Enabling options on Agilent ESA series E4402B E4404B E4405B E4407B - Page 1
Forum section: electronics / testgear

author: analogRF
author_rank: Super Contributor
timestamp: October 21, 2019, 02:27:26 pm
content: HiI was wondering if anyone ever hacked these ESA spectrum analyzers to enable options?some options like 1DR and 1DS (or even 1D5 for S/N > 4421) can be enabled by license key onlyhttps://www.keysight.com/main/editorial.jspx?cc=US&lc=eng&ckey=277453&nid=-11143.0.00&id=277453

author: mbielman
author_rank: Contributor
timestamp: November 08, 2019, 12:41:59 am
content: I have the same question! Specifically I want to enable the RF Preamp option. (the hardware should be there) Wondering if I can set a bit in the EEprom on the processor card. OR maybe figure out the key(s) based on the serial number.Anyone?Mark B

author: analogRF
author_rank: Super Contributor
timestamp: November 08, 2019, 02:45:15 am
content: I have heard that these analyzers have been cracked but people who know how it's done, won't disclose anything

author: mbielman
author_rank: Contributor
timestamp: November 08, 2019, 03:52:42 am
content: I have an idea but it would be tedious and slightly dangerous...Pull the EEPROM (processor board - an assumption on my part) from a unit that has some options enabled, and read that.Put it back, disable an option or two, remove it again and reread, then look for changes.Ug!

author: analogRF
author_rank: Super Contributor
timestamp: November 11, 2019, 02:20:05 pm
content: disabling the option in the menus does not remove it from the EEPROMI am pretty sure someone has found a way to enable the options but it is not shared....

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2019, 02:51:49 pm
content: If it's the same as the N1996a CSA and the E7495 it uses FlexLM, I'm the one to blame for the "enhancement" and I have no problem to have a look at these machines as they are discontinued anyway. Does anyone have root access to these machines already?

author: analogRF
author_rank: Super Contributor
timestamp: November 11, 2019, 03:04:43 pm
content: Quote from: PA0PBZ on November 11, 2019, 02:51:49 pmthat would be awesome. unfortunately I don't have root access . I think N1996A is a much newer machine than ESA series...but of course they might be using the same os

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2019, 03:09:57 pm
content: Can you see what format the license code should be? That would probably show if it is FlexLM or something else.I just downloaded the firmware upgrade but it is 9 discsAnd the other version for older OS does not run on my PC.-to be continued-

author: analogRF
author_rank: Super Contributor
timestamp: November 11, 2019, 03:16:45 pm
content: actually I personally do not have one of these analyzers but have been hunting for one for quite some time. if there is a way to enable some non-hardware options then it would be awesome...I have worked with them though...maybe this page will help?https://www.keysight.com/main/editorial.jspx?cc=US&lc=eng&ckey=1000004808:epsg:faq&nid=-35489.384884&id=1000004808:epsg:faq

author: Miek
author_rank: Regular Contributor
timestamp: November 11, 2019, 03:23:24 pm
content: I think you may be able to just concatenate the five ESAFW files, though I'm not completely sure - there might be a header on each.There are references in the source to FlexLM, and an RTOS named pSOS.

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2019, 05:54:35 pm
content: So it runs on some kind of *nix, it is FlexLM and the license file is here: /usr/local/flexlm/licenses/license.dat.The bad news is that the bytes that have to be patched in the other instruments are not to be found in the ESAFW file.So, is there any way to communicate with the ESA, is there a prompt on a serial port? I don't think it has ethernet..Is there a harddisk inside that is readable? No, it's flash.

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2019, 06:46:34 pm
content: Processor is Motorola Coldfire:

author: mbielman
author_rank: Contributor
timestamp: November 11, 2019, 08:59:44 pm
content: Not sure what you are trying to convey here. The ESA instruments use the MC68LC040 (integer only version) and as far as I know do not have a "traditional" OS at all, unlike the newer units.If there is a way to interrogate the system, I would love to know how!

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2019, 09:17:43 pm
content: I'm trying to find a way into the ESA to be able to patch the FlexLM part. It looks like the code disassembles fine as a Coldfire processor but you could be right that it is a 68LC040. It looks like it's not that different and it disassembles fine. The method I used to get around the FlexLM stuff in the other instruments is always returning "ok" on an entered license but you have to patch the FlexLM daemon. If you can't get to the file that is going to be difficult so I'm looking at the install.o file to see how it works and if there is a way to install a patched file, that's basically it

author: mbielman
author_rank: Contributor
timestamp: November 11, 2019, 09:57:26 pm
content: Yeah, not much differs I think between those processors, at least basic op codes. Coldfire is newer than the old MOT 680xx.As mentioned, don't think these run HP-UX, Windows or any such OS. So no idea if there is anything resembling a file system.Although it has A: and C: drives (floppy and flash) so who knows! If it's there, you do not see it when the system boots.

author: Scopetechniques
author_rank: Contributor
timestamp: May 20, 2020, 09:25:48 pm
content: No, the preamp option is not just software. It actually does have a hardware preamp after the input that can be turned on and off.

author: tv84
author_rank: Super Contributor
timestamp: May 20, 2020, 09:51:05 pm
content: Quote from: PA0PBZ on November 11, 2019, 09:17:43 pmHave you succeeded? Do you have JTAG access?

author: PA0PBZ
author_rank: Super Contributor
timestamp: May 21, 2020, 08:01:51 am
content: Quote from: tv84 on May 20, 2020, 09:51:05 pmI gave up looking at the install file (can't remember why) and I don't have the hardware myself so the motivation is low.

author: smgvbest
author_rank: Unknown
timestamp: June 29, 2020, 02:36:22 am
content: My turn to chime in. I just got ahold of a broken E4407B from Alltest. I will be posting a blog about the repair once it arrivesin the mean time, this is a topic I am also interested in. I'd love to enable any of the license only options I could.everything I see says this is not linux at all which I think we agree onI don't think FLExm is involved, they would have had to port it to their proprietary software which seems a waste.I wonder if you could brute force this over SCPI. you can enter the license that way.be interesting to get a few options done.Me first, I have to wait for mine to arrive then figure out what's brokeDoes anyone have the actual CLIP for this I could borrow. I have the scanned version and even it the schematics are hard to readalso anyone have a handle they are not using? Ill post in the wanted section but thought I would askedit: I need to walk back the statement over FLEXLM. it is part of the code as was pointed out by @Miek and the OS is PSOS as also pointed out

author: smgvbest
author_rank: Unknown
timestamp: July 17, 2020, 07:04:58 am
content: Does anyone have a Personality Disk from any of the options and/or a license fileI need your hostID also if anyone is willing to share

author: smgvbest
author_rank: Unknown
timestamp: August 23, 2020, 03:03:31 pm
content: I extracted strings from the E4407B and found some interesting onesin particular is SCPI DebugerCode:Line 7267: 3679704:@(#)LDS Rev:3.10 - Module Incremental (Aug 4 2008) ; hpib (68xxx asm) Rev 1.20Line 7360: 3769948:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Semeval Rev 3.10Line 7438: 3859435:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); scpi_lp Rev 3.10Line 7451: 3862796:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); shr Rev 3.10Line 7509: 3894168:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); active function Rev 3.10Line 7515: 3919656:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); fpanel control Rev 3.10Line 7581: 3942204:@(#)LDS Rev:3.10 - Module Incremental (Mar 26 2007); menu system Rev 3.10Line 7590: 3950528:@(#)LDS Rev:3.10 - Module Incremental (Jul 8 2003); ptp Rev 3.10Line 7607: 3990652:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); scum Rev 3.10Line 7613: 3997792:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Math64 Rev 3.10Line 7614: 4008452:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); cvt (asm source) Rev 3.10Line 7615: 4009139:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); mcat Rev 3.10Line 7630: 4012400:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); rlock Rev 3.10Line 7644: 4017028:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Save-Recall Rev 3.10Line 7646: 4021306:@(#)LDS Rev:3.10 - Module Incremental (Sep 10 1999); OS wrapper for psos Rev 3.10Line 7723: 4051040:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); HIHR Rev 3.10Line 7737: 4059944:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Null Happening Reporter Rev 3.10Line 7738: 4060052:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Tee Happening Reporter Rev 3.10Line 7740: 4060976:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Stderr Happening Reporter Rev 3.10Line 7741: 4061100:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Stdio Happening Reporter Rev 3.10Line 7746: 4061988:@(#)LDS Rev:3.10 - Module Incremental (Oct 11 1999); Scpi Debugger Rev 3.10Line 7765: 4072404:@(#)LDS Rev:3.10 - Module Incremental (Sep 10 1999); optimized memory manager Rev 3.10I also extracted all the FlexLM items i could seeone of interest is/usr/local/flexlm/licenses/license.datCode:4072496:@(#) FLEXlm 6.0d (liblmgr.a), Copyright (C) 1988-1997 Globetrotter Software, Inc.4072583:FLEXLM_COMM_TRANSPORT4074343:FLEXLM_INTERVAL_OK4074373:FLEXLM_USE_FINDER4076772:FLEXLM_DIAGNOSTICS4076795:LM_LICENSE_FILE4076811:%s_LICENSE_FILE4076830:%s%s%s%s%s4078034:FLEXLM_DIAGNOSTICS4078057:FLEXlm checkout error4078079:license file(s):4078103:lm_checkout("%s", %s, %d, 0x%x, ..., 0x%x)4079117:x%s > %s4079130:%d-%[^-]-%d4080510:NOMORE4080771:%d %d4082547:,PORT_AT_HOST_PLUS4083270:DUP_GROUP4083280:SUITE_DUP_GROUP4083296:W_LIC_LOSS4083307:OVERDRAFT4083322:USER_BASED4083333:HOST_BASED4083352:PLATFORMS4083369:SUPERSEDE4083410:DIST_CONSTRAINT4086112:%s=%s4086286:%s=%d4086618:%ld-%[^-]-%ld4093632:PORT_AT_HOST_PLUS4094790:%s %s %s4094811:INCREMENT4094838:%s %s %s %s %s %s %s %s %[^4094869:%s %s %s %s %s %s %s %[^4094897:permanent4094915:uncounted4096630:PORT_AT_HOST_PLUS4096796:%s %s4096936:USE_SERVER4097583:All licenses are reserved for others4097621:Cannot remove a linger license4097652:The decimal format license is typed incorrectly4097700:This FEATURE line can't be converted to decimal format4097755:The desired vendor daemon is down4097789:Server node is down or not responding4097827:Network connect to THIS_HOST failed4097863:Attempt to generate license with incompatible attributes4097920:This feature is available in a different license pool4097974:feature removed during lmreread, or wrong SERVER line hostid4098035:ENCRYPTION_SEEDs are non-unique4098067:Future license file format or misspelling in license file4098125:This platform not authorized by license4098165:System clock has been set back4098196:Checkout exceeds MAX specified in options file4098243:License object already in use4098273:License server doesn't support this request4098317:USER_BASED license has no specified users -- see server log4098377:FLEXlm version of client newer than server4098420:Invalid PACKAGE line in license file4098457:FLEXlm internal error -814098483:FLEXlm internal error -804098509:FLEXlm internal error -794098535:FLEXadmin API functions not available4098573:Bad version number - must be floating point number, with no letters4098641:Internal FLEXlm Error - Please report to Globetrotter Software4098704:SYS$SETIMR call failed4098727:Attempt to read beyond end of license file path4098775:Local checkout filter rejected request4098814:Old VENDORCODE (3-word) struct type passed to lm_init()4098870:Invalid TZ environment variable4098902:Attempt to borrow the same (destination) license twice4098957:License borrowing database corrupted4098994:License borrowing not enabled4099024:No licenses available to borrow4099056:FLEXlm include file/library version mismatch4099101:Unknown VENDORCODE struct type passed to lm_init()4099152:lmremove request before the minimum lmremove interval4099206:You are not a license administrator4099242:Network software (tcp/ip) not available4099282:Cannot read license file data from server4099324:Server message checksum failure4099356:Message checksum failure4099381:setsockopt() call failed4099406:socket() call failed4099427:Cannot compute FEATURESET data from license file4099476:Incorrect FEATURESET line in license file4099518:No FEATURESET line in license file4099553:Checkout request rejected by vendor-defined checkout filter4099613:FLEXlm vendor daemon did not respond within timeout interval4099674:FLEXlm not initialized4099697:FLEXlm key data has expired4099725:Date invalid for binary format4099756:FLEXlm platform not enabled4099784:Clock setting check not available in daemon4099828:FLEXlm software is demonstration version4099869:FLEXlm function not available in this version4099915:Invalid FLEXlm key data supplied4099948:No FLEXlm key data supplied in lm_init() call4099994:Invalid parameter4100012:Feature was never checked out4100042:Cannot allocate dynamic memory4100073:User/host not on INCLUDE list for feature4100115:User/host on EXCLUDE list for feature4100153:Duplicate selection mismatch for this feature4100199:Feature database corrupted in daemon4100236:In the queue for this feature4100266:Clock difference too large between client and server4100319:Bad encryption handshake with daemon4100356:No such attribute4100374:Feature start date is in the future4100410:Cannot read license file4100435:Cannot find ethernet device4100463:Cannot read /vmunix4100483:Cannot read /dev/kmem4100505:Request for more licenses than this feature supports4100558:License server does not support this version of this feature4100619:Users are queued for this feature4100653:License server temporarily busy (new server connecting)4100709:Feature checkin failure detected at license server4100760:License file does not support this version4100803:License server busy (no majority)4100837:Error in select system call4100865:License server does not support this feature4100910:Cannot write data to license server4100946:Cannot read data from license server4100983:Cannot connect to license server4101016:Cannot find SERVER hostname in network database4101064:No SERVER lines in license file4101096:Invalid returned data from license server4101138:Invalid date format in license file4101174:Feature has expired4101194:Invalid host4101207:Invalid (inconsistent) license key4101242:No socket connection to license manager server4101289:No port number in license file and "FLEXlm" service does not exist4101356:No such feature exists4101379:Licensed number of users already reached4101420:No server for this feature4101447:Invalid license file syntax4101475:Cannot find license file4101910:The system administrator has reserved all the licenses for others.4101978:Reservations are made in the options file. The server must be restarted4102051:for options file changes to take effect.4102093:1) Check the lmgrd log file, or 2) Try lmreread.4102143:See the system adminstrator about starting the server, or4102202:make sure the you're referring to the right host (see LM_LICENSE_FILE).4102275:The license file indicates THIS_HOST, and the server is not4102336:running on this host. If it's running on a different host,4102398:THIS_HOST should be changed to the correct host.4102448:This is a warning condition. The server has pooled one or more4102513:INCREMENT lines into a single pool, and the request was made on4102578:an INCREMENT line that has been pooled. If this is reported as an4102646:error, it's an internal error in FLEXlm4102687:The file was issued for a later version of FLEXlm than this4102748:program understands.4102770:The server (lmgrd) has not been started yet, or4102819:the wrong port@host or license file is being used, or the4102878:port or hostname in the license file has been changed.4102934:The lookup for the hostname on the SERVER line in the4102989:license file failed. This often happens when NIS or DNS4103047:or the hosts file is incorrect. Workaround:Use IP-Address4103108:(e.g., 123.456.789.123) instead of hostname4103153:The hostid of this system does not match the hostid4103206:specified in the license file4103237:The license-key and data for the feature do no match.4103292:This usually happens when a license file has been altered4103351:The license files (or server network addresses) attempted are4103415:listed below. Use LM_LICENSE_FILE to use a different license file,4103484:or contact your software provider for a license file.4103539:Usually this error message should be ignored.4103586:It occurs when the FLEXlm error message function was called4103647:though no error was detected4104086:Vendor:Host4104098:Platforms4104108:PACKAGE text4104121:Version text4104134:Start date4104145:Application version > License version4104183:Server name4104195:Date text4104205:Expire date4104224:Hostname4104233:License text4104246:Filename4104257:INVALID FLEXlm error code4104283:Feature:4104314:%-15s %s4104323:License path:4104363:For further information, refer to the FLEXlm End User Manual,4104425:available at "[url=http://www.globetrotter.com]www.globetrotter.com".4104462:FLEXlm error:4104477:%-15s%d,%d. System Error:%d "%s"%s4104514:%d,%d:%d (%s)4104530:%-15s%d,%d4104541:(%d,%d)4105410:%s:%s4105530:no error4105977:%d-%[^-]-%d4106804:0123456789ABCDEF4107098:1-jan-19904107113:1-jan-20254107127:%d-%s-%d4108724:hp700_u94108978:LM_DEBUG_HOSTID4109996:/etc/resolv.conf4110826:DEMO4110851:INTERNET=4110876:HOSTNAME=4110886:DISPLAY=4110900:ID_STRING=4110923:SENTINEL_KEY=4110937:FLEXID=7-4110952:FLEXID=8-4110962:FLEXID=9-4110972:FLEXID=A-4110987:DISK_SERIAL_NUM=4111013:VENDORDEF=4112732:DUP_GROUP not valid with uncounted license4112775:Hostid required for uncounted feature4112813:HOST or USER BASED licenses must be counted4112857:Illegal char in feature name:only alpha-num and '_' allowed4112918:SUITE only applies to PACKAGE lines4112954:Can't combine USER_BASED and HOST_BASED4112994:PACKAGE and COMPONENT name can't be identical4113040:%d-%[^-]-%d4113052:ISSUED Invalid date format4113079:ISSUED Can't have year 04113656:03.04114484:USE_SERVER4115223:%s_LICENSE_FILE4115239:LM_LICENSE_FILE4115263:FLEXLM_USE_FINDER4115281:/usr/local/flexlm/licenses/license.dat4116485:START_LICENSE4116504:END_LICENSE4116896:%d%s4117267:%c%c%c%c%c%c%c%c%s4119122:%d-%s-%d4120010:%c%s4121072:DEMO4121104:DISPLAY=4121113:ID_STRING=4121133:HOSTNAME=4121155:FLEXID=7-4121174:SENTINEL_KEY=4121188:FLEXID=8-4121201:FLEXID=9-4121211:FLEXID=A-4121221:DISK_SERIAL_NUM=4121243:INTERNET=4123359:SUPERSEDE4123377:HOST_BASED4123388:PLATFORMS4123398:USER_BASED4123409:CAPACITY4123437:SUITE_DUP_GROUP4123456:COMPONENTS4123467:dist_info4123494:asset_info4123505:user_info4123515:vendor_info4123527:OVERDRAFT4123537:DUP_GROUP4123554:VENDOR_STRING4123568:W_LIC_LOSS4123579:w_term_signal4123608:w_binary4124356:SITE4126380:/dev/tty4126688:START_LICENSE4128178:%s %s %s %s %s4128204:this_hostAlso of interest isCode:0:----- System/pSOS Debug commands:-----1176785:'?' - this help message.1176815:'j' - drop into breakpoint.1176848:'^C' - Abort to monitor.1176877:'^P' - Process status info, and LOTS of it.1176925:'' - Print DLP debug information.1176965:'' - Big memory hog report.1176999:'' - Process ONLY status info.1177038:'' - Exchange info.1177064:'' - toggle breakpoint exception handlers on/off1177119:'' - Time log.1177140:'' - History log.1177164:'' - Memory segment ownership.1177201:'' - Memory segment summary.1177236:'' - Semaphore ownership, etc.1177273:'' - maximum process stack Usage.1177313:'' - memory Validity check.1177347:'' - Show psosSystemData.1177379:'' - Show NVRAM contents.1177411:'' - Show Exception Report.1177445:' <process name>' - Show process stack trace.1177497:Unknown debug char:'%c' (0x%02X). Press '?' for help.

author: tv84
author_rank: Super Contributor
timestamp: August 24, 2020, 12:32:02 pm
content: Sandra,Can you extract your /usr/local/flexlm/licenses/license.dat ?Do you have JTAG access?

author: smgvbest
author_rank: Unknown
timestamp: August 26, 2020, 02:47:59 am
content: I don't have JTAG access yet.my SA has no licenses so its' not the best unit to work with.my plan is to try several things.the Serial Port to see if any boot info show up and to see if something I saw is correct as it looks like you can dumb memory thru the serial interface or SCPI interface.JTAG is a boundary scan only interface on the 68040.I haven't seen any predefined targets for 68040 in OCD

author: tv84
author_rank: Super Contributor
timestamp: August 26, 2020, 01:06:33 pm
content: A memdump, a boot log, etc. Everything helps.

author: smgvbest
author_rank: Unknown
timestamp: August 27, 2020, 01:14:59 am
content: HumI read out the boot rom and did the string search there and found some interesting things in therelike a Rom Monitor, GDB, breakpoints, member dump etc... hummmmIm going to have to get hooked up the J1 Port RS232Code:3076:@(#)LDS Rev: 3.02 - Module Incremental (Sep 9 2003)3129:5.003774:Self-tests complete.3795:Main FW Checksum ...3818:Main Firmware DRAM:3839:Non Destructive SRAM Test ...3871:Bootrom DRAM:3890:Bootrom Checksum ...3913:addressStrobe ...3931:onOffStrobe ...3947:dataStrobe ...4569:SRAM Cleared4583:FLASH Cleared4598:Cache Disabled4614:Cache Enabled4629:4MBytes of FLASH4648:8MBytes of FLASH4667:12MBytes of FLASH4687:16MBytes of FLASH4707:Download to DRAM Selected4735:Download to Flash Selected4990:ESALOADR5800:command not found.5819:rty test routine5836:rty5840:gu [<hex start addr>] - go to start address5885:bootvars- display bootrom variables5921:bootvars5933:[<hex boot config>] - set the bootrom configuration (see bchelp)6004:[<hex start addr>]6025:- go to start address6053:- force a breakpoint when starting6091:gbreak6098:- force a gdb breakpoint6123:gbreak6130:gdb6134:- enable gdb trapping of exceptions6170:gdb6174:dlong6180:[<hex start address> [m bytes]] - display memory using longs6243:dlong6249:dword6255:[<hex start address> [m bytes]] - display memory using words6318:dword6324:dbyte6330:[<hex start address> [m bytes]] - display memory using bytes6393:dbyte6399:dmem6404:[<hex start address> [m bytes]] - display memory using bytes6467:dmem6472:slong6478:<hex start address> <hexchars> - set memory using longs6534:slong6540:sword6546:<hex start address> <hexchars> - set memory using words6602:sword6608:sbyte6614:<hex start address> <hexchars> - set memory using bytes6670:sbyte6676:smem6681:<hex start address> <hexchars> - set memory using bytes6737:smem6742:hmon6747: - download into memory6779:hmon6784:version6792:- display bootrom version6818:version6826:SRAM selftest results:6850: Start = 0x%x6873: End = 0x%x6896: Errors = 0x%x6919:DRAM selftest results:6943:Downloading from floppy9532: ROM Checksum Failure. Bad Checksum.9578: ROM Checksum Failure. Bad Table. 019623: ROM Checksum Failure. Bad ROM Id. 019668: ROM Checksum Failure. Bad Table. 019713: ROM Checksum Failure. Bad ROM size. 0110464:getIoSlotAddr: Illegal slot mber %d10624:hpibPort = 0x%x10900:RS232BINARY10912:HPIB10917:RS23211040:hpibPort = 0x%x, bus Address = %d11418:RAM11427:Remove disk and cycle power to contie.11469:LIST11474:executing at 0x%x12692:28F03212699:28F032012707:28F01612714:29F400B12722:29F400T12730:29F04012737:29F01012744:28F200BX-B12755:28F200BX-T12766:MT28F400-B12777:28F400BX-B12788:28F400BX-T12799:28F800BX-B12810:28F800BX-T12821:28F001BX-B12832:28F001BX-T12843:28F00812850:28F020A12858:28F01012865:28F02014219: ** Improper device command sequence.14261: ** Vpp Low Detected.14492:Checking block at 0x%p for erasure.14604: Programming memory to zeros14640:14648: ** Program to zero failed at address 0x%p14695: Erasing memory.14717: ** Block erase failed at block 0x%p14764:< (.15359: ** Chip Erase failed at adrs 0x%p15636: Erasing memory.16867:Device program failure at 0x%p, write(0x%x), read(0x%x)19846: ** Unrecognized EPROM Identifier at 0x%p20582:Unrecognized EPROM identifier at address 0x%p20633:Flash ROM is %s with width=%d, memorywidth=%d20680:Programming from %p to %p.24116: ROM Checksum Failure. Bad Checksum.24162: ROM Checksum Failure. Bad Table. 0124207: ROM Checksum Failure. Bad ROM Id. 0124252: ROM Checksum Failure. Bad Table. 0124297: ROM Checksum Failure. Bad ROM size. 0125048:getIoSlotAddr: Illegal slot mber %d25208:hpibPort = 0x%x25484:RS232BINARY25496:HPIB25501:RS23225624:hpibPort = 0x%x, bus Address = %d26124:RS23226134:RS232BINARY26146:,LIST27014:0123456789abcdef30200:hpibctrl.c: Stubbed version of enableHpibSysControl invoked30287:Running code from address = 0x%p30698:***** Mosquito Bootrom *****30729: ; LDS Bootrom Rev30752:@(#)HEWLETT-PACKARD, E4401 Bootrom, 5.0030795:Ron Yamada was here!31060:Running code from address = 0x%p35692:FloppyInterruptRoutine: mymsr = %x44248:media_2mb_51244466:media_1mb_25644512:media_1mb_51244558:media_1mb_102444606:media_2mb_25644652:media_2mb_102445384: Bus Error.45404: Failed with exception 0x45784:testmain.S: mainEntryPoint variable is LL47204: Testing47217: bytes at 0x47230: bytes47237: Memory size too small.47266: Bus Error.47908: At address(0x47926:), write(0x47938:) read(0x48191:| RAM bit errors: 0x48215: Bus Error.48514: RAM refresh errors: 0x48541: Bus Error.48638:bootromRevision : 0x%08x48670:compositeErrors : 0x%08x48698:bootConfig : 0x%08x48726:bootromBdataBegin : 0x%08x48754:bootromBssEnd : 0x%08x48782:bootromMainStack : 0x%08x48810:ram1Start : 0x%08x48838:ram1Stop : 0x%08x48866:ram1Errors : 0x%08x48894:ram2Start : 0x%08x48922:ram2Stop : 0x%08x48950:ram2Errors : 0x%08x48978:ram3Start : 0x%08x49006:ram3Stop : 0x%08x49034:ram3Errors : 0x%08x49062:ram4Start : 0x%08x49090:ram4Stop : 0x%08x49118:ram4Errors : 0x%08x52167:MMU Access Level Violation error52205:MMU Illegal Operation error52233:MMU Config error52250:FP Unimplemented Data Type52277:FP Signaling NAN52294:FP Overflow52306:FP Operand Error52323:FP Underflow52336:FP Divide by zero52354:FP Inexact Result52372:FP Branch or Set on Unordered Condition52412:Trap #1552421:Trap #1452430:Trap #1352439:Trap #1252448:Trap #1152457:Trap #1052466:Trap #952474:Trap #852482:Trap #752490:Trap #652498:Trap #552506:Trap #452514:Trap #352522:Trap #252530:Trap #152538:Trap #052546:Level 7 Autovector52565:Level 6 Autovector52584:Level 5 Autovector52603:Level 4 Autovector52622:Level 3 Autovector52641:Level 2 Autovector52660:Level 1 Autovector52679:Spurious Interrupt52698:Uninitialized Interrupt52722:Format Error52735:Coprocessor Protocol Violation52766:Reserved52775:Trace Exception52791:Privilege Violation52811:FTRAPcc, TRAPcc, TRAPV52834:CHK, CHK2 Instruction52856:Integer Divide by Zero52879:Illegal Instruction52899:Address Error52913:Access Fault (bus error)52938:Reset PC52947:Reset Stack Pointer52967:Vector #53355:Unexpected exception at VBR offset 0x%x53396: %s53402: format = %d, frame is at 0x%x53435: PC = 0x%x53448: SR = 0x%04x53463: Registers = 0x0a007fa4 thru 0x0a007fef53505: Access Address = 0x%x53618:0R/55368:ROM Monitor55385:Enter ? for help.55404:Monitor nested too deep, resetting stack pointer...56306:DOWNLOAD56319:HPIB56324:RS232BINARY56336:Unable to open '%s' for downloading56373:Downloading via %s57090:bad hex char: '%c'57420:gdb communication enabled.57496:ERROR: bootConfigAreaSize is zero57538:ERROR - couldn't zapp boot config!58600:28F03258607:28F032058615:28F01658622:29F400B58630:29F400T58638:29F04058645:29F01058652:28F200BX-B58663:28F200BX-T58674:MT28F400-B58685:28F400BX-B58696:28F400BX-T58707:28F800BX-B58718:28F800BX-T58729:28F001BX-B58740:28F001BX-T58751:28F00858758:28F020A58766:28F01058773:28F02060127: ** Improper device command sequence.60169: ** Vpp Low Detected.60400:Checking block at 0x%p for erasure.60512: Programming memory to zeros60548:60556: ** Program to zero failed at address 0x%p60603: Erasing memory.60625: ** Block erase failed at block 0x%p61267: ** Chip Erase failed at adrs 0x%p61544: Erasing memory.62775:Device program failure at 0x%p, write(0x%x), read(0x%x)65754: ** Unrecognized EPROM Identifier at 0x%p66490:Unrecognized EPROM identifier at address 0x%p66541:Flash ROM is %s with width=%d, memorywidth=%d66588:Programming from %p to %p.69368:Copyright 1988-1997,69390:Hewlett-Packard Company, all rights reserved.69440:@(#)LDS Rev: 3.02 - Module Incremental (Sep 9 2003) ; Bootrom Rev 5.0069516:0123456789abcdef69992:bad checksum. My count = 0x%x, sent=0x%x. buf=%s70874:vector=%d, sr=0x%x, pc=0x%x70914:malformed read memory command: %s70952:bus error70962:E0270966:malformed write memory command: %s71001:new pc = 0x%x71016:frame at 0x%p has pc=0x%x, except#=%d72744:Bootrom Revision 5.0072960:disable72972:clear72980:off72984:false72995:enable73002:set73011:true73016:yes73874:Command too short, try one of73912:Usage: %s74562:SUBCMD - Don't know what to do?74599:"%s" subcommands:74618:valid subcommands:74824:Valid options:75638:RAM75646:boot config area is full75816:uhpibctrl.c: Stubbed version of enableHpibSysControl invoked76152:Linked: Sep 9 2003 14:46:4476185:By: gy76196:Sep 9 200376208:14:46:4477630:Memory allocation statistics %s77678:used:77687:Total in use: %d, total free: %d