Topics

TDS784C ROMs


Steve Hendrix
 

I've been lurking here for quite a while, and have seen lots of discussions about saving the contents of the firmware ROMs in case they degrade. I have programmers that go back to the early 80's, so can probably burn a new set if I need to. Finding an old PC that can run them might be problematic, but I still have an original IBM PC with a full complement of interfaces, and it still works. However, I can't find any instructions in the SCPI command set for this instrument that will dump the images. Such a command is usually a hidden function, not advertised to the world. Can anyone here tell me how to dump the ROM images via GPIB?

Steve Hendrix


Monty Montgomery
 

The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix <SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix






Steve Hendrix
 

Google turned up nothing related, so I look forward to hearing at least a few commands that will work. Thanks for the password, that's a start.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix <SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix







Steve Hendrix
 

I'm still looking for instructions on the "hidden" commands to save the ROM contents for my TDS784C, TDS220, and even my HP4263A, HP8595E, and HP8714ET. Google hasn't turned up anything.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix <SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix







Siggi
 

Hey Steve,

there's a thread about this on EEVBlog:
https://www.eevblog.com/forum/testgear/tds-744a-(-friends)-firmware-reverse-engineering/50/.
Sadly it looks like the github repository linked is no more, though
searching for "tekfwtool" does turn up some results. I didn't look any
closer at those results.

Good luck,
Siggi

On Tue, Nov 24, 2020 at 12:32 PM Steve Hendrix <SteveHx@hxengineering.com>
wrote:

I'm still looking for instructions on the "hidden" commands to save
the ROM contents for my TDS784C, TDS220, and even my HP4263A,
HP8595E, and HP8714ET. Google hasn't turned up anything.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix
<SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix











Siggi
 

On Tue, Nov 24, 2020 at 1:28 PM Sigurður Ásgeirsson <siggi@undo.com> wrote:

Hey Steve,

there's a thread about this on EEVBlog:
https://www.eevblog.com/forum/testgear/tds-744a-(-friends)-firmware-reverse-engineering/50/.
Sadly it looks like the github repository linked is no more, though
searching for "tekfwtool" does turn up some results. I didn't look any
closer at those results.

Good luck,
Siggi

On Tue, Nov 24, 2020 at 12:32 PM Steve Hendrix <SteveHx@hxengineering.com>
wrote:

I'm still looking for instructions on the "hidden" commands to save
the ROM contents for my TDS784C, TDS220, and even my HP4263A,
HP8595E, and HP8714ET. Google hasn't turned up anything.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix
<SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix











Steve Hendrix
 

Thank you for trying to help, but none of those links work for me to actually find the commands needed over GPIB to dump the ROMs. Any other hints?

Steve Hendrix

At 2020-11-24 01:30 PM, you wrote:
Hey again,

maybe this helps:
https://web.archive.org/web/20191222171302/https://stackframe.org/tekfwtool/
?

Siggi

On Tue, Nov 24, 2020 at 1:28 PM Sigurður Ã&#65533;sgeirsson <siggi@undo.com> wrote:

Hey Steve,

there's a thread about this on EEVBlog:
https://www.eevblog.com/forum/testgear/tds-744a-(-friends)-firmware-reverse-engineering/50/.
Sadly it looks like the github repository linked is no more, though
searching for "tekfwtool" does turn up some results. I didn't look any
closer at those results.

Good luck,
Siggi

On Tue, Nov 24, 2020 at 12:32 PM Steve Hendrix <SteveHx@hxengineering.com>
wrote:

I'm still looking for instructions on the "hidden" commands to save
the ROM contents for my TDS784C, TDS220, and even my HP4263A,
HP8595E, and HP8714ET. Google hasn't turned up anything.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix
<SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's, so
can probably burn a new set if I need to. Finding an old PC that can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works. However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here tell me
how to dump the ROM images via GPIB?

Steve Hendrix












Siggi
 

Hey Steve,

I didn't read the code in detail, but it looks to me that the firmware
dump and write is done with what looks like binary reads and writes. From
what I understand or remember, the scope has to be in "unprotected" mode,
and then you use this binary protocol to read and write from the scope's
memory. See
https://www.eevblog.com/forum/testgear/tds-744a-(-friends)-firmware-reverse-engineering/msg1170142/#msg1170142
.
There is however another way this could be done, I think, though it's sure
to be painfully slow. If you look at this thread,
https://www.eevblog.com/forum/testgear/enabling-option-1m-extended-acquisition-memory-tektronix-tds754a/,
it mentions the WORDCONSTANT:ATPUT command. I seem to remember there's a
complementary :ATGET or the like - I remember playing with this back when I
messed with the options on my TDS784D.
Knowing the address space layout on the scope, it should be possible to
read back the firmware byte by byte or word by word through this command.
Going to be dog slow, though.

Have fun,
Siggi

On Fri, Nov 27, 2020 at 11:31 AM Steve Hendrix <SteveHx@hxengineering.com>
wrote:

Thank you for trying to help, but none of those
links work for me to actually find the commands
needed over GPIB to dump the ROMs. Any other hints?

Steve Hendrix

At 2020-11-24 01:30 PM, you wrote:
Hey again,

maybe this helps:
https://web.archive.org/web/20191222171302/https://stackframe.org/tekfwtool/
?

Siggi

On Tue, Nov 24, 2020 at 1:28 PM Sigurður Ã&#65533;sgeirsson <
siggi@undo.com> wrote:

Hey Steve,

there's a thread about this on EEVBlog:
https://www.eevblog.com/forum/testgear/tds-744a-(-friends)-firmware-reverse-engineering/50/
.
Sadly it looks like the github repository linked is no more, though
searching for "tekfwtool" does turn up some results. I didn't look any
closer at those results.

Good luck,
Siggi

On Tue, Nov 24, 2020 at 12:32 PM Steve Hendrix <
SteveHx@hxengineering.com>
wrote:

I'm still looking for instructions on the "hidden" commands to save
the ROM contents for my TDS784C, TDS220, and even my HP4263A,
HP8595E, and HP8714ET. Google hasn't turned up anything.

Steve Hendrix

At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need
for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...

Monty

On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix
<SteveHx@hxengineering.com> wrote:

I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's,
so
can probably burn a new set if I need to. Finding an old PC that
can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works.
However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here
tell me
how to dump the ROM images via GPIB?

Steve Hendrix