Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1923925 times)

0 Members and 5 Guests are viewing this topic.

Offline ted572

  • Frequent Contributor
  • **
  • Posts: 399
  • Country: us
  • Radio Communications Equipment/System Design Engr.
Re: Sniffing the Rigol's internal I2C bus
« Reply #1900 on: December 11, 2013, 08:33:45 pm »
DS2000/DS2302 with updated  FW 02.01.00.03 falls back to DS2202:

My DS2072 with upgrade DS2302 falls back to DS2202 with max TB of 2 ns when I update FW from 01.01.00.02it to FW 02.01.00.03 per ’cybernet' using the Boot Method (Power ON + Help) as he recommends and describes for updating to this FW.  BTW the S/N is still the original.

Would uninstalling the Options with Ultra Sigma and then reinstalling them with the Keygen possibly help while in this state. (FW 02.01.00.03 and reporting DS2202/2ns max TB)?  This question is a shot in the dark because I'm at wits end.  I must be missing something simple here.

When I reinstall back to FW 01.01.00.02 it reports that it is a DS2301 and the maximum TB is 1 ns as it was originally. Again using the Boot Method (ON + Help).  This even seems strange that it would revert back to DS2303 fully where it was originally.  And the S/N is still the original.

Has anyone else experienced this, or have any idea what I may be doing wrong, or could do differently straighten this out?

History: I originally upgraded my DS0072 with FW 01.01.00.02 to 100 MHz BW, then to 200 MHz (DS2202), and lastly to 300 MHz (DS2302) and it has been working fine.  Now of course I just want to install the latest Firmware 02.01.00.03.  As stated above it goes to this FW OK, but reports being DS2202 with the maximum TB of 2 ns (as is normal for DS2202).

Thank you for any assistance, Ted
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #1901 on: December 11, 2013, 08:40:13 pm »
DS2000/DS2302 with updated  FW 02.01.00.03 falls back to DS2202:

My DS2072 with upgrade DS2302 falls back to DS2202 with max TB of 2 ns when I update FW from 01.01.00.02it to FW 02.01.00.03 per ’cybernet' using the Boot Method (Power ON + Help) as he recommends and describes for updating to this FW.  BTW the S/N is still the original.

Would uninstalling the Options with Ultra Sigma and then reinstalling them with the Keygen possibly help while in this state. (FW 02.01.00.03 and reporting DS2202/2ns max TB)?  This question is a shot in the dark because I'm at wits end.  I must be missing something simple here.

When I reinstall back to FW 01.01.00.02 it reports that it is a DS2301 and the maximum TB is 1 ns as it was originally. Again using the Boot Method (ON + Help).  This even seems strange that it would revert back to DS2303 fully where it was originally.  And the S/N is still the original.

Has anyone else experienced this, or have any idea what I may be doing wrong, or could do differently straighten this out?

History: I originally upgraded my DS0072 with FW 01.01.00.02 to 100 MHz BW, then to 200 MHz (DS2202), and lastly to 300 MHz (DS2302) and it has been working fine.  Now of course I just want to install the latest Firmware 02.01.00.03.  As stated above it goes to this FW OK, but reports being DS2202 with the maximum TB of 2 ns (as is normal for DS2202).

Thank you for any assistance, Ted

There's no reason for using cybernet's modified FW to achieve 300MHz bandwidth anymore - it's a purchasable and installable option in the newest firmware (as is the CAN trigger/decode). Just look back through the last couple of pages for the keys needed to install either or both options in v.2 firmware.

Here is cybernet's original post with the codes.
« Last Edit: December 11, 2013, 08:57:36 pm by marmad »
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1902 on: December 11, 2013, 08:41:52 pm »
Ted, you need to use DSHH when generating an all options enabled key for the new firmware instead of DSAZ used on older firmwares.
So before upgrading to the new firmware I would uninstall all keys, then upgade to the new firmware and generate a new key using DSHH.
Don't use any custom firmware to get 300 MHz anymore, you can get that with DSHH.
 

Offline jonese

  • Contributor
  • Posts: 26
  • Country: ca
Re: Sniffing the Rigol's internal I2C bus
« Reply #1903 on: December 11, 2013, 09:55:43 pm »
There's more going on here they we currently understand (no doubt, to be expected).

I have a real 2102 that I keygen'd to a 2202 many months ago.  Today I uninstalled the options (several times actually) and power cycled and my machine then was a 2072 (remember this is a real 2102).  I then upgraded the firmware to the latest (and also did the FRAM clear on bootup).  The unit then identifies itself as a 2202.  I also uninstalled the options again, but it continued to be a 2202.  Under the options page, there is a 200 bandwidth trial timer-count down.

In the last step, I used the keygen with DSHH and it's reporting as a 2302.  Trial options page still lists the bandwith 200 option has being present, but with a timer-count down (everything else was official).  Also my serial number continues to be proper.

There is something lingering in the options storage that the standard methods are not removing.  I'm also guessing my unit has lost it's 2102 factory identity and is reverting to 2072 in the earlier firmware when I remove the options.

Perhaps there was something permanent done to the machine several months ago with the VSAx (temporary keys) loading?

Not complaining, just noting what I saw.  It's happily pretending to be a 2302.
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #1904 on: December 11, 2013, 09:58:52 pm »
this is likely due to rigol changing the addresses & meaning of their NVRAM/FRAM storage between releases + some chinese quality coding
i guess the killer here was that u had a DS2102 and installed a 100M option (which in reality was unneeded) by uninstalling that it fell down to a DS2072.
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline ted572

  • Frequent Contributor
  • **
  • Posts: 399
  • Country: us
  • Radio Communications Equipment/System Design Engr.
Re: Sniffing the Rigol's internal I2C bus
« Reply #1905 on: December 11, 2013, 10:51:26 pm »
[quote from marmad « Reply #1936 on: Today at 07:40:13 AM »

    from: ted572 on Today at 07:33:45 AM    DS2000/DS2302 with updated  FW 02.01.00.03 falls back to DS2202:

        My DS2072 with upgrade DS2302 falls back to DS2202 with max TB of 2 ns when I update FW from 01.01.00.02it to FW 02.01.00.03 per ’cybernet' using the Boot Method (Power ON + Help) as he recommends and describes for updating to this FW.  BTW the S/N is still the original. . . . . . . . . .     

from marmad:  There's no reason for using cybernet's modified FW to achieve 300MHz bandwidth anymore - it's a purchasable and installable option in the newest firmware (as is the CAN trigger/decode). Just look back through the last couple of pages for the keys needed to install either or both options in v.2 firmware.
----------------------------------------------------------------------------------------------------------------------------------------------------------
and

 [Quote from AndersAnd « Reply #1937 on: Today at 07:41:52 AM »
 
Ted, you need to use DSHH when generating an all options enabled key for the new firmware instead of DSAZ used on older firmwares.
So before upgrading to the new firmware I would uninstall all keys, then upgade to the new firmware and generate a new key using DSHH.
Don't use any custom firmware to get 300 MHz anymore, you can get that with DSHH.
-----------------------------------------------------------------------------------------------------------------------------------------

Fantastic !   Thank you both so much.  I don't know how I missed all of this, as I thought that I read everything here.  I didn't have a clue about this.  And it was so easy.  Thanks again, Ted
 

Offline creyc

  • Regular Contributor
  • *
  • Posts: 81
Re: Sniffing the Rigol's internal I2C bus
« Reply #1906 on: December 12, 2013, 04:14:06 am »

I notice the 500µV option for DS1000z has a different 3rd letter than the other options too.
Is this a mistake too or is it supposed to be this way?
Can't recall if there's a code table for DS1000z earlier in this topic similar to the on above for DS4000? I think I've missed it if there is.

Quote
DS1000z device options:
DSAB - Advanced Triggers
DSAC - Decoders
DSAE - 24M Memory
DSAJ - Recorder
DSBA - 500uV Vertical

Speaking of this 500µV option for the DS1000Z, it doesn't show up in the installed options menu before or after entering.  Additionally, is there a code to remove this option?
 

Offline m-joy

  • Contributor
  • Posts: 45
Re: Sniffing the Rigol's internal I2C bus
« Reply #1907 on: December 12, 2013, 08:47:36 am »
Hello,
i just bought the DS2072 with 70Mhz. Now i want to have all the cool stuff including maximum bandwidth.
I downloaded the Rigon KeyGen v2.0b1.
I am always reading of an DSHH option, but my keygen has only DSAH  DSAR and DSAZ.
So whats the best way to get this working? Can i easy remove this stuff wo waranty?

Greetings
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1908 on: December 12, 2013, 08:50:19 am »
Hello,
i just bought the DS2072 with 70Mhz. Now i want to have all the cool stuff including maximum bandwidth.
I downloaded the Rigon KeyGen v2.0b1.
I am always reading of an DSHH option, but my keygen has only DSAH  DSAR and DSAZ.
So whats the best way to get this working? Can i easy remove this stuff wo waranty?

Greetings
Use this keygen http://riglol.3owl.com and just type DSHH even though it's not listed as an option. Leave the Privatekey box empty, it will fill out this itself.
 

Offline m-joy

  • Contributor
  • Posts: 45
Re: Sniffing the Rigol's internal I2C bus
« Reply #1909 on: December 12, 2013, 08:57:13 am »
Hello,
i just bought the DS2072 with 70Mhz. Now i want to have all the cool stuff including maximum bandwidth.
I downloaded the Rigon KeyGen v2.0b1.
I am always reading of an DSHH option, but my keygen has only DSAH  DSAR and DSAZ.
So whats the best way to get this working? Can i easy remove this stuff wo waranty?

Greetings
Use this keygen http://riglol.3owl.com and just type DSHH even though it's not listed as an option. Leave the Privatekey box empty, it will fill out this itself.

Great!
Going to try that ;) so do i get 300Mhz or 200Mhz? I am a lil bit confused right now ;)
Will that work on the latest firmware? Should i update to further FW in the future?

Greets
 

Offline seronday

  • Regular Contributor
  • *
  • Posts: 96
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #1910 on: December 12, 2013, 01:36:11 pm »
Anyone who wants to change their new DS1074Z into a DS1104Z use the following Codes:-

DSHA  makes a  DS1104Z with no options enabled .
DSHR  makes a  DS1104Z with all options enabled .

The 3dB bandwidth for the DS1104Z is approx 160Mhz.
The 3dB bandwidth for the DS1074Z is approx 90Mhz.

 

Offline creyc

  • Regular Contributor
  • *
  • Posts: 81
Re: Sniffing the Rigol's internal I2C bus
« Reply #1911 on: December 12, 2013, 04:35:51 pm »
Anyone who wants to change their new DS1074Z into a DS1104Z use the following Codes:-

DSHA  makes a  DS1104Z with no options enabled .
DSHR  makes a  DS1104Z with all options enabled .

The 3dB bandwidth for the DS1104Z is approx 160Mhz.
The 3dB bandwidth for the DS1074Z is approx 90Mhz.

Anyone tested this yet, or am I the guinea pig tonight?  :-/O

Also, new firmware was released for the DS1000Z scopes a few days ago, any compatibility issues?
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1912 on: December 12, 2013, 05:26:04 pm »
Going to try that ;) so do i get 300Mhz or 200Mhz? I am a lil bit confused right now ;)
DSHH: 300 MHz an all options according to cybernet. But I don' t think anyone has actually verified if it's 300 MHz BW with DSHH yet.

Will that work on the latest firmware?
DSHH will only work with the latest released DS2000 FW from what I understand. The same with the CAN protocol analyzer option.


Should i update to further FW in the future?
:-// You can try... or ask your crystal ball, nobody else outside Rigol will know anything about their future releases.

Anyone who wants to change their new DS1074Z into a DS1104Z use the following Codes:-

DSHA  makes a  DS1104Z with no options enabled .
DSHR  makes a  DS1104Z with all options enabled .

The 3dB bandwidth for the DS1104Z is approx 160Mhz.
The 3dB bandwidth for the DS1074Z is approx 90Mhz.
Great  :-+ I can see studio25 has now updated the lists at http://riglol.3owl.com to include the device option codes for DS1000Z an DS2000.
« Last Edit: December 12, 2013, 05:27:48 pm by AndersAnd »
 

Offline eV1Te

  • Regular Contributor
  • *
  • Posts: 186
  • Country: se
  • Your trusted friend in science!
    • richardandersson.net
Re: Sniffing the Rigol's internal I2C bus
« Reply #1913 on: December 12, 2013, 06:06:30 pm »
Anyone who wants to change their new DS1074Z into a DS1104Z use the following Codes:-

DSHA  makes a  DS1104Z with no options enabled .
DSHR  makes a  DS1104Z with all options enabled .

The 3dB bandwidth for the DS1104Z is approx 160Mhz.
The 3dB bandwidth for the DS1074Z is approx 90Mhz.

Anyone tested this yet, or am I the guinea pig tonight?  :-/O

Also, new firmware was released for the DS1000Z scopes a few days ago, any compatibility issues?

I will try it later tonight as well, just need to hack something together that generates a fast rising edges first, to test the 100 MHz with  :)

Edit: It works!
But could hardly see any difference on the rising edge time even though it says DS1104Z-S in the system information. But the fastest edge I had at home was a simple 74HC14 Schmitt trigger that were around 4 ns so that is definitely the limitation and not the scope.
« Last Edit: December 12, 2013, 06:19:37 pm by eV1Te »
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #1914 on: December 12, 2013, 06:14:11 pm »
btw, just out of curiosity: several pages ago I read something like "soon we'll have our own ..." ... was that about an own/altered/open source firmware?
 

Offline eltar

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1915 on: December 12, 2013, 06:18:57 pm »
I will try it later tonight as well, just need to hack something together that generates a fast rising edges first, to test the 100 MHz with  :)

I can try it too. Is latest DS1000Z firmware 00.02.01.SP1 requested for unlocking 100MHz?
Do we have some info or change list for this firmware? Thanks :)
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #1916 on: December 12, 2013, 06:30:58 pm »
btw, just out of curiosity: several pages ago I read something like "soon we'll have our own ..." ... was that about an own/altered/open source firmware?

the altered part we have (for DS2k/DS4k) - the own ... yeah maybe if somebody shoves the FPGA through an xray machine ;)
or somebody donates a broken one so i can rip it off. without FPGA traced out, its a bit hard to do.
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #1917 on: December 12, 2013, 06:42:26 pm »
hehe ok ok
like someone stated, it's really hard for a noob to read through this thread and sort all the infos :D
 

Offline seronday

  • Regular Contributor
  • *
  • Posts: 96
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #1918 on: December 13, 2013, 12:11:50 am »
Anyone who wants to change their new DS1074Z into a DS1104Z use the following Codes:-

DSHA  makes a  DS1104Z with no options enabled .
DSHR  makes a  DS1104Z with all options enabled .

The 3dB bandwidth for the DS1104Z is approx 160Mhz.
The 3dB bandwidth for the DS1074Z is approx 90Mhz.



Minor correction to my previous post after some further investigation.

DSHA also enables the 500uV setting and another unknown, (at present), option.

DSEA is the correct code to change to a DS1104Z only. ( no options ). See table below.

 Code      DS1104z    Unknown     500uV setting
DSBA                                               X
DSCA                            X
DSDA                            X                 X
DSEA           X
DSFA           X                                  X
DSGA           X               X
DSHA           X               X                 X

So to change a DS1074Z into a DS1104Z with all options enabled except the 500uV/div (which does not work correctly at present),
the code  will be DSER.

It is possible to revert back to original, by using the SCPI command " :SYSTem:OPTion:UNINSTall " .

As mentioned in my previous post, the measured 3dB down bandwidth after changing to a DS1104Z, is approx 160Mhz.
All the tests were done on a DS1074Z with Ver:00.02.00.SP1.
 

Offline eV1Te

  • Regular Contributor
  • *
  • Posts: 186
  • Country: se
  • Your trusted friend in science!
    • richardandersson.net
Re: Sniffing the Rigol's internal I2C bus
« Reply #1919 on: December 13, 2013, 01:13:14 am »
Nice work with the reverse engineering of the options on the DS1000Z.  :-+

I enabled DSHR today and also noticed that the 500 uV mode is offset outside the screen (but fully functional i I move the trace back into view again). Byt my CH2 happens to have less than 1 div of offset. My guess is that the built in self.cal. does not adjust the 500 uV mode at all. So whatever settings are set by default in the firmware gets loaded, and it's just a matter of luck if that happens to be good or not.

Maybe it would be possible to access the self.cal. variables in memory somewhere and change the 500 uV offset values manually.

 

Offline sync

  • Frequent Contributor
  • **
  • Posts: 799
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #1920 on: December 13, 2013, 01:47:00 am »
The DSHA option works on my DS1074Z. It's now a DS1104Z. Thanks! :-+ Unfortunately I don't have a real signal generator. Thus I can't measure the bandwidth. But it has a faster rise time now.

I had the 500uV option installed before. Yes, there is a DC offset which is not adjusted by self-cal.

Edit: I have measurement history now. ;D And i think the region (gated) measuring mode is also new. They are in the 2nd page of the measure menu. Is that the unknown option?
« Last Edit: December 13, 2013, 02:26:22 am by sync »
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1921 on: December 13, 2013, 03:42:43 am »

Also, new firmware was released for the DS1000Z scopes a few days ago, any compatibility issues?

It works fine, and fixes a lot of bugs.
 

Offline creyc

  • Regular Contributor
  • *
  • Posts: 81
Re: Sniffing the Rigol's internal I2C bus
« Reply #1922 on: December 13, 2013, 04:52:15 am »

Also, new firmware was released for the DS1000Z scopes a few days ago, any compatibility issues?

It works fine, and fixes a lot of bugs.

Thanks, it seems to be working well here, too. :)
 

Offline skrap

  • Contributor
  • Posts: 29
Re: Sniffing the Rigol's internal I2C bus
« Reply #1923 on: December 13, 2013, 04:55:38 am »
The DSHA option works on my DS1074Z. It's now a DS1104Z. Thanks! :-+ Unfortunately I don't have a real signal generator. Thus I can't measure the bandwidth. But it has a faster rise time now.

I had the 500uV option installed before. Yes, there is a DC offset which is not adjusted by self-cal.

Edit: I have measurement history now. ;D And i think the region (gated) measuring mode is also new. They are in the 2nd page of the measure menu. Is that the unknown option?

The features discovered by Sync seems to be available only in the new firmware (00.02.01 SP1).
 

Offline Marc M.

  • Regular Contributor
  • *
  • Posts: 132
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1924 on: December 13, 2013, 07:23:23 am »
Has anyone had any luck with downgrading the firmware on a 2072 (1.0 H/W) from 00.02.01.00.03 back to 01.01.00.02?  When I plug a flash drive in with the older firmware it doesn't detect it, but it does if I put .03 on the drive via the Boot & Help method.  When I uninstall all the options, my model under system still shows DS2202 not 2072 :(This wasn't an issue with the .02 version which allowed downgrading.  It seems Rigol have prevented doing so in the .03 update.
 
Success!  Thanks Marmad for confirming it should work.  For some reason it didn't like the SD card I was using.  It's the same card I've been using with the scope for both firmware and screen shots since I purchased it.  I used a different card and had no problems with the downgrade  :-//.  However, the scope was still showing a 2202 model number even after downgrading and clearing the FRAM (I had all options uninstalled at the time of the downgrade).  I reinstalled the options then uninstalled them via SCPI, power cycled the scope and the model finally reverted back to 2072.  Now I won't have to worry when I send it in for warranty repairs.
« Last Edit: December 13, 2013, 11:02:44 am by Marc M. »
Don't replace the cap, just empty the filter!
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf