Old firmware for Siglent based Axiomet oscilloscope - Page 1
Forum section: electronics / testgear

author: rteodor
author_rank: Frequent Contributor
timestamp: February 16, 2022, 09:57:41 pm
content: A warm hello to everybody, first post on this forum.I need help to salvage an oscilloscope bought about 10 years ago and that paradoxically is good as new.It is an Axiomet AX-DS1100CFM that has decent hardware for the money: 2 channels, 100MHz, 1Gsa/s, 1Mpts/ch.Software on the other hand ruins the usability quite badly.I mean knobs debouncing is really bad. Trigger sometimes fails every second time or it has random time-shift. And there are many more UI issues that can be fixed in software.It has the original firmware 3.01.01.21.lsusbBus 005 Device 012: ID f4ec:ee38 Atten Electronics / Siglent Technologies Digital Storage OscilloscopebInterfaceClass 220 DiagnosticDisplay is 480x234 so it is not a "+" model.Problem is that I do not know the exact Siglent equivalent and the firmware that that I tried blindly from their siteSDS1000CFL Series Digital Storage Oscilloscopes(Discontinued)SDS1000CFL 2CH Firmware - 5.08.02.38 (Release Date 03.10.15)only returned"Product Type is not acordant!"Well... my English is not perfect either ...I dug quite a lot for a better firmware but I could not find any.It may be that an upgrade path in several steps is needed and that train left years ago.So, maybe, somebody has some stash of old Siglent firmware for SDS1000 series that you could share? Please?

author: tautech
author_rank: Super Contributor
timestamp: February 17, 2022, 12:26:53 am
content: Welcome to the forum.5" or 7" display ?

author: rteodor
author_rank: Frequent Contributor
timestamp: February 17, 2022, 07:56:17 am
content: It is 7''.

author: tautech
author_rank: Super Contributor
timestamp: February 17, 2022, 08:07:24 am
content: Quote from: rteodor on February 17, 2022, 07:56:17 amOk then I suspect it is a SDS1102CML. CFL models didn't have 1Mpts/ch but much less like 40kB which is why we never marketed them.Pop me a PM with your email address and I can send V100R005B01D02P32 and a CFG file to you.However you do say you have a V3 firmware installed whereas the only V3 firmware I have is for the earlier 5" CM models.Meanwhile I'll keep looking through my archives.

author: tv84
author_rank: Super Contributor
timestamp: February 17, 2022, 08:40:56 am
content: Quote from: rteodor on February 16, 2022, 09:57:41 pmIt would be safer if you open the scope and take a pic of the motherboard. Then we would be certain of it.Lookhere. There is a risk in going around flashing some FW packages of that time because some models use the same Product ID and, as such, you are not fully protected against flashing the wrong model FW.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 17, 2022, 09:24:10 am
content: QuoteNot really keen on desoldering NAND chips for reflashing so I will come back with pictures a.s.a.p.

author: tautech
author_rank: Super Contributor
timestamp: February 17, 2022, 09:24:39 am
content: Quote from: tv84 on February 17, 2022, 08:40:56 amNow based on the OP description I'm thinking this instead a rebranded Atten as the firmware versions in this thread are a better match:https://www.eevblog.com/forum/repair/need-full-firmware-(full-dump-flash)-oscilloscope-atten-ads-1062cml/They had CAL and IIRC CML models and if the OP's unit has 1 Mpts x 2 them it's definitely a CML model.I might have some CAL firmware but don't think any Atten CML firmware.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 17, 2022, 02:59:23 pm
content: Got images:It is very similar with this onehttps://www.eevblog.com/forum/testgear/atten-ads-1102cal-photos/(but there are at least some silk screen differencies)

author: tv84
author_rank: Super Contributor
timestamp: February 17, 2022, 03:41:00 pm
content: As tautech hinted, it's precisely this model:https://www.eevblog.com/forum/repair/need-full-firmware-(full-dump-flash)-oscilloscope-atten-ads-1062cml/msg881795/#msg881795Read that thread carefully.It seems a CAL model. SothisFW could be an upgrade. BUT read carefully!

author: tv84
author_rank: Super Contributor
timestamp: February 17, 2022, 08:05:36 pm
content: Quote from: rteodor on February 17, 2022, 09:24:10 amThat would be the least of your problems! The major problem here is that there is no NAND and you can ruin the device's CPLD for which there is no public flash file, AFAIK.

author: tautech
author_rank: Super Contributor
timestamp: February 17, 2022, 08:07:46 pm
content: Quote from: tv84 on February 17, 2022, 03:41:00 pmI'm not so sure.The OP indicates mem depth is 1m x 2 therefore total 2Mpts = CML model as pics from rteodor show the PCB fully populated with memory chips.AFAIK CML can be flashed to CAL however it won't use all the memory available.

author: tv84
author_rank: Super Contributor
timestamp: February 17, 2022, 08:12:44 pm
content: Sorry, I meant an Atten CAL. Not a Siglent CAL. Let me fire up my firmware storage...From past experiences I STRONGLY SUGGEST you stop thinking in flashing a Siglent FW. All of the available model-L ones are versions 5.x.x.x and I think your HW is older than what is necessary to accept those versions.So your best solution is an Atten xxL FW.I have Atten_ADS1000 3.1.1.31R16 firmwares for CAL (80), CL+ (80) and CML (80) models.And that is the biggest problem: all of them use the same Product ID = 80!

author: rteodor
author_rank: Frequent Contributor
timestamp: February 17, 2022, 11:31:13 pm
content: Quote from: tv8Hardware version is the same old as for routerfan and alexitaly: 3-41-1.61.I'm not set on some specific firmware. If Atten firmware would fix the 2 most annoying bugs (knob debouncing and trigger) then I'm happy.Even better: with Atten firmware I might keep using 'attenload' tool to get screenshots via USB.Quote from: tautechYes it is a 2 * 1Mpts/ch.I did not understand if there is different firmware/configuration for memory option or the same firmware makes the detection dynamically ?I just saw in other's pictures that there is another PLD device under the MB (this PLD devices are quite a mystery to me).Do you know what is the function of each (Cyclone and Lattice) ?I want to see how to do a backup and this will take some time.routerfan had a post on JTAG chaining Lattice and Blackfin. But what about Cyclone firmware ? Does it have a JTAG too ?

author: tautech
author_rank: Super Contributor
timestamp: February 18, 2022, 12:39:42 am
content: Quote from: rteodor on February 17, 2022, 11:31:13 pmThere has always been different firmware versions for CNL and CML models so one presumes the memory selection is made in SW however I'm not certain of that. Years ago adding the additional mem chips that your scope seems to have would allow conversion of CNL models to a CML so maybe the additional memory was just detected and used, IDK. You might still find those old threads here if you search.Quotetv84 is your man to advise you on this stuff as I wouldn't know where to start.

author: tv84
author_rank: Super Contributor
timestamp: February 18, 2022, 09:45:10 am
content: Quote from: rteodor on February 17, 2022, 11:31:13 pmThat would be great, for you and the community. Having a dump of a working unit is always a good thing.I think that with a dump you would be safe to try some FWs. I think the Cyclone will not have JTAG.The dump would probably allow me to have a better understanding of which FW is the one.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 19, 2022, 10:10:12 pm
content: It seems that debug support for Balckfin is either dead or dying.I could not get the JTAG working neither with OpenOCD or urJTAG.LATER EDIT:Silly me. It was wiring. I did not put the 3V3 in the right place.Will be back.LATER EDIT 2:We've got bytes.Code:UrJTAG 2021.03 #Copyright (C) 2002, 2003 ETC s.r.o.Copyright (C) 2007, 2008, 2009 Kolja Waschk and the respective authorsUrJTAG is free software, covered by the GNU General Public License, and you arewelcome to change it and/or distribute copies of it under certain conditions.There is absolutely no warranty for UrJTAG.warning: UrJTAG may damage your hardware!Type "quit" to exit, "help" for help.jtag> cable ARM-USB-OCD vid=0x15ba pid=0x002bConnected to libftdi driver.jtag> detectIR length: 5Chain length: 1Device Id: 01100010011110100101000011001011 (0x627A50CB)Manufacturer: Analog Devices, Inc. (0x0CB)Part(0): BF533 (0x27A5)Stepping: 6Filename: /usr/share/urjtag/analog/bf533/bf533warning: ARM-USB-OCD: untested cable, set wait_clocks to 30jtag> initbus bf53x...Code:jtag> readmem 0x20000000 0x800000 dump_11_axiomet_bf53x_0x20000000_0x800000.binaddress: 0x20000000length: 0x00800000reading:addr: 0x20800000Done.I made the dump 3 times and compared MD5 sums. All 3 were the same.Not quite sure if I got the address or the size right because the compressed size should be bigger.dump_11_axiomet_bf53x_0x20000000_0x800000.bin.7z(103.61 kB - downloaded 66 times.)

author: tv84
author_rank: Super Contributor
timestamp: February 20, 2022, 10:02:06 am
content: The dump has good data BUT your 0x00800000 block is 8x the same 0x00100000 block.Try dumping starting at 0.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 20, 2022, 10:38:24 am
content: Code:jtag> readmem 0x0 0x800000 dump_12_axiomet_bf53x_0x0_0x800000.binerror: out of bounds: reading external memory not supportedDatasheet says at 0x0 is external SRAM.So I went to take it bank by bank (4 banks as in the datasheet). Maybe urtag has an addressing issue.But the compressed size is again ~100KB.Then I got also a 8KB dump of the first boundary. Looking inside this dump it seems that it is not contiguous.I have no idea at the moment of what is wrong.

author: tv84
author_rank: Super Contributor
timestamp: February 20, 2022, 10:48:59 am
content: That's why I'm suggesting a read from address 0.Suppose address 0 is a mere offset starting at 0x20000000.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 20, 2022, 11:03:44 am
content: Quote from: tv4Yes but urjtag does not read from 0x0 (error returned).I compressed all dumps from each bank. Look at their sizes:Code:103K Feb 20 12:51 dump_13_axiomet_bf53x_0x20000000_0x100000.bin.7z435 Feb 20 12:52 dump_14_axiomet_bf53x_0x20100000_0x100000.bin.7z450 Feb 20 12:52 dump_15_axiomet_bf53x_0x20200000_0x100000.bin.7z410 Feb 20 12:52 dump_16_axiomet_bf53x_0x20300000_0x100000.bin.7zThe first bank might be ok. The next ones definitely not.

author: tv84
author_rank: Super Contributor
timestamp: February 20, 2022, 11:17:28 am
content: Quote from: rteodor on February 20, 2022, 11:03:44 amAgree. I'll try to parse the BF code in the 1st block just to validate it. But the end is definitely cut. Some detail is missing in your setup... Can't help there, sorry.

author: rteodor
author_rank: Frequent Contributor
timestamp: February 20, 2022, 08:15:41 pm
content: It seems that there is a bank switching method.https://www.eevblog.com/forum/testgear/sniffing-the-rigol_s-internal-i2c-bus/msg3568004/#msg3568004As described there it did not work so I asked in that thread for help.