EOS Lens protocol analyse - anybody intresting? - page 2 - DSLR Hack development

_MAG_

47

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #10 on: 20 / May / 2008, 02:25:29 »

Advertisements

I dont know how it works. I know Vasya use him like debug port in 300D. They get part of firmware source code, but i dont know How.

look this small program, hey have sources and can control camera by USB
GNU Canon Camera Utilities

info from Vasya

Under the battery there are contacts, two of them separated a little
from the rest are RX/TX. Add ground and a regular RS/TTL converter and
you are done. 115,200 8N1

Using the debugger you should be able to peek into different memory
locations. Wasia is working on using debugger to read the Toshiba
firmware out.

Yahoo! Groups

About debug port
CANON EOS 300D Digital Rebel Firmware Hacking Forums -> The 300d debug port

« Last Edit: 20 / May / 2008, 04:07:52 by _MAG_ »

Logged

owerlord

115

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #11 on: 20 / May / 2008, 07:13:07 »

Thanks for help ! 400D have entirly diffrent connectors. but the information is usefull.

In 400D there are two 8-pin connectors.

They figured out witch connectors are not used by battery pack. I saw only photos - If i see right - they have all the connectors.

>> If anyone of you have the battery pack to 400D or higher - can you post what you see at the top of the battery connector ? <<

It's of course possible that canon after the 300D hack (DOS :-) just hidden the debug port.

Logged

_MAG_

47

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #12 on: 20 / May / 2008, 13:46:01 »

I try to seach partlist of canon 400d - foud nothing, but my friend use battery pack from 350d to 400d.

« Last Edit: 21 / May / 2008, 01:00:05 by _MAG_ »

Logged

ASalina

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #13 on: 20 / May / 2008, 14:33:28 »

Quote from: owerlord on 20 / May / 2008, 07:13:07

>> If anyone of you have the battery pack to 400D or higher - can you post what you see at the top of the battery connector ? <<

I don't have a BG-E3 grip, but here's a photo of the business end if it is any help:

http://photo.net/bboard-uploads/00Lbab-37098084.jpg

Logged

owerlord

115

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #14 on: 20 / May / 2008, 14:43:02 »

thanks ! It looks like the battery grip uses 2*6 of 2*8 pins.

Logged

ASalina

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #15 on: 20 / May / 2008, 16:49:48 »

Quote from: owerlord on 20 / May / 2008, 14:43:02

thanks ! It looks like the battery grip uses 2*6 of 2*8 pins.

If someone has a BG-E3 and a volt meter they could trace out which pins are connected to the buttons on the grip. The ones that are not should be the serial debug port pins. You can buy cheap replicas of the BG-E3 on Ebay, etc. Running test leads out from the pins on one of those should be fairly easy. Then they can be monitored with an oscilloscope or DVM.

Logged

_MAG_

47

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #16 on: 21 / May / 2008, 01:26:45 »

Like for me pins in BG-E3 and others directly connected to pins in main CPU.
In service manual from 300D i dont found info about that contacts

Logged

ruevs

3

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #17 on: 18 / July / 2008, 12:26:09 »

Well the battery compartment contacts in the 5D 20D 30D 40D must be be a LOT more than just a simple RS232 debugging/service port. Look at this:
Jenis battery grip adds more than just power - Digital Cameras - Crave - CNET Asia

A betery grip with extra CompactFlash compartments!

Logged

roli_bark

1

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #18 on: 19 / July / 2008, 14:28:23 »

Hi,
This is a nice project ! Many kudos to the OP.

The real challenge is to reverse engineer the Lens Chipset (controller) Registers Address Map. Some registers (among other) contain the lens Calibration Parameters.

Many of us, avid photograper hobbies, are aware of frequent Canon Lens focus accuracy issues. If the protocol is reversed, lens re-calibration may be done as a home project.

Logged

victor

3

Re: EOS Lens protocol analyse - anybody intresting?

« Reply #19 on: 09 / August / 2008, 01:03:10 »

Would you please to share the log you collected by the NULL cable with us? It will be very useful.

Quote from: _MAG_ on 12 / May / 2008, 00:57:23

I found some info about lens request. They transmit:
lens name (255 symbols) - example "Canon 28-80" (i not fully sure about example but lens name transmited first)
----- i not sure about order of this info-------
minimal focus distance - example "28" from 00 00 to FF FF
maximax focus distance - example "80"
current focus distance - example "35"
minimal aperture (on this angle???) - "3,5" maybe from 1 to 64 in dec. 2 bytes. (for transmit aperture like 5,6)
maximal aperture

if minimal focus distance = maximax focus distance = current focus distance - lens determines like fix focal. Else like zoom
if minimal aperture = maximal aperture - body dont send command for close or open aperture

« Last Edit: 09 / August / 2008, 01:29:28 by victor »

Logged