CRTU-RU software - Page 1
Forum section: electronics / testgear

author: fisafisa
author_rank: Regular Contributor
timestamp: October 10, 2015, 01:04:11 pm
content: Hi allI have bought one of these monsters from ebay.It comes with the dos opsw version 3.23.I have read the posts from this july.Anybody got ahead with improving usability of the instrument?Linux, gpib etc?Is there a windows version of the dos opsw?As it is the windows partition is almost useless.RegardsFilippo

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 09:11:20 am
content: Version 4.35 is the last version I have.....and the 5.xx cersion you mentioned couldn't be installed from PCMCIA card as it complained that untgz.exe is corrupt....Maybe the CMU200 firmware is not compatible with the CRTU-RU...Speaking of Linux and so on...that's why I currently have two of those CRTU-RUs....one for reverse engineering and hopefully one day running Linux....

author: fisafisa
author_rank: Regular Contributor
timestamp: October 11, 2015, 11:38:08 am
content: Any progress on the linux front?I definitely support your idea of putting linux there!CiaoBTWI was able to extract the files from the intallation package.the untgz program simply hangs.I have used dosbox to create a dos environment where to play with the R&S files.Infact I had to manually join the archive parts copy /b archiv.000 + archiv.001 + ......This should have been performed by the archive.exe program which did not work. Maybe the dosbox emulation is not good enough.Then I tried with the untgz.exe which hang without completingUsing a modern windows program I was the able to uncompress the file.

author: fisafisa
author_rank: Regular Contributor
timestamp: October 11, 2015, 11:42:17 am
content: For anybody reading that might be interested:I found version 5.21 from the R&S website (base sw)http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocumentand version 5.22 of GSM swhttp://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr003z?OpenDocumentmain question, for me, is whether I can use these in my CRTU-RU

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 12:12:48 pm
content: Not much there to see on the Linux front.....have to pick up frist a USB to IDE Adapter for testing...unfortunately the CRTU-RU can't be booted from USB sticks or USB CDROMs.But sure I document the progress as well as pictures from the inside to a new site I just registered a domain name...(will be hosting other measurement stuff as well there ;o)

author: fisafisa
author_rank: Regular Contributor
timestamp: October 11, 2015, 12:20:41 pm
content: Let me know if you need help in your porting to linux.I am looking forward to your websiteCiao

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 12:22:37 pm
content: At least I kept an old IDE CDROM drive....think I might hook it up today and try booting a Linux CD and see what "dmesg" reports....

author: fisafisa
author_rank: Regular Contributor
timestamp: October 11, 2015, 02:15:33 pm
content: The main issue will be to reverse engineer windows drivers.The good news is that we have the apis.One would expect that the apis will simply call funcions exported by the drivers....

author: Wuerstchenhund
author_rank: Super Contributor
timestamp: October 11, 2015, 02:46:58 pm
content: Quote from: davorin on October 11, 2015, 12:12:48 pmAll CMU200 and all CRTU-RUs (except those with the old FMR5 controller with AMD K5/K6 CPU) can boot from USB drives. I've booted mine from USB CDROM many times.

author: Wuerstchenhund
author_rank: Super Contributor
timestamp: October 11, 2015, 03:02:21 pm
content: Quote from: davorin on October 11, 2015, 09:11:20 amCMU200 and CRTU-RU use the exact same DOS software and updates.Quote from: fisafisa on October 11, 2015, 11:38:08 amDOSBox isn't a good tool as its made for DOS games mostly, plus the CRTU/CMU200 run DOS Embedded with a special virtual memory manager.If the archive on those links you found (which look very much like abandoned parts of the R&S website and may or may not contain working software) are complete then you have to update the software with the Version Manager on the CRTU/CMU200. If the update via Version Manager doesn't work then it's very likely that the package is corrupt/incomplete.QuoteAs stated in earlier post the CRTU-RU is a pretty complex instrument, using proprietary ASICs which are completely undocumented, so while you can certainly run Linux on the FMR (controller PC) it's IMHO overly optimistic to believe that you can control any of its test and measurement hardware through it. It's magnitudes more complex than say hacking some Rigol firmware to unlock software options.I'd rather focus on writing some better Windows software for it, which is much easier as Windows drivers for the hardware exist, the programming interface is documented and most CRTU-RUs even come with a copy of Microsoft Visual C++.

author: fisafisa
author_rank: Regular Contributor
timestamp: October 11, 2015, 04:06:32 pm
content: I could post CRC and sizes of all the files in the package to check whether they are ok.Anybody willing to check them?As for the software, I quite agree with Wuerstchenhund worries about the complexity of the endeavour.Having linux on it would be more than great, but we could also use wine as a way to load and execute windows dll under linux.The main issue remain the drivers which need to be reverse engineered, which is tough.My CRTU says pentium III when booting, I guess that is one of the new versions that can boot off usb.Any way to access the bios setup?I tried F2 or esc but with no success.RegardsFilippo

author: tmbinc
author_rank: Frequent Contributor
timestamp: October 11, 2015, 05:00:22 pm
content: I tend to be less optimistic for reverse-engineering the Windows drivers, and more optimistic in reversing/extending the DOS software.The Windows software is optimized towards GSM functionality. The RF functionality is very basic, essentially very little more than "tune path 1,2 to txfreq x, rxfreq y, with attenuations a,b" is exposed. Frequency Sweeping (necessary for the spectrum analyzer) is not exposed, for example. (Or I missed it.)The DOS OPSW, at least the main software (i.e. not the tools), is a "modular" 32-bit system (using the PharLap extender; it's basically simulates a Win32 environment in DOS, so it shares the PE file format and some more things). Many symbols are exported, helping disassembly. For example the GSM functionality is a bunch of DLLs that get runtime-linked and provide the GSM features. It should be possible to add custom modules that neatly integrate into the main UI.,Also there is, as far as I know, only a single ASIC in the system - the DDC chip. Everything else is "just" FPGAs (which tend do only do glue-logic/interfacing, and not a lot of functionality), or DSPs (which custom code, of course).So, writing software (running under Linux for example) that uses the device can be accomplished. Sure it's harder than just hacking existing software. But this wouldn't be the first device where a linux-based replacement firmware was written for. Examples are d-Box II, gaming consoles, iPod, ... It's possible, it's just a lot of work.

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 05:06:05 pm
content: Speaking of ASIC/FPGA....what is exactly reprogrammed when switching the version in version manager?

author: G0HZU
author_rank: Super Contributor
timestamp: October 11, 2015, 05:24:37 pm
content: QuoteAlso, you have to decide if you are spending all this time polishing a turdThese CMU/CRTU instruments are not that great in terms of RF performance because they are heavily compromised towards being basic go/no go testers for mobile phones. Sure, you get an analyser, sig gen and power meter but the performance they offer is mediocre at best.So I would argue that they simply aren't worth the time and effort involved unless you just want to do the work as a learning exercise or if you wanted to make a profit from the work by selling it on to others. Even if you end up with complete control of the instrument you are stuck with mediocre performance because the overall hardware platform is so compromised.If you added up all the hours it would take and then charge yourself at just $20/hour you would end up 'paying' a huge cost to just polish that obsolete turd

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 05:48:49 pm
content: Well..if someone would offer me an electronic/software/network job that pays me for 100 hours I could easily afford a nicer instrument (o;For me curiosity is the best teacher....so need to keep my brain occupied (o;

author: tmbinc
author_rank: Frequent Contributor
timestamp: October 11, 2015, 07:50:06 pm
content: As so often, money is the wrong way to think about a problem. But let's say we'd do the math. Let's say I spent a ridiculous amount of 1000 hours on this project, and let's say we could make it wonderful things. At $20/h, that's 20k. In terms of R+S list price (since we're talking time == money, we also need to talk about list prices), I don't think you can buy a lot of tech that does wonderful things for ~$12k (=$20k minus taxes).And I disagree with G0HZU's assessment of the turd-ness of the device, for the record.

author: davorin
author_rank: Unknown
timestamp: October 11, 2015, 07:55:34 pm
content: +1 for you :-)

author: Wuerstchenhund
author_rank: Super Contributor
timestamp: October 11, 2015, 10:04:13 pm
content: Quote from: tmbinc on October 11, 2015, 07:50:06 pmYou're not alone, I, too, disagree with that statement. Actually, the RF performance of CRTU and CMU200 actually isn't that bad, and in general performs much better than say the Rigol DSA815 which doesn't seem to attract similar criticism (but then it's not sold as cell phone tester). The RF generator performs at least roughly similar to many entry-level RF generators in the same frequency range. Which at the end of the day isn't that surprising considering that these devices weren't exactly cheap (a basic CRTU-G sold for in excess of $150k, the WCDMA variants for closer to $250k), so we're not talking about some primitive WaveTek GSM testers for cell phone shops here.I'd say for the money these devices go for these days they're pretty much unbeatable. I do have a very good lab grade standalone SA (R&S FSP, which even out-perfoms the venerable HP 856x Series) but often find that the CRTU is good enough, plus it boots much faster.

author: G0HZU
author_rank: Super Contributor
timestamp: October 11, 2015, 10:56:41 pm
content: If you spent a 'lot' of free time on writing code for this instrument you are still constrained to a platform with poor spurious performance, poor phase noise, limited capture bandwidth and (I'm guessing) 12bit technology in the IF ADC and the IQ modulator.I would argue that someone with the time and talent to do this work would be far better off looking forwards with new (chipset?) technology rather than backwards at this old test set.But at the end of the day it's up to the individual to decide...QuoteFor basic use of the various HW features it offers yes, but would you really want to spend a whole lot of time rewriting code for them considering the performance limitations of the hardware?QuoteFWIW the FSP analysers are medium class analysers rather than high end. Try measuring a fairly decent 4GHz oscillator for phase noise at 100kHz offset with the FSP. They aren't really designed for that because they compromise the synthesiser performance against cost. The dynamic range of the RF converter isn't that great either and the specs betray the obvious design compromises in the RF converter section when compared against a genuine high end analyser.I basically wouldn't want to use the FSP series for everyday RF design work but I'd be happy to still use something from the HP856x range despite the lack of a modern digital IF. I think we have some FSP type analysers in the test dept at work but having looked at the specs I don't think I'll rush over to play with one

author: Wuerstchenhund
author_rank: Super Contributor
timestamp: October 12, 2015, 05:35:21 am
content: Quote from: G0HZU on October 11, 2015, 10:56:41 pmNo, I wouldn't, especially since the existing software already works well enough and the user doesn't have to fight through cell phone testing specific menus as on other cell phone testers. So I would agree with you that this is pretty much a waste of time.QuoteYes, the the FSP is a mid-range SA but it's a mid-range SA as of 2008 while the HP 856x were high end SAs back in the 1980's, and while the working principle of both is roughly the same, technology has improved noticeably in the roughly 35+ years since the the HP came out. The truth is that the HP 856x's performance is no longer high-end and looks a bit paltry when compared with a modern day high end SA like the R&S FSW or the older FSU Series, or even against the pretty old FSIQ (which came out in 2001).The RF performance of the FSP Series is just fine, even more so for the later FSP models with FMR7 (which run XP instead of NT for the older models), as is it's phase noise, plus the FSP Series covers a much larger bandwidth (up to 40GHz). What the FSP lacks is some more advanced signal analysis capabilities (i.e. I/Q measurements) but then that was never available for the 856x boat anchors either.QuoteI wouldn't use it for everyday RF design at work but that's similarly true for the 856x either, as both lack analysis functionality I need. I certainly wouldn't hesitate to use the FSP for some simpler measurements for which I wouldn't touch a 856x any more, simply because it's large, loud, slow, and has been out of support for over a decade while the FSP is compact, silent, pretty fast (aside from booting), fully supported and offers similar RF performance.But each to their own I guess.Don't get me wrong, the 856x were great back in the days, and still offer good RF performance, but they pretty much have had their days, and are no longer the gold standard that they once were.

author: G0HZU
author_rank: Super Contributor
timestamp: October 12, 2015, 01:35:12 pm
content: QuoteSure, the FSP has various modern advantages compared to an old school swept analyser (eg a digital IF with extremely good log performance and a modern DSP engine) but its RF converter performance will not be in the same class in terms of far out phase noise, IP3 and 2HI across the frequency range of the analyser.-108dBc/Hz typical phase noise at 100kHz offset at CF of 3GHz.-118dBc/Hz typical phase noise at 1MHz offset at CF of 3GHz.This is not lab grade performance. Even my ancient 8566 (HP's dev for this analyser began in the late 1960s) will be typically 10dB better than this and the 8566 phase noise performance isn't particularly stunning. I have a very old HP8566A/B here and it shows about -119dBc/Hz at a 100kHz offset here. It also shows -134dBc/Hz at a 1MHz offset at 3GHz CF when driven by an E4433B sig gen.That's 16dB better than the published typical performance of the FSP at this frequency and a 1MHz offset. Note that I don't know if the sig gen phase noise is the limit here or the analyser itself. Something like the 12-15 year old Agilent PSA could be about 10dB better than the 8566 here.Also, have a look at how much the performance of the FSP falls away at low frequencies. eg noise floor and linearity. This is a clue towards the design compromises in its RF converter. However, it looks to be highly portable and has modern connectivity etc so I'm sure R&S sold quite a few of them.

author: tmbinc
author_rank: Frequent Contributor
timestamp: October 12, 2015, 01:48:10 pm
content: Back to to the original topic, I was able to install the downloaded base software on my CRTU using the following steps:1. Unpack BASEV5.21.exe; you'll get a number of ARCHIV.0?? files, and a CONFIG.INI (and a couple of more files)2. copy /b ARCHIV.0?? archiv.tgz3. un-gzip; depending on the tool, you may get a "trailing payload" warning.3. Boot the CRTU into Windows. On the DOS OPSW partition (containing "CMU" etc.), create \CMU\BINV5.21.4. Copy all files from "archive" into there - it will end up with \CMU\BIN_V5.21\BASE\bsw\dll etc.5. Copy CONFIG.INI into \CMU\BIN_V5.21\CONFIG.INI6. Optionally, unpack the GSM stuff, and add "GSMSV5.22" to CONFIG.INI7. reboot into DOS OPSW, and keep pressing MENU/SELECT to enter version manager8. "Activate Software"9. It should list V5.21; select it, and activate it. (It will take a while)10. If you get a "FATAL ERROR" about not being able to open "REFTREE.DAT", press alt-f4 (exit DOS OPSW to dos prompt), go into C:\CMU\BIN_V5.21, and run "tools\reftree", it will create tools\reftree.dat. Reboot.

author: davorin
author_rank: Unknown
timestamp: October 12, 2015, 02:00:14 pm
content: Great finding :-)Any new stuff/features found so far in 5.21?

author: fisafisa
author_rank: Regular Contributor
timestamp: October 12, 2015, 02:13:18 pm
content: ...you have beaten me to it.Was just about to add the missing config.ini and try again.Well any new feature?Ciao F

author: fisafisa
author_rank: Regular Contributor
timestamp: October 12, 2015, 02:52:06 pm
content: it worked.did not see any new feature yet.f

author: davorin
author_rank: Unknown
timestamp: October 12, 2015, 02:54:02 pm
content: Hmm...isn't there a "release note" in the archive as well?

author: fisafisa
author_rank: Regular Contributor
timestamp: October 12, 2015, 04:58:44 pm
content: 1. support of new CMU hardware boards:CMU-B21v14 1135.4580.02CMU-B66/B68 1135.5070.53Digital Board 1100.1956.05 and product index: >=10.022. new SW option CMU-K49 2G continuous sync3. selftest internal loopback supports new frontends (1100.3120.02, product index >=10.03)1. Frequency dependent external attenuation has 100 instead of 50 steps now, RX and TX are configurable seperately2. Tool for easier retrievement of log files at the command prompt3. Support of Power Quicc III module CMU-B56var54 for CMU var10 (service tester)1. Support of new CMU hardware boards:CMU-B21v14 1135.4580.02CMU-B66/B68 1135.5070.53Digital Board 1100.1956.05 and TAZ: >=10.022. Support of Power Quicc III module CMU-B56var54 for CMU var10 (service tester)1. support of new software options CMU-K18, CMU-K19, CMU-K251. new Rf spectrum command CONFigure:SPECtrum:CONTrol:MODe[?] to set the display mode (CUR, AVG, MIN, MAX)1. Support of the software option CMU-K901. Support of CMUs equipped with a FMR72. New mode for GPIB subarray commands: average power (PAVG)3. At the DOS prompt the US keyboard is active by default1. SW options CMU-K42 and CMU-K43 (GPRS/EGPRS) are available for CMU200var30 now2. in the remote mode report display, the output can be filtered to show measurement results only1. FMR processor is correctly displayed at Setup->Hardware Equipment

author: davorin
author_rank: Unknown
timestamp: October 12, 2015, 05:02:27 pm
content: Ah right...there is a PowerPC running Linux inside...not sure what it does though (o;

author: fisafisa
author_rank: Regular Contributor
timestamp: October 15, 2015, 08:51:42 pm
content: Ah.... I am still very confused about this instrument.But I am slowly learning.So my instrument has in fact 2 RXTX modules.The option second RF channel is active.In fact I can choose which RF path to use. 1,2 or auto.But if I have 2 RX and 2 TX, how can I activate them at the same time?We have got 4 ports so it should be possible, by I have not found how to.Otherwise, what is the point of having 2?I am sure there is a good explanation to all of this.In the mean time I am digging into the documentation I found scattered in the hard-diskhoping to find a clue somewhere.Filippo

author: fisafisa
author_rank: Regular Contributor
timestamp: October 15, 2015, 10:04:25 pm
content: Looking into the CMU200 manual it appears that in the CMU200 whenoption B95 is installed (a second RX TX board)the software allows you to setup the second channel independently.Infact with option B96 one also adds some other 2 low power RF channels so that one has 4 independent sources!Now it is a mistery why the software does not recognise the second channel....Filippo

author: tmbinc
author_rank: Frequent Contributor
timestamp: October 16, 2015, 01:35:23 pm
content: I think the second RF path is only supported (in DOS OPSW) when you use the CRTW features (which isn't much more than allowing to tune to a channel, as all other processing is done on the CRTU-PU).

author: fisafisa
author_rank: Regular Contributor
timestamp: October 16, 2015, 03:32:30 pm
content: HICRTW features?On a very similar hardware (CMU200: if not the same in fact) the same software allows setting up two transmitters.....I wonder how it detects the difference.CiaoFilippoPS anybody with windows software compatible with version 4.3 or version 5.2 of DOS OPW??

author: fisafisa
author_rank: Regular Contributor
timestamp: October 19, 2015, 07:06:38 pm
content: DOS software for the CRTU supports a number of devices:"CMU 200-1100.0008.02""CMU 200-1100.0008.10""CMU 200-1100.0008.30""CMU 200-1100.0008.53""CMU 200-1100.0008.83""CMU 300-1100.0008.03""CRTU-RU 1138.4000.XX""CBT-1153.9000.35""CBT32-1153.9000.32"The software also support AUX TX channel which is option B95 B96 of CMU200This is not unfortunately the same as CRTU-RU which has two TXRX modulesThese options provide one to two extra channels but significantly crippled compared to a full RXTX moduleCMU200 and CRTU-RU share a good deal of the components.Infact I did not identify any major difference yet.CRTU-RU has more stuff, but now with the DOS software we cannot use it fully.I need now to study the Windows software....

author: Velund
author_rank: Regular Contributor
timestamp: November 27, 2016, 03:10:15 pm
content: Hi all!Just browsed around and found links to all CMU200 updates on chinese R&S site...http://www.rohde-schwarz.com.cn/index.php?id=541Replace FileTran.nsf to FileTranCS.nsf in a URL where R&S will forward your browser.Manuals is also there (though, links from software dl pages is incorrect, but knowing the file alias and general idea you'll find it). All files will become unavailable sometime in 2017, so I make a backup copy at once.The only manual with "out of sync" alias is CDMA2K - alias is sr009m instead of sr009m2...But now the question - was someone able to build a boot drive for a unit with failed HDD just from set of updates? I not yet received my failed CMU200, but description (does not boot, repeating scratching sounds) leave little options.Maybe someone have a backup of boot partition handy?

author: luisprata
author_rank: Regular Contributor
timestamp: November 27, 2016, 04:17:04 pm
content: I made a copy of my CMU HD into a SDCard and tested it. It boots and works. If you need it let me know.

author: Bicurico
author_rank: Super Contributor
timestamp: January 07, 2018, 07:26:16 pm
content: Hi,I think I requested this in a different thread already, but got no reply.Taking another go... Hopefully with more luck.I have a CRTU, everything is OK, but the Windows 2000 partition is empty software-wise.I did get hold of drivers and they are installed and recognized. But I have no test application. I know that they are mostly useless, still I wonder if some CRTU owner would be so nice and share his application folder with me?Thanks,Vitor