Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1870002 times)

0 Members and 44 Guests are viewing this topic.

Offline jamesb

  • Regular Contributor
  • *
  • Posts: 54
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #875 on: August 12, 2013, 11:58:25 pm »
Excellent work and seriously tempting me to buy a DSA815 (and DS2000 if that gets hacked...)

... you are kidding, right?
 

Offline olsenn

  • Frequent Contributor
  • **
  • Posts: 993
Re: Sniffing the Rigol's internal I2C bus
« Reply #876 on: August 13, 2013, 12:12:45 am »
Quote
Now I'll uninstall the keys since the tested software appears to have worked ... 

Right....... I'm sure you will...
 

Offline true

  • Frequent Contributor
  • **
  • Posts: 329
  • Country: us
  • INTERNET
Re: Sniffing the Rigol's internal I2C bus
« Reply #877 on: August 13, 2013, 01:37:43 am »
Doesn't matter who he is. His response surely didn't match his work. You expect everyone to know exactly what to do with that script?
If you don't know what to do with that "script", where the instructions are in the file itself, well, maybe you can ask your attitude.


so I'm hoping the comment above doesn't discourage someone from developing a Windows GUI.
lol who takes such a thing serious, I'm sure nobody cares
 

Offline ve7xen

  • Super Contributor
  • ***
  • Posts: 1194
  • Country: ca
    • VE7XEN Blog
Re: Sniffing the Rigol's internal I2C bus
« Reply #878 on: August 13, 2013, 04:29:25 am »
Wow I go offline for a weekend and more awesomeness!

Don't have the DSA but binaries up at http://gotroot.ca/rigol as usual :).
73 de VE7XEN
He/Him
 

Offline tlu

  • Regular Contributor
  • *
  • Posts: 145
Re: Sniffing the Rigol's internal I2C bus
« Reply #879 on: August 13, 2013, 04:47:58 am »
Nice work with the 10Hz RBW  :-+. Does anyone know if the 3Ghz BW is also software specific? That would be a nice option to go along with the 10Hz RBW.  ;)
 

Offline DL5TOR

  • Contributor
  • Posts: 35
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #880 on: August 13, 2013, 09:32:09 am »
question tool all:

is ther any one with a dsa815 (NON-TG) willing to do a open it out there??

we Need some Fotos of the PCB to see if it is only the N-connector that is missing or what elce is missing.

thanks to all

DL5TOR
 

Offline tom66

  • Super Contributor
  • ***
  • Posts: 6810
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Sniffing the Rigol's internal I2C bus
« Reply #881 on: August 13, 2013, 10:13:07 am »
Excellent work and seriously tempting me to buy a DSA815 (and DS2000 if that gets hacked...)

... you are kidding, right?

Yes. Ha ha. You got me.

 :-//
 

Offline Mr Simpleton

  • Supporter
  • ****
  • Posts: 302
  • Country: se
  • Not the sharpest knife in the drawer
Re: Sniffing the Rigol's internal I2C bus
« Reply #882 on: August 13, 2013, 10:18:32 am »
Does the 815 non-TG have the TG N-connector in place?? Oddly the only picture I've seen has been with 2 N-connectors at the front. If so it certainly looks promising for a "software-upgrade".

For those who has dismembered the 815... how about measure the IF filter size, this way we could estimate the IF frequency, and thus see if the 815 is hardware designed for a higher than 1,5 GHz stop frequency. Or even better try to measure the cut-off frequency of the first low-pass filter. But this may be a though job.

 

Offline tom66

  • Super Contributor
  • ***
  • Posts: 6810
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Sniffing the Rigol's internal I2C bus
« Reply #883 on: August 13, 2013, 10:21:06 am »
I think the tracking generator is a substantial cost on the unit (if you look at the teardown.) I doubt they are including that with every unit. 3GHz vs. 1.5GHz may also require some changes to the PCB filters?
 

Offline Uup

  • Regular Contributor
  • *
  • Posts: 84
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #884 on: August 13, 2013, 11:10:51 am »
Excellent work and seriously tempting me to buy a DSA815 (and DS2000 if that gets hacked...)

... you are kidding, right?

Yes. Ha ha. You got me.

 :-//

Looks like you are serious...

Did you read any of the earlier pages in this thread?

Oh wait, of course you didn't! Otherwise you would realise that what you are asking has already been done.

 

Offline tom66

  • Super Contributor
  • ***
  • Posts: 6810
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Sniffing the Rigol's internal I2C bus
« Reply #885 on: August 13, 2013, 11:34:23 am »
I didn't read through the thread, not all 60 pages. I didn't realise it had already been hacked. If so, great! Now I have double the reason to get the DS2000.
 

Offline olsenn

  • Frequent Contributor
  • **
  • Posts: 993
Re: Sniffing the Rigol's internal I2C bus
« Reply #886 on: August 13, 2013, 11:53:15 am »
For the DS2000 I recall it was possible to change a DS2072 into thinking it is a DS2022 to get greater bandwidth. I wonder what happens if that same procedure is done to change the DSA815 into thinking it is a DSA830?
 

Offline tom66

  • Super Contributor
  • ***
  • Posts: 6810
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Sniffing the Rigol's internal I2C bus
« Reply #887 on: August 13, 2013, 11:58:00 am »
Is there a dedicated thread on DS2000 hacking, or is it all in this thread?
 

Offline DL5TOR

  • Contributor
  • Posts: 35
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #888 on: August 13, 2013, 12:17:49 pm »
Is there a dedicated thread on DS2000 hacking, or is it all in this thread?

it's all in one
 

Offline jamesb

  • Regular Contributor
  • *
  • Posts: 54
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #889 on: August 13, 2013, 12:25:52 pm »
Is there a dedicated thread on DS2000 hacking, or is it all in this thread?

You are looking at it.

To be honest, I like the fact that the procedure is a bit convoluted and requires some background research - it should help keep the effort / success a bit more low-key and reward those who are more dedicated than the average script-kiddie type.

Someone is bound to write up a full "how-to" on a blog site somewhere - hell, I was considering an in-depth tutorial until I considered the ramifications.
 

Offline tom66

  • Super Contributor
  • ***
  • Posts: 6810
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Sniffing the Rigol's internal I2C bus
« Reply #890 on: August 13, 2013, 12:32:30 pm »
Great. There are already how-tos on the net. And a Windows EXE for the DS2000. I can quite easily compile a linux gcc, if I can find the libraries. First, I need to sell my DS1102E (not hacked, all original) if the DS2072 is to be my next purchase. I am really missing the intensity grading that I get on the uni lab scopes (Agilent DSO4000 IIRC)
 

Offline fqahmad66

  • Regular Contributor
  • *
  • Posts: 79
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #891 on: August 13, 2013, 12:44:01 pm »
Hi,

It seems that there are lots of parts for the TG option input. See attached images of back side of board. The DC block cap at RF input may also limit the analyser range to around 2G.

Regards
F
 

Offline jamesb

  • Regular Contributor
  • *
  • Posts: 54
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #892 on: August 13, 2013, 12:57:51 pm »
Wow ... some really scary / poorly done reflow on that board. Good thing it works .. but .. wow ...
 

Offline PegasusDD

  • Newbie
  • Posts: 1
Re: Sniffing the Rigol's internal I2C bus
« Reply #893 on: August 13, 2013, 04:20:24 pm »
Does the 815 non-TG have the TG N-connector in place?? Oddly the only picture I've seen has been with 2 N-connectors at the front. If so it certainly looks promising for a "software-upgrade".

On the following page is a picture of a DSA815 without TG and with only one N-connector:
http://www.batronix.com/versand/spektrumanalysator/Rigol-DSA815.html

and here another one:
http://www.goepe.com/apollo/prodetail-szzydz2-3371161.html
« Last Edit: August 13, 2013, 04:23:32 pm by PegasusDD »
 

Offline dougg

  • Regular Contributor
  • *
  • Posts: 73
Re: Sniffing the Rigol's internal I2C bus
« Reply #894 on: August 13, 2013, 04:36:56 pm »
For those trying to build miracl.a on a 64 bit Linux platform (Ubuntu 13.04 in my case), the instructions at the top of rikey_dsa.c (and rikey_true.c) need to be tweaked a bit. I used 'bash linux64' to build miracl.a then '-m64' rather than '-m32' on the link line.
 

Offline jamesb

  • Regular Contributor
  • *
  • Posts: 54
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #895 on: August 13, 2013, 06:05:11 pm »
For those trying to build miracl.a on a 64 bit Linux platform (Ubuntu 13.04 in my case), the instructions at the top of rikey_dsa.c (and rikey_true.c) need to be tweaked a bit. I used 'bash linux64' to build miracl.a then '-m64' rather than '-m32' on the link line.

Nice catch for the 64bit crowd!
 

Offline Mr Simpleton

  • Supporter
  • ****
  • Posts: 302
  • Country: se
  • Not the sharpest knife in the drawer
Re: Sniffing the Rigol's internal I2C bus
« Reply #896 on: August 13, 2013, 07:38:40 pm »
Maybe not the correct thread to ask... but looking at the phase noise data on the DSA815 it is not that spectacular at close in, is the 10 Hz RBW really that useful? It seems several forum members mentions that the 10 Hz filter does make a difference when trying to resolve signals. I would love to se a plot showing the improvement. Any taker??  :-+
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #897 on: August 13, 2013, 07:51:49 pm »
i'd recommend -m32 even on a 64bit system - i had several inconsistent builds on 64 bit boxes, maybe invalid type casts on my end or miracl issues. 32bit fallback solved it every time.
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #898 on: August 13, 2013, 08:15:31 pm »
pm me the output (+serial), i can verify it the other way around - so far all error reports where due to typos  :P
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline Rory

  • Frequent Contributor
  • **
  • Posts: 410
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #899 on: August 13, 2013, 08:40:51 pm »
Thanks Cybernet and dr.diesel, I'm up and running on all.

The license info still shows the trial options by their keys and their "left time". I assume the trials will disappear once they expire?

 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf