Hacking the Rigol DHO800/900 Scope

[Martin72]

Well...I could do this in the next days.

Ehh...do we have a 914 bin avaible ? And a 924 ?

[Fungus]

Ehh...do we have a 914 bin avaible ?

I've never seen one.

And a 924 ?

There's a 924 on page one of this topic. Post #5 IIRC.

[Mechatrommer]

That means nobody successful yet with 800 to 924S conversion with latest fw? other than try to make it a smartphone device? So i will stick with hubertyoung fw 1.14 924S until my project finished... that trick hasnt obsolete yet.

[Fungus]

That means nobody successful yet with 800 to 924S conversion with latest fw? other than try to make it a smartphone device? So i will stick with hubertyoung fw 1.14 924S until my project finished... that trick hasnt obsolete yet.

The 'S' has an extra PCB with the signal generator on it. How will you get that via a firmware update?

PS: Who made you into the thread police? Figuring out how to get to the Android settings for WiFi setup and installing other apps is definitely hacking.

I also figured out how to control the screen brightness. Somebody was complaining earlier that the screen wasn't bright enough.

[chris178]

I don't have a DHO800 scope yet but I'm ordering one soon   

I've ordered a DHO804 from Aliexpress https://www.aliexpress.com/item/1005005962731116.html for only £321 (chinese singles day).
To my surprise I've got the scope only 3 days later without having to pay any other VAT or customs fees (probably was shipped from UK not China). Brilliant deal!

I've plugged it to my LAN network, pulled the Key.data and vendor.bin files (via adb) and installed these 2 licenses: BW7T10.lic  RLU.lic to increase the front end bandwidth and the memory depth.
The whole process was painless and took less than 5 min.

I've also noticed an SSH server running on the scope. Does anyone know what's the default root password?

hint: pasword -> no; but you can install pub certificate for this into root account. this is with adb. it doesn't survive reboot.

[rpro]

I've also noticed an SSH server running on the scope. Does anyone know what's the default root password?

hint: pasword -> no; but you can install pub certificate for this into root account. this is with adb. it doesn't survive reboot.

You can use 'adb shell' and then type 'su', for root privileges.  ('exit' twice to get back to your pc shell.)

[ligangelectron]

I don't have a DHO800 scope yet but I'm ordering one soon   

I've ordered a DHO804 from Aliexpress https://www.aliexpress.com/item/1005005962731116.html for only £321 (chinese singles day).
To my surprise I've got the scope only 3 days later without having to pay any other VAT or customs fees (probably was shipped from UK not China). Brilliant deal!

I've plugged it to my LAN network, pulled the Key.data and vendor.bin files (via adb) and installed these 2 licenses: BW7T10.lic  RLU.lic to increase the front end bandwidth and the memory depth.
The whole process was painless and took less than 5 min.

I've also noticed an SSH server running on the scope. Does anyone know what's the default root password?

Try admin Or RIGOL(rigol)

[SparkFire]

Corrupted SD card?
I was able to back up /rigol /config /data /dev /sbin using adb.
I tried to 'adb pull /rigol/data/*'  <- this is bad syntax and did not work, maybe damaged something
Wifi, keyboard, mouse are working.
I did not backup the SD.
Win-n gives this message.
"Damaged Storage, Storage damaged. You may have to reformat it."
Scope otherwise is functional.
Sometime during all of this I upgraded the firmware to 1.01.     Didn't notice any problems until I figured out the "win-n" thing.

[SparkFire]

Under Storage settings:
334MB used of 26.00GB
 SD card: corrupted

[Fungus]

I tried to 'adb pull /rigol/data/*'  <- this is bad syntax and did not work, maybe damaged something

Should be: 'adb pull /rigol/data/.'

But '*' won't damage anything - it's a pull request.

FWIW: Mine says that, too, but the 'scope seems to work OK so I ignored it. I have a copy of my /rigol folder so I can re-image the SD card if it ever fails.

Anybody else tried this? Do you get that message? Maybe they're all like that... 

[lemonato]

Yeah I get the same error. I did pull some files and also push a few with ADB before I managed to get to the notifications menu (thanks fungus). So it seems that message might be there on all of these

[Fungus]

I thought it was because of the hundreds of times I pushed files to it then instantly rebooted. 

[PELL]

Corrupted SD card?

No worries about it. I think this is some kind of bug. Because I have the same error right out of the box.

Probably because the system expected to be booted from a real NAND flash rather than an SD card, and it tried to read the SD card as a normal storage device but failed.

Rigol didn't bother the Andriod too much, I believe they just downloaded the Andriod7 SDK from the dev board manufator when they developing the software.

[Fungus]

Yep. We're not supposed to be seeing this stuff so they simply don't care.

[SparkFire]

Thanks Guys, glad to know I'm not the only one seeing the corrupted  SD card message. Probably will do a backup before I get too carried away.

[Fungus]

Thanks Guys, glad to know I'm not the only one seeing the corrupted  SD card message. Probably will do a backup before I get too carried away.

It doesn't say it's "corrupted"...

[SparkFire]

See #462. Settings->Storage settings. What does yours say?

[Fungus]

See #462. Settings->Storage settings. What does yours say?

OK, it says it there.

I'm still not worried though.

Edit: I see it has "e2fsck" in the system. Who's brave enough to try to use it? 

Code: [Select]

adb shell e2fsck


[Fungus]

I'm not going to mess around with mine at that level... 

[gabiz_ro]

I'm not sure but clicking on that message android system should offer option to fix this.
Anybody try that?
 

[Jajaho]

Hey everybody 

I just got my DHO 914S and thought I would join the fun.

I have two projects I thought would interest you all.
1. I'm designing a front cover for the 800/900 Series to be 3D printed. I'm planning on finishing the first prototype today.
2. I want to build myself one of those DIY PLA2216 described here on [Climbers.net][/https://climbers.net/sbc/clone-pla2216-logic-probe-analyzer/]
    However, I plan on improving the project in the way the author (Nikki Smith) proposes on the page. He mentions that he is working on those improvements himself.
    Does anybody have information on the progress of his second version?

[ebastler]

    However, I plan on improving the project in the way the author (Nikki Smith) proposes on the page. He mentions that he is working on those improvements himself.
    Does anybody have information on the progress of his second version?

This might be of interest (check the whole thread from the linked post onwards):
https://www.eevblog.com/forum/testgear/low-cost-logic-analyzer-probe-for-rigol-mso5000-easyeda-project/msg5097933/#msg5097933

[Mechatrommer]

    However, I plan on improving the project in the way the author (Nikki Smith) proposes on the page. He mentions that he is working on those improvements himself.
    Does anybody have information on the progress of his second version?

This might be of interest (check the whole thread from the linked post onwards):
https://www.eevblog.com/forum/testgear/low-cost-logic-analyzer-probe-for-rigol-mso5000-easyeda-project/msg5097933/#msg5097933

are there low cost logic probe available for sale? i cant find a link or price. do we have to build our own?...

[ebastler]

are there low cost logic probe available for sale? i cant find a link or price. do we have to build our own?...

The low-cost version (which can only handle TTL/CMOS levels) is available on ebay.com. Search for "MSO5000 logic probe" or "PLA2216". Should be $70 to $80, including a set of cheap grabbers.

[bulba99]

I performed a backup test of the SD card without removing the warranty sticker.
I tested the received file with the script from the link:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-dho800900-scope/msg5165031/#msg5165031
Positive result.
Backup time less than 1 hour.

The test was performed on Linux.
I fixed it a bit, now it works every time I start it.

Code: [Select]

adb connect <IP Address>:55555
adb root
adb connect <IP Address>:55555
adb pull /dev/block/mmcblk1 mmcblk1.img

If someone has removed the warranty sticker, please perform a test of starting the oscilloscope from the SD card with the content of the file received as above.
I don't have that option