Hi - For the 'g' and 'm' query packets, it seems like a response packet starting with "$E..." is entirely valid, if the register contents or memory region starts with a 0xE0-0xEF byte. But remote.c:remote_send() seems to interpret $E... anything as an error, and send_g_packet() uses this one. Am I misreading the code or the specs? - FChE