Ideofy LA-08
The Ideofy LA-08 is a USB-based, 8-channel logic analyzer with a max. samplerate of 96Msps@2ch (or 60msps@4ch, or 30msps@8ch).
See Ideofy LA-08/Info for more details (such as lsusb -vvv output) about the device.
Hardware
- CMOS EEPROM-based programmable logic device (CPLD): Altera EPM3032A TC44-10N, MAX 3000A family (datasheet)
- USB high-speed USB peripheral controller: Cypress CY7C68013A-56LFXC (FX2) (datasheet)
- 2K I2C EEPROM: Microchip 24LC02B (datasheet)
- 600mA low-dropout voltage regulator: iDESYN iD9302 (datasheet)
- 24MHz crystal: TXC 24.0
Photos
TODO.
Protocol
Firmware upload
The usual mechanism for uploading firmware to Cypress FX2 chips is used.
Query info / serial number (?)
A control transfer (direction: device->host, type: vendor-specific, request: 0xc2, value: 0x0000, index: 0x0000, length: 0x0020).
The 0x20 (32) bytes received contain the device's serial number as printed on the box (7 ASCII characters), and some other, unknown info.
Example:
0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
Note: Only the serial number location is marked, not all bytes are 0x00!
Starting an acquisition
To start an acquisition with a certain samplerate, a control transfer (direction: host->device, type: vendor-specific, request: 0xb6, with certain "value" and "index" entries, length: 0x0000) is sent to the device.
Samplerates
Samplerate | Value | Index |
---|---|---|
100kHz | 0x0006 | 0x9695 |
200kHz | 0x0000 | 0x9595 |
500kHz | 0x0000 | 0x3b3b |
1MHz | 0x0000 | 0x1d1d |
2MHz | 0x0000 | 0x0e0e |
5MHz | 0x0000 | 0x0505 |
10MHz | 0x0000 | 0x0202 |
15MHz | 0x0000 | 0x0101 |
24MHz | 0x0008 | 0x0101 |
30MHz | 0x0003 | 0x0101 |
Getting samples
The vendor software retrieves the samples in 0x4000 (16kB) chunks via bulk transfers (endpoint address: 0x86, i.e. endpoint 6).
Sample format
The probes (on the device housing) are numbered 1-8. They seem to have internal pull-ups, i.e. if you don't connect them to the target, their value will be high (1).
- 8 probes: Bit 7 is the value of probe 8, bit 0 is the value of probe 1.
- 4 probes: Bit 3 is the value of probe 4, bit 0 is the value of probe 1. Bits[7:4] are probes 4..1 respectively.
- 2 probes: Bit 1 is the value of probe 2, bit 0 is the value of probe 1. Bits[7:6], bits[5:4], and bits[3:2] are probes 2..1 respectively.
Triggers
Implemented purely in software, it seems.
Stopping acquisition / reset (?)
After an acquisition the vendor software sends a control transfer (direction: host->device, type: vendor-specific, request: 0xb7, value: 0x0000, index: 0x0000, length: 0x0000) to the device.
Status (?)
A control transfer (direction: device->host, type: vendor-specific, request: 0xb5, value: 0x0000, index: 0x0000, length: 0x0040) is also sent after an acquisition.
This retrieves 0x40 (64) bytes from the device, which probably represent status values or the like.
Usual values:
0x00 0x01 0x00 0x00 0xff 0xPP 0xQQ 0xff 0x55 0x55 0x02 0x00 0x86 0xa9 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
The "0xPP 0xQQ" bytes seem to differ upon every sample run, the other bytes seem to remain the same. The last 48 bytes seem to be 0x00 always.