Andrew Zonenberg @[email protected] @azonenberg

Infosec, RE, high speed digital, T&M, network hardware, microscopy, FPGA/ASIC, @IOActive, KD2HKV, #SoOthersMayLive. Lead dev of glscopeclient. Tweets are my own ioc.exchange/@azonenberg/ The lab (Seattle area) Joined September 2013

Tweets

34K
Followers

13K
Following

534
Likes

0

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@BreakingTaps That's the biggest comb drive I've ever seen...

0 0 2 379 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@Fraser_RG @funranium Yep this was my thought too. Also useful after other kinds of hazmat incident.

0 0 0 122 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@tom_verbeure @EndoOleg It's very common to abuse FPGA LVDS inputs as comparators. I made a 100baseTX Ethernet PHY on an FPGA using two LVDS inputs and three resistors as a 1.5 bit 500 Msps flash ADC.

1 3 15 903 1

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@Astro_Chuck @RFgeekPC Yeah the large wavelength is annoying. I've been thinking of building a C-band (5.8 GHz ISM/amateur band, giving me the option of operating under either set of regs) PESA for a while. Original dream was AESA but those are $$$$$ :(

0 0 3 93 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@TracketPacer @kwiat_riot_1 @petergjones @EthernetAllianc (also I'm not really active on here except replying when I'm specifically requested, all of my regular posts are on Mastodon now)

0 0 3 93 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@TracketPacer @kwiat_riot_1 @petergjones @EthernetAllianc Triggering is also problematic unless you can probe TX_EN/RX_EN of one of the endpoint PHYs, because the scrambling means you have continuous toggles even when there's no packets in flight. Assuming you want to decode vs just seeing an eye pattern for SI work.

2 0 2 108 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@fluxotronlabs @pepijndevos As long as you don't mind 2-3 WFM/s over SCPI at best, dropping to <1 at deeper memory, sure. I like scopes that can push Gbps of waveform data to a PC but the list is short.

2 0 2 233 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@mtaht @networkservice @ioshints The next gen design (LATENTORANGE) is going to use a much larger FPGA with more SERDES lanes (probably Xilinx Kintex UltraScale/Ultrascale+). LATENTRED is trying to cram 24x 1G baseT + 1-2x 10G SFP+ uplink into an XC7K160T.

1 0 2 122 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@mtaht @networkservice @ioshints I mean the datapath is all FPGA so you might have to do some tweaking, but if there's enough gates free I don't see why not. That said, the initial (LATENTRED) switch design is using a fairly small FPGA so I'm not sure how much fanciness you could fit in it.

2 0 1 74 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@ioshints @networkservice I've mostly moved to Not-Twitter (see username on my profile) and am posting a fair bit about the project over there. Only checking in here every once in a while to point people at what I'm doing there. Current status: debugging power supply issues causing SGMII BER problems.

0 0 1 70 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@networkservice @ioshints I can't speak to commercial switch chipsets, but github.com/azonenberg/lat…

2 1 2 232 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@networkservice @ioshints The MAC address table in my (WIP) open hardware switch manages all learning and lookups in gateware. No CPU interaction is required whatsoever during normal operation; all it does is translate ASCII text CLI commands to register writes when you change VLAN settings etc.

2 1 4 393 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@Ascii211 But did you reflash drive firmware too and verify with a JTAG/SPI dump? :P Side note, this is (one of) the reason I run all of my browsers in VMs that I can trivially blow away if there's a problem.

3 0 6 332 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@TracketPacer Lab rack *of FPGAs*?

1 0 5 729 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@FizzOtter Most of the folks I interact with have been there largely, or exclusively, for months now. I'm barely on here anymore.

0 0 1 645 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@tom_verbeure @splinedrive @MoonbaseOtago @samsoniuk @ATaylorFPGA @controlpaths So by using a BUFGCE on the PLL output, this is avoided. I only do this with clocks that are stably derived (i.e. coming from an oscillator) rather than something from a CDR that is expected to change speed or come/go at run time.

1 0 2 202 0

View Details

Andrew Zonenberg @[email protected] @azonenberg

3 years ago

@tom_verbeure @splinedrive @MoonbaseOtago @samsoniuk @ATaylorFPGA @controlpaths This is important if you only use the FPGA POR to initialize registers and don't have an explicit RTL reset - you need to *never* give the logic a clock pulse that's too short once the POR clears (which happens way before the PLL locks).