cfc file you just downloaded from the camera to conf_reso_only.cfc and generate a new conf.cfc in C:\FLIRmenuhack.

Using Filezilla again, replace the conf.cfc found in /FlashFS/System/appcore.d/config.d/ with the one you just generated.

If you want to see how your conf.cfc looks decrypted, download your current conf.cfc from the camera and use cfccfg_V2 and your camera's SUID. Read here - https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg948898/#msg948898 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg948898/#msg948898)

For example the zoom setting is this:
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool  true
.caps.config.image.zoom.maxFactor double 8

The conf.cfc generated by the menu hack, enables these additional option.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kai-74 on July 01, 2016, 07:25:22 pm
My updated Flir E4 (with Software 2.11) has all Functions mentioned above, including Zoom.
The one and only function missing is the Manual Temperature Scale adjust.

But before 2lps changed my config.cfc half of the (E8) Menu was missing.

Greetings
Kai
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 01, 2016, 08:30:08 pm
Update #2: VICTORY HAS BEEN ACCOMPLISHED ON 2.11.0.

Zoom works albeit the instructions I followed didn't render the result. I had to use the cfccfgv2 python script and the SUID to manually edit the zoom lines of code and then repackage it back into a CFC format from CFG format. For some reason running the conc_cfc_menu_e4.py file does NOT edit the zoom features. Intentional or not, this needs to be done manually as stated above.

So that leaves me with 2.11.0 Model 1.2L E4 with 320x240 resolution, 1x, 2x, 4x, 8x zoom capability, lots of color palettes, ability to take ALL the GUI off the screen when "No Measurement" is selected, photos can save as expected, and toggle between MSX and thermal hybrid modes etc. The only other thing I would manually have to edit in the CFC code is Picture-in-Picture PIP mode, however I dont have any need for that so I am 100% freaken satisfied!!!!!! GOOD JOB ALL ORIGINAL HACKERS  =D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on July 01, 2016, 08:32:07 pm
I need to revisit mine.  I have 2.11 with reshack, but only about 1/3rd of the menu hack options.  My conf.cfg looks perfect though.   |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 01, 2016, 08:51:23 pm
Hi everyone, possibly not the right place to post this, but desperate times need desperate measures.

Is there a way to install the firmware with out flir tools? My firmware update went wrong (doing it from a MAC) and the camera starts up, shows the flir logo and then dissolves to black, nothing else goes on.

I can connect to it with filezila (after the temporary RDNIS is runned from flirinstallnet) but don't know where to go from there. I don't have a local flir support center to take it for repair, and apparently it's illegal to take thermographic cameras from USA, so I don't know how to send it over.

Sorry for this post.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 01, 2016, 09:06:30 pm
Before you made any updates, did you make a backup of all your original files? DO you still have the common.dll and conf.cfc files? Perhaps try getting a hold of a windows 32bit machine and replicated the firmware update process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 01, 2016, 09:40:07 pm
Before you made any updates, did you make a backup of all your original files? DO you still have the common.dll and conf.cfc files? Perhaps try getting a hold of a windows 32bit machine and replicated the firmware update process.

Hi Dynamics!

Unfortunately I didn't make a backup and I don't have the common.dll and conf.cfc files. I guess this makes my case even worse?

I tried replicating the firmware update with a 64 bit windows 10 and flir tools, but after the loading the update into the camera and disconnecting the USB cable nothing happens.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 01, 2016, 10:20:31 pm
Thanks for all the help, I will report my camera now boots up and is running again just fine. The way it got fixed was to log in anonymously  and I had direct access again to the file system, I loaded my saved stock files and it was running again! Then I added the beta 3 file again and  a restart and have everything but no zoom? Unless I just can not figure out how the zoom works.  Do you just use the center side buttons or is zoom a menu item? Again thanks for all the answers. To help anyone who ever thinks they bricked the camera first try telnet to 192.168.0.2 to see if the camera is in fact alive, if you can connect then even though there is no GUI interface push the off button and if the telnet connection is interrupted that shows the camera buttons work you just can't see anything. Then use your ftp program to connect but do not enter any login information, this should allow you to make whatever repairs you need. In my case i just had only touched the FlashBFS folder so that is the only one I replaced.

Looking at this post, I believe I'm screwed! No backup at all… Didn't think I'll need one because I was using the official software
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 01, 2016, 10:47:01 pm
Hi everyone, possibly not the right place to post this, but desperate times need desperate measures.

Is there a way to install the firmware with out flir tools? My firmware update went wrong (doing it from a MAC) and the camera starts up, shows the flir logo and then dissolves to black, nothing else goes on.

I can connect to it with filezila (after the temporary RDNIS is runned from flirinstallnet) but don't know where to go from there. I don't have a local flir support center to take it for repair, and apparently it's illegal to take thermographic cameras from USA, so I don't know how to send it over.

Sorry for this post.
Can you try to re-flash the firmware from a Windows machine ?
I'm assuming you're not in the USA, right ? There are no export / import regulations for the FLIR E4, that's why FLIR limited it to 9fps, so they can avoid the regulations. The E40 (60fps) has export regulations.
FLIR will cover a firmware upgrade issue under warranty( I only paid shipping to their center for a failed firmware upgrade ). The turn-around time was less than 1 week.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 02, 2016, 02:04:12 am
My updated Flir E4 (with Software 2.11) has all Functions mentioned above, including Zoom.
The one and only function missing is the Manual Temperature Scale adjust.

But before 2lps changed my config.cfc half of the (E8) Menu was missing.

Greetings
Kai

Can you share the changed config.cfc with us? Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 02, 2016, 04:35:46 am
My updated Flir E4 (with Software 2.11) has all Functions mentioned above, including Zoom.
The one and only function missing is the Manual Temperature Scale adjust.

But before 2lps changed my config.cfc half of the (E8) Menu was missing.

Greetings
Kai
Any way to bring back the Manual Temperature Scale adjust? I think it is one of the most useful feature provided by the menu hack trick. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 02, 2016, 07:20:04 am
Hey guys i got one for ya  :bullshit:

I recently purchased an E4 with firmware 1.xxv installed ( i forgot which firmware exactly it was)
I upgraded to 2.3 no problem with flir tools.
After following the tutorial to get the hack done on this firmware version with link provided here http://fubar.gr/wp-content/uploads/2015/03/FLIR_E4_2.3.0_hack.zip (http://fubar.gr/wp-content/uploads/2015/03/FLIR_E4_2.3.0_hack.zip)
I can't seem to get past the 550 error that keeps showing up after the python commands.
I tried to manually delete the common_dll.dll file but even that I can't do, so I renamed the common file as common.good and uploaded the hacked common file with the old common files name in place. I go to turn on the camera and it just stayed on the flir loading screen. :-//
I renamed the original common file back to how it was and it comes on no problem but I still can't get to E8 specs.
Anything I can try doing? I'm out of ideas and it's past 3 in the morning over here.  |O
Thanks for any input! Good night !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 02, 2016, 01:31:34 pm
Can you try to re-flash the firmware from a Windows machine ?
I'm assuming you're not in the USA, right ? There are no export / import regulations for the FLIR E4, that's why FLIR limited it to 9fps, so they can avoid the regulations. The E40 (60fps) has export regulations.
FLIR will cover a firmware upgrade issue under warranty( I only paid shipping to their center for a failed firmware upgrade ). The turn-around time was less than 1 week.

Hi Signal32, thanks for the tip. Unfortunately it didn't work, however been in the situtation I was I gathered different tips from this same thread and managed to get it working. My camera started with the flir logo and dissolved to black, but could connect to it with filezilla.

This is the step by step:
TIC: Flir E5 - Last working firmware 2.3  :-BROKE While trying to update to 2.11 with flir tools on Mac.
Computer to fix: Win 10 x64

1.- With flirinstallnet run RNDIS temporary.
2.- Dissable all network connections and set the IP of the flir ethernet adapter to 192.168.250.1 subnet mask 255.255.255.0
3.- Unrar the 2.3 official .fif to see the contents, specially the FlashBFS folder
4.- Connect with filezilla (anoymous worked, with user and pass didn't).
5.- Load the complete FlashBFS on to the camera.
6.- Disconnect and hard reset it.
7.- Power on - Came on and actually started the firmware upgrade.

I don't have a clue why did it work... And this weren't my ideas, I was just desperate to test anything.

I now must hack it to set it free...  :-DD

Thanks everyone for the ideas and replies.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 12:49:46 pm
hey back again guys, next step to my previous post was to manually place the resolution files on my flir e4 in a vitual machine with win7 32bit. I had 64bit when I tried the other night. For whatever reason both machines with python 2.11 installed I still get this 550 error using python CMD's.
When I manually do it its like the file is secured so that it can not be deleted, cam on or off.
I have no problem deleting the config file and replacing that, common is the only one giving me issues to replace.

(http://i.imgur.com/Fzb9zFu.jpg)

should I try to update from 2.3 to 2.11? I've read 2.11 is a hit or a miss but for 2.3 it was certain.  :scared:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 12:52:50 pm
When I manually do it its like the file is secured so that it can not be deleted, cam on or off.
Try to rename it to common_dll_old.dll, instead of deleting it and then copy over the new common_dll in it's place.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 01:16:24 pm
Try to rename it to common_dll_old.dll, instead of deleting it and then copy over the new common_dll in it's place.

Thanks Signal32, I tried this in my previous post and just did it again now redoing the RNDIS process, and executing all commands as administrator. I renamed the original file as common.dll.dll.old and uploaded the 1kb common.dll.dll file but the camera starts up and stays in boot mode.

(http://i.imgur.com/4hLmQDN.jpg)

any other ideas?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 01:24:39 pm
I renamed the original file as common.dll.dll.old and uploaded the 1kb common.dll.dll file but the camera starts up and stays in boot mode.
any other ideas?
What does the underlined part mean exactly ? There shouldn't be any 1kb file named exactly "common.dll.dll", with no other extra extension.

Here's exact steps that you can try.
Re-flash 2.3 again.
Rename common_dll.dll to common_dll_old.dll
Copy common_dll_old.dll to common_dll.dll (now you will have 2 identical files one named common_dll.dll and the other common_dll_old.dll )
Run the python script.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 01:31:08 pm
the 1kb common_.dll.dll file is from the hacks resolution folder downloaded somewhere in this black hole lol
its actually 37 bytes total compared to the original which is like 1.16mb, seems like the hacker took alot of data out  :-/O
I have the original 1.2 firmware saved as well but Ill re flash the 2.3 back in  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 01:34:41 pm
the 1kb common_.dll.dll file is from the hacks resolution folder downloaded somewhere in this black hole lol
its actually 37 bytes total compared to the original which is like 1.16mb, seems like the hacker took alot of data out  :-/O
I have the original 1.2 firmware saved as well but Ill re flash the 2.3 back in  :-+
There is no "common_dll.dll" 1kb file, there is a "common_dll.dll.e6" file.
This file is not a replacement for the "common_dll.dll", it just happens to have a similar name, it is a text file with info in it, not a .dll.
If my previous post doesn't work for you, zip up your 1MB common_dll.dll, upload it here and I will try to modify it for you so you can just upload it over and have it work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 02:10:54 pm
There is no "common_dll.dll" 1kb file, there is a "common_dll.dll.e6" file.

really?? then idk what I downloaded because my zip folder has the flirresshack folder with :

(http://i.imgur.com/8LnJW54.jpg)

i have no common_dll.dll.e6

i was taking the common_dll.dll.delta file and renaming it to common_dll.dll and replacing the original with this one.
well i tried but no success  |O i have here the uploaded file: pass is eevblog

http://www.filedropper.com/common (http://www.filedropper.com/common)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 02:15:13 pm
i was taking the common_dll.dll.delta file and renaming it to common_dll.dll and replacing the original with this one.
Ok, I thought you were doing the menu hack, that one has the common_dll.dll.e6 file.
If you're doing the reshack, then yes, the "common_dll.dll.delta" is there, but same thing applies, it's a text file with info, not a replacement for "common_dll.dll"
I'll have a look at your dll.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 02:56:48 pm
well i tried but no success  |O
What was the issue, how did it fail ? Also, I need your FlashFS\system\appcore.d\config.d\conf.cfc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 03:27:06 pm
well i tried but no success  |O
What was the issue, how did it fail ? Also, I need your FlashFS\system\appcore.d\config.d\conf.cfc

It failed with the python CMD and it generated a 550 error file not accessible.

also the other thing is I dont have a conf.cfc ?  "In FlashFS\system\appcore.d\config.d\" I have a conf.cfg
The extension is a cfg not a cfc. Will it matter? I'll send it over now though

http://www.filedropper.com/conf (http://www.filedropper.com/conf)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 03:42:07 pm
The extension is a cfg not a cfc. Will it matter? I'll send it over now though
OK I see what's happening now. If you indeed only have the conf.cfg then the 2.3 hack won't work for you. Here is why:

Early v1.xxx had un-encrypted config files (conf.cfg), however the v2.3 has encrypted config file(conf.cfc). The hack works by modifying this encrypted file. Since your file is not encrypted, it looks like you still have the old config file from the previous v1.xxx that you upgraded from. The 2.3 hack can not work with this. I haven't seen this situation before, maybe someone else can whey in.

If no one has better suggestions, here is what you can try:
- Try to apply the old, conf.cfg -based hack that was originally made for the early 1.xxx versions, you will have to search back in this thread
OR, even less likely to work: Delete your conf.cfg and file and upload a conf.cfc file in that directory, from someone who already hacked their v2.3
You should wait for better suggestions as the above ones may brick your device, especially the 2nd one.

So basically seems that upgrading from early v1.xxx versions to v2.3 and then trying to apply the hack is not supported.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 03, 2016, 04:07:55 pm
The extension is a cfg not a cfc. Will it matter? I'll send it over now though
Found someone with the same issue as you (unless it actually is you :) ) -- see below.
Since they mention that the resolution hack kept when upgrading from 1.x to 2.3, I think there's a high chance that a modified config file will work for you.
So, revert all changes if you have any (or re-flash v2.3) and then overwrite via ftp your conf.cfg with this conf.cfg (password: eevblog) http://www.filedropper.com/conf_1 (http://www.filedropper.com/conf_1)
Let us know if that works

(http://i.imgur.com/lL0ZQEb.png)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on July 03, 2016, 04:26:49 pm
While the experts are awake I will chime in with my issue.  I had a factory 2.11 camera that I got used with 2.3 on it, reshack applied and ROC present.   Thanks to 2lps I was able to upgrade to 2.11 with reshack and no ROC, but I have never been able to get the full menu hack to work. 

I have center spot/hot spot/coldspot/no measure but not 3 spots or anything else.  For palettes I have Iron/Rainbow/Gray/above thresh/below thresh but not arctic or the white hot/black hot.  I have PIP and blend, but no zoom.  It's like a half-menu-hacked camera.  I've tried running the  2.3.0_Menu.fif a few times, and have played with my conf.cfc/cfg many times.  Not sure where to go from here.

Here's my conf.cfg (decrypted with my SUID)

Code: [Select]
#
# Generated at 2014-04-03 12:58:16
#
.caps entry
.caps.config entry
.caps.config.name text "app E4"
.caps.config.revision text "1.2"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 5
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool  true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 3
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool  true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 3
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool  true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool  true
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 5
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool  true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 5
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool  true
.caps.config.image.sysimg.irMarkers.box.maxCount int32 5
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool  true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool  true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool  true
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool  true
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool  true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool  true
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool  true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool  true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool  true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool  true
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool  true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 5
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool  true
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 5
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool  true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool false
.caps.config.ui entry
.caps.config.ui.image entry
.caps.config.ui.image.adjust entry
.caps.config.ui.image.adjust.enabled bool  true
.caps.config.ui.image.adjust.manual bool  true
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool  true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool   false
# ID [removed]
# CRC03 [removed]
‚3¡Ù*Ê`öÏY1Þ
í@7ŽZcËÍ÷¾ïD*Iu/öŸ$—5Ý@Êÿ»MkòÖ
Š\°¸“:7}Ú²‡iÀC*TçEÍÖ@ZÔÐÍÙ»pI¢—/‡¿qm x;èôž¯[p.á ¤‰¹[Ð@¹)NÃ*.Ÿoʍ×ÔC›À ònm^ A¼Ê,#eÈüfO‘Z P%Fá]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: terriblebmx on July 03, 2016, 04:28:27 pm
I GOT IT WORKING !!!!!!!!!!!!!!!!!!!!!!!  :-+ O0 :popcorn:

Okay so from the start when I recieved my E4 I noticed it had the v1.(something) firmware installed.
I downloaded flir tools from their website and when connected, I was prompted to upgrade to v.2.3 which I did.

(skipping the attempted fails)

I downloaded the CRC01 files uploaded by taucher here:
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg332090/#msg332090)

I followed the instructions within the CMD window and at the finale I generated a .fif file.
According to the instructions I was supposed to install the .fif file through the flirnetwork tool but it was denied as an illegal file.
So I went into the directories of the generated fif and manually replaced the original conf.cfg in my camera with the generated cfg file named e8.cfg using filezilla. Unplug the usb cable, turn off, remove battery, reinsert battery and turn on.
Waalaaaahhh I had E8 specs on my E4. I did not have to replace the common_dll.dll file or do anything with it.
This upgrade only worked for the resolution. I will attempt menu upgrade at another time but all is good now.
Thank you signal32 for putting me into the right direction.  :-+

(http://i.imgur.com/l3eX4m4.jpg)

^ it actually looks better than the picture provided. Output picture looks a little compressed to me compared to live.
Also with older firmware the FLIR logo stays with the CRC01 upgrade compared to the v2.3.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gotrice on July 04, 2016, 01:03:51 am
my Flir E4 just arrived, it came with software 2.11 and model 1.2L. i cant exactly find a guide to hack it with software 2.11. do i have to downgrade the software, just like for version 2.8? i did noticed a few people have been successful hacking software 2.11...

if someone can help me with a step by step guide to hacking my E4 it would be greatly appreciated. thank you

hey, i will gladly pay someone to help/guide me in hacking my e4... there is't really a step by step guide for firmware 2.11, so i don't want to mess around and  brick my new precious camera :D. thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 04, 2016, 04:28:31 am
gotrice:

What operating system are you running on? Did you install Flir drivers? Did you install Flir Tools? Did you install python and then restart? Download the 2.11.0 custom hack ZIP provided by user 2lps and extract those 3 folders into your root C:\ directory. Can you get this far? Where are you getting confused?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 2lps on July 04, 2016, 12:27:42 pm
Here is my decrypted conf.cfc for 2.11. It has all the menu hack options. If someone wants to try it, just put your ID and CRC03 at the bottom, instead of the xxxxxxxx. There is an empty row at the end, which you need to preserve. Then use cfccfg_V2 to encrypt it (cfccfg_V2.py <put your SUID here> conf.cfg conf.cfc) and copy it to the camera. Then do a hard reset.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 04, 2016, 02:36:00 pm
Finally I got my E5 FW2.3 hacked.

The reshack worked like a charm with the CRC03 and ftool decryption and encryption method, but the menuhack got me working. I now have a vast range of new options including zoom but I'm missing the manual temperature scale, only have the auto and lock option.

I've used the guide and archives for the menuhack from a message of janekivi (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg577970/#msg577970 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg577970/#msg577970))

Thanks for this important source of knowledge.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Dynamics on July 04, 2016, 04:28:19 pm
Sweet dude, enjoy your newly valued $4000 instrument =D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 05, 2016, 12:42:46 am
Does anyone know how to get the manual temp scale on the menus?

Thanks again
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 06, 2016, 03:55:18 pm
Does anyone know how to get the manual temp scale on the menus?
Allegedly yes: http://www.ebay.com/itm/-/291804070356 (http://www.ebay.com/itm/-/291804070356)
"New-In-Box with calibration certificate dated May 2016" (implying firmware 2.11)
"Temperature Scale:
Auto
Manual (set upper temp, lower temp or shift both + or -)"

It might also be possible that he copy-pasted over the alleged hacks from a previous firmware-version hack and didn't double check that the manual temp scale is there. Or it might just be that it's downgraded to 2.3 and he's hoping you won't hit the ROC issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 11, 2016, 08:22:59 am
Does anyone know how to get the manual temp scale on the menus?

Thanks again
I have hacked my E4, it is 1.2L with firmware 2.11, both resolution and menu hack work perfectly, including the manual temp scale and zoom !
Thank you everyone!

For resolution hack:
I follow the guide ( http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)) and use the script pack from 2lps (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)).   

For menu hack:
I didn't  use the python script. I modify the config.cfc as 2lps  (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993)) and replace it manually.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 11, 2016, 07:26:57 pm

I have hacked my E4, it is 1.2L with firmware 2.11, both resolution and menu hack work perfectly, including the manual temp scale and zoom !
Thank you everyone!

For resolution hack:
I follow the guide ( http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)) and use the script pack from 2lps (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)).   

For menu hack:
I didn't  use the python script. I modify the config.cfc as 2lps  (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993)) and replace it manually.

That's great difxati! Should I unhack my 2.3 E5 before upgrading or could I just upgrade to 2.11 and then re hack the res or the menu depending on what's missing?

I can't find the cfccfg_v2.py. I only manage to find the cfccfg.py


UPDATE:

After update from 2.3 to 2.11 (previously un hacking menu in 2.3) the reshack survived.

I use the 2lps to hackmenu with the scripts but the reshack dissapears and the camera turns to black after loading bar ends. The thermal image is displayed while the bar loads, but then fades to black. I run the menu restore.fif and the camera works (without image mode) and if I replace the conf.cfc with the previous version I restore the reshack and the image mode.

I'm not being able to perform the menuhack... Any ideas? Should I downgrade to 2.3?

UPDATE 2:

Manage to find the cfccfg_V2.py on the thread. However I cannot make it work.

Here is the screen output:

"C:\Python27>cfccfg_V2.py 0x2A2A5802 0x02D55113 conf.cfg conf.cfc
usage: C:\Python27\cfccfg_V2.py suid fileIn fileOut"

Where am I messing it up?

Best,
Pepe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 12, 2016, 03:45:45 pm
UPDATE 2:

Manage to find the cfccfg_V2.py on the thread. However I cannot make it work.

Here is the screen output:

"C:\Python27>cfccfg_V2.py 0x2A2A5802 0x02D55113 conf.cfg conf.cfc
usage: C:\Python27\cfccfg_V2.py suid fileIn fileOut"

Where am I messing it up?

Best,
Pepe
you need your "suid" to run the cfccfg_V2.py  script for decrypting the cfc to cfg or encrypting cfg back to cfc

how to find your suid:
Probably for the menu, you can just apply the menu hack.

The ftool is for the 1.x version of conf.cfc. For 2.x you can use cfccfg_V2: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959) (there is a link to the original post of how to use it - https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600))

To get your SUID:
0. Put the camera into RNDIS mode
1. Open the command prompt and telnet to the camera:
telnet 192.168.0.2

You will gain access to the FLIR Command Line Interpreter

2. CD to FlashFS/system/

\>cd FlashFS/system/

3. Execute suid.exe
\FlashFS\system\>suid

The SUID necessary for cfccfg_V2.py will be printed.
I use "Putty"(a software) to send telnet command.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on July 12, 2016, 08:06:23 pm
you need your "suid" to run the cfccfg_V2.py  script for decrypting the cfc to cfg or encrypting cfg back to cfc

Hi difxati, I got my SUID while decrypting the conf.cfc isn't it something like: 0x2A2A5802 0x02D55113?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sterlinggold on July 14, 2016, 05:17:25 am
Amazing, I got an E4 with 2.11 from Amazon Warehouse for 740. Used the FLIR_E4_2.11.0_hack.zip from 2lps. High res is Da-Biznez and the full menu with zoom and rainbow color scheme is outstanding. I used the latest flir tools package and latest 64 bit drivers on win 7 64. Followed the standard steps from fubar and all worked great.
Made my day Ya'll.
Thanks so much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 18, 2016, 11:52:36 am
my ds250C_we_ap_fi_le_static.gan and ds250C_we.crs
 :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 18, 2016, 12:59:21 pm
very interesting

How good works the bad pixel mapping with of whole line?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on July 18, 2016, 01:16:06 pm
my ds250C_we_ap_fi_le_static.gan and ds250C_we.crs
 :palm:

Owch - that's from the factory?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 18, 2016, 01:21:39 pm
That doesn't look good!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 18, 2016, 01:29:40 pm
There are lots of vertical bands when shooting at area with even temperature. The corrected dead pixel line becomes one of them so you won't differentiate it(pic 114).

pic115 is the best scenario that no vertical bands at all
pic114 is the worst case
pic136-138 are the results after turning off the dead pixel map

There is always a black point on the lower part (dust?)
I am not quite happy with my E4 :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 18, 2016, 01:35:05 pm
my ds250C_we_ap_fi_le_static.gan and ds250C_we.crs
 :palm:

Owch - that's from the factory?
from the factory
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 18, 2016, 03:10:10 pm
Thanks for the great images.

After playing around with Flir Tools I say, that you have more trouble with the large dust grain, as with the bad pixel line.
The Flir bad pixel mapping works great.

The vertical bands in image FLIR0114.jpg are typical an all Exx / Ex images with low temperature span.
I'm not sure, if this is a result of the NUC (non uniformity image correction) or of the column noise from microbolometer.

Maybe the lines are a little bit  curved...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 18, 2016, 04:34:12 pm
Thank you for your explanation. That makes me feel better if the vertical bands are normal.
BTW, can I set when cold boot up it jumps to thermal mode directly instead of MSX mode?
And is it possible to assign short cut to a key such as locking the temperature scale or change to "no measurement"?
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on July 18, 2016, 09:20:39 pm
BTW, can I set when cold boot up it jumps to thermal mode directly instead of MSX mode?
maybe, but i am not sure.
And is it possible to assign short cut to a key such as locking the temperature scale or change to "no measurement"?
Thanks.
with the FW 1.22 and below, yes. You have to extract the facet_z3.rcc files and than you can change files like "Button.qml".
for example, a large press on the left button (archive) will perform NUC. a large press on the right button (back) does nothing.
there you can implant a shortcut... but its many work:
-change something
-repack to .rcc
-upload to camera and replace the existing
-restart the camera
-try
... sometimes maybe a black screen if you make a mistake.
but i am not sure... maybe FW 2.xx prevent changes like this, i don't tried  :-//

I think its more easy to implant a small micro controller board with a uart connection to the Camera pcb (debug port). than you can build in your own extra buttons with extra functionality.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 20, 2016, 03:53:37 am
After tearing down the e4 into pieces and blow the sensor and filter with direct air, I can still see a dark spot at the lower part.
Can I use 70%IPA to clean the sensor and the filter? Will it damage the coatings?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on July 20, 2016, 10:17:07 pm
Can I use 70%IPA to clean the sensor and the filter? Will it damage the coatings?
i don't know... i did never try it.
But if you can't see dirt on the Sensor window, maybe the calibration is the problem.

If flir has dust or something else on the sensor while calibrating, this will filtered in the calibrated image.
but if the dust fall down, you see the spot again.

download your map from camera an analyze it...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bill W on July 20, 2016, 10:25:46 pm
Is it a hot spot looking at a cold object and cold spot when looking at a hot object ? (this is dust on, so you should see it as Joe says)
or the reverse  (this is dust falling off after calibration)

Otherwise it could just be an area of 'very different' on the sensor where the factory calibration is doing so much correction that residual errors are left visible in the low contrast / high gain scene.  )114 looks more like an uncorrected sensor image than a corrected image.

Bill

www.fire-tics.co.uk (http://www.fire-tics.co.uk)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 21, 2016, 01:55:00 am
Can I use 70%IPA to clean the sensor and the filter? Will it damage the coatings?
i don't know... i did never try it.
But if you can't see dirt on the Sensor window, maybe the calibration is the problem.

If flir has dust or something else on the sensor while calibrating, this will filtered in the calibrated image.
but if the dust fall down, you see the spot again.

download your map from camera an analyze it...
I have uploaded the map
Can I modify the calibration map to mask that spot?
Is it a hot spot looking at a cold object and cold spot when looking at a hot object ? (this is dust on, so you should see it as Joe says)
or the reverse  (this is dust falling off after calibration)

Otherwise it could just be an area of 'very different' on the sensor where the factory calibration is doing so much correction that residual errors are left visible in the low contrast / high gain scene.  )114 looks more like an uncorrected sensor image than a corrected image.

Bill

www.fire-tics.co.uk (http://www.fire-tics.co.uk)
When my E4 just come out from factory, the spot disappears on cold object( internal of a fridge) and hot object (a tea pot) but appears as a fade cold spot @2x°C.

After cleaning (just blow the lens, the silvery window and the sensor with air. By doing so I can confirm the spot comes from the sensor), it appears as a solid cold spot @2x°C, but almost disappear on hot object and appears as a " very solid cold spot" on cold  object( internal of a fridge)
I can see it even turning off the dead pixel map. Is it possible that I make the dust embed "deeper" on the sensor surface by blowing air on it? Or the air pressure intensify the sensor defect on that spot?
Can I use other mechanical method(wipe it with alcohol or using adhesive tape to stick away dust) to clean the sensor surface ?

update: I used alcohol and adhesive tape to clean the sensor with power on. The spot is not related to dust as it cannot be wipe or stick away. I think it is a bunch of defective pixel that measure temperature lower than the normal. So anyways to update the calibration map or data(attached are the 4 map file and the calib.rsc) to at least make the spot less visible? Or it can only be done by flir? Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 21, 2016, 10:23:57 am
I know, you cleaned your sensor from dust
... but I found an old post as entry point  ;)
dust on image see here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66900;image)
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392)
I took the camera apart as per mikes instructions and used a camera sensor dusting ball to clean it after which the spot was gone.


and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877)

from Ex manual:
(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=242330;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 21, 2016, 10:53:23 am
I know, you cleaned your sensor from dust
... but I found an old post as entry point  ;)
dust on image see here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg329239/#msg329239)
(https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=66900;image)
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg337392/#msg337392)
I took the camera apart as per mikes instructions and used a camera sensor dusting ball to clean it after which the spot was gone.


and
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg345877/#msg345877)

from Ex manual:
(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=242330;image)
how about the sensor? not the lens, not the covering filter.
I used 70% IPA to wipe the sensor and also adhesive tape to stick away any dust on surface when power on. I thought the sensor would die instantly but it survived. Its too bad that the spot remain there. The dust particle may be inside the sensor or it is not dust at all?
And can I tweak the calibration file to make it less visible?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 21, 2016, 11:57:57 am
Please be aware that you are not touching the sensor itself when cleaning a microbolometer. You are touching the window that sits in front of the very delicate VOx microbolometer pixel. This window is made from similar material to the lenses and must be treated with respect. Saying that IPA may be used. I recommend you use pure IPA as the 70% stuff is rubbing alcohol and contains water. Water is not a great contaminant to have in the IPA.

I have never applied any form of tape to a lens of sensor. Depending upon the adhesive, such could be a bad idea leaving residue or, if very sticky, apply unwelcome forces to the microbolometer window. There may be specialist tapes for such use but I would not know where to buy it.

One way to determine whether you have contamination of the microbolometer or defective pixels is capture an image that shows the defect and zoom in to it to see the pixels. Look at whether it is a defined cluster of pixels or more of a blurred edge blob. The latter can indicate dust contamination but sadly the cameras image processing can make this test challenging. I used this technique to prove that my TESTO camera has 3 visible dead pixels. They stand out plain as day when I zoomed into the image to see individual pixels. They were so well defined that they could not be dust. Dust casts a shadow on the pixels below. Dead pixels are very sharp edged.

I have a cluster of 4 dead pixels on one of my E4 cameras and the dead pixel map has captured them. As such they cannot normally be seen in images.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on July 21, 2016, 01:01:27 pm
I've had success cleaning dust of my E4 sensor using a standard digital camera cleaning kit.
http://www.ebay.co.uk/itm/Full-Frame-CCD-CMOS-Digital-Camera-Sensor-Swab-Cleaning-Kit-24mm-Vacumm-DC581-/161959710582?hash=item25b58d0f76:g:aDQAAOSwZetXOVm3 (http://www.ebay.co.uk/itm/Full-Frame-CCD-CMOS-Digital-Camera-Sensor-Swab-Cleaning-Kit-24mm-Vacumm-DC581-/161959710582?hash=item25b58d0f76:g:aDQAAOSwZetXOVm3)
Or similar.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 21, 2016, 03:41:41 pm
Thank you for all of the above suggestions.
I clean the sensor surface  many times and it looks clean and dust free. The spot is still there. May be it is inside the sensor module.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 21, 2016, 03:57:34 pm
Have you checked the lens?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 21, 2016, 04:09:35 pm
Of course.
You can see the photo above, without lens and the windows, only the sensor and the spot remains there
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on July 21, 2016, 04:26:13 pm
Tiny dust marks can be near impossible to see but could be dirt inside.
The sensor has a 10 year warranty from Flir (2 years on rest of camera). May be best to reset any software modifications and send to Flir.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 21, 2016, 07:27:25 pm
Tiny dust marks can be near impossible to see but could be dirt inside.
The sensor has a 10 year warranty from Flir (2 years on rest of camera). May be best to reset any software modifications and send to Flir.

The problem is, that speck could have been there from factory, but since the detector is cropped, it wouldn't be apparent to anyone thinking they had just bought a camera with 80x60 - how would you explain it to FLIR that you hacked it to full resolution and discovered the spec?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 21, 2016, 07:38:41 pm
The problem is, that speck could have been there from factory, but since the detector is cropped, it wouldn't be apparent to anyone thinking they had just bought a camera with 80x60 - how would you explain it to FLIR that you hacked it to full resolution and discovered the spec?
The sensor is not cropped(if it was the E4/E6/E8 would have different field of view's), they either scale down the image or only use some of the pixels. Anyway that spot looks big enough that it would affect even the non-hacked version. Perhaps difxati can confirm if the spot was present when the camera was not hacked.
The thing that I'm wondering about is how aggressive are they with turning down warranty. They might claim that this is actually not a sensor issue, that it's a calibration issue which would have went away if the camera was sent in for calibration.
They have no way of verifying if the camera is still covered under warranty, you have to contact support and ask them.
Also they have a minimum $150 evaluation charge if you decline any repair ($150-$900) which seems kind of steep to me.

What are ppl's experiences on warranty-related issues ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on July 21, 2016, 09:11:00 pm
I have looked at your maps...
ds250C_we.crs
ds250C_we_ap_fi_le_static.gan
Using my DevTools:
http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder (http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder)

the first looks ok, but the Second has a calibrated Spot at this point you see in your picture.

But... why the Spot is at another place compared to the fist image that tomas123 found?  :-//
i make a red rectagle from Spotcenter to the dust point.
Additional... the old Picture with the near spots as a "hotspot" (color level higher), the other you send is a "coldspot" (color level lower)...
if this is really from the same camera?
May be it is inside the sensor module.
Maybe... but if the dirt falls from his place at the calibration, this place could now receive more radiation and the internal calibration over compensate this...
and this should finish in a Hot spot...
But Maybe... i am just wrong  :blah:
 8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on July 22, 2016, 12:02:23 am
I have looked at your maps...
ds250C_we.crs
ds250C_we_ap_fi_le_static.gan
Using my DevTools:
http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder (http://joe-c.de/pages/posts/programm_dev_tools_133.php#bilder)

the first looks ok, but the Second has a calibrated Spot at this point you see in your picture.

But... why the Spot is at another place compared to the fist image that tomas123 found?  :-//
i make a red rectagle from Spotcenter to the dust point.
Additional... the old Picture with the near spots as a "hotspot" (color level higher), the other you send is a "coldspot" (color level lower)...
if this is really from the same camera?
May be it is inside the sensor module.
Maybe... but if the dirt falls from his place at the calibration, this place could now receive more radiation and the internal calibration over compensate this...
and this should finish in a Hot spot...
But Maybe... i am just wrong  :blah:
 8)

Thank you for your analysis.
The image with orange background is really NOT from my camera, it's an image quoted by Thomas123 to show me how to clean the sensor properly :  )
FLIR114 is before I did any cleaning, the spot was almost disappear on hot and cold object. Only became visible on uniform object that near room temperature.
FLIR146 is after the cleaning. The spot is easily visible at different temperature range, especially on cold object but  almost disappear on hot object (>40 degree Celsius).
I think the spot is always at that location.
update: I added a gif animation below.
Tiny dust marks can be near impossible to see but could be dirt inside.
The sensor has a 10 year warranty from Flir (2 years on rest of camera). May be best to reset any software modifications and send to Flir.

The problem is, that speck could have been there from factory, but since the detector is cropped, it wouldn't be apparent to anyone thinking they had just bought a camera with 80x60 - how would you explain it to FLIR that you hacked it to full resolution and discovered the spec?
And when my E4 @80x60 with noise level 135, that spot is near invisible. (80x60 is almost enough to mask that spot, with noise 135 it masks every thing and its ready to release to the market.They don't need any firmware/hardware lock, just selling such kinds of thing and you wont be happy after hacking/unlock/mod. I hope they didn't introduce "dead pixel generator"  ha haha)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zaelcovsky on July 26, 2016, 10:27:53 am
Is it possible to do same upgrade for the FLIR T-series TIC (T250,  T335,  T365,  T425) or Exx-series (E30, E40, E50, E60)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 26, 2016, 10:48:50 am
Is it possible to do same upgrade for the FLIR T-series TIC (T250,  T335,  T365,  T425) or Exx-series (E30, E40, E50, E60)?

Yes it is! I have had much success with P6xx series, B4xx/T4xx series and even E30.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zaelcovsky on July 27, 2016, 02:44:11 am
This is good news!
And there is any guidelines for this ones here?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 27, 2016, 09:29:54 am
It'll be easier if you state which camera you have. In most cases, it's very similar to the process for the E4 with the old 1.19 firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on July 27, 2016, 11:15:55 am
It'll be easier if you state which camera you have. In most cases, it's very similar to the process for the E4 with the old 1.19 firmware.
yes, all "old" Flir cameras have the same CRC checksum for the config files

I collected here some links for non Ex cameras:
Resolution upgrade Flir E30/E40/E50 to E60 and i3/i5 to i7
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg407320/#msg407320)
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg371680/#msg371680)
  https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg379141/#msg379141)
  you must edit your crc01 inside E60 goodies.zip:
    https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg338671/#msg338671)
  a nice history from E30 (without WLAN)  to E60 (with WLAN)
    https://www.eevblog.com/forum/profile/?area=showposts;u=89829 (https://www.eevblog.com/forum/profile/?area=showposts;u=89829)
   and https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg561266/#msg561266)
watch for alphabetically order
   https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380267/#msg380267 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg380267/#msg380267)
i3/i5: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326229/#msg326229)


see also this thread
https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/ (https://www.eevblog.com/forum/thermal-imaging/flir-e40-upgrade-configuration/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zaelcovsky on July 28, 2016, 09:38:39 am
It'll be easier if you state which camera you have. In most cases, it's very similar to the process for the E4 with the old 1.19 firmware.

I have T335 camera

swcombination 9.2.5
appkit 4.6.1
confkit T335 2.11B
osimgkit 11.6.0
prodkit 4.5.15.5

yes, all "old" Flir cameras have the same CRC checksum for the config files
I collected here some links for non Ex cameras:

OMG thank you for this links!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 28, 2016, 09:40:29 am
I have T335 camera with software version 9.2.5
Is there anything to upgrade on the T335 ?
I thought that it already has the max resolution (320x240). Are there any missing features ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zaelcovsky on July 28, 2016, 10:02:58 am
Yes, resolution is 320x240.
T365 and T425 have some analysis features, Thermal Fusion, 4x zoom (instead 2x on T335).
Also WIFI and Bluetooth functions in menu is disabled on my camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 28, 2016, 12:08:07 pm
Yes, resolution is 320x240.
T365 and T425 have some analysis features, Thermal Fusion, 4x zoom (instead 2x on T335).
Also WIFI and Bluetooth functions in menu is disabled on my camera.

If the camera has the hardware, you should be able to unlock it, however my B400 (which I boosted to B425 specs like video and panoramic mode), does not have the hardware for BT and WiFi.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bookaboo on July 28, 2016, 01:24:07 pm
You should also be able to reduce the noise level on the images on those higher end Flir, even if they have the resolution at max.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 28, 2016, 01:49:04 pm
Code: [Select]
#
# Prodconf - Measurement active + 5 mbox's and 5 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "app B400"
.caps.config.revision text "2.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.downsample bool false
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool true
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 0
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8

That is an example of the config file I pulled off my B400. You may find the gui.cfg file of more use however, as this is where most features are enabled:

Code: [Select]
.caps entry
.caps.config entry
.caps.config.name text "GUI B400"
.caps.config.revision text "2.8"
.caps.config.docToolbar entry
.caps.config.docToolbar.enabled bool true
.caps.config.docToolbar.sketch bool true
.caps.config.docToolbar.textComment bool true
.caps.config.docToolbar.voiceComment bool true
.caps.config.emissivity entry
.caps.config.emissivity.enabled bool true
.caps.config.emissivity.table text "BCAM"
.caps.config.emissivity.tableFile bool true
.caps.config.fusion entry
.caps.config.fusion.aboveActive bool false
.caps.config.fusion.belowActive bool false
.caps.config.fusion.enabled bool true
.caps.config.fusion.picInPicFusion bool false
.caps.config.fusion.pipPositionLocked bool false
.caps.config.fusion.thermalFusion bool true
.caps.config.measure entry
.caps.config.measure.enabled bool true
.caps.config.measure.objParams entry
.caps.config.measure.objParams.enabled bool true
.caps.config.measure.objParams.setReflected bool true
.caps.config.modes entry
.caps.config.modes.enabled bool true
.caps.config.modes.program bool false
.caps.config.modes.panorama bool false
.caps.config.modes.simultaneous bool true
.caps.config.modes.video bool true
.caps.config.save entry
.caps.config.save.enabled bool true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KenGaler on July 28, 2016, 03:06:46 pm
Hi all,

I thought I'd add my 0.02.  I just got an E4 and need it to focus on PCBs so I decided to do that using the external lens.  I wound up getting a 1" Dia 55mm FL from ebay.

http://tinyurl.com/h4glh62 (http://tinyurl.com/h4glh62)

I made some tweaks of George80's lens holder design to fit the larger lens and other minor changes.  Attached are the files.  I had to make some adjustments to accommodate the plastic shrinkage.  The lens just snaps in.  I used PLA on a Lulzbot Mini.  I included the Solidworks part file in case someone wants to make changes.

Regards,
Ken
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on July 28, 2016, 04:18:16 pm
I thought I'd add my 0.02.  I just got an E4 and need it to focus on PCBs so I decided to do that using the external lens.  I wound up getting a 1" Dia 55mm FL from ebay.
Nice, does anyone know if there is an after-market cheap lens that you can add to the E40 in order to increase the FOV ( From 25 to say 45 ). FLIR has one but it's 1K+ O.o.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 28, 2016, 04:48:13 pm
Sadly the only lens that is cheap and simple for a thermal camera is a close-up lens. This is because we are basically providing the camera with reading glasses as though it was Hyperopic  ;D   I learnt this technique way back in my early days of working with both visible light and thermal cameras. Only one lens element is needed and thanks to the low cost Chinese ZnSe CO2 laser lenses, it is cheap to do.

I own X2 and X0.5 FLIR lenses for my PM series and, as you say, they are scary prices. They contain at least two lens elements and are precision optics. Sadly I know of no simple and cheap way to make a X0.5 lens even if willing to accept less than perfect performance. It is the challenge of finding the required optical elements that match eachother for the desired beam path through the auxiliary lens.

I may have some X-Rays of my FLIR X0.5 lens to show the shape of the lens elements required. I will take a look.

Best Wishes

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hikanio on July 28, 2016, 05:17:03 pm
I was lucky to get the Flir wide angle lens with 45° fov for $500 on ebay recently and it came even with a tools+ licence, a ResearchIR sw key and a tripod adaptor.
And this lens improved the optical quality of my E30 considerably, the slight focal error on the left side of the picture is gone with this lens.
Besides this lens allows to get even closer than 5cm to an object and still get it into focus.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 28, 2016, 05:28:25 pm
@hikanio,

That was a great buy for your camera.

Please let me know if you ever decide to sell your ResearchIR HASP licence.

Best Wishes

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: trevwhite on July 28, 2016, 09:04:39 pm
Do you get any difference in temperature measurements with the lens compared to with out?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hikanio on July 28, 2016, 09:31:24 pm
Do you get any difference in temperature measurements with the lens compared to with out?

Actually I couldn't find any difference in the temp readings, no matter if I configured the lens in the camera settings or not. The only recognizable change when I activate the add on lens in the setting is that I get a "45° FOV“ display on my screen and thermal fusion and pip get deactivated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: trevwhite on July 28, 2016, 10:00:31 pm
Apologies, my response was unclear and maybe a bit slow. I meant to direct my message at KenGaler
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KenGaler on July 28, 2016, 10:23:10 pm
All,

OK, so I was able to do the res and menu hacks on my new E4 that was at V2.11.0.   Everything works as planned.  The only trouble was from not having any 32bit machines here (out of about 15), so I setup Win7 32bit in VirtualBox.   After a half day of pulling my hair out, I was never able to get the E4 to connect to the guest machine.   The host wouldn't release it.  I went all over the VirtualBox forums and found all sorts of fixes but none worked. 

I gave up and did it on my main machine running Win7 64bit and it worked just fine.  Blood pressure back to normal. 

Ken   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KenGaler on July 28, 2016, 10:32:39 pm
Apologies, my response was unclear and maybe a bit slow. I meant to direct my message at KenGaler

Now that I have it all updated I'll be looking into how it effects the temp readings.  I'll post the results.

Ken
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Relaxe on July 29, 2016, 07:27:24 pm
Does anyone know how to get the manual temp scale on the menus?

Thanks again
I have hacked my E4, it is 1.2L with firmware 2.11, both resolution and menu hack work perfectly, including the manual temp scale and zoom !
Thank you everyone!

For resolution hack:
I follow the guide ( http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)) and use the script pack from 2lps (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)).   

For menu hack:
I didn't  use the python script. I modify the config.cfc as 2lps  (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993)) and replace it manually.

Hello All,

Just successfully hacked my E4 1.2L with firmware 2.11, following difxati instructions above.
Thanks to everyone who made this possible!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: trevwhite on July 29, 2016, 11:36:28 pm
do you get manual zoom and temperature scale adjustment? When I did mine with firmware 2.3 I do not think I have all the menu options
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Relaxe on August 01, 2016, 01:07:09 pm
do you get manual zoom and temperature scale adjustment? When I did mine with firmware 2.3 I do not think I have all the menu options

I have the manual temperature scale, but I did not find the zoom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KenGaler on August 01, 2016, 01:43:55 pm
I have the temp scale and zoom but, am I suppose to have a batt level indicator?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Relaxe on August 02, 2016, 02:19:55 am
Small note:
I did not perform the "remove RNDIS" .fif optionnal procedure.
Hence, after taking some nice shots and wanting to transfer them to my boss, I plugged tghe camera's USB to see a network interface.

Problem is, my Windows 10 x64 machine did not acquire an IP address from this interface. I tried to manually set it to 192.168.0.1, to no avail.

I tried on two different machines with the same behaviour. I tought I lost access to the USB port forever! An almost bricked with the camera stuck in non-functionnal RNDIS.
The Win7 x86 machine I used to perform the hack was hastly updated to win10 64x straight after the procedure.
I managed to find a netbook with windows 10 32 bits. It somehow worked like a charm on it. I was then able to perform the "Remove RNDIS" procedure

TL;DR: I think there is an issue with the network driver under windows 10 64 bits.
Using windows 10 32 bits seems to work for the network connectivity.
Maybe it's the reason people recommend against using a x64 windows to perform the hack.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sailah on August 04, 2016, 07:02:34 pm

For menu hack:
I didn't  use the python script. I modify the config.cfc as 2lps  (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg975993/#msg975993)) and replace it manually.

Forgive me, I'm a complete NOOB here.  I've read through the thread a bunch.  Seem to have all the files I need.

My camera is a 2.11 as well.  I have copied the 2LPS files to the c:\ location.

Could someone please explain what is meant by the above quote?  I opened the conf.cfg file and can enter my information where the xxxxxxx is.  But this is where the wheels come off.  How do I run that script?  I have used python all of once in my life and that once was today  :palm:

Thanks for the help and free lobster if you are near MA and want to do this for me!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sailah on August 05, 2016, 01:35:22 pm
Success!

I set up an old XP computer, however could not get Filezilla to run on it.  I have a Windows 7 x64 machine so I said screw it and attempted on it.

The res hack went smoothly.  The menu hack was successful but had a couple bumps.  I could not get the camera to establish connection to run the FLIRinstallnet.exe procedure to load the 2.3.0 menu.  After 3-4 attempts of hard restarting I finally got connection and installed the menu again.  Worked great and I'm up and running.

Image quality is superb, thanks for the efforts of everyone who participated.  I know as a complete computer noob that I would never have been able to attempt any of this without a step by step guide.  So thank you!

Mine was a 2.11 camera bought from Grainger this week.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Relaxe on August 05, 2016, 05:58:03 pm
Forgive me, I'm a complete NOOB here.  I've read through the thread a bunch.  Seem to have all the files I need.

My camera is a 2.11 as well.  I have copied the 2LPS files to the c:\ location.

Could someone please explain what is meant by the above quote?  I opened the conf.cfg file and can enter my information where the xxxxxxx is.  But this is where the wheels come off.  How do I run that script?  I have used python all of once in my life and that once was today  :palm:

Thanks for the help and free lobster if you are near MA and want to do this for me!!

You must use cfccfg_V2.py (search the forum to find it)
With it, you can encrypt the conf.cfG you have to a conf.cfC.
When done, BACKUP TO ORIGINAL FILE, and copy your's over the one in FlashFS\system\appcore.d\config.d (trough filezilla)
Shut down the camera, remove/replace battery and voilà!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on August 08, 2016, 06:38:47 pm
Forgive me, I'm a complete NOOB here.  I've read through the thread a bunch.  Seem to have all the files I need.

My camera is a 2.11 as well.  I have copied the 2LPS files to the c:\ location.

Could someone please explain what is meant by the above quote?  I opened the conf.cfg file and can enter my information where the xxxxxxx is.  But this is where the wheels come off.  How do I run that script?  I have used python all of once in my life and that once was today  :palm:

Thanks for the help and free lobster if you are near MA and want to do this for me!!

You must use cfccfg_V2.py (search the forum to find it)
With it, you can encrypt the conf.cfG you have to a conf.cfC.
When done, BACKUP TO ORIGINAL FILE, and copy your's over the one in FlashFS\system\appcore.d\config.d (trough filezilla)
Shut down the camera, remove/replace battery and voilà!

I'm not able to run the cfccfg_V2.py It keeps asking for my SUID even though I type it in. Is there someone that could encrypt the file for me, if I the conf.cfg with the camera ID and the CRC03 in it and my SUID?

Thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on August 08, 2016, 06:41:09 pm
Is there someone that could encrypt the file for me, if I the conf.cfg with the camera ID and the CRC03 in it and my SUID?
Upload it somewhere and PM it to me + the info.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on August 09, 2016, 04:23:20 pm
Upload it somewhere and PM it to me + the info.

Thanks Signal32!

I have been messing around again and got the reshack (already had) and the menu for the E5 2.11. However the manual temp scale is still missing, but everything else works including zoom. Did manual CRC03 calculation and ftool encryption. Did not try to use the cfccfgv2.py this time.

I have compared the 2lps conf.cfc with mine, and I have several lines missing in my original file:
.caps.config.ui entry
.caps.config.ui.image entry
.caps.config.ui.image.adjust entry
.caps.config.ui.image.adjust.enabled bool  true
.caps.config.ui.image.adjust.manual bool  true

I did include them on my conf.cfc prior encryption but then it ruined the reshack. Undid it and the reshack was restored.

Do this have to do with the manual temp scale?

I think I'm gonna leave things as they are since the camera has improved a lot since the factory settings.

Best!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Platonas on August 17, 2016, 06:41:09 am
Hello people,
Does this hack (upgrade) work on the Flir E5 or only on E4? 

Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on August 17, 2016, 10:21:48 am
Hello people,
Does this hack (upgrade) work on the Flir E5 or only on E4? 

Thanks.

It should work on the E5 also.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: that1guy on August 21, 2016, 12:29:49 am
I did the resolution hack on my E4 (2.3.0) according to the instructions at http://fubar.gr/hacking-the-flir-e4/. (http://fubar.gr/hacking-the-flir-e4/.)  But the image quality got worse after the hack - there's a halo effect of extra grainy pixels on the outter edges of the image:  with shutter closed:  http://i.imgur.com/ZHueL9K.jpg (http://i.imgur.com/ZHueL9K.jpg) - notice the grainy pixels around the boundary.

I ran the revert command (python apply.py revert 192.168.0.2), then hard reboot,  but the image is still weird.  I backed up files on the camera via ftp before hack attempt.  So I manually uploaded common_dll.dll and conf.cfc back to the camera.  Image is still weird.

Eeek!  Help please.

ps - I did this hack on a different 2.3.0 camera about a year ago - everything worked perfectly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peterflir on August 21, 2016, 01:12:02 pm
Ok many thanks guys here for providing all information. I have bought a second hand almost unused I3 camera with 6.5.3 firmware. After trying a lot last night it works like the I7.  ( Biggest problem was the CRC and CRLF placing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on August 23, 2016, 11:20:28 pm
Hello people,
Does this hack (upgrade) work on the Flir E5 or only on E4? 

Thanks.

Hi Platonas. It does work on an E5, I have one.

I could not get the manual temp scale setting, but every other feature works great.

Best,
Pepe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: janekivi on August 24, 2016, 07:49:03 pm
Hi there!
Ex software is all the same. Only difference is Conf files for everyone. If You get dll cracked it is the
same file for all of them. You can send it to friend too. Now decrypt conf file and replace all stuff
with required lines, at the end is Your serial. Blind XOR apply is not good if something is not in
required place in crypted conf file. Crypt it back and replace. Now this is only for this camera.
If You get small reso but no noise, then something is wrong and it's not accepting conf.

This way this is working for all of them, even for little poor E8...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikhail076 on August 28, 2016, 07:15:43 am
Hi.
Can anybody help me?
My E4 hangs on Flir logo while it powers on. 
Camera is connecting as ASCO disk (FLIR Bootloader USB device) and contains two files error.txt (empty) and typeinfo.txt (contains some serials and MAC address).
Flir tools says «no camera connected» when i try to update firmware.
I tried to scan network for this MAC but unsuccessfully, tried to copy firmware update files to this disk and there is no result.
I have saved original firmware files for this camera but can not put them on.
What could I do with this issue?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 28, 2016, 12:09:59 pm
Some background to the fault occurrence would be helpful I think.

Did the camera just suddenly stop working or did it fail after an attempted upgrade ? If it just suddenly failed then you could have a hardware issue that no amount of software manipulation or firmware uploads will repair.

A failure during an attempted upgrade or firmware upload is a different and more hopeful scenario. As there are some very clever people on this forum who may be able to help you recover the OS operation.

Is the camera under warranty ? If so, have it repaired by FLIR as they will do so without issue.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on August 28, 2016, 09:41:21 pm
I remind this state a wile ago...
i know no way to fix it yourself  :-//
What did FLIR charge to re-flash your E4 please ? This information may be useful to others who end up with a unrecoverable bricked E4.
Hello,
The Camera is still by FLIR. I hope to receive it in the next 2 weeks.

Hat i have done:
1. Set Camera in RNDIS mode
2. open "FLIRInstallNet.exe" from /bin folder (FLIR Tools)
3. Download old firmware  (flir_ex_pn639_v1.18.7_update_pack.zip) from somewhere in this forum
4. flashing the "Z3comb_v1.18.7.fif"
5. Camera restarts later and was found as new Volume (ASCO 23.9MB)
6. only the FLIR logo was shown and the Asco volume... that's it.
I tried to use the hardware UART with "usbfn RNDIS" but nothing happens.
I copied the files inside the ASCO Volume (see attechment). If I store files there and restart the Camera, the files are disappeared.

I have the theory, that FLIR store some command file there and if the Camera restarts they have additional a working RNDIS mode for reflash.
However, they don't will let us know this...

Is your software going to be available in English please ?
The Software is partly in English (the words are shorter ;) ) but more in German. You can see in Schreenshots.
I could look to make it more Multilanguage... If my kids let me...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 28, 2016, 09:55:32 pm
A 'return to FLIR' case then Joe-C.

Remind me, did they charge you for the 'repair' ?

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on August 29, 2016, 05:59:02 pm
yes, but not directly, i get a invoice over my distributor.
i am not sure, it was maybe around 200 euro.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 29, 2016, 06:52:37 pm
A used E4 in new condition sold on ebay UK today for £380. With used camera prices like that it becomes debatable whether returning to FLIR for repair is still economic. Maybe that was just a low price but prices do seem to be dropping.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikhail076 on August 30, 2016, 09:45:38 am
Camera restarts later and was found as new Volume (ASCO 23.9MB)
Only the FLIR logo was shown and the Asco volume... that's it.
I tried to use the hardware UART with "usbfn RNDIS" but nothing happens.
I copied the files inside the ASCO Volume (see attechment). If I store files there and restart the Camera, the files are disappeared.


This is exactly what I have.
and it seems no warranty.
Really nobody knows how to access the file system?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on August 30, 2016, 12:55:47 pm
From what I remember that's like some sort of emergency boot loader mode that likely requires special files to recover from that have never been seen outside of FLIR before.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Nuzzler on August 30, 2016, 01:27:06 pm
Great teardown!

- Nuzz
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Stereo on September 05, 2016, 11:43:02 am
Hi all!

Have some question. I'm searching hard but not found:

I have successfully upgraded E4 firmware 1.22 to E8, if I now upgrade it to 2.3.0 (show it in Flir Tools) and upgrade to E8 again (new method) can I later downgrade to 1.22 if something going not good?

Thx!!

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on September 08, 2016, 06:23:17 am
As I know, a (simple) downgrade to 1.22 is not possible
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SarahB on September 09, 2016, 01:45:16 pm
Total newbie, it took me 25mins just to register for the eevblog!  :-DD

I just got my E4 software 2.11.0

I've tried to follow through the scattered instructions, have the files but cant get past step 1 concerning how to make it to firmware 2.3

Have mercy on me, I have other skills but this isn't one of them :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: icemanh on September 15, 2016, 11:31:45 am
Dear all

Could you share the v2.3 firmware to me? I tried the download link in inside the thread but it is expired.

Many thanks for your help.


Sent from my iPhone using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sairus on September 15, 2016, 04:43:58 pm
Quote
Could you share the v2.3 firmware to me? I tried the download link in inside the thread but it is expired.
You can use 2.11 hack but if you want 2.3 no problem
https://www.dropbox.com/s/qb9ik2j43h4z4pb/flir_ex_pn639_v2.3.0_update_pack.zip?dl=0 (https://www.dropbox.com/s/qb9ik2j43h4z4pb/flir_ex_pn639_v2.3.0_update_pack.zip?dl=0)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: icemanh on September 16, 2016, 07:00:41 am
Quote
Could you share the v2.3 firmware to me? I tried the download link in inside the thread but it is expired.
You can use 2.11 hack but if you want 2.3 no problem
https://www.dropbox.com/s/qb9ik2j43h4z4pb/flir_ex_pn639_v2.3.0_update_pack.zip?dl=0 (https://www.dropbox.com/s/qb9ik2j43h4z4pb/flir_ex_pn639_v2.3.0_update_pack.zip?dl=0)

Thank you, Sairus.

I will try the 2.11 first, and go to 2.3 if there is any problem.

Btw, I am using Win10 64bit, is there any successful case?  Or I have to go to Win7 32bit?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: thrux on September 23, 2016, 04:32:44 pm
Hello, new to the forum, and new to IR imaging. I've successfully hacked my 2.3 E4 to the upgraded resolution and menus.

However, I'm trying to get the camera out of permanent RNDIS and having some difficulty. I followed the instructions on the fubar site. When connecting the camera to my pc, it will not assign an IP, and I'm getting a "Could not configure ThermaCAM" notification from the taskbar. I tried manually setting and IP, as well as disabling all other network adapters with no luck. I've also searched through this thread, but theres quite a bit of info here, maybe I missed it? Has anyone had any luck with an issue like mine?

EDIT: Finally got it to connect, but when running Remove_RNDIS_Permanent.fif, the camera is seen and connect, installation starts, but I'm getting;

"Camera command rm -rf flashfs/system/appcore.d/factory.d/zrndis.rsc

Received shell command message: Bad command or filename"

EDIT 2: Fixed by deleting zrndis.rsc from flashfs/system/appcore.d/factory.d/ on the camera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: umkumiut on September 27, 2016, 07:43:20 pm
Hello All,
Sorry if I post my issue in a wrong thread... I've bought an E4 recently and successfully 'enhanced' it with the help of this forum - thank you for that.
I noticed some strange noise with high temperature contrast scenes, let's say when the difference between the captured minimum and maximum temperature is above 13-15 Celsius. Dark and less-dark vetical strips appear in cold areas. See on the photos. It is not visible when there is no dark (blue) area on the screen (with iron color sheme).
Is this normal?
Thanks!
PS: HW is 1.2L, FW 2.11.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sofia on September 28, 2016, 10:48:06 am
It is normal. It makes me too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on September 29, 2016, 06:36:37 am
Does anyone have the software (firmware) for cameras E4:
  - flir_ex_pn639_v1.19.8_update_pack.zip
  - flir_ex_pn639_v1.21.0_update_pack.zip
  - flir_ex_pn639_v1.22.0_update_pack.zip

If so, you can share?

Many people update the software version 1.19.8 (1.21,1.22) to version 2.3.0
This update causes malfunction MenuHack.
He wants to make an attempt to downgrade the software version lower than 2.3.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: madtinkerer on October 02, 2016, 09:43:22 pm
I am about to pull the trigger on an E4 and just had some questions.  I have read a ton of posts in this thread and am a little confused. Are guys successfully hacking 2.11 versions, or are they downgrading to 2.3 and then hacking it?  I don't want to pick one up with 2.11 and find out I can't hack it for better resolution.
Thanks
Madtinkerer
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: umkumiut on October 03, 2016, 05:55:35 pm
I am about to pull the trigger on an E4 and just had some questions.  I have read a ton of posts in this thread and am a little confused. Are guys successfully hacking 2.11 versions, or are they downgrading to 2.3 and then hacking it?  I don't want to pick one up with 2.11 and find out I can't hack it for better resolution.
Thanks
Madtinkerer

There is no need to downgrade from 2.11 to 2.3, just use the instructions and the files from 2lps and fubar: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

I've used a PC running Win 7 32 bit without any issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on October 07, 2016, 05:11:09 pm
I remind this state a wile ago...
i know no way to fix it yourself  :-//
What did FLIR charge to re-flash your E4 please ? This information may be useful to others who end up with a unrecoverable bricked E4.
Hello,
The Camera is still by FLIR. I hope to receive it in the next 2 weeks.

Hat i have done:
1. Set Camera in RNDIS mode
2. open "FLIRInstallNet.exe" from /bin folder (FLIR Tools)
3. Download old firmware  (flir_ex_pn639_v1.18.7_update_pack.zip) from somewhere in this forum
4. flashing the "Z3comb_v1.18.7.fif"
5. Camera restarts later and was found as new Volume (ASCO 23.9MB)
6. only the FLIR logo was shown and the Asco volume... that's it.
I tried to use the hardware UART with "usbfn RNDIS" but nothing happens.
I copied the files inside the ASCO Volume (see attechment). If I store files there and restart the Camera, the files are disappeared.

I have the theory, that FLIR store some command file there and if the Camera restarts they have additional a working RNDIS mode for reflash.
However, they don't will let us know this...

Is your software going to be available in English please ?
The Software is partly in English (the words are shorter ;) ) but more in German. You can see in Schreenshots.
I could look to make it more Multilanguage... If my kids let me...

It's seem like boot issue seeing with smartphone or old mp3 reader.
And at this moment it's need some trick to enter download flashing mode like push power button for few sec and plug to USB or a combination button, to perfom a flashing but need one file not separate file like room in smartphone. what do you think?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 18, 2016, 12:05:34 am
Hi
I have FLIR E4 (upgrade to E8). Now I need to buy higher model (with focus). I need to measure a temperature of about 800-900 degrees Celsius. ( sometimes even about 1000 C degree).

Do you even recommend me some good camera model. Budget to 5 thousand pounds. I am looking a rather used camera.

I will be grateful for the advice

Thx gus
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on October 18, 2016, 12:11:28 am
Hi
I have FLIR E4 (upgrade to E8). Now I need to buy higher model (with focus). I need to measure a temperature of about 800-900 degrees Celsius. ( sometimes even about 1000 C degree).

Do you even recommend me some good camera model. Budget to 5 thousand pounds. I am looking a rather used camera.

I will be grateful for the advice

Thx gus
You may wanna start a new thread for this.
One option is somethingng like a FLIR T300 / T360 which sometimes go for 2-2.5k on eBay, but the 1200C option is another 1.7k O.o
http://store.flir.com/product/high-temp-option-1200-deg/t-series-accessories. (http://store.flir.com/product/high-temp-option-1200-deg/t-series-accessories.)
There you can also find what cameras you can apply the options to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 18, 2016, 02:15:53 pm
Thx for answer, I find nic combo on ebay (THERMAL CAMERA P60 witj 3 lens)

http://www.ebay.co.uk/itm/152284869879?ssPageName=STRK:MESELX:IT&_trksid=p3984.m1558.l2649 (http://www.ebay.co.uk/itm/152284869879?ssPageName=STRK:MESELX:IT&_trksid=p3984.m1558.l2649)

I checked the price of lenses. They are very expensive I think the price for this set is quite ok.

Whot You think gus abut this set?



Quote
Hi
I have FLIR E4 (upgrade to E8). Now I need to buy higher model (with focus). I need to measure a temperature of about 800-900 degrees Celsius. ( sometimes even about 1000 C degree).

Do you even recommend me some good camera model. Budget to 5 thousand pounds. I am looking a rather used camera.

I will be grateful for the advice

Thx gus
You may wanna start a new thread for this.
One option is somethingng like a FLIR T300 / T360 which sometimes go for 2-2.5k on eBay, but the 1200C option is another 1.7k O.o
http://store.flir.com/product/high-temp-option-1200-deg/t-series-accessories. (http://store.flir.com/product/high-temp-option-1200-deg/t-series-accessories.)
There you can also find what cameras you can apply the options to.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 18, 2016, 05:10:39 pm
P60 is quite old. It is a very good camera but I would not pay more than £1K for that camera today. I see two lenses and a lens protector in the photo. I bought the two lenses, 0.45X and 2.0X for around £100 to £200 each from the USA.

That camera is a nice set but, IMHO, overpriced in the current market. They cost around £25K new with around £5K per lens and £150 for the lens protector. Those are industrial prices that are never maintained on the used market. Hence their current value of around £1500 on the used market today.

Also, please be aware that this FLIR camera is export controlled and should not leave the UK without checking what, if any restrictions are in place on its overseas shipping. It uses a USA supplied Raytheon sensor detailed in USA ITAR documentation.

In all honesty, I have never liked the PXX series. It looked weird with its 'bent'  design and the external monitor handset seemed a necessity for best ergonomics, but it is messy. Just my personal views though.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 18, 2016, 05:23:07 pm
I see two lenses and a lens protector in the photo. I bought the two lenses, 0.45X and 2.0X for around £100 to £200 each from the USA.

That camera is a nice set but, IMHO, overpriced in the current market. They cost around £25K new with around £5K per lens and £150 for the lens protector. Those are industrial prices that are never maintained on the used market. Hence their current value of around £1500 on the used market today.

Fraser

Can you show me where I can buy the lenses at such prices as you enter. Because I see the cheapest auctions lens 12 degrees for 900. £ 150 will be happy to buy :).


I do not know where you are buying these things in such prices on ebay but there is no such listing.

Regards

Swaggy
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 18, 2016, 07:00:56 pm
I bought mine on eBay.com from the USA. They come up now and then.  Sadly I was the one buying them all in the past whenever they appeared so people did not get a look in. I ended up with two of each and sold a 45 degree to a deserving new owner for £200, which is what I had paid including shipping and taxes at import to U.K.

If your need is urgent you may have to pay a premium, but do not overpay. My PM570, PM575 and PM695 cameras all cost me less than ££800 The PM5xx and PM6xx are well known and respected in the industry. Even FLIR techs admit that these series are the best built and reliable cameras that they have ever made. It is in fact an AGEMA design taken forward by FLIR when they bought AGEMA. They very rarely need calibration due to the stability of the design. A no expense spared camera. Sadly the PXX series cannot be described in the same way.  The later PXXX series are very good and more like the quality of the PM series.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 18, 2016, 07:32:02 pm
I ended up with two of each and sold a 45 degree to a deserving new owner for £200, which is what I had paid including shipping and taxes at import to U.K.
My PM570, PM575 and PM695 cameras all cost me less than ££800 The PM5xx and PM6xx are well known and respected in the industry.

Fraser

You write that you bought these things for very low prices, it had to be great bargains that are sometimes, but very rarely. Is this the moment you are able to show some actual action on a camera or a lens with such low prices?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SWAGGYD on October 18, 2016, 07:37:15 pm
 Sadly the PXX series cannot be described in the same way.  The later PXXX series are very good and more like the quality of the PM series.

Fraser
[/quote]

I do not agree with you. I worked for the PM575 and PM695 in the company of which I worked were these two cameras. I still have a problem with them. The display was replaced after 3 years. In both models, the motor (serwo focus) broke down on the severity. The camera was big and uncomfortable to hold. I had the opportunity to look for a moment at the FLIR P45 (it almost the same as P60), comfortable to hold, better display, faster focus. In addition, the PM575 series is much older to P60. Tomorrow I am going to watch this camera, I will negotiate the price for the 3K I can buy it. Maybe you want to sell your P60 lenses, apparently you do not like it more;).

Regards

SWAGGY
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 18, 2016, 08:41:08 pm
PM and P series share the same lens mount and take the same lenses. They are the original AGEMA PM570 lens design. Some still have PM570 on them.

You appear to have been unlucky with your PM series cameras. Such is not typical though. The guys who service them love the camera series, me included. I reverse engineered the PM series cameras to component level and have a complete set of schematics. If they fail, they are very straight forward to repair. I own three PM570, two PM575 and four PM695. Only one has ever been faulty and that was just a logic buffer IC failure. The EVF does have a weakness. If the camera is dropped, thebacklight transformer breaks away from the PCB. Hard snapping down of the EVF onto the case can also do the same over time. The ribbon cable between the EVF and main PCB is also just as vulnerable to failure as on any camera or camcorder with a EVF that may be elevated.

You like the P series, no problem with that. It is personal choice. Try repairing one though (and they do fail) .... you would be in for a very unpleasant surprise. I will not touch one without an agreed minimum inspection and diagnosis fee as they are pigs to work on. FLIR repair prices are hilarious too.

I hope you get a good deal on the camera and it works well for you. Do not expect to recover anything like your investment though if you pay anywhere near the asking price and then want to sell.

Whatever happens, I hope you enjoy your thermography.

As has been said, maybe another thread is needed for your buying adventure. You have asked a fair question and I have provided a fair comment from an industry insiders point of view.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: icemanh on October 23, 2016, 02:21:32 pm
I got my Flir E4 which comes with v2.11.0 and my PC is win10 64bit... :scared:
Luckily I hacked the E4 successfully without downgrading to v2.3.0

1/ I installed the latest 64bit drivers from Flir
http://cdn.cloud.flir.se/update/device-drivers/1.15.3.0/flir-device-drivers.exe (http://cdn.cloud.flir.se/update/device-drivers/1.15.3.0/flir-device-drivers.exe)

2/ I manually assigned the ip address 192.168.250.1 to infrared interface, instead of DHCP.  The camera ip address will be 192.168.250.2 in this case.

3/ I follow the steps from fubar.gr (http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)) except scripts are from 2lps in this thread (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880))

and the steps are straight forward, no trick.  Enjoy your hack  :-+


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: balti on October 24, 2016, 01:44:49 pm
Hi to all...I'm new here.
Is it possible to hack E5 same as E4?
I'm asking because I can get E5 cheaper then E4.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TargetAlpha on October 26, 2016, 09:24:28 am
Hi there,

last week i bought a Flir i3 on ebay.

To all the german viewers. They are still there. eBay auction: #252458741329
They are sold as used but mine was brand new. Original packaging, completely sealed. Very nice.

So.. I activated the service mode and got the higher resolution of 120x120 (even if it seems to be the newer black version wich should be 140x140?).

The next morning it did a cold boot and was back to the original settings.
I have then followed the guide for permanently upgrading the i3 to the i7. The new menu is unlocked but.. it still cold boots as an i3 with lower resolution and the items in the new menu are not doing anything.

If i switch to service mode it goes to the higher resolution and the new menu entries work. But it still reverts to the normal i3 over night.

This is my new config file.

Code: [Select]
#
# Prodconf - Measurement active + 4 mbox's and 4 spots + 1 isotherm
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i7_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry

.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 4
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 4
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 144
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID 601059583
# CRC01 691a932f

And this is my original config file.

Code: [Select]
#
# ZCam Radiometric - Measurement active + 1 spot + no isotherm + no mbox
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i3_2012"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool false
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 0
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 60
.caps.config.image.settings.fpgaResolution entry
.caps.config.image.settings.fpgaResolution.enabled bool true
.caps.config.image.settings.fpgaResolution.resIR int32 144
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID 601059583
# CRC01 7b6a26f7

My firmware version is 6.5.3

Any help would be appreciated. :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TargetAlpha on October 26, 2016, 06:02:09 pm
Yeah. I just double checked and now i get the same crc as you. No idea what i messed up the first time.
Now it starts up with the i7 settings. Thank you very much!

But good to know that it defaults to some safe settings in case the config isn't correct.

Btw. are there any news in regards to unlocking the full resolution of the i series?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: balti on October 28, 2016, 08:53:19 am
Hi to all...I'm new here.
Is it possible to hack E5 same as E4?
I'm asking because I can get E5 cheaper then E4.

I bought E4 from Farnell and got it with 2.11 firmware.
Was not able to hack it with win 7 64bit, but no problem with win 7 32bit.
I'm happy user now with full resolution...really big difference.
Original E4 has too low resolution, but 320x240 is really nice and of course additional functions are also very usable.
Thanks for the hack... :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on October 28, 2016, 02:26:18 pm
Hi everyone!  A while back I posted my story of buying a used e4 already with 2.3 downgraded, res modded, and ROC, and eventually upgraded to 2.11 with the 2lps method.

The res hack works great on my e4, but the menu hack does not.  I only have a tiny subset of the enhanced menu options.  I'd like to explore trying to get it working once and for all.

I know my SUID, have a complete 32-bit VM with Flir Tools, FileZilla, and all the backups I've ever made.  Is there a good jumping off point to try and figure out what is the deal with my camera?  I've decrypted/encrypted my conf, ui_control, facet.rcc etc. files more times than I can remember and everything "looks" good.  If anything I'd like to at least removed the FLIR logo from the display as it's covering valuable pixels!

Thanks in advance!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: icemanh on November 01, 2016, 07:33:59 am
Hi everyone!  A while back I posted my story of buying a used e4 already with 2.3 downgraded, res modded, and ROC, and eventually upgraded to 2.11 with the 2lps method.

The res hack works great on my e4, but the menu hack does not.  I only have a tiny subset of the enhanced menu options.  I'd like to explore trying to get it working once and for all.

I know my SUID, have a complete 32-bit VM with Flir Tools, FileZilla, and all the backups I've ever made.  Is there a good jumping off point to try and figure out what is the deal with my camera?  I've decrypted/encrypted my conf, ui_control, facet.rcc etc. files more times than I can remember and everything "looks" good.  If anything I'd like to at least removed the FLIR logo from the display as it's covering valuable pixels!

Thanks in advance!

You can do with 64bit Windows. Just install the newest driver from Flir and assign the interface IP address manually.




Sent from my iPhone using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Alex13 on November 02, 2016, 02:02:31 pm
I bought mine E4 on EBay already upgraded to (320x240 & Menu).

Thanks to whole team here, who made it possible.

Mostly, the unit works pretty well, but sometimes I see bunch of hot pixels on top right corner (most pronounced).
Sometime it not appears at all, sometime disappears after N calibrations (most often N=2).

I suspect, that FLIR could use sensors with some defects outside 80x60 area.
Anyway, the overall quality is great, much better than Flir One G2.

I noticed, when I making series of photos (same subject), N is good quality, than N+1 ... N+m have lots of grain, than good again.

So, I have 3 questions, may be somebody could help:

1. Can I force calibration, pressing some button (like on Exx series)?
2. May be I can do something more permanent ( kind of remapping)?
3. What can it be (especially about series of photos in almost identical conditions)?

Here the examples: (1 - with this problem, 2 - without this problem, 3 - with this effect only, almost uniform surface )

With proper stacking, the quality is amazing:(4 th example)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on November 09, 2016, 09:54:31 am
Without a known spreading of temperatur scale it's not possible to evaluate the "hot pixels on top right corner".
While warm up there are some drifts between the NUCs.

1. Can I force calibration, pressing some button (like on Exx series)?

on my Flir Exx I wrote a trigger for a button, while hooking a function (here the reversed palette)

On the applaunch.dat file append a dos script

Code: [Select]
cmd /C \StorageCard\boot1.cmd
boot1.cmd:
Code: [Select]
set /p trig1=<\StorageCard\boot\trigger1.txt
...
:label1
delay 5
rls ui.userSettings.PaletteReversed >\StorageCard\boot\trigger.txt
set /p trig=<\StorageCard\boot\trigger.txt
if "%trig%"=="%trig1%" goto label2
goto label1

:label 2
# your code
# a sample for triggering the nuc
rset .image.services.nuc.commit true
...

trigger1.txt
Code: [Select]
PaletteReversed             true
This works fine on Exx.
On Ex there are some barriers, like the checksum in applaunch.dat
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigBird007 on November 14, 2016, 11:13:24 pm
Wanted to say thanks for all the hard work and thanks to all that took the time to contribute to this wonderful hack...

I promised myself I wouldn't register until I had upgraded my camera!! Talk about motivation to actually read and solve the problems myself haha.
Managed to run into all of the issues that one runs into, especially with what limited knowledge I have on these topics.

So yes, success with the E4 2.11 freshly manufactured a few months ago. Thanks to GEMROUGH for posting a step by step.
The link set up by MATMOE and reposted by TMUSHY for the downgrade files no longer works (expired) but there was no need to down grade.

Big HUGE thanks to 2LPS and the post regarding 2.11 with new files.

Main route I took was:
Found out my camera didn't like the Permanent RUNDIS route so used the Temp one to get started.
Used an old windows 7 32 bit laptop
Backed up my E4 system files using FileZilla (must do!)
Found out that the camera IP was constantly changing so had to watch out for that, otherwise I was dead in the water.
Was using the 2.3 method which doesn't work on the 2.11 so Python wasn't having any of that.

After many many man MANY pages of reading I am happy to say I have something usable. To be honest I've always wanted one of these but not with 15x15 or recently 60x60 or 80x80 as they are really un-usable.

SO as irony has it, Flir got a sale out of me strictly due to this hack!!!

I'll keep an eye out for newbies running into trouble on here in case I can lend a hand. Not Sure if it'll be any use, but I'm sure all the regular contributors are due for a break.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on November 22, 2016, 06:22:33 pm
FLIR is offering a $100 discount on the E4 for Black Friday: http://flir.com/blackfriday2016 (http://flir.com/blackfriday2016)

Just an FYI.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Samogon on November 24, 2016, 03:57:29 am
I succeed in hack of E4 on Windows 7 64-bit. No hiccups. May suggest that i ran all installations and command in elevated mode (run as Administrator)
Kudos to FUBAR
 :clap: :clap: :clap:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sam1275 on November 24, 2016, 03:27:59 pm
Btw. are there any news in regards to unlocking the full resolution of the i series?
I think it maybe not possible to get 320x240 on ix because the lens imaging area is smaller than the FPA, but I'm also looking for a method to upgrade 120x120 to 140x140, but I still don't get the critical file.
Here's some post about hacking my Flir i5:
https://www.eevblog.com/forum/thermal-imaging/please-anyone-help-me-hacking-my-flir-i5/ (https://www.eevblog.com/forum/thermal-imaging/please-anyone-help-me-hacking-my-flir-i5/)
You can follow my method to gain a lot more image quality in the same resolution, and hope we can find the 140x140 bin file one day.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 47MHz on November 26, 2016, 08:37:26 pm
F4 1.22.0 after update to 2.3.0 only displays FLIR after power-up. Flirinstalnet program doesn't detect the camera.
There are also two files in the photo folder.

Has anyone met such a problem?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on November 29, 2016, 05:55:30 pm
@BigBird007:
Congratulation!
I am going to buy E4  that was made last month, so I expect the firmware  will be higher that 2.3. So, can you confirm it is possible to make a fully working hack without downgrading?
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on November 29, 2016, 11:09:11 pm
F4 1.22.0 after update to 2.3.0 only displays FLIR after power-up. Flirinstalnet program doesn't detect the camera.
There are also two files in the photo folder.

Has anyone met such a problem?
Yes, the camera is now in a Service mode, afaik only flir have the tools to fix it.  :--
I remind this state a wile ago...
i know no way to fix it yourself  :-//
What did FLIR charge to re-flash your E4 please ? This information may be useful to others who end up with a unrecoverable bricked E4.
Hello,
The Camera is still by FLIR. I hope to receive it in the next 2 weeks.

Hat i have done:
1. Set Camera in RNDIS mode
2. open "FLIRInstallNet.exe" from /bin folder (FLIR Tools)
3. Download old firmware  (flir_ex_pn639_v1.18.7_update_pack.zip) from somewhere in this forum
4. flashing the "Z3comb_v1.18.7.fif"
5. Camera restarts later and was found as new Volume (ASCO 23.9MB)
6. only the FLIR logo was shown and the Asco volume... that's it.
I tried to use the hardware UART with "usbfn RNDIS" but nothing happens.
I copied the files inside the ASCO Volume (see attechment). If I store files there and restart the Camera, the files are disappeared.

I have the theory, that FLIR store some command file there and if the Camera restarts they have additional a working RNDIS mode for reflash.
However, they don't will let us know this...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on December 01, 2016, 01:20:08 am
I was lucky to get the Flir wide angle lens with 45° fov for $500 on ebay recently and it came even with a tools+ licence, a ResearchIR sw key and a tripod adaptor.
And this lens improved the optical quality of my E30 considerably, the slight focal error on the left side of the picture is gone with this lens.
Besides this lens allows to get even closer than 5cm to an object and still get it into focus.
That pushed me over the edge to actually getting the lens, I found a new one for $500 and bought it. Wish I could have got that software key you got! I love this 45 degree lens alsmost seems like Exx series should have come with one standard.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on December 01, 2016, 06:12:31 pm
Can anyone post pictures   with wide angle lens with 45°? I wonder how much it is different .
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cuda12 on December 01, 2016, 11:02:29 pm
same location  stock lens and add on 45
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on December 06, 2016, 06:42:18 pm
Are  there any functional differences if a hack, for E4, is used with  a camera with 2.3 firmware and if with  2.11( the latest) firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigBird007 on December 06, 2016, 08:44:30 pm
@BigBird007:
Congratulation!
I am going to buy E4  that was made last month, so I expect the firmware  will be higher that 2.3. So, can you confirm it is possible to make a fully working hack without downgrading?
Thank you

Yes I was able to do it without downgrading.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BigBird007 on December 06, 2016, 08:57:28 pm
I just PM'd you but figured this is the best place to outline fixes so everyone can share in the solutions.

The methods outlined in the blog worked well. The steps are listed throughout the thread so you'll have to do some digging but it will be worth it. There is a lot of useful info and all the questions I had were answered after some research.

If you have any specific questions once you start please post them on the thread so everyone can gain from our back and forth. I'd be glad to help if you run into any snags.

@BigBird007:
Congratulation!
I am going to buy E4  that was made last month, so I expect the firmware  will be higher that 2.3. So, can you confirm it is possible to make a fully working hack without downgrading?
Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tpn on December 06, 2016, 10:04:28 pm
Hi Guys,

i am following this thread a few weeks and i like it and decided to order an E4.

So i think it arrives in 2 or 3 Days and i suspect that it has Firmware 2.11
But now im not sure which method i should choose to do the res and menu hack because here are so many posts and methods?

Anyone here that can give me an recommandation how i should do the hack? Actually have only a Windows 10 64bit.
Maybe i can get an old laptop to work with xp 32 bit but not sure if it works anymore  ::)

I have seen some German Guys, maybe someone down from the South of Germany? ;D


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 09, 2016, 01:08:58 pm
I am attaching the modified script package (removed e6 files, as they seem to work slightly differently at first glance)...

I have an E6 I am trying to upgrade to E8. Does this mean I cannot use this method/files?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: arekm on December 12, 2016, 10:30:24 pm
E4, 2.11.0, windows 10, 64bit

Method http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) (description + drivers + tool) but actual hack files (python2 scripts, fif files) from https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

RNDIS wasn't too nice. There were problems - like rndis ethernet network interface was becoming visible but it didn't get any IP assigned. Manually assigning IP (192.168.250.1/255.255.255.0) got things working (camera was 192.168.250.2). FLIRInstallNet.exe seems to use interface IP address + 1 for showing IP in program itself in such case.

RNDIS didn't even work under Linux (rndis_host 3-1:1.0: RNDIS_MSG_QUERY(0x00010202) failed, -47), so its likely camera software fault and not windows drivers. Manually assigning IPs under Linux worked fine (just like it did under Windows).

tcpdump sniffing on ethernet interface when booting camera is good way to figure out camera ip (that 192.168.250.2).

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 14, 2016, 10:23:05 pm
What would it take to add a video record feature to the e4. I want to put ut on my drone but the camera and the phone i think would be just too much weight. Or even a timer that would take pictures at a set amount of seconds. Thanks everyone
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on December 15, 2016, 02:20:27 pm
What would it take to add a video record feature to the e4. I want to put ut on my drone but the camera and the phone i think would be just too much weight. Or even a timer that would take pictures at a set amount of seconds. Thanks everyone

For easy video your looking at attaching another device to the USB port of the E4 can capture it's webcam video out. I believe others here have used RPI's for the task but I found a cheap HP Stream 7 windows tablet worked well for me. I don't recall if anyone got a phone working - but as long as it supported USB-OTG there is a chance it could work. I do remember seeing a pic here on the forum of some one that stripped down a E4 to just the internal frame to accomplish something similar but don't recall what they attached to it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 16, 2016, 12:11:35 pm
Hi. The problem im having is i cant press the capture button while its off the ground. I have the video working over Otg cable but all the weight and cables might be a problem. I wonder if someone could make script or somthing to record straight to the cameras storage. Or even take a picture every few seconds or so. It sure would help me out alot. Thanks

Im not necesarily looking for easy. Using the avaliable tools to do the modification to the menu and res was easy. Modifying the code not so easy. Atleast not for me
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 19, 2016, 04:01:52 am
really no one?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 19, 2016, 04:36:01 am
Based on my experience - forget about using e4 to record video internally.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Signal32 on December 19, 2016, 04:42:01 am
Hi. The problem im having is i cant press the capture button while its off the ground. I have the video working over Otg cable but all the weight and cables might be a problem. I wonder if someone could make script or somthing to record straight to the cameras storage. Or even take a picture every few seconds or so. It sure would help me out alot. Thanks

Im not necesarily looking for easy. Using the avaliable tools to do the modification to the menu and res was easy. Modifying the code not so easy. Atleast not for me
There's no way to record video on the FLIR directly, there's no existing feature that has support for video so very likley the code for encoding video is simply not on the camera.
Easiest way would probably be to use a simple timer to trigger the capture button (short out the contacts underneath the membrane every X seconds)
But of course seek camera + phone would probably be much much easier for this.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2016, 11:36:56 am
There's no way to record video on the FLIR directly, there's no existing feature that has support for video

This is not correct. I posted some variants
see links in topic 15 "save a radiometric 16 bit video as *.seq" of my post
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg342072/#msg342072)

a sample for scripting on Ex
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg1066954/#msg1066954 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg1066954/#msg1066954)

simple loop this code snippet (code successful tested on lir Exx)
Code: [Select]
#set file name
> rset .image.services.rtrecord.filename \StorageCard\seq\5.seq

#save the raw seq to RAM !!
>rset .image.services.rtrecord.active true

#wait until status is false
>rls .image.services.rtrecord.active                         
active                     false

# save video to file path
>rset .image.services.rtrecord.store true
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2016, 11:59:01 am
What would it take to add a video record feature to the e4. I want to put ut on my drone but the camera and the phone i think would be just too much weight. Or even a timer that would take pictures at a set amount of seconds. Thanks everyone

IMHO use USB RAW streaming and save the stream to a SD card with a raspberry pi (zero)
https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?all (https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?all)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 19, 2016, 01:02:18 pm
There's no way to record video on the FLIR directly, there's no existing feature that has support for video

This is not correct. I posted some variants

Nope, that requires the command to be sent externally, which OP is trying to avoid.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on December 19, 2016, 02:02:34 pm
Is it possible to get UVC working on Android?  I have tried but it looks like there's a flir-specific implementation and it does not show up in Android as a basic webcam.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 19, 2016, 02:05:49 pm
  If i had to add and delete a startup file to disable the script that would be fine. What could i do to make it just take a picture every 5 seconds own its own untill i power it down and remove the script or kill it from telnet. I like the idea of video too that would be great if it just powered on and started recording untill i shut it off. Could your video record script be tweaked to be initiated from telnet or on startup. In not looking for somthing fancy just enough to ge tthe job done thanks you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2016, 02:40:42 pm
  If i had to add and delete a startup file to disable the script that would be fine.

please see my link above
...
on my Flir Exx I wrote a trigger for a button, while hooking a function (here the reversed palette)

On the applaunch.dat file append a dos script
...
...
This works fine on Exx.
On Ex there are some barriers, like the checksum in applaunch.dat



Nope, that requires the command to be sent externally, which OP is trying to avoid.

with applaunch.dat you can start a script while booting the camera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 19, 2016, 04:07:47 pm
okay so i got the seq file opened in flir tools but how can i save it in a different format so i can view it without flir tools. and how can i make it record for like 5-10 minutes. if thats not possible due to memory what could be changed to make it record a new seq file after the times up so they can be put into one main file. thankyou
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 19, 2016, 05:39:52 pm
*.seq files are only stitched *.fff files
I wrote something about *.seq splitting to single *.fff images (see my perl script) and convert this frames to regular images (see my exiftool + ImageMagick samples).

> and how can i make it record for like 5-10 minutes
Yes, this is the problem. 
I wrote here about the "out of memory"
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg363898/#msg363898)
You must write a loop.
Therefore you get gaps between the video snippets.

I would go this way:
IMHO use USB RAW streaming and save the stream to a SD card with a raspberry pi (zero)
https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?all (https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?all)

There is a Raspberry pi behind my display. The Raspberry get over USB the real 16 Bit RAW stream from a Flir E4:
(https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/?action=dlattach;attach=171452;image)
use a small raspberry pi zero for your quadcopter
thats all
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 3roomlab on December 20, 2016, 10:48:53 am
i saw fraser's thread about black body calibrator, i thought i ask this here instead of a new thread.

has anyone tried this?
http://www.palmerwahl.com/product_home.php?cat=26&catl=7&line=319&itm=5014 (http://www.palmerwahl.com/product_home.php?cat=26&catl=7&line=319&itm=5014)

TEC based calibrator i assume, goes down to -40C.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 20, 2016, 12:05:43 pm
i saw fraser's thread about black body calibrator, i thought i ask this here instead of a new thread.

has anyone tried this?
http://www.palmerwahl.com/product_home.php?cat=26&catl=7&line=319&itm=5014 (http://www.palmerwahl.com/product_home.php?cat=26&catl=7&line=319&itm=5014)

TEC based calibrator i assume, goes down to -40C.

Better off starting your own thread I think.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Notsolowki on December 20, 2016, 01:06:26 pm
the pi might do the trick. could you feed the video to it straight from the microbolometer. or better yet use the flirs lcd screen output as a video input.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ysmalkie on December 20, 2016, 05:19:46 pm
Hi ,

I am new, just bought a used E4 off eBay.  I thought it was a good idea, as it had 1.19.8 firmware inside which looks easiest to 'trick' :-)

I am new to thermography, and I have few questions I thought I might share:
- the 1.9 hack which involves sending the modified E8.cfg & camera.cmd files  is safe I presume??.. Is there anything that might go wrong? What happens for example if the CRC is wrong? - Just being cautious with my new toy :-).
- Can I use the current version of FLIRInstallNet.exe or do I need some older version?
- this may be a stupid question, but I body heat seems to be off the 36.6C by about 4C. Why?
- is there any guideline for emissivity values to use?

Tadek
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on December 20, 2016, 07:43:25 pm
- this may be a stupid question, but I body heat seems to be off the 36.6C by about 4C. Why?

That's the inside temperature, so you will have to cut yourself open and take a quick measurement to get to 36.6  :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on December 20, 2016, 10:30:44 pm
the pi might do the trick. could you feed the video to it straight from the microbolometer. or better yet use the flirs lcd screen output as a video input.

title: "Flir Ex: Realtime raw radiometric data streaming via UVC"
https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/ (https://www.eevblog.com/forum/thermal-imaging/flir-ex-realtime-raw-radiometric-data-streaming-via-uvc/)
=> 16 Bit sensor data from microbolometer ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Scottjd on December 21, 2016, 08:57:16 am
So I'm thinking of getting a FLIR E4 and a few other things to finish off the lab build.
I've read several pages on this thread and I guess I have a few questions.

1. If I was to buy a new E4 what is the latest firmware and can the latest firmware be modded for the updated resolution?

2. I'm also looking at a used E4 running 2.3.X. I read some comments saying if the E4 was updated to 2.3 from 1.X then the mods might fail. Is this still true or has this been fixed?

I plan to still keep the FLIR One running on my iPod touch for videos, but a higher resolution would also be nice. I see some lens options for taking close up images, this will mostly be used for electronics to see what's dead shorting or running hot. I may even try some of the lens mods as well. Has anyone made a 3D print of an adapter for adding cheaper lenses on the E4 or any E serries?

Thanks in advanced for any answers,
Scott
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ysmalkie on December 21, 2016, 10:46:35 am
I did it ! Many thanks Mike and all! :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tine on December 24, 2016, 02:43:50 pm
Hey Guy's,
I'm very new with this topic and I was searching a little what is the best camera for less then 1000 bugs.
Therefore I'm strugeling to buy a new E4, but I'm not sure if it's possible to hack.
Is 2.11 the latest firmeware and is it possible to do the downgrade / hack with this version.

Does anyone have experience with this?


Thanks a lot for your feedback  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matus on December 25, 2016, 01:56:58 pm
Hey Guy's,
I'm very new with this topic and I was searching a little what is the best camera for less then 1000 bugs.
Therefore I'm strugeling to buy a new E4, but I'm not sure if it's possible to hack.
Is 2.11 the latest firmeware and is it possible to do the downgrade / hack with this version.

Does anyone have experience with this?


Thanks a lot for your feedback  :-+

Hi there,

I just bought E4 with 2.11 fw, and I can confirm, the hack is working without downgrade to 2.3. I used 2lps'  2.3 hack with modification for 2.11 fw. The hack takes only 15 minutes, and both resolution and menu mod works like a charm! Thanks 2lps!

Matus
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on December 25, 2016, 03:40:46 pm
my hacked e4 has shorter and shorter battery life, recently only half hour after overnight charging so i decided to replace its 18650 instead getting new battery from flir for 80 odd euros

i couldn't find any pictures except of internal pcb with protection circuits so here it goes:

(https://pictr.com/images/2016/12/25/d010d15cb62c9d37f0cafcc9a766e9f1.jpg)
(https://pictr.com/images/2016/12/25/55a2658c1f2955edb9ead0b063c3504b.jpg)
(https://pictr.com/images/2016/12/25/39822afdda410ff8c3a0936e1631e616.jpg)
(https://pictr.com/images/2016/12/25/74725b23be2ca6c7fa72e81280607693.jpg)
(https://pictr.com/images/2016/12/25/754b502f56d8113573dadcc7dcf7659f.jpg)


i barely know anything about 18650 though, so is PANASONIC NCR18650B/ST a good replacement?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 25, 2016, 05:06:27 pm
As long as the voltage is the same (which it probably is) it should be fine.


Sent from my iPad using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 25, 2016, 07:24:06 pm
This useful post showing the internal structure of the Ex battery pack will get lost in this massive thread. Do you mind if I add the pictures to the FLIR E4 Useful information thread where it may be easily found. The pictures will include appropriate attribution.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanB on December 25, 2016, 07:39:31 pm
I took the brass camera adaptor out of an old camera, and put it in the base of the battery, where the rubber spacer is, and used some superglue to hold it in. Now the camera has a tripod mounting point, and can be held firmly for use as a video camera over USB.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on January 01, 2017, 12:59:59 pm
after replacing this 18650 with NCR18650B/ST i have just under 5h (4:43-4:57) runtime with screen set as 'bright' and with no pictures taken - great improvement over my 35-50 minutes, also that would indicate that my old battery had only quarter of original capacity after just four years

p.s. is there any reason to do any update of E4 1.0 firmware 1.18.8 with e4hack3b?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bill W on January 01, 2017, 09:14:02 pm
also that would indicate that my old battery had only quarter of original capacity after just four years

Not uncommon for a Lithium Cobalt IMO.  Generally quoted as 300 cycles to 70% capacity, but there is a time factor as well.  If you can adjust it, try charging the slightly under the normal final voltage and it should last a lot longer, and you do not lose much time on each run.



Bill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on January 03, 2017, 08:59:54 am
Does anyone have older versions of the software, eg 1.19.8
To share in the network?

.......
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plurn on January 04, 2017, 07:26:54 am
First post indicates that the e4 "has a 320x240 60fps sensor - same as the £4700 E8 model and even more expensive Ex0 series".

flir Ex series has maximum temperature reading 482°F  / 250°C
flir Ex0 series has maximum temperature reading 1,202°F / 650°C

If they are the same sensor, would there be some easy way for us to allow the E4 to be usable for seeing temperatures above 482°F  / 250°C ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 04, 2017, 09:17:40 am
First post indicates that the e4 "has a 320x240 60fps sensor - same as the £4700 E8 model and even more expensive Ex0 series".

flir Ex series has maximum temperature reading 482°F  / 250°C
flir Ex0 series has maximum temperature reading 1,202°F / 650°C

If they are the same sensor, would there be some easy way for us to allow the E4 to be usable for seeing temperatures above 482°F  / 250°C ?

It might be possible on the older models to access the service menu where you can normally configure (and calibrate) the temperature ranges. I accidentally left a much higher range turned on, on a camera that didn't have it initially. I then had the calibration check carried out and it was 60°C off at 420°C! So yes, it failed! I had to call them and tell them to ignore the higher range haha.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: T1 on January 06, 2017, 09:19:07 am
Thank you all for making this possible.
Hacked successfully 1.2L 2.11 FW (windows xp sp3, using Fubar method and 2lps files).
I did only resolution hack.
I have some questions and maybe someone could answer.
Inside temperature readings seems trustable, but have some questions about outside temperature readings.
Outside air temperature was aprox. (-12'C).
Why does area temperature (where snow is located -bottom right corner) displayed as (-24'C). Temperature outside was stable and at least 3 hours after sunset. If I'm correct no material should be colder than (-12'C) . And if I point to sky, it's displayed as (-40 or even lower).
I understand, that I have to adjust emmisivity, reflective temperature and other settings to get trustable results.
I did check manual and there is some short explanation, but maybe somewhere on eev blog there is topic on learning to use camera, settings etc.
Thank you! (and sorry for my grammar)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 06, 2017, 10:14:37 am
Someone correct me if I am wrong, but the ice crystals could be reflecting some of the sky, which would give you much lower readings. Try changing the angle of measurement and see if that changes the temperature.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: T1 on January 06, 2017, 10:54:16 am
I do understand, that atmospheric radiation can cause interference in readings, but mostly objects were colder than air temperature, nomatter I pointed at brick wall or at building made out of wood, and did it from different angles, but wall temperature readings was colder than (-12'C).
Is this normal and I just have to change emissitivity settings, reflected temperature settings, distance settings, viewing angle and others, or is there problem with my camera.
In attachment - wooden building (same time,air temperature -12'C).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Samogon on January 06, 2017, 10:57:50 am
In your picture it shows -8C  :-//
As skys at night cant radiate IR and can only reflect IR radiated by Earth surface your measurments are may be really influenced by many factors, like clouds etc.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Samogon on January 06, 2017, 11:02:49 am
Yes reflection coefficient can play significant role in readings
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 06, 2017, 12:43:38 pm
Boil a pan of water and take a thermal image of that - and if you can also include the camera settings or thermogram, that would be useful.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: T1 on January 06, 2017, 01:37:11 pm
Don't, have a pan at work...
Will try it at home.
What settings to use and where to point, when doing such a test, if I use stainless steel (polished) cookware?
Can I point at water directly and how close to 100'C should it be when boiling?
I'm aprox. 19 m above sea level.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plurn on January 06, 2017, 01:56:32 pm
...
 but have some questions about outside temperature readings.
Outside air temperature was aprox. (-12'C).
Why does area temperature (where snow is located -bottom right corner) displayed as (-24'C). Temperature outside was stable and at least 3 hours after sunset. If I'm correct no material should be colder than (-12'C) ....

I have noticed some posts mention that E4 accuracy at cold temperatures can be terrible. For example:

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg348622/#msg348622)

If this is the case, I am not sure if it is the case from new or if it gets out of calibration over time? I don't know if this is the problem you are experiencing. You could search through this thread to try and find more info about this. Good luck.


edit: found another  https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg348761/#msg348761 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg348761/#msg348761)

way outside the +-2% accuracy specification though it was not new - so maybe in need of calibration?

edit again:

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350039/#msg350039 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350039/#msg350039)

"Some people may already know this but it was new for me and it surprised me a little bit, so I wanted to post it here.
Today I took a look at the datasheet for the E4 and it says as follows.

Measurement
Object temperature range   –20°C to +250°C (–4°F to +482°F)
Accuracy   ±2°C (±3.6°F) or ±2% of reading, for ambient temperature
10°C to 35°C (+50°F to 95°F) and object temperature
above +0°C (+32°F)" ...

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350062/#msg350062 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350062/#msg350062)

"@stefbeer,

Good spot. I totally missed that important specification detail ! Or more accurately I misread it as a statement that the +-2.0C applied at above 0C ! To be truthful I wasn't buying for amazing accuracy so it wasn't of that much interest.

It makes it very clear that the camera has a specified accuracy only above 0C. FLIR do not calibrate the E4 below 0C, as others have suggested. 

My industrial Raytek IR thermometer actually refuses to measure any temperature below 0C as it would not be accurate at such temperatures.

From the lack of any accuracy detail below 0C in the specs of the E4, it would appear that any temperature shown is basically a 'best guess' and not to be trusted." ...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 06, 2017, 02:00:16 pm
That looks fine to me!

I think it's just a case of interpreting the image with the snow. I live in the UK and on the coast so don't see much of it to comment!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: T1 on January 06, 2017, 02:39:07 pm
Thanks, plurn!
At least I know it's common issue in temperatures below 0!

Update:
Just tested (air temperature ~15'C).
If I set emissivity to 0.6 and reflected temperature -39, then I can get wall temperature -3'C (or even hotter), so I guess it's just matter of knowing/understanding what values/settings to use.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 11, 2017, 09:48:29 am
I just bought a new E4 calibrated in June 2016 with 2.11. The hack worked fine without downgrade and with all the menus working. Thanks for all involved! My E4 seems to have 85 dead pixels thus 99.89% are OK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: fourtk on January 14, 2017, 11:31:11 pm
Hi all
Firstly a big thank you to all who have contributed to this hack and thread.

My story
I've been looking to get a TIC for a while but like everyone my budget and required spec were not matching up.
I found a second hand E4 at a very good price and while trying to compare specifications of the E4, E6, & E8 found this thread, decision made and deal done.
it had 1.22 Firmware, I downloaded

It took a lot of searching and reading(probably due to the older firmware version) before I tried to upgrade so here is a quick run through of what i did
RNDIS             http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe (http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe)
tools                https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)
betamenu 3     https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
filezilla              https://filezilla-project.org/download.php?show_all=1 (https://filezilla-project.org/download.php?show_all=1)

Then followed DaveWB's instruction video for 1.22 upgrade https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg409787/#msg409787)

5 attempts later I was still ending up with poor resolution and no MSX
(I had issues with reconnecting the E4 each time I disconnected it having to do numerous cold reboots of the E4 and reboots of the laptop, also the IP switched between 192.168.1.1 and 192.168.1.2)

despite looking here various times still couldnt find a mistake with what I was doing

After more attempts and reading here I downloaded
cfc_generator from stefbeer              https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=86215 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=86215)

First attempt and I noticed it was generating a different CRC03 than I was getting in command prompt
Transferred the new conf.cfc with filezilla
Cold reboot and everything upgraded and working perfect.

Thanks again to everyone

Now I will have to investigate why I was getting an incorrect CRC03 with command prompt, could it be down to running 64bit windows 10?
I will update if/when I find an answer



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: artanker on January 15, 2017, 06:32:08 am
Hi guys . Problem as in post # 7862 page 315 . Python gives an error and doesn't want to do a resolution of 320x240 . please help me too.  :'(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 15, 2017, 09:01:25 am
Hi guys . Problem as in post # 7862 page 315 . Python gives an error and doesn't want to do a resolution of 320x240 . please help me too.  :'(

There is no need to downgrade the firmware (like was done in #7862). If you did downgrade, upgrade it back to 2.11, download the files from https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880) and follow the instructions from http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

I just did the hack without downgrade a few days ago.

The error message in #7862 means that there already is a backup folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: MilkmanCDN on January 15, 2017, 04:38:42 pm
Hey Guys,

FYI, Just ordered my Flir E4, new from amazon this week.   Performed hack per post 7785.   Worked like a champ!    Hooray!   ^-^

Notes

Model: E4 1.2L
Software: 2.11.0
Latest Calibration: 2016-11-02

I did not downgrade the firmware.    I simply followed the instructions and used the updated files found in post 7785.   Performed both menu and resolution hacks.

MilkmanCDN
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: artanker on January 16, 2017, 01:30:20 pm
I now have a new problem . HELP pls    :'( :'( :'(

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 16, 2017, 10:19:03 pm

Now I will have to investigate why I was getting an incorrect CRC03 with command prompt, could it be down to running 64bit windows 10?
I will update if/when I find an answer

Most likely. I had a very similar problem until I used a Windows 7 virtual machine. The connection just doesn't like W10



Sent from my iPad using Tapatalk
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on January 18, 2017, 03:26:24 pm
Hello. Today tried to remove bad pixels. Thermal imager Flir i7. Nothing succeeded. Or an error or indicates that he killed but nothing changes. Maybe someone knows how to kill a damaged pixels.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 18, 2017, 04:29:49 pm
I am pleased to see that you gained access to the required menu :)

Sadly I have never used this facility so cannot offer any reason why it does not appear to be working. The utility is present unlike later E4 cameras so your i7 should be able to update its dead pixel map.

Hopefully someone else has tried this menu and will be able to help. I am certainly interested in hearing more about this dead pixel map editor.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 18, 2017, 04:31:21 pm
Hello. Today tried to remove bad pixels. Thermal imager Flir i7. Nothing succeeded. Or an error or indicates that he killed but nothing changes. Maybe someone knows how to kill a damaged pixels.

I think you are using the wrong method to remove the dead pixel. Can you remind me what is in the drop down?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on January 18, 2017, 06:01:20 pm
I tried all the methods. A little later, I will lay out the photo pixels methods of killing. Video of my attempt.
https://youtu.be/EM2SFf2Txrs
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on January 18, 2017, 06:05:45 pm
Metods
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 19, 2017, 09:26:32 am
Metods

You need to click on the image first, to select the bad pixel to replace. I couldn't see you doing that in the video. If you hold CTRL and click, you can place multiple points.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on January 19, 2017, 09:54:52 am
Yes. I chose a bad pixel pointing cross.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on January 19, 2017, 10:10:41 am
Yes. I chose a bad pixel pointing cross.

In which case, it may be because there is too much damage to the detector. A friend of mine had a similar problem when some kid shone a laser into his £30K FLIR T650sc and it damaged the detector (FLIR quoted something like £10,000 to fix). Sorry I cannot be of any more help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on January 19, 2017, 10:15:55 am
Yes, similar to damage to the laser. I will try to point out a few bad pixels. One does not kill.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 19, 2017, 12:32:17 pm
A test you could try is to kill a known good pixel in one corner and see if the camera accepts this. If it does, but refuses to correct one of the dead pixels, you know that the damage is such that the dead pixel algorithm cannot cope with the significant damage present. A dead pixel map is normally filled with individual or small clusters of malfunctioning pixels. The masking algorithm uses surrounding pixel values to average the value of the malfunctioning pixels. If the algorithm is presented with many more malfunctioning pixels around the one it is trying to mask, an error may occur. The algorithm is pretty dumb as it normally hides very small numbers of pixels in any one area. Imagine that it is told of one dead pixel and then it averages the value of the 8 surrounding pixels but one or two of them provide crazy data.... Depending upon how clever the algorithm is, this could really mess up its averaging calculation!  FLIR would reject any sensor with significant clusters of failed pixels so the algorithm is not faced with such a situation normally.

I fear the damage to the sensor is too extensive in this case. It is not possible to buy a new microbolometer and manually calibrate the i7 yourself so sadly this camera would have to be repaired by FLIR and that is normally uneconomic.

Sorry the news is not better.

Keep experimenting with the dead pixel editor though. You never know, you may get lucky and manage to convince the camera to accept a large number of deap pixels if they are ALL selected at the same time ? You could even try selecting an area of good pixels +1 from the boundary of dead pixels and marking those as bad such may provide enough boundary data for the algorithm to accept a dead zone. You cannot really use the camera as it is so with a try.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stylon on January 19, 2017, 05:29:21 pm
Two weeks ago I purchased a Flir E4 bundled with a FLIR power bank for a discounted price of €799 from a German electronic component distributor and initially was a bit sceptical wether it's suitable to apply the hack. It turned out to be manufactured & calibrated in December 2015 (probably the reason why it was bundled with a power bank) and came with firmware version 2.8. Ignoring all your posts about downgrading to 2.3 :palm:, I did upgrade to 2.11 instead and applied both hacks afterwards. Following the usual instructions at http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) and using the 2.11 specific hack files from https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880) worked like a charm and I've now both the 320x240 thermal picture and the E8 menu entries. Thank you all very very much  :-+! So, maybe the thread owner wants to add that piece of information (2.8 -> upgrade to 2.11 -> apply hack) to the initial list of hack options.

Some might be interested in or may have purchased the same "bundle". Despite being bundled with a power bank, I'm happy with the battery life so far (I gave up testing after roughly 2.5 hours with 20% charge left). These are the only 2 tiny issues overall that I noticed:

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0-8-15 User on January 19, 2017, 07:50:58 pm
I bought the same bundle three weeks ago. It came with a calibration certificate from June 2016 and firmware version 2.11.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 20, 2017, 08:36:36 am
I bought the same bundle three weeks ago. It came with a calibration certificate from June 2016 and firmware version 2.11.

So did I, also with June 2016 calibration and 2.11. Only problem was that the power bank was dead. They send me anotherone I got yesterday.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: artanker on January 20, 2017, 12:29:42 pm
Hi, firends. After improvement on the screen some pixels appeared. How it can be corrected?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Steve T on January 20, 2017, 09:52:07 pm
That looks similar to the issue that I had with my used E4.  Mine was much more severe.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-image-breaking-down/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-image-breaking-down/)

Steve


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: artanker on January 21, 2017, 09:29:05 am
That looks similar to the issue that I had with my used E4.  Mine was much more severe.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-image-breaking-down/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-image-breaking-down/)

Steve

My problem is solved. I got ten times the battery. The device ten times was overloaded. And everything is healthy.   :) :) :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: LizardLik on January 24, 2017, 01:23:28 am
Hey Guys,

I have Flir E6  firmware version 2.11 (foolishly updated 2.3.0->2.11.0 :palm: ) I have a few questions...
1. Can I upgrade to hold my camera as Flir E4?
2. Do I need to lower version of the firmware to 2.3.0?
3. There are those who have successfully carried out an upgrade Flir E6 -> Flir E8+?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 24, 2017, 09:30:52 am
Hello,


 I have one question, too.
Being infected with the TIC-Virus I am considering buying an e4 (seek pro compact and thermal expert are also taken into consideration).

Are flashed E4s with firmware 2.11 able to record e.g. via Flir tools or something similar? I read somewhere about flashed E4s not being able to use Flir tools or record via Flir tools.

thx
robert
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on January 24, 2017, 09:49:15 am
The E4 can enumerate as a UVC video device, so you can record in the same way you can from a webcam.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 24, 2017, 10:29:43 am
@mikeselectricstuff

ok, thx  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kmueho on January 25, 2017, 04:40:08 pm
Hello Guys (and Girls if there are some),

here someone is obviously trying to make some dollars on your work:

http://www.ebay.de/itm/132071219813 (http://www.ebay.de/itm/132071219813)

My E4 is coming (hopefully) tomorrow. Am already thrilled as this is my first device of this kind.

I already prepared a fresh Win7-32bit virtual machine (VMware) with all drivers, python-scripts (for FW 2.11) and other software...
But don't know yet whether I'll really dare to hack it, but am anyway interestedly reading this thread.

Anyway many thanks to all the contributions.

kmueho

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Samogon on January 25, 2017, 05:09:27 pm
It is high chanse that seller is one of us ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 25, 2017, 10:50:00 pm
I already prepared a fresh Win7-32bit virtual machine (VMware) with all drivers, python-scripts (for FW 2.11)

I had no problems with Win7-64bit real machine + 2.11
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 26, 2017, 12:57:44 am
One more question:

does the e4+ work as a normal uvc webcam even if i remove battery, display and buttoncable and connect the device to a smartphone/laptop via usb?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kmueho on January 26, 2017, 03:58:46 am
I already prepared a fresh Win7-32bit virtual machine (VMware) with all drivers, python-scripts (for FW 2.11)

I had no problems with Win7-64bit real machine + 2.11

My real machine runs on Windows 10-64 (quite modified to suppress all the nowadays MS-eavesdropping :wtf: :box: :-- :palm: ).
Therefore I better won't use it to apply the patches.
Additionally I'm quite restrictive regarding installing programs and device drivers on the host OS which I'll not use everyday. Most of the applications I use already run on VMs.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plurn on January 26, 2017, 08:57:33 am
Just received my new flir E4 with software 2.11. Without downgrading I followed the fubar procedure here http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)  substituting the script pack files FLIR_E4_2.11.0_hack from 2lps here https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

It worked great and I have full resolution and thermal noise removed and lots more menu options and features. I have not detected any issues. All menu features seem to be there and working. I especially like the 3 spots measurement feature.

Thank you very much to fubar and 2lps and to everyone else involved in setting up the scripts and files needed and working out the various improvements.

Changes were done on windows 7 64bit virtual machine on Virtualbox running on macosx hardware. Drivers were fine on windows 7 64bit. Only trick was trying to get Virtualbox to own the flir USB devices as macosx kept trying to mount the USB volume.

Notes for people running a similar virtualbox set up:

– connect the flir to the computer so Virtualbox can see that it exists, then go into the virtual machine settings to tell the virtual machine to own the device. This does not work instantly – you are just configuring it. Then try and unmount the drive in macosx and unplug the flir.
– I think I shut down windows at this point and quit Virtualbox. Might not be needed.
– Start Virtualbox and boot the windows virtual machine
– plug in the flir and windows should see it and install drivers
– once you go through the procedure to change to RNDIS mode, it is a different USB device so you will have to go through a similar procedure (adding the new device to the virtual machine config) to get Virtualbox and the windows virtual machine to own it. Less difficult this time because macosx is not trying to mount a USB drive.

Cheers,
Anthony
Title: How to enter the RNDIS mode
Post by: kmueho on January 26, 2017, 11:20:13 am
I can't enter the RNDIS mode.
Obviously I'm too stupid.

I went trough the menu as follows:

Settings->Device settings->Camera Information->press "right" for 10 secs->USB mode

Then I see a list of modes:
MSD
UVC
RNDIS
RNDIS and UVC
RNDIS and MSD
UVC and MSD
RNDIS, UVC and MSD

Currently selected (blue spot) is "UVC and MSD"

I moved the bar to RNDIS and pressed "Enter" (the big central button of the camera).
But the only thing which happens is that the E4 jumps back to "Model"-Menu (one level up).
When I go in usb-mode menu again nothing is changed.

I tried also all the other usb-modes but I can't change it at all.
I tried all with usb cable connection to the PC and also without.
I tried to press the enter-button for a longer time.
I tried to press the trigger for picture-taking instead.
I tried to press the "play" button instead.
I tried to press "right" or "left" instead.
I reset the camera to factory defaults and repeated all above.
But nothing works. The E4 stays in the "UVC and MSD"-mode.

Here I ran out of options and need some help...

**********************************
UPDATE: Forget about all above.
Thought I had to switch manually to RNDIS before running the fif-file.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 26, 2017, 01:25:41 pm
One more question:

does the e4+ work as a normal uvc webcam even if i remove battery, display and buttoncable and connect the device to a smartphone/laptop via usb?

So, apparently Joe-C made some modifications to the E4 (Umbau zu V003, bottom of the page):

http://joe-c.de/pages/posts/waermebildkamera_flir_ex_umbauten_177.php (http://joe-c.de/pages/posts/waermebildkamera_flir_ex_umbauten_177.php)

It seems like the E4 can be used without display. But it will need a battery to buffer the additional power that is needed to actuate the shutter. Buttons are still connected.

" Rest folgt später..." though, -> to be continued


Btw.: Is Flir Tools fully functional with flashed E4s? I am still unsure about it (Video-Recording via UVC and third-party-app might be working but Flir Tools seem to be more capable).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 27, 2017, 05:55:32 pm
What is the current recommendation for E4 to get good PCB thermal images? There is a lot of information about this and other threads about E4 lens adjustment tools, lens holders and external lenses, but it seems too big a task to go through all the 8000+ posts in this thread.

Which method is the recommended one? Which parts should be used for that? Can you buy these somewhere or do you need to find out a way to 3D print it (I would need to use a commercial one). If a lens is recommended, which lens is known to work well?
Title: Re: How to enter the RNDIS mode
Post by: Bud on January 27, 2017, 09:41:27 pm
Then I see a list of modes:
MSD
UVC
RNDIS
RNDIS and UVC
RNDIS and MSD
UVC and MSD
RNDIS, UVC and MSD

Currently selected (blue spot) is "UVC and MSD"

Mode selection in the hidden menu is not working on E4, forget it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kmueho on January 29, 2017, 07:34:21 am
Hello,

meanwhile I applied the resolution patch and also the one for the menu.
The camera works great and I want to thank everybody for giving me this easy opportunity to upgrade my E4.

Today I was playing around with the Flir Tools and here I have a question:
In the "Instruments" section I can view the life stream but I can't do anything else.
There are neither any controls shown nor measurements or plots.
The camera is set to USB mode "UVC and MSD".
Does anyone know what I'm doing wrong?

Thank you in advance...
kmueho

PS:
By the way, how can this picture been viewed 132 times as I just posted it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 29, 2017, 02:00:12 pm

Btw.: Is Flir Tools fully functional with flashed E4s? I am still unsure about it (Video-Recording via UVC and third-party-app might be working but Flir Tools seem to be more capable).

@kmueho
did Flir Tools work before you flashed your E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BFX on January 29, 2017, 05:39:32 pm
Another happy owner of "upgraded" I3 from eBay for 250EUR :-+
And yeah something wrong is there on this PCB :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kmueho on January 29, 2017, 11:49:05 pm

Btw.: Is Flir Tools fully functional with flashed E4s? I am still unsure about it (Video-Recording via UVC and third-party-app might be working but Flir Tools seem to be more capable).

@kmueho
did Flir Tools work before you flashed your E4?

Can't tell you - didn't try.
I tried Flir Tools to find out whether it's video recording function does more than simply taking a video of the screen content of the camera.
Because this is (for example) already possible with the camera app of windows 8/10.

Does anyone know whether it's (afterwards) possible to make similar changes to a video taken by Flir Tools as one can do with still pictures (changing the color palette, switch MSX on/off, etc.) ?

Thanks in advance.



Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 30, 2017, 01:05:51 pm
@kmueho

 I read somewhere that hacked e4s are somehow blocked in Flir tools. The missing buttons might be a confirmation.  :(


Regarding the recording-function: As far as I understand standard Flir tools is not able to record any video:
http://flir.custhelp.com/app/answers/detail/a_id/919/~/difference-between-flir-tools-and-flir-tools%2B (http://flir.custhelp.com/app/answers/detail/a_id/919/~/difference-between-flir-tools-and-flir-tools%2B)

flir tools+ for around 300 bugs might be able to record radiometric videos, but I do not know if the E4/E4+ is capable of providing a radiometric videostream.
https://www.youtube.com/watch?v=QAmC6pqN304 (https://www.youtube.com/watch?v=QAmC6pqN304)



I lately read about low accuracy of the E4 at low temperature (ambience/objects). So, in case one upgrades the E4 the calibration gets even worse? Is it still possible to calibrate
the (upgraded) E4 with firmware 2.11 (calib.rsc)? If so: Please tell me how?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on January 30, 2017, 06:35:08 pm
Is it possible to get UVC working on Android?  I have tried but it looks like there's a flir-specific implementation and it does not show up in Android as a basic webcam.

That is very unfortunate. hooking the e4 up to an android phone was one thing I had in mind. Can anyone confirm e4 is not working with android webcam apps?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on January 31, 2017, 09:24:14 pm
@kmueho

 I read somewhere that hacked e4s are somehow blocked in Flir tools. The missing buttons might be a confirmation.  :(


Regarding the recording-function: As far as I understand standard Flir tools is not able to record any video:
http://flir.custhelp.com/app/answers/detail/a_id/919/~/difference-between-flir-tools-and-flir-tools%2B (http://flir.custhelp.com/app/answers/detail/a_id/919/~/difference-between-flir-tools-and-flir-tools%2B)

I don't have any buttons with hacked E4 + newest Flir Tools. Thus I can't even "Save IR JPEGs from a live image" which should work according to that list. Is that the case also for not hacked E4? What about older Flir Tools versions?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on February 01, 2017, 01:13:54 pm
@jmaja

does the e4 go into uvc mode automatically after the upgrade or does it stay in rndis mode?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on February 01, 2017, 03:11:22 pm
@jmaja

does the e4 go into uvc mode automatically after the upgrade or does it stay in rndis mode?

I don't know. How do I check that? When I plug it to the PC with USB cable, Windows start importing pictures with its onw tool. I can import them with Flir Tools as well. Then I can go to Instruments tab and connect E4  (says FLIR USB Video) and see the same image on PC I see on the E4 display.

I can't see INFRARED with ipconfig, thus it doesn't seem to be in RNDIS mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on February 01, 2017, 03:54:45 pm


I can't see INFRARED with ipconfig, thus it doesn't seem to be in RNDIS mode.

yeah, I agree. So you tried like the person did in this video?
https://www.youtube.com/watch?v=AB9zE1czOl0 (https://www.youtube.com/watch?v=AB9zE1czOl0)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on February 01, 2017, 07:16:42 pm


I can't see INFRARED with ipconfig, thus it doesn't seem to be in RNDIS mode.

yeah, I agree. So you tried like the person did in this video?

Importing and modifying pictures taken earlier works OK and as in the video, but connecting Flir Tools to live stream only shows the live stream. Doesn't allow you to record the stream or even take snap shots from it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dlp on February 02, 2017, 01:18:36 am
I have a similar issue.
I changed my E4 to RNDIS mode but now i cant see the camera in ipconfig AND my computer doesnt recognize it when i plug into USB.
I tried reversing the RNDIS mode as per instructions but it wont work.
I'm stuck at this stage. And Flir tools doesnt recognize my camera either.

Can someone help me either reverse RDNIS or get the computer to recognize my E4 in RDNIS?  :-\



I can't see INFRARED with ipconfig, thus it doesn't seem to be in RNDIS mode.

yeah, I agree. So you tried like the person did in this video?
https://www.youtube.com/watch?v=AB9zE1czOl0 (https://www.youtube.com/watch?v=AB9zE1czOl0)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rob9 on February 02, 2017, 01:06:16 pm

Importing and modifying pictures taken earlier works OK and as in the video, but connecting Flir Tools to live stream only shows the live stream. Doesn't allow you to record the stream or even take snap shots from it.

Seems like via Flir Tools the E4 is not capable of doing a radiometric video stream. In this video (I assume it is not an upgraded E4) there are no buttons either:
https://www.youtube.com/watch?v=WTNcJeGMhs0 (https://www.youtube.com/watch?v=WTNcJeGMhs0)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on February 02, 2017, 02:20:48 pm
Aftern understanding a bit more about different modes I tried RNDIS and RNDIS_UVC as well. With RNDIS you get no connection with the camera using Flir Tools. With RNDIS_UVC you can get live image, but not snap shots etc. You can't import images either.

The default mode seems to be UVC_MSD.

If I have understood correctly with UVC you can get video stream of what is shown on the E4 display. So no actual measurement data, just video.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 02, 2017, 02:36:23 pm
If you read though some of the other topics on radiometric video streaming on the E4 - it has the interface/ability built in but when queried it does not report it so no tools can use it. Some clever people here have used a specially compiled tools on Linux to capture radiometric video from the E4. But if you want official support from FLIR for that feature your likely going to have to step up to a higher end model since it looks like they have taken steps to disable it.

If you want to just capture the screen output of the E4 - that can be done simply with any tool that supports video recording from a USB device like a webcam when in a UVC compatible mode. You can use the separate "FLIR IR Camera Player" tool but I prefer to use a simpler tool like I posted here: https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg609274/#msg609274 (https://www.eevblog.com/forum/testgear/capturing-video-from-flir-e4-to-portable-device/msg609274/#msg609274)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on February 02, 2017, 10:12:21 pm
Yes the UVC Mode seems to have a radiometric mode, but not for FLIR Tools.

I tried the FLIR E4 as UVC Webcam on som Android devices, some of them works, but its more a thing of the App and the Kernel, not the Android device itself (if it has USB Host as well).

i have had success with get the E4 Screen over USB->Rasperry pi->Monitor.
Sadly it don't works with the Octoprint Webserver  :-\
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Platonas on February 04, 2017, 04:59:47 pm
Hi,
I bought an E4 a few days ago with firmware 2.11.
I want to upgrade it (Hack it) to E4+ but I cannot set the RNDIS mode.
I tried many times to change the default UVC and MSD but it does not change. 
Is it disabled by Flir?

Is there any other way to connect to the camera?

Regards
Platonas

Update:    I figured out the problem with RNDIS.  It is not available via the camera's menu.  I had to run the file "FlirIstallNet.exe" and load the appropriate "fif" file.
Now my camera E4 is an E4+.

Thank you 2lps for providing the solution to the 2.11 version.  A big Thanks for the people that originally found the hack that makes us happier :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: papadebaer on February 05, 2017, 11:21:21 pm
Hallo,
ich suche nach dem Downgrade Firmeware 2.3.0 Danke

Hi, i lock for the downgrade 2.3.0 - thanks

I have a Flir E6 - with Firmware 2.8.0 -> with update to 2.11.0 is the Menu Hack working :clap: but the Resolution hack is not working |O.
(Error in Line 64)

So i will try with the 2.3.0 patch but i doesn´t finde firmewaer 2.3.0.

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: korrado77 on February 13, 2017, 09:45:41 pm
Hello everybody!!!

I bought flir E5 few days ago, only yesterday I found that I can hack her through this forum....
I did not resist a long time...
The thermographic camera has the fw 2.11
i followed this http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) , with the files indicated here https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880, (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880,)
res and menu hacked!  :-+ Thanks to all those who have worked for this wonderful hack!!!!!
Now everything seems to work fine except this screen appeared 2 times.
I turned off and on again.
the error is serious?
what can it be?
you advise me to put everything back the original?

I hope will be of help to other people who E5 2:11

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Samogon on February 13, 2017, 10:17:38 pm
Did you try cold restart (battery removed)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: korrado77 on February 13, 2017, 10:34:37 pm
Yes papadebaer,
the error is appeared in two different moments and at a distance of about one hour of each other.
still he has not appeared again.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: OrBy on February 14, 2017, 03:49:55 pm
Error happens normally at lease once after the hack - no worries.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on February 17, 2017, 05:50:54 pm
Did anyone notice the E4 was now replaced with E4 Wifi?

https://www.tequipment.net/FLIR/E4-WiFi/ (https://www.tequipment.net/FLIR/E4-WiFi/)

Wonder if it can still be upgraded just fine or if they put lepton cores in these
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tomas123 on February 18, 2017, 01:54:19 pm
no Lepton sensor, it's the same sensor and the same awful fragile USB connector with corresponding lid |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sky@eevblog on February 20, 2017, 07:28:27 am
yes. but now it is possible not to use it at all - charge battery in external charger and communicate with camera over wifi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on February 20, 2017, 08:02:58 pm
The old 2.3 Firmware upload was deleted. Here is the new Link:

http://s000.tinyupload.com/?file_id=01657556357711631689 (http://s000.tinyupload.com/?file_id=01657556357711631689)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on February 23, 2017, 03:13:47 am
Anyone have an update if the wifi model can be hacked? Going to take the plunge but just want to hear some confirmation

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RAWebb on February 26, 2017, 09:52:59 am
@thomas123
Quote
no Lepton sensor, it's the same sensor and the same awful fragile USB connector with corresponding lid

There's help for that, at least if you have access to a 3D printer. This http://www.thingiverse.com/thing:290354 (http://www.thingiverse.com/thing:290354) drops right into the lid cavity and holds it open so that it doesn't push against the USB cable. (It was also just about the first thing that I designed and printed. My printing technique has improved somewhat since then...)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: AlainL on February 27, 2017, 09:18:09 am
@thomas123
Quote
no Lepton sensor, it's the same sensor and the same awful fragile USB connector with corresponding lid

There's help for that, at least if you have access to a 3D printer. This http://www.thingiverse.com/thing:290354 (http://www.thingiverse.com/thing:290354) drops right into the lid cavity and holds it open so that it doesn't push against the USB cable. (It was also just about the first thing that I designed and printed. My printing technique has improved somewhat since then...)
A simple solution is to use a left/right angled usb cable. It works very well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plurn on February 27, 2017, 01:05:36 pm
@thomas123
Quote
no Lepton sensor, it's the same sensor and the same awful fragile USB connector with corresponding lid

There's help for that, at least if you have access to a 3D printer. This http://www.thingiverse.com/thing:290354 (http://www.thingiverse.com/thing:290354) drops right into the lid cavity and holds it open so that it doesn't push against the USB cable. (It was also just about the first thing that I designed and printed. My printing technique has improved somewhat since then...)
A simple solution is to use a left/right angled usb cable. It works very well.

I use the included usb cable, but I run a small length of the cable right along the inside of the lid hinge (it fits in there well and is held in by the rectangular protrusion under the lid) and that holds up the lid avoiding putting stress on the small usb connector. There might be a little more pressure on the cable along the hinge but nothing to too harsh - and the cable is easily replaceable if needed.

I guess you could also jam something else of a similar shape in that hinge if you didn't want the risk of causing damage to the usb cable.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BOGET on March 01, 2017, 08:56:47 am
Hi guys,

I got a bad situation on my E4 downgrade to FW 1.18.7,  :palm:


What did I encounter problems show as below:

1. An Original FW 2.3.0 E4 Downgrade to 1.18.7

2. While the process almost done, it stuck on 75%, never keep going even a little bit.

3. I forcibly restart it, but it just load into the FLIR logo and do nothing.   |O


I guess any newer FW downgrade to FW 1.18.7 will have some problem.

So I sent it back FLIR for repair, after arrived five days, FLIR give me a quotation,

It ask for 400 dollars for repair..., yeah, it's 400! If you change your mind,

you need to pay 500 bucks for them without repair.  >:(

 :wtf: , this price I almost can buy another E4.


---------------- return back -----------------

After I paid for repair, and wait for more then two weeks, when I recived it, I found the FW is 2.5.0 (I never saw it before, picture in attachments), and unhackable.

Fortunately, I had backup all the original 2.3.0 data file before.   :phew:

So I replace all of them via Filezilla, I hack it back to 2.3.0 finally.   :-+

Oh, like a nightmare for me. 

Do not downgrade any FW to 1.18.7, or you wallet will such like a leaky water bottle.   :--
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on March 01, 2017, 09:09:21 am
Do not downgrade any FW to 1.18.7, or you wallet will such like a leaky water bottle.   :--

Why would someone want to downgrade to 1.18.7 (or any other older FW)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BOGET on March 01, 2017, 09:19:41 am
Cause I hear about the earlier FW can immediate change the calibration parameters even S/N on unlock web(192.168.0.2) without via Filezilla.  :popcorn:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 01, 2017, 11:22:25 am
There is a problem with this monster thread.......

It is a victim of its success as was predicted by myself and others years ago :(

This thread is literally packed with invaluable information but it is so large that many people do not read it in its entirety. It can also be hard to data mine it unless you choose the very best terms on which to search. Many posts contain very important information that is literally buried in the 'noise'.

I feel for this chap who bricked his E4 by downgrading to 1.18.x. I have been engaged in this thread since the beginning and I remember other E4 owners bad experiences when downgrading late models to early firmwares. Such information could have saved this chap $400 :(

It is well known amongst those familiar with the E4 versions that the 2.x firmwares are configured very differently to the 1.xx firmwares and the calibration tables are vulnerable if an attempt is made to downgrade from 2.xx to 1.xx firmware. The later cameras also use a later Hardware revision that early firmwares do not know about. A recipe for disaster as has been detailed here. This warning is to be found somewhere in this long thread !

I started the FLIR E4 useful information thread a few years ago. It has fallen into disuse now. I was trying to pull out the most important facts about the FLIR E4 but not specifically the hacking of its configuration. This teardown thread has grown massively over the years. It would be great to have a new thread that pulls together all the 'hacking' related information for people to read but that would take a lot of someone's time.

For now, I advise newbies to read this whole thread and to be certain that they know what they are doing. If you get it wrong you can brick your camera good and proper !

Regarding FLIR's repair quote...... hacking related repairs are not covered under the warranty (no surprises there) . FLIR operate a fixed price repair system. For simple repairs the fee is $400 in the USA or £400 in the UK.
Kind of makes my basic rate thermal camera repairs at £50 to £100 look like a bargain :)

More extensive repairs like a new sensor or core cost a small fortune and are often more than the camera is worth.

FLIR are a large industrial OEM and they charge eye watering repair fees to cover their service centre costs etc. This is not at all unusual in industry but consumer market buyers are often unaware of the high fixed fee system that is used.

Do not mess with your E4 unless you are confident you know what you are doing !

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on March 01, 2017, 06:10:40 pm
is there a difinitive guide ? I have followed links but found that they are out of date, I have a 2.11.0 firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jrj89 on March 04, 2017, 01:05:08 am
Any info if this will work on the new WiFi model as the original E4 is being replaced w/ the wifi version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: edavid on March 04, 2017, 06:30:37 am
is there a difinitive guide ? I have followed links but found that they are out of date, I have a 2.11.0 firmware.

See the first link in the first post of the thread!

Any info if this will work on the new WiFi model as the original E4 is being replaced w/ the wifi version?

No one knows yet  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 04, 2017, 06:42:44 pm
To find out if the latest version of the E4 may be upgraded, someone has to risk their money buying one. Personally I would buy the older E4 model whilst stocks last and are possibly discounted  ;)

The latest 2017 Exx series releases apparently run Linux and have a heavily encrypted configuration to prevent models being upgraded. It is not beyond possibility that the Ex series 2017 release does similar. When producing a new model release, it seems common sense to better protect it.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: EddieW on March 05, 2017, 06:31:52 pm
Today my new E4 with v2.11 upgraded (resolution and menu).
Works with W10/64bit PC.
Thanks all for the info.  :-+

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ixfd64 on March 05, 2017, 08:24:17 pm
The latest 2017 Exx series releases apparently run Linux and have a heavily encrypted configuration to prevent models being upgraded. It is not beyond possibility that the Ex series 2017 release does similar. When producing a new model release, it seems common sense to better protect it.

I highly doubt it'll never be hacked. A lot of devices are said to be extremely secure, yet they still end up getting rooted or jailbroken. I wouldn't be surprised if that were the case for FLIR products. Even if the firmware is fully locked down, hardware mods should still be possible. Case in point: Xbox modchips.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 05, 2017, 10:50:39 pm
Effort Vs Reward ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jmaja on March 06, 2017, 07:01:26 am
Effort Vs Reward ;)

Yes! For E4 -> E8 the change was really big in performance and price. Also E4 was not that expensive. Hard to see so many trying to hack E75 to E95.

What is the consensus about hacked E4 vs. a real E8? Are they equal or do E8 have selected better quality sensors?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 06, 2017, 09:14:00 am
E8 is not a superior sensor. Configuration differences only.

E4 is upgraded to a configuration more capable than the E8 ! More menu options and noise generator switched off. Official E8 still has the artificial noise generator running.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikhail076 on March 07, 2017, 10:20:27 am
I have 1.22 origin camera updated to 2.3. Hardware version 1.1
Did res hack by using 1.22 conf.cfc but menu hack did not.
i found that issue is in facet.rcc, design_ui, toolbar-config and presets files.
camera hangs when i try to use menu update files from 1.22 or 2.3 menu hack.
may i need a combination of these files?
can anybody help me pls?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 07, 2017, 02:02:51 pm
The update package from user janekivi included all necessary stuff for 2.3.0, though i do not know if it works for cameras upgraded from lower firmware versions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 08, 2017, 06:26:58 am
I have an E4 Wifi on order, it is expected to ship 3/30. Does anyone have more information on the 2.5 firmware previously mentioned? When I receive the camera would anyone be interested in taking a look at the files though a program like teamviewer? Or I could upload them if you let me know which files to upload.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CustomEngineerer on March 15, 2017, 12:41:35 am
Just received my new flir E4 with software 2.11. Without downgrading I followed the fubar procedure here http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)  substituting the script pack files FLIR_E4_2.11.0_hack from 2lps here https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

It worked great and I have full resolution and thermal noise removed and lots more menu options and features. I have not detected any issues. All menu features seem to be there and working. I especially like the 3 spots measurement feature.

Thank you very much to fubar and 2lps and to everyone else involved in setting up the scripts and files needed and working out the various improvements.

Changes were done on windows 7 64bit virtual machine on Virtualbox running on macosx hardware. Drivers were fine on windows 7 64bit. Only trick was trying to get Virtualbox to own the flir USB devices as macosx kept trying to mount the USB volume.

Notes for people running a similar virtualbox set up:

– connect the flir to the computer so Virtualbox can see that it exists, then go into the virtual machine settings to tell the virtual machine to own the device. This does not work instantly – you are just configuring it. Then try and unmount the drive in macosx and unplug the flir.
– I think I shut down windows at this point and quit Virtualbox. Might not be needed.
– Start Virtualbox and boot the windows virtual machine
– plug in the flir and windows should see it and install drivers
– once you go through the procedure to change to RNDIS mode, it is a different USB device so you will have to go through a similar procedure (adding the new device to the virtual machine config) to get Virtualbox and the windows virtual machine to own it. Less difficult this time because macosx is not trying to mount a USB drive.

Cheers,
Anthony

I received an E4 (obviously non wifi) with firmware 2.11 over the weekend and had a similar experience as Anthony here. Only difference is I used an old computer running Windows XP (non virtualized) to do the install. The only minor issue I had was after first switching the E4 to RNDIS mode, when I first turned it on it got hung trying to pick up an IP address. The XP command line interface completely locked up to where I couldn't even force quit out of it (this has happened on other occasions, don't think it was specifically because of the Flir). After around 10 minutes I finally decided to turn the E4 off and unplug the USB cable from it, and as soon as I did networking and the CLI became responsive again. After plugging the E4 back in I was able to continue on with the guide. All in all it only took about 30 minutes (even with the wasted 10 minutes of being hung up) and I have not had any issues with the Flir since (I did get 1 error on the Flir around an hour after completing the upgrade, but have seen others mention receiving the same error, and have not had it since).

Thanks to all who figured all this out.

Edit: Wanted to add that the message from this thread where the FLIR_E4_2.11.0_hack file is supposed to be located (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)) seems to have been deleted. Sorry, I don't remember where exactly I got the FLIR_E4_2.11.0_hack file from, but its definitely out there somewhere.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mikeselectricstuff on March 15, 2017, 01:08:59 am
I have an E4 Wifi on order, it is expected to ship 3/30. Does anyone have more information on the 2.5 firmware previously mentioned? When I receive the camera would anyone be interested in taking a look at the files though a program like teamviewer? Or I could upload them if you let me know which files to upload.
I think a new thread would be appropriate for a significant new model variant.

If Flir were more like Keysight, they'd be sending me a freebie, but all I ever got from them was a soft case!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Theamber on March 16, 2017, 04:45:31 am
I hacked my Flir E4 long time ago the resolution was upgraded so were the new menus the only thing is that the camera firmware stills said it is an E4 and not E8. Can that be fixed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 16, 2017, 10:57:06 am
It is possible to change the ID from E4 to E8 but most owners do not bother. The camera still has E4 on its faceplate anyway.

The camera model ID is held is an eeprom chip that would need to be edited. IIRC the details are buried somewhere early in this thread when we were looking for possible ways to release the cameras full potential. It was a thought that the ID in the eeprom might set the capabilities but this is not the case as we now know.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pimpinge46 on March 20, 2017, 02:31:31 am
I I have been trying to upgrade first gen i3 to an i7 per the pdf but it wont take . I am missing in the original config file some lines that it seems like other have. Example ".caps.config.image.settings.fpgaResolution.resIR int32 "
I have attached below the original file. any help would be great..

#
# ZCam Radiometric - Measurement active + 1 spot + no isotherm + no mbox
# + radiometric store, compatible radiometric format
#
.caps entry
.caps.config entry
.caps.config.name text "i3"
.caps.config.revision text "3.4"
.caps.config.image entry
.caps.config.image.sysimg entry
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool false
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 0
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.resIR int32 60
.caps.config.hw entry
.caps.config.hw.sdcard entry
.caps.config.hw.sdcard.enabled bool true
# ID xxxxxxxxxx
# CRC01 xxxxxxxxx

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KrzysztofB on April 01, 2017, 06:22:29 am
Hello guys.
I'm thinking about getting E4, and trying to figure out, how to determine which units are hackable and which not. One seller told me, that new cameras comes with 2.11. But are all of them hackable? Or maybe not hackable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 01, 2017, 10:17:11 am
E4 up to 2016 model (no Wi-Fi). .......... yes
E4 2017 model with Wi-Fi ........ not known
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on April 04, 2017, 06:30:55 am
Please see thread: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/) for information regarding FLIR E4 Wifi upgrade status.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 08, 2017, 09:25:28 pm
I'm pretty sure you don't actually need to decrypt the conf file on 1.22 - maybe that's why?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 11, 2017, 01:21:00 pm
I'm in the process of hacking my E4 from 2.8 to 2.3 and then hacking. I'm guessing from all the reading that this is the right route? Does anyone have a link to the 2.3 downgrade package? The link in the first page is not working anymore. After this I'm going to do the step-by-step 2.3 hack. This is also current stuff I believe?

Thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 11, 2017, 02:03:57 pm
Update to my previous post. I'm referring to this post (link is not working anymore):

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 11, 2017, 06:39:19 pm
Would there be any point in updating the 2.8 to 2.11 via. Flir Tools and then applying the 2.11 hack? Or should I just wait for someone to send the 2.8 to 2.3 downgrade file?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 12, 2017, 05:28:19 pm
here you go:

2.11 upgrade files:

https://mega.nz/#!gFklHBzA!bgyRLzUBntGM6ytyK4i2OZKqBO3ikjvBALVHuUhpb8c


2.11 hack files:

https://mega.nz/#!NZdEkR6L!AkHtYi8MP7W7Px460a2Z9radSYQT9BrL9vJzF1KGKgQ




Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 05:29:42 pm
Thanks a lot Xavier!

Is the 2.11 upgrade the same that Flir Tools offers as an update? If you want to manually update the firmware, how can it be done? I see no place to manually insert a firmware file?

Thanks again!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 12, 2017, 05:33:03 pm
yes, original Flir files.

You can also do it with Flir tools or manual with FLIRInstallNet.exe which is part of your Flir tools installation. Just search in the programm folder.

Switch to RNDIS mode before manually updating, otherwise it will take hours to complete!

Flir tools upgrade will switch automatically to temporary RNDIS mode.

Enjoy!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 05:38:25 pm
Thanks alot Xavier! You saved my day!

The only thing wrong with my E4 is that it seems to have some calibration problem? Sometimes vertical lines appear on the screen and when the unit self calibrates, the lines disappear. I have no idea why this is. Also before the capture-function (trigger) works I have to wait for like 5 mins (otherwise it says it can't find the memory card).

Some pictures of the issue: https://goo.gl/photos/TL43oRGJaUtYBjx98
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 12, 2017, 05:39:30 pm
Did you do a hard reset after upgrading?

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 05:40:51 pm
Did a software factory reset, and removed battery waited for 2 min and put it back in (if this is hard reset?). Same problem was with 2.8 and now also with the 2.11
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 12, 2017, 05:42:18 pm
The camera reboots automatically after upgrade. KEEP it connected - FlirNetinstall.exe will finish the upgrade after reboot !

For the calibration issue, search in the forum. I might think I have read it before but never saw it on my camera.


regards
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 05:43:03 pm
Ok, I will, thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 12, 2017, 05:45:00 pm
Is this your problem?!

https://www.eevblog.com/forum/thermal-imaging/flir-e4-circular-gradient-issue/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-circular-gradient-issue/)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 05:58:45 pm
Sounds exactly the same, although i also have line(s) appear and dissapear(after camera self calibrates).

Can be seen on an image here: https://goo.gl/photos/TL43oRGJaUtYBjx98

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 06:00:58 pm
I bought the camera used without hacks. I think the best thing to do now is take it to Flir repair (before applying any hacks). I think it should have some warranty still left. At least it was not registered and after registering it said that the warranty was extended for 1year.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 12, 2017, 06:14:02 pm
Very good idea. hopefully you will get hardware 1.2L back not 2.0.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 06:20:06 pm
Hope so! I take it that the hacks won't work with 2.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 12, 2017, 06:23:11 pm
They haven't been able to crack it yet. It's unlikely that it will be 2.0 as that is for the Wi-Fi model.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 12, 2017, 06:58:09 pm
@ollihd,

Please be aware that the FLIR warranty applies to the original purchaser and requires the original purchase receipt from an approved FLIR agent.

FLIR may repair it for you as a goodwill gesture, but please do not be surprised if they ask for a receipt and wish to charge you the repair cost if you do not have such.

Vertical lines are very bad news as that can be microbolometer  column failure. The microbolometer is supported by a 10 year warranty. This may work in your favour as there can be no doubt that the part is still less than 10 years old.

I suggest you carefully craft an email to FLIR customer services and ensure you mention that the microbolometer appears to have a fault.

Good luck  :-+

Best Wishes

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 07:09:32 pm
@Fraser

Thanks for the tips! I will for sure do it like this. I have contacted my local Flir authorized repair company. I will try to get this fixed with them. The product is registered to me, but I don't have the original receipt, although I have all the original calibration documents, etc. If this fails I will contact Flir in Sweden directly and try to sort it out with them. I have also asked the seller to provide me with the original receipt if possible.

This was a total bummer for me. I drove 6 hours to get the unit and was so exited to use it... then this happened... Hope all this ends well.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 07:32:25 pm
One thing to note about the horizontal line is that they only appear after a cycle power off, power on. This is how I get them 100% of the time:

- Remove battery
- Insert battery
- Power on
- Wait for loading to finish
- Press power for 2 sec (power off/sleep)
- Press power for 2 sec (power on/wake up)
- Voila, horizontal line(s)
- Camera auto calibrates, lines disappear for a moment, and then...:
- Voila, horizontal line(s) again

So if I just remove battery, boot = no horizontal lines...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 12, 2017, 07:58:42 pm
My mistake. I missed that the lines are horizontal. That is not column failure. That is Row failure and the way you describe the fault it may be the image processing stages that are at fault and not the microbolometer. I suggest you still suggest that you suspect a microbolometer fault in your letter to FLIR though.

Sadly there is the potential for previous owner meddling in the camera software. A failed upgrade attempt ? It is not unusual for owners who cause issues with their camera during an upgrade, to revert it back to standard spec and sell it. If FLIR find the failed upgrade attempt to be the cause of the issues with the camera, expect a bill from them. The bill is normally around 400 Euros.

I think I saw this camera for sale on ebay and thought at the time that it was 'one to avoid'. A circle of cr*p showing on the standard 80x60 display is a very bad sign. It suggests someone has meddled with it as such a fault is not common in standard spec E4 cameras.

I am sorry that you now have it and its potentially expensive liability.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 12, 2017, 08:06:10 pm
Thanks for the reply. I made a quick video on how I can replicate the problem:
https://goo.gl/photos/Fn7DwcaZEBNkuoPR7

I bought this from a local seller in Finland. It was bought from a finnish Flir authorized company (the one I actually contacted).

The guy I bought it from didn't seem like the "hacking type", but who knows!  :-//

I'll let you know how it goes. I think I will try to re-flash the 2.11 once again to see if it would help (probably it won't).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 12, 2017, 10:20:24 pm
To me that looks like a microbolometer ROIC fault. The FFC event tries to compensate but the issue returns. No idea why different start up types have different effect on the fault. I suggest you pursue the fault repair as a microbolometer failure that has a 10 year warranty period.

If FLI decide to provide warranty cover I suspect you will be provided with a new/reconditioned camera. It will be loaded with the latest firmware version but whether it is the latest platform is impossible to know.

Good luck with getting it repaired.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 13, 2017, 06:45:27 am
here you go:

2.11 upgrade files:

https://mega.nz/#!gFklHBzA!bgyRLzUBntGM6ytyK4i2OZKqBO3ikjvBALVHuUhpb8c


2.11 hack files:

https://mega.nz/#!NZdEkR6L!AkHtYi8MP7W7Px460a2Z9radSYQT9BrL9vJzF1KGKgQ






Are there any further instructions on how to use this ? I'm feeling very wary as I'm not familiar with all the python stuff and how to access the camera "as a drive"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 13, 2017, 06:47:35 am
Have you checked the step-by-step (link in the first post of this thread)? As far as I can tell the procedure is the same for 2.11 as it is for the 2.3 for example. Best practice: always backup! (when you connect to the camera via. ftp the first time). By back up I mean: take all the files that you can from the camera (all will not transfer). I even backed up my legit 2.8 (no hacks) before upgrading to 2.11 (no hacks).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 13, 2017, 06:48:59 am
ok, err when you have a thread over 300 pages ling you don't assume that the first page still remaltes to the last :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 13, 2017, 06:49:58 am
First page has always been updated to reflect the current status of the hack. Mike seems to keep on top of it all

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 13, 2017, 06:50:26 am
here:

http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)


or google it. Firmware update to 2.11 will also work with the official Flir Tools. Make sure that the Battery is fully charged.


regards
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 13, 2017, 06:56:04 am
again given how long this has been going sometimes I worry I'm looking at out of date info and worry about dmaging the camera. What do you mean about it woring with official flir tools ? can I load the hack as an update ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 13, 2017, 11:32:26 am
Ok, good news!

I took the E4 to the authorized Flir dealer here in Helsinki (Vantaa). The only thing I needed to provide was the calibration certificate (to show that the unit is under 2 years old). The technician said that he suspects that the fault is in the "detector matrix" and that is what is causing the "lazy pixel rows" in the screen. He said that this kind of a fault needs to be fixed at Flir Estonia or Flir Sweden factory.

Everything went under warranty and I will get the unit back in 1-2 weeks.  :phew:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 13, 2017, 12:11:07 pm
hopefully the old hardware rev. 1.2L . Flir do not produce the old hardware anymore. Now you will only get Hardware 2.0 with or without Wifi.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on April 13, 2017, 12:15:28 pm
Hope so...  I'm hoping for component change vs. whole board. Is the 2.0 impossible to hack or is there some chance still?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 13, 2017, 05:07:44 pm
amazon UK has a few 2016 units in stock. But not many... I think the market is empty.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mario.ti on April 14, 2017, 04:03:06 pm
hi everyone. I just bought E4 with no wifi. But the info in camera says it's a 3.5.0 firmware. If i searching a firmware in the Flir site, i have info the 2.11.0 is the newest. If i try to use a flirtools, it say, you have newest firmware.
Anyone know how to make  E4+ from it? :-) Does i just need to downgrade to 2.11, at first ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 14, 2017, 06:02:15 pm
I can't get my camera into RNDIS mode, it's stuck on "UVC and MSD"
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 14, 2017, 07:56:33 pm
@mario.ti


it is not possible to upgrade this model. It only works on hardware 1.2L


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 14, 2017, 08:02:38 pm
Simon, you need to force RNDIS mode on. Read back through this thread.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 14, 2017, 08:36:02 pm
Um any idea on which of the 300+ pages it's on?

Sent from my Moto G (4) using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on April 14, 2017, 08:37:14 pm
Search for permanent RNDIS, I'm on phone so cannot help more I'm afraid.

Sent from my ONE A2003 using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 14, 2017, 08:46:32 pm
Ok will do thank you.

Sent from my Moto G (4) using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CustomEngineerer on April 15, 2017, 02:01:12 am
Simon,

Just follow the steps listed on the http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) site directly but use the 2.11 upgrade and hack files Xavier64 linked you to. The fubar site says its for 2.3.0 only, but the exact steps listed on that site work with the files Xavier64 provided on a flir that has firmware 2.11. I did the hack less than a month ago on a new Flir E4 that came with the 2.11 firmware already on it.

Edit: The fubar site has a section on switching the flir to RNDIS mode. This worked for me, but when I first did it, my computer and flir froze up for a while until I finally decided to unplug the flir from the usb, and as soon as I did, every thing unfroze. Then when I plugged the usb back into the flir, it was in RNDIS mode and it finished setting up with an IP address. The main thing is if it freezes during this step don't be afraid to unplug the usb to get it going again.

Edit2: Sorry, I didn't see that you were already on firmware 2.11. You don't need to grab the 2.11 upgrade file that Xavier64 linked to, because you are already on 2.11. You just need the 2.11 hack file. Then when following the fubar guide, in the section Prerequisites->6. Script Pack where it says to download the 2.3 hack pack, you can skip. And in the following steps where it says to use the 2.3 hack pack, you will use the 2.11 gotten from Xavier64's link instead. Everything else is identical to how the fubar site says to do it. The files/folders in the 2.11 hack pack are named exactly the same as the ones in the 2.3 hack pack, so its literally just following the instructions directly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mario.ti on April 16, 2017, 11:36:44 am
Xavier64

I keep my fingers crossed for the guys, in another topic, here (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/).
The same as you, i'll try to help if needed
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Simon on April 16, 2017, 12:42:33 pm

Edit: The fubar site has a section on switching the flir to RNDIS mode. This worked for me, but when I first did it, my computer and flir froze up for a while until I finally decided to unplug the flir from the usb, and as soon as I did, every thing unfroze. Then when I plugged the usb back into the flir, it was in RNDIS mode and it finished setting up with an IP address. The main thing is if it freezes during this step don't be afraid to unplug the usb to get it going again.


He just says to plug the camera in and use the fif file to set RNDIS mode but I can't get into it in the first place.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CustomEngineerer on April 18, 2017, 12:49:48 am
So you are saying that you installed the FLIR device drivers, Flir Tools, Python 2.x (3.x won't work) first. Then when you plug the USB in what happens? Does windows install the device drivers automatically? If not are you sure you hadn't already done this previously? Then what happens when you run the FLIRInstallNet.exe program? Are you saying this doesn't connect to the camera? Or it does but gives some other kind of error when you try to have it load the Set_RNDIS_permament.fif file?

Sorry, if those steps don't work for you I'm not sure what else to suggest. I followed the fubar guide exactly (except used the 2.11 hack files instead of the 2.3 hack files) and it worked for me with only the minor hiccup that I had previously mentioned that required me to unplug the usb to continue.

Edit: This may seem obvious but better to mention it to make sure. When you plug the USB into the Flir, be sure to turn the Flir on.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tokotak on April 18, 2017, 04:32:02 pm
@Pauloven,

.................... I will then work on sorting out the image inversion in the Inframatrics X3 telescopes. Note that the Inframetrics Telescopes are circa 1980's but the optics are superb quality. These cost me around $150 on e*ay. Bargain lenses, even though they invert.

Aurora

As a happy new owner of pm595 I've read almost all your comments here with great interest. Though some questions remained.
How do you fit or plan to fit Inframetrics X3 on pmXXX series cameras? The mounts seems to be different.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 18, 2017, 05:14:04 pm
I have a 7x12 lathe to make mount adapters :)

The Inframetrics X3 lenses have a removeable bayonet mount that is a thread fitting onto the lens body.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tokotak on April 18, 2017, 08:34:45 pm
I have a 7x12 lathe to make mount adapters :)

The Inframetrics X3 lenses have a removeable bayonet mount that is a thread fitting onto the lens body.

Fraser

I see. What are your findings on the Inframertics lens image circle? Is it bigger,equal or smaller then in original Agema/Flir design?
If the distance between the attached Inframetrics lens with the adapter and the main one allows the optical path to be perfect or just usable?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 18, 2017, 09:40:49 pm
You really need to start a new thread if you want to discuss auxiliary lenses for thermal cameras.

I am not very active on this forum at the moment so my responses will not be quick

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tokotak on April 19, 2017, 08:14:14 am
You really need to start a new thread if you want to discuss auxiliary lenses for thermal cameras.

I am not very active on this forum at the moment so my responses will not be quick

Fraser

I agree this thread is not perfectly relevant. Meanwhile I dug out your excellent thread on Inframetrics lens here https://www.eevblog.com/forum/thermal-imaging/thermal-cameras-professional-telescope-and-close-up-lenses-by-inframetrics/msg759564/#msg759564 (https://www.eevblog.com/forum/thermal-imaging/thermal-cameras-professional-telescope-and-close-up-lenses-by-inframetrics/msg759564/#msg759564)

It answered my questions from above. So I'll continue there.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: god_ukr on April 21, 2017, 11:04:52 pm
Hi everyone!

Can anyone point me where Flir E4 can be purchased with discount?
Before I used Zoro, but now Flir in exception list for discount :(

PM please
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Xavier64 on April 27, 2017, 05:14:02 pm
I want to sell my Flir E4+,  its brand new and still under warranty. Just PM me.


regards

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sofi on May 02, 2017, 06:28:15 pm
Friends something new? Did anyone unlock 3.5.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djeans on May 16, 2017, 09:43:44 am
Hi Friends, I now have a 1.18.7 FW with 1.0 HW Flir E4.
is it possible to hack this one too and what files are required? This thread is really long. Can anyone point me please into the right direction

thank you :)
DJ
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2017, 10:52:08 am
The very first post of this thread has links to specific areas of the thread for different versions of the firmware and hardware. You will find all that you need via the link that covers the 1.18 or 1.19 firmware. An update to the 1.19 firmware is not necessary in case you are wondering. Do not update to any firmwRe after 1.19 as they were created by FLIR to make the upgrade harder to achieve.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djeans on May 16, 2017, 02:15:23 pm
Thank you very much Fraser, I followed the 1.19 guide for my 1.18.7 and worked very well.
So doing an update to 2.30.0 ist not required, right? An no benefit also, or?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2017, 04:12:14 pm
In my opinion, it is not a good idea to update the firmware beyond 1.19. I spoke to a FLIR tech and it was his view that any firmware after 1.19 was more about preventing the upgrade than fixing any firmware issue. He knew of no bugs in 1.19 that needed to be fixed as it was stable and fit for purpose.

I am a genuine thermal camera Geek and own two E4's. They are both running firmware 1.19. Never had a problem with 1.19.
IIRC 1.19 firmware was not released as an upgrade for 1.18. Worry not though, 1.18 is just fine.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: joe-c on May 16, 2017, 09:04:45 pm
FW up to 1.19.8 could be calibrated with the Webpage inside the camera.
and they are easier to "enhance"  :-+.

But FW above 2.3.0 have a Thermal Blending mode and can used for RAW Streaming (i never did, but some other with Linux).
Additional its possible to turn off all GUI stuff like scale and Spot cross, for a real thermal view (interesting for video recording over UVC).
And you can change the MSX Distance directly from the View-Mode-Menu.

i think both Versions are not bad  :popcorn:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2017, 09:40:03 pm
@ Joe_c

I agree, there is nothing actually wrong with any of the FLIR E4 firmware versions (except the already identified buggy version that FLIR fixed quickly)

The versions that FLIR released after 1.19 sadly lost some OS functionality and had 'protection' added to make life harder for upgraders. It was understandable, but still a pity. The E4 is an amazing platform in terms of what it can provide for the purchase price, once upgraded. In 1.19 the configuration is so easy to customise that it may be 'tuned' to the users desired configuration. The ability to access the service menu is also a reason for me sticking with it. I do not need video streaming but that is certainly a nice addition to later firmware.

I tend to think it best to stick with 1.19 until a feature available in 2.3 is actually needed.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: plurn on May 17, 2017, 04:05:38 pm
I just noticed a new firmware version for Ex on the flir support site:

FLIR Ex (3.9.0) Update Pack
Last Updated: May 9, 2017
...  FLIR Ex series cameras (S/N prefix: 639). ...

I have no intension of upgrading to that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nos_com71 on May 23, 2017, 11:17:57 am
just to confirm ,steps to upgrade E4 2.11.0 1.2L went smooth only by using a vrtual XP , look for it in Microsoft site (WindowsXPMode_en-us) ,it free and easy to use.
good luck
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on May 30, 2017, 06:39:01 am
Just got my E4 back from warranty repair (previous posts show my problems). Well of course they updated the HW to 2.0L and firmware to 3.9.0. Is there any new news about getting this hacked or should I start selling my E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: chili_red on June 03, 2017, 07:22:34 pm
Does anyone happen to have the 2.11.0 upgrade file they could upload, the links I found in this thread are no longer working.

TIA
Steve
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nos_com71 on June 04, 2017, 05:14:00 pm
Does anyone happen to have the 2.11.0 upgrade file they could upload, the links I found in this thread are no longer working.

TIA
Steve
here it is .http://www.mediafire.com/file/04y50m19u4t0g1v/flir_ex_pn639_v2.11.0_update_pack.zip (http://www.mediafire.com/file/04y50m19u4t0g1v/flir_ex_pn639_v2.11.0_update_pack.zip)
good luck
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on June 07, 2017, 04:27:41 pm
Does someone know if anyone is working on hacking the 3.5.0 or 3.9.0 FW? Would be happy to help as much as I can!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 07, 2017, 06:30:18 pm
There is an E4 Wi-Fi thread running in this sub forum. That is where I have seen the most activity relating to the new (2017 models) firmware.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1178084/#msg1178084 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1178084/#msg1178084)

From what I have seen via a cursory glance, FLIR changed the CRC algorithm used.

If this is the case, and it cannot be overcome, the hack will have come to an end. Then watch hackable E4 prices soar on ebay  ;D

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mb100 on June 09, 2017, 10:50:07 pm
Hello: I am fighting a little bit with the Flir e4. Version 1.2L.

when I try to perform the ftool decryption, decryption fails on "tail part 2". I am not sure if I understand the c# code correctly, but I think that means an early step with a mismatch. I ftp,ed the file with the windows command line and also with core ftp lite (filezilla n/a for windows xp) - same problem so i don't think it is a potentially corrupted conf.crc file, but really the ftool itself that produces the error.

Can you advise if there is an updated ftools to be used for camera version E4 1.2L (not 1.22) sw 2.11.0

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 09, 2017, 11:06:20 pm
Just t  be very clear here:

You have an E4 camera with 1.2L HARDWARE and 2.11 FIRMWARE

You are using the firmware 2.11 hack aren't you ?

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

Your comment about 1.2L, not 1.22 makes me think you may be using the Firmware 1.22 hack ? This would be wrong for your 2.11 camera.

Just checking as I do not hack these later models and have forgotten the names of the tools files used.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: onesixright on June 14, 2017, 10:11:44 pm
Hi All,

I tried to look around here but i can't find it. If a E4 has part number 63901-0101 is that associated with a particular HW version? Or does the new model have the same part number?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BOGET on June 22, 2017, 03:55:12 pm
Hi All,

I tried to look around here but i can't find it. If a E4 has part number 63901-0101 is that associated with a particular HW version? Or does the new model have the same part number?

Thanks!

63901-0101 is older E4's MPN;

63906-0604 is new E4 Wifi's MPN;

63901-0101 is also new E4 without Wifi's MPN;

BTW, the new E4 without Wifi's (63901-0101) S/N is 9 digits, non the older modle is 8 digits.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 22, 2017, 05:24:25 pm
Hello: I am fighting a little bit with the Flir e4. Version 1.2L.

when I try to perform the ftool decryption, decryption fails on "tail part 2". I am not sure if I understand the c# code correctly, but I think that means an early step with a mismatch. I ftp,ed the file with the windows command line and also with core ftp lite (filezilla n/a for windows xp) - same problem so i don't think it is a potentially corrupted conf.crc file, but really the ftool itself that produces the error.

Can you advise if there is an updated ftools to be used for camera version E4 1.2L (not 1.22) sw 2.11.0

I believe ftool was for early FW versions and had not been used for maybe 3 years or so. You should work this thread backwards until you find the latest post that applies to your version of FW.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: energychanges on June 29, 2017, 06:15:04 pm
Hi everybody,

can anyone help me to increase the resolution with my FW 3.5.0?

Thanks a lot
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ollihd on June 29, 2017, 06:52:16 pm
Not hackable, yet. I'm in the same boat with you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: wudecao on July 17, 2017, 03:06:32 pm
My E4 is FW 2.3.0 and hacked. I want to upgrade FW 2.11.0 and hack.

What steps do I need to do?

As my backup files has lost, I can't revert the 2.3.0 hacking.
 
Can I upgrade 2.11.0 directly and hack it under 2.3.0 hacked condition.

(The link of 2.3.0 downgrade File has expired, someboby could send a copy to me :'()
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on July 20, 2017, 05:55:53 am
Good afternoon, help please, bought a camera at auction, but it does not work, the image is in the form of chaotic color strips. Firmware 2.11.0. Outwardly new, there are no traces of blows and damages.
I ask for your help. thanks in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 20, 2017, 06:10:47 am
That looks pretty severe!

You could try reloading the firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on July 20, 2017, 06:43:59 am
The firmware was 2.11, I upgraded 2.11 again
I'm afraid that this is an hardware problem, such an image from an infrared sensor and from a video camera too.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on July 20, 2017, 06:53:46 am
Hmmm, if it's from both, then there could be a dodgy connection somewhere. Would you willing to open it up? If you watch the video you can see how it disassembles. You can then check all connections.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on July 20, 2017, 07:12:20 am
According to the video disassembly there are 2 connections - the infrared camera and the usual camera, they are on different ends of the board and are not connected with each other.
Images from both cameras are missing.
But the calibration periodically clicks, which means that the signal to the board arrives.
I reviewed a lot of forums yesterday, I saw this from one person, but he did not find a solution to the problem.
I thought you might have met such a thing.
The seller sent the camera as fully working. I opened the pictures in the camera and saw that the problem had already appeared with the seller.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 20, 2017, 10:54:12 am
Return the camera. That is not going to be an easy fix and may not even be a viable repair. FLIR will charge a fixed $400 for repair if the microbolometer is not the defective part. The bill is more if it is. Warranty may be available I'd proof of purchase is available to you. If it goes back to FLIR you will receive a 2017 man board in he has spared unit. That is currently not upgradeable in any way.

Personally, unless the camera cost less than $200,  I would send it back and obtain a refund. Why $200 ? ..... that is the scrap value as a parts donor

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on July 20, 2017, 11:18:31 am
I paid 750$+70 shiping
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 20, 2017, 12:09:01 pm
Return the camera. For that money it should be in perfect working order.

If it was an eBay sale, open a case and request a refund. Do no more to the camera as that risks accusations of you causing the problem. This is not a simple 'loose connection' (it rarely is) as it effects both visible and IR cameras.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on July 20, 2017, 02:42:26 pm
Thank you, I probably will, I'm sorry I spent so much time and money
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BOGET on July 26, 2017, 03:26:01 pm
The firmware was 2.11, I upgraded 2.11 again
I'm afraid that this is an hardware problem, such an image from an infrared sensor and from a video camera too.
What is your hardware version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: matmoe on August 04, 2017, 10:34:59 am

in case its needed: flir_ex_pn639_v2.3.0_update_pack.zip

http://s000.tinyupload.com/?file_id=31230308277018046712 (http://s000.tinyupload.com/?file_id=31230308277018046712)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: netengineer on August 08, 2017, 11:40:05 pm
I've been watching this thread for a while, but now it's time to jump in. I have access to acquire the following E4 unit lightly used at a good price:

1.1L (model)
1.22.0 (software)
63901-0101 (part number)

As a professional technologist, I tend to prefer having the most recent hardware. As a fiscally reasonable human being, I prefer to invest the least amount that will guarantee my success to an E8 software port. What is the consensus on the 1.1L/v1.22.0 unit? If not that, what would be the perfect hardware/software version to acquire to have the best technology on a unit with the least risk of bricking?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 09, 2017, 12:43:46 am
EDIT :

'Netengineer' asked whether a specified E4 could be upgrade to E8 spec and in 'fancy speak' basically stated he wanted the latest technology at the lowest possible cost to him (who doesn't !)

He further stated that he intends to use the thermal camera, an FLIR E4 or other, to search for caves and for precious metals in creeks.

For some reason this perfectly reasonable proposal has been removed from his post which makes make response seem pretty abstract in its content.

My response to the original question is below.

Original response......

That E4 can be upgraded.

Whether it will do what you are expecting of it is a different matter

Are you confident that thermal imaging will reveal caves and precious metals in your scenario ? It is not a technology that I have used for such so cannot offer comment on its effectiveness.

I can state that a thermal camera cannot produce useful thermal data through great depths of rock or even shallow water. Remember, the camera can only show you temperature differential. If different materials are present but at the same surface temperature, only the different surface emissivities will allow you to discriminate between them. Place such items under water and you will only see the waters surface temperature and not what lies beneath.

If a large slab of rock contains a hollow area that is relatively near to the surface, the suns heat may well reveal a difference in the rocks thermal density at that point and the void may be discernible if the weather conditions and time if day are favourable. If the rock is covered with soil or plants, these will reduce the effect to a point that it likely cannot be seen.

The Ex range are budget cameras with a fixed focus relatively wide angle lens. It is not the best series of cameras for looking at distant objects, especially if they are small.

A more professional camera range would be the Exx series as these are equipped with a manual focus lens that may be changed to enable the use of wide angle and telephoto lenses. Neither the camera, nor the lenses are cheap though. You need to be very confident in your theory for detecting caves and metals via thermography before buying such a camera, even at used prices.

I suggest you test your theory by seeding an area with metal in a manner similar to that which you expect to find when searching for real, and rent a FLIR camera to see how it performs. You could even try it against known cave systems.

I suspect you will be disappointed with the results.

I would be approaching your challenge using different technology, namely, Geophysical sub surface Radar and an advanced spectrum analysis type metal detector. I have used both and they work well provided you are trained in both use and interpreting the results correctly.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 09, 2017, 02:07:02 pm
Double post ?

You have removed detail of what you are intending to use the thermal camera for. Did you not like me commenting on the feasibility of cave and precious metal (in water) detection using this technology ?

I think I answered your question on the E4. That version of the E4, running that firmware is easily upgradeable.

There is no software 'port' to upgrade the resolution and add E8 menu's to an E4. These upgrades are just selected in the configuration files. Extra menu features were grafted into the Ex build from Exx build to create the E8+ Custom version that most of us use.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: netengineer on August 09, 2017, 02:49:32 pm
Fraser,

I greatly appreciated your discussion around the usage and feasibility of the cave and precious metal usage. I probably should have started with just the tech question about what is the preferred hw/sw model for someone wanting to to the e8 upgrade, but also wants the most modern/capable hardware version. I'm 99% certain that I'm acquiring an e4 model, as I know a lot of people within my hobby have used that exact model with great success. I'm also not opposed to acquiring additional FLIR models should they be far superior for my needs.

My apologies for the confusion in the updated post. No disrespect intended. I just have someone with only 1 e4 unit (hw 1.1L, sw 1.22.0) that will likely be sold soon, so I'm quickly trying to ascertain if the community would recommend acquiring a HW 1.1L / SW 1.22.0 unit or hold out for a better model.

Once that is determined, I'm looking very much forward to testing and exploring your other ideas and recommendations around prospecting and exploration of nature for my hobby's purpose. Thanks again for the help! Much appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 09, 2017, 03:03:57 pm
Where the E4 is concerned, there is no advantage to the later hardware version and the firmware gets more challenging to upgrade with each release

Be aware that after the initial easy upgrade was made public, FLIR were focussed on placing obstacles in the path of users attempting such, not on improving the firmware. The original firmware 1.19 is both stable and very effective. Later firmware versions did not improve imaging performance as there was nothing to improve.

The very latest E4 camera release known as the 2017 models are not, at this time, upgradeable due to better countermeasures in the firmware.

With the E4, earlier versions likely command a better price due to the ease with which they can be upgraded and modified.

As stated, the Exx series are more capable, but they cost more on the secondary market as a result. They use the same core firmware as the Ex series but the microbolometer and lens are superior performers.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SolderSucker on August 21, 2017, 04:56:19 pm
I understand that there may be problems when trying to enable the enhanced menu on a Flir E4 that has had the firmware downgraded from 2.8 to 2.3 (and modded for the high resolution) - is that still the case?

I've done a lot of reading on the matter and can't find anything definitive.

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: robert_ on August 22, 2017, 06:58:08 pm
hello
my new camera E4 (no wifi)
 is Fw 3.5.0 (2017 mars)
connect to RNDIS donwgrade to 2.3.O
and apply hack and menu
is very good work
Downgrade FW 3.5.0 to 2.3.0 is possible!!!
confirmed  :-+

Any proof on that?
Posting the exact same text on several places doesnt add any credibility to what i will consider to be BS untill proven otherwise.
Theres no fun in writing up BS in hope others break expensive hardware trying it out.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cricri103 on August 26, 2017, 07:52:52 am
I made a mistake!!
My model is 1,2L
FW 3.5.0
Mars 2017
This is not the model 2L
Sorry :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scm on August 28, 2017, 10:01:26 am
Hi


I triy to hack the Flir E4. I made all steps from the guide succesfully until the first filezila-step. I cant connect to the camera. The Flir is in the RNDIS mode. I can ping the Flir so there should be a connection. I get this error in Filezila:

Status: Connectiong attempt failed with "ECONNREFUSED - Connection refused by server."
Error: Could not connect to server



What can i do?

Best regards
scm

**edit 08.28.2017**
Now it worked. I've changed to a windows xp PC.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: groundhog on September 02, 2017, 11:17:21 pm
[ This is a copy of a reply I made in the thread about the E4 wifi model, but the question is generally about converting between cfc and cfg files, so perhaps it might get a response here? ]

I've been trying to better understand cfccfg.py and cfccfg_V2.py.  I'm having difficulty decoding the conf.cfc file into a conf.cfg file, even when using what I believe to be the correct SUID value.  As a check, I tried to decode the conf.cfc file from DaveWB's "Stock Camera" zip file over in the E4 wifi thread (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/)), using the SUID value that DaveWB mentioned in that thread (22C7E4020050281A), and I get non-ASCII output in the conf.cfg file.  Specifically:

Code: [Select]
% python cfccfg.py 22C7E4020050281A conf.cfc conf.cfg1
% python cfccfg_V2.py 22C7E4020050281A conf.cfc conf.cfg2
% sha1sum conf.*
cc151985fdc0177f125e8420ced6df4a549ac021  conf.cfc
e3a3b0a4e89b6429cc2618ecb3581ab40230da79  conf.cfg1
3b59eb9f3fc0176acd6a652212a1ab1fcc06f359  conf.cfg2
% strings -n10 conf.cfg*
&YNbM(|(M:
&YNbM(|(M:

The conf.cfc file's SHA1 sum I believe corresponds to DaveWB's "Stock Camera" file, and the "strings" command shows that there's nothing remotely resembling the cfg file ASCII contents in the resulting output.  The differences in SHA1 sum of conf.cfg1 vs conf.cfg2 are because cfccfg_V2.py strips off the tail; the decoded contents up to the tail are identical (and non-ASCII).

What's super puzzling to me is that DaveWB reports that he got his file decoded using cfccfg, using the same SUID that I'm trying to use on his same file...  I get the same issue when trying to decode my own cfc file with my own SUID value (the same SUID value reported by the "suid" command and from "rls" output).

Any thoughts on what might be going wrong here?  Am I somehow calling cfccfg.py wrong?  Does the SUID need to be supplied in some other format?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 03, 2017, 12:24:14 am
I recall at earlier hacks there was a requirement for a particular version of Python software. Check if you are using same version as the other person.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eg14 on September 03, 2017, 08:56:53 pm
Does anyone know where one can obtain a modifiable E4 these days?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: groundhog on September 05, 2017, 02:41:08 am
Thanks for the suggestion about the Python version.  Unfortunately, I couldn't find a Python version that works (and I'm a bit skeptical that the Python version matters).  I tried Python 2.6 (2.6.9) and 2.7 (2.7.12), and both gave the same results.  I also re-implemented the SHA1/RC4 logic from scratch, based on the description of the algorithm by tmbinc (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg530520/#msg530520 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg530520/#msg530520)), and it also produced the same result as cfccfg.py.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: LTCAnonymous on September 09, 2017, 05:49:42 pm
Hello guys, if anyone can help me I would appreciate it. I have flir e4 1.1L with firmware 1.21.0 but unable to complete the upgrade. Below is the original config file and if someone modify it for me.
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stefbeer on September 09, 2017, 05:59:43 pm
@ LTCAnonymous: I think this will help you: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SamLowryBrazil on September 10, 2017, 12:00:06 am
Yesterday I got a Flir e4 on ebay for £500, brand new from UK-based erontec. It is the Wifi version, so I knew that it is currently unhackable. If you were to give me betting odds, what are the chances of a hack before 2018? By the way, I was proud to think up the zinc selenide lens idea on my own, and then surprised to watch Mike's excellent video and realise it is old news!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 10, 2017, 04:32:53 am
Thanks for the suggestion about the Python version.  Unfortunately, I couldn't find a Python version that works (and I'm a bit skeptical that the Python version matters).  I tried Python 2.6 (2.6.9) and 2.7 (2.7.12), and both gave the same results.  I also re-implemented the SHA1/RC4 logic from scratch, based on the description of the algorithm by tmbinc (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg530520/#msg530520 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg530520/#msg530520)), and it also produced the same result as cfccfg.py.

I checked and this SUID does not decode properly  the "stock camera" .cfc file. Seems it is from a different camera image.

EDIT: this SUID properly decodes the conf.cfc file supplied by user Boget in this post:
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1183379/#msg1183379 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1183379/#msg1183379)

I found a few typos in that conf.cfc file, fixing which may help with the work on wi-fi version of the camera. Read my post here:
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1298737/#msg1298737 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1298737/#msg1298737)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2017, 11:43:09 am
@Samlowrybrazil

Congratulations on buying an E4 and finding this forum.

The current situation is that FLIR have done what they likely wish they had done in the original E4 firmware.
They have significantly increased the difficulty in upgrading the cameras configuration files.

You need to read back in this threads history to see how FLIR responded to the upgrade of the E4. They were limited in what could be done to the standard firmware build in terms of countermeasures. They applied basic protection that was circumvented by members of this forum. I should state, even these measures required the significant knowledge of some clever guys to get around them.

The original upgrade was relatively simple as the only challenge was to recalculate the CRC01 checksum for the modified configuration files. A clever forum member wrote the required CRC01 calculator and shared it with us. He deserves recognition for his work !

This first upgrade technique did not really qualify as a 'hack' of the camera. As FLIR placed ever more challenging barriers in the way of the upgrade, it began to edge into the world of hacking in order to beat thiese countermeasures. The defensive capabilities of the early firmware and hardware was not that great however and clever people found ways to still upgrade the camera configuration files.

Now jump to 2017 and the release of FLIR's Wi-Fi equipped Ex series. Both 2017 Wi-Fi and non Wi-Fi capable Ex series cameras use the same hardware platform and firmware. With this new version of the Ex series, FLIR have put some decent effort into thwarting attempts to upgrade the cameras. Changes to the firmware are no longer a 'simple' case of calculating CRC01 and CRC03 values. The camera appears to now be protected using public-private key encryption.

If you are not familiar with P-P encryption you may wish to google it to see how effective it can be. This is not the place for an encryption lesson. If I were just to say that even Governments hate P-P encryption, that is done well, you will understand the challenge that the'front door' security of the Ex series now presents. There are sometimes ways to circumvent encryption via a back door that provides access to what is needed but you are well and truly into hacking territory now.

The two vulnerabilities that the Ex series camera still exhibits are its use of Win CE and the fact that physical access to the hardware is still unprotected from hacking. These vulnerabilities would take significant effort and knowledge to exploit though.

Basically, if FLIR have indeed gone down the route of P-P encryption, and have done it properly, had it penetration tested, and it has passed the tests without P-P key vulnerabilities, the E4 2017 model will likely remain unhacked for a very long time ! 

A way around the current situation would be to gain access to the hardware, meaning the chipset, and then placing a cloned copy of an earlier E4 camera onto the platform. This is a VERY significant challenge as all flash memory areas need to be accessed to complete the cloning operation. All the original calibration data would be lost and the camera would need to be recalibrated and a new dead pixel map created. I am not saying this cannot be done, but it is more effort than the camera is worth. Better to buy a used E4 that can be upgraded.

I own two E4 cameras that are running the excellent, and very upgrade friendly firmware 1.19. Firmware 1.19 even has the excellent service menu for dead pixel map updating present in it (later removed by FLIR) Both are upgraded to E8+ spec  ;)  I will be selling one of them as I now have an E60+. If anyone is interested, let me know :). .... end of advert !

Fraser
UK
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2017, 12:15:33 pm
P-P cryptography explained.....

https://en.m.wikipedia.org/wiki/Public-key_cryptography?sa=X&sqi=2&ved=0ahUKEwid8YjIy5rWAhWiJsAKHWyaB9wQ9QEIGTAA

Done properly at all levels, hardware and software, it is VERY resilient against cracking  ;)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2017, 01:04:37 pm
I have made a decision...... shock, horror, I am going to sell a thermal camera rather than buy one  ;D

I will be advertising my used, spare E4 in the For Sale area of this forum later today. It is running its original 1.19 firmware (the best version in my opinion) so it has the nice service menu and easy reconfiguration needing only FileZilla and the CRC01 calculator provided in this thread. It is so easy to enable and disable features on this firmware.

My unit has already been upgrade by me to the E8+ spec and it has the extra menus as well  :) Fully operational with battery, charger, USB lead,  hard case and original documents.

If you are interested, you can PM me or wait to see the advert and pictures later. I am still considering how much to ask for it and welcome offers. If I like the offer, it will not even get to the for sale area ! This is NOT a silent auction though ! I will be fair to all.

Fraser
Milton Keynes UK
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SamLowryBrazil on September 10, 2017, 02:35:59 pm
Thank you very much, Fraser!
I know very little about electronics and nothing about programming, so I try my best to decipher the technical stuff on this forum! It's a shame that the e4 can no longer be upgraded to its full potential; I was considering getting one a year or two ago for £750-850. Now I know this is why one other Ebayer made only one bid and let me have it for £500!

The Flir hasn't arrived yet, but I also bought 2x ZnSe 50mm focal length, 2x 63.5mm, and 2x 100mm lenses. They were £10 each on Amazon and shipped from the UK. I'll have fun playing around with them for macro, but what are my chances of making something telescopic? I have heard it is almost impossible of an amateur. I don't mind about an inverted image, but is the problem too few lenses or mirrors or the type of these cheap laser cutter lenses?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 10, 2017, 02:56:55 pm

My upgraded E4 is up for sale now.......

https://www.eevblog.com/forum/buysellwanted/fs-flir-e4-thermal-camera-fw1-19-upgraded-to-e8-from-fraser-the-thermal-nut- (https://www.eevblog.com/forum/buysellwanted/fs-flir-e4-thermal-camera-fw1-19-upgraded-to-e8-from-fraser-the-thermal-nut-)!/

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: groundhog on September 12, 2017, 03:18:22 pm
Thank you for tracking down the conf.cfc file that corresponds to DaveWB's SUID.  It's good to have a confirmed example of a conf.cfc file that properly decodes -- I'm able to decode it just fine now with cfccfg.py!

Now I just need to figure out why my camera's conf.cfc does not decode with the SUID value that my camera reports..

On my camera, running the "suid" command via telnet, or looking up the suid value with "rls -l -r" under .version.SUID, produces a 16-byte string (the same string both from "suid" and "rls -l -r"), but cfccfg.py produces garbage output when decoding any of the 3 conf.cfc files from my camera's FlashFS image (in appcore.d, ui.d, and services.d) that I downloaded via FTP (both with filezilla, and directly downloading an individual file with command-line ftp).

Any guesses off-hand as to what I might be missing here?  The camera is running 2.11.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: groundhog on September 12, 2017, 03:50:59 pm
One thing I should have mentioned earlier is that my camera is an E6.  So far, it seemed identical to the E4 as far as the DLL modifications were concerned, but perhaps the decoding algorithm for .cfc files is slightly different on the E6 as opposed to the E4?

Overall, the E6 .cfc files seem similar enough, and @tmbinc generated a diff for the E6 conf.cfc file a while back (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg816257/#msg816257 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg816257/#msg816257)).

One thing that seemed suspicious is the "2A00" tail constant used in cfccfg.py.  I thought maybe "2A00" is specific to the E4 camera, and I tried iterating over all possible 1-byte and 2-byte tail values, but nothing produced a sensible conf.cfg file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 12, 2017, 05:58:41 pm
Sorry, I know nothing about E6...  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: groundhog on September 14, 2017, 03:11:32 am
Well, embarrassingly enough, turned out the problem was that my camera was 1.1L (not 1.2L), even though it was running software version 2.11.0.  Which meant that I should have used the older ftool to decode and re-encode the .cfc files.  I didn't quite realize that 1.1L cameras used the older conf.cfc encoding format regardless of firmware version.  Now I know. :-)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 14, 2017, 10:18:10 am
Groundhog,

You got lucky. Your camera has obviously been updated to the newer firmware at some point in its life. Other owners had the same situation after returning their camera to FLIR for calibration or rework. FLIR like to install the latest firmware in any camera they receive. Those owners discovered, as you have, that it was possible to revert the camera to an earlier firmware version again and that not all the countermeasures were present in their cameras due to the earlier hardware version/bootloader (?)

Well done for working this out and getting the upgrade working.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmbinc on September 28, 2017, 04:29:54 pm
(As a side note, 2.3 already use public key cryptography to sign the configuration files, and had a chain-of-trust by verifying the hashes of everything that they boot. They just messed it up when they didn't implement MD160 correctly because they assumed "char" is an unsigned type - which it is on some compilers - but in fact it was signed. That allowed to patch files without changing their hash, and in turn allowed to remove the signature requirement for cfc files)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sof1980 on September 28, 2017, 07:31:19 pm
Good day to all
I'm newbie. Sorry for my questions.
I going to buy used Flir E4 and hack it to E8.
But where I can see firmware version in Flir E4?
And how I can know 1.2L or 1.1L?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miliskot17 on September 29, 2017, 10:35:37 am
Will anyone advise me on hack FLIR E5 version 2.0L, firmware 3.5.0, does anyone have a way to hack? i would need files to hakt this version thanks for the advice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: miliskot17 on September 29, 2017, 10:39:29 am
Hello everybody!!!

I bought flir E5 few days ago, only yesterday I found that I can hack her through this forum....
I did not resist a long time...
The thermographic camera has the fw 2.11
i followed this http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/) , with the files indicated here https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880, (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880,)
res and menu hacked!  :-+ Thanks to all those who have worked for this wonderful hack!!!!!
Now everything seems to work fine except this screen appeared 2 times.
I turned off and on again.
the error is serious?
what can it be?
you advise me to put everything back the original?

I hope will be of help to other people who E5 2:11


Will anyone advise me on hack FLIR E5 version 2.0L, firmware 3.5.0, does anyone have a way to hack? i would need files to hakt this version thanks for the advice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 29, 2017, 11:10:23 am
Please check out the Ex series Wi-Fi 2017 model thread.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/)

No hack at this time.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 01, 2017, 07:27:50 pm
Hi. I got to repair a thermal imaging camera Flir E4. No image. No thermal image also   from the camera no image.  I can enter the menu. The computer sees the old photos. Firmware 2.11.0 . In memory contains the file - Z3comb_v2.11.0.fif, Z3comb_v2.3.0.fif and eFLIRInstall.exe and flir.db. I don't know the history of the imager. Maybe he changed the firmware. I think the problem is in the firmware. How to restore it? I don't know where to start?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 01, 2017, 07:43:00 pm
Uho,

I am no expert on the software side but I would not normally expect to find .fif files in the camera. I thought .fif files were what sat on a PC during an upgrade and were then installed by the FLIR install program.

I could well be wrong about that though. Others will advise.

The fact that two versions of firmware .fif files are present also seems wrong to me.

If they do not belong on the camera, they need to be removed. They would also be evidence that someone tried to upgrade the camera and did not really know what they were doing.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 01, 2017, 07:50:50 pm
Yes. I think that someone incorrectly stitched the camera. This camera was bought by a friend on ebay. The files were in the folder FLIRUPdate.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 01, 2017, 08:05:14 pm
Yep, no such update folder belongs on the camera. Maybe someone tried to run the FLIR update program on the Camera !

It would Be useful if you can list the various folders and files on the camera as we can then look for modification dates and missing files.

If you look through the cameras file system you will see which files have changed as their file date will be more recent than the majority on the camera.

Look in Appcore and Ui folders first.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 02, 2017, 09:41:06 am
I checked the files. They were changed. And one more nuisance. I could not turn on the camera. She did not turn on. Loading started only after the memory chip was warmed up. :palm:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 02, 2017, 10:25:26 am
I have not checked but on first glance there appear to be be a lot of files in that root list that do not belong on an Excseries camera.... rdump, rclone etc. To me this looks like someone trying to investigate the OS from within the cameras OS. It is possible that it has a hardware fault and someone was trying to investigate it with Win CE tools and even tried a firmware update to solve the problem.

I am not near my E4 at the moment so cannot confirm my suspicions yet. I will check later.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 04, 2017, 01:44:22 am
Yep, no such update folder belongs on the camera. Maybe someone tried to run the FLIR update program on the Camera !

Looking in the command file from v3.9.0 firmware update package there is a line:

Code: [Select]
Command:\FlashIFS\FLIRUpdate\eFLIRInstall -c \FlashIFS\FLIRUpdate\Excomb_v3.9.0\eFLIRInstall_MSD.dat
Which is an indication that FLIRUpdate folder and eFLIRInstall.exe both exist on the camera at some point as part of firmware update process. They may get deleted after successful update. The files still sitting there may be an indication of a failed update, e.g. because of power or communication interruption, etc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 04, 2017, 06:56:18 am
Please check out the Ex series Wi-Fi 2017 model thread.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/)

No hack at this time.

Fraser

There may be one now  8)
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1316048/#msg1316048 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1316048/#msg1316048)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 04, 2017, 07:53:52 am
I found a picture in the camera's memory. Perhaps this was the reason for the flashing. I looked at the dates of the changes. .How to re-flash 2.11.0?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 04, 2017, 01:56:21 pm
(As a side note, 2.3 already use public key cryptography to sign the configuration files, and had a chain-of-trust by verifying the hashes of everything that they boot. They just messed it up when they didn't implement MD160 correctly because they assumed "char" is an unsigned type - which it is on some compilers - but in fact it was signed. That allowed to patch files without changing their hash, and in turn allowed to remove the signature requirement for cfc files)
Many thanks tmbinc, i capitalized on your work to liberate the latest camera model :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 05, 2017, 01:47:23 am
I found a picture in the camera's memory. Perhaps this was the reason for the flashing. I looked at the dates of the changes. .How to re-flash 2.11.0?

Why do you want 2.11, did you try updating to the latest applicable one? Did you try this procedure?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 05, 2017, 05:25:57 am
Thanks for the instruction. But I've already tried to use Flir Tools. Writes: this is the newest firmware for the camera. It does not allow to flash again. Perhaps  need a different version of the program?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 05, 2017, 05:38:08 am
Try searching this thread for 2.3.0 update package or ask if anyone can provide one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cricri103 on October 05, 2017, 05:53:55 am
Hello Uho
I had the same problem as you
the thermal sensor has been cleaned
I thought there was a dust after dismantling the camera I clean the thermal sensor I found myself with the same problem as you
Not a software problem but rather because you disassembled the camera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 05, 2017, 06:08:08 am
The camera did not work in the assembled state. I think that there is a problem with the memory chip. Once the camera stopped turning on. I heated the microcircuit. The camera turned on. Someone tried to change the firmware, but it was not properly installed due to the aparat problem. I want to reinstall the firmware.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: BOGET on October 06, 2017, 02:08:29 pm
I found a picture in the camera's memory. Perhaps this was the reason for the flashing. I looked at the dates of the changes. .How to re-flash 2.11.0?
Hi,

I think that might the VOx uncooled thermal sensor has a problem of connection,

please check the connector or the golden wire is broken which connect sensor signal to pcb.



BTW, if it's a firmware problem usually has two conditions,

1.signature check failed: your camera will never login again.(stuck in FLIR logo)

2.an older mixed new firmware: the screen will be like water stains on it. (It ain't completely no picture)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 06, 2017, 07:17:35 pm
Thank you. I'll check tomorrow contacts. But I think this is the problem of firmware. Not only thermal but also a visual camera does not work. As soon as I got it, he was hanging on the Flir screensaver.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 07, 2017, 02:42:19 am
What the FLIR screensaver is ? The boot screen with FLIR logo ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 07, 2017, 05:04:36 am
Yes. Only the Flir logo was on display. The first time I waited 30 minutes. Download has not started. Only after several attempts the thermal imager was turned on. Some of the functions did not work. Did not show the serial number. I saw the serial number only after warming up the memory chip.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 07, 2017, 05:54:07 am
Can you switch the camera to RNDIS and ftp to it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Uho on October 07, 2017, 06:00:22 am
Can you switch the camera to RNDIS and ftp to it?
Yes. I gave photos.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: buildingscience.ru on October 11, 2017, 05:52:27 pm
Please help: Is LCD in E4 custom or somehow standard, cause I need a replacement - some salty water got inside and corroded couple contacts in flex cable. Camera works via usb just OK, but not viewfinder.

(I'm not that sure in my ability to restore copper tracks, but had ordered microscope just in case)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Naguissa on October 14, 2017, 07:53:37 pm
Backdoors:

https://linustechtips.com/main/topic/845838-flir-cameras-have-unremovable-backdoors/ (https://linustechtips.com/main/topic/845838-flir-cameras-have-unremovable-backdoors/)

https://www.bleepingcomputer.com/news/software/researcher-finds-unremovable-backdoor-accounts-in-flir-thermal-security-cameras/#.Wd-eZ2COCbY.twitter (https://www.bleepingcomputer.com/news/software/researcher-finds-unremovable-backdoor-accounts-in-flir-thermal-security-cameras/#.Wd-eZ2COCbY.twitter)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 15, 2017, 07:01:18 am
What the "security researcher" should had known is Flir software calling home right under his nose.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg340063/#msg340063 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg340063/#msg340063)

He better ask Flir about that rather then about some accounts that may be there for service purpose.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eg14 on October 16, 2017, 06:29:02 pm
Congratulations!

Let's say you won a lottery!

I would be just happy to have the same sensor noise value as you have!

Absolute record was something like 12.84 or so...
The absolute looser I am with 26.56

:)

You are much closer to the first than to the second :)

I think you are happy now!

Digging this one up from the grave, but I think I set a new low noise record with my E4

measureInfo.temporalMk double 12.779606
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: snk_pl on October 29, 2017, 07:31:54 pm
I want to share with you my "cool story bro". This site help me alot.

More than one year ago I upgrade my i3/i7 to E4. It was second hand unit 1.2L 2.3FV without modification. Everything looked cool.

I've made backup and resolution hack. After that problems started. Camera sometimes would not boot corecly:
no thermal image (green screen) or test image
no sd card error
app stopped error

After cold restart it worked or not. Tryed different hack. Nothing helped.
Yesterday I had enough. Started my research: My serial number is 6397**** so after few hours i know my flir was 2.11 downgraded to 2.3 hacked (fuc**d), restored, sold to me :>

So I upgraded back to 2.11 and tryed python hack for res and menu. Everything like in description but only menu hack partly worked. No res upgrade.

To make things short I had to run script again (with error thac camera is patched) to get hacked common_dll.dll and conf.cfc in hack folder

then telnet 192.168.0.2 and "stopapp" to kill all running on flir apps

then filezilla to manually upload common_dll.dll and conf.cfc from hack folder

And it worked !! Aslo no problems with stability on 2.11 :blah:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ZX12 on November 01, 2017, 09:54:34 am
Hello,
I have with my new E4, SW2.11.0, 1.2L the following problem with the update: Although I can call the USB (Camera) menu, but I can not select the RNDIS mode (and no other than the default). What am I doing wrong, or what do I have to do differently? (No connection to PC, Cam. Vers.:63901-0101)
Thanks for help and Sorry for my bad English, i am from Germany ...
Best regards, Tom
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 01, 2017, 01:37:11 pm
Flir disabled mode selection in that screen long time ago. You cant use it. Search this thread for RNDIS temporary and permanent fif files, and use FlirInetallNet executable with the fif files to change USB mode.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gregor11 on November 02, 2017, 04:21:40 pm
I have a problem updating Flir E4 3.5.0 to 3.9.0, Flir Tools does not find updates for my camera. Only live preview and you can download photos.
Can I update directly with FlirInstallNet. What does Force GetHW Type.exe do?
 It seems the only thing that I am having trouble with is (Shift+Ctrl+ Alt)  does noting but highlight the Camera in FLIRTOOLS.  It does not open an explorer window to allow me to select the appropriate 3.9.0.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 02, 2017, 05:24:53 pm
Make sure the 3.9.0 update applies to you camera part number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: gregor11 on November 04, 2017, 10:20:37 am
Hello Bud
I updated the camera, uninstalled Flir Tools 6.3 and installed Flir Tools 5.13 and upgraded to 3.9.0.
A big thank you to Bud and all involved.


regards

gregor11
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: caseyweed on November 05, 2017, 06:14:59 pm
I successfully upgraded my E4 thanks to this thread! I appreciate all the helpful info found here. I have attached before and after shots, BIG difference!

Sent from my Pixel using Tapatalk

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scout79 on November 08, 2017, 06:32:46 pm
I was concerned that the Micro-USB socket of my E4 will be damaged when I disconnect/connect it too often for charging or transfer of pictures.

A few days ago I found some magnetic Micro-USB adapters.
There is a small part that fits in the socket of the E4. The larger adapter is connected to the USB and charger cable.

When you move both parts together they hold because there are small magnets in it.
The orientation does not matter. You can rotate the connector by 180° and it is still working.

You should be able to find these adapters in shops that sell mobile phone accessories.

At the moment I do not know if this will be stable for long term.
But maybe this is also interesting for some of you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: onesixright on November 13, 2017, 07:02:11 am
I posted in the Repair section, about replacing (where to buy) the screen of a eX series. Don’t want to x-post, but maybe someone here knows. Thanks!

https://www.eevblog.com/forum/repair/replacement-lcd-for-a-flir-ex/ (https://www.eevblog.com/forum/repair/replacement-lcd-for-a-flir-ex/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inspectotgadget on December 04, 2017, 12:33:30 am
Can anyone tell me why this shows up on the final step
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: inspectotgadget on December 04, 2017, 04:28:57 am
figured out issue.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ems23! on December 08, 2017, 11:59:13 pm
HI,

Thank you for this hack, I just applied it to my E4 3.9.0, i followed all the steps but i came across a small issue...

I have 320x240 res, and new colour plates and a warning that the camera has 'hacked firmware' -> all good!

But my menus are the same and I don't have any new 'measurements' or manual temperature scale despite me moving all the files in ui.d to the correct folder any ideas what could be the issue?

EDIT:
I think its now working - i have not followed the instruction to the dot... I renamed and left conf_old.cfc in the folder rather than overwrite it... after removal of this old file its now working
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: roma3210d on December 21, 2017, 02:30:46 am
Good day everyone!
I have Flir e5 (upgraded from 1,19 to 2.3 by myself |O). How can i hack it for now? Changing config.cfg with CRC01 is not working or may be i doing something wrong? 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 21, 2017, 02:51:54 am
Browse this thread back for the latest post with attachment from user janekivi. It was posted around beginning of year 2015 I believe.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on December 21, 2017, 04:25:46 pm
I all,
I just finished reading the whole discussion (334page, yes!!!), and it's high level.
I have some ideas to virtualize the installation of the firmware, if it works it could let us test on any changes before injecting it on the camera ......
For that I need to gather more informations.
At first, could someone give me the USB connection report in different modes? using ChipGenius.
MSD                   
UVC                 
RNDIS                 
RNDIS and UVC         
RNDIS and MSD         
UVC and MSD (standard) <<<
RNDIS, UVC and MSD   

Please, if the serial number appears on the report, delete the front by setting "639 *****" for example

Thank you........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 21, 2017, 04:46:53 pm
You only need RNDIS and 'UVC and MSD'. Playing with other modes can lock you out in one way or the other from accessing the camera. I speak from experience.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on December 21, 2017, 05:25:36 pm
You only need RNDIS and 'UVC and MSD'. Playing with other modes can lock you out in one way or the other from accessing the camera. I speak from experience.

After 334 pages of reading I understood this information. It is only that this requested data would allow me to better understand some USB links with the camera.
nb: I do not have a camera under my hand !!!  |O

Thank you  for your reply..........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 23, 2017, 02:10:37 am
Today, such a point appeared on my E4.
What can this be? Dead pixel?
(http://joxi.ru/nAyW0guXRNn7mZ.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 23, 2017, 07:30:28 am
Today, such a point appeared on my E4.
What can this be? Dead pixel?
(http://joxi.ru/nAyW0guXRNn7mZ.jpg)
Dirt on sensor/lens by the looks of it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on December 23, 2017, 10:08:14 am
Hi, this is probably an organic dirt (multiple aerole) and which is probably on the optic of the camera. The lens should be examined under a very good light and playing on the incidence of light by changing angle (the optic of the camera in front of you). You will find the dirt on the lower left quadrant. Clean with a microfiber cloth ...........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 23, 2017, 12:06:31 pm
Thanks guys.
I dissasembled and looked at lense and sensor. There was some particle of dust on the lense and sensor. I cleaned it up and the spot are gone.

But after assembling I got new problem with aligment MSX. Too big offset , and aligment settings in camera menu can not fix it.
(http://joxi.ru/Grq0bkHN0J0nAz.jpg)

Is there any relatively simple way to configure this offset?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 23, 2017, 12:17:41 pm
Dismantle, remove camera module and carefully reseat it on the chassis. Ensure it its rear is sitting perfectly flat on the chassis. Test and reassemble camera. The MSX horizontal alignment is totally mechanical as the visible light camera sits directly above the thermal camera lens. The MSX adjustment only compensates for the vertical offset.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 23, 2017, 01:45:46 pm
Dismantle, remove camera module and carefully reseat it on the chassis. Ensure it its rear is sitting perfectly flat on the chassis. Test and reassemble camera.
Tried several times. Visible light camera is placed tightly on the chassis.
It is not possible to displace it, except that I will try later to put something under one side, so that it will be not parallel to the basis.

The MSX horizontal alignment is totally mechanical as the visible light camera sits directly above the thermal camera lens. The MSX adjustment only compensates for the vertical offset.
At the loading of the camera's OS, you can notice three different horizontal positions of visible light image. Looks like software shift of the visible image, not totally mechanical. The first offset is small, and the last is significant. I did not notice how it was happened before, maybe these jumps was too, but the alignment before the disassembling worked well.
https://youtu.be/tZlAMO4zedA
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 23, 2017, 02:24:17 pm
Interesting. Thank you. I learned something new today  :-+

So sadly your visible light camera may not have been flat on the chassis when built and was adjusted in software. Sadly I do not know where that setting is held so you are left with shimming the rear of the visible camera module  :(

I have not noticed the horizontal alignment taking place on my cameras. Presumably very little alignment is normally required so it is easily missed during camera start.

I wonder if any of our clever fellow forum members know where the MSX horizontal offset value is stored ?
On the earlier firmware versions there is a service menu. That menu provides all manner of correction options. The alignment of MSX may be one of them. Sadly when FLIR deleted the service menu, they also removed some very useful service functions that have nothing to do with upgrading the camera to higher resolutions. A great pity. That is why I am such a fan of firmware 1.19. It is intact in all respects.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 23, 2017, 03:34:04 pm
I find something here:
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg406311/#msg406311 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg406311/#msg406311)
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg406402/#msg406402 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg406402/#msg406402)

Looks like offset data stored in "/FlashFS/system/calib.rsc" file.
But I do not really understand what kind of code this is, and how to implement it to my e4 to modify this file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 23, 2017, 03:38:29 pm
That is why I am such a fan of firmware 1.19. It is intact in all respects.
I have 1.22 firmware. Is it real to downgrade to 1.19 from 1.22?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 23, 2017, 06:03:28 pm
Hi,

1.19 was not released by FLIR as a downlodable firmware file. I do not think downgrading to 1.19 or even the available 1.18 firmware is possible due to FLIR's revised firmware contents. You risk bricking the camera. Such a downgrade will have been discussed in the early pages of this thread as people tried to hack their 1.22 firmware.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 26, 2017, 12:55:00 am
Hi, new user here. Excuse me if my question was answered before but i´m still reading the 334+ forum pages to understand everything... I have a camera with firmware 2.3.0. I bought it used so I don´t know what was done to it before. I tried applying the hacks as explained here:

http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

Got an error like that:

Traceback (most recent call last):
   File "apply.py", line 90, in <module>
   assert found, "UNKNOWN %s: digest/len is %s" % (name,h)
AssertionError: UNKNOWN conf.cfc: digest/len is 6448

Then looking around I found that the patch expects a conf.cfc of 6608 bytes. Is there anything I can do to hack this camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 26, 2017, 01:43:00 am
It may have already been hacked. You sure your camera is not 320x240 already ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 26, 2017, 02:58:21 pm
Now I look like a complete fool  :palm:

I just downloaded an image captured with it and indeed it´s a 320x240 one (attached). Is this enough to be sure that the camera was already hacked?

If so I just need to apply the menu hack....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 26, 2017, 04:17:50 pm
FLIR Tools reports that image contains standard 80 x 60 pixel thermal resolution data.

The Ex series cameras upscale the thermal image, when required, to the standard 320 x 240 pixel displayed and stored image size. The saved image resolution specs are not a way to determine the resolution of the thermal image data. The image metadata that FLIR Tools can read provides the information on true resolution.

Your camera is not currently hacked to the full 320 x 240 pixel resolution.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 26, 2017, 04:33:46 pm
OK, so back to the beginning... Is there a way to upgrade my camera? This thread has become my night reading, but it´s a big novel... I don´t mind if someone points me to a spoiler  :D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 26, 2017, 04:56:18 pm
Try decrypting your config file using cfccfg_v2.py  utility from this post:

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg594600/#msg594600)

and see what is there. Compare with the standard decrypted config.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on December 26, 2017, 07:05:42 pm
Can someone post this files "T559504%24A.pdf" T559504$A.pdf , if they still had in his archives? thank you.
it will give me a bit of reading .........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 27, 2017, 03:10:05 am

Did it and got this:

#
# Generated at 2013-10-25 09:37:31
#
.caps entry
.caps.config entry
.caps.config.name text "GUI E4"
.caps.config.revision text "1.1"
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool false
# ID 63900826
# CRC03 83c879a6
ޝoáÄtUË€ ¹C¨~9<sYªç`õ·wzfP¦HF9㐶¼oÒ­¨9>^´ój“~â&ø• æSGMÖ®Mª9î7aOžðˆÇ8wÐdýÍ~vTéN¶Q |ÌâÄ0wÚ^üցlC¦ÀëÖ$JU›(÷ K7Øøg‰ˆgmæ°jè;ÝÖÑ´”FD6b„þy>¨


Last line seems very suspicious... Are these the extra bytes that weren´t expected? Can I Just delete them, reencript the file and apply the patch?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 27, 2017, 03:52:03 am
It is looking weird to me... Someone messed it up. Post your common_dll.dll file.

Edit:
Quote
Last line seems very suspicious... Are these the extra bytes that weren´t expected? Can I Just delete them, reencript the file and apply the patch?

No do not do that, let us see your common_dll first, if it had been patched or not.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 27, 2017, 11:37:06 am
Here´s attached the common_dll from /FlashBFS/system/

Thanks for the help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 27, 2017, 07:20:36 pm
This is the factory DLL. However I think you decoded a wrong config file. The one you need is located in FlashFS\system\appcore.d\config.d
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 27, 2017, 09:16:40 pm
You´re probably right. Here´s the new file... I´m also attaching it if it´s better to analyze. Thanks again.

#
# Generated at 2013-10-25 09:37:31
#
.caps entry
.caps.config entry
.caps.config.name text "app E4"
.caps.config.revision text "1.1"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 80
.caps.config.image.settings.IRheight int32 60
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool false
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool false
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool false
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool false
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool false
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool false
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool false
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool false
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool false
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool false
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 1
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool false
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 135
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool false
.caps.config.image.zoom.maxFactor double 1
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool false
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool false
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63900826
# CRC03 5b4aec95
!ׂ\!Ó§®ƒ¸ú‘ØÊ=S‘ÕI‰4;sé‘ôÌ?½ûÂâ*Y]5)Ï7ªìâÅ+ƒºÔqÿÓ1M¾àËL5ƒßænßËؐ<ØÞõ”‚¿ü1‹²-ß2hÈøÏ|åþn+   Þõ†Ã–•cZLË kÂóÅmã
æ¹ßú½ík ü1߉|(Krh;µ¤µ¹ýT.Eh
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 27, 2017, 10:13:16 pm
OK that makes sense. So because you got the factory common_dll the first thing you want to do is make a backup copy of it, then use a Hex editor and change the bytes  at offsets 0x53C7 and  0x0AEEDF from E1 to E3. Copy the modified common_dll to the camera.

Then restart the camera and make sure it still starts normally. Then you can edit your decrypted conf, make  IRwidth int32 320, IRheight int32 240,  targetNoiseMk int32 0.
Encrypt it using the cfccgf_v2.py. Copy to the camera. Turn the camera off, remove the battery for a few sec, put back in and restart. This should do the Res mod.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 28, 2017, 12:59:13 am

Thank you very much. I did exactly as you said and I think it worked (or at least my delusional brain is seeing more pixels in the attached image :)

I didn´t apply the menu hack yet. Is it safe for my camera?

Aother thing: TSX (I think that´s the name of the blended thermal + visible image) seems to be bugged now. If thermal only is enabled and I switch to TSX I see exactly the same thing as thermal. If visible mode is enabled and I switch to TSX I see exactly the same thing as visible. Did I forgot something?  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2017, 01:10:34 am
No it is not good. Try again with the config. Remove the trailing junk before encrypting.
Edit: make sure you use cfccfg_V2
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 28, 2017, 01:13:10 am
Just noticed... I opened both images (FLIR0155 and FLIR0157) with FLIR Tools... the older one is identified a s80x60... newer one shows no info  :-BROKE


Lets try again....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 28, 2017, 01:28:37 am
Just to be sure, to encrypt I must use the same script, with the same key but the files in reverse, right?

So:

cfccfg.py 1151d50200581c2b conf.cfg conf.cfc

EDIT: just noticed that you said to use cfccgf_v2.py . I found no such file referenced in this forum.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2017, 01:58:17 am
See this post

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 28, 2017, 02:13:08 am
Replying to myself....

I was using cfccfg.py instead of cfccgf_v2.py. Using V2 there´s no trash at the end of the decrypted file. BUT.. still no luck.

When I make changes to conf.cfc the image improves (less noise) but Thermal blending stops working and TSX vanishes from menu (screenshots below). Images captured with the edited conf.cfc aren´t recognized by Flir tools (it shows them but no additional information is given, like the thermal resolution). I´m using the  modified common_dll . I´m sending files by FTP in RNDIS mode. After each update I turn off the camera, take the battery, wait 5 seconds and put it back/turn on. Am I missing something?

I noticed that my configuration file is much shorter than the default hacking script wants. Maybe missing configuration lines? Can someone send me a decrypted conf.cfc for default firmware 2.3.0 so I can check what´s missing?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2017, 02:51:03 am
Your new config is not getting loaded for some reason, that is why you observing that result.

Try encrypting the original cfg file back with no changes, see if the camera works same way as with the original cfc. This is to test if your encryption works and if the modified common_dll works.

Try adding a proper CRC03.

Try leaving the camera with no battery overnight.

BTW make sure you only have one cfc file in the folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 28, 2017, 02:54:12 am
Thanks, will try all of this, but what´s a proper CRC03?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmode90 on December 28, 2017, 03:07:30 am
Does the sensitivity changing after e4 hack?
And how to check whether it has changed?
(http://dl4.joxi.net/drive/2017/12/28/0000/3714/61058/58/fa99113f78.jpg)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2017, 03:58:30 am
but what´s a proper CRC03?

It is the value in the last row in your config file. There was an executable posted in this thread to calculate it, you will have to find it. However the properly patched common_dll eliminates the need for it and CRC03 can be left unchanged.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on December 28, 2017, 04:17:04 am
Does the sensitivity changing after e4 hack?
And how to check whether it has changed?

There is a setting in the config file called "targetNoise" - disable it(true to false) and set the target to 0.
It's an artificial noise generator used by FLIR to purposefully hinder the sensor's performance on lower end models - it's even enabled on the E60, just to a lesser degree!

The actual sensitivity of the sensor has been measured by other users to sometimes fall under 25mK(0.025C).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dedelekid on December 29, 2017, 01:15:24 am
just in case if my message was not read ..

Quote
Can someone post this files "T559504%24A.pdf" T559504$A.pdf , if they still had in his archives? thank you.
it will give me a bit of reading .........
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 29, 2017, 01:28:04 am
I know what that document is, but others may not recognise it by the cryptic FLIR file title. From memory it is a document relating to the ''A" series cameras that detailed the Console commands.

Sadly I cannot find my copy of that document at the moment. Try asking again, but using its document name. You may get a better response.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 29, 2017, 02:12:30 am

Did as following:

cfccfg_V2.py 1151d50200581c2b conf.cfc conf.cfg

cfccfg_V2.py 1151d50200581c2b conf.cfg conf2.cfc

uploaded conf2.cfc to camera. Didn´t work (of course I renamed it conf.cfc). Did a diff of the 2 files... there´s a bunch of differences at the end ( Think 128 bytes of conf.cfc turned into zeros in conf2.cfc).

Ok, so I had a great idea... let´s make a conf2.cfg from conf2.cfc and spot the differences! There were none  |O

Then I noticed that the cfg files are smaller then the cfc ones... so it´s not a classical encryption/decryption were 1 byte goes in and 1 byte goes out.

I think I probably made a mistake at the DLL edit. I´ll do it again. If it doesn´t work i´ll search for the CRC03.


Your new config is not getting loaded for some reason, that is why you observing that result.

Try encrypting the original cfg file back with no changes, see if the camera works same way as with the original cfc. This is to test if your encryption works and if the modified common_dll works.

Try adding a proper CRC03.

Try leaving the camera with no battery overnight.

BTW make sure you only have one cfc file in the folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 29, 2017, 02:34:47 am
Did a diff of the 2 files... there´s a bunch of differences at the end ( Think 128 bytes of conf.cfc turned into zeros in conf2.cfc).

Ok, so I had a great idea... let´s make a conf2.cfg from conf2.cfc and spot the differences! There were none  |O

Then I noticed that the cfg files are smaller then the cfc ones... so it´s not a classical encryption/decryption were 1 byte goes in and 1 byte goes out.

This behaviour is expected. This is the way the python script works. This all looks OK.

Quote
I think I probably made a mistake at the DLL edit.

Yes your DLL was not done right or not transferred to the camera correctly. Download you current DLL from the camera and see if that was the one you uploaded before.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 29, 2017, 02:42:44 am
I did again the DLL edit and upload. Nothing changed. Then I found the CRC03 program, used it to update conf2.cfg. made a new conf.cfc from it and uploaded again. Still the same result. I´ll return with the old DLL now (as now I have a conf.cfc with good CRC03) and see what happens... i´m running out of options. I´d like to compare my files with other known to work ones.

EDIT: returned with old DLL, nothing changed. No clue about what to do now.



This behaviour is expected. This is the way the python script works. This all looks OK.

Quote
I think I probably made a mistake at the DLL edit.

Yes your DLL was not done right or not transferred to the camera correctly. Download you current DLL from the camera and see if that was the one you uploaded before.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 29, 2017, 02:50:23 am
How you upload the DLL ? Typically you need to run appstop stopapp in Telnet before you upload it.  Have you checked what you have on the camera is what you have uploaded ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 29, 2017, 02:57:04 am
This is new information to me. No, I didn´t check, just put it there. will look for the syntax of appstop and try this... Thanks again.  :-+

EDIT: search returned no hits for appstop. Are you sure this is the name of the command?

EDIT: found it, it´s stopapp :) Will try tomorrow. Found some other ideas to try.

How you upload the DLL ? Typically you need to run appstop in Telnet before you upload it.  Have you checked what you have on the camera is what you have uploaded ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 30, 2017, 03:26:55 am
EDIT : VICTORY!!!!  ;D ;D ;D ;D ;D ;D ;D

See attached image....

Read back common_dll and noticed that it wasn´t modified. Used stopapp, uploaded again, downloaded again.. now it changed. (file date also changed... it´s a good indication if the update really ocurred). Camera reboot... and now it works. Thanks for all that helped me thru it, especially Bud.

Now it´s time for menu hack  ;D
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 30, 2017, 04:28:08 am
Yah baby, now we' talking!
 :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 30, 2017, 04:43:18 am
Started studying menuhack... Tried as described here:

http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

Noticed that it patches conf.cfc at a fixed offset. Will this work with my conf.cfc with unusual size? I think that it´s not a good idea... Maybe I need to manually decrypt it, copy the relevant parts, encrypt again... what do you think?

EDIT: Tried it anyway, camera got screwed up like when common_dll wasn´t patched... Will restore to previous state...

RE-EDIT: Camera restored to resolution hack only.... will study how to apply menu hack manually... pointers are welcome :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 30, 2017, 06:41:39 am
Search this thread backwards for the last post from user  janekivi which has 2.3.0 menu update package. Unarchive and manually copy the files to your camera. I am not a fan of automated scripts, they too often screw things up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dmendesf on December 30, 2017, 03:26:21 pm
Thank you again... found it:

https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg577970/#msg577970 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg577970/#msg577970)

Manually applied all patches and now I have plenty of new menu options :)


Search this thread backwards for the last post from user  janekivi which has 2.3.0 menu update package. Unarchive and manually copy the files to your camera. I am not a fan of automated scripts, they too often screw things up.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 30, 2017, 03:40:29 pm
Enjoy!  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kulu22 on January 07, 2018, 10:59:49 am
Hi guys,
First of all, sorry for my english. This post is hardware related, and I hope it will help some members. I bought an E4 with broken (missing) USB and defected display from Ebay. As I know, the USB problem is common with these devices. Repairing this by Flir is pretty expensive (in my case ~ 50 + 50 EUR for shipping and ~ 250EUR for inspection + VAT, but the cost of inspection will be deducted from the final repair cost), comparable to price of a used unit. So I decided try to fix it by myself.
After disassembled the E4 (thanks to Mike's video), I saw that the edge of USB driver is broken and the pins of this chip are shorted by sloldering material. Not too good news.
In the first round I cleaned the damaged area and placed a new USB connector on PCB. Huh, it's a quite task. Unfortunately after this, the E4 still not communicated with the PC. After browsing some datasheets I found a Microchip device that has similar pinout like PCB pattern. I ordered it and replaced the broken one. And voila, everything works now. I can charge by USB and the device is visible from PC.
The chip type is USB3751A-2-A4-TR in a QFN16 case.
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: thedamner on January 11, 2018, 05:50:29 pm
I wanted to say thank you to all the work you guys have done to help open up these E4's.  I also wanted to post here of what finally worked for the E4 I recently purchased, since there is SOOOOO much information here to sort through.

My camera: PN: 63901-0101, Firmware: 1.21.0.  I was able to put it into RNDIS mode directly from the menu on the camera which helped.  I also initially was following the information here http://fubar.gr/hacking-the-flir-e4/, (http://fubar.gr/hacking-the-flir-e4/,) in hopes it would speed up the process, it didn't: http://fubar.gr/hacking-the-flir-e4/ (http://fubar.gr/hacking-the-flir-e4/)

I spent a great deal of time trying to figure out which firmware to use.  I'm still a bit shaky if there is a working firmware into 2.x that works for these older cameras; however I discovered that anything beyond my 1.21.0 was causing my crosshairs / center spot to vanish, as well as the MSX function  |O.  However, the resolution hack always worked perfectly, the menu hack using the provided python script failed with an assertion error in the script.

So, after volleying around trying every solution just to even get back my MSX/Crosshairs this process worked perfectly:

Revert back to 1.21.0 and reset factory settings.
Put the phone into RNDIS mode via the menu.
Download the CFC Generator from Stefbeer: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg411505/#msg411505)
Use the Template file provided, turned off the noise in the CFC file, copy the resulting CFC file to the camera.

Download the Beta 3 Menu Hack: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg326024/#msg326024)
Very carefully using FileZilla copy the files to the camera and reboot.

Everything came back perfectly.  Menu hacks and resolution, with the noise down the image is quite striking in comparison to the non hacked version.

More about my caveat with menu hack, and to re-iterate being careful.  Somehow I initially fubarred the upload (seeing files error out threw me off) and tried to restore the files from my backup thinking I'd messed up; I temporarily bricked the camera.  The Flir logo would come up, but after that just black screen.  Flirtools didn't see the camera at all, I didn't know if it was in RNDIS mode or not.  I couldn't communicate with it in FileZilla or get it beyond a black screen.

To fix the bricked camera, at least in my instance I discovered the Telnet connection was still working and FLIRInstallNet.exe could still apparently see the camera.  So, I just loaded up one of the many firmware .fif files I had lying around and ran it.  It updated the firmware on the camera just as it would have if you updated the firmware from within Flirtools.  However, the behavior during the update was totally different.  There was no display on the camera of it copying files or anything but when it was finished FLIRInstallNet asked to reboot the camera; viola it came back to life again. 

In the end I settled on the above process and staying with 1.21.0, but I thought after digging through the forums and toughing out the many update attempts it was worth writing a post in the event anyone else has the same situation, an older E4 and sooooo many posts to search through.

I'd be interested if others already know of other firmware what would officially work on the older camera, if there was a compelling reason (new, better,  menu hack options) but for now the camera is stable, works great and the with the menu hacks I have lots more functionality!

Thank you all again for all this incredible help and please ignore this if you are already an expert here, I'm just writing this for someone in my same situation.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: haef on January 16, 2018, 04:23:03 am
My apologies if the answer to this is buried in all this excellent info:

Before I recently became aware of the E30 hack, I was doing a firmware update using FLIR's utility.

The problem is that after the update, the camera now will not complete the startup process.  The progress bar gets to the end and then... sits there.  Camera shows an image, but does nothing else useful.

The only thing I can get it to do is display the version number under the progress bar "FLIR E30 2.23.14*"  Not sure what the asterisk is about.

If anyone has seen this problem and can suggest a cure, I'd sure appreciate hearing about it.  I want to do the hack!
Otherwise, it is going to have to go back to FLIR for service.  And I'm afraid they'll do something that will make it un-hackable in the process of resurrecting it.

Ironically, it was searching around for an answer to this problem that led me to the hacking possibilities.  This is mean.   :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 16, 2018, 06:15:41 am
Have you tried repeating the firmware upload starting from scratch with a different SDCard and a fresh copy of 2.23 ?  You did do an SDCard update didn't you and not something via USB ?

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: haef on January 16, 2018, 03:43:05 pm
This problem happened a few months ago, and I put it on the shelf due to lack of time.  So going from memory here... 

4 years ago I performed a an update.  I believe the process is what you are alluding to: Download firmware.  Put the firmware on a card, put in camera, use the camera menus to execute the update.  No problem.

This time I used a usb cable hooked to a PC and the Flir tools to perform the update.  I'm fairly sure there wasn't an option to do it the former way, and I believe it was PC Tools job to go retrieve the firmware.  That's how it broke.  There wasn't and still does not appear to be a way to download the firmware.  I need to retry it, but I think the PC Tools cannot find the camera now.

Thoughts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: haef on January 20, 2018, 12:47:00 am
Has anyone here actually bricked their Flir?  Was recovery possible?  I'm not finding much.

FWIW, I see Flir has a new Exx series update:  2.27.15  dated Jan 17, 2018
http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=127 (http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=127)

Wonder if that one is hack-proof?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kaz911 on January 20, 2018, 07:38:04 am
Has anyone here actually bricked their Flir?  Was recovery possible?  I'm not finding much.

FWIW, I see Flir has a new Exx series update:  2.27.15  dated Jan 17, 2018
http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=127 (http://80.77.70.144/SwDownload/app/RssSWDownload.aspx?ID=127)

Wonder if that one is hack-proof?

The Exx series is not the E4 (which is the Ex series) - The Exx series are the bigger thermal cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 20, 2018, 11:13:29 am
The new firmware release for the Exx series is interesting. The update is for the pre 2013 MK1 Exx series camera. FLIR effectively abandoned firmware development for the MK1 Exx cameras when they released the MK2 which uses a different firmware type.

I heard about the update to the firmware recently via another post. The previous 'final release' for the MK1 was 2.23 and that was excellent as it was unencrypted, contained the full service menu, and is open to upgrade. FLIR released a new firmware for the MK1 titled 2.26 in September 2017. Why ? I suspect someone decided it might be time to close the door on the MK1 upgrade route ? Now they have released 2.27 this month. Weird, very weird. Either 2.26 was buggy, or it did not achieve the desired result. I very much doubt FLIR would invest time and money on a new firmware for the MK1 Exx cameras as they are now old and FLIR would wish owners to buy new cameras. This leaves the incentive of blocking the upgrade of the older cameras that would give them a new 'lease of life' for current owners. No need to buy a new, higher resolution camera. All this is total speculation on my part though.

I cannot see a good reason to upgrade from firmware 2.23 to 2.26 or 2.27 as 2.23 is stable, very capable and contains the service menu.

Why am I saying all this on the E4 teardown thread ? Well the Exx series cameras have always shared this thread due to the similarity in the upgrade process and shared firmware. What recent events for the MK1 Exx camera firmware seems to indicate is that FLIR are still diverting resources into potentially making the upgrade of their cameras harder for us.

With regard to bricking a camera....... yes it is definitely possible and whether it is a recoverable situation depends upon what has been done to its file system. No full OS/firmware installation exists outside FLIR so killing critical files that prevent the camera booting normally means a repair fee at FLIR for a full software/firmware rebuild. That rebuild will use the latest firmware version FLIR has available.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: haef on January 20, 2018, 05:41:30 pm
Well it was their upgrade process that hosed mine, so danged if I'm paying them to make it right.  Just sayin'.

So I do that and it comes back with 2.27: Will I be able to roll it back?

I've never quite understood companies that get all wigged out by people hacking on their products.  It gets people engaged with Flir things, and probably barely cannibalizes new sales or upselling.  Sure, it probably creates a better market and longer lives for their used gear and that probably costs them some new equipment sales.  But then they have a bigger installed base and more Flir aficionados.  That's overall a positive thing methinks.

I know I lucked out and found a great deal on an E30... but I was most certainly not going to go out and buy an E60.  But if a business needs an E60, how often is buying and hacking a lesser device really considered an option?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: arrakys on February 19, 2018, 08:37:53 am
Hello there,

is there a way to get 640x480 or 800x600 IR final jpg shoot using an (hacked) E4 ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on February 19, 2018, 11:58:08 am
is there a way to get 650x480 or 800x600 IR final jpg shoot using an (hacked) E4 ?

No.
The sensor is 320x240 and the firmware does not allow upscaling.
The best you can do is to set the JPEG quality to 100%.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: arrakys on February 20, 2018, 07:24:10 pm
:/

thanks for quick answer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: rtv on February 21, 2018, 11:29:50 am
I think these Flir E4 factory calibration pictures has not been posted before.
There was more but I lost them.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 21, 2018, 12:19:02 pm
Very interesting to see these. Thank you for sharing.
I have not previously seen the multi spot and high Delta T tests  :-+

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: arrakys on February 22, 2018, 06:09:23 pm
many thanks !

to those who could be interested, get a look here (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg610799/#msg610799) or here (https://www.eevblog.com/forum/thermal-imaging/freeware-software-for-thermal-analysis-thermovision_joec/) !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: voycel on March 01, 2018, 11:54:15 am
Hi,

I have purchased modified E4 and it is great, so much better than my seek thermal xr or standard version. It would be perfect if it does not reset every few power ups with message that device has unsupported software for personal learning.  Is there any way to make this stop appearing? It take longer to boot when it happen and reset all the settings too. 
Cheers
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 01, 2018, 02:57:40 pm
You had a nerve to buy a camera that clearly said was not for resell?

Longer boot and settings reset have nothing to do with the modification. It seems you describing the normal camera behaviour when it goes to Sleep vs Power Off. Short press on the power button puts camera to Sleep, and it wakes up fast (this is wake up, not boot). If the camera stays in Sleep for several hours it will power itself down, and next press of the power button will cause it to boot. Also long press on the power button (~6sec) will power the camera off (not Sleep). Some settings like camera mode may reset during boot but not all as you say. If hou have settings like time/date or C/F reset you may have a problem with your camera ( modification has nothing to do with that)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: voycel on March 01, 2018, 03:25:48 pm
Thanks Bud,

I wasn't aware of that and it does explain a lot cheers.
It is the best toy I ever had :) next one will be E60 or E95 wish :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zapro on March 10, 2018, 08:27:34 pm
Hi peeps. I aquired a second hand E4 with 2.11.0 firmware and of course one reason to get that exact model, was to hack it.

I looked around, and saw that first post by mike refers me to this post regarding how to go about it:
 https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg921880/#msg921880)

I downloaded the FLIR_E4_2.11.0_hack.zip from 2lps and followed the guide on fubar.gr

I tried doing the hack on an old laptop with a clean install of Windows XP SP3 (32 Bit)

Enabling RNDIS went perfect, and I did a full backup of it's filesystem with Filezilla afterwards.

Trying to apply the FLIRreshack fails, though  :-\

Code: [Select]
= CONNECT TO FTP
 = CREATING BACKUP DIR backup-20180310203728
 = RETR /FlashBFS/system/common_dll.dll
Traceback (most recent call last):
  File "apply.py", line 90, in <module>
    assert found, "UNKNOWN %s: digest/len is %s" % (name, h)
AssertionError: UNKNOWN common_dll.dll: digest/len is a852f8b2c161b925545204b18f
8622c446ff0a024ed4fd76ef2953283a38a99b


As the camera is second hand i don't know about it's "upgrade-history". It did came with Calibration certificate stating March 10, 2014, so it's quite an old model i have.

Anyone here that can kick me in the right direction on how to approach this?

Thanks in advance!

// Per.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 10, 2018, 08:52:30 pm
If you can provide the hardware version details from the camera information page, it will help us determine which firmware your camera shipped with. Someone may have installed 2.11 as part of a failed hack attempt. We have seen this before and such can cause issues with applying an automated upgrade.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zapro on March 16, 2018, 08:40:37 am
Hi Fraser. Thank you for responding  ;D

The camera information on my device says this:

Model E4 1.1L
Serial number 63918071
Part number 63901-0101
Software 1.22.0

Let me know if you need any other information to help me out.

Thanks!

// Per.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Misu on March 21, 2018, 02:35:38 pm
Hello. I have a flir e6 upgraded camera and I lost the original file and I would like to make firmware 3.9 to apply the bud upgrade (medical pallets, time lapse, etc.) The installed  FW is 1.22.0. Can anyone help with the original backup?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 21, 2018, 03:57:54 pm
Zapro,

I have checked on your camera.

It was calibrated on 11 March 2014 and contained Firmware 1.22 at the time of calibration. Your camera should be upgradable using the standard firmware 1.22 process.

Kind Regards

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Misu on March 21, 2018, 04:47:57 pm
Thanks for replying. The camera is already upgraded (2014 using TIConfig) but I want to install Bud upgrade.I read that I should install the original software (which I do not have), upgrade to 3.12, downgrade to 3.9 and I just upgrade Bud. If I upgrade Bud's  to the already upgraded camera, are not I likely to block it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 21, 2018, 06:11:58 pm
Misu,

Sorry I was replying to a previous question in this thread from Zapro regarding difficulty in upgrading a camera.

With your camera I am sadly unable to comment as upgrading it to firmware 3.9 is not something I am familiar with.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Misu on March 21, 2018, 06:24:48 pm
Sorry i insist. can i officially upgrade using flir tools without locking the camera?
or what method do you recommend to return to the official firmware (in future I want to send the metrological verification room).
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zapro on March 22, 2018, 08:33:48 pm
Zapro,
<CUT>
Your camera should be upgradable using the standard firmware 1.22 process.

Hi again.

I installed a fresh version of Windows 7 32bit on a laptop today- trying windows 7 this time, because maybe there was something awry with that XP ...

I followed the guide over at Fubar.gr and used the FLIR_E4_2.11.0_hack.7z pack here from EEVBLOG, and everything goes to plan (Enabling RNDIS, Backing up all data with Filezilla)
But, progress fails at "Flirreshack" once again.
Code: [Select]
= CONNECT TO FTP
 = CREATING BACKUP DIR backup-20180322212511
 = RETR /FlashBFS/system/common_dll.dll
Traceback (most recent call last):
  File "apply.py", line 90, in <module>
    assert found, "UNKNOWN %s: digest/len is %s" % (name, h)
AssertionError: UNKNOWN common_dll.dll: digest/len is a852f8b2c161b925545204b18f
8622c446ff0a024ed4fd76ef2953283a38a99b

Byte-for-byte, it's the exact same error as i got on the XP-machine.
As i'm no expert on Python, nor ever coded any of it, i have no idea of where to go look.

Now what? Anything simple i may have overlooked?

Thanks,
Per.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ckambiselis on March 24, 2018, 05:20:46 pm
Hi,

I have applied the resolution and menu hack from Fubar:s guide about a year ago and as I connected the camera to my pc after a long time I noticed Flir Tools was suggesting an update which I didn't make but was wondering if there is a newer hacked version after the 26 Dec 2016 update that Mike has posted on the first page.

Thanks Oscar
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on March 24, 2018, 08:27:56 pm
If it ain't broke, don't fix it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: benifer on March 27, 2018, 11:30:25 am
Hello. I got a camera E4. Can I hack it or did I get an inappropriate version?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on March 27, 2018, 02:16:55 pm
Yes it can be hacked. Look at the first post in this long thread for the required links. Firmware 2.1 has issues so I recommend that you upgrade it to firmware 2.3, but no higher version, then hack it as a FW2.3 camera. Someone on here can hopefully provide the version 2.3 firmware file, as FLIR no longer offer it.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: benifer on March 27, 2018, 03:54:56 pm
I can only hope that they will help me with the file. Thanks for the help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 01, 2018, 05:53:42 pm
Can I use FLIRInstallNet.exe to run the Z3comb_v2.3.0.fif?
Because eFLIRInstall.exe will not run on windows 7 32 bit.
I'm trying downgrade 2.11.0 to 2.3.0 because the dll’s are different for the 2.11 hack. |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 04, 2018, 12:05:50 am
Read the whole thread searching for my issue no luck except this guys posts above but no outcome yet. Any help would be greatly appreciated, got this E4 with v2.11 and would love some better resolution. thanks in advance.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 04, 2018, 12:12:18 am
I will dig out FW2.3 if I have it in my archives. I will upload it to a files site tomorrow if I find it, and comment here.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 04, 2018, 03:26:33 pm
I will dig out FW2.3 if I have it in my archives. I will upload it to a files site tomorrow if I find it, and comment here.

Fraser

Thank you my good man.  :phew:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 04, 2018, 03:47:42 pm
I will dig out FW2.3 if I have it in my archives. I will upload it to a files site tomorrow if I find it, and comment here.

Fraser

Fraser, question for you:
Can I use FLIRInstallNet.exe to run the Z3comb_v2.3.0.fif?
Because eFLIRInstall.exe will not run on windows 7 32 bit.
or is the file you are you are digging up will take care of this issue?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 06, 2018, 02:43:16 pm
Well I guess no luck in finding the FW2.3, thanks for trying.

Anyone know if I can I use FLIRInstallNet.exe to run the Z3comb_v2.3.0.fif?
Because eFLIRInstall.exe will not run on windows 7 32 bit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 06, 2018, 02:45:33 pm
Sorry we had visitors so no time to search. I will have a look in a minute.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on April 06, 2018, 03:19:09 pm
The FLIR Firmware 2V3 update pack is now uploaded here:

http://www.filedropper.com/flirexpn639v230updatepack (http://www.filedropper.com/flirexpn639v230updatepack)

Just follow the included update instructions. I use the provided .fif installer so cannot advise on using another installer. I guess try it and see  :-//

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 07, 2018, 01:54:25 pm
Ahh great! thank you we'll give it a try and update how it goes. :D

 
The FLIR Firmware 2V3 update pack is now uploaded here:

http://www.filedropper.com/flirexpn639v230updatepack (http://www.filedropper.com/flirexpn639v230updatepack)

Just follow the included update instructions. I use the provided .fif installer so cannot advise on using another installer. I guess try it and see  :-//

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ruckur on April 09, 2018, 03:56:11 am
success! for those interested you can use the new version of flir tools to install FW if the old tool throws error codes at you. that solved my issue i was having. ;)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: benifer on April 10, 2018, 11:32:10 am
Thanks for the package Fraser!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alicudi on April 14, 2018, 10:33:57 am
Hi all

I am willing to purchase a new Flir E4 if I know for sure I can perform the hack to E8.  I am located in Australia and are considering buying one from this company:

https://reductionrevolution.com.au/pages/flir-e4-e5-e6-e8-thermal-imaging-camera

Can someone confirm that all the E4's can be hacked to E8 or is that some E4's cannot be hacked to E8?

Regards,

alicudi
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: elbartek on April 15, 2018, 10:56:02 am
Hi guys,

First of all, great thread... so much reading!

Now, I just started hacking an old flir I7 that won't boot... So I figured the RX/TX on the port and the port configuration and success, I can talk to it... I got some interesting info from doing so.
Now, it seems my os image is corrupted... and hang on... I don't want to send it to FLIR... however I can't seem to find any firmware anywhere... you know, windows embedded CE + flir software in a firmware image kinda thing...

Would anyone be able to help me find that or be able to read the flash chip off his camera and send me that file? Or am I dreaming and this is not possible at all... 256p30bf is the flash chip on the board... 256Mb... If I'm not mistaken, it will contain the OS and the flashFS

Well, if anyone had a play with that... Please let me know, I would be grateful!

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: kentavv on May 08, 2018, 05:16:36 am
In case it is of use to anyone, I have an E5 with 1.0 hardware. I updated the firmware to V2.3 and tried to follow the Fubar instructions, including the initial backup. However, my camera only had a conf.cfg, no conf.cfc, and so the apply.py script would fail. I modified the apply.py script to only apply the changes to common_dll, modified the conf.cfg by hand, and placed these files back, and all worked after restarting. I first changed the resolution, then the noise generator, and then enabled the additional menu options. The additional menu options only partially worked, and required the additional menu FIF file to be run before the icons were available, I suppose. I hope this helps someone. I couldn't find, by searching this thread, anyone who started with a conf.cfg.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 08, 2018, 10:43:21 am
If your camera began life with an earlier version of firmware, it is a good idea to revert to that firmware before doing the upgrade and to use the appropriate upgrade hack for that version, and not the later hacks. The reason is that at certain points in the Ex series camera life, different hardware and associated firmware configurations were used. My FW 1.19 camera can be upgraded to the latest firmware versions but the hack is best done on the 1.19 and then upgrade to a later firmware, if desired. My 1.19, if upgraded to 3.12 will not necessarily play nicely with the hacks intended for a camera that left the factory with 3.12. There are significant differences in the firmware that loads even though they have the same version number.

You can find out what firmware your camera had when it left the factory by looking at my camera firmware log in my 'E4 Useful information' thread on this forum. Your serial number can be compared to other owners details there and you will see what firmware was used on your serial number.

The E4 Useful information thread is here....

https://www.eevblog.com/forum/thermal-imaging/flir-e4-the-useful-information-thread/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-the-useful-information-thread/)

For early upgrades, your E5 behaves no different to the upgrade than the E4 of the same firmware.

I just checked. If your camera is HW 1.0, it would have been supplied with firmware 1.19 or earlier. It is the easiest firmware to upgrade as no encryption or othe protection was employed. Only CRC01 to be calculated for the configuration files. This is my favourite firmware as it also contains the full service menu that was removed by FLIR in later firmware versions to prevent its use for hacking. In comparison, firmware 2.3 is heavily bastardised by FLIR in an attempt to stop the upgrade.

The bad news is that Firmware 1.19 was not released as a user installable firmware package. Only 1.18 and countermeasured 1.20 onwards. 1.18 is a stable firmware that has the service menu. You can upgrade the camera running 1.18, plus tweak its menus etc to your liking, and then install a later firmware if you want, but you will lose th Service Menu as a result.

For others reading this response.... do not be tempted to revert to a much earlier firmware than your camera arrived with. As stated, different generations of camera hardware run differing firmwares. The earlier firmwares do not always play nicely with later hardware versions of which they have no 'knowledge'. As a safe option, take a look at my camera firmware vs serial number, and hardware version, list and decide which firmwares were used with your version of hardware. Do not install a firmware that predates your hardware unless you like taking risks with your cameras functionality.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 16, 2018, 10:47:48 am
I am looking for software in version 1.19.8. Has anyone?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2018, 01:18:04 pm
It was never released by FLIR as a download and cannot easily be extracted from a camera running it.

The best you can do is load 1.18 that was made available by FLIR and may be installed in a HW1.0 camera.

There is little difference between 1.18 and 1.19 and both have the full service menu functionality and no countermeasures to configuration modification. Only CRC01 and CRC32 calculators are needed.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on May 17, 2018, 07:40:52 am
Does anyone have 1.18?
From what I remember, it was probably released version 1.19.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: userfriendly on May 29, 2018, 04:16:41 pm
Hello everyone (and special thanks to all the wonderful people that helped get it to this point). I am a new member to the forum, but have spent many hours/days reading through it (have learned a lot from this blog, but do not want to booger it up with meaningless posts). I am kindly asking for help. I have the E4 1.22 and want to attempt to do the menu and resolution upgrade. Does anyone happen to have a copy of Marphy's TIConfig utility for the one-click upgrade? Is this the best (easiest) way for 1.22 ? Sorry, but I am not too good with computers so any help is much appreciated. Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: the_clockwork on June 01, 2018, 01:44:43 am
all new E4 stock ships with 1.22
I  was expecting 1.21
It will be going back Friday/Monday as I am away till then.

The only difference between 1.21 and 1.22 is the binary file \FlashBFS\system\fpga.bin
FW 1.22 is not a countermeasure against new hack. Flir can't react so quickly.

I think, they forgot something, like reading the hardware version (=resolution) from EEPROM.
There is a real change, that this file can be changed with Version 1.21



... or Flir changed additional the hardware and fixed the resolution on motherboard
That would be my low cost solution - a solder strap under the FPGA package

Don't forget, the market knew from the upgradable FLIR TICs since 4 years and nobody saled until now Flir++ TICs.

http://chipworks.force.com/catalog/ProductDetails?sku=FLI-S0185582&viewState=DetailView (http://chipworks.force.com/catalog/ProductDetails?sku=FLI-S0185582&viewState=DetailView)
Publish Date: Nov-09

march 2010, see page 3 in  www.i-micronews.com/upload/Micronews/Micronews_90.pdf (http://www.i-micronews.com/upload/Micronews/Micronews_90.pdf)
Code: [Select]
Extech i5 by FLIR
The camera is advertized to have an 80 x 80 pixel image, and a sensitivity of 0.1oC
(Chipworks found a 240 x 240 pixel sensor in the camera that we tore down).


the flir hack is not new, but nobody published the hack yet (avoid closing the vulnerability)
I hacked my Flir E40 a year ago, after I read something about the the Flir i3/i5/i7 sensor (documents from year 2010)

The Flir i3/i5/i7 sensor size is 320x240 pixel
see http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/ (http://www.i-micronews.com/reports/FLIR-ISC0601B-Micro-bolometer/1/297/)
(http://www.i-micronews.com/upload/Image/FLIR_Micro-bolometer.jpg)
and page 3 in  www.i-micronews.com/upload/Micronews/Micronews_90.pdf (http://www.i-micronews.com/upload/Micronews/Micronews_90.pdf)

nice blog http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135 (http://blog.naver.com/PostView.nhn?blogId=sgyee&logNo=10082558135)
(http://postfiles4.naver.net/20100313_3/sgyee_1268425726119Mlqs5_png/flir3-c-cw_sgyee.png?type=w3)

http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf (http://www.systemplus.fr/wp-content/uploads/2013/04/MEMSTrends_2012_10_N12_systemplus.pdf)
Quote
The sensor used in the i3 has 20 times more pixels than necessary, and four times more pixels than the i7. Incidentally, the same sensor can be used in more expensive cameras.
...
Each pixel is composed of a thin resistance in vanadium oxide (VOx) covered with an absorber in silicon oxide which absorbs the infrared ray. The temperature of the SiO2 layer is proportional to the temperature of the IR radiation, and the value of the resistance VOx is proportional to the temperature of the absorber. A measurement of the resistance provides the temperature.


Ok so according to this, the Extech I5 from 2010 is a higher sensor and can be hacked like the E4,  I have the opportunity to get a  Extech i5 Thermal Imaging Camera - Part# IRC40, green and orange model for under 200.   I am very much thinking about doing it, but also am intrested in the Seek Pro, or the Flir one second Gen. 

If this unit can be hacked I would gladly go with it, as its a hell of a lot better than either cell phone model. Can anyone confirm there is a hack out their for the Extech i5 Thermal Imaging Camera - Part# IRC40? 

Just trying to decide what to get.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on June 01, 2018, 02:03:35 am
The i Series do contain a 320 x 240 pixel microbolometer and most of them can be hacked. There are some very early models that cannot be hacked due to the way they were calibrated at the factory. The very early models are limited to the resolution with which they departed the factory because that is the limited area of the sensor array calibrated, plus the entries for resolution are not present in the configuration files. Some hacking plus recalibration of the camera might release 120 x 120 pixel resolution, but it is not worth the effort.

None of the i series can provide more than 140 x 140 pixels resolution, no matter what changes are made to the configuration files. Earlier models can only provide 120 x 120 pixels maximum. I believe your Extech version of the camera falls into that category.

To be clear ..... an I series camera Cannot be hacked to 320 x 240 pixels despite that being the physical resolution of the sensor array. The LCD display on the i5 is also a physical resolution limiter.

The E4 remains the best route to a 320 x 240 pixel self contained thermal camera.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: the_clockwork on June 01, 2018, 03:42:07 am
First of all, thank you for answering so fast.

So Even at 120 x120 this is going to be a better quality device than the Flir One, gen one, or gen 3.  But not better than the Flur one gen 2 or Gen 3 pro, or the Seek or seek pro. 

Its a pretty good value at 125-75 bucks however (the deal I stumbled on),  I am trying to just decide if its worth getting as a first unit.  I really like the option of making Thermal films but I don't like the fact the Flir one will not work well or at all in the dark.  This is my first move in to the realm of thermal cameras and I just want to get something that has the most bang for the buck.  It will get light use, looking for leaks, and some electrical and electronics work.  Also seeing what animals are out in the country where my dad lives.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: userfriendly on June 05, 2018, 03:02:21 am
Does anyone happen to have a copy of Marphy's TIConfig utility for the one-click upgrade? E4 1.22 Please help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 09, 2018, 05:14:15 pm
Does anyone still have a list of the commands which can be used to control the E4 via serial/telnet? Either my google-fu is weak or Flir deleted the relevant pdfs.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on June 09, 2018, 10:43:20 pm
Does anyone still have a list of the commands which can be used to control the E4 via serial/telnet? Either my google-fu is weak or Flir deleted the relevant pdfs.

Run "rls". Then "rset" to change what you find in "rls".
Have fun :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: eKretz on June 10, 2018, 12:34:46 am
Anybody know where the setting for width (in pixels or what have you) of the spot crosshair might be on Exx? Been doing some digging but haven't spotted it yet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on June 10, 2018, 12:40:46 am
I believe that's an overlay graphic in the qml files, not a registry-configurable thing.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 10, 2018, 02:56:23 am
My recollection is it is an object provided by a dll, so unlikely that it can be edited.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: atlgator on June 10, 2018, 03:15:51 am
Hi all - Amazon has the E4 and E5 for the same price, $949. Is it still preferred to buy the E4 over the E5?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on June 10, 2018, 03:57:55 am
That doesn't matter, since they're identical hardware. All you're getting is a different bezel with E5 instead of E4 written on it, and a slightly different config file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 10, 2018, 11:14:19 am
By terminal-commands i meant the commands to control the E4-Buttons remotely for example, so you can set the palettes, settings, etc. I think the button-commands were something like "button-e" or "enter-e" or something like that. Sorry if i worded my queston wrong.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Tonys87 on June 10, 2018, 01:26:53 pm
Is anyone interested in panorama images?

create a panorama image with exiftool, imagemagick, MS ICE  and php


Hi tomas123, i've some problem with your splitjpg.php, after doing all the previusly steps and edited the path for imagemagick convert, i've launched the script, the powershell return this:
Quote
.fffrebuilt FFF from 12 parts
split FFF file to segments
FLIR Record 0x4646, offset 0x4f000000, length 0x0000
Invalid FLIR record
magick.exe: Unknown field with tag 18248 (0x4748) encountered. `TIFFReadDirectory' @ warning/tiff.c/TIFFWarnings/1000.
new image w/h=745/555
write new radiometric jpg
part 0: 65534 Byte
part 1: 65534 Byte
part 2: 65534 Byte
part 3: 65534 Byte
part 4: 65534 Byte
part 5: 65534 Byte
part 6: 65534 Byte
part 7: 65534 Byte
part 8: 65534 Byte
part 9: 65534 Byte
part 10: 65534 Byte
part 11: 65534 Byte
part 12: 41224 Byte

and furthermore, the pano1.jpg created (i think with some error) it isn't the panoramic but the flir template used in the script.

Any suggestion? :D

EDIT: sorry for the possible stupid question, but this forum and all the "thermal image editing" is pretty new to me :P
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Spirit532 on June 10, 2018, 02:00:31 pm
By terminal-commands i meant the commands to control the E4-Buttons remotely for example, so you can set the palettes, settings, etc. I think the button-commands were something like "button-e" or "enter-e" or something like that. Sorry if i worded my queston wrong.

That would be the "bt.exe" in /system/. Or you can use rls/rset to set the parameters directly. The entire camera runs on the registry in realtime, so you have access to most of the settings(palettes, msx zoom, things like that).

Code: [Select]
    usage: bt [flank] <named key>
  bt -a <Key> <Alt>+<key>
    bt -u       Joystick up    button
  bt -d          -"-   down  button
  bt -l          -"-   left  button
  bt -r          -"-   right button
  bt -e  <Enter>     key
 bt -t  <Tab>       key
 bt -c  <Esc>       key
 bt -b  <Backspace> key
 bt -    Minus
 bt f1 - Left  function button
  bt f2 - Right function button
  bt -g - Laser    button
    bt -s - Snapshot button
    bt -o - Open (recall) image button
 bt -p - Power on/off button
    bt u1 - User button 1
  bt u2 - User button 2
  bt -m - Mode button
    bt -f - Freeze button
  bt -v - View mode button (IR/DC/Fusion)
    bt -k - Toggle button (Viewfinder/LCD)
 bt -A - Manual|Auto button
 bt --   Adjust left key
    bt -+   Adjust right key
   bt -*   Adjust press key
   bt -P  <named key> Press flank
 bt -R  <named key> Release flank
   bt af - Auto focus button
  bt ai - focus in button
    bt ao - focus out button
   bt zn - Zoom near button
   bt zf - Zoom far button
    Character and number keys used as they are
 Just bt will send a <Space>
     ------             ------
  | f1 |    -----    | f2 |
  ------    |-u |    ------
       |-l |     |-r |     
       -----     -----     
   -----    |-d |    -----
   |-o |    -----    |-p |
   -----    -----    -----
            |-g |  (Laser)
            |-s | (Snapshot)
               -----     
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Echo88 on June 10, 2018, 03:18:33 pm
Thanks, that are the commands i were searching for.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cq-317 on June 28, 2018, 01:59:24 am
I just got two E4 with version 2.3 from ebay. One is already cracked and one is not cracked. But I found that they all have the same problem :(,

The measurement function is normal after cold start. However, I need to press the power key twice In the hot start, after the first press, the LOGO appears for about 2 seconds, then the screen is closed, the device does not boot, and after the second press, the LOGO appears again. The device is boot normally  and the measurement function is normal.

the two e4 (cracked and uncracked) has the  same problem,Is this a common problem with version 2.3?

The cracked E4, after pressing the power button for the second time, sometimes does not measure normally. Sometimes there are only visible light images. Sometimes the thermal image is a green screen, and sometimes the thermal image is a large gray square. Is it caused by a failed crack?

can someone help me ?thanks! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sogrin on July 25, 2018, 07:52:04 am
Hello! I bought a thermal imager E4 with firmware 1.19.8. According to the instructions from the first message, I installed the software using EzCRC and serial number input received zipmycontents archive.fif. Flashed it into E4. Got an OK message. Rebooted the thermal imager (removed the battery). But when you reconnect to USB, the thermal imager is again defined as a removable device, not RNDIS. What am I doing wrong? Can I flash the thermal imager to 2.11 and make a mod? Where to get firmware 2.11 and how to install it? Thank you!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zucca on August 06, 2018, 01:36:03 pm
Hello! I bought a thermal imager E4 with firmware 1.19.8.

Do not update the firmware 1.19.8 . it's a nice old one FW where everything can be edited as you like.
As I know the RNDIS is lost when you take out the battery or turn off the device.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on August 07, 2018, 07:48:09 pm
Can you make a copy of this software? I've been looking for it for a long time! (of course 1.19.8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 08, 2018, 11:47:57 am
Firmware 1.19.x was not released as an update package and no tools exist on the camera to clone the complete Firmware/Win CE6 file set to an external computer. A simple file copy only transfers files that are not in use by the system, so is incomplete.

Firmware 1.18x was released as a firmware update and I have that somewhere in my archives. From memory 1.18 works fine on the platform but I think there was one significant bug fix in 1.19.x.

Moving backwards to an older firmware version carries risk. It should only be done where it is known that the hardware platform is correctly supported by it.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on August 09, 2018, 07:27:55 am
And it seems to me that however 1.19.8 was released as an update.
I think I had version 1.18 and updated to 1.19.
Unfortunately, it's lost somewhere ...
But if you found version 1.18 it would be OK.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on August 09, 2018, 07:30:53 am
I made updates 1.19.8 to version 2.3 and some functions do not work correctly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: daniel.b on September 04, 2018, 07:07:38 pm
Hello Guys,
Plans to buy Flir E4 with the intention of unlocking the E8 firmware. Is there any firmware version that will not allow this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cq-317 on September 08, 2018, 01:21:28 pm
As we all know, the flir tools mobile version can not view the real-time data stream.

I found that when I visited the URL http://xxx.xxx.xxx.xxx/webcam.asp, (http://xxx.xxx.xxx.xxx/webcam.asp,) I could get the screen image and refresh it every two seconds.

I carefully checked the transmission time. I found that in each request, I probably need to wait for the device to respond for about 600ms, and the image transmission is about 100ms. The total response time exceeded 700ms. The solution to modify the source code of the webpage failed.

I want to see the real-time data stream of e4 wifi on my mobile phone. Is there a better solution? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on September 09, 2018, 01:57:42 am
There is but you probably would not like it. Search this forum for flir radiometric streaming.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cq-317 on September 15, 2018, 11:48:47 am
Thank you very much, :) according to your prompt, I found the post. I used a MT7688 development board (it only has 30*22mm, 32M flash 64M ram 1*usb 1*wifi 1*rj45), about $12.

The openwrt system is running on the development board, libuvc and mjpg-stream is also installed. After a very simple setup, the development board recognizes the camera. I use a mobile phone to connect to the wifi of the development board, and then I can see the real-time screen image at Mobile browser, this is really cool. The flir tools mobile version can't do this.

This is the first step. After that, I want to follow the prompts of the post and put the libuvc patch to complete the output of the original image. thank you! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: roma3210d on September 27, 2018, 08:55:08 am
I made updates 1.19.8 to version 2.3 and some functions do not work correctly.
Good day everyone!
I have Flir e5 (upgraded from 1,19 to 2.3 by myself accidentally |O). And for now i cant apply any resolution hack. Or may be i doing something wrong. It is still no any chance to hack resolution (all i need). Please, if someone knows working method to upgrade resolution? please, let me know.
I already tried this methods:1) https://fubar.gr/hacking-the-flir-e4  2) Changing config.cfg with CRC01
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: roma3210d on September 27, 2018, 09:25:35 am
Hi
Is anyone working on a software upgrade to version 1.19.8 up to 2.3.0 and using HACK?
All I know is (based on personal experience):
1. Updating is possible, increased resolution is maintained. However, they do not operate certain features, symptoms:
 - The camera (up) runs longer
 - Do not operate (free) extended menu (the meniu settings)
 - When you turn on the camera (full restart), it takes about 2 minutes to be able to read and write images to internal memory
 - Does not work manually change the scope of termperature.

The problem (probably) is associated with a file conf.cfc and conf.cfg
 In older cameras is located file conf.cfg
 In the new cameras is conf.cfc file?
 I did not get so far no information on the matter.
 I would ask that someone presented a sample file conf.cfc (structure)

Feel free to common solve the problem

I read this tread for a long time. Could you explain how you increase resolution? Please.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: cq-317 on October 08, 2018, 02:09:50 pm
Can someone help me?I have a problem with my E6.

There was a dark spot in the middle of my thermal image. when I closed the lens cap, and it's temperature was 0.6 °C lower than the average temperature. This point does not move, and its temperature is always lower than normal pixels.

1. I don't think this is the dust on the sensor. I took off the lens and tried to clean the sensor, but it didn't have any effect. It was still there.

2、It's also not a bad pixal because its temperature can vary, but it is about 1°C lower than normal.

3. Is this a problem with the calibration file? My E6 was calibrated in 2014 and it has already passed the calibration cycle. My E4 version is 1.22, it doesn't has service menu, can I calibrate the E6 myself?

thanks for everyone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 08, 2018, 03:05:34 pm
1. Contamination of the microbolometer window often produces similar spots but they are normally hotter than the background due to reflecting the die temperature back at the Microbolometers.

2. Contamination of the lens block can cause issues but the issue moves as the lens is rotated.

3. 'Dead' pixels in thermal camera parlance are pixels that are either totally non responsive, or that produce an output that is outside permitted tolerance when tested. They could be called defective rather than dead pixels. They are generally captured in the dead pixel map. Pixels with output errors within the permitted tolerances are captured in the NUC offset table and the levels corrected.

4. When a thermal camera carries out an FFC event it applies 'fine tuning' offsets to any pixels that are out of the permitted tolerance for FFC. Hence some pixel stability issues disappear immediately after an FFC but reappear with time as the pixel continues to drift. This normally only occurs with Microbolometers that are not of great performance, or that are subjected to challenging local or scene conditions.

5. Thermal camera Microbolometers can be damaged. Whilst the Microbolometers from FLIR are considered 'sun safe' in that they filter out most of the high energy wavelengths before the pixels, but it is possible to 'stress' microbolometer pixels ! If energy that falls within the Microbolometers filter pass band and exceeds acceptable energy levels at the pixel surface, the pixel can overheat. This overheating leads to a ghost effect that slowly disappears with time as the pixel(s) and surrounding area cool to nominal operating levels. Until that point the FFC event cannot counter the offset at the pixels output. Taking this situation further, if a pixel is severely stressed, it can change its thermal response characteristics permanently. It can effectively become a 'defective pixel' in terms of a NUC calibration. Sadly the FFC event may not be able to adequately correct this change in the pixels output. In a worst case scenarios the pixel(s) can be destroyed or a cluster can become so stressed that even a bad pixel map will find it hard to hide. An easy way to cause such serious damage is to image a powerful CO2 laser on axis with the beam. This has been done to thermal cameras that I have seen and it is a very effective way to permanently damage a thermal cameras sensor. One camera that I almost purchased was a Ganz Pan Tilt unit that delivered an excellent image except for an area that appeared lighter than the rest of the image. Details were still visible within the small area but the FFC found not level the scene. The microbolometer had been 'attacked' with a high energy beam that fell within the systems passband. It was effectively ruined.

6. FLIR used to provide a service menu that permitted the creation of a new dead pixel map and NUC table. This was removed and now the only way to carry out the calibration is by installing the required files and configuration to recreate the service menu as I believe has been achieved with the Exx series elsewhere on this forum. Without a service menu you really need FLIR to carry out the calibration. The Microbolometer has a 10 year warranty on it against failure, but this does exclude abuse.

Fraser

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 08, 2018, 06:03:25 pm
Since cq-317 mentions that the area of the anomaly is 0.6oC lower than the rest I wonder, is this not within limits of the FFC?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 08, 2018, 06:29:16 pm
Hmmm, normally an FFC can produce a very low Delta T flat image. It is possible that the 'spot' falls around 0.6C beyond the greatest correction offset that the FFC can apply, hence an FFC cannot bring the areas into level alignment with the rest of the pixels.

It would be an idea to zoom into the 'spot' using FLIR Tools, or whatever, to clearly show the individual pixels before any interpolation or compression. In previous cases I have been able to see that individual pixels are the cause of a spot and not contamination of the microbolometer (inside or outside the capsule). I have also identified contamination as as cause on other cameras as the 'shadow' appears as a solid 'core' of pixels with temperature graduation across pixels radiating from that core area.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on October 08, 2018, 06:39:03 pm
So are you suggesting that the FFC does a 'best effort' when the fix is beyond the range instead of just failing and leaving the area uncorrected? That would maybe make sense indeed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 08, 2018, 07:24:37 pm
The behavior of an FFC routine is very much dependent upon how the code for a particular camera is written.

I cannot say for sure whether the Ex series FFC applies its greatest pixel correction offset, even if not enough, or 'gives up' and applies no offset at all.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: peperoca on October 15, 2018, 11:58:01 pm
Hi everyone,

I have had my hacked E5 for over two years and a previous year un hacked.

Lately I've been having some trouble turn it on and off, until today. It started I've used it for some minutes and then I couldn't power it off so I did something a noob would do, I took out the battery.

Now it doesn't power on anymore. I can charge it and connect to it's memory from USB, but it doesn't work as a camera.

Actually I believe the power on issues arised since I've hacked it, but this is a new record.

Any ideas?

Best,
Pepe
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: roma3210d on November 01, 2018, 08:59:13 am
Hi Pepe! Could you help me with E5 hacking procedure? What kind of method do you used?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Zapro on November 08, 2018, 07:33:46 pm
Yes it can be hacked. Look at the first post in this long thread for the required links. Firmware 2.1 has issues so I recommend that you upgrade it to firmware 2.3, but no higher version, then hack it as a FW2.3

Hi. Finally i found the time to give it a new try.
I upgraded my E4 from 1.22 to 2.3 per your instructions and that went well.
I followed the instructions on https://fubar.gr/hacking-the-flir-e4 (https://fubar.gr/hacking-the-flir-e4) for hacking the 2.3 firmware with "Flirreshack" and the Python script runs perfect and files are patched.
After hard reboot the resolution is /shit/ though. Like really blocky.
Gladly the backup it makes worked perfectly, so i could revert everything.

I tried re-doing the hack one more time, just to see if anything else would happen, but same result.

Reading comments on fubar.gr website, he says that some cameras just cannot be hacked and there is no solution. Do you have any better news for me? Any other guide/hack i could try with the 2.3 firmware?
I don't really care about the other menu functions, i just want the higher resolution.

Regards,
Per.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: roma3210d on November 12, 2018, 02:15:02 am
Same trouble. I'm trying to figure it out for couple years. :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samboman on November 16, 2018, 07:27:51 am
Hey folks,

I have an E6 with 2.11.0 firmware. I searched through all the pages after the posting of the files for doing the upgrade on the 2.11.0 firmware, and I cannot find anything about doing this to the E6. I found a couple people over the course of the thread asking this same question, but nobody answered it :(

Does anyone know if this is simple to do?

I'm going to attempt to downgrade to 2.3.0 first, and see if I can do the update that way. If it doesn't work, what else can be tried?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SilverSurfer on November 18, 2018, 12:04:39 am
Hello Everybody,



          --------   Is someone has the Firmware 2.3.0 for my E4 ?  --------




On the official web site today is ~5...   ( and no issues to upgrade with the last firmaware)

I would like to upgrade it with the official proces from 1.19 before the "upgrade on E8"

Is someone can help me ?

Best regards
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 18, 2018, 12:39:36 am
I would recommend you stay at Firmware 1.19 !

There is absolutely nothing wrong with 1.19 and it is the last 'open' firmware before FLIR started playing games and removed the service Menu. If you go to 2.3 you will lose the service menu and its benefits.

Your choice of course, but Firmware 1.19 is a joy to work with when it comes to reconfiguring the Ex series.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SilverSurfer on November 18, 2018, 10:36:56 am
Hello Fraser,

Many thanks for your answer.

If I undersand well, the better choice for me, will be to keep this firmware and just follow the procedure with the E8.cfg file ?
- It will upgrade the resolution but will I have the other menus ?

SilverSurfer
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 18, 2018, 11:50:14 am
If you upgrade a Firmware 1.19 camera you gain the full 320 x 240 pixel resolution plus the additional menu's as detailed in the upgrade instructions. You end up with a camera with more features than the E8.

Bud's menu enhancement goes a step further and provides more additional menu's but his upgrade is setup for the much later firmware builds. All details of the upgrades are in this thread and an 'index' appears in the first post in the thread. Happy reading :)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SilverSurfer on November 18, 2018, 01:04:07 pm
Thanks Fraser,

If I try just to "unlook" the 1.19, I can goback on the original version by removing the E8.cfg, right ?

And after I can use an official upgrade to go the the needed version and "unlock again" ? (if needed in the future)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 18, 2018, 01:22:59 pm
The Firmware 1.19 is so easy to upgrade that it is also easy to revert the camera to standard configuration.
It can be returned to standard specification by re-inserting the original files that were saved by you as a back-up before the upgrade. You can even carry out a firmware update on the upgraded camera and the upgrade remains :) Warning - once you update the firmware beyond 1.19 there is no easy way back and you will be locked into FLIR bastardised firmware releases that were intended to stop the upgrade rather than add bug fixes.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SilverSurfer on November 18, 2018, 02:36:54 pm
Many Thanks to you Fraser.

I've just updated it. The update process is increadibly easy and quick !

--- It works perfectly ---

and the display is definitively more accurate, now it's usable more like a real tool.

Have a good WE,  ;)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on November 18, 2018, 07:57:47 pm
Great news  :-+

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: scooter505 on November 23, 2018, 12:09:12 pm
Hey folks,

I have an E6 with 2.11.0 firmware. I searched through all the pages after the posting of the files for doing the upgrade on the 2.11.0 firmware, and I cannot find anything about doing this to the E6. I found a couple people over the course of the thread asking this same question, but nobody answered it :(

Does anyone know if this is simple to do?

I'm going to attempt to downgrade to 2.3.0 first, and see if I can do the update that way. If it doesn't work, what else can be tried?

Did you work this out?

I also have an E6 which i downgraded successfully from 2.8.0>2.3.0.

I've uploaded the modified config files with 6336 byte size (the python script defaults to the E5 config) however this messes up the thermal image with weird streaks. Taking photos causes it to display an error message. Reverting back to the original config fixes the issue.

Anyone know if the E6 needs a unique config?

Thanks
Title: The latest hack of Flir E4
Post by: Jane on November 23, 2018, 09:49:29 pm
I followed tutorial at https://fubar.gr/hacking-the-flir-e4/
but when trying to modify files with
 python apply.py apply 192.168.0.2
I received  the following error


= CONNECT TO FTP
= CREATING BACKUP DIR backup-20180509022127
= RETR /FlashBFS/system/common_dll.dll
raceback (most recent call last):
 File "apply.py", line 90, in <module>
   assert found, "UNKNOWN %s: digest/len is %s" % (name, h)
ssertionError: UNKNOWN common_dll.dll: digest/len is 75b37c3c755409cc355d2875eadfa128f8e6e27a1b2adf92273656a20ceb5037

Does it mean that my camera uses common_dll.dll of a  different len?

Firmware in my camera is 2.11.0
In which way must  files be modified?
Thank you for your advice
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: johu on November 26, 2018, 03:58:23 pm
Has anyone succeeded in modifying a E4 2.0L with firmware 3.13?

I have the following model:
Model: Flir E4 2.0L
Part Number: 63906-0604
Serial: 63903xxxx
Software: 3.13.0

Do I understand it correctly that there is not yet a decrypt tool/algorithm for the 'conf.cfg' file?

Is there a bullet proof way to downgrade the E4 to version firmware V2.11?


EDIT: Sorry, was too impatient and confused by the large amount of pages.   :palm:
Should have caught up with Bud's posts.
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359)

Will thoroughly read from there on...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 01, 2018, 09:19:45 am
Hi
Someone after updating from software from version 1.19.8 to version 2.3.0. Did you get a full MENU?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tester2222 on December 02, 2018, 11:49:23 pm
if anyone is still afraid to permanently hack his\her i3\i5 here is simple step by step guide

read post #524 https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956)

1. power on camera

2. press menu button once

3. press play (gallery) button for 5 seconds

4. switch to RNDIS usb mode

5. install flir drivers on your pc

6. connect camera to pc, give it a minute to install and start

7. connect to camera's ftp server at 192.168.0.2 user:flir password:3vlig with ftp client capable of passive mode i.e. total commander

8. make full backup of filesystem to a secure location

9. download mike's crc01 tool from this https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg321956/#msg321956) post

10. install some proper text editor i.e. notepad++ (and enable showing all characters in view \ show symbols)

11. open backup\FlashFS\system\appcore.d\config.d\conf.cfg

12. remove last line that says
Code: [Select]
# CRC01 ????????

13. replace number at the end of   ||.caps.config.image.settings.resIR int32 X||   with value from   ||.caps.config.image.settings.fpgaResolution.resIR int32 X||*

14. save changes as new file

15. use crc01 to calculate checksum of this file

16. open backup\FlashFS\system\appcore.d\config.d\conf.cfg file again, do the same resolution modification and replace checksum with calculated one

17. save changes as new file that you will upload to camera (in extra step i have changed attributes and date & time of new file to be the same as old one, but this is most likely unnecesary)

18. connect to ftp again, and upload created file overwriting one that sits in \FlashFS\system\appcore.d\config.d\conf.cfg (or check mike's post just under this one and let us know)

19. unmount & disconnect camera, use reset button in battery compartment to reboot it

it worked for me, i don't take any responsibility for anything but merely sharing what i did described as good as i could, do it at your own risk


*
Code: [Select]
* Z-cam has a detector with 80x80, 120x120 or 144x144 pixels.

Hello. I have Flir i3 with firmware version 6.5.3 - any metod to meansure and beter resolution not working.

Camera still see fabrical settings.

Where i can download old 6.1.3 firmware?

Or please give me working solutions.

Thank You.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: george577 on December 04, 2018, 06:33:47 am
good afternoon friends. help with the modification of my camera Flir e4 2.3 firmware,model e4 1.1, partnumber 63901-0101. Flashing the camera according to the instructions-https://fubar.gr/hacking-the-flir-e4/-appcore error.
updated to 2.11-the same error.
rolled back to 2.3 again the same.
I tried to modify the file conf.cfg, it does not work for me. maybe someone with straight arms will tell you which direction to go. Thanks in advance for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 04, 2018, 05:27:23 pm
Search this thread backwards for a latest post from user janekivi with update package attachments. It is using a different method for updating. Still may not work because my recollection it was for the hardware version 1.2L but you can try.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: max-bit on December 06, 2018, 12:30:30 pm
Has anyone succeeded, after upgrading from version 1.19.8 to ver. 2.3.0 get a full menu (extended) including hidden features?

Or is there any chance to go back to version 1.19.8 (I know a stupid question ...) :o
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr. Scram on December 08, 2018, 11:49:33 pm
Apologies if I'm asking for things that have been discussed too many times before, but I've scanned the last dozen or so pages of the thread and couldn't find the answers. Can the E4 now be unlocked from any firmware to full E8 specifications without any remaining limitations? And is the framerate always 9 Hz, or is that increased with the unlocking too?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 09, 2018, 07:57:14 pm
Frame rate did not change, you may have to read a bit more than a dozen pages to know that.  As to firmware version you will have a better chance for an answer if ask about a particular version number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: stylius on December 10, 2018, 08:20:03 pm
Hy. Sorry for stupid question but i need answer. I have flir e4. So if i want inspect mobile phone pcb, I need macro lens, or i can use only focus tool( without macro lens). 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: WeKeys on December 20, 2018, 09:22:17 am
Hello to the lovers of Flir E4 thermal cam.

I just bought one :
E4 2.0L
with Software Version 3.13.0 NICE  |O
What are my possibility about hacking ?

I can access to the USB Mode choice, it is on UVC and MSD and i cannot change it to RNDIS nor anything else !

Could you help me about that ?
Can i downgrade to 2.3 ?
I have hardware to put the bios out  and a eeprom programmer, could i install a lower firmware like that ?

Thank you
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr. Scram on December 20, 2018, 01:58:19 pm
Frame rate did not change, you may have to read a bit more than a dozen pages to know that.  As to firmware version you will have a better chance for an answer if ask about a particular version number.
By now I read the frame rate discussion elsewhere, so I won't restart that one. It's a bit of silly limitation when equipment without the limitation is available freely from elsewhere, but it's what we'll have to deal with. Not agreeing with it doesn't change how things are.

I wasn't looking for a specific firmware version, I'm mostly just trying to figure out which versions are viable to buy and upgrade. I thought the issue with not being able to upgrade from some was fixed, but apparently it's not. That makes looking for a nice used unit slightly more complicated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 20, 2018, 02:24:34 pm
It is simply unrealistic that one person would know about upgradeabiliy status of every single firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mr. Scram on December 20, 2018, 02:33:06 pm
It is simply unrealistic that one person would know about upgradeabiliy status of every single firmware version.
Not if all now happened to be upgradable, which they are apparently not. :) The firmware versions generally not being mentioned during sales further complicates things a bit, but at least I know not all versions might fly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 20, 2018, 02:35:09 pm
I just bought one :
E4 2.0L
with Software Version 3.13.0 NICE
You need to read the E4 WiFi thread for information on 3.13
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mat_J on December 21, 2018, 04:05:34 am
I can't seem to find anyone in my situation on the forums,
I purchased a E4 secondhand (HW 1.1L SW 3.12), do I have any options for liberating it?
If so, what is my best route of action;
Downgrading it to SW 1.22 and applying the hack, or modifying it with 3.12 as seen with the 2.0L's?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 21, 2018, 04:16:05 am
Guess noone  knows, you will have to try it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: samboman on December 21, 2018, 10:06:41 pm
Similar situation here. I have an E5 1.2L (non-wifi) with 3.12.0. I want to try downgrading to 2.3.0 but unsure if this will brick the unit. Anyone tried this before?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nhelder on December 24, 2018, 12:05:13 am
Need some help!   Bought a hacked E4 1.2L.  Didn't know anything about this stuff so thought I would update to 3. something via FLir tools.  My camera then looked like crap (stock). I think already at that point I was unable to take regular images (only thermal).  I noticed two files in the camera - the new 3.whatever and an old 2.3 so I used the manual update method to install the 2.3 via Flir tools and I think that's where I lost my center spot (but I never really paid attention) and ability to take any pictures at all.  I applied the resolution hack and resolution is great again (Let's make the E4 great again!) but I can't save any pictures.  Get an appcore.exe error every time I "pull the trigger"  Everything else seems okay.
Anyone in Ontario, Canada I can just send this to?  $$   or please help me other kind people. 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 24, 2018, 02:55:15 am
Since you have nothing to lose at this point, you can try updating back to the v3 that you did before, then perform a liberation  as per instructions in E4 WiFi thread for the v3.x you installed. I do not know if that will work or not, your decision.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: renehdez on December 31, 2018, 11:42:06 pm
Thank you, Chanc3.

If anyone else has a Bxxx/Txxx camera and want some help, just pm me

Hello, I have a Flir T630 camera to which I wanted to update the firmware but while updating it turned itself off and no longer rebooting, so I turned it on again and only appears thermal image on the screen with the start progress bar that seems fill up but it does not happen there. Any solution you can give me other than send it to the Flir service center?
I thank you in advance for the attention.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Chanc3 on December 31, 2018, 11:51:58 pm
Thank you, Chanc3.

If anyone else has a Bxxx/Txxx camera and want some help, just pm me

Hello, I have a Flir T630 camera to which I wanted to update the firmware but while updating it turned itself off and no longer rebooting, so I turned it on again and only appears thermal image on the screen with the start progress bar that seems fill up but it does not happen there. Any solution you can give me other than send it to the Flir service center?
I thank you in advance for the attention.
Do you have a back up?

Can you still connect to the camera via ftp or Web interface?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nhelder on January 03, 2019, 03:20:37 pm
Thanks Bud.  I've got as far as reverting the resolution hack (from the Fubar directions), updated to latest firmware with Flir Tools.  I still have no center point but I can now take thermal image pictures but not regular camera pictures.  I've started with the liberation and I'll continue that (maybe later today) but am I wasting my time if don't have the center point or camera pictures?  Or may the liberation fix that?   I do not have a backup from pre-flir tools update so as you said.....nothing to lose.   
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2019, 04:00:53 pm
I do not know, try and see what you can get...
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nhelder on January 03, 2019, 07:28:13 pm
I do not know, try and see what you can get...

Well, I have a usable camera.  I might try and tackle the resolution hack again later.  I believe I did the conf.cfc process correctly but when I uploaded, only had thermal (no measurements, center point and limited menu).  I uploaded the backed up conf.cfc and I have all my original hacked menu options back but without high res (at least I don't think I have the high res).  I didn't do anything from step 16 and I have the menu so the conf.cfc obviously kept setting from the previous hack.
Thanks for the help, I think that's all for now.  Dual pictures are working again so I can at least use it for work.  More tinkering will be done down the road.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 03, 2019, 07:42:04 pm
 Make sure you uploaded the proper common_dll, check its time stamp on the camera. Do not keep the old common_dll, delete it from the camera after taking a backup copy. Make sure you only have one single cfc file in config folder, delete other cfc files from same folder, this is a common mistake.
Make sure you use the proper common_dll for your firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nhelder on January 05, 2019, 03:17:01 am
Make sure you uploaded the proper common_dll, check its time stamp on the camera. Do not keep the old common_dll, delete it from the camera after taking a backup copy. Make sure you only have one single cfc file in config folder, delete other cfc files from same folder, this is a common mistake.
Make sure you use the proper common_dll for your firmware version.
I think when I saved my serial number in the cfg file, I saved it by accident to a different folder.  Deleted the renamed dll file, corrected the cfc file and I'm back in business.    Thank You!!!!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 05, 2019, 03:47:01 am
 :-+
So what firmware version are you running?
And did you use the Basic or Advanced liberation package?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nhelder on January 05, 2019, 03:57:47 am
:-+
So what firmware version are you running?
And did you use the Basic or Advanced liberation package?
Specs: E4 1.2L  Firmware 3.12.0  Ran basic but didn't do anything other than res hack (didn't do step 16).  My basic menu hack was there (from when it was previously hacked?) once I ran it.
I don't really understand all this stuff in detail to explain exactly what I did (or didn't) do but I can follow directions well and it seemed to have worked out for me.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alphonse777 on January 06, 2019, 03:23:34 am
Hello all,
A great post...
I've given a try with my E6 that I would like to "upgrade".
E6 has 2.11.0 firmware
Using windows 10
I ran Set_RNDIS_permament.fif, but when rebooting I got a serial COM3 port and not an IP network interface..
If I run again FLIRInstallNet.exe I do not see the camera anymore.

When I look to the FLIRInstallNet.exe  log file, I could see this

...
Installation file is C:\temp\FLIR_Hack\FLIR_E4_2.11.0_hack\FLIRfif\Set_RNDIS_permament.fif
START file list
camera.cmd
Flashfs/system/appcore.d/factory.d/zrndis.rsc
...

Any idea to solve this ?
Thanks

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 06, 2019, 04:42:11 am
Did you install Flir drivers?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alphonse777 on January 06, 2019, 05:03:42 am
I used win7 with virtual machine, installed the driver and I could get into the camera by FTP. What a relief.
Updated my E6 camera v2.11 firmware, went OK ->

 = CONNECT TO FTP
 = CREATING BACKUP DIR backup-20190106053238
 = RETR /FlashBFS/system/common_dll.dll
 = RETR /FlashFS/system/appcore.d/config.d/conf.cfc
Applying 1 bytes of delta at 000053df
Applying 1 bytes of delta at 000af32f
Applying 1 bytes of delta at 0000042c
Applying 4331 bytes of delta at 0000045c
 * stopping application...
 *  uploading common_dll.dll to /FlashBFS/system/
 * failed (error_perm('550 File unavailable (e.g., file not found, no access).'
)).
 * attempt 2
 * failed (error_perm('550 File unavailable (e.g., file not found, no access).'
)).
 * attempt 3
 * failed (error_perm('550 File unavailable (e.g., file not found, no access).'
)).
 * attempt 4
 *  uploading conf.cfc to /FlashFS/system/appcore.d/config.d/
 * PLEASE HARD-REBOOT DEVICE.


But after reboot the camera IR image was stretched/scrambled.
I restored the backup files, the image is now Ok (to what it used to be)
Is it possible to update an E6 camera with  FLIR_E4_2.11.0_hack.zip ?
I think to switch from 160x120 to 320x240 is worth.
Does the menu needs to be updated too ?

Rgds,

Edit : I seek for files regarding resolution improvement and I could not find anything for E6 ... this is bad. :-(
Edit 2 : Menu improvement works, taken files from e5, and renamed all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kabasva on January 06, 2019, 08:00:34 am
Hello! :)

I have Flir E4 1.2L (2.11.0) 320x240. What should I do to show in the reports the name of the device E8 and not E4?
I also want to change the first boot image and write there for example my name, how to do it? Help friends! :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: qx on January 12, 2019, 03:07:33 pm
Hi!

Can someone help with pictures of that plastic part which press button when trigger is pressed? Some dimensions would also help. I need to recreate it  :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: juhaa on January 20, 2019, 08:30:16 pm
Which firmware I should install?
Currently having some old hacked firmware installed, but can´t remember which version or anything.
E4 says Model: E4 1.2L and software 2.3.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: bonzoxxx on January 25, 2019, 11:30:58 pm
Ok guys, I need help.

I got full access to my e30bx, already unlocked according to some how to found messing around the forum

BUT

I have a problem: once restarted "unlocked", there isn't any crossair on the HUD and I cannot select one from menu.

Restoring previous original files, everything work
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lazarusr on January 28, 2019, 12:44:44 pm
For people in the UK, RS are selling the E4 (not WIFI) for £597.00 plus VAT (with free shipping). That would be a total of £716.40, which would be competitive as it is. However, if you use the code RSJANSALE you get 10% off (bringing the price down to £644.76 which seems like a bargain). I am not sure how long the code is good for. But, it would be a sensible guess that it is only valid this month.

https://uk.rs-online.com/web/p/thermal-imaging-cameras/8481365/

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kabasva on February 02, 2019, 07:47:06 am
Hello! :)

I have Flir E4 1.2L (2.11.0) 320x240. What should I do to show in the reports the name of the device E8 and not E4?
I also want to change the first boot image and write there for example my name, how to do it? Help friends! :)
Experienced people, please answer my questions. From tell me where to find the answer, I could not find. :(
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: TopLoser on February 02, 2019, 03:09:54 pm
Hello! :)

I have Flir E4 1.2L (2.11.0) 320x240. What should I do to show in the reports the name of the device E8 and not E4?
I also want to change the first boot image and write there for example my name, how to do it? Help friends! :)
Experienced people, please answer my questions. From tell me where to find the answer, I could not find. :(

Try reply number 153 in this thread.

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/153/ (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/153/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 02, 2019, 03:27:48 pm
Kabasva,

I am working from memory and I worked on my E4 a long time ago.

The cameras identity is held in the EEPROM and that is what is presented to a host computer for reports etc. The Ex identity in the configuration files does not influence how the camera is identified to a host. The FLIR service menu provides access to the cameras identity and other important information.

Toploser has correctly pointed you towards Bud’s work on recreating the service menu and accessing the EEPROM. He was working with a much later camera version though. In his and your case, the Service Menu was removed by FLIR in an attempt to prevent its use for hacking. From Buds work, it is clear that some parts of the service menu may be grafted in from the cameras that still have the service menu. Modifying the EEPROM contents carries the risk of bricking the camera.

Ask yourself if the camera ID is so important. It is the data collected that matters. If you need the camera to present itself as an E8 for compelling business reasons.... you really should consider buying a Bona-Fide E8 as presenting data from a hacked E4 as from a genuine E8 could be considered deception by some.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mcinque on February 10, 2019, 09:37:54 am
Just an update in case it's not been clarified, for 2.3.0:

when you put the E4 in RNDIS mode, use ONLY Windows XP or Windows 7

This because the RNDIS drivers provided with the specific version of flir tools are not fully compatibile with Windows10 and the ethernet details are not set correctly when connected to a Windows10 PC (you can't see the flir network card INFRARED 192.168.0.1/2 but you see as an anonymous network card with higher IP that refuses any ftp connection).

Hope it helps someone.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hibeejo on February 26, 2019, 09:06:59 am
Morning

Looking for some help, been scrawling through the numerous threads and can't quite find the right info I'm looking for.

I've recently got my hands on a well priced E4 with a view to hacking it, I'm currently studying Thermography (Buildings) and I'm keen to complete the hack asap, so I can get out and complete my reports whilst the Scottish nights are still dark and cold. My training centre we're going to attempt the upgrade for me but they hadn't had experience of the upgrade with my version. I contacted one of the Ebay accounts to see if my model can be hacked and they said it could.

I have:
Flir E4 1.1L
Part No 63901-0101
Software 1.21.0

I'm running on Windows 10,

Any help would be greatly appreciated, thanks in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: panservice on March 04, 2019, 07:47:02 pm
Good evening.
There is a device named FLIR E4 and after connecting it to a non-original charger, it stopped charging and is not detected by the computer. It seems like a microcircuit chip with the designation 0952 456H (circled in the picture) burned off. Maybe someone knows where to get the Datasheet of this chip to buy the same or its counterpart.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on March 04, 2019, 07:48:42 pm
(circled in the picture)

Picture?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: panservice on March 04, 2019, 07:53:43 pm
ok
Attached at the end  or here are the pictures

The microcircuit chip next to the USB connector
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fernandochia on April 08, 2019, 02:01:16 pm
Hi fellows.

I recently bought an E4 1.2LHW, 3.12.0SW.

Due to the reading of this post, i decided that the best path i should follow is to downgrade to 2.11.0 and the apply the correspondent liberation pack.

I can't find the procedure to downgrade the firmware, can anyone give me some help with that (maybe some appropriate post number or link).

Finally, i would like to confirm if i am right:  The procedure once i have the camera with 2.11.0SW is to follow the fubar web instructions but using the files that 2lps has uploaded ¿I'm right?

Regards.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tmushy on April 09, 2019, 03:35:28 am
I too tried upgrading from my current 1.19 firmware (forgot exact number)

Tried to do it but had a hard time finding links that still worked to download the firmware files
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ypanasyuk on April 24, 2019, 03:06:12 am
Quick question......... not a huge deal but is there a way to hide the popup prompt at boot "This device has unsupported software for personal learning...."? (Screenshot attached)   ::)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on April 25, 2019, 05:30:27 pm
You have that little inconvenience in exchange of the advantage this forum gave you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KD0CAC John on April 25, 2019, 06:21:48 pm
I found a couple E4's at what seems to be not too bad of pricing [ $750 - $850 ] and have saved up and reached that level .
Looking to see what to keep an eye out on an upgradeable E4 ?
No need to have some of what has been mentioned - with showing documented IFR , I do just independent work both circuit boards , electronics & insulation heat or Air conditioning loses -doing retired , word of mouth work .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: greatscott77 on May 11, 2019, 08:08:14 pm
I snagged an E4 today for cheap at the pawn shop.

H/w VersionE4 1.1L
F/w Version3.16
Orig F/w Version1.22 (per s/n list)
Latest Calibration2014-04-11

What are my options here? I see there _was_ a one-click software installer, but it's gone now?

EDIT: This post works with my model:

https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082)

And then this: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359)

And to enable RNDIS mode, this was the simplest tutorial.
https://fubar.gr/hacking-the-flir-e4/ (https://fubar.gr/hacking-the-flir-e4/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: greatscott77 on May 11, 2019, 10:14:55 pm
Hah! I'm not able to disable RNDIS mode using the remove RNDIS command from that post though. Does anyone know what might be wrong or how I may be able to fix that?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: difxati on May 29, 2019, 05:17:11 am
Any advanced package for 1.2L camera?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CrashCourse on June 30, 2019, 08:31:11 pm
Has anyone bought one recently from Amazon. As in sold and shipped by Amazon. Want to get one but want to increase the chances of upgrading to 320x240. I'm a home DIY and a Systems Admin who is proficient in scripting languages. I'm not sure what hardware/software versions are on current models and if those can be modified yet or if at all.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: anotherone on July 03, 2019, 04:34:34 pm
Just for the Reccord.

Bought one this week, it came with the 3.16 firmware and I used the 3.12 hack with the 3.16 dll that was posted in a previous reply.

To get the SUID I used the telnet method as I couldn´t find the FlashIFS\version.rsc file.

relevant links that I used:

MAin post: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1336326/#msg1336326 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1336326/#msg1336326)

3.16 DLL: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082)

cfccfg_V2: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959)

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CrashCourse on July 04, 2019, 09:47:55 pm
Thanks! 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: CrashCourse on July 05, 2019, 05:03:35 am
I'm waiting for Amazon to get them in stock again.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Yeiquiro on August 13, 2019, 12:03:21 am
Hi Joe, you know how they solved your saved camera, I am going through the same with mine if I can help, I appreciate it
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: likuidphreon on August 23, 2019, 03:53:06 am
So my camera was firmware 1.2L, software 2.8.
I put the camera in RNDIS mode and then realized I would need to downgrade to 2.3 software. I tried the link posted and it was dead.
So I installed the latest version of Flir Tools and saw there was a software update to 3.16, a known hackable version based on my reading.
I installed it and rebooted the camera. Everything seems fine, EXCEPT that I cannot connect to it via FTP. If I set the Flir RNDIS network adapter to an IP of 192.168.0.2, I can ping it, but I cannot live connect in Flir Tools. I get the error "CAMERA_RTREE_CONNECT ERROR" in the Log window.
When trying to run a FIF to remove RNDIS I get "RESPONSE_TIMEOUT" in FlirInstallNet

Thoughts?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Miek on August 27, 2019, 11:09:38 am
I had a bit of trouble finding all the right information for an older firmware, so I thought I'd just document what worked for me while it's fresh.

Camera info:
Model: E4 1.1L
Serial: 6392 1xxx
Software (initially): 1.22.0

I upgraded to the latest software 3.16.0 using FLIR Tools.

The secret menu (hold right for 10s in camera info menu) comes up but changing USB mode would never apply, so instead I used Flirinstallnet.exe and Set_RNDIS_Permanent.fif to enable RNDIS mode.

The camera came up with IP 192.168.250.2 (not 192.168.0.2) and I backed up everything over FTP.

For generating the new conf.cfc lots of posts suggested the cfccfg_V2.py script, but that did not work for me on 1.1 firmware (MSX broke, suggesting the conf was bad). I needed to use the older ftool which I got from here: https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=84664 (https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=84664) . I'm on linux so I just built it from the source in that zip after renaming a few files for case sensitivity: `g++ -o ftool *.cpp`.

I used `ftool -d <backup/conf.cfc> conf.cfg` to decrypt my backed up config and retreive the two SUID values & the ID to add at the end of the config. I also built the CRC03 tool and generated that, but I don't think that was actually necessary with the patched DLL used later. With the conf.cfg from the basic package below, I used `ftool -e conf.cfg conf.cfc 0x1234 0x5678` (replacing with SUID values gained earlier).

I could then follow the instructions from the basic package at: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359) but replacing the dll with the one here: https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082. (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082.) I also modified the conf.cfg revision entry text from '2.0' to '1.1' but, again, not sure if that was necessary.

Many thanks to everyone involved, and I hope this helps someone!

(https://i.imgur.com/x5bAlO3.png)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: emd802 on August 29, 2019, 03:16:30 pm
Has anyone had a 'Runtime Error 9 Subscript Out of Range' when trying to run the BFIC Wrapper for batch FLIR conversions?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: negative_feedback on October 01, 2019, 08:17:04 pm
I have a question about settings from Advanced Package 3.12 (3.16) on E4:

- In Settings -> Measurement parameters -> Alignment distance: " there are values from 0.1 to 1. They are applied to the image when selected but not acknowledged by the Menu both here or in pop-up menu (where we can read old value, 1.5 for example).

Is this a feature for close-up shooting or a bug?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lou on October 15, 2019, 08:30:08 pm
Hello all,
  I have an E5 which I upgraded. No problems with the upgrade.  I have a problem with the center square buttons (navigation pad).  The left side vertical does not change the selection option.  The other buttons all work just fine.
Anyone know how difficult it is to access and or replace this?  When I boot up it is on the spot selector, so I currently cannot get to the settings and image modes.

Lou
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lou on October 17, 2019, 12:12:52 am
Update,
  I opened the case as per the video on page 1...  I can't get to the the navigation pad to remove it. Does the face plate come off?  I gently tried to pry but did not want to break anything.
Lou
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 16, 2019, 07:22:31 am
i have a FLIR E4 WIFI 2.0L fw v3.16.0.
I am looking for some help. I have searched all over looking on how to add files into the Python directory |O. i have zero experience with Python would appreciate the help. I have searched this forum, watched videos on how to add files to the directory. Its all french to me. Any help would be appreciated.
thanks in advance for the help.


12 - Encrypt the file using python and the suid. I had 2 big problems with this. Directing python to the files and which command window to use. I kept getting a syntax error. Use the normal windows cmd. Use CD to change its directory to the Python folder. For me "cd\" to get to the root of C: then "CD python27" put both files in the python directory before running the command line.
13 – Move the newly created conf.cfc from the python folder to where your other files are.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 16, 2019, 09:18:58 am
I see a few of you live in Canada, anyone live in Calgary? Dont want to screw up my new E4, willing to pay someone to do it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 17, 2019, 03:58:05 am
Bricked my Flir E4 v2.0L fm3.16.0

I have since BRICKED my new camera.  |O

I went over everything, checked my notes, re-read the steps and made sure to place the new files in what i thought was the correct place. I was connected to the E4 via WIFI, had checked and rechecked what i had done. Then proceed with the next steps......now its stuck on the Loading Screen. FML

I had seen something reg using the USB and being able to reconnect to the unit. I did save the original files to my laptop and to a mem stick. i did that twice just to make sure.

Hopefully someone here has a trick to get the unit into RNDIS mode via the laptop (Windows 10 Home)

Seeing my new camera stuck on the load screen makes me sick, lol.

If im out of luck then i guess ill see if i can return the unit to ITM (picked up from local location)

Would appreciate any help. Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 17, 2019, 05:47:23 am
You are in a wrong topic thread. Go to the E4 WiFi thread, use the recovery procedure from post #183 in that thread to restore your camera, then use post #788 to liberate it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 17, 2019, 06:02:13 am
You were asking if anyone has "bricked" their E4.  |O

I managed to mess mine up. Its stuck on the loading screen. I have been looking for ways to remedy this. I did see somewhere on here about being able to reconnect via usb and getting the camera into RNDIS mode. I did save everything before i did anything. I just need to find a way to reinstall that data. I double checked what i did, and where everything went, apparently i messed up somewhere. If i do manage to figure this out, ill post what i did.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 17, 2019, 06:39:05 am
I do not think i ever asked if anyone has bricked their E4. Did you read what i said ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 17, 2019, 06:23:11 pm
Sorry i was trying to reply to another post, didnt realize it would pop up after someone else's post. I was reading a post and clicked on reply, assuming it would show up on his post. Im new to this forum and am still learning how it works.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 17, 2019, 06:30:34 pm
I did read your post, tried it a bunch of times. I pinged the thermal and that was fine. Then i tried to connect and got "No connection made because target machine actively refused it"

Thanks for all the valuable info that you and everyone have posted.
Ive been at this for a hrs/days, i have researched steps or references that i didnt understand.

I am a Refrigeration Tech and havent done much with this type of computing for years. I really hope i can restore this unit.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on November 17, 2019, 06:34:34 pm
As Bud stated, go here to recover your camera: Post #183 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1336326/#msg1336326)
and go here to liberate it: Post #788 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082)

You should be reading and seeking help from the FLIR E4 Wifi Resolution and Menu Hack Thread (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/). You are searching on the wrong board.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: street8487 on November 17, 2019, 06:37:38 pm
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Kabasva on November 26, 2019, 06:39:45 pm
If anyone knows where you can download a dump file for NAND flash Flir E4, please give a link. Maybe someone can copy the dump file from their Flir E4, please do it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 26, 2019, 06:48:40 pm
Do not cross post. It will not get you anything other than attention of the moderators.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: tsmith35 on November 27, 2019, 12:26:57 am
If anyone knows where you can download a dump file for NAND flash Flir E4, please give a link. Maybe someone can copy the dump file from their Flir E4, please do it.
See this post (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg461954/#msg461954)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: lou on November 28, 2019, 07:20:36 pm
Hello,
  I need to send my unit in for service.  One of the navigation buttons on the pad is bad.  I did the changes in 2015 and I am not sure how to revert.  I have a full back up from the camera that I transferred using fzilla.  Is it just as easy as copying the files back or am I missing something?

Lou

EDIT***  I was able to figure it out. I just swapped the original 2 files back to their original locations and all was well.  Files were CONF.CFC  and COMMON_DLL.dll.  I did not have the menu hack.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: agiorgitis on November 29, 2019, 12:40:05 pm
Hi guys,

I'm posting it here too (in case someone has missed this thread https://www.eevblog.com/forum/thermal-imaging/flir-e75-upgrade-to-e95/ (https://www.eevblog.com/forum/thermal-imaging/flir-e75-upgrade-to-e95/) )

Is anyone interested on decrypting the conf.cfc files of an E75, the same way it was done for E4?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marekx89 on January 06, 2020, 02:13:21 pm
Hello, i'm new on forum. I have a question about Resolution and Menu hack.
I have a MODEL: E6 2.0L
S/N : 639027397
Part Number : 63902-0202
Software 3.16.0

Is possible hack to E8 ? The menu on the video I would like, exactly the same. It is possible ? Video
Code: [Select]
https://www.youtube.com/watch?v=dP8R7FRYU0k
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dreamstar on February 02, 2020, 05:04:52 pm
I have E5 HW 1.2L SW 2.3.0 hacked with instructions from this thread.
All seems ok, but i have noticed that after flash memory filled for about 50 Mb (from 175 mb total) E5 cannot see memory card, sometimes show green screen or white and black boxes.

What latest firmware I can try to use with HW 1.2L?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: vinvin3128 on February 18, 2020, 01:56:22 am
I own a E4, and i found that the temperature measuring rate is too constant. What can i do to capture a more stable temperature? Maybe 1 second for once measurement? Besides, any method to set an alert of above temperature with sound? Thank you very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sungwoo on February 18, 2020, 12:34:53 pm
hello
I have a problem.
i have a FLIR E5 1.2L v3.16.0.
This is what I saw.
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359)  Basic_3.12.0.zip
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg2252082/#msg2252082)   commondll 3.16
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1411369/#msg1411369 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1411369/#msg1411369)   
https://www.youtube.com/watch?v=oXJYv_MxIHw&t=114s (https://www.youtube.com/watch?v=oXJYv_MxIHw&t=114s) Flir E4 1.21 and 1.22 Resolution and Menu Hack



    commondll 3.16 Is the commondll file a resolution file?
Does it work as it should in conf.cfg?
 what is # CRC03 11223344
Everything is mixed up.
can not understand.
Please help me. Thank you.

I tried everything but it doesn't apply.


https://fubar.gr/hacking-the-flir-e4/ (https://fubar.gr/hacking-the-flir-e4/)   

Created by Bud
Liberating FLIR E4 WiFi ver 3.12.0

'====================================================================================

Tools required:
   + FTP program (e.g. WinSCP)
   + Telnet program (e.g. Putty)
    + Python v2.7
   + FLIR Device Drivers software, if not using WiFI and using USB connection

1. Switch camera to RNDIS using USB connection or configure WiFi and connect to the camera with FTP.
   tip: to find out the camera WiFi DHCP IP address, run a Ping from your computer command prompt:

      ping IRCAMxxxx

   (replace xxxx with last 4 digits of your camera serial number)

   If you do not use camera's WiFi for whatever reason, you can install FLIR Device Drivers and connect to the camera via USB in RNDIS mode.
   The camera IP address in that mode is 192.168.0.2
   Procedure how to switch camera to RNDIS is out of scope of this writing.

Use the following credentials for FTP login to the camera:

user: flir
pass: 3vlig

2. Make a full backup of the camera to the local computer hard drive. Some files can't be copied but they will not be required to fully restore the firmware, so you can skip them.
------------------------------------------------------------------------------------------------------------------------------------
3. Obtain the camera SUID. Use one of the following methods   Obtain the camera
   3.1 Open this file in the backup archive or on the camera:

   FlashIFS\version.rsc
   copy the SUID (found at the beginning of the file) and save to your working folder

   3.2. Connect to the camera with Telnet
   user:flir
   pass: 3vlig

   and run the following command from Telnet command prompt:

   "suid                                                                               

   it will return the SUID string, copy/save it to your working folder."

4. Obtain cfccfg.zip archive:
   https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg596959/#msg596959)
   and extract cfccfg_V2.py from it.

5. Install Python 2.7 . The script may not work with later Python versions.

6. Open the supplied conf.cfg , scroll down to the very bottom to the line that starts with "# ID " and replace the 9-digit number with your camera serial number.
   Save the file.

7. Encrypt the updated conf.cfg from step 6 with your suid by running this command from command line on your PC with Python:

   python cfccfg_v2.py XXXXXXXXXXXXXXXX conf.cfg conf.cfc
                    (where XXXXXXXXXXXXXXXX is the suid string from step 3)

   This step will produce a new encrypted conf.cfc .Save it to your working folder for transferring to the camera.   

8. Double check to make sure you have made a backup of the original camera files (see step 2) !!!

9. With Telnet and FTP connected:
   a) In Telnet enter this command:

      stopapp   
   
   b) Using FTP program rename FlashBFS\system\common_dll.dll on the camera to common_dll_org.dll

10. Transfer the new common_dll.dll from the working folder to the camera -> FlashBFS\system\
11. Disconnect FTP program and power off the camera by press/hold the power button for 6 seconds
12. Power on the camera and cross you fingers. If it boot normally, it is good news. Skip step 13 and go to step 14
13. If the camera stuck in FLIR logo or in blank dark screen, things did not work for you well and you will have perform recovery procedure
14. If the camera started normally with the new common_dll, connect using FTP and transfer the new conf.cfc ->FlashFS\system\appcore.d\config.d\
15. Shut down the camera by holding the power button for 6 sec. Remove the battery for a few second and insert it back.
    Power on the camera and see if you now have 320x240 resolution working. If not, chances are you did something wrong with the conf file. Double check the
   procedure to create and encrypt the conf file with your SUID and replace it on the camera again.
16. Assuming res mod was successful, transfer the rest of the files in FTP program replacing old versions where required

   pallette files (.pal)         -> FlashBFS\system
   ui_control.rsc            -> FlashBFS\system\appcore.d\factory.d\
   design_ui.xml            -> FlashBFS\system\ui.d\
   toolbar-config.xml         -> FlashBFS\system\ui.d\
   facet.rcc            -> FlashBFS\system\ui.d\
   preset files (preset_*.rsc)      -> FlashBFS\system\ui.d\presets.d\
   battery_frame.bmp         -> FlashBFS\system\battery.icons\
   flash_graybackground.bmp      -> FlashBFS\system\battery.icons\

17. Shut down the camera by press and hold the power button for 6 sec. Remove the battery for a few second and insert it back.
    Reboot the camera and check/browse the enhanced menu, new palettes, and new settings.

    If all looking good, enjoy your Liberated E4 v3.12.0 !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sungwoo on February 20, 2020, 11:58:42 am
I tried everything again.
The resolution is intact. The remaining functions do not work.
Is it because I didn't use crc03 in the conf.cfg file?
Where is the problem?
-----------------------------------------------------------------------
Windows troubleshooting.
If you need help, I will help you.

Do you know why you don't have the flir logo at the bottom of the screen?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 26, 2020, 01:03:08 am
Hi, I am new to this thread. Keeping this short, I am looking to buy a thermal imaging camera (Electrician and home use).
I have contacted a craigslist ad for an e5 300$,

"Flir E5 thermal camera Have a thermal camera doesnt turn on , needs to be serviced. I dont need it anymore selling it for cheap as I have no time to get it fixed hoping someone would do it if interested."
and he says in a text
"No (I asked if he knows what wrong).. but it was not dropped. It charges and u can download pictures from it. I was told it might have a lock on it."

Is there any chance this is a bricked device or the chance that it is irreparable and not worth the risk?

I have hacked many things in my life, and am not new to this type of thing. But I have not read enough or found information on the issue described.

Very much appreciate any views on this, and will not have my feelings hurt by telling me that its stupid to chance buying it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 26, 2020, 03:57:23 pm
You'd need to know if it is possible to Telnet to the camera while it is switched off.
Also, what does it mean "camera doesnt turn on". Is it it does not react on pressing the power button, or does is get stuck on the boot at some point. Does the screen come on or screen backlight come on.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 26, 2020, 11:11:09 pm
Thank you for your reply.

He said that it has not been updated. He says it shows charging, but won't turn on.

At this point it seems its probably malfunctioning, but I don't know if this is a known issue. Possibly a firmware issue? A battery issue? Or more than likely a circuit board issue.

Im not really willing to shell out money to send to flir for repair, but I keep playing in my head getting it to work for now 250$ CAD.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 26, 2020, 11:18:45 pm
Also, the more time I wait, the more time I spend on this forum reading all the fun things that you all have put together. I love this stuff, but have to tell myself that the reality is I would probably just be throwing away 250$ Which I'm almost ok with, but if there is nothing to learn from it and a dead end from the start, then it's probably not worth it.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 26, 2020, 11:39:21 pm
CAD$250 is a great price for an Ex series camera, even with a fault. FLIR charge US$400 for Ex repairs that do not involve microbolometer replacement. If I was in Canada I would buy it without hesitation, but then I know how to repair many thermal camera faults so understand your hesitation if you cannot repair it yourself.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 27, 2020, 01:03:26 am
Appreciate the input. I suppose I can sell it on ebay or possibly here somewhere if all else fails and recover most if not all my money. Thanks very much.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 27, 2020, 01:17:57 am
I would certainly buy it from you  ;)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: digsys on February 27, 2020, 01:36:54 am
FFS Fraser ... you have TOO MANY of these toys !!  :D You can't own them ALL !
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on February 27, 2020, 09:40:18 am
Digsys,

Ah but you can never have too many toys  :-DD

But seriously, I enjoy repairing this technology  :) It is like solving a puzzle and keeps my brain active  :-+

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 29, 2020, 06:00:26 am
So I purchased the camera I mentioned a few post's back. I'm looking for some suggestions of what I might do to diagnose/fix the problem. The owner was nice, said the camera had sat for a while, does not appear he had messed with it at all. The camera is in great condition, except it doesn't start up.
 
The Camera is a Flir E5 V 1.19.8

What is wrong:
 - The camera does nothing when the power button is pushed and while connected to battery.

What I know so far:
 - The camera was sitting for an extended period of time
 - Battery appears to be fully charged, it was mostly charged when I got it and is now full.
 - The screen works but the only thing I am able to get to see is the battery charge/charged screen.
 - The usb memory reports as 173mb, there was only a DCIM folder on it with last picture taken 2016.
 - When in Flir tools, going to import pictures only showed about 10 photos, but when looking in file explorer there were probably around 200.

What I have tried / What are my thoughts so far:
 - I tried to update the firmware, but because the camera fails to start it seems it can not start the firmware upgrade
 - I am not sure what the memory should report as, but 173mb seems low to me, I am wondering if this is where the problem is.
 - I tried deleting the photos both in explorer and flir tools as I believe I read on here someone being suggested to delete photos when his camera was not working properly.
 - The firmware files appear to be loaded onto the "sd card" now, but can't boot to load them.

 - I am not sure if there is a way to run the firmware from a computer without booting the device
 - I do not know if the battery is dead / malfunctioning even though it seems charged. Not sure if they are okay once charged after a low voltage may have happened.
 - Not sure if the camera can normally boot off usb without a battery. That would let me know its not the battery that's the problem because it does not boot just charges.

Any help would be very much appreciated, I have read thru many of the posts looking for troubleshooting suggestions, but have not located anything with the problem I am having. Can not find any other sources of information on the internet except here. The people here seem to be great. I only hope I would be as helpful, understanding, and patient when faced with constant streams of questions about knowledge that has taken years to build, without compensation.

ps. last ditch effort, I could send it back to flir. Trying to leave that as last resort though.


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 29, 2020, 06:18:01 am
One other note, when working in flir tools, the camera doesn't appear under Instuments -> thermal camera. If appears when first starting the software and gives me the option for update the firmware, but after about 30 seconds a devices under Instuments called Flir USB Video appears, which only has a green screen when clicked on. It also tries to update the firmware for Flir USB Video, but has no serial or camera located.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 29, 2020, 06:58:28 am
As i said you need to know if the camera can be accessed through ftp . If you have Flir Tools installed, run the executable called FlirInstallNet.exe and see if it finds the camera. If it does, you then can run a script to switch the camera to network mode, connect using ftp and check the software files.
If it does not, i'd say it is a dead dodo and send it to Flir.

Do not reformat the storage, this highly likely will kill the rest of whats left.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 29, 2020, 07:36:37 am
I was able to connect to "FLIR USB Video" under camera in FLIR Install 2. Not sure that Flir USB Video is what I am hoping for.

Attached a text of the "Get Versions" and error it gave after pressing the "Check Installation" button

Thanks, Stephen
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 29, 2020, 03:12:18 pm
Do you see an output in FlirInstallNet when running the rndis temporary fif?

Proper rndis execution should result in setting IP 192.168.0.2 i believe. Flir cameras are known for poor handling the switching, best you should try a VM with Windows XP.

Regarding files to check i am talking about the OS files, not files on the pictures flash drive.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 29, 2020, 03:30:05 pm
Do not try running firmware update till you connect through ftp and inspect the current condition of the OS files. If some of it is damaged i would first try finding a copy of your current firmware files and copy them over through ftp.
But  if the calibration files are gone then it would be end of story.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on February 29, 2020, 07:36:10 pm
So I ended up upgrading the firmware last night. It worked except there is still an issue. I believe the power button may not be working. Sorry, I need to work on my patience for a response.. but believe I was lucky.

I have display now, but after updating the firmware it turned itself on, I could not turn it off with the button so I pulled the battery. I could then not turn it on again. So I ran the firmware update again, once again it is on, but can not turn it off. Im not sure what or if there is a command in FlirInstallNet that I can run to boot the device manually. That way I can troubleshoot more and work on getting a backup of the files. Would be very helpful.

I have not tried running ndis temporary fif in FlirInstallNet, currently as the camera is on and working at the moment. I will do it again if someone can let me know if there is a command I can send to boot the device from FlirInstallNet. Before when not powered on and the "Get Versions" button gave back mostly missing data, it said it was successful and did open a new network adapter. But the was like 139.xx.xxx.xx and there was no gateway ip. Tried to connect over ftp but it failed.

When I run "check installation" it fails and says

"Connected
Installation started...
Process local command: TIMEOUT 15
Camera command kitcrc -c \FlashFS\system\kits.d\appkit.rev
Received shell command message: kitcrc: can't find \flashfs\system\kits.d\appkit.rev

FAIL


\>
Process local command: FAIL "CRC Appkit failed",1
User selected ABORT
Operation aborted

Abort"

I'm guessing number one is to try and establish ftp. So if there is a command to cause the device to boot, that would be great. I could also try to load that missing file by command, tried looking at the Set_RNDIS_permament.fif file for a way to do that but it is a bit garbled and could'nt make it all out, but I will wait for a response this time. Is there a program that can read .fif files?

Currently just have the camera on connected to the computer. Thanks

***** VERSIONS *****

Product Identification: Qx
Sw Combination:  3.16.0
Appkit:  3.1.14
Bootloader:  16.0.4.0
Confkit:  E5 1.1
OsImgkit:  23.1.12
Prodkit:  0
Serial Number:  639xxxx
Application up status:  UP

Update: I am working on getting windows xp vm working and having the flir connect on network. I have run temporary fif on the working cam but still get the 139.xxx.xx.xxx ip. So am working on that. Have figured out I can reboot the camera if I reset to factory settings. If the camera turns off though, I will have no choice but to redo the firmware from FLIRInstallNet again to get it to start up (takes about 5 hours?). So if there is a .fif file out there that turns it on faster, that would be awesome.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on March 01, 2020, 03:49:12 am
So I have made some progress. I have ftp access in Windows XP. I copied all of the files into a backup. Also copied out common_dll and conf.cfg into a separate folder.

Going through the folder I am trying to figure out what is suppose to be where. Is FlashFS and FlashFSB suppose to be the same? They are definitly not on mine. I copied 2 missing files into FlashFS, and now when I run check installation in "FLIRInstallNet" it passes. But I am not sure what other files may be missing.

Question is, is there somewhere I can get a complete copy of all the directories (firmware folder only has flashbfs), and then copy over vital files that are unique to my camera?

What would be the next step? At this point the only thing I know is wrong is that the power button doesn't work. My main concern is trying to figure out a way to get the camera to boot up, booting down would be nice too though I can set boot down timer for 5 min. With my limited knowledge I would guess maybe a fif file that has the same command as whatever is in the firmware upgrade fif that tells it to reboot at the end. Like I have said, only way to power on the camera atm is re-running the firmware upgrade and have that command boot it up. Running it from flirinstallnet takes around 5 hours. Eventually may have to resort to opening the camera up and having a look at the circuit board, possibly that extra on/off button thats int the tear down video, and see if I can somehow reroute to the existing button or an external one. Haven't powered down the camera in about 24hour hoping someone might be able to help. I hate being that whinny person :-\  sorry.

Thanks so much, Stephen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 01, 2020, 07:45:35 am
Try the following

on the computer create a file called camera.cmd
type just one word into the file:  restart
save and close the file
ZIP the file
rename .zip to .fif
run the fif file in FlirInstallNet

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 01, 2020, 07:47:28 am
Is FlashFS and FlashFSB suppose to be the same?
No
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on March 01, 2020, 10:03:26 am
Thank you so much. That worked perfectly.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on March 01, 2020, 11:35:55 pm
Well, I have to thank bud and fraser for there support. I managed to liberate my 3.16 firmware 1.1 hardware e5 camera to advance. I gained lots of knowledge for various things in the process, and am thankful. I fixed what appeared to be faults in the file system from before I bought it, thought it may just have been the fact that the power button didn't work. I figured out about many parts of the flir camera, virtual consoles (atleast getting this one to work properly for various things), took the camera apart almost down to where mikeselectricstuff did to try and see if I could fix the power button (should not have done that at 11pm, luckily all worked when back together after a few hours), and then finally liberated to the advanced edition. Of course it would not have been possible without input from members here and all the work and information put into it.

Only one question I have left. I see you can remap the return button in the settings now. Is there any chance that could be programmed as a power button? I assume not, and if it could probably only once the device is on. Just a thought on fixing my power button issue. The advice bud gave me to boot the device from computer is great and I am happy with that.

Think I did well for the final agreed on 200$ spent .  :D

Thanks Stephen.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 02, 2020, 01:02:15 am
I' d think it is a hardware, not software problem. There is probably a standby hardware circuit that controls a FET or something when the power button is pressed when the device is cold. I do not think any software is running in powered off state until the camera is connected to either the charger or USB port. There is some button mapping in the software but it is only loaded as part of boot process.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 02, 2020, 01:42:37 am
In design_ui.xml scroll to the line

<qml_context_property type="int" name="onOff" value="16777271"/>

and try remapping the value to an other button of your choice.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on March 02, 2020, 04:19:01 am
Thank you, I will look into that for sure. If I can plug it into a wall and have the charge screen come up, and then push a button I would be happy about that.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ewizard on March 02, 2020, 05:22:31 am
Well, I did manage to get it to work while the camera is on. But not off or from charge screen. I didn't work with the back button, but did with the archive "photos" button. I assume because maybe the back button is reprogrammed as a customization option in the cameras settings. Guessing the charge screen is running off of hardware similar to when camera is off, so doubt I can do anything to help that. Thank you again for your suggestions.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 02, 2020, 08:10:57 am
Yes as i said the xml file gets loaded during boot so remapping would not work until then.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: detektyw78 on March 03, 2020, 03:54:13 pm
Hi! I bought a new thermal camera Flir E4 2.0 3.16.0. I have good advice for all new users who write about problems when modifying the camera. Read this topic carefully several times and then start working. If you're in trouble, read again and try again. My new camera works great in 320x240 resolution. Thank you to everyone who put their effort and time into the preparation of this walkthrough. Regards.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 03, 2020, 04:15:13 pm
From this topic you can only use information how to connect to the camera. The software part is mostly obsolete as it referred to earlier versions (2.3.0 at most, i believe).  For the software 3.x.x the reader should use the E4 WiFi topic.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comtec on March 10, 2020, 11:55:48 am
I have  a pre modded E4 1.1L sw 1.22 software for some time now, finding kids when playing hide and seek is much better for it :-)

It works OK but cannot get images off the camera using flir tools 'failed to initialise camera'.

Can somebody advise how and if safe to update to later version and remod it, and i guess a few extra features too..

I do not have virgin backup files.

I've read quite a few of the posts here but the thread is immense !!

Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: sungwoo on March 12, 2020, 03:38:55 pm
A strange phenomenon was discovered while using it.
https://youtu.be/yo_cvvdPoc0 (https://youtu.be/yo_cvvdPoc0)
https://youtu.be/32T0qMixajM (https://youtu.be/32T0qMixajM)
The power button does not turn off at once.
After power on. It turns off
The screen shakes when the battery is low.
FLIR E5 1.2L v3.16.0
I hacked it last time.
What's wrong?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: comtec on March 12, 2020, 09:55:37 pm
Upgraded 1.22 to 3.16 using FLIR tools, all went well and resolution and menu hacks still present.. that was a surprise..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: likuidphreon on March 18, 2020, 05:10:54 pm
Having spent a lot of time reading and searching, I am trying to determine the upgrade path for my E4 1.2L 3.12 camera. I see solutions for v 2.0 hardware, but I am not finding it for 1.2. Any help is greatly appreciated. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on March 18, 2020, 11:20:09 pm
Does the latest hardware still stream 320x240@60 like in Mikes original video? or has Flir noticed this and dropped the frame rate on newer sensor hardware?


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 19, 2020, 12:55:16 am
AFAIK E4 never did that. I recall Mike got an indication by probing around that the sensor seemed to output a higher frame rate but it was not user accessible.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djQUAN on April 23, 2020, 03:25:26 pm
Upgraded 1.22 to 3.16 using FLIR tools, all went well and resolution and menu hacks still present.. that was a surprise..

did you experience the random crashing at times before the update and did it help after?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: totalgearhead on May 09, 2020, 09:36:54 pm
I wasnt sure to start new thread or ask in this one? My E6 is stuck at the spash screen, I cannot connect to it? I Tried copying files to the directory, but they erase and 2 error files return? Struggling for help here. thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 09, 2020, 10:22:48 pm
Have you used a PC to format the picture storage flash drive ? This is known to cause this problem. In the scenario, it is a return to FLIR job for firmware rebuild.

If the unit is still under warranty you can resort to returning it to FLIR for repair if no other solutions are forthcoming from this forum.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2020, 11:05:50 am
If you killed the camera with a format, it is, in my humble opinion, a failure in the cameras design and so I would approach a FLIR with a claim that the camera has a design fault enabling the user to innocently brick it. Unless there is a large print warning about not formatting the flash drive with a PC, I see FLIR as being culpable. Forget warranty.... go for good will and ask a FLIR to repair your camera as this is not acceptable in such an expensive product. Basically try shaming them into repairing it. I certainly would. If you are polite but firm, they may come to the party or at least offer a reduced repair cost. Audi paid  the cost of a new exhaust system that I had fitted as it had not lasted as long as they expected. (They paid half the cost of new front brake discs that warped for the same reason). It was a stainless steel exhaust system and my car was 3 years old. A product should last a reasonable period of time and be free of design defects that can put it beyond use within a reasonable period of time.

You have nothing to lose.

By the way, the part numbers and serial numbers you are seeing are likely those of the main board and microbolometer and not the camera. FLIR always store the various modules details in their cameras.

Good luck and I hope FLIR help you.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: totalgearhead on May 10, 2020, 01:17:17 pm
thanks for the advice Fraser, I have logged a request with the local FLIR office. Lets see what heppens, I will let you know.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 10, 2020, 01:52:26 pm
I have always had very good experiences with the Canadian FLIR service centre.

I hope they help you.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: parkwood151 on May 13, 2020, 02:53:34 pm
Hey folks, I'm a long time lurker but first time poster.

I purchased an E4 a few months ago, but prior to purchasing I had come across the ability to hack it, and this thread.  I read through the whole thing, finally picked up an E4, used it for awhile, and then decided I wanted to "upgrade it".  I read through the thread again (took awhile), located the files I needed, and sat down to start, and got stuck pretty quick.  I'm hoping somebody can help. 

I have an E4 1.2L, running 2.3.0

Using FlirInstallNet, I tried to put my camera into RNDIS mode, the temporary file didn't seem to work, so I tried the permanent one.  I'm in RNDIS mode now, I think, but when I open FlirInstallNet again the IP address is 169.254.199.115, not the expected 192.168.0.2.  In network connections there is a connection with the mentioned IP address, and its called FLIR Camera Network Device #2.  However, I can't FTP into it, and when I try to run the remove RNDIS FIF file, all I get is a connection timeout error. 

Thoughts?

Thanks so much in advance
~Jeff
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 14, 2020, 02:31:14 am
Get a computer or VM with Windows XP. It always works fine with Flir drivers. Win 7 or 10 not always do and are hit and miss.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: mct75 on May 20, 2020, 09:55:47 pm
Hi everyone!  4 Years ago I bought a used E4 non-wifi off Amazon that had been partially hacked and left with the "ring of crap."  With some help here I was able to update it from 2.3 to 2.11 and fixed the RoC, kept the resolution, but lost all the advanced menu options.  I've been bored on lockdown and I'm thinking about trying to get the menu hacks working.

A few questions:


Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macta on June 06, 2020, 06:22:25 pm
Hi,

I bought a i3 and try to hack the i3 to the i7 with the instructions from a pdf I found here on the forum.

I installed the Drivers, Notepad++, Total Comander, etc..

hut I have problems getting in to the i3 whit this instuctions:
Quote
15. Now start the Total Commander app.
a. b. c. d. e. f. g. h.
Press ‘Net’ on top menu bar & select ‘FTP Connect...’ from the drop menu Press ‘New connection’
Name the new connection (Session) e.g.: flir Enter host name: 192.168.0.2
Enter user name: flir
Enter password: 3vlig
Select (checkbox) ‘Use passive mode for transfers (like a WWW browser)’ The ‘OK’ to save.

I get a connection fault from commander?

Can someone help please?

Thanks!
M.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macta on June 06, 2020, 09:07:26 pm
I found it!

instead of  192.168.0.2 I tried different numbers and  192.168.2.2 got me in the camera.

 :-+

I followed the rest of the instructions and got the camera working again, though the 'menu' has changed the firmware still says i3, is this correct? (I don't see improvement in the camera.. )
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Macta on June 10, 2020, 10:06:14 pm
Fully working i7 now - just had to reset it again  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zinom on October 14, 2020, 01:35:13 am
HI!
After following all instructions to hack my i3 Flir to i7, i really had the new menu as described but captured images are still telling 60x60 IR resolution in FLIR Tools. It should change also in that infor right? Maybe i did something wrong in during the hacking? Can anyone help? Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: zinom on October 14, 2020, 01:48:33 am
Fully working i7 now - just had to reset it again  :)

Is that. You should reset, turn on and then reset again. After the second reset you can see the difference in camera resolution. If you open FLIR Tools, you can see in EXIF the resolution is no longer 60x60 but is in my case 120x120 :D
THANKS!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: f14 on October 23, 2020, 02:19:38 pm
I have old Flir T200 resolution 200x150. possible to hack it ? :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on October 23, 2020, 03:10:43 pm
You need to look at Mike’s first post on this thread and read about the upgrade to the early E4 cameras that used firmware 1.18 and 1.19. Use the knowledge gained in that research to attempt access to your T200 file system. Then see if the configuration files exist and look the same as those if the E4. If the configuration files look similar then you can try changing settings to enable full functionality. Remember to make back ups of all files on the camera. Some system files will fail copying but that is normal as they are in use.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Mkpirulo on November 04, 2020, 12:58:52 am
I have a Flir E4 1.1L with FW1.22 and a Win10 PC. Planning on using DaveWB instructions for FW1.22 at reply #4476

My question is simple can the latest Flir RNDIS drivers (via the eevblog links) by used to connect to my camera, or do I need an older version? When my camera is connected I get a pop up stating that the ThermaCam is being configured(at this point I disconnect the camera), is this something to be worried about. Is this some kind of counter measure from Flir or just a normal connection being made. I've searched and cant seem to find anything on what to expect during the connection. The only link that came close was JOE-C (jch) he stated the following:   The web interface ( http://192.168.0.2/ (http://192.168.0.2/) ) can be called up when the camera is connected in RNDIS mode.
Up to firmware 1.19.8 the web interface can be seen on the left. As of firmware 1.21.0, the web interface has been greatly decimated, but precautions have also been taken elsewhere against the extensions.Not really sure what the underlined sections is trying to say.

It would be great if someone could point me in the right direction, I don't mind searching.

One last thing, I tried down loading the file to my XP machine with no luck, seems that I would need the older version of the driver file(RNDIS) for this system to work.

Also wanted to thank all of the contributors for their hours and hours of time that they have spent on this topic, its much appreciated.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jam123 on December 13, 2020, 06:52:47 pm
Hi folks,
I got a used FLIR E6 (1.2L / Firmware 2.3.0).
I have read now the complete blog but didn´t find an answer to the question if I can fix the E6 with the resolution hack.  :-\
First I tryed was the menu hack. That works perfectly - thanks to you all :)
After that I tried to manage the resolution hack. But I´m absouktely not sure which hack I have to use because everytime there was especially a solution for the E4.

Can anyone tell me where I can find tj files for the resolution hack on my E6?

Best regards from Germany :)
Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 13, 2020, 07:40:17 pm
For your version of hardware and firmware, just follow the upgrade process for an E4 running firmware 2.3.

It is only the latest firmwares that need Bud’s upgrade files that are camera model sensitive. Firmware 2.3 thankfully is less well protected.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 13, 2020, 07:56:04 pm
For the 2.3.0 search this thread in reverse order for the latest post from user janekivi.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jam123 on December 14, 2020, 04:40:38 pm
Hi Bud, Hi Fraser,

do you know the feeling when you are standing in the woods and you didn´t see a tree?
Unfortunaly this is like I feel att he moment...  |O

I checked the posts of janevkivi but don´t find any files for the upgrade of my E6...
I found a lot of the menu hack - but that I´ve already performed sucessfully.

Can you give me please one more hint that I would be able also to find it?

Chris
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 14, 2020, 05:11:16 pm
His work was for E4, not specifically for E6.
He published stuff for resolution and menu (including palettes ) update. What other updates you are looking for?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jam123 on December 16, 2020, 09:07:53 am
I read blogs of guys which have asked for  using the E4 hack for the  E5 / E6. And for my (not perfect) understanding their questions of compatibility haven´t been answered like "yes it works".
I have tried to perform the hack already on my E6. Menu works fine. But after the reso hack the thermal image looks a little bit strange. I was happy to restore the original files to have the "original" picture again..
So I want to be sure that I´m using the right ones when I try it next time :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 16, 2020, 02:34:16 pm
Can you describe 'a little bit strange'  ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jam123 on December 16, 2020, 04:09:31 pm
The thermal picture looks like there is a fog in the picture. It wasn´t sharp anymore and you didn´t recognize anything usable.
Additionally there was a „application error“ indicated on the screen like in post #8148. The guys wrote that you have to remove the battery and then it should disappear - but it comes again and again... And so I decided to remove the  resolution hack again…
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2020, 04:18:17 pm
These symptoms are typical when the res hack is not done correctly, which prevents the conf file from been loaded. There was an error somewhere in the process you performed.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: jam123 on December 17, 2020, 07:59:02 pm
I thin I know now why this happens...
I talked to Jannek and he checked my files from the camera... -> It seems that the camera has already been hacked   :-DD  |O
When I run the patch a second time something seems to went worng in the files and things occured like I mentioned in my last post...

Thanks for your support :) I didn´t know that the camera has been patched in the past.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Thermale on December 25, 2020, 09:27:20 am
Hi All,

I purchased a E5 non-wifi from Amazon - running firmware v3.

Is it possible for a brief description of what needs to be done? I'm running windows 10 on my pc.

From what I've read / understand (around 20 pages on the forum) it's some combination of:
downloading the hacked files
accessing special menu on device and/or RNDIS?
adjusting the .dll files
adjusting the xml file?
possibly downgrading the firmware to v2
running a win 7 virtual machine for the 'update'?

Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Narkoa on December 26, 2020, 05:47:52 pm
Hi Thermale,

I tried to summarize the steps I went through 2 weeks ago for my E4.
See this post https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3364376/#msg3364376 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3364376/#msg3364376).

Hope this helps a bit.
Regards,
Narkoa
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on January 11, 2021, 11:40:45 am
I have a resolution-hacked E4, 1.2L with 2.3.0 that I haven't used in a while (years?).
Took some pictures with it yesterday, and downloaded and installed FLIR Tools on this Win10 x64 computer.

Now, the FLIR Tools software won't recognize the E4. I know I got this working at one point, but unfortunately I completely forgot how I did this back then.
I tried downloading FLIR drivers, and followed other FLIR recommended steps. Checked some old posts in this thread, but I can't for the life of me figure this out.

How can I get the pictures out of the camera and transferred to the computer?

USB Mode is set to RNDIS in camera
ETHERNET 7: 169.254.75.246

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on January 11, 2021, 12:00:19 pm
Check that the camera is not still in RNDIS mode (used for the upgrade) by using the hidden menu. It needs to be set as a mass storage drive for simple access to the images.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on January 11, 2021, 12:04:09 pm
Check that the camera is not still in RNDIS mode (used fir the upgrade) by using the hidden menu. It needs to be set as a mass storage drive for simple access to the images.

Thanks! Yes, it's still in RNDIS mode. How do you actually change that in the hidden menu?
I'm in the hidden menu, and can see the first entry is MSD, I can highlight it, but how do I actually change it to MSD; I think I've tried every button combination!  :o


This from FLIR Website:
Follow these steps to fix the issue:

1. Disconnect the camera from the PC and go to the Settings option on the camera.
2. Go to Device Settings.
3. Go to Camera Information.
4. Touch and hold the Storage option for about 10-15 seconds. This will Bring up a Product Service hidden menu.
5. Select USB mode and verify if UVC and MSD is selected. If another option is selected, select UVC and MSD. If is the option is already UVC and MSD, change it to MSD.
6. Leave the menu and return to the camera's live view.
7. Connect the camera to the PC again. It will be displayed as mass storage device.

Mine just stays on RNDIS setting, no matter what I press.

I tried to run Remove_RNDIS_Permanent.fif, but that didn't work either.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 11, 2021, 02:26:22 pm
The IP address is incorrect, indicating that FLIR drivers do not properly work. Find a WinXP computer or virtual machine, install FLIR drivers, and make sure the IP address comes up as 192.168.x.x, then run remove_rndis_permanent.fif.

You cant use the hidden menu on 2.3.0, it doesn't work.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on January 11, 2021, 02:34:37 pm
The IP address is incorrect, indicating that FLIR drivers do not properly work. Find a WinXP computer or virtual machine, install FLIR drivers, and make sure the IP address comes up as 192.168.x.x, then run remove_rndis_permanent.fif.

You cant use the hidden menu on 2.3.0, it doesn't work.

Awesome, thanks. Will try...


UPDATE: While I was trying to install VirtualBOX and WindowsXP on an older Windows 7 Professional laptop, after a lot off fiddling around, at some point a ThermalCAM driver got installed in the Windows 7 environment and the cam showed up as being connected (and IP address as 192.168.x.x. I was able to install FLIR Tools, and run Remove_RNDIS_Permanent.fif on this Win7 laptop. This set the cam to UVC and MSD USB-mode.

Bringing the cam back to the Windows 10 Machine, it now gets recognized by FLIR Tools.
Many thanks for all the replies.  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 12, 2021, 06:43:55 am
Thanks for the update, good you got the camera connection back  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Pig on January 12, 2021, 12:30:25 pm
Thanks for the update, good you got the camera connection back  :-+

Cheers!

Just a "for-what-it's-worth": once the cam was disconnected from the computer, and attempted to be used again, it displayed an error message when attempting to take a picture (paraphrasing): "No SD card installed".
This went away, once the PLAY button was pressed, and it could be used as intended.
Title: Flir E4 Thermal imaging camera teardown
Post by: atlant176 on January 21, 2021, 07:42:48 am
flir E4 HELP!

Hello, please help me figure out the problem !!! I have updated my e4 1.2l with firmware 2.3.0 released, to 3.16.
after which I lost sight, icons in the menu of colors and mcx. The image has become 80x60, but when you take a photo, in the info for the photo it writes 320x240, but in fact 80x60.
I tried to do my homework and read the solution on the forum, but I could not find ((please point me in the right direction !!! |O |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 21, 2021, 07:52:57 am
The symptoms you describe indicate a classic case of the config not loading properly , because of some error. Was your 2.3.0 already liberated and you attempted to install 3.16 on top of it?

You should check the Thermal Resolution parameter in the image properties ON THE CAMERA itself in the archive. Not Image Resolution after you copy the files to your computer.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: atlant176 on January 21, 2021, 08:15:03 am
Yes, it happened that way, my 2.3.0 was released ((Bud I didn't quite understand what I need to do now?  :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 21, 2021, 03:09:30 pm
Gave you tried the liberation procedure for 3.16 after the update?

To all you people out there: This is yet another demonstrable case what may happen once you sell your liberated camera without restoring the original firmware. There is a reason for the startup screen on the liberated 3.xx cameras.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: atlant176 on January 21, 2021, 05:21:13 pm
no, do I understand correctly? do I need version 3.12 with common.dll 3.16?
Title: Flir E4 Thermal imaging camera teardown
Post by: atlant176 on January 22, 2021, 01:01:32 am
And so friends !!! after a week spent at the computer, I got the result  :scared: :scared: :scared: :scared:!!!! I think I completed your homework :phew:)))) After reading two forum threads 43 pages and 86 of 346 pages. I can say with confidence that E4 1.2L  3.16.0 is getting rid of the official firmware. All files can be found on the forum 100% Please be careful when performing the procedure !!!! Made on WIN8  64bit
BUD thank you very much!!!!!!!! :-+ :-+ :-+ :-+ :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 22, 2021, 03:22:29 am
You see, doing homework helps  :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: atlant176 on January 22, 2021, 06:26:24 am
that's what I can't find where the alteration into three crosses is the minimum, maximum and current in temperature :-//
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SpottedDick on February 27, 2021, 03:35:48 pm
Sorry to bring up an old post, but Daves application here:
https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg350556/#msg350556)

Does anyone know if this was continued on by anyone, or if the source code is available?

I have a Flir one, and I was ready to return it due to software limitations making it useless, but Daves application is so close to making the thing useful without shelling out £400 for the Flir Tool pro, that I'm really on the fence.

If I could get my hands on that source code, I might be able to make this thing useful for photographing electronics.

As a side question, does anyone know if the thermal data stored is the raw values from the thermal sensor (like can be seen with the Android app Thermal Camera +) or if it's massaged and averaged, like you see when you try to view it in Flir Tools.

Thanks

EDIT: As soon as I posted this, I noticed the thermalVision_JoeC software that is able to process the images, so this can be ignored!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Sir_Thomas_TMC on March 04, 2021, 02:25:27 pm
Hello,

I am thinking about upgrading my
E4 2.0L (I do not know whether it is wifi or not, but as I do not find any note about wifi, I think it is not)
Firmeware 3.16.0

But, I am really confused which thread is the one to follow on doing this. As there are a lot of threads refering to versions lower. I read a couple of pages (found e.g. s.th about christmas package) but I did not find (even with searching for "3.16") a thread on how exactly to do this upgrade. Maybe one of you could help me on linking to a suitable thread or give me a clue on the correct search strings.

And the first I would want to do, is a backup of the original files. I hope this is also explained somewhere for a beginner.

Thanks in advance

Thomas
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on March 05, 2021, 01:36:43 am
But, I am really confused which thread is the one to follow on doing this...
...I did not find (even with searching for "3.16") a thread on how exactly to do this upgrade.

You should really be posted in the other thread, this is the teardown thread.

I had this exact issue, I spend ages looking for the full instructions on the forum. I expected that would tell me how to do it and what files I needed to download. Then I discovered all the instructions are inside the zip files.

When I did the mod to my 3.16 E4 I started with the basic package 3.9.0 and followed the instructions in it. When you get to the part about the DLL you use the v3.16 DLL.   Once that was done and working I applied the V3.9.0 Advanced package which also includes instructions in the zip file. I didn't bother with Christmas package because it didn't add anything I cared about.

This is the key post.
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1336326/#msg1336326 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1336326/#msg1336326)


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Ben321 on March 20, 2021, 05:21:45 am

Anybody managed to get a hack for V2.8 yet?

The V2.8 cannot be hacked, but once you downgrade it to 2.3, it can be done: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)

Doesn't the downgrade to 2.3 require a hack to perform the downgrade? Aren't these usually locked into only accepting updated firmware, and reject any attempt to downgrade the firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: adam3914 on May 14, 2021, 04:06:46 pm
Try the following

on the computer create a file called camera.cmd
type just one word into the file:  restart
save and close the file
ZIP the file
rename .zip to .fif
run the fif file in FlirInstallNet

Thank you, I recently purchased a e4 wifi on ebay with a broken power button, and this worked wonderfully, allowed me to do the resolution upgrade and everything.  Was even easier than using the power button to restart the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on May 15, 2021, 04:07:39 am
Great, enjoy your camera  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: twam on June 11, 2021, 12:58:02 pm
BTW, the new E4 without Wifi's (63901-0101) S/N is 9 digits, non the older modle is 8 digits.

I got one of those old E4 and will now try to liberate with 3.16.

The README from Bud says

Quote
1. Open the supplied conf.cfg , scroll down to the very bottom to the line that starts with "# ID " and replace the 9-digit number with your camera serial number.
Is a problem if the serial is 8 digits?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 11, 2021, 08:18:44 pm
Just use your camera serial number.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djQUAN on July 01, 2021, 12:16:48 pm
Didn't think I needed to make a new thread for this so I just decided to add it here.

I always had an issue with my E4 always shutting off when you move or accidentally bump the battery.
Opened the unit and bent the spring terminals for better contact and it worked for a few months without issue.

Finally got tired of it and opened my unit again and added a 3300uF 10V cap parallel to the battery terminals going into the main board. Red wire is positive, black is negative. I doubted my meter and sanity a bit as the contact board had the ground plane connected to batt positive. I could have used a smaller value but I had a few of those caps sitting in the bin and never tested the "minimum useable value". Fortunately, there is plenty of room behind the LCD so the cap is double adhesive taped and zip tied to the alloy frame.

Worked pretty well so far, Problem solved.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on July 01, 2021, 01:22:53 pm
It is worth cleaning the contacts on the battery and camera with IPA. I found that some batteries (not all) seemed to suffer from a mild surface contamination/oxidation(?) of the ‘gold’ contacts. I never investigated the cause but it could have been outgassing from the Lithium cell (doubtful), an issue with the plating used on the battery terminals or plasticiser leakage out of the plastic battery casing parts. The batteries were always kept either in the camera or it’s hard transit case. The contamination could become so bad that a battery would not charge until the contacts were cleaned. Abrasives should not be used on the contacts as that will damage the plating.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: djQUAN on July 01, 2021, 02:52:10 pm
I used to clean it often and got tired of it. I also tried dielectric grease to keep it from oxidizing which worked for a while. It is quite humid where I'm from so that could also be a reason. But I never had it get to the point that it did not charge due to oxidation, only the intermittent issue when bumping the battery bottom.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 09, 2021, 06:52:40 am
Hi!

Can someone help with pictures of that plastic part which press button when trigger is pressed? Some dimensions would also help. I need to recreate it  :(

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=21772.0;attach=621403;image)

Looking for this too!
I just picked up a broken flir e4 and this part was missing. It is the trigger button lever arm. It looks like a flexure ABS or PET plastic lever arm. I plan on whittling a mock-up button lever out of a hot glue stick then transferring the design to a piece of UHMW plastic.

If anyone could post a photo of the lever next to a ruler that would be most excellent. Thanks a ton!
 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: alset on July 11, 2021, 10:42:19 am
Hello dear colleagues, I need your  expert help on how to hack modify Flir B200 . 
Best regars and many thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: pipe2null on July 29, 2021, 04:37:46 am
I finally added a Flir E4 to my toolbox, got it hacked up all nice and fancy-like.  Well, just the config file hack only, not the ultra-upgraded UI yet.  Couple of Q's at the bottom.

Could one of the local "Flir Historians" explain to me how rare a find this little eBay gem was?  I'm thinking it's pretty rare, perfect mint condition.  If I didn't know any better, I would think it's bran new, just without that new plastic smell I've grown to love...

Note the FW version and DPad style, 8 digit serial number
[attach=1]

Note the "Usage Statistics"... Do these stats get reset on factory restore?
Ignore the "uptime" counter, I just updated date/time.
[attach=2]


Questions:
1) Is there any reason I should even consider updating the firmware?  I kinda like the service menu, but if there's a newer FW that still has it, might as well upgrade.  Or if another FW has must-have features?
2) Are there any "Thou Shalt Nots" that exist somewhere back in the near-decade of posts in this thread, OTHER than do not update FW before restoring to non-hacked state?
3) Any idea what the Service Menu password is for modifying serial number kinda stuff?  I doubt I would ever touch it, but good to keep in my records.
4) Does the Fancy UI hack work with FW this old, or will I have to do something special to get manual temperature range settings and the like?
5) Is the max temp range truely ~250 degC or is there a way to increase that?

Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Psi on August 07, 2021, 04:07:57 am
Is the max temp range truely ~250 degC or is there a way to increase that?

It will display temps higher than 250C, that is just its calibrated range where the reading is accurate.  From memory the software hard stop is 280C, not sure if you can hack that or not.

Since the E8 also has a spec of 250C I suspect the hardware may not be able to do much more than 280C. but it's just a guess.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: De on August 22, 2021, 03:18:38 pm
Is there any way to improve the E8 is one already has the original e8? Like adding wifi or bluetooth..
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: 0-8-15 User on December 09, 2021, 10:49:57 am
I'm thinking of modifying my Flir E4 for some close-up shots, but I don't have a 3D printer or any idea which lens to use. What's the best way to go about it?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 09, 2021, 06:17:36 pm
You'd need a lens holder anyways and those are usually custom 3D printed. A few lens holder models were shared in this thread but you should be able locate them on the usual 3D printing sites like Thingiverse and such.
For a lense itself people typically use ZnSe lenses for laser engravers/cutters available from eBay or Ali. You pick one with a focal distance you need and the diameter matching the lens holder lens cavity.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RO on December 09, 2021, 10:15:08 pm
Hey Bud, I was wondering if you could share your insight on a whole other E4 lens modification:

I am trying to adapt my E4 to function as a nocturnal wildlife camera, and obviously macro wouldn't work, so I want to create a telephoto solution.

As you know, the ZnSe ali/ebay options are easy and relatively cheap. (And after some rigorous searching it seems in general the converging (plano-convex) lenses are most affordable. Making a simple telephoto converter with these lenses is relatively easy.
(In theory I have not tested anything yet and can't comment on light transmission, sharpness and distortion.)
(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=1345484)

With a front lens of f100 and a back f25 this will produce 4x enlargement.
As an unfortunate unwanted side effect it will also invert the image on the sensor, and on the screen, mirroring left/right, which is a pita.

Could this be solved in the hacked E4 software? Or is this way to far fetched?

I have decompiled facet.rcc and combed through the *.qml files.
With rcc extended explained in post https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3364376/#msg3364376 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3364376/#msg3364376)

I was actually looking for two things:
1, A way to turn down the screen brightness of the E4 even further, so it is better at night.

There is a ui model "deviceSettingsModel" with "ID_SETUP_DISPLAY_INTENSITY" and "displayIntensitySettingsModel" with ui_model_item "ID_SETUP_LOW" in design_ui.xml, but I am not smart enough to figure where it takes values from.

2, Any hint or way to mirror the image.


source for thermal tele:
https://www.instructables.com/Diy-Thermal-Camera-Telephoto-Converter/ (https://www.instructables.com/Diy-Thermal-Camera-Telephoto-Converter/)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bill W on December 09, 2021, 10:32:27 pm
I'd be inclined to try to get the original lens out of the E4 and just use a new main objective.  You would be using the centre of the image so it should not be too bad.

See some of the results in the 'F1G2 lens' thread

https://www.eevblog.com/forum/thermal-imaging/flir1-g2-lens-experiments/ (https://www.eevblog.com/forum/thermal-imaging/flir1-g2-lens-experiments/)

(there is more to come - but work is needed on a broken connector and holding a REALLY BIG   :scared: lens)

Bill
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 09, 2021, 10:43:52 pm
RO,

For a supplementary Telephoto lens adapter you may be interested in this article from a fellow forum member….

https://www.instructables.com/Diy-Thermal-Camera-Telephoto-Converter/ (https://www.instructables.com/Diy-Thermal-Camera-Telephoto-Converter/)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 09, 2021, 10:48:42 pm
I have no knowledge of optics and can't help there. Regarding the mirrored image - do you mean left/right or upside down? I recall there was a flag for screen rotation (not mirroring) that seemed to work in v2.3.0 firmware  but can't remember if i tried it in v3.x.x . Even if the image was rotated, there were some issues with the temperature gauge and device controls, can't remember details but decided not to implement it at the time. The flag should be settable via Telnet to try but may not be settable permanently, again can't remember details.

Regarding screen brightness, the parameters you listed have are the ones used in the camera menu, there is a menu item in Settings to set screen brightness Low or High. You do not have to fiddle with them programmatically.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 09, 2021, 10:51:21 pm
Another option from Ultrapurple. Using  a reversed standard lens to set up a useful image field for a standard thermal camera lens of different imaging power.

https://www.flickr.com/photos/ultrapurple/17647946114/in/pool-therm-app-users/ (https://www.flickr.com/photos/ultrapurple/17647946114/in/pool-therm-app-users/)

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: RO on December 09, 2021, 11:18:25 pm
Thanks for all the quick reply's!

I actually had made a longer post in the seek supplemental lens topic a little while ago:
https://www.eevblog.com/forum/thermal-imaging/seek-reveal-and-reveal-pro-supplemental-lens-adapters/msg3855689/#msg3855689 (https://www.eevblog.com/forum/thermal-imaging/seek-reveal-and-reveal-pro-supplemental-lens-adapters/msg3855689/#msg3855689)

Sorry for making it a mess, i'll quote it but it uses some insight from the topic:
Quote
The E4 has very wide FOV, around 45, and I wish to narrow this 3x, to FOV 12.5, this would require a focal length of approximately 28mm. Such a lens design could obviously fit different camera's and doesn't have to be E4 specific (preferably not)

A zoom lens like LogoXXL makes would obviously be very awesome, any info and explanation would be greatly appreciated!

Now I have been thinking about what would be the way to achieve said 3x magnification (or more)? I see some options:

1, Keplerian Telescope with plano convex lenses
biggest pro,
- I think this could be possible with the cheap (+/- 50,- for a 22-25mm (up to 1") widely available lenses from the co2 laser cutters (ebay / alie znse or gaas plano convex)

cons,
- Not sure about the image quality and loss of light in tele configuration.
- Image will be mirrored, might be fixable by two solutions which I can't solve (yet)

Possible solutions to the mirror image
1. Use an Flir E4 lens (or identical f6,5 converging) reversed as per Bill W suggestion.
2. Get the Flir E4 to mirror the display, which would be a cool feature but might not be possible at all or have serious caveats.
@Bud might know?

2, Galilean Telescope
pros,
This is the preferred telescope type as image will not get mirrored
cons,
Finding a suitable converging lens for LWIR spectrum.
And the price of those lenses in relation to the price of the E4 (or a dedicated thermal spotting camera, flir scout/hikmicro lynx etc.)
@LogoXXL might be a source of information and optics.

3, Swapping out the lens completely, for which I searched this forum for profusely but couldn't find a topic or example.
It does seems @JoeC walked this path, not necessary changing the lens but rebuilding the E4 and motorising the focus. There is some documentation on his site http://joe-c.de/pages/posts/waermebildkamera_flir_ex_umbauten_177.php. (http://joe-c.de/pages/posts/waermebildkamera_flir_ex_umbauten_177.php.)

Well, I have been thinking and searching ebay/thorlabs/etc, but would really love input, I lack knowledge and experience.

kind regards,
Robert

Fraser, thanks for the link, bill w had a similar insight in the seek topic about an inverted original, biggest issue I still see is getting an f6,5 flir E4 original, the laser lenses are all of much higher focal length, and thorlabs doesn't seem to have any either, but it would defenitely be a great way without inverting.

Bud, sorry if I was unclear.
I understand and can operate the brightness menu. But I wish to have a lower low.
The lowest brightness on the E4 is still very bright in a dark environment, I was hoping to find some LCD Brightness value, prerably something simple like (0 - 255), so I could tweak a bit.

I am pretty sure it will mirror left right, as that's the telescope way, but I will research it a bit better.

Bill, it seems you have quite some experience with lenses, thanks for the insight.
I am not sure if I am ready to tear down my E4 yet. I do like the results in the F1G2 lens' thread.
I hopefully soon have my hand on a stack of cloudray lenses (ordered on 11.11) and a autoliv NV2 lens, and as the other path's to tele seem just as expensive as a new E4 I'll probably end up prying it open soon enough :)

thanks!
Robert
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bill W on December 10, 2021, 12:48:21 am

Fraser, thanks for the link, bill w had a similar insight in the seek topic about an inverted original, biggest issue I still see is getting an f6,5 flir E4 original, the laser lenses are all of much higher focal length, and thorlabs doesn't seem to have any either, but it would defenitely be a great way without inverting.



Something very similar would also be OK, as long as it mounted OK and was a better aperture.  Identical is more an ideal, and often easiest as it is 'just another one the same' so might pick up the threads etc - or maybe that is just me with my germanium mountain  ;D .

All my lens background is the lenses used in the various Argus cameras, but I was specifying and testing not designing at the optical level

Bill


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 10, 2021, 01:28:00 am
The lowest brightness on the E4 is still very bright in a dark environment, I was hoping to find some LCD Brightness value, prerably something simple like (0 - 255), so I could tweak a bit.

I do not think this can be done, the intensity values LOW MEDIUM HIGH seem to be hard coded in one of the DLLs.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dave88 on December 10, 2021, 02:39:21 pm
Just wanted to say big thanks to this thread. I came across a used flir e30bx in good condition for around 250 USD equivalent. And in just a few hours managed to upgrade it to the E60 plus spec. full resolution, 0 noise, video, bluetooth, wifi, visible light camera and led light etc...

Thought I would contribute a little myself. The guide Gustavo provided on page 240 is in general great also for us e30bx owners. However it did not work for me. Camera acted very strange on startup with no spotmeter and limited menues. Maybe because I have a different model year and a bx instead of a regular e30... So for those with early e30bx (mine was 2011). Here are a few tips.

Follow Gustavos guide on page 240. It gets you through every general step. But instead of working in the hack files he provided in the .zip, make changes based on your own files extracted from the camera (after backing them up first of course). I mirrored a lot of his changes and made some additions with 0 noise instead of 90 and retaining the spot meter when he had set it to False. Seemingly my config files had a few more rows that where not existing in his versions. So all checked out once I modified my own base config files instead of using the provided ones. A program that compares the config files and highlights the differences between his provided files and my original ones helped me alot to make the changes I needed to my files.

This thread really shows the importance of taking it slow, not just copy pasting, understanding the config files as all models and years seem a bit different from each other. It is well worth it!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 10, 2021, 04:08:10 pm
Dave88,

I presume you also know that many E30bx cameras can have their temperature measurement range expanded using the Service Menu?

Glad the firmware I provided worked OK for you  :-+

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: dave88 on December 10, 2021, 06:59:15 pm
Yes @Fraser !

Big thanks to you for the file. I could not find it anywhere else, the fact that you still had it really enabled this upgrade :). I will store it in a safe place and maybe I can repay the favor to someone down the line. I am quite blown away by the price/performance of this 10 year old device! The level of detail and accuracy is miles ahead of my gen 1 Flir One IOS. With the resolution and 0 noise setting i don't miss MSX. I can still clearly see the outlines of objects in the thermal image as even the most minute temperature difference is shown.

Yes i just logged on via the browser. Entered Service mode, then there was a tab called Calibration -> Enable/Disable Cases -> Enabled 0-650 option. There was a 200-1200 option as well but there seemed to be no calibration data for that one (No RBK). Super easy!

Will use the camera for some weeks and then dive back into the config files as there seemed to be more interesting features and functions to activate. My favorite new feature aside from noise and resolution improvements is that the laser pointer now shows up as a nice red dot on the thermal image. I never saw that before I did the upgrade....
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 10, 2021, 07:22:25 pm
I enabled most functions and do not regret it  :-+

I want to change the image compression on saved images but have yet to get around to it. The level of image compression used on these cameras degrades the saved image quality.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 14, 2021, 04:16:40 pm
Is the camera booting normally?

While I played with some files, I messed something and was not able to use flir/3vlig.
Fortunately, you can use the anonymous user - do not enter any user name/password. Not sure what permissions it has, but I just checked and you can download/upload files to the file system. I was also able to backup the camera files. I used the anonymous user to correct my mistake and the camera booted normally after that.

I don't see any update of the 2.11 package on Flir's site (last one is from 21 Jan 2016), so flir/3vlig should be working if the camera is booting normally.

I have one V2.3 hacked, stay at RNDIS mode. flir/3vlig does login when it turns on normally.
It just does not turn on one day. (No response to power button, but show charging icon when connect to a computer or charger) When connecting to a computer, flir/3vlig gets "530 Bad user name/password" but anonymous user does login to the file list.
But it still does not turn on. FLIRInstallNet does not see it, either.
Is it bricked? Any methods to bring it back?

Sincerely.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 15, 2021, 01:33:32 am
Is it intermittent failure (sometimes turns on and sometimes does not) or it does not turn on anymore?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 15, 2021, 10:33:32 am
Is it intermittent failure (sometimes turns on and sometimes does not) or it does not turn on anymore?
I did not use it several months. It worked fine before.
Several days ago, I took it out of the box, it did not turn on.
I thought it might because of low battery power and charged it over night. A full power icon was shown.
But it still did not turn on. I unplugged the USB cable and tried the power button, shutter trigger, menu button... everything on it, it turned on once.
After that, no matter how I tried, it does not turn on anymore.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2021, 11:27:40 am
You have likely already done this but have you tried connecting the charger and holding the power button down for 30 seconds to initiate a cold boot reset of the system and memory ?

It is worth gently cleaning the battery contacts with some Isopropyl Alcohol. If you do not have IPA, just clean them with a soft cloth. Over time, I found a layer of an oily substance (out-gassing from plastic camera casing or hard carry case ?) would form on the ‘gold’ contacts of the battery and it would not always work correctly. Though in your case, you were able to charge the battery so this may not be the problem.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 15, 2021, 03:33:35 pm
You have likely already done this but have you tried connecting the charger and holding the power button down for 30 seconds to initiate a cold boot reset of the system and memory ?

It is worth gently cleaning the battery contacts with some Isopropyl Alcohol. If you do not have IPA, just clean them with a soft cloth. Over time, I found a layer of an oily substance (out-gassing from plastic camera casing or hard carry case ?) would form on the ‘gold’ contacts of the battery and it would not always work correctly. Though in your case, you were able to charge the battery so this may not be the problem.

Fraser
Sincerely thank you.
I held the power button for several minutes without the charger, it turns on! With the charger, it still does not turn on.
flir/3vlig could login the camera.
After power off, it's hard to turn on again.
Generally, how long should the power button been hold when turning on the camera?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2021, 03:45:22 pm
Sorry, I sold my E4 some time ago and have forgotten how long I had to press the power button for a cold start reset.

It has been known for the power button to fail and your camera may be suffering from this failure ?

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 15, 2021, 04:29:27 pm
After the cold reset, it turns on when holding the power button 10-20 seconds.
To know it still working is a great relief.
But wish to know the normal status of the other's E4. How long should the button be hold for a normal turn on? What to do to help keeping it in normal condition?
Thanks a lot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on December 15, 2021, 04:36:42 pm
Less than 5 seconds from memory.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 15, 2021, 09:10:07 pm
It is quick, you push the power button for a second at most.

Edit: About 6 seconds press and hold it is to power off the camera, otherwise it will go in sleep/standby mode until the timeout expires. The timeout is configured in Settings.

@OP: next time you power the camera off, do it by a long power button press (6 sec) and after a while see if it powers on normally. Maybe the issue is with standby mode. Also check in Settings how stanby timeout is configured.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 16, 2021, 05:32:09 pm
Trying power off by a long power button press, it powers on normally.
Auto power off was set at 5 min.
Thanks all of you.

I could keep trying to get over incomplete menu hack.
model: E4 1.2L
Software: 2.3.0
After menu hack, measurement has 4 options: center spot, hot spot, cold spot, and no measurement.
Color has 5 options: Iron, Rainbow, Gray, Below alarm, and Above alarm.
Is 2.11.0 necessary to get more measurement and color options?
Or maybe I did some procedures wrong in hacking?


Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 16, 2021, 07:55:09 pm
Try using the files from this post
https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3864980/#msg3864980 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg3864980/#msg3864980)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 17, 2021, 01:10:23 pm
Thank you. I bumped into almost the same problem with windtalker.
I uploaded these four files and overwrited the original files.
Reboot the camera, the measurement, color have still 4 and 5 options. No zoom in option in menu.
Is there anything I missed?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2021, 01:50:52 pm
Did you do a cold reboot with removal of the battery?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 17, 2021, 02:39:45 pm
I did a cold reboot, it didn't work.
I tried menu hack again, but it didn't work. Below is the log:
Connected
Installation started...
Adding /FlashBFS/system/arctic.pal
Adding /FlashBFS/system/lava.pal
Adding /FlashBFS/system/rainhc.pal
Adding /FlashBFS/system/bootlogo_legal.bmp
Adding /FlashBFS/system/appcore.d/factory.d/ui_control.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_centerHotColdSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_centerspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_coldspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_deltaSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_deltaTemp.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_fiveSpots.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_hotColdSpot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_hotspot.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_nomeasure.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_threeSpots.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_threeSpots_ori.rsc
Adding /FlashBFS/system/ui.d/presets.d/preset_twoHotSpots.rsc
Adding /FlashBFS/system/ui.d/toolbar-config.xml
Adding /FlashBFS/system/ui.d/design_ui.xml
Adding /FlashBFS/system/ui.d/facet.rcc
Process local command: SHOW "Camera will now restart",7
User selected YES
Camera command restart
Close TELNET link
Process local command: DISCONNECT
Disconnecting...
Camera update completed

Ok

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2021, 03:46:17 pm
I do not see this script updating the dll and config files which has to be the first step. Was it done separately?

Also by running it again you've likely overriden the files i pointed you to earlier.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 17, 2021, 04:09:29 pm
I followed fubar's instruction ( https://fubar.gr/hacking-the-flir-e4/#google_vignette )
Hacking conf.cfc by python first. Than ran menu.fif by FLIRInstallNet. The log is scripted by FLIRInstallNet.
After the process above, the four files given were overwritten again. The menu hacking is still not fully working.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 17, 2021, 04:15:20 pm
Y'd need to check the conf file timestamp on the camera to make sure it was transferred correctly. Also you should have only one config file in a folder. If you made a backup of the original config file by renaming it and leaving on the camera, you have to delete it from the folder.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Angel on December 18, 2021, 03:27:07 am
Thank you Bud.
I checked the conf.cfc timestamp is updated. // FlashFS-system-appcore.d-factory.d // folder has only one file: conf.cfc.

conf.cfc was attached.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 18, 2021, 04:30:42 am
PM me your SUID and S/N , I'll take a look.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 19, 2021, 06:37:57 am
I have looked and could not find anything wrong with the config. I am out of ideas.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Svoy on December 19, 2021, 09:23:53 pm
Hi,

I have an E4 1.2L with firmware 2.3
Is it worth to upgrade to the latest 3.16.xx firmware version before applying the liberation process?
Which are the major differences in new firmware version? I can't find a firmware release note.

Thanks in advance
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on December 27, 2021, 06:34:43 pm
How can I save pictures from the camera to computer (PC)?
When i connect camera to PC, PC sees that the camera was connected but in Device manager it shows as USB serial device (COM 7) only. And it is not seen in File manager.
Is it possible to save picture from the camera after the hack?
Firmware in camera is  2.11.0.
Thank you.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 28, 2021, 07:57:53 am
The camera may be in RNDIS permanent mode. If so, you need to remove RNDIS in order for the computer to connect to the camera storage via USB.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on December 28, 2021, 09:58:21 am
Thank you for your reply. But how can I remove RNDIS?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 29, 2021, 02:46:47 am
Try searching this thread for "remove rndis".
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: smaultre on February 20, 2022, 08:03:08 am
Hello my friends! Got a Used E5 2.0L with 3.12.0 soft.
Trying the method described here but the image info says, that the resolution is still 120x90.
I make all that described on Bud's post https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359) Twice!!
All operations goes without errors, the new menu appears but no success with resolution.  I'm trying to change app E4 to app E5 in conf.cfg..
Can anybody help with this?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on February 20, 2022, 06:34:22 pm
Changing E4 to E5 will not have any effect.
Even with instructions people make mistakes. Common mistakes are using SUID instead of the camera Serial Number in the config file, and leaving the old renamed config file in the folder on the camera so tgere are two config files.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: smaultre on February 22, 2022, 04:50:37 am
Hello!  Bud, thank you so much :-+
Of course "... leaving the old renamed config file in the folder on the camera.." |O
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: michaelrcolton@gmail.com on May 16, 2022, 01:43:55 am
I just picked up a used E4 and it reeks! It works perfectly, I've already applied the hack (thanks guys!) but it's got an unbearable mildew smell that stays on clothes and hands.

I want to take it apart so I can clean it more thoroughly, but the only teardown info I can find is the original video and the way the trigger screw is accessed seems pretty destructive (it's also not clear to me in the video if the little arm that pushes the button is damaged in the process or if it's supposed to look like that.)

After all this time, does anyone know of a better way to remove the trigger or otherwise access that screw? Any advice?

I've tried looking through past posts, sorry if I missed it. Thanks!

(P.S. Is there any benefit to updating the stock firmware to the latest hackable version? I realize I'd have to reverse the hack first. Mine's running 3.13)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on June 16, 2022, 04:40:44 am
I have successfully unlocked an E5 firmware 3.12.0 Thanks a ton guys!

References:
   https://fubar.gr/hacking-the-flir-e4/ (https://fubar.gr/hacking-the-flir-e4/)
   https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-wifi-resolution-and-menu-hack-thread/msg1397359/#msg1397359)

Since it's so commonly omitted from how-to guides here's how to enable RNDIS:
The key takeaway is that the "Set_RNDIS_permament.fif" and "Remove_RNDIS_permament.fif" method are still appropriate ways of enabling and disabling RNDIS mode as described in more detail in the fubar.gr link.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on June 19, 2022, 05:10:33 am
I do not recommend using permanent RNDIS during upgrade, use Temporary RNDIS instead. If you use Permanent,  if anything goes wrong with the network setup or driver, or the camera gets stuck before it boots, you may end up with a brick because there will be no way to connect to it. If you use Temporary, the camera will return to USB mode after a reboot. This is a reliable way to keep control over the camera. Once you successfully upgrade then you can use Permanent if you wish.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 13, 2022, 03:38:29 am
I grabbed a second E5 for my brother off ebay and to my surprise its stuck on the boot logo. I could just send it back to the seller, but I figure I'd just have a look.
It shows up as a storage device when plugged into a PC
It's recognized as "flir usb video" in flir tools.
I ran a flir upgrade fif for 3.12 (flir_ex_pn639_v3.12.0_update_pack) and it installed the 3.12 firmware but it still hangs on boot. I tried 3.16 from flir's website as well in case it was a newer E5. I attached the install log file. Very seldomly, the camera boots into a blue screen mode with the standard navigation menu. I an able to navigate to the settings and reset the camera. The same thing happens again following the reset, it hangs on boot.

Things I've noticed:
when the camera is in blue screen mode, the model says "E5 1.1L"
The storage says "*" which is concerning.

Is it possible that the fif I used was for a newer model number version? Do I need to find a FIF file for E5 1.1L versions?
Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 13, 2022, 03:51:52 am
The storage says "*" which is concerning.
I recall E4 for one does not show the storage information or allows access to it from the keypad when connected to a computer. So this may be normal.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 13, 2022, 05:15:55 am
The storage says "*" which is concerning.
I recall E4 for one does not show the storage information or allows access to it from the keypad when connected to a computer. So this may be normal.

Yes. When I unplug usb, it still displays "*" for storage and 0 degrees for lens though. I can only get the E5 to go to blue screen mode when plugged into usb and connected via flirtools.
I am thinking of flashing an older fif and trying to go from there. Is it possible to run a recovery process, or double check of the sensor calibration files are still intact?
Thanks.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 13, 2022, 05:08:38 pm
If you connect an external charger, does the camera show the battery charging screen ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 13, 2022, 06:26:47 pm
If you connect an external charger, does the camera show the battery charging screen ?
It shows the charging icon when powered off and plugged into usb.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 13, 2022, 06:45:35 pm
If the camera was, ehhm... modified, and someone run a firmware upgrade on top of it at some point, that could cause the camera to hang on boot.
I'd recommend you use the Temporary RNDIS fif and get access to the filesystem via FTP, then replace the stock DLL with the modified one of the respective version. You can find a needed DLL in the other E4 thread.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 14, 2022, 01:00:00 am
If the camera was, ehhm... modified, and someone run a firmware upgrade on top of it at some point, that could cause the camera to hang on boot.
I'd recommend you use the Temporary RNDIS fif and get access to the filesystem via FTP, then replace the stock DLL with the modified one of the respective version. You can find a needed DLL in the other E4 thread.


Thanks for the input! That seems highly likely.
I backed up the camera, and was able to write the temp RNDIS fif to the camera. It hung on boot directly afterwards and took 4-5 times of power cycling to get it to boot back to a blue screen, then I checked and "UVC and MSD" mode was still enabled unfortunately. Strangely, I was able to connect to the E5 via ftp to transfer and edit files on the device even though I was not in RNDIS mode. I transferred the common_dll_3.16.zip in post #788 restarted and still, it hangs on boot.

Edit: finally after an hour of waiting, its back in blue screen mode and its displaying common_dll as version 1.22.1.1. on the camera. When I flash the temp RNDIS fif, FTP into the E5, it's telling me the common_dll.dll is present on the E5 alongside common_dll_org.dll. I repeated the process again and used telnet to stopapp and re-transferred the common_dll.dll from the 3.16 zip and it still hangs on boot.
This one's really stumping me. Dang.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 14, 2022, 04:52:32 am
Then you should act on the config file next. Check if there is one conf file in the folder. If there are other copies in the folder, move them to the computer for backup and delete from the camera. Try booting after that.
If only one config, work on it to decrypt it and see if it decrypts properly. Check then if the content was modified for resolution and stuff.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on July 14, 2022, 05:06:41 am
Then you should act on the config file next. Check if there is one conf file in the folder. If there are other copies in the folder, move them to the computer for backup and delete from the camera. Try booting after that.
If only one config, work on it to decrypt it and see if it decrypts properly. Check then if the content was modified for resolution and stuff.

Interesting. There is only one conf.cfc file in the FlashFS\system\appcore.d\config.d\ directory on the E5. It is dated 5/19/2014, so It may be the original config file for the camera.

I followed the same guide for the V3.12 install and used the suid to decrypt and create the cfc file. I did not notice any errors with this process. I telnet-ed in, halted the flir software, swapped out the common dll and the cfc file. I did not power off in between because I wanted to avoid a boot hang. I powered off and it still hangs on boot. 
While digging up the SUID, I compared the FLIRvers.rsc on the 1st working E5 to the E5 that hangs on boot, and the values for power.states are different. The proper E5 lists the values as true. The other E5 has them listed as false. I have no idea if that is related but I figure the files would be configured identical except for the device specific hex values.

Is it possible that the hardware firmware is just too old for the software? Maybe the previous owner updated the software to 3.16 and not the firmware?
I previously tried factory resetting the e5 and the boot hangs still occur.
Note: these are not zip files. remove the .zip for the proper file extension
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 14, 2022, 12:33:13 pm
You can try replacing the other files from the Basic package from the other E4 thread (keep the updated 3.16 DLL). If that won't help then the camera may be damaged, as it seems it is not talking to the thermal module.
I do not know of a possibility of the hardware being too old for new firmware. I'd think Flir Tools would be smart enough to not allow firmware updates in this case.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: charlyd on August 15, 2022, 07:56:13 am
Hi i am new to this topic and will be the owner of a Flir E4 v1.21 ( hw 1.1L ) soon.  for my model i found the howto and the files like TOOLS1.zip and ADDMENU-BETA3.zip   but i am curious after a succesfull upgrade on what level i will be..... is it 2.30(E8) , i am completel lost there...

i read a lot of info on this topic and understand there are many different versions which can be upgraded.
but is there a real upgrade path which can be followed for everybody to understand..  i will make a small excel tabel for what i discovered until now.

my opinion is that i am wrong with my conclusion but help/advise wanted.

people like me have or bought a Flir E4 from a specific version and where can we jump into the upgrade path?

do i understand right if all E4 model (v1.xx ) after they are upgraded they are on version V2.30(E8) (yellow) or compatible with v2.30(E8) ?
and from there on can be upgrade by Flir GUI sofware to v2.8 or ...? or is this even a misunderstanding?

if not can someone explain to me and others on this forum new on this topic, on how these upgrade path work to fully understand what to do and which way to go or not no go..
because we all don t want to brick our units by going the wrong path..

because i also read post from version downgrades, then i am totally lost...., why should that be done?

you see many questions but who can clear them up for us newby's  :-//


after reading over and over again.. many page of this topic..   i think it is a bit more clear for me:

first you change your E4 into a E8 with the  RESOLUTION HACK and the MENUADD and afterwards you run the firmware upgrade??  to the latest ..2.8 or.?
 is that how it works?
 
or from what i saw later first upgrade your device to 2.3.0  and then do the hacks.. ? 

who can jump in and let me know what the best choice is. 

What FW version to stay/upgrade/downgrade to  and then do the resolution and menu hack?


      
      
      
      
      

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 15, 2022, 09:45:06 pm
Do Not confuse official Flir firmware version upgrades with EEVBlog (let me call it that way  ::))feature unlocks.

The general advice is: if EEVBlog feature unlock was applied, after that to Not ever perform Flir firmware upgrade as this may brick the device.
So you upgrade the Flir firmware first, then apply EEVBlog feature unlock for the respective firmware version. But before rushing to do Flir firmware upgrade make sure your camera was not already unlock-ized.

Applying EEVBlog unlock does Not change the firmware version. It only unlocks some features available in more expensive models.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: charlyd on August 17, 2022, 07:59:25 pm
ah ok thats is a good one. @BUD thanks for your reply

i heared the Flir E4 which is on the way has already the resolution hack and menu add.  The current E4 version is 1.21.
but what is the benifit off rolling back the resolution and menu hack.

To ask with other words:
i want to use this Flir E4  for PCB check/inspection.
is there a difference between  V1.21.  hacked.  or v2.3.0  hacked?   if there is. ...  is it simple to rolback the hack?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 18, 2022, 05:11:00 pm
No difference for your purpose, because both will have same 320x240 resolution.
To "roll back" the mod you simply replace the updated files with the original ones. But it must be the original files from that specific firmware revision.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: charlyd on August 19, 2022, 12:03:05 pm
@Bud thanks again

ah ok and i don t have those file.

my level is FW v1.21 and HW 1.1L.

Maybe somebody is willing to post the original files for me so i can roll-back the hack. 

and there is an other thing, what i discovered.....
the reponsiveness from  the "back" button is not really good your have to press hard/often more then one time. is that maybe firmware related or??
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on August 19, 2022, 04:15:42 pm
I never experienced difficulties with the Back button, on either original or modified devices.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: m4rkiz on September 18, 2022, 09:01:06 am
I have hacked E4 that i use from time to time, if i remember correctly i was able to record video on my W7 PC with MPC-HC at some point and would like to try that again on new W10 machine,
but before i start is there any point in updating firmware (hardware E4 1.0, firmware 1.18.0, e4hack3b) before i start looking for a solution? Are there any new functions or other fixes in newer firmware?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on September 18, 2022, 11:30:29 am
m4rkiz,

If you have firmware 1.18 running on hardware platform 1.0, you will have the Service menu present and fully operational in case you ever need it to create a new dead pixel map or other service activities. If you choose to update your firmware you will lose the Service Menu as FLIR removed it to prevent its use for modifying the camera.

The only issue is that you are on the earliest release of firmware (1.18) and IIRC there is the odd bug in that build. Firmware 1.19 corrected the bug(s) and is, IMHO, the best firmware to have as it was the last to contain the full Service Menu and no upgrade countermeasures from FLIR. Sadly Firmware 1.19 was not released as an update so you are effectively stuck on 1.18. I was advised by a friend at FLIR that all firmware versions that followed 1.19 were intended to either countermeasure the update to higher specification or for “housekeeping” purposes to support changes in the Hardware platform. FLIR have tended to release well sorted firmware with few, if any bugs in it. Firmware updates were rare up until the Ex series upgrade became known. There has never been a series of cameras previous to the Ex that had so many Firmware updates and we all know why this came about. FLIR eventually gave up trying new ways to prevent the upgrade and moved on with their new product ranges. They learnt from the experience as it also affected other FLIR series of cameras. They will not make the same ‘mistake’ again ;) There may have been additional functionality included in later Ex series firmware, but most/all? Was already available as part of the unofficial upgrade process  :-+

Firmware 1.18 and 1.19 are great because they are so easy to access for the purposes of configuration and file changes. No nasty countermeasures to make life more challenging  :-+

My advice would be to stick with Firmware 1.18 unless there is some bug that you find in it that you cannot live with. These were decent hardware platforms with mature firmware from day 1. The firmware was basically the same baseline design as used on several different series of FLIR camera, including the Exx series.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: SeanRocks on October 22, 2022, 08:41:22 am
Hi

I have managed to do the hack (everything up to and including the Christmas pack) on an E4 Wifi 2.0L, 3.16 firmware. Big thanks to everyone and respect to Bud and the community for sharing this knowledge.

One thing I found when doing the initial hack - delete files on the E4 before uploading as opposed to overwriting the files.

I have two aspects that I would like to request help with (not been able to find the answers with the search):

1) secret menu (press the "Right" key for 10 second when in the device info menu ), changing USB mode: I am unable to change from the default although there are a good number of option in the list. When I try to select a different mode, it just goes back to the previous menu. Going back into the USB mode menu, it still shows the default as being selected. Any tips please. I have attached the logs from the unpacking.

2) (un)packing the facet.rcc file: I am trying to modify this to remove the flir logo on on the images as per previous messages and also change the boot up text. I have the transparent image file required (per Reply #892 - thanks Frenky). I have once managed to do this and I cannot recall the exact steps so I know it is possible. My dev environment it Windows 10 and it is the same machine that I used successfully a few days ago to do same.
   i) for unpacking I have used https://github.com/zedxxx/rccextended/releases as per Reply #1033 (thanks Narkoa) and issued the command rcc --reverse
   ii) for packing, I use repack.cmd (from RCC-remerge) as per Reply #2993 (thanks Taucher)
When I do this with an unmodified facet.rcc file (pulling the working file from my E4) the output file is significantly bigger than the original and the E4 hangs on a blank screen. Any help would be greatly appreciated.

As an example, I have attached the working facet.rcc file (zipped) that I downloaded from the working E4 located in /FlashBFS/system/ui.d. Then the unpacked file and the packed file also attached (not modifications to the unpacked files). The packed file generated is facet_z3.rcc but I rename it to facet.rcc

Thanks

EDIT: it seems that there is a issue with packing using repack.cmd. The correct result is obtained using the ttol for unpacking (RccExtended-v1.0.5-win32)  as follow rcc -o facet.rcc -binary -format-version 1 \qresource\qrc\facet.qrc
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on October 22, 2022, 02:38:52 pm
The hidden menu changes were disabled by the manufacturer long time ago, do not waste your time on it.
If you applied the modification packages from E4 WiFi thread, the logo should already  be disabled. You do not need to do the acrobatics with the transparent image file.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FUBAR on November 10, 2022, 09:07:55 am
I have a problem. I am not a tech-savvy person and recently I was given E4 thermal camera at my job to "work it out/learn how it works" :-//
The camera was already being used a lot in work before it was given to me - what I didn't knew was that 90% of the features were there only because someone has applied hack to it - I though all of it was by default. I saw that firmware wasn't the newest one (it was either 2.3.0 or 2.4.0) and that 3.16.0 was available and I though "well, that version must have even more features!". Oh boy :palm:
I downloaded files and started updating through FLIR Tools- the update got stuck forever on "verifying files" but the camera started installing it after I disconnected it. You can guess how well it worked out, applying update to already hacked version.

Now after the "update" I have almost no features with a little side of bugs. Here are pictures of camera files and camera itself:
https://imgur.com/a/KoZBtJz (https://imgur.com/a/KoZBtJz)
Please let me know if you need more or more specific info.

Is there is any way to unscrew the situation? Revert to older update, or apply hack to 3.16.0 or replace firmware completely?
Please help, my boss is 4x times even less tech-savvy than I am so there is no way in hell I'll manage to explain to him what has happened to the camera without sounding like I went mentally insane or downloaded chinese virus :scared:
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: battmyrne216 on November 22, 2022, 06:32:13 pm
Can someone help me find the rdnis drivers. All the links seem broken.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on November 22, 2022, 10:53:07 pm
https://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=70 (https://support.flir.com/SwDownload/app/RssSWDownload.aspx?ID=70)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: battmyrne216 on November 30, 2022, 10:32:32 pm
Hey guys, can anyone share their flashfs files. I lost my calibration maps and figured I would try a few more files so that I might find one that works well enough. I have tried two sets of flash fs files so far and the calibration maps are not great. If anyone has calibrated the dead pixel maps on these or anything I would love some advice. I have a very old unit, it came with 1.22 firmware. It is fully modded now and running 2.11 firmware. However like i said I messed up and lost my original flashfs files. The only issue I have left is some dead pixels on thermal and inaccurate temps. I was tthinking if someone could share a flashfs file that had similar calibration data it might just fix it. thanks for the help.

Side Note: I also figured out how to update the firmware to any version without using flir tools, as long as you have the fif file for it. If anyone is interested.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KD0CAC John on November 30, 2022, 10:49:10 pm
Hay battmyrne216 ,

I have newer wifi , guessing at least a couple yrs. old , I would be interested in the update " without the Flir Tools file .

I haven't modded my camera yet --- I am on the older end of the spectrum and not as computer literate - so I am fearful of bricking my unit , but still gathering info for upgrade .

Thanks 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: battmyrne216 on December 01, 2022, 12:26:31 am
I have one piece of advice for you then. Backup all your files and zip up a copy as a first step. It seems the only thing that cannot be fixed is the thing I lost, that is your original calibration maps. I will make a quick video and post it up on how I got the update without using flir tools.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: smetankin on December 06, 2022, 09:06:08 pm
Hi, everyone. I bought E5 (FW 2.3.0) and trying to hack resolution.
FAQ`s says: "Please check if your /FlashFS/system/appcore.d/config.d/conf.cfc is 6608 bytes (or 6336 for the E5)."

But in my case conf.cfg 6024 bytes... after command to apply apple.py get error "ftplib.error_perm: 550 File unavaible blah blah"
another try on 2.jpg 

any chance for me? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on December 07, 2022, 07:30:59 pm
Are you sure your camera was never "updated"? You can compare the length of your .cfc with a .cfc of another camera that you know was updated.
The script I recall will not apply changes to a .cfc of a different length that the script is expecting.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marekx89 on December 30, 2022, 07:57:27 pm
Is possible buy battery adapter to Ex 18650 ? Thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: all_repair on January 01, 2023, 12:49:41 pm
Is possible buy battery adapter to Ex 18650 ? Thanks
There is 3d file on thingiverse.. I have tested it, and it is good.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marekx89 on January 01, 2023, 07:42:38 pm
i dont have good with this 3d print adapter, insert adapter to camera, very hardly and not good electrical contact.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: FUBAR on February 20, 2023, 06:46:56 pm
I have a problem. I am not a tech-savvy person and recently I was given E4 thermal camera at my job to "work it out/learn how it works" :-//
The camera was already being used a lot in work before it was given to me - what I didn't knew was that 90% of the features were there only because someone has applied hack to it - I though all of it was by default. I saw that firmware wasn't the newest one (it was either 2.3.0 or 2.4.0) and that 3.16.0 was available and I though "well, that version must have even more features!". Oh boy :palm:
I downloaded files and started updating through FLIR Tools- the update got stuck forever on "verifying files" but the camera started installing it after I disconnected it. You can guess how well it worked out, applying update to already hacked version.

Now after the "update" I have almost no features with a little side of bugs. Here are pictures of camera files and camera itself:
https://imgur.com/a/KoZBtJz (https://imgur.com/a/KoZBtJz)
Please let me know if you need more or more specific info.

Is there is any way to unscrew the situation? Revert to older update, or apply hack to 3.16.0 or replace firmware completely?
Please help, my boss is 4x times even less tech-savvy than I am so there is no way in hell I'll manage to explain to him what has happened to the camera without sounding like I went mentally insane or downloaded chinese virus :scared:
Ok, now after some time and fruitless attempts at fixing it I understand a bit better what happened - nothing is broken, the update just rolled back that hack.
Here is the problem - I'd like to apply that hack again but I don't know how to do that with 6.4.1 firmware version that I have.

Has anyone managed to apply hack to that version? Or is there is any way to downgrade it to older version (preferably 2.3.0)?
Could someone with older firmware version (again, preferably 2.3.0) just dump their firmware files here?
Thanks in advance.

 
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: helpmeupgradeplease on March 15, 2023, 02:37:44 am
I second this request. Can someone please drop their 2.3 firmware here. All the past links I've found are dead. I am not going to be able to roll back mine from 2.8 without them. I think several others are having this problem.

The dead link I found: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg839561/#msg839561)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: PA0PBZ on March 15, 2023, 10:33:06 am
This is what I found in my archive, it looks like I downloaded that from the Flir site some time ago  ;)

Too big to attach here so here is the link to google drive: https://drive.google.com/file/d/10LpcyTQzoJJBQRM2Ng-FXPA6ndQOM6fR/view?usp=sharing
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: KD0CAC John on March 16, 2023, 06:55:07 am
Thanks , I was looking for that also .
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: salvagedcircuitry on April 01, 2023, 07:18:29 pm
Hi!

Can someone help with pictures of that plastic part which press button when trigger is pressed? Some dimensions would also help. I need to recreate it  :(

If anyone could post a photo of the lever next to a ruler that would be most excellent. Thanks a ton!

I ended up making CAD of the trigger rod used in the flir e4 e5 e6 e8 thermal imagers. I attached .stl and .step files. They are in a zip. Here's what they look like.

(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=1751783;image)
(https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/?action=dlattach;attach=1751777;image)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: nos_com71 on April 16, 2023, 09:00:05 pm
hi guys after long time ,
I have E4 no wifi  sw 2.11.0, HW1.2L. already followed ur instructions ,did a resolution a menu hacks nicely,
but that was n 2019 , I tried to find any update for this model, but I found a veryyy long thread . I tried to go to the latest pages , but things mixed up with me .
my need is : is there any update for my set?
thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on May 16, 2023, 04:12:38 pm
The upgrades for resolution and menu are the only ones for your current firmware. Some users have updated their firmware to enable them to make use of Bud’s upgrades but I cannot assist you with that as I have not followed the E4 upgrade for a long time.

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ErwinsCat on July 03, 2023, 09:39:46 am
I'm trying to upgrade a flir E4 with software version 1.22.0 and believe me I'm reading this for a couple of days and tried several methods and all of them failed now realizing they are old, and probably obsolete and scattered all over the forum, it just too bad! I'm wondering if a better place exists with links to files and it instructions? can we put them in a better repository like github or something? or maybe I'm missing something and it is obvious and in plain sight!
thanks
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 06, 2023, 02:13:15 am
Try this video
https://www.youtube.com/watch?v=oXJYv_MxIHw (https://www.youtube.com/watch?v=oXJYv_MxIHw)

Once you update feel free to write an article and put on Github or whatever.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ErwinsCat on July 08, 2023, 07:55:26 am
Thanks for the reply, Bud, I did used that instruction step-by-step couple of times. and revert back to my backups, the resolution hacked worked ok, but regardless of adding the menu hack or not, the center spot meter was missing. I read in a couple of posts, in similar situations people mentioned its because the point is still at the old coordinate for (80x60). i even search inside all *.rsc files for any 40,80,40 or 30 just in case some of those control the position of the spot meter. so far no luck.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 08, 2023, 01:02:18 pm
Have you done cold reboot ( removal of battery for 30 sec) ?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ErwinsCat on July 09, 2023, 12:56:51 pm
yes did a couple of times, i thought maybe USB powering it while the battery was removed and I disconnected and removed the battery. i saw a post someone mentioned this happened because the config file wasn't encrypted with the correct signature, I'm going to re-download the tool and template config and start from the 1st step, this does not make much science to me as i assume if the signature wasn't correct the resolution shouldn't work either but also could be some mistake i done when made the config file and worth to try again as all those times i used the first config i created and because the rez worked i assumed it wasn't the issue but I could be wrong! 
by the way, I really appreciate despite this thread is as old as it is, you take the time to help a stranger to fix the thing. 
your the boss, Bud!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 09, 2023, 03:36:45 pm
And you tried to toggle spot cursor measurement tool (turn off and on)?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: ErwinsCat on July 13, 2023, 12:35:27 pm
Gday bud, It worked! I did it again from the beginning on another PC and it worked. it wasn't the on/off thing, i think something was wrong with the encoded, file. i decode it and compare it with this new one and seems identical text but for some reason did not work the 1st time. thanks for the help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on July 13, 2023, 10:23:59 pm
Ok. Good to know, though it did look strange. Usually it either works fully or not at all. Anyways, enjoy your camera  :-+
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: radioorizont on August 05, 2023, 03:38:43 pm
Hi Fraser, long time since I bothered you 😊
I just purchased a flir S40, similar to the pxx series but without the handle.
The viewfinder has a fault where it displays only vertical bars. Camera displays ok on external AV
I opened it up, it's a Sony module, couldn't see any physical damage.
Do you know if this is a common failure point in these, anything specific that would cause this issue?
Cheers Dan.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: hap2001 on August 06, 2023, 01:17:32 pm
I just realized the Ex is using a "naked" sensor package, which is different to Flir ix and 25um TAU.
What about the 17um TAU, and 25um Exx?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Fraser on August 06, 2023, 06:43:13 pm
Radioorizont,

Please feel free to send me a personal message to discuss

Best Wishes

Fraser
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Logan on October 05, 2023, 02:24:14 pm
Hi. Anyone knows what are the difference among different hardware versions? (such as 1.0/1.1/1.2/.../2.0, L/non-L, wifi/non-wifi or even more?)
And what's the lens aperture? Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Swappart on November 07, 2023, 01:10:33 pm
Considering buying an E4 on eBay. The model number is 63906-0604. Can we tell from that if it can be upgraded?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: DaveWB on December 08, 2023, 06:27:01 am
I uploaded a tutorial to upgrade 3.16.0:
https://www.youtube.com/watch?v=y3_wKq6V6i8 (https://www.youtube.com/watch?v=y3_wKq6V6i8)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: damian212 on January 25, 2024, 09:14:48 pm
Hello everyone, I'm looking for someone to help me with my FLIR E40 camera.

I have a hack for the E60 model, version 2.23.14, but the camera sometimes freezes. I saw that there is a version 2.27.16 available and maybe it will be better. Do I need to perform any special procedure or is it enough to run eFlirInstall?
In the information panel in the camera I have information that it is an E40 camera and not an E60, I don't know if it matters. Thank you for your help.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on January 26, 2024, 05:24:28 pm
I'd say you should Not be upgrading modified cameras. May end up with a brick.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on February 26, 2024, 08:09:00 am
Few years ago I hacked the Flir E4 based on the procedure described in this (very long) topic.
But now I learned the hack was not made perfect and Manual temperature scale mode  is missing?
Can anyone let me know what steps I must take so that Manual temperature scale mode will be available?
Thank you
My  camera shows : Model E4 1.2L
Software:2.11.0
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: damian212 on February 28, 2024, 05:20:57 pm
Why? Is this other procedure than original software?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Jane on February 29, 2024, 08:25:34 am
I do not want to brick my camera
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 02, 2024, 04:50:59 am
If this information is not in this thread than there was no manual scale mode for this firmware version.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: _Wim_ on March 02, 2024, 07:30:54 am
Hello everyone, I'm looking for someone to help me with my FLIR E40 camera.

I have a hack for the E60 model, version 2.23.14, but the camera sometimes freezes. I saw that there is a version 2.27.16 available and maybe it will be better. Do I need to perform any special procedure or is it enough to run eFlirInstall?
In the information panel in the camera I have information that it is an E40 camera and not an E60, I don't know if it matters. Thank you for your help.

I also have a modified E30=>E60 running 2.23.14 (and it does indeed sometimes freezes). I did not do the firmware upgrade, as there is always a risk involved (because it is not possible to downgrade). If you really want to do it, I would first un-hack the camera (so put all original config files back), and then perform the upgrade and re-hack afterwards. But I would not expect to much difference from 2.27.16, so I recommend to stay with 2.23.14, as the occasional freezing is not that bad, and best case that is the only thing that will change as no new functions will be available...

Update: do not upgrade, see also here: https://www.eevblog.com/forum/thermal-imaging/just-got-an-e30bx-have-the-usual-questions/msg1399564/#msg1399564 (https://www.eevblog.com/forum/thermal-imaging/just-got-an-e30bx-have-the-usual-questions/msg1399564/#msg1399564)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 11, 2024, 07:53:15 pm
I just received a pretty new looking second hand Flir E4 (model E4 2.0L) with firmware version 3.16.0. I noticed that the MSX unfortunately wasn't correctly lined out with the thermal image (it was shifted to the right, upper right). As I just received this unit, I had absolutely no clue whether or not this unit was already modded or not.

So I went ahead and "updated" the firmware according to the instructions here, ensuring it would have the modded firmare (I made sure I downloaded the correct common_dll_3.16.zip as the firmware version is 3.16, not 3.12). I took some pics as seen below

Questions:
* Can anyone here let me know if the resolution seems to be right, i.e., is it the correct 320x240 resolution? It seems a bit blurry tbh.
* is it possible for me to change the offset so that MSX matches the thermal output?

[attachimg=1][attachimg=2][attachimg=3][attachimg=4]


Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: quince on March 11, 2024, 08:39:44 pm
I just received a pretty new looking second hand Flir E4 (model E4 2.0L) with firmware version 3.16.0. I noticed that the MSX unfortunately wasn't correctly lined out with the thermal image (it was shifted to the right, upper right). As I just received this unit, I had absolutely no clue whether or not this unit was already modded or not.

So I went ahead and "updated" the firmware according to the instructions here, ensuring it would have the modded firmare (I made sure I downloaded the correct common_dll_3.16.zip as the firmware version is 3.16, not 3.12). I took some pics as seen below

Questions:
* Can anyone here let me know if the resolution seems to be right, i.e., is it the correct 320x240 resolution? It seems a bit blurry tbh.
* is it possible for me to change the offset so that MSX matches the thermal output?

(Attachment Link) (Attachment Link) (Attachment Link) (Attachment Link)


Thanks!

Does not look like 320x240 at all. More like 80x60 or 160x120 at best.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 11, 2024, 08:54:09 pm
Does not look like 320x240 at all. More like 80x60 or 160x120 at best.

That's what I thought as well. However the conf.cfg I edited and uploaded does contain the following lines:

.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240

I followed all the steps as mentioned in the readme v3.12.0.txt. I was also able to perform step 16 and noticed a new menu. The noise is also gone. But the resolution isn't upgraded.

I ran the python cfccfg_v2.py command using my suid (confirmed using both methods). I did run python on WSL (Windows Subsystem for Linux), as I didn't want to install Python 2.7 on my Windows machine. But since I didn't got any errors and the process did result in a conf.cfc file, I assumed all went fine. Then I uploaded the conf.cfc file and confirmed that the filesize on the device is identical to the one I have locally on my computer.

So... what could've gone wrong? Could it be that FLIR updated their newer units with lower resolution sensors?

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 11, 2024, 09:53:56 pm
I manually edited the conf.cfg values for IRWidth and IRHeight and definitely noticed a difference:

[attachimg=1] 80

[attachimg=2] 160

[attachimg=3] 320

So I guess it's 320 after all, although the difference between 160 and 320 isn't as huge as compared to 80 to 160.

Final question remains: the MSX overlay is way off. Any idea on how to offset that properly?
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 11, 2024, 10:20:27 pm
It looks ok for the liberated E4, this camera is not known for sharp images, to make images sharper you need to adjust the lens focus but E4 has fixed focus. A special tool is needed to turn the lens, 3D print files for such tool were published in this thread. But this is not something you'd do for every image.
You can reduce JPG compression by toggling the cursor off and on. Not sure if the images you published went through any software which may have blurred them more.

To align MSX you press (if i recall correctly) Cursor Up button, this brings up a floating menu and on the left there will be the Alignment menu icon, you select it and a scroll ribbon pops up with alignment distance selection. You can do the same from the stock Settings menu. Do not confuse Alignment distance with Object distance, they are different. Object distance is for correcting temperature measurement depending how far the object is from the camera.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 11, 2024, 10:30:46 pm
Couple more points:
1. MSX alignment on E4 is not automatic, you have to adjust the setting manually depending on distance to the object, but typically it matters if the object is withing a few feet.
2. To check image thermal resolution press the Archive button, select an image and select 'Properties'. Scroll to view the Thermal Resolution field, i believe this is what it is called.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 11, 2024, 11:21:02 pm
@Bud thanks a lot for your replies and all the hard work you put into this!

I confirmed that the thermal resolution indeed is 320x240. Awesome!

Unfortunately I wasn't able to get into an alignment menu in which I could manually change the xpan, so I did this using telnet (rset .image.fusion.xpanVal -10.0) until I found a value that worked. However that value isn't stored, so when the camera recalibrates, the alignment is off again. So I edited calib.rsc, and updated .calib.visual.fusion.leExFOL7.C1X double to the value I empirically found. Recalculated the CRC and uploaded it.

Seems to work :) But a menu would definitely be easier ;D I'll go look for the manual!

Anyway, I'm not sure if is this is just the camera in combination with the focus problem. But I find the images a bit smeared and blurry. Since I have no reference so far, I'd like this know if this is more or less what to expect.

[attachimg=1] In total darkness, with cat :)

[attachimg=2] View of the room, with lights on, thermal image only, no cat

[attachimg=3] Image of corner of monitor and phone, all within 2 ft





Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 12, 2024, 04:27:28 am
Unfortunately I wasn't able to get into an alignment menu in which I could manually change the xpan,

I cannot recall anyone mentioning x offset issue. Perhaps your camera was dropped and physical cameras alignment shifted  :-//
Impact may also have caused thermal camera focus issues. You can scan this thread for the lens adjustment tool info or perhaps just search 3D print sites for such tool for  E4 and 3D print one.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 12, 2024, 03:30:41 pm
Thanks! I'll try to restore the camera to its original settings and see if the offset is still wrong.

Because of the sheer amount of information here, scattered all across the boards, I thought it would be ideal to have a tool that would automate all these processes. Eliminating the human-factor-error :) I've created a TypeScript version of the various tools on this platform here:

https://github.com/MarByteBeep/flirmod

So far it's able to automatically find a WIFI enabled Flir E4 on a local network, connect to it through FTP, download all the files to a backup folder, verify critical files are downloaded, decrypy/encrypt cfc/cfg files.

Next will be automatically modding the cfc file and use telnet to shutdown processes, replace the dll etc.

Feel free to take a look and let me know what you think!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 12, 2024, 04:10:19 pm
Automation is great but you'd have to have good error handling. People who will use automation will be mostly inexperienced ones. "Error in line 47" type of messages will not do them any good. You will become the man to run HelpDesk for that automation issues. Sometime things do not work for some reason, they just do not. So try to foresee what may happen at each step and handle those situations.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 12, 2024, 07:03:01 pm
Very true, I'll write this with that in mind! I'm checking and double checking every step and only continue when all signs are green ;)

I do have a question though; do you happen to know what's allowed for sharing? Currently the code only contains a username and password, but am I for instance allowed to share the dlls and/or unencrypted config files? Were you guys ever visited by angry lawyers? :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 12, 2024, 08:50:40 pm
There is no "allowed" or "disallowed". But - where did you get the files from to liberate your camera?  :popcorn:  Does this answer your question.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 12, 2024, 10:49:04 pm
Got it! I'll give it a thought on what to do. Meanwhile I added a simple CLI option menu in which a user can quickly create backup. Up next, the actual modding :)

[attachimg=1]
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 13, 2024, 11:37:39 am
Does anyone still have a list of the commands which can be used to control the E4 via serial/telnet? Either my google-fu is weak or Flir deleted the relevant pdfs.

6 years later I am actually interested in that as well :) I know these

Code: [Select]
stopapp   
rset
rls

aside from the standard Win CE command like DIR/TIME etc.

But are there any others? For instance I'd like to know if I can enable/disable auto calibration through Telnet.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 14, 2024, 08:15:46 pm
It has been a few years and I cant recall details but I think you change the parameters using rset command. Not all of them can be changed though and not all of them retain the change after a reboot.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 26, 2024, 08:56:54 am
I've some questions with regards to the CFC file. As far as I understand the CFC contains a CFG file which is just a regular text file (\r\n delimited) with at the bottom three lines:

# ID 123456789
# CRC03 1234abcd

(the last one being an empty line).

The ID represents your serial number. The CRC03 is calculated over the whole CFG, excluding the CRC line itself, using a modified CRMD160 algoritm. The source is available on this forum: https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480 (https://www.eevblog.com/forum/thermal-imaging/flir-e4-thermal-imaging-camera-teardown/msg403480/#msg403480)

First question:
in my test case I was able to perfectly recreate the CRC03 of my original unmodded CFC file, so is this CRMD160 algorithm seemingly works fine. Or were there some issues with it, that forced you to modify the common_dll.dll to skip the CRC03 check?

Now to convert that CFG back into a CFC file, you need to run the CFG file (including the ID and calculated CRC) through the RC4 encryption. And append to that two things: a signature and a tail.

The tail (16 bytes) contains a marker (CFC\0) and some seemingly hardcoded values and the encrypted size of the CFG.

Second question:
But my question is, what's inside the 128 byte signature? I do know that it probably contains data which is encrypted using FLIR's private key, hence it's impossible for us to create. But is the content of the signature static? Meaning it doesn't matter the content of the encrypted CFG file? Or does it change when the CFG changes? In the former case one could simply copy the signature from the original unmodded CFC file and apply it on a newly generated CFC file, but that's probably not possible... hence the reason to alter the common_dll.dll, to simply bypass the signature check?






Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 27, 2024, 12:29:46 am
My recollection is CRC03 was patched before people figured out what algorithm it was using, so it was patched to get it out of the way.
The digital signature protects  the integrity of the entire file. First a hash function is applied to the file, then the calculated hash is encrypted using the manufacturer's RSA private key, resulting in the signature which is appended to the file. Therefore if you change a single bit in the file, the hash will change and the signature will change, making it impossible to reuse same signature for two different files no matter how small the change was.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 27, 2024, 09:13:25 am
Got it, hence the only option is to patch that common_dll.dll, to skip that signature check altogether. I think I fully understand now. Thanks!
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 27, 2024, 05:38:08 pm
@Bud got a few more questions for you, hope you'll be able to help me out with them. I worked a bit more on the automated patching tool and so far I'm able to automatically patch the basic, advanced and christmas patches. However not everything seems to work as expected.

Basic
According to the toolbar-config.xml there should be a

<ToolBar name="measure_five_spots"/>

option, however that one seems to be absent from the menu. I see 7 options in the measurement menu, but none of them is the 5 spots option. Any ideas?

Advanced
So far seems to work! I did get some additional recording options and a medical color palette. Need more testing to see if it's working properly.

Christmas
I followed your steps and added the

.caps.config.ui.measure.presetException text "userPresets"

to the CFG. The options appeared in the main menu, however when selecting them I only see a black screen with an overlay menu. Also, the measurement menu suddenly only has three options. I also tried adding <Toolbar name="measure_user_1"/> to toolbar-config.xml, but that didn't do much either. Just like with the basic patch, somehow not all toolbare options seem to appear in the measurement menu. Any thoughts?

The patches are all located here, feel free to take a look at it, perhaps I missed some files?

https://github.com/MarByteBeep/flirmod/tree/main/data/patches

All files should be identical to the patches on this forum. I only added a dependencies.json for each patch in which I define which patches need to be applied first. This json will obviously not be synced to the camera.

How the tool applies an update?
* collect all files for the patch (+its dependencies)
* verify all RSC files for correct CRCs
* rebuild the conf.cfc based on the conf.cfg and verify that.
* automatically connect through ftp to the camera
* only if there is no error, upload all patched files to the camera
* reboot the camera (although it sometimes requires a "hard" battery-remove reset for changes to become available)

TODO:
* automatically mod the common_dll.dll, but I'm a bit hesistant on reverting back to my original dll to test that, as I don't want to brick the camera :)
* if user made backup, verify that backup is original (ie., check for unmodded dll and cfc containing signature), restore camera back to factory backup so user can sell it.

That's it for now. Hopefully you can shed some light on the measurement menu problems.

Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 28, 2024, 12:53:28 am
Man, you asking me what was 7 years ago, gee... how I can possibly remember  :D
What version are you trying to upgrade? I believe the last one I worked on was 3.12.0
If you enable user presets (I guess they by installing the Christmas Pack), I remember they change measurement menu, so that one is expected.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Bud on March 28, 2024, 01:24:21 am
Switch the camera to digital camera view mode and press the 'Down' button for 10 sec, the screen should show the full package firmware version number which the menu files were made for.
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 28, 2024, 06:57:02 am
Haha sorry, I didn't know it's been so long. I'm amazed by that you even remember so much. The menu (holding down 10 seconds and then press back button) you are referring to the credits screen: "This camera has enhanced capabilities. Unlocked and brought to you by yours truly ;))" etc.

As far as I can see that doesn't show any version information. But I'm on 3.16.0. Would this give you enough info? I can check out the qml files within the rcc to see if I can find the screen you are referring to.

Thanks for all your help, even after 7 years :)
Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 28, 2024, 07:05:08 am
I think I got it, it's pressing right in the camera information menu for a few seconds:

IRDM: 0.0.1.0
POLLUX: 0.1.0.0
POLLUX_FPGA: 8.7.6.0
(...)
appkit: 3.1.14
osimgkit: 23.1.12
prodkit: 0
AppCore: 34.0.0.1
AppServices: 34.0.0.1
Bootloader: 23.1.16.0
RestMoon: 34.0.0.1
WinCE: 6.0.0.0
appcore_dll: 1.22.1.1
common_dll: 1.22.1.1
facetcore: 34.0.0.1
facetcore_qml: 34.0.0.1
fvd: 23.0.94.0






Title: Re: Flir E4 Thermal imaging camera teardown
Post by: Marty1920 on March 28, 2024, 07:33:17 am
Also, since the E4 has been discontinued and the last firmware ever will be 3.16.0; are you okay with me axing the boot popup?