Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1923937 times)

0 Members and 2 Guests are viewing this topic.

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #2150 on: December 25, 2013, 12:51:13 pm »
Some changes in the input stage (resistor and trt) from NON-A to A (in Black HW 2.0 NON-A):



I guess that they have also changed some capacitors. Any volunteers to measure their value?
Note: Resistor without marking code -> unknown value.

« Last Edit: December 25, 2013, 01:33:21 pm by Carrington »
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #2151 on: December 25, 2013, 01:04:06 pm »
Analog Devices ADR5044A (4.096 V Precision Micropower Shunt Mode Voltage Reference) has a R2W marking on it. (See bottom of page 14):

...

Not sure if any other devices has the same R2W marking on them too or not.


Impossible. Must be a NPN trt. I'm pretty sure that is a BF93A (R2*).

* = p -> made in Hong kong.
* = w -> made in china.




Other possibilities (NPN and SOT23 only):
http://www.ecadata.de/searchnew/index2.html
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #2152 on: December 25, 2013, 01:08:25 pm »
Mode 0 and Mode 1?

...

Likely the BMODE pins of the BFIN - toggle between flash/spi boot - where spi is what they use to flash the bootldr - one of my first posts in that thread was regarding bmode pins.
if somebody wants to mess with them with boundary scan u can check the bfin pins logic levels nicely.
Maybe I read it. I no longer remember.
Sorry.
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline Wim13

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2153 on: December 25, 2013, 04:11:59 pm »
Also posted in the main Rigol topic, but for the others, i updated my bandwidth chart with the 300 Mhz option.
There is not much enhancement for the non A models. Even worse, it not very stabel the 300 Mhz
option . That is i think why Rigol never sold 300 Mhz versions of the non A.

Some others also measured, and there are differences around 1 dB, which is normal
for devices at the end of there capabilities. These measurements are all made on the same 2072.

So i will stay for DSEZ, the E for CAN and the Z for DS2202 with al options.

Edit: the bandwidth is measured only on hardware version 1.0.1.0.0
« Last Edit: December 26, 2013, 09:01:16 am by Wim13 »
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #2154 on: December 25, 2013, 04:19:44 pm »
Even worse, it not very stabel the 300 Mhz option.

Can you expand on this a bit?  What was not stable?

I looked at my other 2072 which has been untouched until now.  It has 3 keys VSAB, VSAC, and VSAE to load the trial options, so my theory that the SN/model are loaded with keys is false.  The 4 keys for the unit that was dumped here probably includes a can trial too which explains the extra key.
 

Offline m-joy

  • Contributor
  • Posts: 45
Re: Sniffing the Rigol's internal I2C bus
« Reply #2155 on: December 25, 2013, 04:27:45 pm »


So i will stay for DSEZ, the E for CAN and the Z for DS2202 with al options.

Huhu. So DSEZ does enable 200Mhz and all options including CAN but no 300Mhz.?

Greets
 

Offline staze

  • Frequent Contributor
  • **
  • Posts: 820
  • Country: us
  • I _might_ have a problem...
    • Everybody Staze...
Re: Sniffing the Rigol's internal I2C bus
« Reply #2156 on: December 25, 2013, 04:29:22 pm »
And remind us, is this the 2072 hw 1 or hw 2?

And did you self-cal with each of these bandwidths?
« Last Edit: December 25, 2013, 04:31:42 pm by staze »
“Give a man an answer, he’ll keep his job for a day. Teach a man to Google, and he’ll be employed for a lifetime”
 

Offline Wim13

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2157 on: December 25, 2013, 04:57:47 pm »

The entry chip LMH6518, has to the datasheet several options, 200 ,350 or 650 Mhz.

as far i can see for 200 Mhz DS2202, it has already open the 350 mode. I dont
think Rigol has used the 650 Mhz option. But only stretched the gain for 350 Mhz to
get the 300 Mhz bandwidth, which gives on the old models not the correct functionality.

See chart below from the datasheet,
 

Online PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5223
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2158 on: December 25, 2013, 09:50:59 pm »
*bump* Anyone having an idea how to convert a non-A model into an A? I also tried 'samegrading" (using the same latest software update), but again no difference. What I am after is the switchable 50 ohm input, I don't think there is much difference between the A and non-A models apart from that.

Well, I changed the jumper settings on my non-A version 2 hardware to reflect the -A settings (moved one resistor from the upper row to the lower row), but I can't find anything that has changed. The 50 Ohm is still greyed out and the model is still non-A. It has the latest software, and I tried booting with left-F6. Maybe it needs a factory reset, but I'm not sure how to do that.
Keyboard error: Press F1 to continue.
 

Offline elecBlu

  • Contributor
  • Posts: 25
Re: Sniffing the Rigol's internal I2C bus
« Reply #2159 on: December 25, 2013, 10:14:03 pm »
Can you expand on this a bit?  What was not stable?

his frequency response of the 300MHz option is not nearly as flat as it could be, look at his chart. But, as far as i remember, he has HW 1.0.
If that chart looks the same for HW 2.0, you better leave it at 200MHz.

Interesting to see that the A Models are not identical with HW2.0. So we have at least 3 different input stages out there.
« Last Edit: December 25, 2013, 10:25:23 pm by elecBlu »
 

Offline Rigol-Friend

  • Contributor
  • Posts: 35
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2160 on: December 25, 2013, 11:09:09 pm »
is the switchable 50 ohm input

Bad idea:
Quick and dirty you can have 50 ohm impedance by activating the relay for the 50 ohm resistor with a mechanical switch. If your hardware is version 2, relay and resistor are build in.

That will be not elegant, but will work, I think.
My english is VERY poor, sorry. I learned in school, about more than 55 years ago.

But I'am a happy owner of Rigol DSA815-TG with all options + DS2302 (was DS2072) + DG4202 (was DG4062)
Mega thanks to the developers of the key-generator ! Especially to CYBERNET with his brilliant brain !
 

Offline m-joy

  • Contributor
  • Posts: 45
Re: Sniffing the Rigol's internal I2C bus
« Reply #2161 on: December 25, 2013, 11:23:09 pm »
I cant understand whats so special about the 50 ohm impedanz. You can easily get a T-connnector with 50ohm Terminator so whats the point.
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #2162 on: December 26, 2013, 01:33:54 am »
I cant understand whats so special about the 50 ohm impedanz. You can easily get a T-connnector with 50ohm Terminator so whats the point.

It's a lot more convenient than using an external adapter, why are you trolling?
« Last Edit: December 26, 2013, 03:59:57 am by Gallymimus »
 

Offline Wim13

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2163 on: December 26, 2013, 09:10:10 am »
I cant understand whats so special about the 50 ohm impedanz. You can easily get a T-connnector with 50ohm Terminator so whats the point.

There is a very big difference, if you terminate directly on the chip entry, or on the BNC connector,
gives a lot of impedance changes.
 

Offline Wim13

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2164 on: December 26, 2013, 09:14:59 am »

Can you expand on this a bit?  What was not stable?



You can see on 1 nsec the DS2000 hw version 1.01.1 has difficulties display the correct waves,
it also differs when you switch two channels on, the signals changes...so not reliable.

DS2000 old version where never designed to work behind 200 Mhz. The hardware had to be modified,
as they did on later models.

 

Offline clifford

  • Regular Contributor
  • *
  • Posts: 64
  • Country: at
    • www.clifford.at
Re: Sniffing the Rigol's internal I2C bus
« Reply #2165 on: December 26, 2013, 10:13:00 am »
I cant understand whats so special about the 50 ohm impedanz. You can easily get a T-connnector with 50ohm Terminator so whats the point.

There is a very big difference, if you terminate directly on the chip entry, or on the BNC connector,
gives a lot of impedance changes.

For signals under 300 MHz the few centimeters of transmission line stub should not be an issue. But it nevertheless feels better to have the termination where it belongs: right at the end of the transmission line.
 

Offline Git

  • Contributor
  • Posts: 13
  • Country: gb
  • Very old engineer with over 4 decades in design.
Re: Sniffing the Rigol's internal I2C bus
« Reply #2166 on: December 26, 2013, 12:45:17 pm »
I'm having a few issues with my JTAG probe

Thanks for your efforts on this. Did you manage to do a JTAG verify of dump file against the device?. I'm not very familiar with DS code, but there is a lot of 0xFF empty space in the dump which would make me suspicious if I had dumped it.

 

bigmarkslp

  • Guest
Re: Sniffing the Rigol's internal I2C bus
« Reply #2167 on: December 26, 2013, 05:41:00 pm »
Does anyone know if the USB port unlock trick works with the A series?  I've been trying to decide between an non-A or A series unit, and the A series seems better from a hardware perspective.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #2168 on: December 26, 2013, 06:20:57 pm »
For signals under 300 MHz the few centimeters of transmission line stub should not be an issue. But it nevertheless feels better to have the termination where it belongs: right at the end of the transmission line.
And, what about the rise time?



About R2W smd marking code:

Made in China: http://www.chipdip.ru/search/?searchtext=BFR93A+%28SMD%29+SOT23
Made in Hong Kong: http://www.soltronik.pl/bfr93a-12v-50ma-6ghz-135db-sot23-tranzystor-npn/p-15171.html?osCsid=7d3806245e986140f752be4951f2c818

« Last Edit: December 26, 2013, 06:40:36 pm by Carrington »
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #2169 on: December 26, 2013, 06:51:35 pm »
Does anyone know if the USB port unlock trick works with the A series? 

What trick is this?
 

Offline Git

  • Contributor
  • Posts: 13
  • Country: gb
  • Very old engineer with over 4 decades in design.
Re: Sniffing the Rigol's internal I2C bus
« Reply #2170 on: December 26, 2013, 07:04:58 pm »
What trick is this?

There's mention of it here :
http://hackaday.com/2013/07/02/unlocking-a-rigol-scope-once-again/
also there was a Service Mode hack.

Git
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #2171 on: December 26, 2013, 07:10:17 pm »
There's mention of it here :
http://hackaday.com/2013/07/02/unlocking-a-rigol-scope-once-again/
also there was a Service Mode hack.

Unlocking as in installing a test key?

Is there a service mode hack for the ds2000 besides the menu7-menu6-menu7 one?
 

bigmarkslp

  • Guest
Re: Sniffing the Rigol's internal I2C bus
« Reply #2172 on: December 26, 2013, 09:25:02 pm »
also there was a Service Mode hack.

There is studio25's Atiny85 trick too, right?
 

Offline jkw13

  • Contributor
  • Posts: 18
Re: Sniffing the Rigol's internal I2C bus
« Reply #2173 on: December 26, 2013, 11:36:48 pm »
Quote
I think I've "bricked" my new DP832 by downgrading it to v1.06 and back to v1.08.
ADC cal doesn't work anymore, and the display meters are wrong.
Is there any way to recover from this do you think? Perhaps I did something wrong?
Does anyone know the ManualCal procedure?   :-BROKE
Thanks!

The problem is not the firmware up / downgrade.
There is a bug in the manual calibration.
Only volts and current ADC are affected.
The DAC's are ok.
Rigol knows the problem.
I'm waiting for a new firmware.
Write a mail to the Rigol support.

Is there more to  it than this I wonder?
Rigol say v1.08 is the latest version.
I find it strange that in addition to the ADC problem
that the options are lost after downgrade/upgrade,
including the trial minutes that I had.
I would like to remove the options and try again,
but ":SYSTem:OPTion:UNINSTall" doesn't work in
Ultra Sigma, nor ":Cal:Start 2012,CH1" either |O
« Last Edit: December 28, 2013, 02:07:48 am by jkw13 »
 

Offline clifford

  • Regular Contributor
  • *
  • Posts: 64
  • Country: at
    • www.clifford.at
Re: Sniffing the Rigol's internal I2C bus
« Reply #2174 on: December 27, 2013, 12:45:41 am »
And, what about the rise time?

I would rather worry about overshoot:



This is for 0 cm, 1 cm, 5 cm and 10 cm stubs, using vacuum (air) as dielectric. So this should correspond to about 0 cm, 0.5 cm, 2.5 cm and 5 cm stubs for real world dielectrics.

 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf