Flir E4 Thermal imaging camera teardown

[daves]

Thus, it is logical to assume that if the 30hz/60hz hack is ever discovered, or has been already, that information will not be shared publicly.

Well of course, lets send it as PM 

[ixfd64]

I thought ITAR only covered export regulations, and not users tinkering with their devices?

[scientist]

I thought ITAR only covered export regulations, and not users tinkering with their devices?

This has been said before. The only concern is that if FLIR catches wind of this, they will issue firmware making it impossible to hack cameras at all out of fear of violating ITAR. Hence my previous post: keep it to PMs.

[OrBy]

Well if some one were to find any information like that out - I for one would defiantly not want any of it to show up in my PM box. Nope. No Sir. That would be a really bad idea...

[DaveWB]

I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.

What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

[tomas123]

why so much conspiracy theory?

from the E40 you can by a 9Hz version and a 30/60 Hz version
http://www.flir.com/uploadedFiles/Thermography_Americas/Service_and_Support/E%20Series.pdf

the 9hz version is only limited by known config file (guess, untested)

Code: [Select]

\FlashFS\tmp\prod.log
2013xxxxxxxx   8 Preparation:Image frequency 30

[Fraser]

Is anyone else wondering what happened to Dave's E8 that he received for review  ? Nothing heard of it since delivery.

It would have been interesting to see its dead pixel map.

[Fisher]

I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.

What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

I`m waiting mine too. It shipped out of Estonia on the 24th Jan. I wonder when was it calibrated (?). My hope is that Flir doesn`t want to change the situation, because E4`s are selling really well. Better than they ever imagined, while E5-8-s selling didn`t drop. If they would change "policy" everybody: factory, resellers, users would loose. In case of a change, resellers procuring a bigger stock now would have to deal with a lot of refund requests, because everybody wants "that" camera. I think resellers would never sell these stocks. Actually this is a win-win-win situation. I`d be very surprised if they `d change their policy.

[suryaprihadi]

Hi All,

I just registered to say AWESOME to Mike and all who contributed to this post....many thanks.
I have an older Extech i5 which is 80 x 80 resolution for personal fun use. Bought it when price hit US$1.6K some months a god but now that can buy a 100 x 100 resolution one ....hick hick hick.

Am thinking to get E4 and mod it, but me poor with IT stuff, but is enjoying this thread a great deal. Two thumbs up.

Again thanks.
SP

[Twitch]

This is an awesome thread, thank you all for the great information.

I wanted to say that I ordered an E4 which arrived today.  It was drop shipped directly from FLIR.

It still has the 1.19.8 firmware
Serial is 639129xx
It's calibration certificate is dated January 23rd, 2014.

[Fraser]

Thanks for the info. I will add it ot my useful information thread.

23rd January......Hmmmm doesn't sound like new firmware release in the latest batch to me 

Good news for people who are awiting delivery of an E4 me thinks.

[Radget]

Just for everyone who is looking for the recording function with FLIR TOOLS+, I checked with FLIR and got below reply:
Recording is not possible using an E4. FLIR Tools can only display the live image from this camera model. You would need an E40 or higher to enable the recording feature.

Look for FLIR IR Camera Player, a free download from FLIR. Latest version v2.33 and it will record video from an E4/E8+.

[maggiore]

Looking for some guidance. Followed the directions. After selecting run FIF within FLIRInsallNet an error dialog box popped up stating "Flir Cronos Communication" with the option to retry, abort, or ignore. I chose to ignore and had the following script;

Received shell command message:
FLIR Command Line Interpreter
Version 0.4.3 running on WinCE 6.0

\>
Connected
Installation started...
Adding flashfs/system/appcore.d/config.d/e8.cfg
Camera update completed

Ok

And this is the modified e8.cfg file I used;

#
# Generated at 2013-06-12 14:30:34
#
.caps entry
.caps.config entry
.caps.config.name text "app E8"
.caps.config.revision text "1.0"
.caps.config.image entry
.caps.config.image.framegrab entry
.caps.config.image.framegrab.fusion entry
.caps.config.image.framegrab.fusion.enabled bool true
.caps.config.image.framegrab.fusion.pip entry
.caps.config.image.framegrab.fusion.pip.enabled bool true
.caps.config.image.framegrab.fusion.hcf entry
.caps.config.image.framegrab.fusion.hcf.enabled bool true
.caps.config.image.services entry
.caps.config.image.services.store entry
.caps.config.image.services.store.enabled bool true
.caps.config.image.services.store.radiometric entry
.caps.config.image.services.store.radiometric.enabled bool true
.caps.config.image.services.store.incompatible entry
.caps.config.image.services.store.incompatible.enabled bool false
.caps.config.image.services.store.incompatible.level int32 0
.caps.config.image.settings entry
.caps.config.image.settings.enabled bool true
.caps.config.image.settings.IRwidth int32 320
.caps.config.image.settings.IRheight int32 240
.caps.config.image.sysimg entry
.caps.config.image.sysimg.alarms entry
.caps.config.image.sysimg.alarms.enabled bool true
.caps.config.image.sysimg.alarms.measfunc entry
.caps.config.image.sysimg.alarms.measfunc.enabled bool true
.caps.config.image.sysimg.alarms.measfunc.maxCount int32 3
.caps.config.image.sysimg.alarms.humidity entry
.caps.config.image.sysimg.alarms.humidity.enabled bool true
.caps.config.image.sysimg.alarms.humidity.maxCount int32 1
.caps.config.image.sysimg.alarms.insulation entry
.caps.config.image.sysimg.alarms.insulation.enabled bool true
.caps.config.image.sysimg.alarms.insulation.maxCount int32 1
.caps.config.image.sysimg.irMarkers entry
.caps.config.image.sysimg.irMarkers.enabled bool true
.caps.config.image.sysimg.irMarkers.spot entry
.caps.config.image.sysimg.irMarkers.spot.enabled bool false
.caps.config.image.sysimg.irMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.irMarkers.arrow entry
.caps.config.image.sysimg.irMarkers.arrow.enabled bool true
.caps.config.image.sysimg.irMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.irMarkers.box entry
.caps.config.image.sysimg.irMarkers.box.enabled bool false
.caps.config.image.sysimg.irMarkers.box.maxCount int32 0
.caps.config.image.sysimg.measureFuncs entry
.caps.config.image.sysimg.measureFuncs.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff entry
.caps.config.image.sysimg.measureFuncs.diff.enabled bool true
.caps.config.image.sysimg.measureFuncs.diff.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.diff.calcMask int32 65526
.caps.config.image.sysimg.measureFuncs.isotherm entry
.caps.config.image.sysimg.measureFuncs.isotherm.enabled bool true
.caps.config.image.sysimg.measureFuncs.isotherm.calcMask int32 20
.caps.config.image.sysimg.measureFuncs.isotherm.dual bool false
.caps.config.image.sysimg.measureFuncs.isotherm.fixScale bool false
.caps.config.image.sysimg.measureFuncs.isotherm.interval bool true
.caps.config.image.sysimg.measureFuncs.isotherm.invInterval bool false
.caps.config.image.sysimg.measureFuncs.isotherm.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.mbox entry
.caps.config.image.sysimg.measureFuncs.mbox.enabled bool true
.caps.config.image.sysimg.measureFuncs.mbox.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mbox.maxCount int32 5
.caps.config.image.sysimg.measureFuncs.mcircle entry
.caps.config.image.sysimg.measureFuncs.mcircle.enabled bool false
.caps.config.image.sysimg.measureFuncs.mcircle.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mcircle.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.mline entry
.caps.config.image.sysimg.measureFuncs.mline.enabled bool false
.caps.config.image.sysimg.measureFuncs.mline.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.mline.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.reftemp entry
.caps.config.image.sysimg.measureFuncs.reftemp.enabled bool true
.caps.config.image.sysimg.measureFuncs.reftemp.calcMask int32 1924
.caps.config.image.sysimg.measureFuncs.reftemp.maxCount int32 1
.caps.config.image.sysimg.measureFuncs.script entry
.caps.config.image.sysimg.measureFuncs.script.enabled false
.caps.config.image.sysimg.measureFuncs.script.maxCount int32 0
.caps.config.image.sysimg.measureFuncs.spot entry
.caps.config.image.sysimg.measureFuncs.spot.enabled bool true
.caps.config.image.sysimg.measureFuncs.spot.calcMask int32 514
.caps.config.image.sysimg.measureFuncs.spot.maxCount int32 5
.caps.config.image.sysimg.visualMarkers entry
.caps.config.image.sysimg.visualMarkers.enabled bool true
.caps.config.image.sysimg.visualMarkers.spot entry
.caps.config.image.sysimg.visualMarkers.spot.enabled bool false
.caps.config.image.sysimg.visualMarkers.spot.maxCount int32 0
.caps.config.image.sysimg.visualMarkers.arrow entry
.caps.config.image.sysimg.visualMarkers.arrow.enabled bool true
.caps.config.image.sysimg.visualMarkers.arrow.maxCount int32 4
.caps.config.image.sysimg.visualMarkers.box entry
.caps.config.image.sysimg.visualMarkers.box.enabled bool false
.caps.config.image.sysimg.visualMarkers.box.maxCount int32 0
.caps.config.image.contadj entry
.caps.config.image.contadj.minSpanFactor entry
.caps.config.image.contadj.minSpanFactor.enabled bool true
.caps.config.image.contadj.minSpanFactor.factorAuto double 2.0
.caps.config.image.contadj.minSpanFactor.factorManual double 2.0
.caps.config.image.targetNoise entry
.caps.config.image.targetNoise.enabled bool true
.caps.config.image.targetNoise.targetNoiseMk int32 5
.caps.config.image.zoom entry
.caps.config.image.zoom.enabled bool true
.caps.config.image.zoom.maxFactor double 8
.caps.config.system entry
.caps.config.system.focus entry
.caps.config.system.focus.laser entry
.caps.config.system.focus.laser.updateFocus entry
.caps.config.system.focus.laser.updateFocus.enabled bool true
.caps.config.ui entry
.caps.config.ui.fusion entry
.caps.config.ui.fusion.PIP entry
.caps.config.ui.fusion.PIP.enabled bool true
.caps.hw entry
.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63911xxx(used actual serial)
# CRC01 5ba1b4b8

Upon unpluging usb, removing the battery and replace it doesn't look like any changes took effect. Any input or guidance would be greatly appreciated

[tomas123]

Look for FLIR IR Camera Player, a free download from FLIR. Latest version v2.33 and it will record video from an E4/E8+.

in supplementation to my post
https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg377140/#msg377140
here the sceenshots from the free FLIR IR Camera Player

you can only select a live stream display (15 Hz ??)
the E4 delivers no RAW signal (button grayed out)

a live show from your battery status 


P.S.: same results with newer version 2.3.3

[tomas123]

someone posted here an image how to save the usb port with two drill bits

I use a rubber band

[scientist]

someone posted here an image how to save the usb port with two drill bits

I use a rubber band

Clever.

[fredaj]

Looking for some guidance. Followed the directions. After selecting run FIF within FLIRInsallNet an error dialog box popped up stating "Flir Cronos Communication" with the option to retry, abort, or ignore. I chose to ignore and had the following script;

.
.
.

Upon unpluging usb, removing the battery and replace it doesn't look like any changes took effect. Any input or guidance would be greatly appreciated

Hi Maggiore, I had the same problem. In my case, it was because "Word Wrap" was turned on in my text editor when I saved the modified cgf file. Also I used the Win 7 "send to compressed file" function (instead of 7zip), although I didn't check to see if this was the issue instead. Hope this helps!

Fred

[tomas123]

you can check with rls, which configuration is loaded

telnet

Code: [Select]

> rls -r -l caps.config
rw--r--------- 0 root   root   <e> image                           
r---r---r----- 0 root   root   <a> name            "app E4 1.1 + app E8 1.0"
rw--r--------- 0 root   root   <e> ui        

or see here

In which case I will just post the executive summary for people with a non-working hack:

- Start FlirInstallNet
- Do "Get resource" for .caps.config.name
- "app E4 1.0": hack didn't apply. Recheck your CRC01. Still a problem ==> 
- "app E4 1.0 + app E8 1.0": hack did apply, so things should work. 
- "app E8 1.0 + app E4 1.0": hack did apply, wrong order. Check the filename for your config. It should alphabetically come after the original config file name.

[jasonc]

What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

Mine is almost 12500, so you should be fine.

[maggiore]

Well I'm still having a little trouble with the hack, due to my own ignorance I'm sure. Could someone explain the CLRF for me? The end of my e8 file looks like this;

.caps.hw.sdcard entry
.caps.hw.sdcard.enabled bool false
# ID 63911xxx(used actual serial)
# CRC01 5ba1b4b8

with one line break after the CRC01. Am I screwing this up? THanks

[Taucher]

read the last pages of this thread, you're doing it wrong somewhere - maybe try my ezcrc01 and keep sure e8.conf is lowercase

[pomonabill221]

Just a little note on when I "upgraded" my E4... I did try CRC01 and kept getting an error with flirnet (trying to update the fif file).
I used EzCRC01 and it worked great, so I must have been doing something wrong with cRC01.

You do need a CRLF (press the enter key after the #crc xxxxx) but ONLY ONE crlf!!!  and NO spaces either.

[cherokeesix]

I just bought an E4 from Grainger yesterday and the firmware was still 1.19.8.

What serial number range was yours? I ordered one in the ending around 12100, the company I ordered it from yesterday said they just got them in yesterday too. They said they didn't know the firmware version so maybe I can get a little hope from yours.

Mine is 12690, just arrived 1/31 from Extech in Peabody MA. Firmware: 1.19.8

Hack worked just fine...!

[amigo]

At this pace FLIR would be stupid to update their firmware and block this mod. Every time a new E4 owner makes a post here, that's $1,000 in FLIR's bank account.

That's $1,000 they would have not had if it wasn't for this firmware mod. Surely a sales balance sheet will outweigh paranoia that their higher-end models would stop selling because of it.

[pomonabill221]

And it is also encouragment for others that are following this thread, to actually purchase an E4, rather than procrastinate as to whether or not to buy and E5,6,8.
Makes a sale in other words. (for Filr)