NDS Firmware

I have logged Over-The-Air firmware updates from Sky on

Satellite Astra2 (28.2 E)
Transponder 11758H
Symbolrate 27500000
FEC 2/3
PID 60 hex. (96 dec.)

This tool is able to read/write the flash/I2C-EEPROM inside the NEC-based PACE2500N (e.g. to change the box-ID).
	DigiboxTool.zip	(148 KB)	Version 1.00	2003-01-12

Here is the PACE2500N_Bootloader of my box.
Here is a complete flashdump flashdump_PACE2500N.zip of my box.

You can use the following software to extract all firmware files from a logged stream (PID 60 hex.). Afterwards you can decompress all files with the OTA-FW-Decompression tool.
	FW-Extractor.zip	(105 KB)	Version 1.02	2002-10-10	Now the manufacturer and the modelcode is incl. in the filename.

Only 3-4 files are transmitted simultaneous. You must wait a few days (I don't know the exact timerange) to log the next 3-4 files.

Because firmware updates are transmitted compressed Over-The-Air, you need the following software to decompress it again
	OTA-FW-Decompression.zip	(74 KB)	Version 1.00	2002-09-20

Functiondetails of the extraction and decompression process
	details_about_firmware_extractor_and_decompressor (zipped PDF)	(35 KB)	Version 1.00	2002-10-13

Overview of up-to-date files (last update: 2004-01-05)
Manufacturer	Model	modelcode & fw-ver.	OpenTv	EPG
Grundig	Black GDS100	GRUN_4E01_4F	1.2S4Bq	3.1a.5
Grundig	Black GDS100 / 200	GRUN_4E02_4E	1.2S4Bq	3.1a.5
Grundig	Black or Silver GDS200	GRUN_4E03_3F	1.2S4Bq	3.1a.5
Grundig	Silver GDS 310/2	GRUN_4E04_38	1.2S4Bq	3.1a.5
Grundig	GDS3000	GRUN_4E05_0D	1.2S4Bq	3.1a.5
Grundig	?	GRUN_4E06_11	1.2S4Bq	3.1a.5

Pace	Black BSKYB 2200	PACE_9F01_8F	1.2S4Bq	3.1a.5
Pace	Black BSKYB 2200	PACE_9F02_68	1.2S4Bq	3.1a.5
Pace	Black / Grey BSKYB 2500B	PACE_9F03_3E	1.2S4Bq	3.1a.5
Pace	Silver BSKYB 2500N	PACE_9F04_34	1.2S4Bq	3.1a.5
		PACE2500N_Bootloader
Pace	Silver BSKYB 2500S3	PACE_9F05_48	1.2S4Bq	3.1a.5
Pace	Silver BSKYB 2500S4	PACE_9F06_2E	1.2S4Bq	3.1a.5
Pace	5512 Sabre	PACE_9F07_13	1.2S4Bq	3.1a.5
Pace	?	PACE_9F08_1A	1.2S4Bq	?
Pace	Minibox	PACE_9F09_0F	1.2S4Bq	3.1a.5
Pace	old Sky+	PACE_9F20_50	1.3.0BF	sky+1.26.v2
Pace	new Sky+	PACE_9F21_1B	1.3.0BF	sky+1.26.v2

Sony	Silver VTX-S750U	SONY_6F01_2E	1.2S4Bq	3.1a.5
Sony	Silver VTX-S760U	SONY_6F02_25	1.2S4Bq	3.1a.5

Panasonic	Black TU-DSB20	PANA_0F01_44	1.2S4Bq	3.1a.5
Panasonic	Silver TU-DSB30	PANA_0F02_45	1.2S4Bq	3.1a.6
Panasonic	Silver TU-DSB31 or DSB35	PANA_0F03_22	1.2S4Bq	3.1a.5
Panasonic	?	PANA_0F04_18	1.2S4Bq	3.1a.6
Panasonic	?	PANA_0F05_11	1.2S4Bq	3.1a.5

Amstrad	Black DRX100	AMST_4F01_42	1.2S4Bq	3.1a.5
Amstrad	Black / Silver DRX100	AMST_4F02_38	1.2S4Bq	3.1a.5
Amstrad	Black / Silver DRX200	AMST_4F03_21	1.2S4Bq	3.1a.5
Amstrad	DRX300	AMST_4F05_32	1.2S4Bq	3.1a.6
Amstrad	?	AMST_4F06_1D	1.2S4Bq	3.1a.6

You can find the modelcode underneath the digibox. It starts with "NDS:", then the 4 char modelcode follows. Example from an Silver BSKYB 2500N: "NDS:9F04xxxxxxxxxxxxx". If you know the missing ones, please mail me. Btw. Thanks to all people which have sent infos to me.

This tool is able to read/write the flash/I2C-EEPROM inside the NEC-based PACE2500N (e.g. to change the box-ID). DigiboxTool.zip (148 KB) Version 1.00 2003-01-12 Here is the PACE2500N_Bootloader of my box. Here is a complete flashdump flashdump_PACE2500N.zip of my box. You can use the following software to extract all firmware files from a logged stream (PID 60 hex.). Afterwards you can decompress all files with the OTA-FW-Decompression tool. FW-Extractor.zip (105 KB) Version 1.02 2002-10-10 Now the manufacturer and the modelcode is incl. in the filename. Only 3-4 files are transmitted simultaneous. You must wait a few days (I don't know the exact timerange) to log the next 3-4 files. Because firmware updates are transmitted compressed Over-The-Air, you need the following software to decompress it again OTA-FW-Decompression.zip (74 KB) Version 1.00 2002-09-20 Functiondetails of the extraction and decompression process details_about_firmware_extractor_and_decompressor (zipped PDF) (35 KB) Version 1.00 2002-10-13 Overview of up-to-date files (last update: 2004-01-05) Manufacturer Model modelcode & fw-ver. OpenTv EPG Grundig Black GDS100 GRUN_4E01_4F 1.2S4Bq 3.1a.5 Grundig Black GDS100 / 200 GRUN_4E02_4E 1.2S4Bq 3.1a.5 Grundig Black or Silver GDS200 GRUN_4E03_3F 1.2S4Bq 3.1a.5 Grundig Silver GDS 310/2 GRUN_4E04_38 1.2S4Bq 3.1a.5 Grundig GDS3000 GRUN_4E05_0D 1.2S4Bq 3.1a.5 Grundig ? GRUN_4E06_11 1.2S4Bq 3.1a.5 Pace Black BSKYB 2200 PACE_9F01_8F 1.2S4Bq 3.1a.5 Pace Black BSKYB 2200 PACE_9F02_68 1.2S4Bq 3.1a.5 Pace Black / Grey BSKYB 2500B PACE_9F03_3E 1.2S4Bq 3.1a.5 Pace Silver BSKYB 2500N PACE_9F04_34 1.2S4Bq 3.1a.5 PACE2500N_Bootloader Pace Silver BSKYB 2500S3 PACE_9F05_48 1.2S4Bq 3.1a.5 Pace Silver BSKYB 2500S4 PACE_9F06_2E 1.2S4Bq 3.1a.5 Pace 5512 Sabre PACE_9F07_13 1.2S4Bq 3.1a.5 Pace ? PACE_9F08_1A 1.2S4Bq ? Pace Minibox PACE_9F09_0F 1.2S4Bq 3.1a.5 Pace old Sky+ PACE_9F20_50 1.3.0BF sky+1.26.v2 Pace new Sky+ PACE_9F21_1B 1.3.0BF sky+1.26.v2 Sony Silver VTX-S750U SONY_6F01_2E 1.2S4Bq 3.1a.5 Sony Silver VTX-S760U SONY_6F02_25 1.2S4Bq 3.1a.5 Panasonic Black TU-DSB20 PANA_0F01_44 1.2S4Bq 3.1a.5 Panasonic Silver TU-DSB30 PANA_0F02_45 1.2S4Bq 3.1a.6 Panasonic Silver TU-DSB31 or DSB35 PANA_0F03_22 1.2S4Bq 3.1a.5 Panasonic ? PANA_0F04_18 1.2S4Bq 3.1a.6 Panasonic ? PANA_0F05_11 1.2S4Bq 3.1a.5 Amstrad Black DRX100 AMST_4F01_42 1.2S4Bq 3.1a.5 Amstrad Black / Silver DRX100 AMST_4F02_38 1.2S4Bq 3.1a.5 Amstrad Black / Silver DRX200 AMST_4F03_21 1.2S4Bq 3.1a.5 Amstrad DRX300 AMST_4F05_32 1.2S4Bq 3.1a.6 Amstrad ? AMST_4F06_1D 1.2S4Bq 3.1a.6 You can find the modelcode underneath the digibox. It starts with "NDS:", then the 4 char modelcode follows. Example from an Silver BSKYB 2500N: "NDS:9F04xxxxxxxxxxxxx". If you know the missing ones, please mail me. Btw. Thanks to all people which have sent infos to me.