Sniffing the Rigol's internal I2C bus

[alank2]

DSHH includes a bit no one knows what it does.  DSGH is all bits that are known for 300mhz,can,trig,mem,decode

GH = 00110 00111
HH = 00111 00111

[m-joy]

DSHH includes a bit no one knows what it does.  DSGH is all bits that are known for 300mhz,can,trig,mem,decode

GH = 00110 00111
HH = 00111 00111

Lol the magic bit =) and What about 200mhz for the DSGH combination?

[alank2]

Lol the magic bit =) and What about 200mhz for the DSGH combination?

Neither the 200m or 100m are set in the final "H".  I'm not so sure it is a good idea to set any of the bandwidth ones together, then again I'm not so sure it matters either.  But 300M on its own works so that is the simplest.

[m-joy]

Lol the magic bit =) and What about 200mhz for the DSGH combination?

Neither the 200m or 100m are set in the final "H".  I'm not so sure it is a good idea to set any of the bandwidth ones together, then again I'm not so sure it matters either.  But 300M on its own works so that is the simplest.

Thx. So What is the hex code for all Options and 300mhz but no 200mhz?

[alank2]

Thx. So What is the hex code for all Options and 300mhz but no 200mhz?

I'm using DSGH:  00011 10000 00110 00111

Note the 0's between the 3rd and 4th group.  The last 0 of the third group is the unknown bit.  The first two 0's of the fourth group are the 200m and 100m that are not needed.

[m-joy]

[Thx. So What is the hex code for all Options and 300mhz but no 200mhz?

SYSTEM:OPTION:UNINSTALL

first

"first"?

[apelly]

Thank you so much, the parts in which I am interested are these:

https://www.eevblog.com/forum/testgear/rigol-ds2000-hardware-version-2-0/msg270218/#msg270218
https://www.eevblog.com/forum/testgear/rigol-ds2000-hardware-version-2-0/msg272842/#msg272842

Sorry about the quality.

[neslekkim]

did you jtag dump the device?

[Carrington]

Sorry about the quality.

No problem. Thanks again.

In the input stage they also change a bipolar trt!!! What is the SMD marking code? R2W..? -> BFR93A?

[Carrington]

I think that the input stage was improved, and probably it reach more than 350 MHz.

Will there any v1.0.x.. HW with some of these changes?

[apelly]

did you jtag dump the device?

No bus blaster yet. Will check the mail today. Xmas has stuffed postage in this part of the world.

[Carrington]

Jumpers:

HW v1.0:


A or v2.0:

[Carrington]

Mode 0 and Mode 1?
Also in version 1.0, but for what are they? USB mode? DSP?

[apelly]

In the input stage they also change a bipolar trt!!! What is the SMD marking code? R2W..? -> BFR93A?

This might be a better pic. JPEG compression instead of scaling.

[PA0PBZ]

Oooh, jumpers! Should I? 

[marmad]

No bus blaster yet. Will check the mail today. Xmas has stuffed postage in this part of the world.

The one you ordered ~4 weeks ago which was supposed to arrive 'in a week or so'?  Somebody is screwing with you...

Then again, perhaps New Zealand is the last stop for Worldwide mail...

[Carrington]

This might be a better pic. JPEG compression instead of scaling.

A lot better. Thanks. 

[Carrington]

The one you ordered ~4 weeks ago which was supposed to arrive 'in a week or so'?  Somebody is screwing with you...

Then again, perhaps New Zealand is the last stop for Worldwide mail...

The China-Spain mail takes about 3 weeks to a month.

[neslekkim]

same here, my orders from seeed usually takes around 3 weeks to Norway, it's free or almost free, so I don't complain.

[apelly]

No bus blaster yet. Will check the mail today. Xmas has stuffed postage in this part of the world.

The one you ordered ~4 weeks ago which was supposed to arrive 'in a week or so'?  Somebody is screwing with you...

Then again, perhaps New Zealand is the last stop for Worldwide mail...

Last time I looked at the tracking number (a week or two ago) the bloody thing was in Europe somewhere. uRuler anyone?

Edit:
Misread last time apparently. Shipped by Swiss post. There seems to be no tracking info available. I will follow up after I have checked the mail today.

And you were correct marmad: I did order the bloody thing around a month ago. Time flies.

[Carrington]

Another issue:
The oscilloscope flash probably contain calibration values closely associated with all the characteristics of input stage (a kind of fine settings adjustments). Something like the attached file (from Owon SDS oscilloscopes). So, modify the input stage may not be a good idea.

Or am I wrong? 

[Carrington]

@ apelly:

Have you read this?
https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg350129/#msg350129

Maybe my method (TopJTAG Flash Programmer) to download the flash is not valid for hacking. Cybernet should know better.

[apelly]

Have you read this?
https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg350129/#msg350129

Maybe my method (TopJTAG Flash Programmer) to download the flash is not valid for hacking. Cybernet should know better.

Yes.

Figured I'd cross that bridge when I came to it.

Frankly, I'm surprised nobody else has beaten me to it.

[Carrington]

Have you read this?
https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg350129/#msg350129

Yes.
Figured I'd cross that bridge when I came to it.
Frankly, I'm surprised nobody else has beaten me to it.

LOL...
They are waiting for someone to do it for them.

[Pehtoori]

Figured I'd cross that bridge when I came to it.
Frankly, I'm surprised nobody else has beaten me to it.

LOL...
They are waiting for someone to do it for them.

Or "they" don't have skill to do it, don't have it yet or don't have job so can't lose warranty from 850€ equipment.
I tick at least last 2 of them atm 
Thats why I suggested fundraising to get one to be hacked. I would happily put >=20€  for it...