Bus Pirate v3a

[[image:Bus Pirate-side-W490.jpg]]

'''UPDATE: [http://dangerousprototypes.com/2010/04/29/prototype-bus-pirate-v3b/ v3b] is the latest Bus Pirate revision, read about the changes [http://dangerousprototypes.com/2010/04/29/prototype-bus-pirate-v3b/ here].'''

BPv3 is the latest hacking multi-tool from the [http://code.google.com/p/the-bus-pirate/ Bus Pirate project]. It connects to a USB port and interacts with electronics through a simple terminal interface.

[[image:stack-example_.jpg]]

Use it to see how much of your private information [http://dangerousprototypes.com/2009/08/31/bus-pirate-sle4442-smart-card-update/ is stored on  smartcard SIM chips]. [http://dangerousprototypes.com/2009/08/19/bus-pirate-wii-nunchuck-quick-guide/ Explore the Wii Nunchuck over the I2C bus] like [http://johnnylee.net/projects/wii/ Johnny Lee]. [http://dangerousprototypes.com/2009/07/30/prototype-bus-pirate-3eeprom-explorer-board/ Read and write EEPROM chips] in consumer electronics at any voltage. Check out all the [http://dangerousprototypes.com/bus-pirate-manual/#demos existing chip demonstrations].

BPv3 has  features an intrepid hardware hacker might need to prototype their next great creation:
<ul>
    <li>Talk to 1-wire, I2C, UART (async serial), SPI, JTAG, MIDI, LCDs, PC keyboards, and a ton of generic serial devices from a terminal.</li>
    <li>[http://dangerousprototypes.com/2009/10/09/bus-pirate-raw-bitbang-mode Scriptable] from Python, [http://dangerousprototypes.com/2009/10/12/bus-pirate-binmode-perl-test-script/ Perl], etc.</li>
    <li>0-40MHz frequency counter, 0-4MHz pulse-width modulator.</li>
    <li>0-6volt measurement probe.</li>
    <li>3.3volt and 5volt power supplies with reset.</li>
    <li>[http://dangerousprototypes.com/2009/07/27/bus-pirate-practical-guide-to-pull-up-resistors/ On-board pull-up resistors] for multi-voltage interfacing.</li>
    <li>Address scanners, chip dumpers, and [http://dangerousprototypes.com/bus-pirate-manual/#syntax other helpful macros].</li>
    <li>USB interface, power. USB [http://dangerousprototypes.com/2009/07/24/bus-pirate-firmware-upgrades/ firmware updates].</li>
    <li>Translations (currently Spanish and Italian, [http://whereisian.com/forum/index.php?topic=70.0 add your own]).</li>
</ul>


[http://www.seeedstudio.com/depot/bus-pirate-v3-assembled-p-609.html?cPath=61_68 '''Get an assembled  BPv3 for $30'''], including worldwide shipping, thanks to Seeed Studio. You can also grab the plans from the [http://code.google.com/p/the-bus-pirate/ Bus Pirate project page] and build your own.

This article introduces BPv3, the latest hardware from the [http://code.google.com/p/the-bus-pirate/ Bus Pirate project].  We'll look at the history of the design, share our experience organizing the production of [http://hackaday.com/2009/06/25/how-to-the-bus-pirate-v2-with-usb/ Bus Pirate v2go], and talk  about issues that influenced hardware version 3.


==History of the Bus Pirate universal serial interface==

We made the first Bus Pirate to deal with a particularly difficult chip that didn't behave as expected. We wanted to send SPI commands through a serial terminal so we could test the chip without compiling a firmware to implement each small change.

[[image:BusPirate-v0.ii.jpg]]

Bus Pirate V0 was based on an USB-enabled [http://www.microchip.com/wwwproducts/Devices.aspx?dDocName=en010280 PIC 18F2550] microcontroller. It operated at 5volts only, and didn't have on-board power supplies. V0 was published on a personal blog under the GPL, sometime around 2004. Along with some very poor soldering,  you can see the first use of the Bus Pirate name etched into the copper.

[[image:BusPirate-v0a.jpg]]

[http://hackaday.com/2008/11/19/how-to-the-bus-pirate-universal-serial-interface/ Bus Pirate V0a] upgraded to a 16bit [http://www.microchip.com/wwwproducts/Devices.aspx?dDocName=en026374 PIC 24FJ64GA002], but traded USB for a serial interface.  This version also added 3.3volt and 5volt power supplies, and two 3.3volt software-controlled [http://en.wikipedia.org/wiki/Pull-up_resistor pull-up resistors].

Microchip's new low-pincount PICs are perfect for the Bus Pirate because of a feature called peripheral pin select. Many microcontrollers have hard-wired  pin assignments, but PPS assigns some features to any pins we like. The PIC 24FJ is a better choice than the dsPIC33-series because the pins can source/sink more current (20mA vs 4mA).

We used a rare and expensive RS232 transceiver from our parts box in this design because it was intended for 'in house' use. We released this design into the public domain, and Hack a Day later published an article  about it as a stop-gap when other content wasn't  ready.

[[image:BusPirate-vi.jpg]]

[http://hackaday.com/2009/01/22/how-to-bus-pirate-v1-improved-universal-serial-interface Bus Pirate V1a] was another serial interface design, but this version used mostly  surface mount parts. We replaced the expensive RS232 transceiver with a cheap, common SMD version. The power supplies were upgraded to 800mA switchable regulators that can be reset from within the terminal. V1a ditched the software controlled pull-up resistors, and used jumpers to connect pull-ups to the four bus pins. This version added voltage monitoring probes using extra analog to digital converter pins on the PIC.

The v1a Bus Pirate was also released into the public domain, and we wrote an article about it that was published on Hack a Day. Fundamental logic revised the v1 design and released a through-hole serial port Bus Pirate kit (also public domain). You might still be able to [http://store.fundamentallogic.com/ecom/index.php?main_page=product_info&amp;cPath=26&amp;products_id=474&amp;zenid=c06b8f01320c49219c3d0f8af70e4659 buy the kit for $20].

[[image:BusPirate-v2-ssii.jpg]]

[http://hackaday.com/2009/06/25/how-to-the-bus-pirate-v2-with-usb/ Bus Pirate V2] is the current king of the Bus Pirate designs, it's the first of the modern 16bit designs to have a USB interface (via an [http://www.ftdichip.com/Products/FT232R.htm FTDI serial-&gt;USB chip]). V2a was an early revision (left), v2go was the final version of the V2 family (right). V2 swaps in smaller, cheaper, and awesomer power supplies ([http://www.micrel.com/page.do?page=/product-info/products/mic5205.shtml MIC5205]) recommended by [http://www.sparkfun.com/commerce/account.php?id=7185 Nate] at SparkFun. We finally brought software switchable pull-up resistors to all four main bus pins via a [http://docs.google.com/gview?a=v&amp;q=cache:69M9bxjzQ8UJ:www.fairchildsemi.com/ds/CD%252FCD4066BC.pdf+cd4066+fairchild&amp;hl=en&amp;sig=AFQjCNED6E-zJD_gBKYsFh1DiqauUP4krA CD4066] IC.

The Bus Pirate project was approached by a company that wanted to sell the v2 design, but complications and time constraints got in the way. Instead, we ran a [http://hackaday.com/2009/06/25/bus-pirate-preorders-open/ group preorder] as a fundraiser for Hack a Day, and got some experience with the manufacturing process.

Almost 1000 Bus Pirates [http://hackaday.com/2009/07/16/bus-pirate-preorder-1-ships/ sold in 10 days], with all proceeds going to [http://www.mahalo.com/ Mahalo], the company that operates Hack a Day. So many sold that we had supply problems,  Seeed Studio [http://hackaday.com/2009/06/30/bus-pirate-preorder-update/ couldn't find enough PIC 24FJ64GA002-SO] to fill the order.

[[image:BusPirate-sideiii.jpg]]

BPv3 is designed to address supply and manufacturing problems encountered during the v2go preorder. v2go would have been the final Bus Pirate, but we learned so much during manufacturing that we wanted to apply it to  an updated design. For V3 we did  a full, scratch redesign of the PCB that went through two revisions.

<em>If you've got a Bus Pirate v2go, don't  worry because it's functionally equivalent to v3. V2go and V3 will even bootload and run the same firmware.</em> In retrospect, v2go was a cute-but-poor version choice. Where do you go from there? v2go+1=? We chose V3.

==Updates to BPv3==

[[image:BusPirate-v3cct.png]]


[http://dangerousprototypes.com.php5-11.dfw1-1.websitetestlink.com/wp-content/media/2009/11/bpv3cct.png Click here for a full size schematic image] [PNG]. The schematic and PCB were designed with the free version of [http://www.cadsoft.de Cadsoft Eagle], the latest design files are on the [http://code.google.com/p/the-bus-pirate/ project page] at Google Code.

The basic Bus Pirate design has been covered extensively at Hack a Day, we won't duplicate that here. Refer to these fantastic Bus Pirate articles: [http://hackaday.com/2009/06/25/how-to-the-bus-pirate-v2-with-usb/ v2], [http://hackaday.com/2009/01/22/how-to-bus-pirate-v1-improved-universal-serial-interface v1], [http://hackaday.com/2008/11/19/how-to-the-bus-pirate-universal-serial-interface/ v0].

===Resolve manufacturing issues===

[[image:BusPirate-compare.jpg]]


Hack a Day's Bus Pirate preorder had to be split due to a shortage of SOIC-size PIC microcontrollers. BPv3 uses the smaller, more common SSOP-size (IC1). The smaller chip also allowed a reduction in  PCB size and a few other tweaks.

The programming pins on v2 were swapped from the normal PICkit2 order. Seeed had to use an adapter to program the v2go Bus Pirates, BPv3 has the correct pin order for easier manufacturing. Bootloaders for V2go and v3 are not interchangeable because of this modification.

Manufactured BPv3s will be programmed with the latest bootloader and firmware, which contains a [http://dangerousprototypes.com/2009/07/28/bus-pirate-self-test-guide/ self-test] for better quality control.

===Circuit updates===

[[image:BusPirate-FTDI.jpg]]

The [http://www.ftdichip.com/Products/FT232R.htm FTDI 232R USB-&gt;serial converter's] (IC2) IO pins are now driven by the main supply regulator, which is probably better than running it from the internal regulator as in v2go. The FTDI enable pin could be connected to the 3.3volt supply regulator (VR2) enable to make a fully USB sleep compliant device, but we didn't because the routing was too complicated.

We added a 0.1uF capacitor (C6) to decouple the VCCIO supply pin, the datasheet wasn't clear if this is required but it's probably best practice.

The header (ST) that taps the serial connection between the FTDI232R (IC2) and the PIC (IC1) was removed. A poll of developers found that none had ever used it, and the routing is cleaner  without it.

[[image:BusPirate-solder-bridge.jpg]]

The interior connection between two adjacent ground pins on IC3 was removed because so many people thought it was a solder bridge. (It's not.)

===Tweaks===

[[image:BusPirate-v3-stripiii.jpg]]
</em>

We tweaked part placement during the PCB redesign. The USB jack (J1) is centered. The  CD4066 (IC3) is rotated  for better clearance around the IO header.

We moved the USB activity LED to the top of the PCB. LED labels are bolder, easier to read.

Traces that carry power are fatter, and have bigger  vias. We used wider 12mil trace/space wherever possible to improve PCB yield. The ground plane is reinforced with more and larger vias in important areas.

[[image:BusPirate-io.jpg]]

The tighter placement required us to swap the 3.3volt and ADC pins on the I/O header. This is easier to route, and the ribbon cable pinout is more logical: ADC-5.0-3.3-GND.

==PCB==

[[image:BusPirate-v3e-renderii.jpg]]


We used  the freeware version of [http://www.cadsoft.de/ Cadsoft Eagle] to make the schematic and PCB. Download the latest designs and firmware from the [http://code.google.com/p/the-bus-pirate/ project  Google Code page].

The PCB is small and tightly packed. It's a challenging board that takes us an hour to solder from memory. Seeed Studio sells the [http://www.seeedstudio.com/depot/propaganda-service-propaganda-pcbs-c-64_33.html extra PCBs from our  order].

===Partslist===

[[image:BusPirate-brdii.png]]

''

[http://dangerousprototypes.com.php5-11.dfw1-1.websitetestlink.com/wp-content/media/2009/09/brdii.png Click for a full size placement image] [PNG].

{| border="0"
| '''Name'''
| '''Value (size)'''
| '''Notes'''
|-
| IC1
| [http://www2.mouser.com/ProductDetail/Microchip-Technology/PIC24FJ64GA002-I-SS/?qs=sGAEpiMZZMvu0Nwh4cA1wYT5QXUmO9dmYmbTzatGY%2fI%3d PIC24J64GA002-SS] (SSOP)
| Changed to SSOP
|-
| IC2
| [http://www.sparkfun.com/commerce/product_info.php?products_id=650 FT232RL] (SSOP)
|
|-
| IC3
| [http://search.digikey.com/scripts/DkSearch/dksus.dll?Detail&amp;name=CD4066BCM-ND CD4066D] (SOIC-N)
|
|-
| C1-6
| [https://www.mouser.com/Search/ProductDetail.aspx?R=C0805C104M5RACTUvirtualkey64600000virtualkey80-C0805C104M5R 0.1uF capacitor] (0805)
| Added C6
|-
| C20-24
| [http://www.mouser.com/Search/ProductDetail.aspx?R=293D106X96R3A2TE3virtualkey61320000virtualkey74-293D106X96R3A2TE3 10uF tantalum capacitor] (SMC-A)
|
|-
| ICSP, IO
| [http://www.mouser.com/Search/ProductDetail.aspx?R=9-146278-0virtualkey57100000virtualkey571-9-146278-0 0.1" pin header] (3x05)
|
|-
| J1
| [http://www.sparkfun.com/commerce/product_info.php?products_id=587 USB MINI-B] (SMD)
| J2 renamed J1
|-
| L1
| [http://www.mouser.com/Search/ProductDetail.aspx?R=BLM21PG331SN1Dvirtualkey64800000virtualkey81-BLM21P331SG 1000ma+ ferrite bead] (0805)
|
|-
| LED1-4
| [http://www2.mouser.com/ProductDetail/Dialight/598-8110-107F/?qs=sGAEpiMZZMuus4pmcqQnzm2UNk7a5HnUwLua0TbMZKg%3d LED] (0805)
|
|-
| R1
| [http://www.mouser.com/Search/ProductDetail.aspx?qs=jBethxrBxZb5NLDetw123g== 2000 ohm resistor] (0805)
|
|-
| R2,3
| [http://www.mouser.com/Search/ProductDetail.aspx?qs=DZvKvnD5UYWyFJjgnPvJ4g%3d%3d 1100 ohm resistor] (0805)
| R30 renamed R2
|-
| R10-17, 19-23
| [http://www.mouser.com/Search/ProductDetail.aspx?qs=sGAEpiMZZMtlubZbdhIBIADEshVnklemK%252bhrLNEuMe8%3d 10000 ohm resistor] (0805)
| Removed R18
|-
| R31,32
| [http://www.mouser.com/Search/ProductDetail.aspx?qs=2BMLUTrrT4P7Xm58YbKmPg== 390 ohm resistor] (0805)
|
|-
| VR2,3
| [http://search.digikey.com/scripts/DkSearch/dksus.dll?Detail&amp;name=576-1259-1-ND MIC5205 3.3volt regulator] (SOT23-5)
|
|-
| VR4
| [http://search.digikey.com/scripts/DkSearch/dksus.dll?Detail&amp;name=576-1261-1-ND MIC5205 5volt regulator] (SOT23-5)
|
|-
|
|
|
|}

==Taking it further==

Check the [[Bus Pirate|Bus Pirate manual]] for usage examples, pin diagrams, connection tables, syntax guides, and more.

We're happy with the current hardware features. Future updates will focus on improving the firmware, and adding features via the firmware and [http://dangerousprototypes.com/category/bus-pirate-accessories/ break-out boards].

You can discuss the project in [http://whereisian.com/forum/index.php?board=4.0 the forum], or join us on the [http://code.google.com/p/the-bus-pirate/ Google Code Bus Pirate project].

==Get one!==

[http://www.seeedstudio.com/depot/preorder2-bus-pirate-v3-assembled-p-523.html Get an assembled '''<span style="color: #ff0000;">red</span>''' BPv3 for $30], including worldwide shipping, thanks to Seeed Studio. You can also grab the plans from the [http://code.google.com/p/the-bus-pirate/ Bus Pirate project page] and build your own.

'''Producing the Bus Pirate
'''

[http://www.seeedstudio.com/depot/ Seeed Studio] made it really easy to sell a project without worrying about a website, billing, shipping, etc. We're working with them again on [http://www.seeedstudio.com/depot/preorder-bus-pirate-v3-assembled-p-522.html BPv3] and the [http://dangerousprototypes.com/2009/09/10/prototype-twitter-watcher-the-twatch/ #twatch ethernet LCD backpack].

[[Image:bpv3-take1-250.jpg|250px|bpv3-take1.250]]

To manufacture a project, you need to submit design files, a part list, and a firmware file.

We design circuit boards in [http://www.cadsoft.de Cadsoft Eagle] and [http://hackaday.com/2009/01/15/how-to-prepare-your-eagle-designs-for-manufacture/ create gerber design files], but many board houses now accept Eagle .brd files too. We send the gerbers to a board house and test the PCB. We order revisions and test again, if required.

Assembling a part list can be fairly involved. At minimum, we specify part type, value, and size. Elaborate as much as possible on critical values or custom parts. For a 10uF capacitor, what type and how many volts max? If a 1% tolerance resistor is required, it needs to be specified.

Our best advise is to design with common parts. Check [http://www.digikey.com/ DigiKey] and [http://www.mouser.com Mouser] (or better, [http://octopart.com/ Octopart]), be sure you can get a few hundred of your critical part from several suppliers. Check the supply of any specific microcontroller or IC that could hold up production.

[[Image:v2go-250.jpg|250px|v2go-250]]

Seeed was able to locate 300 PIC 24FJ64GA002-SO microcontrollers prior to the Hack a Day preorder. When orders took off, the initial 300 were gone within 48 hours. In the end, nearly 1000 Bus Pirates were sold. The extra 700 PICs took almost 2 months to source.

It's important to plan for production programming. The Bus Pirate uses a two part firmware, a bootloader and a main program. The normal programing method is to burn the bootloader and then upload a main program over USB. This is too slow for manufacturing, so we created a complete, bootloaded PIC firmware dump that combines both parts into a single image.

When manufacturing starts, be prepared for issues that hardly ever happen in a single chip, but occur quite frequently in 1000. Around 15% of v2gos failed initial quality control tests. They wouldn't connect to the bootloader at the default speed (115200bps). The bug turned out to be a baud rate setting that wasn't precise enough due to the inaccuracy of the internal crystal. The remaining boards worked after reducing the bootloader speed on the PC to 9600bps.

The members of the Bus Pirate project team learned a lot producing v2go with Seeed Studio. It wasn't without problems, but we used that experience to refine the hardware design. We hope this background information helps you produce your first widget, be sure to [http://www.whereisian.com/ let us know] when it debuts.

==Get one!==

[http://www.seeedstudio.com/depot/bus-pirate-v3-assembled-p-609.html?cPath=61_68 Get an assembled '''<span style="color: #ff0000;">red</span>''' BPv3 for $30], including worldwide shipping, from Seeed Studio. You can also grab the plans from the [http://code.google.com/p/the-bus-pirate/ Bus Pirate project page] and build your own.

[[Image:sideiii-450.jpg|450px|sideiii.450]]



[[Category: Projects]]
[[Category: Bus Pirate]]