Enabling options on Agilent ESA series E4402B E4404B E4405B E4407B

[analogRF]

Hi
I was wondering if anyone ever hacked these ESA spectrum analyzers to enable options?

some options like 1DR and 1DS (or even 1D5 for S/N > 4421) can be enabled by license key only

https://www.keysight.com/main/editorial.jspx?cc=US&lc=eng&ckey=277453&nid=-11143.0.00&id=277453

[mbielman]

I have the same question! Specifically I want to enable the RF Preamp option. (the hardware should be there) Wondering if I can set a bit in the EEprom on the processor card. OR maybe figure out the key(s) based on the serial number.

Anyone?


Mark B

[analogRF]

I have heard that these analyzers have been cracked but people who know how it's done, won't disclose anything 

[mbielman]

I have an idea but it would be tedious and slightly dangerous...

Pull the EEPROM (processor board - an assumption on my part) from a unit that has some options enabled, and read that.
Put it back, disable an option or two, remove it again and reread, then look for changes.

Ug!

[analogRF]

disabling the option in the menus does not remove it from the EEPROM

I am pretty sure someone has found a way to enable the options but it is not shared....

[PA0PBZ]

If it's the same as the N1996a CSA and the E7495 it uses FlexLM, I'm the one to blame for the "enhancement" and I have no problem to have a look at these machines as they are discontinued anyway. Does anyone have root access to these machines already?

[analogRF]

If it's the same as the N1996a CSA and the E7495 it uses FlexLM, I'm the one to blame for the "enhancement" and I have no problem to have a look at these machines as they are discontinued anyway. Does anyone have root access to these machines already?

that would be awesome. unfortunately I don't have root access . I think N1996A is a much newer machine than ESA series...but of course they might be using the same os

[PA0PBZ]

Can you see what format the license code should be? That would probably show if it is FlexLM or something else.
I just downloaded the firmware upgrade but it is 9 discs  And the other version for older OS does not run on my PC.
-to be continued-

[analogRF]

actually I personally do not have one of these analyzers but have been hunting for one for quite some time. if there is a way to enable some non-hardware options then it would be awesome...I have worked with them though...

maybe this page will help?

https://www.keysight.com/main/editorial.jspx?cc=US&lc=eng&ckey=1000004808:epsg:faq&nid=-35489.384884&id=1000004808:epsg:faq

[Miek]

I think you may be able to just concatenate the five ESAFW files, though I'm not completely sure - there might be a header on each.

There are references in the source to FlexLM, and an RTOS named pSOS.

[PA0PBZ]

So it runs on some kind of *nix, it is FlexLM and the license file is here: /usr/local/flexlm/licenses/license.dat.
The bad news is that the bytes that have to be patched in the other instruments are not to be found in the ESAFW file.

So, is there any way to communicate with the ESA, is there a prompt on a serial port? I don't think it has ethernet..
Is there a harddisk inside that is readable? [Edit] No, it's flash.

[PA0PBZ]

Processor is Motorola Coldfire:

[mbielman]

Not sure what you are trying to convey here. The ESA instruments use the MC68LC040 (integer only version) and as far as I know do not have a "traditional" OS at all, unlike the newer units.

If there is a way to interrogate the system, I would love to know how!

[PA0PBZ]

I'm trying to find a way into the ESA to be able to patch the FlexLM part. It looks like the code disassembles fine as a Coldfire processor but you could be right that it is a 68LC040. It looks like it's not that different and it disassembles fine. The method I used to get around the FlexLM stuff in the other instruments is always returning "ok" on an entered license but you have to patch the FlexLM daemon. If you can't get to the file that is going to be difficult so I'm looking at the install.o file to see how it works and if there is a way to install a patched file, that's basically it

[mbielman]

Yeah, not much differs I think between those processors, at least basic op codes. Coldfire is newer than the old MOT 680xx.
As mentioned, don't think these run HP-UX, Windows or any such OS. So no idea if there is anything resembling a file system.
Although it has A: and C: drives (floppy and flash) so who knows! If it's there, you do not see it when the system boots.

[Scopetechniques]

No, the preamp option is not just software. It actually does have a hardware preamp after the input that can be turned on and off.

[tv84]

The method I used to get around the FlexLM stuff in the other instruments is always returning "ok" on an entered license but you have to patch the FlexLM daemon. If you can't get to the file that is going to be difficult so I'm looking at the install.o file to see how it works and if there is a way to install a patched file, that's basically it

Have you succeeded? Do you have JTAG access?

[PA0PBZ]

Have you succeeded? Do you have JTAG access?

I gave up looking at the install file (can't remember why) and I don't have the hardware myself so the motivation is low.

[smgvbest]

My turn to chime in.    I just got ahold of a broken E4407B from Alltest.   I will be posting a blog about the repair once it arrives
in the mean time,  this is a topic I am also interested in.   I'd love to enable any of the license only options I could.

everything I see says this is not linux at all which I think we agree on
I don't think FLExm is involved,   they would have had to port it to their proprietary software which seems a waste.

I wonder if you could brute force this over SCPI.    you can enter the license that way.
be interesting to get a few options done.

Me first, I have to wait for mine to arrive then figure out what's broke

Does anyone have the actual CLIP for this I could borrow.   I have the scanned version and even it the schematics are hard to read
also anyone have a handle they are not using?   Ill post in the wanted section but thought I would ask

edit:   I need to walk back the statement over FLEXLM.    it is part of the code as was pointed out by @Miek and the OS is PSOS as also pointed out

[smgvbest]

Does anyone have a Personality Disk from any of the options and/or a license file
I need your hostID also if anyone is willing to share

[smgvbest]

I extracted strings from the E4407B and found some interesting ones
in particular is SCPI Debuger

Code: [Select]

Line 7267: 3679704:@(#)LDS Rev:3.10 - Module Incremental (Aug  4 2008) ; hpib (68xxx asm) Rev 1.20
Line 7360: 3769948:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Semeval Rev 3.10
Line 7438: 3859435:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); scpi_lp Rev 3.10
Line 7451: 3862796:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); shr Rev 3.10
Line 7509: 3894168:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); active function Rev 3.10
Line 7515: 3919656:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); fpanel control Rev 3.10
Line 7581: 3942204:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); menu system Rev 3.10
Line 7590: 3950528:@(#)LDS Rev:3.10 - Module Incremental (Jul  8 2003); ptp Rev 3.10
Line 7607: 3990652:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); scum Rev 3.10
Line 7613: 3997792:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Math64 Rev 3.10
Line 7614: 4008452:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); cvt (asm source) Rev 3.10
Line 7615: 4009139:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); mcat Rev 3.10
Line 7630: 4012400:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); rlock Rev 3.10
Line 7644: 4017028:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Save-Recall Rev 3.10
Line 7646: 4021306:@(#)LDS Rev:3.10 - Module Incremental (Sep 10 1999); OS wrapper for psos Rev 3.10
Line 7723: 4051040:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); HIHR Rev 3.10
Line 7737: 4059944:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Null Happening Reporter Rev 3.10
Line 7738: 4060052:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Tee Happening Reporter Rev 3.10
Line 7740: 4060976:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Stderr Happening Reporter Rev 3.10
Line 7741: 4061100:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Stdio Happening Reporter Rev 3.10
Line 7746: 4061988:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Scpi Debugger Rev 3.10
Line 7765: 4072404:@(#)LDS Rev:3.10 - Module Incremental (Sep 10 1999); optimized memory manager Rev 3.10

I also extracted all the FlexLM items i could see
one of interest is

/usr/local/flexlm/licenses/license.dat

Code: [Select]

4072496:@(#) FLEXlm 6.0d (liblmgr.a), Copyright (C) 1988-1997 Globetrotter Software, Inc.
4072583:FLEXLM_COMM_TRANSPORT
4074343:FLEXLM_INTERVAL_OK
4074373:FLEXLM_USE_FINDER
4076772:FLEXLM_DIAGNOSTICS
4076795:LM_LICENSE_FILE
4076811:%s_LICENSE_FILE
4076830:%s%s%s%s%s
4078034:FLEXLM_DIAGNOSTICS
4078057:FLEXlm checkout error
4078079:license file(s):
4078103:lm_checkout("%s", %s, %d, 0x%x, ..., 0x%x)
4079117:x%s > %s
4079130:%d-%[^-]-%d
4080510:NOMORE
4080771:%d %d
4082547:,PORT_AT_HOST_PLUS   
4083270:DUP_GROUP
4083280:SUITE_DUP_GROUP
4083296:W_LIC_LOSS
4083307:OVERDRAFT
4083322:USER_BASED
4083333:HOST_BASED
4083352:PLATFORMS
4083369:SUPERSEDE
4083410:DIST_CONSTRAINT
4086112:%s=%s
4086286:%s=%d
4086618:%ld-%[^-]-%ld
4093632:PORT_AT_HOST_PLUS   
4094790:%s %s %s
4094811:INCREMENT
4094838:%s %s %s %s %s %s %s %s %[^
4094869:%s %s %s %s %s %s %s %[^
4094897:permanent
4094915:uncounted
4096630:PORT_AT_HOST_PLUS   
4096796:%s %s
4096936:USE_SERVER
4097583:All licenses are reserved for others
4097621:Cannot remove a linger license
4097652:The decimal format license is typed incorrectly
4097700:This FEATURE line can't be converted to decimal format
4097755:The desired vendor daemon is down
4097789:Server node is down or not responding
4097827:Network connect to THIS_HOST failed
4097863:Attempt to generate license with incompatible attributes
4097920:This feature is available in a different license pool
4097974:feature removed during lmreread, or wrong SERVER line hostid
4098035:ENCRYPTION_SEEDs are non-unique
4098067:Future license file format or misspelling in license file
4098125:This platform not authorized by license
4098165:System clock has been set back
4098196:Checkout exceeds MAX specified in options file
4098243:License object already in use
4098273:License server doesn't support this request
4098317:USER_BASED license has no specified users -- see server log
4098377:FLEXlm version of client newer than server
4098420:Invalid PACKAGE line in license file
4098457:FLEXlm internal error -81
4098483:FLEXlm internal error -80
4098509:FLEXlm internal error -79
4098535:FLEXadmin API functions not available
4098573:Bad version number - must be floating point number, with no letters
4098641:Internal FLEXlm Error - Please report to Globetrotter Software
4098704:SYS$SETIMR call failed
4098727:Attempt to read beyond end of license file path
4098775:Local checkout filter rejected request
4098814:Old VENDORCODE (3-word) struct type passed to lm_init()
4098870:Invalid TZ environment variable
4098902:Attempt to borrow the same (destination) license twice
4098957:License borrowing database corrupted
4098994:License borrowing not enabled
4099024:No licenses available to borrow
4099056:FLEXlm include file/library version mismatch
4099101:Unknown VENDORCODE struct type passed to lm_init()
4099152:lmremove request before the minimum lmremove interval
4099206:You are not a license administrator
4099242:Network software (tcp/ip) not available
4099282:Cannot read license file data from server
4099324:Server message checksum failure
4099356:Message checksum failure
4099381:setsockopt() call failed
4099406:socket() call failed
4099427:Cannot compute FEATURESET data from license file
4099476:Incorrect FEATURESET line in license file
4099518:No FEATURESET line in license file
4099553:Checkout request rejected by vendor-defined checkout filter
4099613:FLEXlm vendor daemon did not respond within timeout interval
4099674:FLEXlm not initialized
4099697:FLEXlm key data has expired
4099725:Date invalid for binary format
4099756:FLEXlm platform not enabled
4099784:Clock setting check not available in daemon
4099828:FLEXlm software is demonstration version
4099869:FLEXlm function not available in this version
4099915:Invalid FLEXlm key data supplied
4099948:No FLEXlm key data supplied in lm_init() call
4099994:Invalid parameter
4100012:Feature was never checked out
4100042:Cannot allocate dynamic memory
4100073:User/host not on INCLUDE list for feature
4100115:User/host on EXCLUDE list for feature
4100153:Duplicate selection mismatch for this feature
4100199:Feature database corrupted in daemon
4100236:In the queue for this feature
4100266:Clock difference too large between client and server
4100319:Bad encryption handshake with daemon
4100356:No such attribute
4100374:Feature start date is in the future
4100410:Cannot read license file
4100435:Cannot find ethernet device
4100463:Cannot read /vmunix
4100483:Cannot read /dev/kmem
4100505:Request for more licenses than this feature supports
4100558:License server does not support this version of this feature
4100619:Users are queued for this feature
4100653:License server temporarily busy (new server connecting)
4100709:Feature checkin failure detected at license server
4100760:License file does not support this version
4100803:License server busy (no majority)
4100837:Error in select system call
4100865:License server does not support this feature
4100910:Cannot write data to license server
4100946:Cannot read data from license server
4100983:Cannot connect to license server
4101016:Cannot find SERVER hostname in network database
4101064:No SERVER lines in license file
4101096:Invalid returned data from license server
4101138:Invalid date format in license file
4101174:Feature has expired
4101194:Invalid host
4101207:Invalid (inconsistent) license key
4101242:No socket connection to license manager server
4101289:No port number in license file and "FLEXlm" service does not exist
4101356:No such feature exists
4101379:Licensed number of users already reached
4101420:No server for this feature
4101447:Invalid license file syntax
4101475:Cannot find license file
4101910:The system administrator has reserved all the licenses for others.
4101978:Reservations are made in the options file. The server must be restarted
4102051:for options file changes to take effect.
4102093:1) Check the lmgrd log file, or 2) Try lmreread.
4102143:See the system adminstrator about starting the server, or
4102202:make sure the you're referring to the right host (see LM_LICENSE_FILE).
4102275:The license file indicates THIS_HOST, and the server is not
4102336:running on this host.  If it's running on a different host,
4102398:THIS_HOST should be changed to the correct host.
4102448:This is a warning condition.  The server has pooled one or more
4102513:INCREMENT lines into a single pool, and the request was made on
4102578:an INCREMENT line that has been pooled.  If this is reported as an
4102646:error, it's an internal error in FLEXlm
4102687:The file was issued for a later version of FLEXlm than this
4102748:program understands.
4102770:The server (lmgrd) has not been started yet, or
4102819:the wrong port@host or license file is being used, or the
4102878:port or hostname in the license file has been changed.
4102934:The lookup for the hostname on the SERVER line in the
4102989:license file failed.  This often happens when NIS or DNS
4103047:or the hosts file is incorrect.  Workaround:Use IP-Address
4103108:(e.g., 123.456.789.123) instead of hostname
4103153:The hostid of this system does not match the hostid
4103206:specified in the license file
4103237:The license-key and data for the feature do no match.
4103292:This usually happens when a license file has been altered
4103351:The license files (or server network addresses) attempted are
4103415:listed below.  Use LM_LICENSE_FILE to use a different license file,
4103484:or contact your software provider for a license file.
4103539:Usually this error message should be ignored.
4103586:It occurs when the FLEXlm error message function was called
4103647:though no error was detected
4104086:Vendor:Host
4104098:Platforms
4104108:PACKAGE text
4104121:Version text
4104134:Start date
4104145:Application version > License version
4104183:Server name
4104195:Date text
4104205:Expire date
4104224:Hostname
4104233:License text
4104246:Filename
4104257:INVALID FLEXlm error code
4104283:Feature:
4104314:%-15s %s
4104323:License path:
4104363:For further information, refer to the FLEXlm End User Manual,
4104425:available at "[url=http://www.globetrotter.com]www.globetrotter.com[/url]".
4104462:FLEXlm error:
4104477:%-15s%d,%d.  System Error:%d "%s"%s
4104514:%d,%d:%d (%s)
4104530:%-15s%d,%d
4104541:(%d,%d)
4105410:%s:%s
4105530:no error
4105977:%d-%[^-]-%d
4106804:0123456789ABCDEF
4107098:1-jan-1990
4107113:1-jan-2025
4107127:%d-%s-%d
4108724:hp700_u9
4108978:LM_DEBUG_HOSTID
4109996:/etc/resolv.conf
4110826:DEMO
4110851:INTERNET=
4110876:HOSTNAME=
4110886:DISPLAY=
4110900:ID_STRING=
4110923:SENTINEL_KEY=
4110937:FLEXID=7-
4110952:FLEXID=8-
4110962:FLEXID=9-
4110972:FLEXID=A-
4110987:DISK_SERIAL_NUM=
4111013:VENDORDEF=
4112732:DUP_GROUP not valid with uncounted license
4112775:Hostid required for uncounted feature
4112813:HOST or USER BASED licenses must be counted
4112857:Illegal char in feature name:only alpha-num and '_' allowed
4112918:SUITE only applies to PACKAGE lines
4112954:Can't combine USER_BASED and HOST_BASED
4112994:PACKAGE and COMPONENT name can't be identical
4113040:%d-%[^-]-%d
4113052:ISSUED Invalid date format
4113079:ISSUED Can't have year 0
4113656:03.0
4114484:USE_SERVER
4115223:%s_LICENSE_FILE
4115239:LM_LICENSE_FILE
4115263:FLEXLM_USE_FINDER
4115281:/usr/local/flexlm/licenses/license.dat
4116485:START_LICENSE
4116504:END_LICENSE
4116896:%d%s
4117267:%c%c%c%c%c%c%c%c%s
4119122:%d-%s-%d
4120010:%c%s
4121072:DEMO
4121104:DISPLAY=
4121113:ID_STRING=
4121133:HOSTNAME=
4121155:FLEXID=7-
4121174:SENTINEL_KEY=
4121188:FLEXID=8-
4121201:FLEXID=9-
4121211:FLEXID=A-
4121221:DISK_SERIAL_NUM=
4121243:INTERNET=
4123359:SUPERSEDE
4123377:HOST_BASED
4123388:PLATFORMS
4123398:USER_BASED
4123409:CAPACITY
4123437:SUITE_DUP_GROUP
4123456:COMPONENTS
4123467:dist_info
4123494:asset_info
4123505:user_info
4123515:vendor_info
4123527:OVERDRAFT
4123537:DUP_GROUP
4123554:VENDOR_STRING
4123568:W_LIC_LOSS
4123579:w_term_signal
4123608:w_binary
4124356:SITE
4126380:/dev/tty
4126688:START_LICENSE
4128178:%s %s %s %s %s
4128204:this_host


Also of interest is

Code: [Select]

0:----- System/pSOS Debug commands:-----
1176785:'?' - this help message.
1176815:'j' - drop into breakpoint.
1176848:'^C' - Abort to monitor.
1176877:'^P' - Process status info, and LOTS of it.
1176925:'[dD]' - Print DLP debug information.
1176965:'[bB]' - Big memory hog report.
1176999:'[pP]' - Process ONLY status info.
1177038:'[eE]' - Exchange info.
1177064:'[gG]' - toggle breakpoint exception handlers on/off
1177119:'[tT]' - Time log.
1177140:'[hH]' - History log.
1177164:'[oO]' - Memory segment ownership.
1177201:'[mM]' - Memory segment summary.
1177236:'[sS]' - Semaphore ownership, etc.
1177273:'[uU]' - maximum process stack Usage.
1177313:'[vV]' - memory Validity check.
1177347:'[iI]' - Show psosSystemData.
1177379:'[1]' -  Show NVRAM contents.
1177411:'[9]' -  Show Exception Report.
1177445:'[wW] <process name>' - Show process stack trace.
1177497:Unknown debug char:'%c' (0x%02X).  Press '?' for help.


[tv84]

Sandra,

Can you extract your /usr/local/flexlm/licenses/license.dat ?

Do you have JTAG access?

[smgvbest]

I don't have JTAG access yet.   
my SA has no licenses so its' not the best unit to work with.
my plan is to try several things.
the Serial Port to see if any boot info show up and to see if something I saw is correct as it looks like you can dumb memory thru the serial interface or SCPI interface.

JTAG is a boundary scan only interface on the 68040.   
I haven't seen any predefined targets for 68040 in OCD

[tv84]

A memdump, a boot log, etc. Everything helps.

[smgvbest]

Hum
I read out the boot rom and did the string search there and found some interesting things in there
like a Rom Monitor, GDB, breakpoints, member dump etc...   hummmm

Im going to have to get hooked up the J1 Port RS232

Code: [Select]

3076:@(#)LDS Rev: 3.02 - Module Incremental (Sep  9 2003)
3129:5.00
3774:Self-tests complete.
3795:Main FW Checksum ...
3818:Main Firmware DRAM:
3839:Non Destructive SRAM Test ...
3871:Bootrom DRAM:
3890:Bootrom Checksum ...
3913:addressStrobe ...
3931:onOffStrobe ...
3947:dataStrobe ...
4569:SRAM Cleared
4583:FLASH Cleared
4598:Cache Disabled
4614:Cache Enabled
4629:4MBytes of FLASH
4648:8MBytes of FLASH
4667:12MBytes of FLASH
4687:16MBytes of FLASH
4707:Download to DRAM Selected
4735:Download to Flash Selected
4990:ESALOADR
5800:command not found.
5819:rty test routine
5836:rty
5840:gu [<hex start addr>]  - go to start address
5885:bootvars- display bootrom variables
5921:bootvars
5933:[<hex boot config>] - set the bootrom configuration (see bchelp)
6004:[<hex start addr>] 
6025:- go to start address
6053:- force a breakpoint when starting
6091:gbreak
6098:- force a gdb breakpoint
6123:gbreak
6130:gdb
6134:- enable gdb trapping of exceptions
6170:gdb
6174:dlong
6180:[<hex start address> [m bytes]] - display memory using longs
6243:dlong
6249:dword
6255:[<hex start address> [m bytes]] - display memory using words
6318:dword
6324:dbyte
6330:[<hex start address> [m bytes]] - display memory using bytes
6393:dbyte
6399:dmem
6404:[<hex start address> [m bytes]] - display memory using bytes
6467:dmem
6472:slong
6478:<hex start address> <hexchars> - set memory using longs
6534:slong
6540:sword
6546:<hex start address> <hexchars> - set memory using words
6602:sword
6608:sbyte
6614:<hex start address> <hexchars> - set memory using bytes
6670:sbyte
6676:smem
6681:<hex start address> <hexchars> - set memory using bytes
6737:smem
6742:hmon
6747:[device] - download into memory
6779:hmon
6784:version
6792:- display bootrom version
6818:version
6826:SRAM selftest results:
6850:        Start  = 0x%x
6873:        End    = 0x%x
6896:        Errors = 0x%x
6919:DRAM selftest results:
6943:Downloading from floppy
9532:    ROM Checksum Failure.  Bad Checksum. 
9578:    ROM Checksum Failure.  Bad Table.     01
9623:    ROM Checksum Failure.  Bad ROM Id.    01
9668:    ROM Checksum Failure.  Bad Table.     01
9713:    ROM Checksum Failure.  Bad ROM size.  01
10464:getIoSlotAddr: Illegal slot mber %d
10624:hpibPort = 0x%x
10900:RS232BINARY
10912:HPIB
10917:RS232
11040:hpibPort = 0x%x, bus Address = %d
11418:RAM
11427:Remove disk and cycle power to contie.
11469:LIST
11474:executing at 0x%x
12692:28F032
12699:28F0320
12707:28F016
12714:29F400B
12722:29F400T
12730:29F040
12737:29F010
12744:28F200BX-B
12755:28F200BX-T
12766:MT28F400-B
12777:28F400BX-B
12788:28F400BX-T
12799:28F800BX-B
12810:28F800BX-T
12821:28F001BX-B
12832:28F001BX-T
12843:28F008
12850:28F020A
12858:28F010
12865:28F020
14219:  **  Improper device command sequence.
14261:  **  Vpp Low Detected.
14492:Checking block at 0x%p for erasure.
14604:    Programming memory to zeros
14640:   
14648:  **  Program to zero failed at address 0x%p
14695:    Erasing memory.
14717:  **  Block erase failed at block 0x%p
14764:< (.
15359:  **  Chip Erase failed at adrs 0x%p
15636:    Erasing memory.
16867:Device program failure at 0x%p, write(0x%x), read(0x%x)
19846:  ** Unrecognized EPROM Identifier at 0x%p
20582:Unrecognized EPROM identifier at address 0x%p
20633:Flash ROM is %s with width=%d, memorywidth=%d
20680:Programming from %p to %p.
24116:    ROM Checksum Failure.  Bad Checksum. 
24162:    ROM Checksum Failure.  Bad Table.     01
24207:    ROM Checksum Failure.  Bad ROM Id.    01
24252:    ROM Checksum Failure.  Bad Table.     01
24297:    ROM Checksum Failure.  Bad ROM size.  01
25048:getIoSlotAddr: Illegal slot mber %d
25208:hpibPort = 0x%x
25484:RS232BINARY
25496:HPIB
25501:RS232
25624:hpibPort = 0x%x, bus Address = %d
26124:RS232
26134:RS232BINARY
26146:,LIST
27014:0123456789abcdef
30200:hpibctrl.c: Stubbed version of enableHpibSysControl invoked
30287:Running code from address = 0x%p
30698:***** Mosquito Bootrom *****
30729: ; LDS Bootrom Rev
30752:@(#)HEWLETT-PACKARD, E4401 Bootrom, 5.00
30795:Ron Yamada was here!
31060:Running code from address = 0x%p
35692:FloppyInterruptRoutine: mymsr = %x
44248:media_2mb_512
44466:media_1mb_256
44512:media_1mb_512
44558:media_1mb_1024
44606:media_2mb_256
44652:media_2mb_1024
45384:   Bus Error.
45404:   Failed with exception 0x
45784:testmain.S: mainEntryPoint variable is LL
47204:    Testing
47217: bytes at 0x
47230: bytes
47237:    Memory size too small.
47266:    Bus Error.
47908:    At address(0x
47926:), write(0x
47938:) read(0x
48191:|    RAM bit errors: 0x
48215:    Bus Error.
48514:    RAM refresh errors: 0x
48541:    Bus Error.
48638:bootromRevision   : 0x%08x
48670:compositeErrors   : 0x%08x
48698:bootConfig        : 0x%08x
48726:bootromBdataBegin : 0x%08x
48754:bootromBssEnd     : 0x%08x
48782:bootromMainStack  : 0x%08x
48810:ram1Start         : 0x%08x
48838:ram1Stop          : 0x%08x
48866:ram1Errors        : 0x%08x
48894:ram2Start         : 0x%08x
48922:ram2Stop          : 0x%08x
48950:ram2Errors        : 0x%08x
48978:ram3Start         : 0x%08x
49006:ram3Stop          : 0x%08x
49034:ram3Errors        : 0x%08x
49062:ram4Start         : 0x%08x
49090:ram4Stop          : 0x%08x
49118:ram4Errors        : 0x%08x
52167:MMU Access Level Violation error
52205:MMU Illegal Operation error
52233:MMU Config error
52250:FP Unimplemented Data Type
52277:FP Signaling NAN
52294:FP Overflow
52306:FP Operand Error
52323:FP Underflow
52336:FP Divide by zero
52354:FP Inexact Result
52372:FP Branch or Set on Unordered Condition
52412:Trap #15
52421:Trap #14
52430:Trap #13
52439:Trap #12
52448:Trap #11
52457:Trap #10
52466:Trap #9
52474:Trap #8
52482:Trap #7
52490:Trap #6
52498:Trap #5
52506:Trap #4
52514:Trap #3
52522:Trap #2
52530:Trap #1
52538:Trap #0
52546:Level 7 Autovector
52565:Level 6 Autovector
52584:Level 5 Autovector
52603:Level 4 Autovector
52622:Level 3 Autovector
52641:Level 2 Autovector
52660:Level 1 Autovector
52679:Spurious Interrupt
52698:Uninitialized Interrupt
52722:Format Error
52735:Coprocessor Protocol Violation
52766:Reserved
52775:Trace Exception
52791:Privilege Violation
52811:FTRAPcc, TRAPcc, TRAPV
52834:CHK, CHK2 Instruction
52856:Integer Divide by Zero
52879:Illegal Instruction
52899:Address Error
52913:Access Fault (bus error)
52938:Reset PC
52947:Reset Stack Pointer
52967:Vector #
53355:Unexpected exception at VBR offset 0x%x
53396:  %s
53402:  format = %d, frame is at 0x%x
53435:  PC = 0x%x
53448:  SR = 0x%04x
53463:  Registers = 0x0a007fa4 thru 0x0a007fef
53505:  Access Address = 0x%x
53618:0R/
55368:ROM Monitor
55385:Enter ? for help.
55404:Monitor nested too deep, resetting stack pointer...
56306:DOWNLOAD
56319:HPIB
56324:RS232BINARY
56336:Unable to open '%s' for downloading
56373:Downloading via %s
57090:bad hex char: '%c'
57420:gdb communication enabled.
57496:ERROR: bootConfigAreaSize is zero
57538:ERROR - couldn't zapp boot config!
58600:28F032
58607:28F0320
58615:28F016
58622:29F400B
58630:29F400T
58638:29F040
58645:29F010
58652:28F200BX-B
58663:28F200BX-T
58674:MT28F400-B
58685:28F400BX-B
58696:28F400BX-T
58707:28F800BX-B
58718:28F800BX-T
58729:28F001BX-B
58740:28F001BX-T
58751:28F008
58758:28F020A
58766:28F010
58773:28F020
60127:  **  Improper device command sequence.
60169:  **  Vpp Low Detected.
60400:Checking block at 0x%p for erasure.
60512:    Programming memory to zeros
60548:   
60556:  **  Program to zero failed at address 0x%p
60603:    Erasing memory.
60625:  **  Block erase failed at block 0x%p
61267:  **  Chip Erase failed at adrs 0x%p
61544:    Erasing memory.
62775:Device program failure at 0x%p, write(0x%x), read(0x%x)
65754:  ** Unrecognized EPROM Identifier at 0x%p
66490:Unrecognized EPROM identifier at address 0x%p
66541:Flash ROM is %s with width=%d, memorywidth=%d
66588:Programming from %p to %p.
69368:Copyright 1988-1997,
69390:Hewlett-Packard Company, all rights reserved.
69440:@(#)LDS Rev: 3.02 - Module Incremental (Sep  9 2003) ; Bootrom Rev 5.00
69516:0123456789abcdef
69992:bad checksum.  My count = 0x%x, sent=0x%x. buf=%s
70874:vector=%d, sr=0x%x, pc=0x%x
70914:malformed read memory command: %s
70952:bus error70962:E02
70966:malformed write memory command: %s
71001:new pc = 0x%x
71016:frame at 0x%p has pc=0x%x, except#=%d
72744:Bootrom Revision 5.00
72960:disable
72972:clear
72980:off
72984:false
72995:enable
73002:set
73011:true
73016:yes
73874:Command too short, try one of
73912:Usage: %s
74562:SUBCMD - Don't know what to do?
74599:"%s" subcommands:
74618:valid subcommands:
74824:Valid options:
75638:RAM
75646:boot config area is full
75816:uhpibctrl.c: Stubbed version of enableHpibSysControl invoked
76152:Linked: Sep  9 2003 14:46:44
76185:By: gy
76196:Sep  9 2003
76208:14:46:44
77630:Memory allocation statistics %s
77678:used:
77687:Total in use: %d, total free: %d