Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1923975 times)

0 Members and 5 Guests are viewing this topic.

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2225 on: December 29, 2013, 11:05:18 am »
Did not try the "DSFR All Options" though because it is described as "turns it into a DS1104Z".
I do not want it to turn into a DS1104Z ! Not without the -S !
Where's DSFR described as turning it into a DS1104Z?
Nono of the option keys doesn't turn an -S model into a non-S model. DSFR just changes add all options including changing the BW from 70 MHz to 100 MHz.
But since you already have all the other options installed you can just use DSEA, all it does is to change the BW from 70 MHz to 100 MHz. http://riglol.3owl.com
« Last Edit: December 29, 2013, 11:12:17 am by AndersAnd »
 

Offline tirulerbach

  • Contributor
  • Posts: 33
Re: Sniffing the Rigol's internal I2C bus
« Reply #2226 on: December 29, 2013, 12:35:42 pm »
Hello,

two more dumps...  Both are DS2202A unmodified, firmware 00.02.01.00.03  :-DD

a.) boot-loader mode via the help-key during switch on:
 https://mega.co.nz/#!fY8j2RKJ!EIiEBAYmCJ_4pIpJNB2X7BBpQ30M5BC8-QF3rmoloZ0

b.) normal operating mode, dialog to enter a key open, filled with AAAAAAA BBBBBBB CCCCCCC DDDDDDD and pressed the Apply button once:
 https://mega.co.nz/#!Wd0TDTqT!Zu4l9n1XZETTz39NYvnJ4TpveBUKOquEqPrhOVrCpYI

Now somebody should take a look with a debugger...  8)
« Last Edit: December 29, 2013, 12:41:09 pm by tirulerbach »
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #2227 on: December 29, 2013, 03:18:27 pm »
The earlier thing said there was 16mb of flash which is not in the dumps.  Is this memory banked in and out in the async area somehow?
 

Offline nerdms

  • Newbie
  • Posts: 3
Re: Sniffing the Rigol's internal I2C bus
« Reply #2228 on: December 29, 2013, 03:56:05 pm »
Hi, I have the DS2072 with HW version 2.0 and FW version 01_01_00_02.  I used the DSAZ to generate the key and everything seems to have gone fine (all options enabled) but I discovered that the vertical and horizontal position knobs are acting funny.  If I move the vertical knob in one direction then it always moves in that direction no matter which way I rotate the knob and the horizontal always moves in one direction.  I updated the FW to 02_01_00_03 thinking that would fix the issue but nope.  Pushing the knobs centers everything fine.  Has anyone encountered that?  Very weird.

Thanks.

After sleeping on it I tried it again (resetting by hitting the f6 key, re-installing the 2.0 FW and recreating a key this time with DSHH) and still nothing.  I couldn't figure out why this was occurring since installing an option key should have not caused this.  So I connected my probe to the compensation terminal and started playing with the scales going up and down the ranges.  All of a sudden I noticed that the position knobs were working again!  I can't figure out why this is working now but it is.  Maybe something goes loopy when the options are installed?  Or something in the firmware makes it go off?  I don't know but messing with the scales seems to have fixed it.

So I went to take pictures of my versions and options to post and I guess I'm one of the non A versions to have my scope turn to the 2302 model.  Haven't tested it yet but my option screen does show the 300MHz option.

Sam.
 

Offline cybermaus

  • Frequent Contributor
  • **
  • Posts: 699
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #2229 on: December 29, 2013, 06:11:26 pm »
Where's DSFR described as turning it into a DS1104Z?
Well, it was this message (if you read it with some paranoia)

I am cautious, because while the DS1000Z seems to be mentioned a lot in this thread, the DS1000Z-S seems less common, and I do not want to be the first to discover how to brick one by carelessly assuming they are the same.

Anyway, I already grabbed and stored the 100MHz code, thanks. I will probably apply it if I either need 100MHz, or if I cannot control the nerd in me, whichever comes first. (probably the latter)

 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #2230 on: December 29, 2013, 08:27:59 pm »
Hello,

two more dumps...  Both are DS2202A unmodified, firmware 00.02.01.00.03  :-DD

a.) boot-loader mode via the help-key during switch on:
 https://mega.co.nz/#!fY8j2RKJ!EIiEBAYmCJ_4pIpJNB2X7BBpQ30M5BC8-QF3rmoloZ0

b.) normal operating mode, dialog to enter a key open, filled with AAAAAAA BBBBBBB CCCCCCC DDDDDDD and pressed the Apply button once:
 https://mega.co.nz/#!Wd0TDTqT!Zu4l9n1XZETTz39NYvnJ4TpveBUKOquEqPrhOVrCpYI

Now somebody should take a look with a debugger...  8)

thx- im going to have a look on various upcoming plane flights ;)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline zombie28

  • Regular Contributor
  • *
  • Posts: 69
Re: Sniffing the Rigol's internal I2C bus
« Reply #2231 on: December 29, 2013, 11:38:05 pm »
I found function that loads alternative public key in DS2K-A firmware. The new public key is 0xA51BF373712F7D and the private key (that matches old Rigol ECC parameters) is 0x888E77EE47C50A. I don't have DS2K-A scope yet, so I can't confirm if this key will work with existing keygens.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #2232 on: December 29, 2013, 11:40:42 pm »
I found function that loads alternative public key in DS2K-A firmware. The new public key is 0xA51BF373712F7D and the private key (that matches old Rigol ECC parameters) is 0x888E77EE47C50A. I don't have DS2K-A scope yet, so I can't confirm if this key will work with existing keygens.

Nicely done!  ;)  I'm curious as to whether it works.
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2233 on: December 29, 2013, 11:46:02 pm »
is there a way I can test that?
 

Offline zombie28

  • Regular Contributor
  • *
  • Posts: 69
Re: Sniffing the Rigol's internal I2C bus
« Reply #2234 on: December 30, 2013, 12:22:48 am »
is there a way I can test that?

You can use this site: http://riglol.3owl.com and check if your DS2K-A scope will accept generated license code.
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2235 on: December 30, 2013, 12:31:08 am »
just to avoid troubles:
all I have to do is entering the private key, serial (of course) and DSHH?
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2236 on: December 30, 2013, 12:34:35 am »
just to avoid troubles:
all I have to do is entering the private key, serial (of course) and DSHH?
I would think so yes.
And remember leave out 0x part, so just paste 888E77EE47C50A in the private key field.
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2237 on: December 30, 2013, 12:39:10 am »
ok, I found out about the 0x before I read your reply lol

it says licence is unavailable
 

Offline MrsR

  • Regular Contributor
  • *
  • Posts: 118
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #2238 on: December 30, 2013, 12:41:52 am »
Hi! Guys,
I've been a bit lazy :=\ ( might be all the Turkey I been eating ) anyway I was doing some work with my updated 72 to 302 and found that I couldn't record the waveforms I was working on.
I should add that I had the DSO Band Width set on 20MHz.

Also I don't use AUTO on my scopes, prefer to set the DSO to what I want, anyway I tried to use AUTO and all I got was a blank screen and then after a few tries a menu outline with no instructions. :-//

Has anyone had any problems like that on a modified DS2072 ??.
I have a stack of work to do and will get back to it next weekend I am not really worried about the AUTO part but not being able to record and save the output is a big worry. It isn't a DSO if I can't store on it. It might have been turned into a DO Scope. I can still capture screenshots on USB Sticks but I need the storage so I can study and send the test results to others on the team. Nearly all our work is shared by Video conferencing. Someone said they had problems with adjusting voltage height, I haven't had that problem.
Also has there been other problems after changing from lower Band Width to 300MHz.
Thanks Guys
Rachael :-+ Keeping a positive outlook
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2239 on: December 30, 2013, 12:47:28 am »
ok, I found out about the 0x before I read your reply lol

it says licence is unavailable
Try to see if some of the other DSxx codes listed works:
Quote
DS2000 device options:
first character: D = official, V = trial
DSAB - Advanced Triggers
DSAC - I2C, SPI and RS232 Decoders
DSEA - CAN Decoder
DSAE - 56M Memory
DSAJ - 100MHz
DSAS - 200MHz
DSCA - 300MHz
DSHH - all options
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2240 on: December 30, 2013, 12:56:08 am »
tried DSHH, CAN and advanced triggers, all unavailable

serial is 13 digits, right?

I noticed that only the 3rd and 4th part of the code changes (if I use a different serial and/or option)
« Last Edit: December 30, 2013, 12:58:47 am by NikWing »
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2241 on: December 30, 2013, 01:06:04 am »
I noticed that only the 3rd and 4th part of the code changes (if I use a different serial and/or option)
That's because the first two letters are always DS. If you change the first two letters to something else the 1st and/or 2nd part of the generated key will change too.
 

Offline NikWing

  • Regular Contributor
  • *
  • Posts: 141
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #2242 on: December 30, 2013, 01:11:25 am »
ok, just wanted to make sure that everything is working so far XD
hmm ...
 

Offline poida_pie

  • Regular Contributor
  • *
  • Posts: 119
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #2243 on: December 30, 2013, 01:33:26 am »
deleted

« Last Edit: December 30, 2013, 03:33:29 am by poida_pie »
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2244 on: December 30, 2013, 01:38:56 am »
Not sure if this is already known and if this is the thread to post it, but anyway

BUG in latest f/w, 02.01

...
Marmad already keeps track of all DS2k firmware bugs in another topic here: https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg158684/#msg158684
So the best is probably to delete your post in this topic again and post it in the other topic instead.
« Last Edit: December 30, 2013, 03:36:30 am by AndersAnd »
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2245 on: December 30, 2013, 07:45:58 am »
 

Offline Fagear

  • Regular Contributor
  • *
  • Posts: 83
  • Country: ru
Re: Sniffing the Rigol's internal I2C bus
« Reply #2246 on: December 30, 2013, 07:57:28 am »
I found function that loads alternative public key in DS2K-A firmware. The new public key is 0xA51BF373712F7D and the private key (that matches old Rigol ECC parameters) is 0x888E77EE47C50A. I don't have DS2K-A scope yet, so I can't confirm if this key will work with existing keygens.
Tried it on my DS2072A, converted to DS2202A with no options (via old FW and old private key).
Generated keys for DSHH and DSAZ - no luck, "License is unavailable!".
 

Offline EV

  • Frequent Contributor
  • **
  • Posts: 525
  • Country: fi
  • Aficionado
Re: Sniffing the Rigol's internal I2C bus
« Reply #2247 on: December 30, 2013, 08:47:39 am »
How is it possible to uninstall only one option?
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #2248 on: December 30, 2013, 12:01:06 pm »
How is it possible to uninstall only one option?
I think you have to uninstall all options with ":SYSTem:OPTion:UNINSTall" and then only reinstall the options you want again.
 

Offline EV

  • Frequent Contributor
  • **
  • Posts: 525
  • Country: fi
  • Aficionado
Re: Sniffing the Rigol's internal I2C bus
« Reply #2249 on: December 30, 2013, 12:20:01 pm »
That's what I was afraid of.  ;D

I think you have to uninstall all options with ":SYSTem:OPTion:UNINSTall" and then only reinstall the options you want again.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf