Hack of Sigllent spectrum analyzer ssa3021X?

[rf-loop]

Do you know, how to load the EMI limit value lines?

I think you can make what kind of limit lines what you want. (there is many sources for limit values)

Here is just example. (this limit line is not EMI limits, it is just free hand edited some kind of limit line.)
There is 2 limit lines what can show on the screen and both can include max 100 points.

Attached image.

Attached .lim file.  (limit line) (do not touch inside file, just edit file name, only remove last .txt)
Attached .STA file  (SSA settings) (do not touch inside file, just edit file name, only remove last .txt)

If you want try, reset SSA to all defaults.

Load .STA  (settings) 
Load .lim   (limit line as in image)

After loading .STA spectrum go to EMI RBW 9kHz, Start 100kHz, Stop 30MHz, horizontal scale log. Level show dBuV
(I'm not sure if this .STA works in your unit with different FW etc so it perhaps do not set all settings right)

If settings works ok and after loading also .lim (limit curve) then your display looks like this image.
If not, try first BW EMI off and back on and select 9kHz EMI RBW.
If can not get this working with these files then these are not compatible due to different version.

Note that limit lines are based to x-freq, y-level coordinate points so if you change level settings or frequency settings, limit line stay as defined.






Before use these in SSA:
Attached .lim file.  (limit line) (do not touch inside file, just edit file name, only remove last .txt)
Attached .STA file  (SSA settings) (do not touch inside file, just edit file name, only remove last .txt)

[ebclr]

Is this Tracking Generator also hackable or need any kind of board to work  not included on the basic unit ??

[rf-loop]

Is this Tracking Generator also hackable or need any kind of board to work  not included on the basic unit ??

Every SSA3000X (sold outside China *) )  have full TG hardware.
It need only activate by licence key what you can buy. Official price in europe 169.00 eur (VAT 0 price).

For other things in your question you need only carefully read this topic and you find (nice) answer.
Specially starting from this. and continue reading and soon you find also @TurboTom message including attachedt zip file. Inside there is .txt file. Read it.

*) Inside  China there is available more SSA3000X models. (these can see only Siglent China domestic  chinese language sides)

[ebclr]

Another question where in US have the best deal for this instrument List price 1595 USD, anybody know promotions or better price in USA

[rf-loop]

Another question where in US have the best deal for this instrument List price 1595 USD, anybody know promotions or better price in USA

You can try Saelig EEVblog member discount. Perhaps ypu can ask using PM from EEVblog member "rickv14623"
http://www.saelig.com/category/siglent-spectrum-analyzers.htm

[ebclr]

Thanks coupon didn't work I asked one let's wait for Saelig reply

[Jester]

I purchased one from Saelig, I requested the EEVBOG discount and they provided a quote with the discount. Great value.

[tautech]

Thanks coupon didn't work I asked one let's wait for Saelig reply

Check your PM's and email. 

[rf-loop]

Some times need look signal what is low and near much higher level signal.

This image perhaps give some idea how it works.

Here is 0dBm 4MHz AM modulated signal. Modulation % is quite low but generator setting is not very accurate for this (8644B).

There is also weak  signal from other signal generator. Only  5Hz off from 0dBm signal and level ~ -71dBm







It is clear that in this case using RBW 10Hz can not do anything but measure power level what is  inside this filter.
Trace 1 is using 1Hz RBW
Trace 2 with 10Hz RBW and also measured shape factor. (-3dB level width is checked also and it is 10Hz)

[bozidarms]

Hi to the group,
can, please somebody help / i have try  Telnet login to SSA3021x / login " root" , and next password, but than i cannot tip any character for password "ding1234"
Thanks

Supplement - someway have login - but what now sorry for my behavior but i am not pc expert att all
Supplement1 - SUCCESS - apology to the group

[Bicurico]

1) It is "root", not " root".
2) Telnet can be slow, especially if you do not open the SETTINGS/SYSTEM INFO screen.

What hardware revision/firmware version are you running?

Regards,
Vitor

[Pinkus]

OK, I understand (added 'supplement' at 06:40) that you already got the login now.
Given this I just can say:

C'mon. It is all in this thread. And this thread has currently only 5 pages.
I would understand if somebody cannot find an information in a 50 or 100 page thread. But I think it can be expected that you will find the "hack for dummies" instructions in a 5 page thread.

Hint 1: look right in the middle
Hint 2: it might be also helpful to learn the commands of a unix/linux editor. You will find plenty of helpful pages with Google.

[bozidarms]

Thanks for quick responses - have succeeded
Regards
Vitor -
 SW1   100.01.02.07.07.
 SW2   20160606-2
 SW3   000000D1
 HW     07.03.00
Tnx

SPECIAL THANKS - besonderer Dank -  to Turbo Tom 

[Bicurico]

So what was the problem preventing the login? Would be nice to know!

Regards,
Vitor

[bozidarms]

Unfortunately i was - that was my very first time(Telnet and other software stuff...)
Regards

[DL4RAJ]

Hi all,

I have my SSA3021X since two weeks now.
and want to thank all smart contributors about the firmware.
Sort of collective intelligence.-:/
Now follow a few measurements of the SA which I've performed.

Sideband noise.
I've used an ultra clean 10MHz OCXO from Wenzel (Streamline) with a spec'ed
phase noise of -165dBc/Hz @ 1kHz (or greater) offset.
The SA showed a sideband noise of -112dBm/Hz on 10MHz at 10kHz offset.
This translates to -98.36dBc/Hz when referred to peak carrier.
For comparison:A HP70200C is spec'd with -108dBc/Hz under the same conditions.

TG
The restriction of the minimum RBW to 30kHz limits the dynamic range of S21 measurements
to 70dB due to the raised DANL.
This may or may be not an issue depending on the DUT.
E.g. a high quality crystal filter on 5.645MHz was measured once with the Siglent and once with a low cost
VNA,see http://w5big.com/vna2180.htm.
The SSA cannot show the full ultimate stopband attenuation down to -110dB while the VNA can.
For a simple HF LP-filter 70dB dynamic range is adequate.

3Hz and 1Hz RBW
These two non-factory "options" are of limited use.
They work down to signal levels of about -130dBm.
Below this level amplitude accuracy drops dramatically.
E.g. at -133dBm the indicated level is off by 4dB (low) and a -140dBm signal
isn't visible any more while a -143dBm signal at a RBW of 10Hz is clearly visible

TG Addendum
I'have hooked up the TG to a SDR,see the screenshots.
One can see the discrete frequency hops and in the zoomed-in capture
there seem very small continous frequency sweeps visible.
That fits with what was reported earlier in this thread.

Regards

Clemens

 

[videobruce]

I'have hooked up the TG to a SDR

What is this Persues?? 

[painting]

What is this Persues?? 

Looks to be this:
http://microtelecom.it/perseus/



Sent from my iPhone using Tapatalk

[videobruce]

Like I'm suppose to know what that is.   

[Bicurico]

Just a note:

A new firmware was released, which apparently disables activated options and is not downgradable.

Extraction of the firmware revealed that the password is unchanged.

No further information exists regarding the possibility of reactivating the options.

Current advise is to NOT upgrade and wait for people with P08.01 to tell if TELNET access and activation hack is possible.

Regards

[videobruce]

Probably why the update took longer. 

[janekivi]

I look into update scripts and before there was only NSP_system_info.xml
and now it needs nsp_data_b too, which is NSP binary data, I think...
This is the new file in firmware. 128 bytes = 16 x 8, probably crypted.
And somehow is suitable for everyone...

But this can't be difficult. You need to increase sales... for cristmas time. What you do...
There is needed little shaking but not earthquake. You make this upgrade and this must
be solvable in suitable time. So every potential buyer-hobbyist who was not sure before
but like this toy, might lose his opportunity and like buy it now before they lock it with next
radical update. Next upgrade of course has the same effect. But only if this showstopper
is being solved. Otherwise you lost all who buy them with counted money or for toy.
Normal professionals don't use and can't use hacked tools anyway.
(Why not, we can. No, you can't provide service with tool, which tomorrow don't have
needed bandwidth or options.)
(Counted money - you count every cent and think weeks before spending anything)

[nctnico]

For small companies using a piece of hacked equipment doesn't need to be a problem especially with cheap Chinese gear which probably never sees the inside of the manufacturer's calibration department anyway. However losing the options (3.2GHz) with each firmware update and no guarantee they come back makes the SSA3000 series very uninteresting compared to a used spectrum analyser. I was very tempted to buy a SSA3021X but with Siglent plugging the holes I'm happy I went for a used on instead.

[Bicurico]

I bought mine way ahead of the actual date I had planed to buy one, to make sure I get a hackable unit.

I was then surprised that the hole was not fixed over the period of several months. I was wondering "Could it be that they want to mimic what Rigol did?".

Now that the hole is fixed, I am glad I have mine: I would never get this amount of functionality (not just the extra frequency range, but especially the advanced measurments, too) for 1449 Euro.

Buying a second hand SSA is not that easy an alternative!

Believe me, I have purchased lots of measuring equipment second hand and for years I look at spectrum analysers, especially on German eBay. It seems they have some magic with them, making them more expensive, the older they get. I just did a quick search: you literally get nothing for less than 4.000 Euro and those are all pretty old (actually there is one, that seems moderatly interesting - http://www.ebay.de/itm/Advantest-U3641N-Spectrum-Analyzer-9kHz-3GHz-/262392475296).But what if you buy a second hand unit and it comes broken, uncalibrated, develops a fault within days or weeks, etc.? And any SSA with more than 5-10 years is probably outdated when it comes to processing power.

Unless you need some huge frequency range, where a new unit would literally cost a 5 digit number and you could get a second hand one for a 4 digit number, I would steer away from them. Too complex, too difficult to repair, too difficult to get spare parts.

In my opinion, the Siglent SSA3021X is great value and let's be honest: even without hacking it, it is a spectacular device for its price range. Siglent does not need to push it through pseudo-hacking.

Regards,
Vitor

[nctnico]

You forget that your current firmware version still may have flaws and you won't have future enhancements Siglent may add IF you want to continue to use the liberated options.

BTW Used test equipment in Europe is usually very expensive so most of mine comes from overseas.