Hantek - Tekway - DSO hack - get 200MHz bw for free

[Freeze]

Nice try, just contact caiyijun@hantek.com he/she will give you factory file to reflash.
Rigol DS1054z is good, I have had one, can make it from 50mhz to 100mhz with some easy command.
good luck!

My DSO1062B after brick 
(Attachment Link)

Thanks for the answer!
But do you really think this might be solved by reflashing the firmware? I don't think so..
I already flashed the backup I made 8 years ago. This was the original firmware.

[sim_v]

Hi,

I've got a KKmoon DSO5102P and update with the latest firmware from Hantek (firmware 20201009...).
After some exploration of this new device, I notice that Main Time Base is always identical to Window Time Base (in single or dual view mode).
Is it a bug ?

Note : 100Mhz limit capacitors are present on my unit.

-Simon-

[Perepandel]

Hello, I have been able to modify the speed of my Hantek DSO5102P to 200Mhz.

Everything works correctly. 

Thanks to the information and work that you share.

Thank you very much.

No one replying to this...

I just want to say that I got a firmware update for the Hantek 150 Mhz model DSO2D15. In case anyone wants to try to flash an inferior device of the same series (DSO2X1X), let me know... 

[Piton]

Hi Perepandel. I'm also waiting for DSO2С10, bought at a discount, and would like to know what has changed in the new firmware, languages have been added, or is it still only English and Chinese? It is hardly possible to flash my oscilloscope with your firmware with a generator without additional modification. Where did you get the firmware? I asked the seller, but so far there is no specific answer.

[Perepandel]

Hi Perepandel. I'm also waiting for DSO2С10, bought at a discount, and would like to know what has changed in the new firmware, languages have been added, or is it still only English and Chinese? It is hardly possible to flash my oscilloscope with your firmware with a generator without additional modification. Where did you get the firmware? I asked the seller, but so far there is no specific answer.

Hi Piton,

Haven't tested it yet, but after asking them about the improvements that's what they told me:

Modified the square wave output waveform problem of the signal source and the display problem of the measurement font.

Regarding the firmware update not working on your machine, I wouldn't hold my breath on it. Are you aware which thread are you in? This is devoted to people updating their Hanteks with more advanced machines' firmwares, enabling these features on them...

I wouldn't be surprised if the hardware was absolutely the same, including the function generator feature. But of course, that's just pure especulation until someone tries it... 

[Piton]

Thank you, Perepandel. I will soon receive, probably, a very long delivery, almost 2 months already. The seller promised to help with the new firmware.

[Gcs190]

I just saw on the hantek page that on December 9 the firmware available for the DSO-8000E was updated, I leave a link here:

http://www.hantek.com/DownLoad?key=zxgj&sid=1&pid=159&word=

[Gcs190]

Updated, in the absence of a thorough test:

The modification to have the bandwidth of 200Mhz still works.

The version has changed from 3.2.35 (171121.0) to 3.2.35 (191226.0)

[Gcs190]

At the firmware level, I have only found the Chinese and Japanese language files and the dso_bin modified

[rlohmann]

Hi,

I got a faulty DSO5072P ("T 1G/035 001389" labeled on the back) with "no display".
I attached a FTDI adapter and found the following output:

Code: [Select]

*** Warning - bad CRC or NAND, using default environment


##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
(... nothing more at this point)

I guess the NAND is corrupt. (Dont't now what happened to the unit before)

Of course, I have no backup files.

Maybe someone could help me with some dump files to recover the NAND.
Btw, is there a way I could read out/capture the remaining NAND content and perhaps extract the unit-related pieces?

[atoll]

Hi! I need help. Updated oscilloscope DSO5102B with firmware dso5kb_func_dso5102b20190830.up - only the splash screen is loaded. Before that, dso5kb_func_dso5202b20180226.up was updated normally
Previous system information:
sw 3.33.0 (140902.0)
hw 1010 / 5555830F
Give a link for recovery via the console. If there is, you can throw a dump to the mail.

[fubgumfaw]

Hi! I need help. Updated oscilloscope DSO5102B with firmware dso5kb_func_dso5102b20190830.up - only the splash screen is loaded. Before that, dso5kb_func_dso5202b20180226.up was updated normally
Previous system information:
sw 3.33.0 (140902.0)
hw 1010 / 5555830F
Give a link for recovery via the console. If there is, you can throw a dump to the mail.

I have not read through this entire thread yet, but I think everything you need to know to recover your scope is here...just keep reading...
I have a DSO1062B coming. No idea it's firmware state, but I'm sure I'll want to hack it.

[Blindelinx]

Hi everyone,

after reading for about 8 hours and still not finding the answer I thought I try and ask you guys for help...

I work as a physics teacher in the netherlands and we have a digital scope (Voltcraft DSO-1102D). After attempting to update the firmware through the website of Voltcraft the scope freezes in the startup logo. I read a lot of you had the same issue and I understand that there is a way to update the firmware through serial but I have no Idea how to do this...

I read in the thread the way to serial read (*hope I say it right) the scope and I'm at the point that I am getting info through the serial after startup. The problem is; I don't hava any experience with linux programming... So I can enter the scope through PuTTy but have absolutely no idea what to do next.

I really hope anyone can help me... Thanks a million for your time already!

Have a great day! Hugo van Loenen



This is the read-out I get in PuTTy:
-----------------------------------------------------------------------------------------------------
*** Warning - bad CRC or NAND, using default environment

##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 3.2.35 (root@zgt) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #109 PREEMPT Wed Mar 5 03:45:30 CST 2014
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: SMDK2416
Memory policy: ECC disabled, Data cache writeback
CPU S3C2416/S3C2450 (id 0x32450003)
S3C24XX Clocks, Copyright 2004 Simtec Electronics
CPU: MPLL on 800.000 MHz, cpu 400.000 MHz, mem 133.333 MHz, pclk 66.666 MHz
CPU: EPLL on 96.000 MHz, usb-bus 48.000 MHz
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 58996k/58996k available, 6540k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xc4800000 - 0xf6000000   ( 792 MB)
    lowmem  : 0xc0000000 - 0xc4000000   (  64 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .text : 0xc0008000 - 0xc03ef000   (3996 kB)
      .init : 0xc03ef000 - 0xc040f000   ( 128 kB)
      .data : 0xc0410000 - 0xc05a8fa0   (1636 kB)
       .bss : 0xc05a8fc4 - 0xc05c6cfc   ( 120 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:107
irq: clearing subpending status 00000002
Calibrating delay loop... 198.45 BogoMIPS (lpj=496128)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
S3C2416: Initializing architecture
S3C2416: IRQ Support
S3C24XX DMA Driver, Copyright 2003-2006 Simtec Electronics
DMA channel 0 at c4804000, irq 88
DMA channel 1 at c4804100, irq 89
DMA channel 2 at c4804200, irq 90
DMA channel 3 at c4804300, irq 91
DMA channel 4 at c4804400, irq 92
DMA channel 5 at c4804500, irq 93
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
s3c-i2c s3c2410-i2c: slave address 0x10
s3c-i2c s3c2410-i2c: bus frequency set to 9 KHz
s3c-i2c s3c2410-i2c: i2c-0: S3C I2C adapter
Advanced Linux Sound Architecture Driver Version 1.0.24.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
s3c-adc s3c24xx-adc: attached adc driver
msgmni has been set to 115
io scheduler noop registered (default)
io scheduler cfq registered
s3c-fb s3c-fb: window 0: fb
s3c-fb s3c-fb: LCD type is TN83 800*480, default_bpp=16, pixclock=5
s3c2440-uart.0: ttySAC0 at MMIO 0x50000000 (irq = 70) is a S3C2440
console [ttySAC0] enabled
s3c2440-uart.1: ttySAC1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: ttySAC2 at MMIO 0x50008000 (irq = 76) is a S3C2440
s3c2440-uart.3: ttySAC3 at MMIO 0x5000c000 (irq = 94) is a S3C2440
loop: module loaded
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
info->cpu_type=3, tacls_max=8
s3c24xx-nand s3c2416-nand: Tacls=3, 22ns Twrph0=7 52ns, Twrph1=3 22ns
s3c24xx-nand s3c2416-nand: System booted from NAND
s3c24xx-nand s3c2416-nand: NAND ECC disabled
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended!
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"
UBI: attaching mtd3 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       1190
UBI: attached mtd3 to ubi0
UBI: MTD device name:            "ROOTFS"
UBI: MTD device size:            121 MiB
UBI: number of good PEBs:        968
UBI: number of bad PEBs:         0
UBI: number of corrupted PEBs:   0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 968
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 3/2
UBI: image sequence number:  0
UBI: background thread "ubi_bgt0d" started, PID 308
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
usbcore: registered new interface driver uas
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
g_serial gadget: Gadget Serial v2.4
g_serial gadget: g_serial ready
s3c-hsudc s3c-hsudc: bound driver g_serial
samsung-ts s3c2416-ts: driver attached, registering input device
input: S3C24XX TouchScreen as /devices/virtual/input/input0
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
i2c /dev entries driver
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: watchdog inactive, reset disabled, irq disabled
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
s3c-sdhci s3c-sdhci.1: clock source 0: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 1: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 2: hsmmc-if (24000000 Hz)
mmc0: SDHCI controller on samsung-hsmmc [s3c-sdhci.1] using ADMA
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: uda134x-hifi <-> s3c24xx-iis mapping ok
ALSA device list:
  #0: S3C24XX_UDA134X
TCP cubic registered
NET: Registered protocol family 17
Registering the dns_resolver key type
s3c-rtc s3c2410-rtc: setting system clock to 2000-01-01 01:59:40 UTC (946691980)
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 0, volume 0, name "rootfs"
UBIFS: file system size:   119865344 bytes (117056 KiB, 114 MiB, 944 LEBs)
UBIFS: journal size:       9023488 bytes (8812 KiB, 8 MiB, 72 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root:  0 bytes (0 KiB)
VFS: Mounted root (ubifs filesystem) on device 0:10.
Freeing init memory: 128K
dso-iobank: install ok
adc init
TQ2416 ADC driver
0x505
gpio_major_n = 5, io_minor_n = 5, output 0
0x603
gpio_major_n = 6, io_minor_n = 3, output 0
0x70a
gpio_major_n = 7, io_minor_n = 10, output 0
0x408
gpio_major_n = 4, io_minor_n = 8, output 1
dso5000b fpga configure init
fpga0:status: 0x0
FPGA0 CONFIGURE DATA DOWN finish.
FPGA0 CONFIGURE Ok.
0x8090
0x1
fpga bank 11811dso-fpga: install ok
bkl tq2416-backlight initialized done...
close beep now
dso-buzzer s3c2416-beep initialized done...
--------------------------------------------------------------------------------
start
--------------------------------------------------------------------------------

Please press Enter to activate this console. /dso.exe: error while loading shared libraries: libgstreamer-1.0.so.0: cannot open shared object file: No such file or directory

[root@Hantek ~]#

[Microcheap]

When these oscilloscopes are turned off during boot the file system can get corrupted and it will hang during initialization. Have you already tried to restore the system?
See this msg in Hantek's forum for reference: https://www.eediscuss.com/forum.php?mod=redirect&goto=findpost&ptid=15009&pid=19633&fromuid=26055

If the restoration process fail, simply send an e-mail to Hantek's support that they will send you the files to recover the partition.

[tatel]

Hi blindelinx

Last line says libgstreamer library is not found. I think it should be included into the upgrade image So I think your update is somewhat corrupted. On a PC, it will be a matter of installing the package that has that library inside. But that  just doesn't make sense when you are upgrading an embedded system as the case is.  The upgrade image is supposed to have all that's needed for the system to work flawlessly.

As far as I can see in the bootlog you send, linux kernel is booting ok. It is just when triyng to open the dso.exe file -the one that makes your system work as a DSO- that the gstreamer library (a multimedia one) is missed. Since the embedded upgrades usually pop in at the beginning of the boot process,  you have quite a good chance of installing a new update the usual way. No need to fiddle with the linux shell.

[Blindelinx]

Hi Tatel,

thanks for your reply! I also noticed the corruption in the libg library. The problem is that I update the device with a firmware from Voltcraft (which I later read was a problem for multiple people (same result, bricked firmware)). I updated through the normal updating procedure (on the screen of the scope) but because of the freezing on the logo screen I can't re-apply a new firmware that way...

What I'm trying to say is that I have absolutely no idea how to start an update from a USB-stick on the machine through the serial connection (PuTTy)
Im missing the right commands to start the machine to copy/extract/update a firmware through a USB stick without using the standard procedure (on screen of scope)...

I tried looking for the right commands to start the upgrade/downgrade for my machine though Serial connection, but I couldnt find that... The USB is recognized by the machine thou, cause when I enter the stick while on serial monitoring I get a message that the stick is being placed and recognized...

-------------------------------------------------------------------
usb 1-1: new full-speed USB device number 2 using s3c2410-ohci
scsi0 : usb-storage 1-1:1.0
scsi 0:0:0:0: Direct-Access     TOSHIBA  TransMemory      1.00 PQ: 0 ANSI: 4
sd 0:0:0:0: [sda] 30274560 512-byte logical blocks: (15.5 GB/14.4 GiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
 sda: sda1
sd 0:0:0:0: [sda] Attached SCSI removable disk
-------------------------------------------------------------------

just have no idea how to start the install....

thanks so much for your time! Have a great day! greetings Hugo

[tatel]

Im missing the right commands to start the machine to copy/extract/update a firmware through a USB stick without using the standard procedure (on screen of scope)...

I understand.

Please note my post accounting. While I have about two decades of experience in linux, I don't own any oscilloscope yet. I'm looking for my first one; that's the reason I registered into this forum.

So even if you bricked the scope, please keep calm; I could be interested in that brick

Unfortunately I know nothing about the quirks of your specific system so I don't know which name has the executable you need. Your best bet is to  look for the information you need on the forum, or ask the seller.

For basic knowledge about linux command line interface, see:
https://www.linux.com/training-tutorials/how-use-linux-command-line-basics-cli/

And these are the commands usually available on busybox's shell:
https://boxmatrix.info/wiki/BusyBox-Commands

Hope this helps

PS: many busybox-based router can be unbricked by restarting while pressing some button; then the system looks for the upgrade file automagically at boot

[Martin.M]

hello friends.
can anyone explain me how to connect the 1202B to the PC software by USB?
I make anything wrong. The scope is new, no mods, payed 200mc.
greetings
Martin

[tatel]

@blindelinx

You could try this:

https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896

[Mark5]

Done !
100% software solution.

Unfortunately, my 2C10 doesn't have the required hardware for the AWG.

The way it works, it can also repair 2X1X where the serial/model has been wiped after a full restore.

[Blindelinx]

Hi Tatel,

I finally did it! I got the original Firmware from Hantek. This doesnt contain any code changes (older version) which demands unfindable libraries.

The problem, why it didnt work before is that, since the posted solution you referred to, the firmware has been changed with a newer library which tells the update code to look for a newer set of libraries. These probably chanced in the newer version of the Linux Kernell.

Thanks so much again for helping me! Greetings! Hugo

[tatel]

I finally did it! I got the original Firmware from Hantek. This doesnt contain any code changes (older version) which demands unfindable libraries.

Glad you fixed it

[payty]

Hello,


This is my first post on this forum. I have bought a refurbished DSO5202p on ebay and the seller just sent me a message that the device actually does not start, it only displays the attached image.


Pressing F1 and F2 does not fix anything.

The thing is that the seller offered to refund 50% of the price in case I decide to accept the oscilloscope and fix it myself.

Is there anything I can do with this error?

[Blindelinx]

What are you paying for it?

It might be fixable but there is no guarantee. If you are a bit handy you can enter the internal works and reset the kernel but i woundnt recommend it if you are new to electronics

Greetings Hugo
Ps DM me if you need some tips

[payty]

It would be 173 GBP (including shipping and customs fee)

Just for the oscilloscope, price is 118 GBP (with the 50% refund)


I have some electronics knowledge but I am no expert.