Pages 1--95 from e11.dvi

FOR 30-DAY COMMERCIAL
EVALUATION ONLY

Copyright c 1994{2000 by Digby's Bitpile, Inc.
All rights reserved.

Release date: 01-Oct-2000




 




 


D Bit 11 Bank Street  Troy, NY  12180  USA  www.dbit.com 1
1 Page 2 3



 




 
 Digby's Bitpile, Inc. DBA D Bit
11 Bank Street
Troy, NY 12180
USA

+1 (518) 271-6824
+1 (518) 272-3853 FAX
e11@dbit.com
www.dbit.com

Copyright c 1994{2000 by Digby's Bitpile, Inc. All rights reserved.
The following are trademarks of Digby's Bitpile, Inc.:



D Bit E11 Ersatz

The following are trademarks or registered trademarks of Digital Equipment Corporation:
DEC DECnet DECtape DECwriter DIGITAL
IAS MASSBUS PDP PDT P/OS
Q-BUS RSTS RSX RT-11 ULTRIX
UNIBUS VT

The following are trademarks or registered trademarks of S&H Computer Systems, Inc.:
TSX TSX-Plus
Other product, service, and company names that appear in this document are used for identication purposes only,
and may be trademarks and/or service marks of their respective owners. 2
2 Page 3 4
Contents
1 Introduction 1
1.1 Emulatedblockdevicetypes.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 2
1.2 Emulatedsequentialdevicetypes.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 3
1.3 Emulatedserialdevicetypes.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 3
1.4 Emulatednetworkdevicetypes... . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 3
1.5 PChardwaresupport . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 3
1.6 Devicenames. .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 5
1.7 Filenames. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 6
1.8 Notes . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 7
1.8.1 Interrupts. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 7
1.8.2 Hostsystems .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 7
1.8.3 Copyrightandlicensing . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 8
1.9 Acknowledgments. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 8
1.10History .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 9

2 Installation and Conguration 10
2.1 Systemrequirements.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 10
2.2 Installation . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 11
2.3 Conguration... . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 12 3
3 Page 4 5
3 Transferring the PDP-11 Operating System to the PC 15
3.1 SCSIdisks. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 15
3.2 SCSItapes . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 16
3.3 Kermit... . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 16
3.4 Ethernet.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 17
3.5 ASCIIserialdump... . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 17
3.6 System-specicnotes.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 18
3.7 Utilities . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 19

4 Disk Devices 20
4.1 PCdiskdevices.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 21
4.1.1 Diskimageles. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 21
4.1.2 Raw oppydiskdrives. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 23
4.1.3 RawCD-ROMdrives . . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 24
4.2 EmulatedPDP-11diskdevices . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 26
4.2.1 DC: | RC11/RS64 . . . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 26
4.2.2 DF: | RF11/RS11, DDC DMS-11X/SSDM 100 (called RF: in RT-11) . . . . . . . .. . .. . 27
4.2.3 DK:|RK02,RK03,RK05DECpack(calledRK:inRT-11) . .. . . .. . .. . . .. . .. . 27
4.2.4 DL:|RL01,RL02 .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 28
4.2.5 DM:|RK06,RK07.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 28
4.2.6 DP:|RP02,RP03.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 29
4.2.7 DS:|RS03,RS04. .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 29
4.2.8 DT:|TU55,TU56DECtape ... . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 30
4.2.9 DU:|MSCPdisks .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 30
4.2.10DX:|RX01.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 31
4.2.11DY:|RX02,\RX03". . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 32 4
4 Page 5 6
4.2.12HD:|Hypotheticaldisk.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 32
4.2.13 PD: | PDT-11/150 RX01 . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 33

5 Tape Devices 34
5.1 PCtapedevices.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 34
5.1.1 Tapeimageles . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 34
5.2 EmulatedPDP-11tapedevices. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 35
5.2.1 CT:|TU60DECcassette . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 35
5.2.2 MM: | TE16/TU16, TU45, TU77 . . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 36
5.2.3 MS:|TK25,TS04,TS05,TU80 . . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 36
5.2.4 MT:|TS03,TU10.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 37
5.2.5 MU:|TMSCPtapes. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 38

6 Serial Lines 39
6.1 PCserialdevices. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 40
6.1.1 Serialoptionscommontoalldevices. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 40
6.1.2 Videoconsoles . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 41
6.1.3 COMports... . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 42
6.1.4 PClineprinterport .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 43
6.1.5 SoundBlasterMIDIport .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 44
6.2 EmulatedPDP-11serialdevices. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 46
6.2.1 LP:|LP11,LPV11lineprinterports.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 46
6.2.2 TT:|DL11,DLV11singleseriallineunits. .. . .. . . .. . .. . . .. . .. . . .. . .. . 46

7 Network Devices 47
7.1 PCnetworkdevices. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 47
7.1.1 NE2000: | NE2000 and compatibles . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 47 5
5 Page 6 7
7.1.2 PKTD:|Packetdrivers .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 48
7.2 EmulatedPDP-11networkdevices. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 50
7.2.1 NI: | Interlan NI1010A, NI2010A Ethernet ports . . . . .. . .. . . .. . .. . . .. . .. . 50
7.2.2 XE:|DELUAEthernetport . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 50

8 Miscellaneous Devices 51
8.1 ROMdevices . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 51
8.2 DO: | PC le access pseudo-device . . . . . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 52
8.3 PP: | PC04 paper tape punch . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 53
8.4 PR:|PC04papertapereader. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 53
8.5 VT:|VT11vectorgraphicsdisplayprocessor . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 54

9 Commands 55
A Keyboard Script Language 71
A.1 Defaultkeyboardlayout. . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 71
A.2 Keyboardscriptstatementdescriptions .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 72
A.3 Keynames . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 76
A.4 Flags. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 78
A.4.1 Read/write ags . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 78
A.4.2 Read-only ags. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 79

B Debugging Features 80
B.1 Displayingandmodifyingmemory . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 81
B.2 Assemblyanddisassembly. .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 82
B.3 Registers.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 82
B.4 Breakpointsandsingle-stepping. .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 82
B.5 Memorymapping. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 83 6
6 Page 7 8
B.6 Device logging . . . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 83
B.7 Loadinganddumpingmemory . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 83
B.8 Switchanddisplayregisters.. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 84

C Dates and Times 85
C.1 Booting .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 85
C.2 PCclock.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 86
C.3 Year 2000 issues . . . . . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 86
C.3.1 KDJ11ETOYclock .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 86
C.3.2 DatesinRT-11andTSX-Plus . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 86
C.3.3 DatesinRSX.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 87
C.3.4 DatesinRSTS/E. . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 87
C.3.5 DatesinFuzzball. . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 87
C.3.6 DatesinUnix.. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . . .. . .. . 87 7
7 Page 8 9
8
8 Page 9 10
Chapter 1
Introduction
Ersatz-11 is a software replacement for PDP-11 minicomputer systems. When running on typical PC hardware, it
substantially outperforms any PDP-11 model ever produced by DEC, outpaces all known aftermarket clone CPUs,
and is the fastest PC-to-PDP-11 software emulator available at any price. Yet it is the most inexpensive PDP-11
replacement product on the market.

The achievable performance continues to increase as new 80x86 compatible CPUs are released, so future upgrades
are possible without requiring that a new PDP-11 CPU board be purchased. The emulated system is congured
using simple commands, allowing the exibility to duplicate almost any existing system easily. The conguration
of the emulated system can be changed at any time, even while the system is running. Wherever possible, E11
provides useful defaults, to simplify the conguration process. It will choose between Q-bus and Unibus controller
models depending on the emulated CPU type, and will auto-compute \ oating" CSR and vector addresses, for
devices that use them. It also chooses the default interrupt priority level according to the CPU type, since in many
cases the Q-bus version of a peripheral interrupts on level 4 even though the original Unibus version uses level 5.
In all cases these defaults can be overridden with SET commands.

Ersatz-11 emulates the entire PDP-11 system in software, including most standard disks, tapes, serial devices, and
network interfaces. E11 is intended to boot and run any PDP-11 operating system. It has been tested with
RT-11 (all avors), RSX-11M, RSX-11M-PLUS, RSTS/E, IAS, TSX-Plus, 2.9BSD and 2.11BSD UNIX, DSM-11,
DOS/BATCH, Fuzzball (BOS), and XXDP+.

Emulated conguration
 PDP-11/20, PDP-11/23, PDP-11/24, PDP-11/34a, PDP-11/40, PDP-11/44, PDP-11/45, PDP-11/53, PDP-
11/70, PDP-11/73, PDP-11/83, PDP-11/84, PDP-11/93, or PDP-11/94 CPU with individually selectable
features

 FP11/FPF11/FPJ11 (etc.) oating point processor, FIS oating instruction set option, KE11 extended arith-
metic element (EAE)

 248 KB{350 KB main memory (approx.)
 Many dierent models of disks, tapes, serial and network devices (see tables below).

1 9
9 Page 10 11
2 Introduction
1.1 Emulated block device types
dev name controller type(s) drive type(s)
DC: RC11 RS64 xed-head disks

DF:/RF: RF11, DMS-11X RS11 xed-head disks, DDC SSDM 100 RAM disks
DK:/RK: RK11D RK02, RK05 front-loading cartridge drives
DL: RL11 1 , RLV11, RL01, RL02 top-loading cartridge drives
RLV12

DM: RK611 2 RK06, RK07 top-loading cartridge drives
DO: (virtual) Ersatz-11 interface to host le system (for DO.SYS/DOS.TSK)
DP: RP11C RP02, RP03 pack drives
DS: RH11, RH70 RS03/RS04 xed-head disks
DT: TC11 TU55/TU56 DECtape
DU: UDA50, KDA50, RA60, RA70{73, RA80{82, RA90/92, RC25, RD31{32, RD50{54,
RQDX3, RQZX1 RX33/RX50 MSCP disks

DX: RX11, RXV11 RX01 8" SS SD oppy
DY: RX211, RXV21 RX02 8" SS DD (or DS DD) oppy
HD: (virtual) Ersatz-11 hypothetical disk with simplied interface (for HD.SYS)
PD: RXT11 RX01 8" SS SD oppy (PDT-11/150 microcomputer)
1 \RL211" was used as a marketing name in systems with RL02 drives, but is the identical controller to the RL11.
2 \RK711" was used as a marketing name in systems with RK07 drives, but is the identical controller to the RK611. 10
10 Page 11 12
Introduction 3
1.2 Emulated sequential device types
dev name controller type(s) drive type(s)
CT: TA11 TU60 DECassette dual cassette tape

MM: RH11/RH70 + TM03 TE16, TU45, TU77 Massbus magtape drives
MS: TS11, TSU05/TSV05, TS04, TS05, TU80 magtape drives,
M7454, TQK25 TK25 cartridge tape drive

MT: TM11 TS03, TU10 magtape drives
MU: KLESI, TQK50, TQK70 TU81, TK50, TK70 TMSCP tapes
PR:/PC: PC11 PC04 high speed paper tape reader/punch

1.3 Emulated serial device types
dev name port type(s) description
LP: LP11, LPV11 Line printer interfaces

TT: DL11, DLV11 Single serial line units

1.4 Emulated network device types
dev name port type(s) description
NI: NI1010A, NI2010A Interlan Unibus/Q-bus Ethernet interfaces

XE: DELUA Unibus Ethernet interfaces

1.5 PC hardware support
 Block devices: disk image les, raw oppy drives, raw CD-ROM drives
 Tape devices: tape image les
 Character devices: Emulated VT100 on SVGA (can ip between up to 12 virtual screens), COM, LPT, Sound
Blaster MIDI ports

 Network devices: NE2000 clones, packet drivers 11
11 Page 12 13
4 Introduction
This is a stripped-down demonstration version of Ersatz-11, which when used for commercial purposes may only be
installed for an evaluation period limited to 30 days. After this time, commercial users must either buy E11 (either
the \Lite" or full version), or delete all copies of the demo version in their possession. There is no limitation on
hobby/personal use of this demo package. Commercial use is dened as anything having to do with the operation of
a for-prot business. Older versions of Ersatz-11 (V1.1A and earlier) had no such limitation on use, so this notice
does not apply to them, however they are no longer supported by D Bit.

This demo version of Ersatz-11 is available by anonymous FTP from ftp.dbit.com. The directory is pub/e11.
The emulator speed depends on the application and the host system. In general E11 on any speed Pentium II,
Pentium III, or Athlon runs on the order of ve to ten times the speed of a PDP-11/93. In real mode versions of
E11, writing MMU registers is an expensive operation which slows down multiuser OSes, compared to RT-11FB for
example. This is far less of a factor in the full version of E11, which has an entirely dierent MMU implementation
due to running in protected mode. Meanwhile, E11's disk I/O is much faster than that of real PDP-11s, especially
when run under an operating system which provides good disk caching.

The FP11 oating point processor emulation currently requires a math coprocessor. If the PC has none, then
the emulated PDP-11 will have no FPP either. Intel Pentium CPUs that have the oating point divider bug are
detected and a workaround is used to get correct results at a slight speed penalty (for DIVF/DIVD only). The FIS
emulation does not require a math coprocessor, but does require an 80386 or later CPU.

The system has been tested under the XXDP+ diagnostic monitor. It passes the KD11EA diagnostics DFKAA,
DFKAB, and DFKAC, and the FP11A diagnostics DFFPA, DFFPB, and DFFPC. It does not work with MMU
diagnostics due to the absence of the maintenance mode. It has been found that passing or failing DEC diagnostics
does not bear much relation to actual operation with real-world software and operating systems, because the
diagnostics are designed mainly to detect known failure modes of real DEC hardware, and not to verify new
implementations. 12
12 Page 13 14
Device names 5
1.6 Device names
With the exception of PC les, just about every I/O device used by Ersatz-11 has a device name ending in a colon
(\:"). This applies to both emulated PDP-11 devices and real PC hardware devices. Each device (disk unit, serial
line, etc.) has a name that normally conforms to the following prototype:

dev[c][u]:

dev Alphabetic device name identifying the device type: always two letters for emulated PDP-11 devices,
variable for PC hardware devices.

c Optional letter (A{Z) identifying which of the (potentially) multiple controllers of the same type is control-
ling this particular device. Specied only with controllers that can support multiple devices. A reasonable
default is used if it is omitted, generally the rst or only controller of that type. The controller letter is
always displayed in output from the SHOW command for devices where it is meaningful, so the name given
by SHOW will have the letter even if you didn't specify one. In the demo version of E11, the RH11/RH70
Massbus controllers, TC11 DECtape controllers, and HD: pseudo disks are the only controller types of
which there may be more than one. All other types will always use controller A so the default is always the
only choice.

u Optional unit number identifying the device; default is the rst unit on the controller. The unit number
should be omitted when referring to the controller as a whole (e.g. SET commands).

The two-letter device names for emulated PDP-11 devices are taken from the names used by the popular PDP-11
operating systems. Where possible, synonyms are available to ensure that the device names will be familiar to
users of each operating system. For example, DELUA ports may be referred to using either the RSTS/RSX name
(\XE:"), or the RT-11 name (\NU:"), and similarly, RK05 disk units may be called \DK:" or\RK:".

However E11 uses a more consistant naming system than these operating systems do, since the rst two letters of
a PDP-11devicenamealways depend on the controller type.

In some cases this leads to dierences, for example \TTu:" (or\KBu:", which is a synonym) refers specically to a
DL11/DLV11 serial port, while in RSX and RSTS, all terminal ports are mapped to one of these names regardless
of the port type. But in E11, a serial port located on a DZ11/DZV11 is always \YZcu:". As a result, the device
names used by E11's command language may not necessarily be identical to those used by the operating system
for the same devices.

The device names for PC hardware are the same as those used by DOS for those devices that actually have names
in DOS. So CON: refers to the rst video session, COM1:{COM4: are serial ports (AUX: is a synonym for COM1:), and
LPT1:{LPT4: are parallel ports (PRN: is a synonym for LPT1:). For other devices a short mnemonic name is used,
with an optional letter identifying the controller for devices like multi-port serial interfaces where a port number
alone isn't enough to uniquely identify the device. Note that PDP-11 unit numbers always start at 0 (TT0:, DU0:,
MU0: etc.) while PC unit numbers generally start at 1 (COM1, LPT1).

For a very few devices (both real and emulated), identifying the controller and unit isn't enough since there
may be multiple slaves attached to the same master unit. In this case the device name is expanded to look like
\dev[c][u][ s]:", where s is the optional slave number within unit u. This form is rarely used since it only makes
sense on emulated Massbus tape drives with multiple slaves attached to the same formatter, or on SCSI devices
with multiple LUNs within the same target such as the old Adaptec ACB-4000A SCSI/MFM bridge boards. In
any case if s is omitted (as well as the preceding underscore) a reasonable default is used. 13
13 Page 14 15
6 Filenames
1.7 Filenames
A few rules apply to PC les referenced using E11 commands. When a reference is made to an existing le, without
a drive name or directory path in the le specication, E11 searches for it rst in the current directory, then in
the directory where the E11 executable le is located(under DOS V3.0 and later), then in the directories listed
in the PATH environment variable. A lename may be enclosed in single (') or double (") quotes to allow lower
case or special characters in the name, however this is only useful when running on a system that supports the
\long lenames" extended DOS calls. Path elements must be separated by \n" characters, except when the le
specication is enclosed in single or double quotes in which case either forward slashes or backslashes may be used.
Each command that takes a lename has a default extension which is added when none is supplied by the user.

Typical default extensions are:

.ext type of le relevant command
.CMD command le @[d:pathn]lename
.DSK disk image le MOUNT
.INI init le /INITFILE switch
.LOG log le LOG
.PAP paper tape image le MOUNT PR:/PP:
.PDP binary memory image LOAD, DUMP
.TAP tape image le MOUNT 14
14 Page 15 16
Notes 7
1.8 Notes
1.8.1 Interrupts
The interrupt system is somewhat complicated, mainly due to some assumptions in DEC OSes (particularly RSX
and RT-11 SJ) about how many instructions are guaranteed to be executed after writing a command to a device
CSR, before the device will complete the operation and interrupt. Since MS-DOS doesn't support asynchronous
I/O (unless you go to extremes which wouldn't have made sense in a CPU-bound program like an instruction set
simulator), it's natural to have most emulated device I/O appear to the PDP-11 to be instantaneous (although this
is an illusion, the PC takes time between emulated PDP-11 instructions to do the transfer), with the completion
interrupt occurring before the instruction following the one that started the transfer. Unfortunately this causes
trouble with some drivers that assume that they are guaranteed the time to execute a certain number of instructions
before the completion interrupt occurs.

This is not actually a bug if it works on all real PDP-11 models, but it leads to incorrect operation if the emulated
hardware appears to be fast enough to complete an operation before the expected minimum number of instructions
is executed. Under testing, RSX appeared to issue WAIT instructions for TTY output which was assumed not to
have completed yet a few dozen instructions after writing a character to a DL11 (thus hanging the system), and
similarly the RT-11 SJ (but not FB/XM) keyboard interrupt service routine runs with interrupts enabled on the
assumption that another keyboard interrupt couldn't possibly happen before the current ISR nishes. When this
does happen the ISR recurses and the characters are put in the buer in reverse order, which was happening with
VT100 keypad keys in E11.

The solution to these problems is to use a queueing system, so that the interrupt (and in most cases the transfer
itself ) doesn't occur until a pre-set number of instruction fetches after the instruction that started the transfer. The
default delays are intended to be adequate for most users. However when troubleshooting with custom operating
systems, this is a good place to experiment if E11 appears to work with your application using certain emulated
devices, but not others. Much less trouble has been experienced with disks and tapes, so by default most of them
are set to execute all functions in one instruction time. The RSX MSCP initialization sequence is an exception,
so the default delays are tuned appropriately. The RK11 handler in DOS/BATCH requires an unusually slow
disk controller, so in order to use that you must rst issue a command like SET DELAY RK11D *=8000 to make all
RK11D disk commands take 8000 instruction fetches to complete. For reasons given above, the character-at-a-time
devices have larger default delay counts. RK05/06/07 seek completion attentions may be delayed still further
beyond acknowledging the seek command, so as not to confuse overlapped seek drivers. However you'll get faster
results using a non-overlapped driver if one is supplied with your OS. Since all your emulated disks will typically
be on one physical PC disk with only one head carriage, there's nothing to overlap anyway.

1.8.2 Host systems
D Bit occasionally receives inquiries from users who want Ersatz-11 to be ported to architectures other than the
80x86, and/or operating systems other than Linux and DOS. Currently there are no plans to do this. Besides the
expense and diculty of moving software between radically dierent host systems, D Bit is considers its ability
to provide adequate customer support to be of primary importance, and this would not be possible if there were
many dierent versions of E11. Also, some popular operating systems are simply not designed to be responsive or
reliable enough for trouble-free use in typical PDP-11 applications.

Rather than produce poorly supported versions of E11 for a myriad of host systems which provide more hindrance
than help to the task of emulating a PDP-11 system, D Bit has chosen to focus its eorts on the 80x86 architecture 15
15 Page 16 17
8 Notes
under Linux and DOS. This hardware has the best price:performance ratio of anything currently available, it's
what the vast majority of E11 customers are already running anyway, and its programming architecture lends itself
well to ecient PDP-11 emulation. The two supported operating systems are inexpensive and easy to install, they
provide a good set of helpful services to E11 but also allow easy access to hardware so that Ersatz-11 has the
control it needs, adequate DOS emulation is available in a variety of other operating systems, so that again, most
users already have a system which is capable of running E11.

1.8.3 Copyright and licensing
Ersatz-11 is Copyright c 1994{2000 by Digby's Bitpile, Inc. All rights reserved. Distribution of this document
and/or the INSTALL.EXE auto-installing executable le (demo version only) in unmodied form, without charge,
is allowed pursuant to the usage restrictions given at the beginning of this document. Anything else is strictly
forbidden.

1.9 Acknowledgments
D Bit would like to thank the many people who provided technical help and debugging input. Bob Supnik,
formerly of DEC, and Alan Sieving of QED provided valuable details of poorly documented PDP-11 instruction
set semantics. Many people have helped debug Ersatz-11 with their congurations. Frank Borger's (U. Chicago)
work with RT-11SJ and IAS has been particularly impressive, as have Paul Koning's (Xedia) insights into RSTS
and Eduard Vopicka's (Prague University of Economics) and John Shilling's (JSA) help with RSX. Chip Charlot
(formerly of Mentec), and Dave Carroll of Mentec have provided invaluable technical help and encouragement. 16
16 Page 17 18
History 9
1.10 History
31-Oct-1993; development started.
V0.8 BETA, 29-Mar-1994; initial release.
V0.9 BETA, 05-Jul-1994; many bug xes (mainly trap handling, MMU emulation, DIV instruction, and VT100
reverse video), added RX211 emulation, multiple DL11s, and 50 Hz KW11L mode.

V1.0 BETA, 14-Nov-1994; more bug xes, added FP11A, RK611/RK06{07, LP11, D-space, and supervisor mode
emulation. Also CALCULATE, HELP, INITIALIZE, LOG, SET/SHOW CPU, SET DR LPTn:, SET SCROLL, SHOW MMU com-
mands, VT100 graphics/underline, changed to .EXE le (ran out of space in unied code/data segment in .COM
le).

V1.1 BETA, 22-Mar-1995; still more bug xes (IAS nally works), DELUA Ethernet emulation, disk LOGging,
indirect command les, workaround for Pentium FDIV bug, help text moved to le, Russian HD: device (and RT-11
driver), PC11, display general registers on parallel port LED board.

V2.0 DEMO, 20-Jul-1997; many bug xes as usual, limited 22-bit MMU with and without Unibus map. MMU
SR1 mechanized, TOY clock, CPU emulation extended to include 11/24, 11/44, 11/45, 11/70, 11/94. Added
RXT11/RX01, RK02/RK05, RS03/RS04, TU56, TU10, TU60, TE16/TU45/TU77 device emulation. Denable
keyboard. Loadable ROM/EEPROM. Many new oppy types, which may now be used with any disk controller
type.

(Many intermediate V2.0x full versions were released throughout 1997 and 1998.)
V2.1 Full version, 01-Apr-1999; runs in protected mode with full 22-bit MMU. MSCP, TMSCP, RMxx/RPxx,
TS11, DZ11/DZV11, DHU11/DHV11, DEQNA device emulation. Support for Q/Unibus bridges. Boca, Chase
PCI-FAST, Digi, RocketPort/PCI, SBMIDI serial drivers. NE2000 Ethernet driver. Physical port drivers for SCSI
disk/tape drives, RAM disks/tapes. FLOATING address calculation, DEFAULT controller types. PDP-11/23, 53,
73, 83, 84, 93 CPU types added. Demo/Lite versions have a subset of these features.

V2.1A, 01-Oct-1999; concatenated image les to form one large disk, CDROMx: driver, other minor improvements
and bug xes.

V2.2, 01-Apr-2000; DH11, DM11BB, DR11C, VT11, Interlan NI1010A/NI2010A emulation, FIS instruction set,
KE11 EAE, mini-assembler. Hardware drivers added or extended for DCI-1300 digital I/O boards, SVGA graphics,
ISA RocketPorts, BCI-2004/BCI-2104 bus adapters, multiple physical serial devices. SCSI disk partitioning added.
Most disk \write headers" commands perform low-level format. Documentation overhauled.

V3.0, 01-Oct-2000; Linux version released. DMS-11X RAMdisk, SET THROTTLE, Data Products printer support,
PCI LPT cards, congurable interrupt priorities. Additional SET CPU options to support early CPU models. 17
17 Page 18 19
Chapter 2
Installation and Conguration

2.1 System requirements
Installation of Ersatz-11 requires the following:
 Intel 80x86-compatible PC with 80186 or later CPU (80386 required to emulate FIS option)
 At least 640 KB of available system memory.
 1 MB of available disk space for Ersatz-11 itself, plus space for all disk image les (equivalent to the size of
the disk drives they replace).

 Microsoft MS-DOS, IBM PC-DOS, Caldera DR-DOS, or a DOS session in Windows, OS/2, or Linux.

Running Ersatz-11 under plain DOS gives better response time to external events, and better access to non-standard
PC hardware. However running in a DOS session under another operating system typically gives a dramatic increase
in disk speed due to the improved disk caching. So the decision of which host operating system to use should be
based on the exact needs of the PDP-11 system.

Issues to consider when selecting the host operating system:

 DOS itself has essentially no disk caching, and the add-on disk caches that are available typically do not work
well with large disks and don't take advantage of the large amounts of RAM found on modern PCs. However
DOS allows E11 unlimited access to special hardware (such as bus adapters), and it's generally very stable,
inexpensive, and easy to install. And it's small enough that in some cases, an entire E11 system can boot
and run from a single oppy disk.

 Windows 95/98 has good disk caching, and doesn't interfere much with hardware access, but it has a very poor
task scheduler. It signicantly reduces the amount of CPU time that E11 gets when it is not the foreground
(or full-screen) window, and often fails to deliver clock interrupts to E11, so the PDP-11's clock can appear to
stop. Even if E11 is in the foreground window, Windows will occasionally suspend E11's execution for several
seconds to perform housekeeping functions, which degrades response time and causes the PDP-11 clock to
lose time.

10 18
18 Page 19 20
Installation and Conguration 11
 Windows NT has good disk caching and a true pre-emptive scheduler, but it has very bad DOS emulation.
All accesses to hardware are intercepted and virtualized by the operating system, not accesses just to devices
that are being shared with other programs. As a result, there's no way to access Ethernet ports or raw SCSI
disk/tape drives or bus adapters, or anything else besides the basic core PC peripherals (screen, keyboard,
display, COM/LPT ports etc.). Also, Windows NT isn't very reliable about delivering clock interrupts to
E11, so the PDP-11 clock loses time.

 OS/2 has excellent disk caching (for native partition types), a true pre-emptive scheduler, good DOS emu-
lation, and allows E11's built-in device drivers free access to hardware. Disadvantages of OS/2 are that it's
dicult to obtain, not well supported, and has poor caching of FAT partitions.

2.2 Installation
Installation is very straightforward. Simply insert the distribution disk into a oppy drive and type:
C:n>a:install
If the oppy drive is not drive A:,substitute the actual drive name in the above command. The installation program
will prompt for a directory into which to install, and will then extract all the E11 les from the distribution disk.
The les are as follows:

le contents
E11.EXE executable
E11.HLP \HELP" data le
E11.PDF this document, readable with Adobe Acrobat
HD*.* source and binaries for RT-11 HD: driver
DO*.* source and binaries for RT-11 DO: driver
KED.CMD keyscripts for using cursor keys with KED/EDT

E11's home directory is also a sensible place to put disk image les (*.DSK) and the E11.INI initialization le (see
below), since E11 will look there if these les aren't found in the current working directory.

Drivers for most of the PC hardware that E11 controls are built into E11 itself, so there is often no need to load
any external drivers or TSR programs. However there are some exceptions. These are listed below, along with
the device emulations or drivers that may require them, and examples of typical lines that would be added to
the CONFIG.SYS and/or AUTOEXEC.BAT les to load the drivers. The drivers themselves are supplied by the
hardware vendor and/or the operating system.

driver needed by typical command line
Packet Driver DEQNA/ PCIPKT 0x60 (in AUTOEXEC.BAT)
DELUA
Mouse VT11 DEVICE=C:nMOUSEnMOUSE.SYS (in CONFIG.SYS)
or C:nMOUSEnMOUSE (in AUTOEXEC.BAT)
CD-ROM CDROM: DEVICE=C:nSBCDnSBIDE.SYS /D:MSCD001 /V (in CONFIG.SYS)
and C:nDOSnMSCDEX /D:MSCD001 (in AUTOEXEC.BAT) 19
19 Page 20 21
12 Installation and Conguration
Whether or not the above drivers will be needed depends on the conguration of the emulated system. Most
common congurations don't require any of them. If needed, these drivers are installed by adding lines similar to
the above examples to the CONFIG.SYS and/or AUTOEXEC.BAT les, using a text editor.

2.3 Conguration
Ersatz-11 is congured using a text le named \E11.INI," which is normally kept in E11's home directory. This
le may be created using any text editor. It contains a series of commands which are read and processed in order
every time E11 starts up. Lines which start with a \;" or\!" character are treated as comments, and ignored.
Each individual serial line or emulated disk or tape unit is created with a one-line command. Typically there will
also be additional commands to dene the emulated CPU model, set any non-standard device addresses or device
types, and nally the initialization le usually ends with a BOOT command which boots the emulated PDP-11's
operating system. The table below summarizes which command is used to add each device type to the system.
The syntax of each specic command is described in chapter 9.

device type command to create
CPU SET CPU
disk drive MOUNT
tape transport MOUNT
TTY line ASSIGN
line printer ASSIGN
network port ASSIGN

Below is a typical E11.INI le. This le is read by Ersatz-11 every time it starts up, and the commands are
executed in sequence, as if they were typed at the keyboard.

;
; Set PDP-11/44 CPU model
;
set cpu 44
;
; Mount disk and tape units
;
mount du0: rsx11m.dsk
mount du1: ra81.dsk
mount mm0: dump.tap
;
; Add extra DL11 terminal lines and LP11 printer port
;
assign tt1: con2:
assign tt2: con3:
assign lp0: lpt1:
;
; Define DELUA Ethernet port using RealTek PCI NE2000 clone
;
assign xe0: ne2000a: 20
20 Page 21 22
Installation and Conguration 13
;
; Boot MSCP disk unit 0 (and switch keyboard to PDP-11 console)
;
boot du0:
;
; Control returns to the next line when the user presses Shift-Enter
; or the system halts on its own (e.g. SHUTUP.TSK)
;
quit

The \boot" command starts the PDP-11 operating system and directs keyboard input to the PDP-11 system
console. The user can press Shift-Enter at any time to pop up an E11 command prompt where additional commands
may be entered interactively. If there are unread lines remaining in \E11.INI" (i.e. following the \boot" command),
they will be read at that time. In this example, the program will exit immediately when Shift-Enter is pressed
because it causes the \quit" command to be read.

There are a few more basic options which are entered as switches on the E11 startup command line, rather than
being contained in the \E11.INI" initialization le:

/HELP (syn. /?) Display a simple list of switches and their meanings, and exit without starting E11.
/INITFILE:le[.INI] Read the specied initialization command le instead of E11.INI.
/MEMORY:nnnn Set the maximum possible emulated memory size of the PDP-11 to nnnn (decimal)
kilobytes. By default this maximum is 248 KB. The reason this switch exists is so that
you can enlarge PDP-11 memory past the default in real mode versions, (how much
depends on what device drivers and TSRs you have loaded), or reduce it if memory is
so tight that ASSIGN, LOG, orMOUNT commands fail for lack of it (they will give error
messages if this is the case), or in any case if you want to emulate a PDP-11 with less
memory than E11's default.

/NOINITFILE Do not process the E11.INI initialization command le.

When conguring the system for the rst time, it is best to exactly duplicate the system which is being replaced.
There may be a strong temptation to expand the system, now that PDP-11 peripherals are eectively \free" for
the asking. But such changes can cause con icts with existing software, which may contain hard-coded device
names or other hidden assumptions about the system conguration. These problems may be avoidable, if system
expansion is postponed until after the existing system is brought up as-is.

Note that some operating systems do little or no autosizing and may have problems if the hardware being emulated
by E11 diers from the one for which the operating system was generated. In particular you may run into trouble
if your OS depends on any static memory allocation (if E11 is emulating a dierent amount of memory than what
the system expects), or if it is built for Q22 I/O and E11 is emulating a PDP-11/44 with Unibus map registers, or
anything like that. Also, the routine in RSX-11M-PLUS that counts the number of registers in an RH70 depends on
PDP-11/70 autoincrement semantics, and will get the wrong answer if you set the CPU type to PDP-11/44. This
normally causes no problems, since real PDP-11/44s can't have RH70s, but this and other \impossible" situations
can be easily created in E11.

One thing to watch out for, is that some software has hard-coded assumptions about how fast the hardware operates
in relation to the CPU. See section 1.8.1 for a discussion of interrupt timing. This can lead to strange behavior, 21
21 Page 22 23
14 Installation and Conguration
such as devices that simply hang, or supposedly I/O bound tasks that consume 100% of the CPU. These problems
can generally be solved by experimenting on the relevant emulated devices with the SET DELAY command. If the
system doesn't operate correctly with the default delay counts, but springs to life when they're increased to large
numbers, then it's just a simple matter of tuning the numbers to get delays which are long enough that the system
works reliably, but still give good performance. Ideally the PDP-11 device drivers should be updated so that they
will operate correctly with \innitely" fast hardware, since this will allow it to get the best possible performance
out of any fast PDP-11 replacement, but the SET DELAY command allows the user to work around these problems
without having to touch the PDP-11 software. 22
22 Page 23 24
Chapter 3
Transferring the PDP-11
Operating System to the PC

In order to run an exact copy of a real PDP-11 system, the contents of the PDP-11's disk(s) must be accessible
to Ersatz-11 to be used as emulated disks. In most cases, this means importing a byte-by-byte copy of each entire
disk into a large \image" le which is the same size as the entire PDP-11 disk. Note that this is very dierent from
importing the individual les from the PDP-11 disk. In some cases the les can be reassembled into a disk image,
but if possible it's better to download the disk(s) as a single large image. The fewer transformations the data go
through, the fewer opportunities for mistakes that could lead to le damage.

Getting a snapshot of a bootable disk from an existing PDP-11 into a PC le can be tricky, there are many ways
to do it and which choice is the best one depends on what software and hardware are available, and what media
or protocols the PDP-11 and PC have in common. D Bit can help with some forms of media translation, call or
send email for information. DEC, Mentec, and S&H are all now willing to sell PDP-11 OS licenses to emulator
users, there doesn't seem to be an issue about the lack of a CPU serial number. So ordering the latest OS version
is straightforward, and with the right peripherals the installation kits can be booted directly by E11 and installed
on emulated disk(s).

Disk images have been successfully loaded from real PDP-11s using Kermit, or Process Software TCP/IP, or
DECnet and Pathworks, or (as a last resort) an OS-supplied DUMP command on the PDP-11 with the output
captured with a PC terminal program and then massaged back into binary with a simple utility program. Also,
PUTR (available from ftp.dbit.com, see below) can build bootable RT-11 image les using a oppy disk distribution
kit, without the need for booting a real PDP-11.

3.1 SCSI disks
The easiest way of all to move any PDP-11 OS to the PC is using a SCSI disk drive. If you were already using
a PDP-11 SCSI controller, you should be able to move the disk directly over to a PC SCSI controller, and either
read it into an image le (using PUTR.COM) or use it directly (using the SCSI disk support in the full version
of E11). Iomega Zip and Jaz drives, and Fujitsu DynaMO 3.5" magneto-optical drives, are inexpensive and work
very well with both Ersatz-11 and PUTR.COM, and they provide a cheap, fast, easy way to transfer les or whole

15 23
23 Page 24 25
16 Transferring the PDP-11 Operating System to the PC
disks between real PDP-11s and E11.
Even if the PDP-11 didn't already have a SCSI controller, it might be worth obtaining a used one if a non-trivial
amount of data must be transferred, unless the PDP-11 operating system is too old to support SCSI MSCP devices.
Adding support for it to the operating system might require a SYSGEN in some cases, but for RSX, BRUSYS will
support a DU: controller regardless of whether your usual monitor is built with the DU: driver. Older versions of
RSTS can both backup and restore without ever booting a monitor at all, and the backups are self-booting and
include a copy of the backup utility, so restoring them on the target system is easy. New versions of RSTS require
that the backups be made under timesharing, but they can still be restored in INIT.SYS.

3.2 SCSI tapes
Magnetic tape can be a convenient way to import PDP-11 data to the PC, as long as a PC tape drive can be
found which will read the PDP-11 media. The DEC TZ30 and TK50Z-GA SCSI drives use TK50 tapes, and a
variety of companies still make SCSI 9-track tape drives. Images of these tapes may be taken using D Bit's DOS
SCSI tape utility (available from ftp://ftp.dbit.com/pub/ibmpc/util/st.exe) and the resulting .TAP les may be
mounted under E11.

3.3 Kermit
Kermit is a protocol for transferring les over serial lines. It provides very good reliability, and requires no special
hardware, but it can be slow. At 9600 baud with the default Kermit protocol parameters (no long packets or sliding
windows), binary le transfers can take almost an hour per megabyte. This may be acceptable if the system has
small disks or the transfer can be performed over a weekend or during some other time when the PDP-11 is not
busy with other work. Kermit protocol support is included in most terminal programs, and Kermit software is
available at little or no cost for most computers and operating systems, including the following PDP-11 versions:

 KSERVE | D Bit's server-only Kermit for RT-11, available from
http://www.dbit.com/pub/pdp11/rt11/kserve.mac

 K11 |Columbia's ocial PDP-11 Kermit program, supports all major DEC/Mentec/S&H operating systems,
see http://www.columbia.edu/kermit/pdp11.html

 KRT | Billy Youdelman's version of K11, enhanced for RT-11 and TSX-Plus, also at
http://www.columbia.edu/kermit/pdp11.html

It's very important to issue SET FILE TYPE BINARY commands to the Kermit programs at both ends before
beginning a Kermit transfer of a PDP-11 disk. The other settable Kermit parameters are less critical, as they mainly
aect the speed with which the transfer will proceed. Of the above Kermits, only KSERVE is able to download an
entire raw disk. The others can download les but not entire raw disks. In some cases it may be possible to get
around this limitation by using PDP-11 system utilites (such as RT-11's COPY/FILE/DEV command) to copy an
entire raw disk into a le on another, larger disk, and then use Kermit to download that le. Or, if no larger disk
is available, it may be possible to break the disk into several pieces (each small enough to t into the free space on
another disk) and copy them to les one at a time, sending each to the PC via Kermit and then deleting it. 24
24 Page 25 26
Transferring the PDP-11 Operating System to the PC 17
3.4 Ethernet
Ethernet can be a very eective way to transfer PDP-11 data to a PC. Unfortunately Ethernet hardware is not
nearly as common on PDP-11s as it is on PCs, but used Q-bus/Unibus Ethernet boards are available very cheaply
from used equipment dealers. So if the PDP-11 has software support for an Ethernet board, it may be worth buying
one just to transfer the disks.

The main problem with using Ethernet on PDP-11s is the availability of compatible protocols. If a PDP-11 operating
system supports Ethernet, it usually uses DECnet, while PCs are more likely to support TCP/IP. However software
to support either protocol is available on both PCs and PDP-11s, it's just a matter of getting it.

 Alan Baldwin's excellent free TCP/IP packages for RT-11 and TSX-Plus are available via FTP from
shop-pdp.kent.edu.

 Megan Gentry's \RTEFTP" RT-11 Ethernet le transfer program is available from
ftp://ftp.std.com/pub/mbg/pdp11/rt11/tools/rteftp/. It uses its own private protocol and can com-
municate only with other computers running RTEFTP, however it's fast, very easy to set up, and can transfer
raw disks.

 JSA Stackware, a commercial TCP/IP package for RSX, is available from JSA. It provides Telnet and FTP
access in both directions.

 Process Software's TCP/IP package for the PDP-11 is also a commercial product, available from Process
Software (www.process.com).

 DECnet/DOS and Pathworks for DOS are no longer available, but they were able to connect to DECnet
hosts. So if you already have it, it may be useful for transferring disks.

Some of the above programs are not able to transfer entire raw disks over the Ethernet. In this case the same
workarounds as used with Kermit transfers may be applied, to copy raw disks to les and then transfer the les.

3.5 ASCII serial dump
Most DEC operating systems provide a utility (typically named DUMP or DMP) which can dump a le or device
out to the terminal in octal or hexadecimal. If this program is used to dump out the entire disk, a PC terminal
program can be used to capture the output, and it can be translated back to a binary disk image on the PC. This
should only be used as a last resort because there's no error checking or correction, and the transfer is very slow
because of the inecient encoding and extra header/trailer/address information that's normally displayed with
each block.

If possible the transfer should be done using hexadecimal rather than octal, the transfer will go faster since each
word is displayed as only four characters instead of six. On an RSX system, this can be done with the following
commands:

>INS $DMP
>DMO ddu:/DEV/LOCK=V (if ddu: is the system disk)
>MOU ddu:/FOR (if ddu: is not the system disk) 25
25 Page 26 27
18 Transferring the PDP-11 Operating System to the PC
>DMP TI:=ddu:/BL:0/WD

The le produced by capturing the output from the above command can be translated back into a binary disk image
using the \HEX2DSK" program, available from ftp://ftp.dbit.com/pub/ibmpc/util/. Source code is included
so the program can be modied for other dump display formats if needed. RT-11 has a DUMP/TERMINAL
command, which is similar to RSX's DMP command but gives a dierent output format.

Since there is no error detection at all, disks transferred in this manner should be downloaded twice, and the
resulting les should be compared, as a test to make sure the dump wasn't corrupted by line errors or buer
overruns.

3.6 System-specic notes
RT-11 is the easiest operating system to transplant. For one thing, an RT-11 Kermit server is available (at
ftp://ftp.dbit.com/pub/pdp11/rt11/kserve.mac) which is able to download an entire raw disk image over a serial
line. This can take a long time but it just about guarantees that the conguration will be duplicated exactly,
just don't forget to type SET FILE TYPE BINARY and REMOTE SET FILE TYPE BINARY to make sure
both participating Kermits agree not to try to treat the binary data as text. Failing that, you can use KSERVE,
or any of several other le transfer methods, to download the individual les (still in binary mode) into a DOS
directory. Then use D Bit's \PUTR" program (available at ftp://ftp.dbit.com/pub/putr/) to build a blank RT-11
disk image, copy the les into it (be sure to use PUTR's COPY/B command to copy in binary mode), and make
the disk bootable with PUTR's BOOT command.

Note

The RT-11 DL: and DM: device handlers expect to nd a bad block replacement table in block 1 of a
disk. If something else is there (like the pack label in Files-11 and RDS 1.1 and later, or the master
le directory in RDS 0.0), they will replace blocks at random and you'll get a corrupted disk image. So
either modify your Kermit (etc.) to use the appropriate .SPFUN instead of .READ, or don't use RT-11
programs to read non-RT-11 disks.

RSTS images can be assembled from individual les using Paul Koning's freely available \ x" program, see below.
All you need to build a bootable pack are the les from SY:[0,1], x knows how to do the HOOK operation and
make the pack bootable.

RSX is more dicult to move since currently there is no DOS software that knows how to build a bootable disk from
its component les. If you don't have an easy way to take a raw snapshot of the whole disk (K11.TSK currently
can't do it), the best bet is to dump the disk to tape and then restore the tape on the PC, assuming you have
suitable tape drives on both. Stand-alone BRU (a.k.a. BRUSYS) is the easiest way to do this. After copying the
entire disk to tape, build a bootable BRUSYS tape for E11 (HELP BRU STAND under RSX will tell you how).
Then use PUTR.COM to build a blank disk image le of the appropriate type, and boot E11 from the BRUSYS
tape, with the empty disk image le mounted. Once BRUSYS has started, you can physically switch tapes, or else
pop up an E11 prompt and MOUNT the (rst) backup tape if you're using tape image les. Then run FMT (if
needed) and BAD on the blank disk, and nally run BRU to restore the tape. If you want to use tape image les
instead of using a real tape drive (required on E11 Demo and E11 Lite, since they don't support SCSI tapes), you
can use D Bit's DOS SCSI tape utility (available from ftp://ftp.dbit.com/pub/ibmpc/util/st.exe) to copy between
real tapes and E11 tape image les. 26
26 Page 27 28
Transferring the PDP-11 Operating System to the PC 19
3.7 Utilities
PUTR.COM, a companion program to E11, is available from ftp://ftp.dbit.com/pub/putr/, and knows how to
read and write RT-11 and OS/8 format volumes on a variety of media, as well as how to read RSTS/E volumes. It
can write blank container les with the serial numbers and (empty) bad block data lled in correctly, and format
many types of DEC oppies, and SCSI disks too, which can be useful with any OS. It can also read and write
TU58 DECtape II tapes, if the drive is connected to a PC COM port. Assembly language source is included.

Paul Koning (former RSTS/E developer) has written a very complete program named \flx" for manipulating les
in RSTS disk images. Among other things it can build a bootable disk given the les from [0,1]. It's available from
ftp://ftp.dbit.com/pub/flx/ and is written in portable C, so it can be used with any emulator (or with real
disk packs on a VAX). A DOS executable is included with the sources. 27
27 Page 28 29
Chapter 4
Disk Devices
Ersatz-11 emulates a wide variety of disk drive and controller models. These are created using one MOUNT command
(see page 60) for each drive unit needed. Generally each emulated disk unit must be connected to an emulated
disk device (e.g. a large le on the PC's disk) which is at least as large as the disk it emulates. The connection is
device-independent, any emulated disk can be connected to any of the physical disk device types that E11 supports.
The controller itself is created implicitly when its rst drive is mounted, and can be deleted by dismounting all of
its drives. The controller type (RL11, UDA50 etc.) is implied by the device name used in the MOUNT command,
and the same device name syntax is the same as most DEC operating systems.

E11 has sensible defaults for all disk parameters, so in most cases a MOUNT command for each unit is all that is
needed. If necessary, the default drive parameters can be overridden using MOUNT switches, and the default controller
parameters can be overridden using a separate SET command, which may be given before or after the drives are
mounted. The defaults are as follows:

parameter default how to override
controller model based on SET CPU QBUS setting SET ddc: model (e.g. SET DUA: RQDX3)

controller
CSR/vector
DEC default addresses
\ oating" addresses are calculated auto-
matically if appropriate

SET ddc: CSR=xxxxxx VECTOR=yyy

interrupt
priority
DEC default values, SET CPU QBUS set-
ting
SET ddc: PRIORITY=n

drive model based on sizeofcontainerle MSCP/TMSCP drives:
/TYPE:type switch (e.g. /TYPE:RD54)
non-MSCP/TMSCP drives:
/type switch (e.g. /RK06)

write protection disabled /WP or /RO switch

After a drive is mounted, a SHOW ddcu: command (e.g. SHOW DUA0:) will display the actual drive parameters for
that unit, as well as the controller parameters for the controller to which it is attached. The controller CSR, vector,

20 28
28 Page 29 30
PC disk devices 21
interrupt priority, and type (i.e. controller model) can be changed explicitly at any time with a SET command. If
these parameters are defaulted, their actual values can also be changed implicitly at any time, by a change in the
SET CPU setting (which can make a defaulted controller type switch between the Unibus and Q-bus models of that
controller), and by changes in the conguration of other devices that use \ oating" CSRs and/or vectors (if this
controller is set to be a oating device, as DUB: and DYB: normally are for example).

4.1 PC disk devices
The MOUNT command establishes a connection between an emulated PDP-11 disk drive unit, and a PC le or device
which will be used to hold the actual disk data. Generally this le or device must be at least as large as the
PDP-11 disk unit that is being emulated. E11 supports several dierent forms of physical media to be used for
emulating disks. The connections are made on a per-unit basis so it is possible to mix units attached to dierent
types of physical media within the same emulated PDP-11 disk controller. The supported types of physical media
are described below, along with the syntax of the MOUNT command for each type. The /RONLY (syn. /WPROTECT
switch may be specied on any MOUNT command, to lock the disk against writes.

4.1.1 Disk image les
Command syntax:
MOUNT ddcu: [d:pathn]lename[.DSK] [switches]
Special switches: none
A disk image le contains a byte-by-byte image of a PDP-11 disk, presumably loaded from a real PDP-11 using
Kermit or DECnet or some equivalent, or built using PUTR.COM or FLX.EXE or RT11.EXE or a similar utility (see
chapter 3). The le is the same size as the total capacity of the PDP-11 disk drive it replaces. The le is located
using E11's usual search rules, see section 1.7 for details.

There are two types of image les, \block" and \sector" images. \Block" images contain the disk data as it would
be read in sequential block order, which for most PDP-11 disks is the same as the raw device order. This is the
most common format and is normally used by default. \Sector" images apply to oppy disks only. RX01, RX02,
and RX50 disks are organized using a soft interleave layout to increase their speed when used with controllers
that have only one sector buer. The PDP-11 device handlers (and/or controllers) for these disks handle the soft
interleave so it is normally invisible to the PDP-11 user program, so images made of these disks using something
like the RT-11 \COPY/FILE/DEV" command will be normal block images. When a block image le is accessed as a
virtual PDP-11 oppy disk, Ersatz-11 does the inverse of the soft interleave so that when the PDP-11 driver does
the interleave,the blocks come outinthe correctorder.

However if the image is taken using special software (such as the COPFLP.MAC program available from ftp.dbit-
.com), or on a non-DEC computer, it may be more natural for the image le to be in raw sector order, i.e. starting
with track 0 sector 1, then track 0 sector 2, track 0 sector 3 etc. In this case Ersatz-11 should not alter the
interleave, and in fact it should do the interleave itself if the le is mounted as something other than a virtual
oppy drive (since PDP-11 drivers for other devices don't do the oppy-style interleave).

By default, Ersatz-11 guesses whether a le is a block or a sector image based on the le size: 29
29 Page 30 31
22 Disk image les
size (bytes) type
256,256 RX01 sector image
512,512 RX02 sector image
1,025,024 \RX03" (DS RX02) sector image
(anything else) block image

Block images of RX01/02/03 disks are slightly smaller because the interleave scheme leaves out track 0, so they
can be distinguished by size alone, unless padding was added during transfer or something else altered the le size.
RX50 image les are the same size either way, since the RX50 soft interleave scheme uses all sectors of the disk. So
by default they are assumed to be block images. The defaults may be overridden with the \/BLOCK" and\/SECTOR"
switches on the MOUNT command.

Since DEC's 8" oppy interleave scheme doesn't use track 0, data from this track do not normally appear in a
block image le. However some non-standard software may need to use track 0, so the RX11, RX211, and RXT11
emulations relocate it beyond the end of the block image, if the le is enlarged by the size of one cylinder to be
the same size as the equivalent sector image le. Use \/BLOCK" to specify that it's still a block image, in spite of
being the size of a sector image. In this case it may be more natural to use a sector image, but E11 supports either
scheme.

type base size (bytes) extra size (bytes)
RX01 252,928 3,328
RX02 505,856 6,656
\RX03" 1,011,712 13,312

If the base le sizes are used, these les work as regular block images and track 0 does not exist. Any attempt to
write track 0 is a no op, and any attempt to read track 0 returns hex E5 in every data byte, as if the disk were
freshly formatted.

Note

The Demo and Lite versions of E11 limit the combined size of all image les to 32 MB. E11 versions
prior to 2.0 did not have this restriction, but they are no longer supported by D Bit.

Disk caching done by the host system
Ersatz-11 has no control over any caching of disk writes that the host operating system may do, so
it is important that you QUIT out of the simulator to make sure all the pseudo-disk les get closed
properly, rather than simply switching the computer o, after shutting down your PDP-11 operating
system. Otherwise there is the possibility that a write-back disk cache might not have written all of
the PDP-11's data to disk. In practice no problems have been observed, but trouble is theoretically
possible so care should be taken. The oppy disk support controls the hardware directly so as long as
the PDP-11 is done with the disk it's OK to take it out of the drive.

Also, the emulator has no control over \Green PC" BIOSes which spin down hard drives after a specied
period of inactivity (this is especially common on laptops). When E11 accesses the drive after it's been
shut down, the BIOS will pause several seconds while it spins the drive back up. During this period
E11 is not running, so the simulated PDP-11 may drop incoming characters (but not necessarily, E11 30
30 Page 31 32
Raw oppy disk drives 23
maintains a small FIFO buer on each line at interrupt level) and its clock will lose a few seconds. If
this is a problem you may have to disable this BIOS feature.

4.1.2 Raw oppy disk drives
Command syntax:
SET d: type (if needed)
MOUNT ddcu: d: [switches]

Special switches: drive type, one of the following:
switch drive type size in blocks disk types
/RX01 5.25" or 8" SS SD 494 RX01
/RX02 5.25" or 8" SS DD 988 RX01, RX02
/RX03 5.25" or 8" DS DD 1,976 RX01, RX02, RX03
/RX23 3.5" 1.44 MB 2,880 RX23, RX24
/RX24 3.5" 720 KB 1,440 RX24
/RX26 3.5" 2.88 MB 5,760 RX23, RX24, RX26
/RX33 5.25" 1.2 MB 2,400 RX33, RX50, \RX52"
/RX50 5.25" SS DD 800 RX50
/RX52 5.25" DS DD 1,600 RX50, \RX52"
/MY 5.25" DS DD 1,600 MY: (Russian PDP-11 clones)

Floppy disk drives may be used to emulate any block-replaceable device supported by E11. \d:" is the drive letter,
i.e. A: or B: for the rst or second oppy drive.

A command switch species the drive type, the default type is RX23, RX24, RX26, or RX33 depending on the
type set for that drive in the PC's BIOS setup. The default for each drive may be changed using a SET command,
so that future MOUNT commands using that drive won't need a switch to set the oppy drive type.

For exampl e, SET B: RX01 overrides the value in the BIOS setup, so that future MOUNTddcu: B:commands will
access the drive as an 8" SS SD drive. This command is normally just a convenience, however a real DEC RX50
drive (or some other quad density drive, like a Tandon TM100-4) attached to the PC oppy controller is a special
case, which requires e.g. a SET A: RX50 command before use. This is because the /RX50 switch on the MOUNT
command assumes the RX50 disk is mounted in a 1.2 MB drive, which turns at a dierent speed from a true RX50
or QD drive and thus requires a dierent data rate to access the same data.

As shown in the table above, most drive types support one or two smaller disk formats in addition to their own.
This means that any disk type supported by a given drive type may be inserted at any time with no need to
re-MOUNT the drive. E11 will automatically detect the format of the new disk and adjust to the new geometry.
Capacity changes are passed along to emulated PDP-11 controllers that understand them, i.e. the DU:, DY:, and
HD: controllers.

Note that confusion is possible if a oppy disk has a dierent total number of blocks than the device being emulated.
The PDP-11 OS may try to access areas o the end of the disk, which results in a controller-specic I/O error,
or may not use all of the disk. In particular writing a blank le system (with an OS-specic \initialize volume"
command) will result in a directory structure that doesn't match the actual volume size. Care should be exercised
to avoid trouble. Like disk types are of course not a problem, so for example \MOUNT DX0: B: /RX01" will mount 31
31 Page 32 33
24 Raw CD-ROM drives
arealRX01disktobeused asan emulated RX01disk.TheHD: device works with any size device, so all oppy
types may be mounted on HD: if you have the \HD.SYS" device handler (under RT-11).

If the disk already has a correct directory structure to match its actual size, and is mounted to emulate a device
of at least that size, most operating systems (that use device-independent le system formats) will be able to read
and write the disk correctly. For example, if you initialize an RX23 oppy with RT-11 directory structure using the
PUTR utility under DOS, and then \MOUNT DL0: A: /RX23" in E11 (using the 1.44 MB RX23 disk to emulate a 5
MB RL01 pack), RT-11 will be able to access all les on the disk, and can write new les without data corruption.
Only the RT-11 INITIALIZE and SQUEEZE commands need to be avoided in this case.

Most of the oppy disk formats supported by E11 are exact equivalents to PC formats. Not all of them were
ever supported by DEC for use on PDP-11s in particular, but some were supported by aftermarket controllers.
The RX01/02/03 formats use 1.2 MB disks, specially formatted (by E11 or the PUTR utility) to have the exact
same geometry as their 8" counterparts. The RX01 format is in fact identical to the IBM 3740 format used on
DEC's 8" disks, so if a Shugart style 8" drive is attached to the PC oppy disk controller using a special cable
(or D Bit's \FDADAP" oppy disk adapter board, see http://www.dbit.com/fdadap.html), it will be possible to
read/write/format real RX01 disks. DEC uses a modied MFM format for RX02 disks, which the PC hardware is
incapable of using, so E11 substitutes the IBM System/34 compatible format for the RX02/RX03 workalike disks.

The RX01 format is not guaranteed to work (on either 5.25" or 8" drives) because most current PC oppy controllers
don't have a working single density mode (the PC BIOS is hard-coded for double density so manufacturers have
dropped support for \unneeded" features). However some oppy controller chips made by SMC, Goldstar, and
Western Digital are known to work with single density mode. These chips usually contain \37C65" in the part
number and use a 16/32 MHz clock plus a 9.6 MHz clock rather than the single 24 MHz clock used by many other
controllers, so it may be useful to shop for a oppy controller board that has two crystals on it instead of one,
in the absence of better information. The \CompatiCard IV" controller formerly made by Micro Solutions, Inc.
works with single density disks and is supported by E11.

In addition to the PC formats and 8" workalike formats, E11 also supports several 5.25" formats. RX50 disks are
supported using a 1.2 MB drive. \RX52" is E11's name for double-sided RX50 disks, which were never sold by
DEC, but may have been planned (for the Professional series at least). \MY" is the device name for the DS DD
5.25" disks used on the Russian DVK-x PDP-11 clones. The low-level format is the same as the \RX52" but there
is no software sector interleave. \MX" disks are not able to be supported by the PC disk controller so E11 can't
use them.

E11 can format all the disk types that it supports. Usually the easiest way to get at this feature is using the \set
density" command of the RX211 controller, which can be executed by running FORMAT.SAV under RT-11 (using
commands like \FORMAT DY0:" or\FORMAT DY0:/SINGLE"), or the SPEC%() function under RSTS. E11 chooses
which of the formats (supported by a given oppy drive type) to use based on the size of the emulated disk, it uses
whichever format is the same size as the emulated volume being formatted, or the next larger format if there's no
exact match.

Ersatz-11 also supports the \format oppy disk" commands of the RQDX3 and RQZX1 controllers, so utilities that
would work with those controllers will work with E11.

4.1.3 Raw CD-ROM drives
Command syntax: 32
32 Page 33 34
Raw CD-ROM drives 25
MOUNT ddcu: CDROMd:
Special switches: none
The CD-ROM drive whose DOS drive letter is specied by \d" is accessed using the DOS MSCDEX.EXE (or
DR-DOS NWCDEX.EXE) driver. Note that this is a synchronous interface so PDP-11 emulation is stalled while
reading from a CD. More importantly, the Windows 9x version of the MSCDEX interface refuses to access the rst
sixteen sectors of the disk, which are unused on ISO-9660 disks, but are needed on disks written in a PDP-11 disk
format. The workaround is to use real DOS. 33
33 Page 34 35
26 Emulated PDP-11 disk devices
4.2 Emulated PDP-11 disk devices
This section describes each PDP-11 disk drive type that Ersatz-11 emulates, and denes the device-specic MOUNT
command switches that apply to each emulated disk type.

name units controller drive/volume switches
DC: 0{3 RC11 (none, always RS64)
DF: 0{7 RF11 (none, based on controller type)
(syn. RF:)
DK: 0{7 RK11D /RK02, /RK05 (syn. /RK03)
(syn. RK:)
DL: 0{3 RL11 /RL01, /RL02
DM: 0{7 RK611 /RK06, /RK07
DP: 0{7 RP11C /RP02, /RP03, geometry switches
DS: 0{7 RH11/RH70 /RS03, /RS04
DT: 0{7 TC11 (none, always TU55/TU56 DECtape)
DU: 0{65535 MSCP /TYPE:xxxyy
DX: 0{1 RX11 (none, always RX01)
DY: 0{1 RX211 /RX01, /RX02, /SS, /DS
HD: 0{15 virtual (none, le size is all that matters)
PD: 0{1 RXT11 (none, always RX01)

The \geometry switches" for DP: refer to /CYLINDERS:n, /HEADS:n, and/SECTORS:n, which may be used to specify
non-standard drive dimensions. This allows compatibility with some clone controllers, which allowed extended drive
sizes and/or untranslated SMD drive geometry to be used instead of the standard DEC geometry. In some cases
the PDP-11 drivers may have been patched to use the non-standard geometry. These switches allow duplicating
that hardware conguration so that the patched drivers will run unchanged under E11.

4.2.1 DC: | RC11/RS64
This emulation is included for completeness, it is not expected that anyone has a practical use for it. It is an early
drive, with a xed platter and xed heads yielding very low capacity (128 KB). There are few if any surviving units
today, and no current PDP-11 operating system version is known to support it. Since there is only one possible
drive type, no switches are required to select it.

MOUNT DC: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET DC: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 34
34 Page 35 36
Emulated PDP-11 disk devices 27
4.2.2 DF: | RF11/RS11, DDC DMS-11X/SSDM 100 (called RF: in RT-11)
The RS11 is another xed-head disk, and is a PDP-11 version of the RS08 disk for the PDP-8. It was word-
addressable and more popular than the RS64, as it was larger (512 KB) and more reliable. Due to their high speed
for the time, RS11s were commonly used for swapping, so it may make sense to use a RAM disk to emulate an
RS11. E11 allows write protecting the entire unit (with the /WPROT or /RO switch), but it does not emulate the
RS11's switch panel which allowed write-protecting the disk in individual 32 KB segments.

The Digital Development Corporation DMS-11X controller is an extended replacement for the RF11/RS11, which
uses a DDC \SSDM 100" RAM drive to hold up to 8 MB of data. It uses slightly dierent disk addressing from the
RF11, and uses the unit select bits as additional track address bits, so only DF0: is useful. Non-zero unit numbers
will not be accessible when emulating a DMS-11X controller. A full 8 MB RAM disk may be created as follows:

SET DF: DMS11X
MOUNT DF0: RAM: /SIZE:8388608

MOUNT DF: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET DF: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
DMS11X set controller type to DDC DMS-11X
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
RF11 set controller type to RF11
VECTOR=nnn set vector address to nnn octal

4.2.3 DK: | RK02, RK03, RK05 DECpack (called RK: in RT-11)
These front-loading cartridge drives were very popular in the 1970s thanks to their low cost and small size (a 10.5"
rack-mount box). The disks are similar to the IBM 2315, and many other minicomputer manufacturers used a
similar form factor. The RK02 holds 1.2 MB, while the RK03 and RK05 hold 2.5 MB. E11 does not distinguish
between the RK03 and RK05 because they have identical geometries. The RK02 is no longer supported by current
versions of PDP-11 operating systems. It is unusual in that it stores 256 bytes per sector (the RK03 and RK05
use 512-byte sectors). Be careful when using odd image le sizes with the DK: emulation, if you intend a disk to
be used as an RK05 but it's not quite 4800 blocks long, E11 will auto-detect it as an RK02, which probably isn't
what you want. Use an /RK05 switch to be sure.

MOUNT DK: drive switches:
/RK02 set drive type to RK02 (1.2 MB cartridge drive)
/RK03 set drive type to RK03 (2.5 MB cartridge drive)
/RK05 set drive type to RK05 (2.5 MB cartridge drive)
/WPROTECT enable write protection (syn. /RONLY) 35
35 Page 36 37
28 Emulated PDP-11 disk devices
SET DK: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

4.2.4 DL: | RL01, RL02
The RL01 and RL02 are top-loading cartridge drives which hold 5 and 10 MB, respectively. DEC marketed them
successfully as a replacement for the RK05, and they were extremely popular in the 1980s, due to their reliability,
small size (a 10.5" rack-mount box) and the relatively low price of the drives (however the cartridges were very
expensive). New RL01 and RL02 cartridges come with a bad block table written by the manufacturer in the last
track, which the PDP-11s are careful never to overwrite. Some utilities check for this table and will complain if
it is not present, so be sure to get the whole disk when making image les. The PUTR utility (available from
ftp.dbit.com) knows how to write a null bad block track when creating an empty image le (using its FORMAT . . .
/RL0x command).

MOUNT DL: drive switches:
/RL01 set drive type to RL01 (5 MB cartridge drive)
/RL02 set drive type to RL02 (10 MB cartridge drive)
/WPROTECT enable write protection (syn. /RONLY)

SET DL: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
DEFAULT set controller type to default (RL11 for Unibus, RLV12 for Q-bus)
RL11 set controller type to RL11 (Unibus)
RLV11 set controller type to RLV11 (Q18)
RLV12 set controller type to RLV12 (Q22 with BAE register)
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured

4.2.5 DM: | RK06, RK07
The RK06 and RK07 are top-loading twin-platter cartridge drives with capacities of about 13 and 27 MB, re-
spectively. They were mounted on free-standing low-boy cabinets and were sort of a poor man's Massbus drive,
even the geometry and register layouts are similar but there are only two platters (one timing surface, three data
surfaces), the disks turn at only 2400 RPM, and the control bus is serial rather than parallel. The drives could be
dual-ported but this conguration was rare.

MOUNT DM: drive switches:
/RK06 set drive type to RK06 (13 MB cartridge drive)
/RK07 set drive type to RK07 (27 MB cartridge drive)
/WPROTECT enable write protection (syn. /RONLY) 36
36 Page 37 38
Emulated PDP-11 disk devices 29
SET DM: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

4.2.6 DP: | RP02, RP03
These are top-loading 12-platter pack drives originally designed to be used with the PDP-10 series, but adapted
for the PDP-11. The RP02 holds 20 MB per pack, while the RP03 holds 40 MB. RT-11 can't use a whole RP03 at
once due to the RT-11 le structure's limit of 32 MB per volume, so it makes an RP03 look like two 20 MB disks.
Although these were fairly early drives and weren't very widely used, the programming model is straightforward
and as a result, aftermarket controllers that emulate them using SMD drives are common. Some of these controllers
supported special drive geometries to give extended capacity and/or use the untranslated SMD sector addressing.
In order to emulate these congurations, E11 supports the /CYLINDERS:n, /HEADS:n, and/SECTORS:n switches so
that the user may specify custom disk dimensions.

MOUNT DP: drive switches:
/CYLINDERS:n set non-standard number of cylinders
/HEADS:n set non-standard number of heads
/RP02 set drive type to RP02 (20 MB 12-platter pack drive)
/RP03 set drive type to RP03 (40 MB 12-platter pack drive)
/SECTORS:n set non-standard number of sectors
/SERIAL:nnnn set drive serial number (4 decimal digits)
/WPROTECT enable write protection (syn. /RONLY)

SET DP: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

4.2.7 DS: | RS03, RS04
The RS03 and RS04 are xed-head Massbus disks that hold 512 KB and 1024 KB, respectively. As with the RS11,
these were used for swapping and other cases where speed is critical, so mounting them as RAM disks would work
well.

MOUNT DS: drive switches:
/RS03 set drive type to RS03 (512 KB xed-head disk)
/RS04 set drive type to RS04 (1024 KB xed-head disk)
/WPROTECT enable write protection (syn. /RONLY) 37
37 Page 38 39
30 Emulated PDP-11 disk devices
SET DS: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
RH11 set controller type to RH11
RH70 set controller type to RH70
VECTOR=nnn set vector address to nnn octal

4.2.8 DT: | TU55, TU56 DECtape
Although it's actually 3=4" magnetic tape, DECtape is block-replaceable and uses a xed number of xed-size
blocks, so really it behaves more like disks do than tapes. It puts 578 512-byte blocks on a 260' tape, and was very
popular for o-line storage in the early 1970s when hard disk space was expensive, and oppy disks were not yet
widely available. The TU55 is a single-transport drive, while the TU56 has two independent transports, so it takes
two MOUNT DTn: commands to dene a TU56. That dierence is invisible to the PDP-11 so there's no switch to
tell them apart.

MOUNT DT: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET DT: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR6 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

4.2.9 DU: | MSCP disks
MSCP (the Mass Storage Control Protocol) is a exible, device-independent protocol which allows any disk device
(up to 2 TB) to connect to any of DEC's later computers. It was used in all of DEC's PDP-11 disk controllers from
the mid-1980s on. DEC imposed an articial limit of four drives per controller, upon which some versions of some
PDP-11 operating systems depend. Also, DEC wants unit numbers to be unique within a system (i.e. if there's
a unit 0 on one controller there should be no unit 0 on any other controller), and the maximum allowable unit
number varies from one device type to another, depending on the method used to assign a unit number to a drive
(unit select cap for the \ready" light, DIP switches, etc.). Unlike many of DEC's own drives, E11 implements the
full 16-bit unit numbers specied by MSCP, so the amount of available memory is the only limit on unit numbers
or the number of drives per controller. Even so, care should be taken to observe the limitations that the PDP-11
operating system imposes on MSCP conguration.

MSCP provides a way for the PDP-11 to nd out the model name of each drive, which can be one to three letters
followed by two decimal digits. This is largely a cosmetic feature, since MSCP already has ways for the PDP-11 to
nd out a disk's size and whether it's xed or removable, so most of the time the name is meaningless. But all the
same, the drive type can be set to any appropriate string using the \/TYPE:name" switchontheMOUNT command.
The default drive type string is \RA81" for image les, or the actual drive type (\RX50" etc.) for oppies.

In some cases the drive type is important, for example some of the programs that format oppy disks on RQDX3
and RQZX1 controllers will refuse to go ahead unless they believe that the drive is an RX33, so you should use 38
38 Page 39 40
Emulated PDP-11 disk devices 31
\/TYPE:RX33" when mounting a oppy drive which is to be formatted using standard software.
MSCP requires that each volume (except for oppy disks) contain a relocation control table (RCT) at the end of
the disk, with a minimum length of one block. This table is used for remapping bad blocks and making the volume
appear to be error-free. Since all current PC disk media (except oppy disks) provide some form of invisible bad
block remapping of their own, they are already error-free, so there is no real need for this feature. Some aftermarket
SCSI controllers provided a one-block RCT anyway, by deducting one block from the reported size of the volume.
E11 can be set to do the same thing using the /RCT switch.

MOUNT DU: drive switches:
/NORCT don't deduct one block for relocation control table
/RCT deduct one block for relocation control table
/TYPE:xxxyy set drive type to xxxyy (1{3 letters, 2 digits)
/WPROTECT enable write protection (syn. /RONLY)

SET DU: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
DEFAULT set controller type to default (UDA50A for Unibus, RQDX3 for Q-bus)
KDA50 set controller type to KDA50
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
RQDX3 set controller type to RQDX3
RQZX1 set controller type to RQZX1
UDA50 set controller type to UDA50
UDA50A set controller type to UDA50A

4.2.10 DX: | RX01
The RX01 is a single sided, single density oppy disk drive which uses 8" disks with the standard IBM 3740 format,
the same as was commonly used in CP/M systems. The RX01 is a dual-drive system. If only one of the two units
is MOUNTed, the other one will still appear to be there, since the RX11/RXV11 controller has no way of reporting
whether a drive is present or not, but any attempts to do I/O to the missing drive will return error status.

E11 can read and write actual RX01 oppy disks, using an 8" drive attached to a PC oppy controller (with an
adapter such as D Bit's FDADAP board) which supports single density.

MOUNT DX: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET DX: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured 39
39 Page 40 41
32 Emulated PDP-11 disk devices
4.2.11 DY: | RX02, \RX03"
The RX02 is a double-density follow-on product to the RX01. It holds twice as much data per disk, and also uses
DMA instead of programmed I/O to copy between PDP-11 memory and the on-board sector buer, so there's less
CPU overhead. DEC apparently planned a double-sided upgrade, which became commonly know as the \RX03"
but was never actually released. However there are connectors for the extra heads on the drive's controller board
(most of the \brains" of the RX01 and RX02 systems are actually in the drive), and DEC even documented the
register elds that have to do with using double-sided disks, and the RT-11 V4.0 DY.MAC driver includes support
(disabled under conditionals) for double-sided disks, but it was removed in later versions.

E11 includes the double-sided support in its emulation. The /SS and /DS switches can be used when mounting
the drive to set the number of sides, and SET DYu: SS(or DS) can be issued at any time to change it. This may
be necessary when swapping disks in a real oppy drive, because unlike 8" drives, 5.25" drives have no way of
distinguishing single-from double-sided disks, so it can't be done automatically.

RSTS/E uses the names DX: and DY: interchangeably to refer to an 8" oppy drive, which may be either an RX01
or RX02. Early versions of E11 did the same thing and used a SET command to set the actual controller type, but
it was decided that it would be better to be consistant and have the device name always re ect the device type.
This may mean that the device name needed to emulate an existing drive under E11 is dierent from the name
that had been used to refer to the same drive under RSTS/E.

MOUNT DY: drive switches:
/DS double-sided disk
/RX01 single-density disk
/RX02 double-density disk
/SS single-sided disk
/WPROTECT enable write protection (syn. /RONLY)

SET DY: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
DS 1 disk in drive is double-sided
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
SS 1 disk in drive is single-sided
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured 1

Really a drive option | unit must be mounted before this option is set

4.2.12 HD: | Hypothetical disk
This is a hypothetical disk device which exists only in Ersatz-11. Its original denition was based on reverse-
engineering the HD SYS.EXE device emulation that came with the so-called \Russian" LSI-11/2 emulator which
used to be oating around the Internet, so that E11 would be able to boot disk images intended for that emulator.
However that emulation was not very useful, since it (apparently) had no provision for interrupts or memory beyond
64 KB or drives bigger than 32 MB. The current emulation has been extended to support 22-bit addressing, up to
16 drives of up to 2 TB each, and it uses interrupts to signal completion so the system doesn't have to stall during
I/O. The main reason it's interesting is that it supports variably sized devices like MSCP does, but with a much 40
40 Page 41 42
Emulated PDP-11 disk devices 33
simpler programming model so that PDP-11 drivers can be written which require far less memory than MSCP
drivers. An RT-11 driver (HD.MAC) is included with E11, and one for Fuzzball is available from ftp.dbit.com.

MOUNT HD: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET HD: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

4.2.13 PD: | PDT-11/150 RX01
The PDT-11/150 was a microcomputer based on the LSI-11 chipset. It had no expansion bus, and used a pair of
8085A processors to simulate the approximate equivalent of a small PDP-11/03 conguration, but it could be built
more cheaply, and sold as a \smart" terminal system for data entry etc. It used RX01 drives but instead of an
RXV11 controller (which would have required a Q-bus), it used a WD1771 oppy controller chip, which one of the
8085As used to simulate an almost-RXV11-like interface, which was called the RXT11. It's just dierent enough
from the RXV11 to be incompatible with regular RX01 software, so E11 provides it as a separate emulation.

MOUNT PD: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET PD: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 41
41 Page 42 43
Chapter 5
Tape Devices
The full range of standard PDP-11 magtape drives and controllers can be emulated under Ersatz-11. Tape drives
are congured in the same way as disks, with a MOUNT command to set up each emulated tape unit. The defaults for
controller and drive parameters also work the same way as disks, with the controller model based on the emulated
CPU type and the CSR and vector computed according to \ oating" address rules if necessary. However the default
tape drive models are essentially chosen arbitrarily, since unlike disks, there's no point in trying to guess the drive
model based on the size of the PC le or device that's being used to emulate a tape drive, because the amount of
data on a tape is variable anyway. In any case, the default drive and controller parameters can be overridden with
MOUNT switches and SET commands, the same way they can with disks. The /RONLY (syn. /WPROTECT switch may
be specied on any MOUNT command, to lock the tape against writes.

5.1 PC tape devices
As with disks, E11 uses a device-independent interface to connect any emulated tape drive to any real tape device.
This connection is made with a MOUNT command, and the current conguration of an emulated tape can be displayed
with a SHOW command.

5.1.1 Tape image les
Command syntax:
MOUNT ddcu: [d:pathn]lename[.TAP] [switches]
Special switches: /MAXRECORD:n
A tape image le contains a byte-by-byte image of tape data, with headers and trailers on each record to maintain
the blocking data from the real tape. Each record looks like this:

.LONG LEN ;32-bit record length, LSB first, byte-aligned

34 42
42 Page 43 44
Emulated PDP-11 tape devices 35
.BLKB LEN ;LEN bytes of data
.LONG LEN ;the length again, for backspacing

A tape mark appears as a single 32-bit 0. The MOUNT command for an image le may include a /MAXRECORD:n
switch, which sets the maximum possible record length that can be read or written on that unit. The default is
16384 bytes. E11's memory usage may be decreased slightly by using a smaller number, but data will be lost if
the PDP-11 attempts to read or write records larger than the specied maximum. Both ANSI and DOS-11 labeled
tapes normally have a maximum record length of 512 bytes, but BRU tapes and UNIX \tar" tapes use longer
records. As with disks, there are also /RONLY (syn. /WPROTECT), and /RW switches, to optionally write lock a tape
drive. The le is located using E11's usual rules, see section 1.7 for details. If the le does not exist, it is created
as a zero-length le in the current working directory.

5.2 Emulated PDP-11 tape devices
This section describes the emulated PDP-11 tape drive models, and denes the device-specic MOUNT command
switches that apply to each.

name units controller drive/volume switches
CT: 0{1 TA11 (none, always TU60 DECassette)
MM: 0{7 RH11/RH70, TM03 /TE16, /TU45, /TU77, /SERIAL:nnnn
MS: 0{7 TS11 etc. (none, always matches controller)
MT: 0{7 TM11 (none, software can't tell)
MU: 0{65535 TMSCP /TYPE:xxxyy

5.2.1 CT: | TU60 DECcassette
The TU60 was designed to provide cheap o-line storage using ordinary audio cassette tapes. Under the CAPS-11
cassette programming system, it could be used as the system's only mass storage device. It uses programmed I/O
rather than DMA, so tape data bytes are transferred one at a time. Unlike other tape devices, the TU60 requires
the PDP-11 to know the record length ahead of time when reading a record, and gives an error if the PDP-11
attempts to read more or less than the correct number of bytes. The \LOG CTn:" command may be used to nd
out whether a PDP-11 program is trying to read the wrong record size.

The TA11/TU60 cassette tape system requires a mandatory load point gap (i.e. tape mark) on all tapes. E11
simulates this internally so that the load point gap does not appear on the physical medium. This allows the
emulated TU60 general access to tapes that may have been created using some other device (or emulated device),
where an extra tape mark at BOT would violate the labeling standards.

MOUNT CT: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET CT: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR6 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 43
43 Page 44 45
36 Emulated PDP-11 tape devices
5.2.2 MM: | TE16/TU16, TU45, TU77
These tapes all use the TM02 or TM03 Massbus tape formatter to control up to eight slaves. The formatter
itself uses one of the eight possible Massbus unit numbers (typically 0), and the resulting two-level unit selection
scheme slightly complicates the device naming, since it appears nowhere else. As a result, the most common naming
convention for \MMn:" device names uses the unit number n to refer to the slave number within the single formatter,
rather than the Massbus unit number (which is what referred to by the unit number with all Massbus disks), and
the formatter is Massbus unit 0.

E11 uses an extended MM: device name syntax similar to that used by RSX, where each slave's device name looks
like \MMcu s:". c is a letter indicating which RH11/RH70 controller connects to the TM03 formatter. The default
in this version of E11 is \C", the letter may change in future versions but in any case it refers to the default tape
Massbus adapter at (17)772040. u is the Massbus unit number of the formatter, which defaults to 0 and is in the
range 0{7. s is the slave number (within a TM03 formatter) of the tape transport, which also defaults to 0 and is in
the range 0{7. If a number is present but no \ ", that number is the slave number, not the Massbus unit number.

The eect is that if the controller letter and Massbus unit number are omitted leaving a device name like \MM3:",
this name has the same meaning as the usual RT-11 or RSTS name, which is: default tape RH11 (the one at
(17)772040), default formatter (0), slave 3. Meanwhile additional elds may be supplied to identify any of the
64 possible slaves on any of the (currently 3) possible Massbusses, so \MMA2 5:" refers to the rst RH11, TM03
formatter 2, slave 5. This same name format may also be used in any other E11 command (e.g. BOOT, LOG) that
takes a device name.

The MOUNT MM: command has switches to identify the drive model, but their only eect is to set the value of the
\drive type" register. From a PDP-11 software point of view, all drives attached to a TM03 formatter look the
same, the only dierence is speed. There is also a /SERIAL:nnnn switch, which sets the value of the \drive serial
number" register.

MOUNT MM: drive switches:
/SERIAL:nnnn set drive serial number (4 decimal digits)
/TE16 set drive type to TE16 (45 IPS NRZI/PE)
/TU45 set drive type to TU45 (75 IPS NRZI/PE)
/TU77 set drive type to TU77 (125 IPS NRZI/PE)
/WPROTECT enable write protection (syn. /RONLY)

SET MM: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
RH11 set controller type to RH11
RH70 set controller type to RH70
VECTOR=nnn set vector address to nnn octal

5.2.3 MS: | TK25, TS04, TS05, TU80
These drives are microcomputer-controlled and have a programming model which is like a simplied version of
TMSCP. There are no drive type switches because each controller model supports only one drive type anyway, so
the drive type can be controlled implicitly by changing the controller type with a SET command. The TK25 is a 44
44 Page 45 46
Emulated PDP-11 tape devices 37
cartridge tape, while the others are 9-track magtapes, but they all look similar from the PDP-11 operating system's
point of view.

DEC's earlier controllers support only one drive per controller so PDP-11 operating systems normally use the unit
number to distinguish between separate controllers. Like later controllers, E11 allows up to 8 units per controller, so
E11 uses the controller letter to distinguish between multiple controllers, the same as with most other device types.
This means that when emulating a typical DEC system with one unit per controller, drives that the operating
system calls MS0:, MS1:, and MS2:, will be called MSA0:, MSB0:, and MSC0: by E11, since they're the rst and
only slaves on three separate controllers. This only comes up with there is more than one MS: style tape drive,
which is rare.

MOUNT MS: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET MS: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
DEFAULT set controller type to default (TU80 for Unibus, TSV05 for Q-bus)
EXTFEAT enable extended features
NOEXTFEAT disable extended features
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
TQK25 set controller type to TQK25 (Q22 TK25 controller)
TS11 set controller type to TS11 (Unibus TS04 controller)
TSU05 set controller type to TSU05 (Unibus TS05 controller)
TSV05 set controller type to TSV05 (Q22 TS05 controller)
TU80 set controller type to TU80 (Unibus TU80 controller, M7454 module)
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured

5.2.4 MT: | TS03, TU10
The TU10 is a vacuum column tape drive which interfaces to the PDP-11 through a classic Unibus interface,
made up of a number of ip chip modules on a wire wrap backplane. The TS03 is a very small tension arm drive
which uses up just 10.5" of rack space, and uses a physically smaller controller made with higher density modules.
However they both look the same to software, so there are no drive type switches to distinguish them. The 7-track
version of the TU10 is not supported.

MOUNT MT: drive switches:
/WPROTECT enable write protection (syn. /RONLY)

SET MT: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 45
45 Page 46 47
38 Emulated PDP-11 tape devices
5.2.5 MU: | TMSCP tapes
TMSCP (the Tape Mass Storage Control Protocol) is a device-independent protocol for connecting arbitrary tape
drives to any of DEC's later computers. It doesn't particularly reduce the amount of implementation-specic quirks
that must be dealt with (tapes never had anywhere near the amount of device-specic details as disks do to begin
with), but it provides symmetry with the MSCP protocol for disks, and some systems are able to capitalize on
this by sharing code between the disk and tape drivers. DEC generally didn't have more than one tape drive per
TMSCP controller, but as with MSCP disks, E11 has no such articial limits. However this means it may be
possible to congure a system which is incompatible with the PDP-11 operating system's TMSCP driver, so it is
best to dene a separate controller for each drive anyway.

As with MSCP disks, the /TYPE:xxxyy switch sets the unit type name, which may be up to three letters and up to
two decimal digits. The default is TU81.

MOUNT MU: drive switches:
/TYPE:xxxyy set drive type to xxxyy (1{3 letters, 2 digits)
/WPROTECT enable write protection (syn. /RONLY)

SET MU: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
DEFAULT set controller type to default (KLESI for Unibus, TQK50 for Q-bus)
KLESI set controller type to KLESI (Unibus TU81 controller)
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
TQK50 set controller type to TQK50 (Q22 TK50 controller)
TQK70 set controller type to TQK70 (Q22 TK70 controller)
TUK50 set controller type to TUK50 (Unibus TK50 controller) 46
46 Page 47 48
Chapter 6
Serial Lines
E11 has exible support for serial and line printer devices. As with disks and tapes, any supported PC serial device
may be used to emulate any emulated PDP-11 character device, and once again E11 chooses sensible defaults for
the controller types and CSR/vector addresses based on the emulated CPU type and the conguration of \ oating"
devices, so in many cases no SET commands will be needed.

Each serial line is created with an ASSIGN command. TT0:, the system console, is connected to CON1: (the rst
emulated VT100 session, displayed on the PC video display) when E11 starts up, but it can be reassigned to any
other screen or serial port with an ASSIGN TT0: command. If it is assigned to an RS232 serial port, the E11 prompt
can no longer be popped up using Shift-Enter, because this key combination does not correspond to any ASCII
character that could be sent over a serial line. So by default, a BREAK condition on the console serial port will
bring up the \E11>" prompt. If this is inconvenient, the SET BREAK command can be used to dene one ASCII
character which will cause the prompt to pop up. For example, putting a SET BREAK 20 command in the E11.INI
initialization le will make the prompt pop up whenever CTRL/P is typed on the console terminal.

Output to any serial or printer device can be captured to a PC le using E11's LOG command. For example, LOG
TT0: FOO will cause all data displayed on the console terminal to be saved in FOO.LOG, until logging is turned
o with a LOG TT0: command (with no lename).

An ASSIGN command will fail if the specied PC port doesn't exist, or if the device's currently SET IRQ is already
in use and not SHAREed, or if the new ASSIGN command would steal TT0:'s device for some other port. There must
always be something attached to TT0: since that's E11's console terminal.

Note that Ersatz-11 does not ag an error if the ASSIGN command assigns a TT: port to a printer, or ASSIGN an LP:
port to a screen, even though these are usually not likely to be useful combinations. The reason both port types
use the same pool of devices is so that they can both access COM ports, since serial terminals and serial printers
are both reasonable devices. LP: ports attached to serial ports or video screens respond to XON/XOFF ow control.
One good reason to ASSIGN an LP: port to a VT100 session is that a LOG command will capture the output to a

39 47
47 Page 48 49
40 Serial options common to all devices
le, and there's no need to actually pop up that session and see it on the screen.

6.1 PC serial devices
name units type switches
CONu: 1{12 video console (none)
COMu: 1{4 PC COM port /FIFO[:n], /NOFIFO, serial options
LPTu: 1{8 PC LPT port
SBMIDI: none Sound Blaster MIDI port

6.1.1 Serial options common to all devices
E11 has a set of \serial options" which are common to all serial device types, and are used to set communications
parameters. These options may be used as either a switch (with a preceding \/" character) on the ASSIGN command
when the port is created, or as a separate SET command any time thereafter. For example:

ASSIGN TT1: COM2: /MODE:1200,N,8,1
SET TT1: MODE=2400,E,7,1

The rst command will create TT1: and attach it to COM2. The line parameters are set to 1200 baud, no parity,
8 data bits, and one stop bit. The second command will change the existing TT1: port to use 2400 baud, even
parity, 7 data bits, and one stop bit. The option name may be separated from its parameters by either a \:" or
\=" character.

Note that some emulated port types allow the communications parameters to be set by the PDP-11 operating
system. E11 allows this by default, but in some cases the user may want to override the PDP-11's parameters, for
example to set a port to a higher baud rate than the PDP-11 equivalent supports. In this case the /LOCK switch
will be useful when creating the port (usually in combination with a /MODE switch). The SET ddcu: LOCK and SET
ddcu: UNLOCK commands can be used to lock and unlock the port's communications parameters after the port has
already been created.

The device-independent serial ASSIGN switches are as follows:

/DTR:value Sets the state of the DTR (data terminal ready) modem control signal. value may be
ON or OFF to force DTR to be permanently asserted or deasserted, regardless of the
value selected through the emulated PDP-11 port. Or, value may be DTR (which is the
default setting), to make the real DTR pin track the value of the emulated DTR signal
from the emulated PDP-11 port.

/LOCK Locks communication mode parameters (baud rate, data bits etc.) against being
changed by the PDP-11 port. This is useful for setting a port that has programmable
parameters (e.g. a DZ11 line) to a non-standard speed without having the PDP-11 op-
erating system set it back to a lower speed when initializing the emulated side of the
port.

/MODE: bps,par,dbits,sbits Sets communication mode parameters to the values specied. Bps is the number of bits
per second (range of allowable values depends on the specic serial hardware). Par is
the parity specied as one letter: Even, Odd, None, Mark, Space (not all serial hardware 48
48 Page 49 50
Video consoles 41
supports all types). Dbits is the number of data bits, generally 5{8 although some PC
port types can only do 7{8. Sbits is the number of stop bits, 1{2 (on most ports, \2"
actually means 1.5 if dbits is 5).
If no /MODE switch is specied, newly ASSIGNed ports are initialized by default to 9600
baud, no parity, 8 data bits, 1 stop bit, i.e. /MODE:9600,N,8,1.

/RTS:value Sets the state of the RTS (request to send) modem control signal. value may be ON
or OFF to force RTS to be permanently asserted or deasserted, regardless of the value
selected through the emulated PDP-11 port. Or, value may be RTS (which is the default
setting), to make the real RTS pin track the value of the emulated RTS signal from the
emulated PDP-11 port.
Some newer modems use the RTS signal incorrectly to mean \ready to receive," and if it
is not asserted they will refuse to send data to the PC. The /RTS:ON switch circumvents
this problem. Other possible solutions include using a specially wired modem cable
to hold RTS asserted, or using the AT&R1 modem command to change the modem's
behavior.

/STD:value This switch is included for completeness only. It works like the /DTR and /RTS switches,
but it controls the secondary transmit data pin, which is pin 11 on a Bell 202 modem.
Since none of the supported PC serial devices drives this pin, the switch has no visible
eect.

/TXMAX:n This switch sets the maximum number of transmitted characters that will be buered
for transmission by that port. Once the port has accepted this number of characters
from the PDP-11, it waits for all of them to be transmitted before accepting more char-
acters. This value should be set low enough to get acceptable response to XON/XOFF
characters (it may take up to n characters for the PDP-11 to react and suspend out-
put), but high enough to get adequate throughput. The default value is 16. LA120
teleprinters are particularly sensitive to XON/XOFF response time, so they require a
low /TXMAX value.
TXMAX:n is available only as an ASSIGN switch.It maynot appear in aSET command.

/UNLOCK The opposite of the /LOCK switch, unlocks the port's /MODE parameters so that they
may be altered by the PDP-11 port (on port types where this is possible such as the
DZ11 and DHU11). This is the default so there's normally no reason to use it as an
ASSIGN switch, however it may be useful as a SET keyword once the port has been
assigned.

The sections that follow describe each physical PC serial (or serial-like) device that E11 supports, along with the
command syntax needed to use them as emulated PDP-11 serial ports. As with disk and tape units, the ports are
created on a line-by-line basis so there is no need to use the same kind of physical port for all emulated ports of a
given type.

6.1.2 Video consoles
Command syntax:
ASSIGN ddcu: CONn: [switches]
Special switches: /NOREPLY 49
49 Page 50 51
42 COM ports
The specied PDP-11 terminal port is connected to one of twelve simulated VT100s that can normally be put up
on the screen by pressing Alt and the function key corresponding to the screen number (F1{F12). Note that the
screens assigned to F11 and F12 are not accessible on the old 84-key AT keyboard, unless other keys are redened
to reach them. When one screen is being displayed on the PC screen, the others (up to 11) are maintained invisibly
in memory, so they will be up to date whenever another Alt/Fn keypress switches the screen to display one of the
hidden sessions.

This is only the default behavior of the function keys, if they are redened using DEFINE KEYPRESS commands
then other keys will need to be dened to switch displays, using the \PRIMARY n" and\SECONDARY n" keyscript
commands.

If there are two video adapters on the PC (e.g., an SVGA and a Hercules monochrome card), then one VT100
session may be displayed on each. Using the default keyscripts, the Alt-function keys choose which of the 12
possible screens is displayed on the primary monitor, and the Ctrl-function keys choose which is on the secondary
monitor. Note that it is not possible to display the same session on both monitors at once. If this is attempted
then whichever monitor was previously showing that session, switches to displaying the lowest-numbered available
screen which is not already being displayed.

The /NOREPLY switch means that this emulated VT100 should not transmit any automatic replies to control
sequences sent by the PDP-11. This can be handy if you're using the \multiple physical ports" feature and want
to make sure that only one of the ports answers when you something like \SET TERM/INQUIRE".

CONn: is the only device that may be used with the \VT:" VT11 vector graphics display processor emulation.
Rather than running as an emulated VT100 in text mode the way true serial devices do, VT11 sessions run in
graphics mode and require an SVGA card with at least 1 MB of memory. See section 8.5 for details.

6.1.3 COM ports
Command syntax:
SET COMn: PORT=nnnn IRQn (if needed)
ASSIGN ddcu: COMn: [switches]

Special switches: /NOFIFO, /FIFO, /FIFO:n
The PDP-11 port is connected to the specied PC COM port. Any changes to the default I/O port address and IRQ
settings must be made with a SET COMn: PORT=nnnn IRQn command before assigning a PDP-11 port to the COM
port. The baud rate, number of data bits, etc. for a COM port may be set with a /MODE switch, see section 6.1.1
for more information. These parameters may also be changed using a SET command once the port is assigned to
a PDP-11 device.

The \/NOFIFO," \/FIFO," and \/FIFO:n" switches control usage of the receive FIFOs on the 16550A (etc.) UART
chips used in almost all current PC COM ports. These FIFOs greatly reduce interrupt trac and enabling
them normally increases the maximum throughput of the system, however they can make input appear \bursty,"
especially at low baud rates. \/NOFIFO" disables the receive FIFOs, \/FIFO" enables them, and \/FIFO:n" enables
them only when the baud rate is at least n. The setting is \/FIFO:4800" by default for ports that have FIFOs,
ports that don't are always set to \/NOFIFO" regardless of the switch given. 50
50 Page 51 52
PC line printer port 43
SET COMn: controller parameters (must be issued before the ASSIGN that uses this port):
IRQn set IRQ number (0{15)
PORT=nnnn set I/O port address to nnnn hex
SHARE enable ISA IRQ sharing (must come after IRQn)

The default IRQ for COM ports is IRQ4 if the I/O port address is 300 (hex) or more, or IRQ3 for 2FF (hex) or
less. These defaults have been traditional since IBM XTs were the standard, and most multi I/O boards will be
set up this way. However it's not uncommon with newer boards for COM3 to use IRQ5 and COM4 to use IRQ2
(or IRQ9 really, which is eectively the same on an AT) by default.

6.1.4 PC line printer port
Command syntax:
SET LPTn: [PORT=nnnn] [IRQn] [NOIRQ] [[NO]BIOS] [DATAPRODUCTS] (if needed)
ASSIGN ddcu: LPTn: [switches]

Special switches: none
The PDP-11 port is connected to the specied PC LPT port. The default port addresses for the LPT ports,
including PCI printer interface boards, are obtained from the BIOS when E11 starts up. Any changes to these
default I/O port address and IRQ settings must be made with a SET LPTn: PORT=nnnn IRQn command before
assigning a PDP-11 port to the LPT port. Some LPT ports do not work well with interrupts. For example, if there
are multiple ISA LPT ports they may all try to drive IRQ7 at once, or it's possible that a printer may not generate
the ACK signal correctly. In many cases this problem can be circumvented by using the SET LPTn: NOIRQ command
before assigning the port. This tells E11 to use timers and polled I/O for printer output, which works well with
most late model printers. However some older printers with less buering may experience very poor performance
with this setting, printing only one or two dozen characters per second. With these printers it is best to resolve
the IRQ problem and use interrupts.

Printers may also be accessed using the PC BIOS, by issuing a SET LPTn: BIOS command before assigning the
port. This is mainly useful for remote printing using network software that captures BIOS output and forwards it
to a network print server. For a locally attached printer it's better to use the default NOBIOS setting.

The SET LPTn: DATAPRODUCTS command supports line printers which use the Data Products parallel interface,
typically using a special cable which connects the LPT port to a 50-pin Winchester connector. When this command
is in eect, E11 implements the Data Products signal polarities and protocol using software polled I/O. The very
rst line printed may contain a junk character, since the DATA STROBE signal is held asserted by the PC BIOS
until E11 takes over.

The special cable should connect the data lines straight through, the Centronics STROBE signal is connected to DATA
STROBE, and the Centronics BUSY signal is connected to DATA REQUEST. You can make the cable yourself, or you
can buy a model EYN328 cable from Black Box Corporation, and connect it to the end of a regular PC printer
cable by using a gender changer which has two 36-pin female Centronics connectors.

Connector pinouts for SET LPTn: DATAPRODUCTS: 51
51 Page 52 53
44 Sound Blaster MIDI port
signal DB25 Centronics Winchester M/50
DATA STROBE 1 1/19 j/m
DATA0 (LSB) 2 2/20 B/D
DATA1 3 3/21 F/J
DATA2 4 4/22 L/N
DATA3 5 5/23 R/T
DATA4 6 6/24 V/X
DATA5 7 7/25 Z/b
DATA6 8 8/26 n/k
DATA7 (MSB) 9 9/27 u/w
DATA REQUEST 11 11/29 E/C

Paired pins are signal/return. The DB25 connector doesn't have enough ground pins to have one for each signal
pin, so you should connect all of DB25 pins 18{25 to the return signals from the other connector.

Regardless of the access method, LPT output is passed transparently, so you'll need to make sure that your OS
and printer agree on whether lines end in <CRLF> or just <LF>, and on whose responsibility it is to expand tabs
and form feeds.

SET LPTn: controller parameters (must be issued before the ASSIGN that uses this port):
BIOS use BIOS calls for I/O instead of driving hardware directly
DATAPRODUCTS use Data Products protocol instead of Centronics
IRQn set IRQ number (0{15)
NOBIOS use E11's internal driver for I/O instead of BIOS calls
NOIRQ use polled I/O instead of interrupts
PORT=nnnn set I/O port address to nnnn hex
SHARE enable ISA IRQ sharing (must come after IRQn)

6.1.5 Sound Blaster MIDI port
Command syntax:
SET SBMIDI: [PORT=nnnn] [IRQn] (if needed)
ASSIGN ddcu: SBMIDI: [switches]

Special switches: none
The PDP-11 port is connected to the MIDI port on a Creative Labs Sound Blaster 16 compatible sound board. This
allows connecting electronic musical instruments (synthesizers, etc.) to the sound board using a special cable. The
default I/O port address and IRQ settings are taken from the BLASTER environment variable, 330/IRQ5 are used
if this variable is not dened. Any changes to these defaults must be made with a SET SBMIDI: PORT=nnnn IRQn
command before assigning a PDP-11 port to the MIDI port. The communications parameters are not changeable
on a MIDI port.

The Sound Blaster MIDI port supports interrupt-driven I/O only when receiving characters, so E11 must use polled
I/O to transmit. This means that PDP-11 emulation may stall for up to one character time while the port driver
is waiting to start a new character transmission, so the SBMIDI: port should not be used on systems where there
are other real-time tasks running. This has nothing to do with emulated interrupts provided for PDP-11 software,
those work in both directions, but transmitting a character can stop all PDP-11 instruction execution for several 52
52 Page 53 54
Sound Blaster MIDI port 45
hundred microseconds.
SET SBMIDI: controller parameters (must be issued before the ASSIGN that uses this port):
IRQn set IRQ number (0{15)
PORT=nnnn set I/O port address to nnnn hex
SHARE enable ISA IRQ sharing (must come after IRQn) 53
53 Page 54 55
46 Emulated PDP-11 serial devices
6.2 Emulated PDP-11 serial devices
This section describes each PDP-11 serial device type emulated by Ersatz-11.
name units controller notes
LPu: 0{3 LP11/LPV11
TTu: 0{15 DL11/DLV11 KBu: and YLu: are synonyms

6.2.1 LP: | LP11, LPV11 line printer ports
These ports connect a single line printer, using device registers which look similar to the transmitter half of a
DL11/DLV11 serial line unit. They normally use a Data Products compatible parallel interface to connect to the
printer. Converter boxes are available from Black Box Corporationto allow connecting such a line printer to a PC
RS232 serial port.

SET LP: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
MODE=b,p,d,s set communications parameters
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR4 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

6.2.2 TT: | DL11, DLV11 single serial line units
These are the standard single-line serial ports. Every PDP-11 has at least one, which is used for the console
terminal. By default Ersatz-11 connects the console terminal to CON1:, which is the same VT100 session that E11
uses for its own command prompt. The DLV11J 4-line serial card actually appears to software as four separate
DLV11 ports, so it can be congured in E11 using four ASSIGN commands.

SET TT: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
MODE=b,p,d,s set communications parameters
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR4 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured 54
54 Page 55 56
Chapter 7
Network Devices
Ersatz-11 emulates several types of network interfaces. Once again each emulated port is created with an ASSIGN
command, and is connected to a real PC Ethernet port.

DECnet is very demanding in its use of Ethernet hardware. In order to avoid needing an address resolution protocol
layer, it modies the port's Ethernet address to incorporate the protocol address, and it also makes use of multicast
addressing features. These capabilities are rarely used outside of DECnet, and D Bit has found that many drivers
supplied by hardware vendors appear to have been debugged against TCP/IP stacks only, and the calls that have
to do with multicast address lists and changing the Ethernet address may not work properly, or at worst may crash
the system when called.

In many cases there are several dierent packet drivers available for the same board so if you run into trouble, an
Internet search may turn up a better driver for your board. E11's built-in NE2000 driver has been tested extensively
and supports all needed features, including setting the Ethernet address, maintaining the multicast address list,
and controlling the lters for the promiscuous and receive-all-multicasts modes.

Extensive logging available for network devices. When applied to Ethernet interfaces, the LOG command can log
any combination transmitted data, received data, and device commands.

7.1 PC network devices
name type switches
NE2000c: NE2000 clone (none)
PKTD: Packet Driver /INT:vv

7.1.1 NE2000: | NE2000 and compatibles
Command syntax:

47 55
55 Page 56 57
48 PKTD: | Packet drivers
SET NE2000c: [ISA] [PCI] [AUTO] [PORT=nnnn] [IRQn] (if needed)
ASSIGN ddu: NE2000c: [proto1 proto2 proto3 . . .]

Special switches: none
The \NE2000c:" device refers to a Novell NE2000 (or compatible) Ethernet board, accessed using E11's own internal
driver. This requires much less software overhead than using a DOS packet driver, and common PCI boards (such
as those based on the RealTek RTL8029 chip) are supported as well as the older ISA ones. The \c" parameter
is an optional letter specifying which NE2000 board to use (default is \A", meaning the rst or only one). The
port/IRQ values and controller type should be set with \SET NE2000c: . . . " commands prior to issuing the
ASSIGN command, except for PCI NE2000 clones where E11 obtains the port/IRQ values from the PCI BIOS. By
default the controller type is \AUTO", which means that E11 should rst try to locate a PCI board and failing
that, should assume that there's an ISA board located at the specied port/IRQ values. Setting the controller type
to \PCI" tells E11 that it's denitely a PCI board, so the port/IRQ values are ignored (the values obtained from
the PCI BIOS are used instead), and an error message is given if no PCI board exists. A controller type of \ISA"
tells E11 to skip the PCI probe and denitely use the supplied port/IRQ values.

SET NE2000c: controller parameters (must be issued before the ASSIGN that uses this board):
AUTO auto-detect ISA vs. PCI port type (default)
IRQn set IRQ number (0{15)
ISA port type is ISA (or PCMCIA), use IRQ/PORT settings
PCI port type is PCI, obtain board information from PCI BIOS
PORT=nnnn set I/O port address to nnnn hex
SHARE enable ISA IRQ sharing (must come after IRQn)

7.1.2 PKTD: | Packet drivers
Command syntax:
ASSIGN ddu: PKTD: [switches] [proto1 proto2 proto3 . . .]
Special switches: /INT:nn
The PKTD: device uses a DOS Packet Driver to access the physical Ethernet board. If specied, \/INT:nn" gives
the hexadecimal 80x86 interrupt vector to which the packet driver is attached. If the interrupt vector is not given,
then the range of vectors from 20 to FF (hex) is searched until a packet driver is found that isn't already in use by
another simulated Ethernet port. A list of hex 16-bit DIX protocol numbers, up to ten total, may be specied in
network byte order (e.g. IP is 0800), in which case E11 asks the packet driver to pass only frames of those types.
This may allow E11 to coexist with other protocol stacks running on the same PC, as long as they each use dierent
sets of protocol numbers and neither one needs to change the port's physical address after the other is loaded, and
in any case it may be helpful for shielding the PDP-11 operating system from unwanted broadcast trac.

DECnet requires the ability to change the address (it wants the physical address to be based on the protocol address
to avoid the additional overhead of performing address resolution over the network, as TCP/IP does), so in general
running DECnet under E11 will require either that no other network software be running on the same interface,
or that you install a second Ethernet board for E11's exclusive use. This is because the packet driver refuses to
change the physical address once the board is already in use so as not to surprise protocol stacks that were already
running when the change was made and thought they knew their own address. 56
56 Page 57 58
PKTD: | Packet drivers 49
Freeware packet drivers for a wide variety of Ethernet interfaces are available via anonymous FTP from many sources
including ftp.crynwr.com, and are typically included on the driver disk that comes with the adapter. Ersatz-11
requires packet drivers that conform to version 1.09 or later of the packet driver specication as published by FTP
Software. 57
57 Page 58 59
50 Emulated PDP-11 network devices
7.2 Emulated PDP-11 network devices
This section describes each PDP-11 network device type emulated by Ersatz-11.
name units controller
NIu: 0{1 Interlan NI1010A, NI2010A Unibus/Q-bus Ethernet
XEu: 0{3 DELUA Unibus Ethernet

7.2.1 NI: | Interlan NI1010A, NI2010A Ethernet ports
The Interlan boards were early Ethernet interfaces, and have a simpler programming model than DEC's own
Ethernet boards. Fuzzball and UNIX contain Interlan drivers. They were available in both Unibus (NI1010A) and
Q-bus (NI2010A) versions, and the Q-bus version could be switched between 18-and 22-bit addressing. By default,
E11 chooses the NI: device type based on the SET CPU QBUS setting.

SET NI: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
DEFAULT set controller type to default (NI1010A for Unibus, NI2010A Q22 for Q-
bus)
NI1010A set controller type to NI1010A
NI2010A Q18 set controller type to NI2010A with Q18 addressing
NI2010A Q22 set controller type to NI2010A with Q22 addressing
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal

7.2.2 XE: | DELUA Ethernet port
The DELUA is a Unibus Ethernet board in a single hex-height module. It is a compatible upgrade to the DEUNA,
which was two hex-height modules and was slower and consumed more power. It is a sophisticated board which
ooads a lot of processing from the PDP-11. The board contains its own echo server (for the ECT loopback
protocol, 90-00) and generates system ID packets, both automatically (on a timer) and in response to requests
from other nodes. It also maintains a \counters" page with transmit/receive statistics.

SET XE: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
CSR=FLOATING set CSR address to be auto-congured
DEUNA set controller type to DEUNA
DELUA set controller type to DELUA (default)
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR5 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal
VECTOR=FLOATING set vector address to be auto-congured 58
58 Page 59 60
Chapter 8
Miscellaneous Devices
This chapter describes devices which don't t into any of the major categories covered in the preceding chapters.
This includes graphics displays, paper tape I/O, and the interface to the PC's native le system.

Miscellaneous PDP-11 devices:
name unit(s) controller command to create type
(none) LOAD/ROM ROM devices
DO: 0{3 virtual MOUNT PC le interface
PP: 0 PC11 MOUNT paper tape punch
PR: 0 PC11 MOUNT paper tape reader
VT: 0 VT11 ASSIGN vector graphics processor

8.1 ROM devices
Command syntax:
LOAD/[EEP]ROM [/BANKED] [d:pathn]lename[.PDP] start[:end]
Special switches: /BANKED, /EEPROM, /ROM
E11 can simulate ROM devices, either simple unbanked ones such as the M9312 bootstrap/diagnostic board, or
banked ones like the BDV11 board or the on-board ROM in the later quad-height Q-bus CPU modules.

ROM data are loaded from the specied binary le, which is located using E11's usual search rules (see section 1.7).
More than one ROM device can be loaded, so for example the individual 128-byte device bootstraps in a M9312
style ROM board (or the on-board equivalents in a PDP-11/24 or PDP-11/44 CPU) can be loaded from separate
les with separate commands.

For linear (non-banked) ROMs, a starting address in the I/O page must be specied. The data from the le will
appear starting at that address. If an ending address is specied, the le must be at least long enough to reach
that address. If no ending address is given, the length of the emulated ROM is the same as the length of the binary

51 59
59 Page 60 61
52 DO: | PC le access pseudo-device
le.
A M9312-style bootstrap/diagnostic ROM board can be congured and started with the following commands:
E11>LOAD/ROM DIAGBOOT.ROM 17765000
E11>LOAD/ROM RL02BOOT.ROM 17773000
E11>LOAD/ROM MSCPBOOT.ROM 17773200
...
E11>GO 165020
000000 000000 000000 000000
@

This is just an example of what can be done. Normally there would be no point in using the M9312 boot ROMs
since E11 contains its own bootstraps for all bootable devices that it emulates. Anyway there may be legal problems
with copying the ROMs into image les, since they are copyrighted by DEC.

For banked ROMs, the /BANKED switch must be used. The data from the le will appear through a 512.-byte
window, and the page which is visible is selected by the PDP-11 using the page control register (PCR), which for
emulation purposes is considered by E11 to be part of the CPU board (since in most cases, it is).

There are two styles of page control register. SET CPU KDF11 (or SET CPU BDV11) selects the style used in the
KDF11 on-board ROM (or the BDV11 boot/diagnostic board). SET CPU KDJ11 selects the style used in the
on-board ROM of the KDJ11x CPU boards.

The starting address for banked ROM windows is either (17)773000 or (17)765000. The windows must be 512. bytes
long, which is E11's default anyway so there's no need to give the end of the address range. The /EEPROM switch
means that the memory is actually EEPROM (as used on the KDJ11x CPU boards), and must go in the window
starting at (17)765000. This is the default, so there's no need to give any address range at all with LOAD/EEPROM.
Note that while the memory can be written, the data written are not saved to the le from which the EEPROM
was loaded. Regular ROM data go in the window starting at (17)773000, so this is the default for LOAD/ROM.

ROM devices can be removed at any time using the UNLOAD command. The switches and defaults are the same as
for LOAD, so the starting address of the ROM to remove need not be specied if the /BANKED switch is used.

8.2 DO: | PC le access pseudo-device
Command syntax:
MOUNT DOn:
Special switches: none
DO: refers to the \DOS le device" . This is a pseudo-device which allows privileged PDP-11 programs and/or
device drivers to read and write native PC les from within the emulated PDP-11. It is compatible with the supplied
DO.SYS device driver for RT-11, and the DOS.TSK program for RSX which is available from ftp.dbit.com. The
command to create a DOS le device is simply \MOUNT DOn:", since there is no particular physical PC device
attached to the physical side of the emulation. In E11 prior to V2.2, one DOS le device was always congured, 60
60 Page 61 62
PP: | PC04 paper tape punch 53
but now they must be created explicitly. Normally there's no reason to have more than one, so you can recreate
the V2.1A behavior by simply adding \MOUNT DO:" to your E11.INI initialization command le.

8.3 PP: | PC04 paper tape punch
Command syntax:
MOUNT PP: [d:pathn]lename[.PAP]
Special switches: none
The PC04 is a high speed paper tape reader/punch, interfaced to the PDP-11 through a PC11 interface. This
command attaches the specied PC le to the output half of the device, so that data bytes sent to the punch will
be written to the le instead.

In E11 prior to V3.0, one paper tape reader/punch was always congured, but now they must be created explicitly.
You can recreate the V2.2 behavior by adding \MOUNT PR: NUL" to your E11.INI initialization command le,
and issue new MOUNT command(s) later to change the le(s) used.

See below for SET commands. The PC11 is a combined reader/punch controller so one set of settings congures
both the reader and punch halves.

8.4 PR: | PC04 paper tape reader
Command syntax:
MOUNT PR: [d:pathn]lename[.PAP]
Special switches: none
This command attaches the specied PC le to the input half of the PC11/PC04, so that input bytes will come
from the le instead. The BOOT PR: command supports binary executable tape images written in the Absolute
Loader format (e.g. by the LINK /LDA command in RT-11). The SET PR: REWIND command will reset the tape to
begin reading at the beginning of the le on the next access.

In E11 prior to V3.0, one paper tape reader/punch was always congured, but now they must be created explicitly.
You can recreate the V2.2 behavior by adding \MOUNT PR: NUL" to your E11.INI initialization command le,
and issue new MOUNT command(s) later to change the le(s) used.

SET PR: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
REWIND rewind tape to beginning
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR4 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 61
61 Page 62 63
54 VT: | VT11 vector graphics display processor
8.5 VT: | VT11 vector graphics display processor
Command syntax:
ASSIGN VT: CONn:
Special switches: none
The VT11 vector graphics display processor consists of three hex-height boards in a 4-slot backplane. It maintains
the picture on a VR14 or VR17 monitor by constantly scanning a display list held in PDP-11 memory, and refreshing
each vector many times per second. It can be used with a DEC model 375 light pen, and an LK40 ASCII keyboard.

In order to emulate a VT11, E11 requires a Super VGA graphics card with a VESA BIOS and at least 1 MB of
video memory. The VT11 is assigned to one of the twelve possible virtual console sessions, so it can be popped up
with an Alt-function key just like an emulated VT100 session, except of course that it runs the display in graphics
mode.

If a mouse is present, it is used to emulate the DEC model 375 light pen. The crosshairs indicate the mouse position
continuously (since a mouse can't be lifted away from the screen like a real light pen), so the left mouse button is
used to indicate whether a light pen \hit" should be allowed to register. The PC keyboard takes the place of the
LK40 keyboard on a GT40 system, so all keyboard input typed to a VT11 session is sent to TT0:.

SET VT: controller parameters:
CSR=nnnnnn set CSR address to nnnnnn octal
PRIORITY=n set interrupt priority to n (4{7)
PRIORITY=DEFAULT set interrupt priority to default (BR4 for Unibus, BIRQ4 for Q-bus)
VECTOR=nnn set vector address to nnn octal 62
62 Page 63 64
Chapter 9
Commands
Ersatz-11 recognizes many keyboard commands. These are entered at the \E11>" prompt, which appears whenever
the PDP-11 is halted (e.g. at startup) but may be brought up at any time by pressing Shift-Enter or Alt-SysReq,
or by pressing the BREAK key on a serial terminal if the console terminal (TT0:) has been ASSIGNed to a COM
port. The SET BREAK command can dene a regular ASCII character that pops up a prompt if these methods
are all inconvenient. Some versions of the Windows DOS box intercept Alt-SysReq, but Shift-Enter still works.
Commands (and parameters and switches) may generally be shortened to any unique abbreviation. Note that E11
is multithreaded and PDP-11 code continues to be executed while you are entering commands at the prompt, if
you haven't HALTed it.

@le[.CMD]
Accepts input from the specied le as if it had been typed at the E11 prompt. The default extension is \.CMD",
and search rules are the same as for the E11.INI initialization le (see section 1.7). Command les may be nested
up to four deep. Lines read from the le are not echoed.

ASSEMBLE [/switches] [addr]
Starts the mini-assembler at the specied address, in the specied address space (syntax and defaults are the same
as for the LIST command). E11 will prompt with the address, and you can type in lines of PDP-11 assembly
code, which E11 will translate to machine language and deposit into PDP-11 memory at that address. E11 keeps
prompting for more lines (at updated addresses) until the user enters a blank line, or types CTRL/C. The syntax
is a subset of the standard MACRO-11 syntax. Simple expressions are allowed in operands but there is no symbol
table, macro processor, or conditional assembly. Only the .BYTE, .WORD, .BLKB, .BLKW, .ASCII, and .ASCIZ
pseudo-operations are supported.

Example:

E11>a 1000
001000 mov #1022,r5 ;point at string
001004 tstb @#177564 ;is port ready?
001010 bpl 1004 ;spin until it is
001012 movb (r5)+,@#177566 ;send next character
001016 bne 1004 ;loop unless it was a NUL

55 63
63 Page 64 65
56 CALCULATE
001020 halt ;stop in that case
001022 .asciz /Hello there/<15><12> ;test string
001040 ^C
E11>g 1000
Hello there

%HALT
R0/000000 R1/000000 R2/000000 R3/000000 CM=K PM=K PRIO=0
R4/000000 R5/001040 SP/000000 PC/001022 N=0 Z=1 V=0 C=0
001022 add (r5)+,(r0)
E11>

ASSIGN pdp11dev: pcdev: [switches]
Assigns a physical PC device to emulate the specied PDP-11 serial or network device. See chapter 6 for information
about serial devices, and chapter 7 for information about network devices.

pdp11dev is the name of the PDP-11 device name being created. It conforms to the syntax dened in section 1.6.
The rst two letters dene the device type, and are generally the same as the PDP-11 operating system's name for
that device.

pcdev is the name of the PC device which will emulate this PDP-11 device. Within each class of peripherals (serial,
network), any PC device may be used to emulate any similar PDP-11 device.

The optional switches consist of keywords which begin with a forward slash character (\/"). Some switches take a
value, which is preceded by a \:" or\=" character. The acceptable switches vary depending on the device names
used, see the section describing the device for more information.

BOOT ddu: [/switches]
Boots the system from the specied disk, magnetic tape, DECtape, network device, or paper tape. The disk/tape
must have been mounted with the MOUNT command, unless it is a real device attached through a bus adapter. The
optional switch is an OS name. Useful switches are /RT11 and /RSTS. /RSX is accepted too but has no special
eect. This has to do with the method used to pass time and date information to a newly booted monitor. RT-11
ignores the time and date passed at 005000 unless the NOP in word 000000 of the bootstrap is cleared to 0 (HALT)
and the bootstrap is entered at 000002. RSTS uses the time and date at 001000 (in a dierent format from RT-11)
regardless of whether its NOP was cleared, but later versions of RSTS save the rst word of the bootstrap and
execute it later, so they will halt if the system was booted the RT-11 way. Hence Note that the OS switches are
meaningful only on block devices. If you prefer to set the time and date manually then the switch is not needed.
RSX doesn't have a way to pass the time and date to a fresh monitor, so you'll have to use \F12" with a TIM
command, or else use the TOY.TSK program (available on ftp.dbit.com) to read the TOY clock, which can be
enabled on any emulated CPU type by putting ASR as the last item on the SET CPU command line. Recent RSX-
11M-PLUS versions have a built in TIM /SYN command to do this, which works if the CPU type is PDP-11/93 or
PDP-11/94.

There is also a /HALT switch, which tells E11 to go as far as loading block 0 into core and setting up the registers,
but to stop there. This can be handy for debugging boot blocks.

The BOOT PR: command expects a tape image in absolute binary format, as produced by the \LINK /LDA" command
under RT-11. 64
64 Page 65 66
DEFINE KEYPRESS 57
CALCULATE expr
& expr (synonym)

Calculates the value of a 32-bit expression and displays the result in octal, decimal, hex, ASCII and radix-50. The
operators are * /+ -, unary + -^C(where \^C" means logical complement), and ( ), with the usual precedence.
& and ! are the bitwise AND and OR operators, and have the same precedence as * and +, respectively. Numbers
are either octal digit strings, or decimal if they contain 8 or 9 orend in \.", or hex if preceded by \^X", or radix-50
triplets if preceded by \^R". General register contents may be specied using the names R0{R5 (with a \'" sux
to indicate the other register set, when emulating a PDP-11 with dual register sets) or SP or PC, R$ or PS means
the processor status word, and something of the form \'a" means the ASCII value of the character \a".

E11 can accept expressions in most of the commands or switches which take numeric arguments. The default radix
depends on the particular command or switch.

DEFINE KEYPRESS keyname = statement
DEFINE KEYRELEASE keyname = statement

Denes the action taken when the specied key is pressed or released. Keyboard operation is dened using a
simple script language, which allows the user to bind a small script to any possible keypress or keyrelease, which
is executed whenever that key is pressed (DEFINE KEYPRESS) or released (DEFINE KEYRELEASE). When E11 is rst
started, the keyboard is initialized with a set of scripts which dene the action of a VT100-like keyboard with a US
English layout. Just like user denitions, these default scripts may be displayed with the SHOW KEYPRESS and SHOW
KEYRELEASE commands. By default most keys do nothing on release and have no KEYRELEASE denition, except
for the Alt, Ctrl, and Shift keys. Using the \E11.INI" initialization le, the user may easily redene some or all of
the keyboard as required. The keyscript language is described in Appendix A, and the list of key names that E11
accepts is in section A.3.

DEFINE LED ledname = ag
Denes which ag is tracked by each keyboard LED. LED names are CAPS, NUM, andSCROLL. The ag may be the
name of any ag (read-only or read/write) from the keyboard script language, in which case the LED turns on
when the ag is set and turns o when the ag is clear. Or it may be NONE to turn the LED o permanently. Flag
names and meanings are described in section A.4.

DEASSIGN ddu:
Disables the specied character or network device. Deassigning TT0: is not allowed (either explicitly, or implicitly
by ASSIGNing its PC device to another PDP-11 device).

DEPOSIT [/switches] addr val1 val2 . . .
Deposits the word(s) val1, val2 etc. starting at memory address \addr," which is forced even. An error message is
returned if an attempt is made to access a nonexistent CSR in the I/O page (bus timeout). The address space to
use is specied by the switch(es), or the space used in the last EXAMINE or DEPOSIT command is used by default if
none are given. See the EXAMINE command for a list of valid switches.

DISMOUNT ddcu:
Dismounts the specied mass storage device (see MOUNT).
DUMP [/switches] [d:pathn]lename[.PDP] [s1:e1 s2:e2 . .. sn[:[en]] ] 65
65 Page 66 67
58 HELP
With no switches, dumps PDP-11 memory to the specied DOS le (default extension is \.PDP"). Any number of
address ranges \si:ei" may be given, and data will be dumped to the le from each range in the order given in the
command line. The last range may have no ending address, in which case le data are dumped until the end of
memory. If no ranges are given at all the default is to dump all of PDP-11 memory starting at 000000.

With either the \/ROM" or\/EEPROM" switch, dumps a range of ROM or EEPROM to the le. The ROM/EEPROM
must have been created with \LOAD/ROM" or\LOAD/EEPROM". Only one address range may be specied. It must
begin at the beginning of the ROM but may end before the end of the ROM. The \/BANKED" switch can dump all
of a banked ROM if only the starting address is given (rather than dumping only up to the rst 512. bytes), in this
case the starting address can be omitted too, (17)773000 is the default for \/ROM" and (17)765000 is the default
for \/EEPROM". If no ending address is given, the default is to dump out the whole ROM.

EXAMINE [/switches] [addr [end]]
Examines the word at memory address addr, which is forced even. If end is specied then a range of words is
displayed. If both are missing then the 8 words following the last location accessed with EXAMINE or DEPOSIT are
displayed. An error message is returned if an attempt is made to access a nonexistent CSR in the I/O page (bus
timeout). The address space to use is specied by the switch(es), or the space used in the last EXAMINE or DEPOSIT
or MAP command is used by default if none are given.

Switches:

switch space
/CURRENT Current CPU mode, specied by PSW15:14
/PREVIOUS Previous CPU mode, specied by PSW13:12
/KERNEL Kernel mode
/SUPERVISOR Supervisor mode
/USER User mode
/INSTRUCTIONS I space (within one of the above modes)
/DATA D space (within one of the above modes)
/PHYSICAL Physical 22-bit address space (default if MMU disabled)

Note that the address space switch(es), if any, must be given before the address expression on the command line,
to avoid ambiguity since the switch character (\/") is used for division in expressions.

FPREGISTER [r v1 v2 [v3 v4]]
Sets or displays the FPP registers. r is the FP accumulator number, 0{5, andv1{v4 are two or four 16-bit octal
words to write in the register (sorry, not decimal). If no arguments are given then the octal contents of all six ACs
are given, along with octal displays of the FPS, FEC, andFEA, and also a bit-by-bit display of FPS.

GO [addr]
Starts the machine at the specied address, or at the address currently in the program counter if none is given.
HALT
If the machine is running, halts it and displays the registers. Otherwise a no op.
HELP [command] 66
66 Page 67 68
INITIALIZE 59
Explains use of Ersatz-11 commands. Just type \HELP" fora list.
INITIALIZE
Initializes all emulated I/O devices, disables the MMU, sets the CPU mode to \kernel."
LIST [/switches] [addr]
Disassembles eight instructions starting at the specied address if it is given, or otherwise at the rst address
following the last one disassembled by the most recent LIST or REGISTER command. The address space to use is
specied by the switch(es), or the space from the last LIST command is used if none are given. The default for
LIST is set to /CURRENT /INSTRUCTIONS after each register dump, either from a REGISTER command or from the
register display from a STEP command or CPU halt. See the EXAMINE command for a list of valid switches.

LOAD [/switches] [d:pathn]lename[.PDP] [s1:e1 s2:e2 . .. sn[:[en]] ]
With no switches, loads the specied DOS le into PDP-11 memory (default extension is \.PDP"). Any number of
address ranges \si:ei" may be given, and data from the le will be loaded into each range in the order given in the
command line. The last range may have no ending address, in which case le data are loaded until end of le is
reached. If no ranges are given at all the default is to load the le at 000000. This command may be useful with
binary les produced by Strobe Data Inc.'s PDPXASM cross-assembler.

With either the \/ROM" or\/EEPROM" switch, creates a ROM/EEPROM page and loads its contents from the le.
The ROM contains a linear copy of the le contents, unless the \/BANKED" switch is also given, in which case
it is banked through a 512.-byte window at either (17)773000 or (17)765000, using the page control register (see
the \PCR" option under SET CPU). Only one address range may be given. If \/BANKED" switch is specied, the
address range must be exactly 512. bytes long and must begin at one of the addresses given above. If \/EEPROM"
is specied, the starting address must be (17)765000, so this address will be used by default, otherwise (17)773000
is the default. Otherwise, if only the starting address is given, the size of the ROM depends on the size of the le.
If an ending address is given, the le must be large enough to ll that address range.

LOG ddcu: [[d:pathn]lename[.LOG]] [/APPEND]
(where dd is LP or TT.)

Logs all output to the specied character device in the specied le. If no lename is specied, any existing log
le for that device is closed. The /APPEND switch means to append to an existing log le, rather than replacing it.
The default lename extension is \.LOG".

LOG ddcu: [[d:pathn]lename[.LOG]] [/APPEND]
(where dd is CT, DC, DF, DK, DL, DM, DP, DS, DT, DU, DX, DY, PD, MM, MS, MT, MU, DO, orHD.)

Logs commands sent to the TA11, RC11, RF11, RK11D, RL11, RK611, RP11C, RS03/04, TC11, MSCP, RX11,
RX211, RXT11, TM03, TS11, TM11, or TMSCP controller, or the DOS le device or HD SYS.EXE pseudo-controller,
to the specied le. If no le is specied, the current log le, if any, is closed. The unit number is insignicant
(except for Massbus devices, which eectively have separate controllers for each unit), all commands to the controller
are logged regardless of the currently selected unit. The /APPEND switchmeansto appendto anexisting logle,
rather than replacing it.

LOG XEn: [[d:pathn]lename[.LOG]] [switches]
LOG NIn: [[d:pathn]lename[.LOG]] [switches] 67
67 Page 68 69
60 QUIT
Controls logging of Ethernet events. If a lename is specied then the log le is opened. If switches are specied
they specify what events are to be logged. \/[NO]COMMANDS" controls logging of port commands, \/[NO]RECEIVE"
controls logging of received frames, and \/[NO]TRANSMIT" controls logging of transmitted frames. The switches may
be specied when the log le is rst opened, or later in LOG commands with the lename parameter missing to
change what is being logged without having to open a new log le. If neither the lename nor any switches are
specied, any existing log le for that device is closed. If no switches are specied when the le is rst opened, the
default is \/RECEIVE /TRANSMIT". In addition, the /APPEND switch means to append to an existing log le, rather
than replacing it.

MAP [/switches] addr
Displays the physical address corresponding to the specied virtual address. The switches to specify the virtual
address space are the same as the ones used with the EXAMINE command.

MOUNT pdp11dev: [pdp11switches] pcdev [pdp11switches and/or pcswitches]
Mounts a PC le or device as the specied PDP-11 block device. The PDP-11 disk/tape controller of the appropriate
type is created if it did not already exist.

pdp11dev is the name of the PDP-11 device name being created. It conforms to the syntax dened in section 1.6.
The rst two letters dene the controller type, and are generally the same as the PDP-11 operating system's name
for that device.

pcdev is the name of the PC device or lename to be used to emulate this particular PDP-11 drive. The possible
names are described in chapters 4 and 5.

Switches specic to the controller type may appear either after the PDP-11 device name or after the PC device
(or le) name, and are typically used to specify the drive type in case the controller supports more than one drive
type. If no drive type switch is specied, the default type is usually based on the size of the PC device. All
emulated controller types support the \/RO[NLY]" (syn. \/WP[ROTECT]") switch, which has the same pressing the
WRITE PROT (etc.) button on a real drive, and works even in cases like the RX01 where the real hardware had no
write protection facility. A \/RW" switch exists for completeness and allows read/write access to the device, which
is the default behavior. See chapters 4 and 5 for more information.

PRIMARY n
Switches the session number (in the range 1{12) being displayed on the primary (or only) video monitor. This
command is equivalent to pressing Alt-Fn on the keyboard, except that it may be issued from an initialization le
or serial console without requiring that key combination to be typed manually on the PC keyboard.

PROCEED [break]
Continues PDP-11 execution at the address currently in the program counter. If \break" is specied, then it is
the virtual address of a single hard breakpoint, where the PDP-11 is guaranteed to stop if an instruction fetch is
attempted starting at that address, regardless of what mode the computer is executing in, and regardless of whether
the contents of that location have changed since the breakpoint was set. This can be handy for tracing code that
hasn't been loaded yet. Note that hard breakpoints and single stepping with the STEP command interfere with
the operation of the PDP-11 T bit, so don't combine them with a debugger (or CPU traps diagnostic program)
running on the PDP-11 or you'll get strange behavior.

QUIT 68
68 Page 69 70
REGISTER 61
Exit the simulator, closing all image and log les and resetting all devices that were in use.
REGISTER [r val]
reg=val
ag=val

If \r" and\val" are given, sets register \r" (0{7) in the current register set to contain \val." Otherwise displays
the values of all eight registers, the condition codes, the current and previous processor modes, and the current
interrupt priority level. Registers and condition code ags may also be set by typing the register name, an equals
sign, and the new value at the command prompt. Any expression that works with CALCULATE is valid in this case,
so for example one may type \PC=PC-2."The CPUprioritymaybe setinthe same wayusing\PRIO= val", where
val is from 0 to 7. Also the current mode and previous mode may be set with \CM=x" and\PM=x", where x is K, S,
or U for kernel, supervisor, or user mode.

SECONDARY n
Switches the session number (in the range 1{12) being displayed on the secondary video monitor (if any). This
command is equivalent to pressing Ctrl-Fn on the keyboard, except that it may be issued from an initialization le
or serial console without requiring that key combination to be typed manually on the PC keyboard.

SET BREAK fnnn| NONEg
Sets the octal value of an ASCII character that can be used in place of a serial BREAK signal to pop up an E11
prompt. For example, \SET BREAK 020" will cause any CTRL/P character typed on TT0: to bring up an E11
prompt. The default value is \NONE", meaning that all ASCII characters are passed through and only a serial
BREAK, or a keyscript PROMPT command, will bring up the prompt. This command is intended for use in cases
where the console (TT0:) has been ASSIGNed to a real serial port, connected to a terminal (or terminal program)
that has diculty generating BREAK signals.

SET CLOCK 14318nnn
Informs E11 of the actual frequency (in Hertz, as a decimal number) of the PC motherboard's 14.318 MHz system
clock used to derive the 50/60 Hz clock, among other things. This frequency is supposed to be 14318180 Hz (which
is what E11 assumes by default), but if your PDP-11 OS's clock gains or loses time at this setting due to the
oscillator frequency being slightly o, you can use SET CLOCK to make slight changes, and E11 will adjust its
math accordingly. The correct value can be determined experimentally, or measured using test equipment (this
would require a very accurate frequency counter to be useful though). Setting values wildly dierent from 14318180
may produce unexpected results.

SET CPU item [item. . .]
This command changes the emulated CPU type, either by changing to a new model all at once, or on a feature-
by-feature basis. Each keyword enables a particular feature, or disables it if preceded by \NO". Any number of
keywords may be specied in one line, and they are applied left to right. For example, \SET CPU 44 NOFPP" will
create a PDP-11/44 and then delete its oating point processor. This gives you the ability to roll your own CPU,
which need not correspond to any actual existing PDP-11 model. Changing the CPU's type while it is running will
work but is likely to crash the PDP-11 operating system under some cases. SHOW CPU displays the current settings
of all options.

E11 does not emulate cache memory, since that would greatly slow down emulation rather than speeding it up.
Maintenance features such as \write wrong parity" are not emulated either, since again they would needlessly add 69
69 Page 70 71
62 SET CPU
huge overhead and anyway since the data paths being tested by these modes are all dierent on a PC, PDP-11
diagnostic software would not gain any useful information by exercising them. So for these cases E11's emulation
is limited to creating the appropriate registers in the I/O page so software can read and write them without losing
data or receiving unexpected bus timeout errors. Note that if RSTS/E sees a parity CSR or KTJ11B maintenance
CSRs it attempts to exercise them, giving a fatal error if they do not work. To avoid this problem, the CPU
conguration given by SET CPU 94 has NOKTJ11B and NOPARCSR by default as a workaround. These CSRs may still
be enabled for software that needs them with SET CPU 94 KTJ11B PARCSR, however both RT-11 and RSX11M+
will work with the default setting.

SET CPU options:

number Set all CPU options to match PDP-11/number model. Recognized values are 03, 04, 05
(syn. 10), 15 (syn. 20), 23, 24, 34, 35 (syn. 40), 44, 45 (syn. 50 or 55), 53, 70, 73, 83, 84,
93, 94.
ASH31 J11 CPU bug with 31-bit shifts using ASH/ASHC.
ASR KDJ11E additional status register (TOY clock etc.).
CCR Cache control register (at (17)777746).
CD Cache disable bit in PDRs.
CDR[=n] KDJ11x conguration/display register (at (17)777524), n is 8-bit DIP switch value.
CHR Cache hit register (at (17)777752).
CHRNZ If CHR is present, reads as non-zero.
CMDR PDP-11/44 cache memory data register (at (17)777754).
CPUERR CPU error register.
CSM CSM instruction (requires SUPMODE to work).
DESTFIRST Evaluate destination operand rst in dual operand instructions with mode 0 source. Eect
is to use incremented/decremented value of register as source with mode 2{5 destination
using same register, or PC+2 for mode 07 source and mode 67 or 77 destination.
DSPACE Split I/D space.
DUALREGSET Dual register set.
EAE KE11 Extended Arithmetic Element.
EIS Extended (integer) Instruction Set.
EIS16 EIS instructions with odd destination set condition codes based on 16-bit result.
FIS Floating Instruction Set (FIS option for PDP-11/35,40 and LSI-11).
FPA Floating point accelerator, sets KDJ11x MR bit indicating FPJ11 present.
FPBACKOUT J-11 SR1 behavior, autoinc/dec is always undone on aborted FPP instruction.
FPP FP11 oating-point instruction set.
HALT4 HALT in user mode traps to 4 instead of 10.
JMP4 JMP Rn or JSR Rn traps to 4 instead of 10.
JMPPLUS2 JMP (R)+ and JSR X,(R)+ jump to incremented value of R (R+2).
KTJ11B KTJ11B Unibus adapter maintenance registers.
MFPT[=n] MFPT instruction (returns n in R0).
LKS7 Bit 7 (monitor) of LKS clock status register is mechanized.
MARK MARK instruction.
MBR PDP-11/70 microprogram break register (at (17)777770).
MSEA Memory system error address register (at (17)777740/2).
MSER Memory system error register (at (17)777744).
MMTRAPS 11/45,55,70-style memory management traps, 3-bit ACF.
MMU Memory management unit, MFPD/MFPI/MTPD/MTPI instructions.
MMU22 22-bit MMU (must use UMAP too if emulating Unibus CPU).
MR[=n] Maintenance register (at (17)777750). If n<16., KDJ11x-style maintenance register which
reads n as model code in bits 7:4. If n=44, PDP-11/44 style MR, and if n=70, PDP-11/70 70
70 Page 71 72
SET DELAY 63
style MR.
MXPS MFPS, MTPS instructions.
ODD Odd address trapping.
PARCSR Parity/ECC memory CSR address (at (17)772100).
PCR[=x] KDF11/BDV11 page control register and read/write register if x=\KDF11", or KDJ11
CSR/page control register if x=\KDJ11" (at (17)777520/2).
PIRQ 11/45-style 7-level software interrupts.
PSWIO PSW accessible from I/O space (at (17)777776).
QBUS Q-bus exists (otherwise Unibus). Aects default models and default interrupt priorities of
many emulated peripherals.
RTIRTT RTI instruction works like RTT (early CPUs).
RTT RTT instruction.
SIZE 11/70 system size registers (at (17)777760/2).
SOBSXT SOB, SXT instructions.
SPL SPL instruction.
SR Switch register/display register (at (17)777570).
SR1 MMU status register 1.
STACKLIM PDP-11/70 stack limit register (at (17)777774).
SUPMODE Supervisor mode.
SWABV SWAB instruction preserves V bit.
SYSID[=n] PDP-11/70 system ID register (at (17)777764), returns n when read.
TSTSET J-11 TSTSET, WRTLCK instructions.
UMAP Unibus map (maps 18-bit I/O bus to 22-bit memory).
UNDOAUTO Undo mode 2/3 autoincrements on bus error etc.
XOR XOR instruction.

SET DELAY device c1:n1 c2:n2 . . .
SET DELAY device *:n

Sets the number of instructions that the specied command opcodes appear to take to complete on the indicated
device. The device may be DELUA, DL11, DOSFILE (the DOS le access pseudo-device), KW11L, LP11, PC11, RC11,
RF11, RK11D, RK611, RL11, RP11C, RS03 or RS04 (synonyms), RX11 or RX211 (synonyms), TA11, TC11, TM03, TM11,
or TS11. There may be an arbitrary number of parameters of the form \c:n" or\c=n", where c is the octal opcode
for the command (or \*" for all commands for this device) and n is the decimal number of PDP-11 instructions to
delay before signaling completion of the command.

The reason that device commands, such as \read sector" on an RX02, or \transmit character" on a DL11, delay
signaling completion (by raising a \ready" ag and/or triggering an interrupt) instead of completing right away
(which would seem natural in an emulator) is that some OS software contains assumptions that at least a certain
number of instructions are guaranteed to be executed before a device is able to interrupt, even when interrupts
from that device are enabled. The default interrupt delays are set for the \worst case", so that each one is long
enough to avoid any known (or suspected) problems with DEC OS software. The SET DELAY command may be
useful in cases where your OS needs a longer delay than the default, or in cases where your OS's treatment of a
device is \clean" and you can gain a noticeable I/O speed increase by setting all the delays for that device to 1, or
in cases where you're debugging OS software and want to test against variety of interrupt rates.

Note that some devices don't have numbered command opcodes per se, but the SET DELAY command syntax
requires one anyway for consistency, and pseudo opcode numbers are assigned if necessary. On DL11 SLUs, opcode
\0" refers to the delay between reading a character from the receiver buer, and getting the interrupt for the next
character (only if it's the second or later character of a function key sequence on an emulated VT100, all other
keyboard interrupts correspond to actual asynchronous events). Opcode \1" refers to the delay between writing a 71
71 Page 72 73
64 SET IDLE
character to the transmitter buer, and getting the completion interrupt (for emulated VT100s | COM and LPT
ports use real completion interrupts). Similarly, PC11 opcode \0" refers to how long it takes to read a character
from paper tape, and opcode \1" refers to how long it takes to write one. An LP11 has only one opcode, which is
\0" and corresponds to the same thing as opcode \1" of a DL11. An RK611 has only opcodes 0{17, but the SET
DELAY command denes an opcode \20" which refers to the delay between the interrupt that acknowledges reception
of a head movement command (which is itself delayed), and the \attention" interrupt which signals completion
of the head movement. The RK11D emulation has a similar dummy opcode \10" which means the same thing,
and the TA11 emulation has a dummy opcode \10" which denes the delay between character interrupts within
a block. A KW11L has no opcodes, so opcode \0" sets the delay between simulated interrupts which are used to
catch up if clock interrupts are missed due to native PC le I/O taking more than 16.67 ms (or 20 ms in 50 Hz
clock mode) to complete.

SET DISPLAY NONE
SET DISPLAY PORT n
SET DISPLAY LPTn:

If PORT is specied, species the 80x86 I/O address (as an expression with the same syntax as used by the CALCULATE
command) of a word port which when written as a word, sets the 16-bit display register. Building the trivial
hardware to support this is left as an exercise to the reader.

If a PC LPT port name is given, it species a port which has a multiplexed LED board plugged into it, and E11
will refresh each half on alternate 60 Hz (50 Hz) clock ticks. There's a little icker but it works and requires no
chips or power supply, just build your board so that the D0{D7 lines (pins 2{9 of the DB25) drive the anodes of the
both the D0{7 and D8{15 LEDs (through the same set of eight 100 ohm resistors since only one set of LEDs will
have their cathodes grounded at a time). Then add two NPN switching transistors (2N3904 etc.), one for each byte,
with the emitters grounded (pin 25), each collector connected to the cathodes of all 8 LEDs for the appropriate
byte, and the bases connected through 1K current limiting resistors to STROBE (pin 1) for the D0{D7 side, or INIT
(pin 16) for the D8{D15 side. A bare PC board is available from D Bit at cost ($14.68 plus shipping for the current
batch, 12/94).

If NONE is specied, then the current DR value is available only from the SHOW DISPLAY command (the default
condition).

SET DISPLAY fDR | BDR | R0 | PCg
Sets what register is displayed on a hardware LED display register (either the parallel port kind described above
or the kind that plugs into a bus slot and is addressed by a word OUT instruction). By default the DR is displayed
(i.e. the last word written to (17)777570), but the BDR (boot/diagnostic display register, i.e. the last byte written
to (17)777524), or R0 or the PC may be selected instead, since the null jobs in some operating systems display a
pattern in R0 (and the PC in some cases) during a WAIT instruction. The pattern may be used to get a rough idea
of system load, and the R0/WAIT method is a standard way to display a number on the PDP-11/70, which has no
display register address. For completeness, registers R1{R5 or SP may be selected too.

SET HERTZ f50 | 60g
SET HZ f50 | 60g

Sets the frequency of the KW11L line clock (startup default is 60). Ersatz-11 reprograms the PC timer chip for
this rate to simulate line time clock interrupts, and then maintains a count in software so that it knows when to
trigger BIOS 18.2 Hz interrupts; there is some jitter due to the BIOS interval being rounded down to the previous
KW11L interrupt, but there is no cumulative error so the DOS clock is still correct when you exit from E11. 72
72 Page 73 74
SET KEYBOARD 65
SET IDLE [NO]RELEASE
Sets the behavior when the emulated CPU is idle, i.e. halted or executing a WAIT instruction. RELEASE means
to ask the host OS to release the current time slice. This way E11 won't hog 100% of the host CPU's time for no
reason, however in OS/2's DOS box this is taken as a sign that E11 will be idle for some time so its priority gets
reduced as a result, so this option should not be used. NORELEASE means E11 should just keep looping until
there's something for it to do.

SET KEYBOARD [NO]SWAP
SWAP sets the keyboard handler to exchange the functions of the Caps Lock and left Ctrl keys for people who don't
like the IBM Enhanced Keyboard. NOSWAP sets the handler back so that the keys work as marked.

SET [NO]SCOPE
Sets whether the console terminal is a scope or a hardcopy terminal, for the purpose of handling rubout characters
typed at the \E11>" prompt. Mainly useful if the console is redirected to a COM port with a DECwriter (etc.)
plugged into it. Also determines whether typing ^L at the command prompt will attempt to clear the screen.

SET SCROLL fHARD | SOFTg
Selects the mechanism used for video scrolling in emulated VT100 sessions. HARD scrolling oers superior perfor-
mance (it works by programming the video board(s) to change the start address of the screen each time a full-screen
scroll is needed), but may expose problems in video virtualization in GUI DOS boxes, or cause problems with TSRs
that use the display. SOFT scrolling does things the slow obvious way, by copying the whole screen a line up on
each line feed, and ought to work with anything. HARD scrolling is the default. You should try putting SET SCROLL
SOFT in your E11.INI le if your display gets scrambled a few lines into each attempted E11 session.

SET SWITCH n
SET SWITCH PORT n

If PORT is specied, species the 80x86 I/O address (as an expression with the same syntax as used by the CALCULATE
command) of a word port which when read as a word, gives the current 16-bit switch register value. Otherwise
(PORT not specied), sets the value of the emulated SR to n (again as a CALCULATE-style expression).

SET THROTTLE [ON] [OFF] [DELAY=x] [INTERVAL=y]
Enables or disables a simple throttle which can slow down the average emulated CPU speed, for compatibility with
PDP-11 software which contains timing loops which are tuned for a particular PDP-11 CPU model.

Throttling is implemented by inserting a xed delay at regular intervals in the instruction simulation. DELAY=x
sets the length of this delay to x microseconds. INTERVAL=y sets the number of PDP-11 instructions that will be
executed between delays. So there will be a delay of x microseconds, every y instruction fetches.

The ON keyword turns throttling on. Throttling is also turned on implicitly when the DELAY=x and/or INTERVAL=y
parameter(s) is/are given.

The OFF keyword turns throttling o, and allows PDP-11 instruction emulation to proceed at the maximum possible
speed. This is the default setting.

SET pcdevcu: . .. 73
73 Page 74 75
66 SET pdp11dev
Sets parameters for the specied PC device, with the optional controller letter and/or line number given using
the usual device name syntax, see section 1.6. SET commands for real PC devices must be issued before the rst
ASSIGN or MOUNT command which uses that PC device. The PC device names are the same as those used on the
right hand side of an ASSIGN or MOUNT command.

The rest of the command line consists of keywords appropriate to that device type. The valid SET parameters for
each PC device type are listed in the section that describes that device. Multiple keywords may be specied on
the same SET command, they will be processed in left-to-right order.

The following SET parameters are common to many PC devices:

IRQn Sets the IRQ number (0{15) used by an ISA (or PCMCIA) board to generate interrupts.
PORT=nnnn Sets the base I/O port address (in 80x86 I/O space) used by the board. Numbers are hex by
default as long as they start with a digit (0{9), otherwise any expression may be used, the same
as with CALCULATE.

SHARE Specied after an IRQn parameter, SHARE means that the device has special ISA IRQ sharing
hardware (as documented in the IBM AT Technical Reference Manual) so that more than one
device may use the same IRQ at once. This hardware is relatively rare, most devices do not
support this option.

Note that without this hardware, no more than one device may be actively using the ISA IRQ at
the same time. So for example if you have a mouse attached to COM1 using IRQ4 and it has been
initialized by a mouse driver, E11 will not be able to use COM3 if it also uses IRQ4. An error
message will be given if you try to issue an ASSIGN command for COM3.

SET commands are parsed left to right, and ISA IRQ sharing is disabled by an IRQn keyword, so the
SHARE keyword must appear to the right of the IRQn keyword, or on a subsequent SET command.

PCI IRQ sharing works dierently from ISA IRQ sharing, and does not need to be enabled explicitly
with a SET command.

SET ddcu: . ..
Sets parameters for the specied PDP-11 device. Possible parameters are as follows:

BOOTSTRAP=option Selects whether incoming MOP boot frames will be honored, species either the BOOT
command parameters, or DISABLE (default) to disable network-initiated booting. DELUA
remote booting is not yet supported, so this command has no visible eect.

CSR=nnnnnn Sets the base CSR address to nnnnnn octal.
CSR=FLOATING Sets the base CSR address according to the PDP-11 oating CSR rules, for devices that
support this scheme. CSR addresses for all oating devices are recomputed every time the
device conguration is changed. SHOW commands will display \(F)" after an address that
was chosen using FLOATING.

ctrltype Set controller type. This is mainly used to distinguish between Unibus and Q-bus versions
of controllers, which dier in number of address bits used and whether they go through
the Unibus map, and in some cases in other ways as well. DEFAULT means to choose a
default controller type based on whether SET CPU QBUS is in eect. SHOW commands will
display \(D)" after a controller type which was chosen using DEFAULT. 74
74 Page 75 76
SHOW BDR 67
DS/SS Sets the disk to be single-sided or double-sided. Real RX211s autodetect this but 3.5" and
5.25" disks don't have a separate index hole for DS disks, so the number of sides must be
set explicitly.

MODE Sets the mode parameters for the specied port using a syntax similar to the DOS MODE
command. The four parameters \bps,par,dbits,sbits" set the decimal number of bits per
second (which unlike DOS MODE, may not be abbreviated, so \96" really means 96 baud
not 9600), a single letter indicating the parity (\E" for even, \O" for odd, \N" for none,
\M" for mark, \S" for space), a decimal number of data bits (5{8), and a decimal number
of stop bits (1{2). This is mainly useful for DL11 type ports where the communications
parameters are not set by software, for mux ports any parameters set with SET MODE will
be overridden by the values written to the mux by the driver in the PDP-11 OS. Note
that the set of valid baud rate values depends on the hardware emulating that port, if the
value specied is not available E11 will use the closest rate the device supports.

PRIORITY=n Sets the interrupt priority to n (4{7).
PRIORITY=DEFAULT Sets the interrupt priority to DEC's default value for this controller type. In many cases,
the original Unibus version of a controller uses priority 5, but the Q-bus equivalent uses
priority 4, since early LSI-11 CPUs didn't have a multi-level priority system. When set
to DEFAULT, the priority will normally be automatically reduced to 4 when emulating a
Q-bus CPU. This is true even on devices which were available from DEC only for Unibus,
since there may have been aftermarket Q-bus versions which used priority 4.

REWIND Rewind the paper tape, so that subsequent input will start over at the beginning of the
MOUNTed le.

RH11 Sets this Massbus adapter (specied by controller letter, unit number is meaningless) to
be an RH11. 18-bit addressing, goes through Unibus map if one is congured with SET
CPU UMAP. This is the default for all Massbus disks and tapes.

RH70 Sets this Massbus adapter to be an RH70. 22-bit absolute addressing, RHBAE/RHCS3
registers exist.

VECTOR=nnn Sets the base vector address to nnn octal.
VECTOR=FLOATING Sets the base vector address according to the PDP-11 oating vector rules, for devices that
support this scheme. Vector addresses for all oating devices are recomputed every time
the device conguration is changed. SHOW commands will display \(F)" after an address
that was chosen using FLOATING.

SHOW BDR
Shows the current value of the boot/diagnostic display register (last value written to (17)777524).
SHOW BREAK
Shows the octal ASCII value of the character that can be used in place of a serial BREAK signal to bring up an E11
prompt. Default is NONE, meaning that only a genuine serial BREAK signal, or PROMPT keyscript command,
will bring up the prompt, and all ASCII characters are passed through.

SHOW CLOCK
Shows the current assumed frequency, in Hz, of the PC motherboard's 14.318 MHz clock, used to generate the
KW11L 50/60 Hz clock. 75
75 Page 76 77
68 SHOW THROTTLE
SHOW CPU
Shows emulated CPU type, along with breakdown of features, as well as the CPU type of the host processor.
SHOW CSR addr
Shows the name of the device register at the specied octal I/O page address.
SHOW DELAY device
Shows the currently active list of interrupt delay counts for the specied device, starting with the delay for opcode
number 0. See SET DELAY for details.

SHOW DISPLAY
Shows the current value of the display register (last value written to (17)777570).
SHOW HERTZ
SHOW HZ

Shows the current frequency, in Hz, of the emulated KW11L line clock. The default is 60.
SHOW IDLE
Shows the SET IDLE setting, either RELEASE (release the host CPU when idle) or NORELEASE (keep polling until
there is something to do).

SHOW KEYPRESS keyname
SHOW KEYRELEASE keyname

Shows the script currently bound to the keypress or keyrelease event for the specied key, if one is dened. See
DEFINE KEYPRESS for key names.

SHOW LED ledname
Shows the name of the ag (from the keyboard script language) whose value is being tracked by the specied LED,
or \NONE" if the LED has been disabled. LED names are CAPS, NUM, andSCROLL. See section A.4 for a list of ag
names.

SHOW MEMORY
Shows the amount of PC memory used by Ersatz-11, how much of that memory is emulated PDP-11 memory, and
how much PC memory is free. Free memory must be available in order to use the ASSIGN, DEFINE KEYPRESS, LOG,
or MOUNT commands.

SHOW MMU [ fKERNEL | SUPERVISOR | USERg [INSTRUCTION | DATA] ]
Shows the current mapping registers for the specied space. Defaults are KERNEL and INSTRUCTION space.
SHOW THROTTLE 76
76 Page 77 78
SHOW VERSIONS 69
Shows the current status of the emulated CPU speed throttle. See the SET THROTTLE command for more informa-
tion.

SHOW VERSIONS
Shows the version numbers of Ersatz-11, the operating system, and any other relevant interfaces.
SHOW ddcu:
Shows the conguration of the specied PDP-11 or PC device. The actual data shown are dependent on the device
type, in general the display contains the information that can be SET for that device (e.g. controller type, interrupt
priority, or CSR/vector addresses), and for PDP-11 devices the name of the PC le or device attached with ASSIGN
or MOUNT is shown. Not all devices support SHOW.

In the output from a SHOW ddcu: command, \(D)" following a controller type or interrupt priority means that pa-
rameter is set to \DEFAULT" and the displayed type or priority is the default based on the \SET CPU [NO]QBUS"
setting. Similarly, \(F)" following a CSR or vector value means that parameter is set to \FLOATING" and the
value given is the one currently in use based on the system conguration.

The default controller types, oating CSR or vector addresses, and default interrupt priorities are assigned specic
values only for controllers that have actually been created with an ASSIGN or MOUNT command. If the controller
does not currently exist then a defaulted controller type or interrupt priority will simply be listed as \DEFAULT"
and oating addresses will be listed as \FLOATING".

The following PC devices support SHOW: A:/B:/etc. ( oppy drives), COMn:, LPTn:, NE2000c:.
Examples:
Show a PC device:
E11>show com1:
COM1: PORT=^X03F8 IRQ4

Show a simple PDP-11 device:
E11>show tt0:
TT0: CON1:
CSR=777560 VECTOR=060 PRIORITY=4

Show an auto-conguring unmounted PDP-11 device:
E11>show dl0:
DLA0: NONEXISTENT
DEFAULT CSR=17774400 VECTOR=160 PRIORITY=DEFAULT

Mount the device and show it under a Unibus emulation (PDP-11/70):
E11>mount dl0: ne11nrt11
E11>set cpu 70
E11>show dl0:
DLA0: RL02 READ/WRITE FILE "C:nE11nRT11.DSK"
RL11(D) CSR=17774400 VECTOR=160 PRIORITY=5(D)

Switch to a Q-bus emulation (PDP-11/93) and show changes:
E11>set cpu 93 77
77 Page 78 79
70 UNLOAD
E11>show dl0:
DLA0: RL02 READ/WRITE FILE "C:nE11nRT11.DSK"
RLV12(D) CSR=17774400 VECTOR=160 PRIORITY=4(D)

STEP [count]
Executes the specied number (default=1) of single instruction steps and displays the updated registers after each.
Note that if real time clock interrupts are enabled and the CPU priority is below 6, STEP will immediately enter
the clock interrupt service routine instead of executing the instruction at the current PC. An easy workaround is to
disable clock interrupts with \D 17777546 0" beforeusingSTEP, and then reenable them with \D 17777546 100"
before continuing regular execution.

UNLOAD [/switches] [address]
Unloads a ROM or EEPROM page previously loaded with \LOAD". Either the \/ROM" or\/EEPROM" switch is
required, \/BANKED" may be given to invoke the default starting addresses of (17)773000 for \/ROM" and (17)765000
for \/EEPROM", otherwise the starting address of the ROM must be given. 78
78 Page 79 80
Appendix A
Keyboard Script Language
The script language used by E11's DEFINE KEYPRESS and DEFINE KEYRELEASE commands is powerful, yet very
easy to use. Unlike some systems where keys can have only characters or strings bound to them, E11 allows the
user to attach a small script to each key so that more complicated operations can be dened. In particular, there's
nothing special about the shift keys (Ctrl, Alt, Shift), they can be redened to be data keys and vice versa.

When dening a new keyscript, it may be helpful to use a SHOW command to display the existing default keyscript
for that key, or a similar one, and use it as the basis for writing the new keyscript. To make the keyboard send a
character or string to the system, simply enclose that character or string in single or double quotes. IF statements
can be used to send dierent strings depending on the state of a variety of ags (including the current state of the
Alt, Ctrl, and Shift keys).

NONREPEATING and NOREPEATS commands are used in many of the default keyscripts to emulate the autorepeat
behavior of the VT100 keyboard precisely. NONREPEATING tells E11 that this keyscript should not be autorepeated
even if the key is held down (like the VT100 Esc, Tab, and Return keys), and NOREPEATS means that while this key
is pressed, all other keys should be prevented from autorepeating (which is what the VT100 Ctrl key does). There
are numerous other special-purpose commands that allow such things as sending the current date and/or time in a
variety of formats, popping up the E11 command prompt, and switching the video display to show another session.

Multiple statements in a single key denition may be separated by \:" or \n" characters and count as one statement
(for the purposes of the IF/ELSEIF/ELSE/ENDIF construct). If a line ends with \&" (with no white space following)
it is continued on the next line, and any characters after the rst \!" that is not inside single or double quotes
are considered a comment and are ignored (up until the trailing \&" if one is present). This should be familiar to
BASIC-PLUS users.

A.1 Default keyboard layout
The keypad layout generated by E11's predened keyscripts may take a little getting used to but it's intended to be
familiar if your ngers are already comfortable using KED or EDT on a real VT100. Just don't look at the keypad,
the keys are where you expect in spite of having the wrong labels. Similarly, the CTRL characters on the main
keyboard are in the same places as on a VT100, including the non-alphabetic ones (e.g. CTRL/SPACE generates
NUL, CTRL/~generates RS, etc.). The \backspace" key generates DEL because that's what DEC operating systems

71 79
79 Page 80 81
72 Keyboard Script Language
normally use. Use CTRL/H to get a backspace character. Line feed is CTRL/J, and on 104-key keyboards it's
also the \context menu" key next to the right-hand Ctrl key.

The keypad digits and \." key work as marked (you must be in Num Lock mode to get this on 84-key keyboard,
it doesn't matter on 101-or 104-key keyboards). The keys around the top and right edges of the keypad are not
as marked, but correspond to the PF1{PF4, hyphen, comma, and ENTER keys of the VT100. The comma key is
missing unless you have an 84-key AT keyboard. Northgate Omnikey 102 keyboards have an \=" key where the
VT100 comma belongs but unfortunately there is no way for software to distinguish it from the =/+ key on the
main keyboard so E11 can't use it as a comma, F8 must be used instead. To get the normal function of the Num
Lock key (and Esc, Scroll Lock, and Sys Req on an 84-key AT keyboard), press Alt, Ctrl, or Shift at the same time
(it doesn't matter which). The VT100 keypad hyphen, comma, period, and ENTER keys are also available as the
F6, F8, F9, and F10 keys (see below). On an IBM AT 84-key keyboard (which has the F-keys stacked vertically)
this gives the same layout as the right-hand edge of a VT100 keypad.

If your keyboard has an F12 key, pressing it will send the current date and time in the format \hh:mm:ss dd-
mmm-yyyy," unless you DEFINE it to do otherwise. This is intended to be useful when starting an RSX or IAS
system.

CON1: CON2: CON3: CON4: CON5: CON6: -CON7: CON8: , CON9: . CON10: Enter CON11: CON12: Date
Default F-keys on 101-and 104-key keyboards

0 .
Enter
1 2 3

4 5 6
-
7 8 9

NumLock
PF1 PF2 PF3 PF4

0 .
Enter
1 2 # 3

4 5 6 ! ,
7 8 " 9 -

Esc PF1 NumLock PF2 ScrLock PF3 SysReq
PF4

CON9: . CON10: Enter
CON7: CON8: ,

CON5: CON6: -
CON3: CON4:
CON1: CON2:

Default keypad layout on 101-Default keypad layout on IBM F-keys on IBM
and 104-key keyboards AT 84-key keyboards AT keyboards

A.2 Keyboard script statement descriptions
string
Sends the specied string. The string may be any combination of double quoted strings ("string"), single quoted 80
80 Page 81 82
Keyboard Script Language 73
strings ('string'), and single ASCII characters (CHR$(n)), all concatenated with plus signs (+). Note that PDP-
11 serial ports normally have only one or two characters worth of input buering, and E11 currently buers 32
characters per port in addition to that (this number may increase in the future), so it is not possible to send
arbitrarily long strings.

AMPM
Sends \AM" or\PM" depending on whether the time read by GETTIME is before or after noon.
CLEAR ag
Clears a read/write ag. See section A.4 for a list of ag names.
DAY1
Sends the 1-or 2-digit day of the month (1{31) as read by GETTIME.
DAY2
Sends the 2-digit day of the month (01{31) as read by GETTIME.
GETTIME
Reads the current date and time (as an atomic operation to avoid race conditions) and stores it internally for use
by HOUR2/MINUTE2/SECOND2) etc. GETTIME should be executed once before any sequence of commands that sends
the various date/time elds. This is done explicitly, instead of having each individual command get the time itself
before sending its eld, in order to ensure that all the elds are coordinated and don't contain mismatched data
if the clock rolls over while the date/time string is being composed. Without a preceding GETTIME statement, the
statements that send the individual parts of the date/time will send garbage.

HOUR1
Sends the 1-or 2-digit hour of the day (0{23) as read by GETTIME.
HOUR12
Sends the 1-or 2-digit hour (1{12) as read by GETTIME.
HOUR2
Sends the 2-digit hour of the day (00{23) as read by GETTIME.
HUNDREDTH2
Sends the 2-digit hundredth of a second (00{99) as read by GETTIME.

IF <expr1> THEN &
[statement1] &
ELSEIF <expr2> THEN &
[statement2] &
... 81
81 Page 82 83
74 Keyboard Script Language
ELSE &
[statement3] &
ENDIF

Executes statements conditionally. The expressions may be made up of any combination of read-only and read/write
ags (see section A.4 for a list of ag names), the operators AND, NOT, OR, andXOR, and parentheses (to override the
default binary operator precedence, which is NOT, AND, andOR/XOR from highest to lowest with OR and XOR being
equal).

If the expression after the IF is true, the statement (which may actually be multiple statements separated by \:"
or \n" characters) following the THEN is executed, and after that execution then skips to after the ENDIF. Otherwise
the expression following the ELSEIF (if any) is similarly tested, followed by any successive ELSEIFs if the rst fails.
Finally the ELSE clause (if any) is executed if no (ELSE)IF was true. This is pretty much the same as FORTRAN-77
or any language with block-structured IFs.

The ELSEIF keyword is provided as a convenience to avoid excessive nesting:
IF a THEN &
x &
ELSEIF b THEN &
y &
ELSE &
z &
ENDIF

is equivalent to:
IF a THEN &
x &
ELSE &
IF b THEN &
y &
ELSE &
z &
ENDIF &
ENDIF

LETTER string1
Acts as a normal alphabetic (\letter") key. String1 is a one-character string. If CTRL is true, string1 is sent with
the high 3 bits set to 0. Otherwise if CAPS or SHIFT is true then string1 is sent with bit 5 set to 0. Otherwise
string1 is sent with bit 5 set to 1. This has the eect of converting it to lower or upper case as appropriate, and
converting it to the correct control character if CTRL is true, assuming it's a US-ASCII alphabetic character.

MINUTE2
Sends the 2-digit minute (00{59) as read by GETTIME.
MONTH1
Sends the 1-or 2-digit month (1{12) as read by GETTIME. 82
82 Page 83 84
Keyboard Script Language 75
MONTH2
Sends the 2-digit month (01{12) as read by GETTIME.
MONTH3
Sends the 3-letter English month abbreviation (Jan{Dec) asreadbyGETTIME.
NONDATA
Species that the current key is not a data key and should not generate keyclick (if E11 supports it in the future)
or count from a \SET ag FOR n" prex.

NONREPEATING
Species that the current key should not auto-repeat.
NOREPEATS
Species that the current key should prevent all other keys from auto-repeating until it is released.
NUMBER string2
Acts as a normal numeric (\number") key. String2 is a two-character string. If CTRL is true, nothing is sent.
Otherwise if SHIFT is true then the second character of string2 is sent. Otherwise the rst character of string2 is
sent.

PRESS keyname
Executes the \keypress" script for the specied key, i.e. the script dened by DEFINE KEYPRESS for that key.
PRIMARY n
Changes the screen on the primary video (or only) display to screen n (1{12).
PROMPT
Pops up an E11 command prompt. The primary video display is switched to TT0:'s screen if it is not already there.
RELEASE keyname
Executes the \keyrelease" script for the specied key, i.e. the script dened by DEFINE KEYRELEASE for that key.
RSTSAMPM
Sends \AM" or\M" or\PM" depending on the time read by GETTIME, using the unusual rules used by pre-V9.0
versions of RSTS/E:
00:00{00:00:59.99 is PM (the minute starting at midnight)
00:01{11:59:59.99 is AM as usual
12:00{12:00:59.99 is M (the minute starting at noon)
12:01{23:59:59.99 is PM as usual 83
83 Page 84 85
76 Keyboard Script Language
SECOND2
Sends the 2-digit second (00{59) as read by GETTIME.
SECONDARY n
Changes the screen on the secondary video display to screen n (1{12). This is useful only on systems with two
video displays, and performs no operation on systems with only one.

SET ag [FOR n]
Sets a read/write ag. See section A.4 for a list of ag names. If the \FOR n" modier is given, it means that the
ag is set for the specied non-zero number of data keystrokes, and then automatically clears after the script for
the nth keystroke is executed. This is used for the prex keys common on non-English keyboards, and can also be
useful for handicapped users. Note that the current key (the one whose keyscript contains this \SET . .. FOR n"
command) counts from the total unless a NONDATA statement is part of its denition.

Example using SET to redene the right-hand Alt key as an \acute accent" prex key, which makes the vowel keys
send the ISO Latin-1 codes for the same letters with acute accents when pressed immediately afterwards:

DEFINE KEYPRESS RALT = SET FLAG1 FOR 1 : NONDATA
DEFINE KEYPRESS A = IF FLAG1 THEN LETTER CHR$(193) ELSE LETTER 'A' ENDIF
DEFINE KEYPRESS E = IF FLAG1 THEN LETTER CHR$(201) ELSE LETTER 'E' ENDIF
DEFINE KEYPRESS I = IF FLAG1 THEN LETTER CHR$(205) ELSE LETTER 'I' ENDIF
DEFINE KEYPRESS O = IF FLAG1 THEN LETTER CHR$(211) ELSE LETTER 'O' ENDIF
DEFINE KEYPRESS U = IF FLAG1 THEN LETTER CHR$(218) ELSE LETTER 'U' ENDIF

TOGGLE ag
Toggles a read/write ag. See section A.4 for a list of ag names.
UCMONTH3
Sends the 3-letter upper case English month abbreviation (JAN{DEC) asreadbyGETTIME.
YEAR2
Sends the 2-digit year (00{99) as read by GETTIME.
YEAR4
Sends the 4-digit year (1980{2099) as read by GETTIME.

A.3 Key names
This section denes the key names used for DEFINE KEYPRESS, DEFINE KEYRELEASE commands, and PRESS, RELEASE
statements. Keycap descriptions are for US English keyboards and may dier on keyboards designed for other
languages. For most of these keyboards the physical layout is close to the US layout so name of the key that would 84
84 Page 85 86
Keyboard Script Language 77
be in the same position on a US keyboard should be used in script language denitions. Keys labeled \EKB only"
exist only on the 101-key \Enhanced" keyboard and the 104-key \Windows 95" keyboard. It is not considered an
error to bind keyscripts to them even when only an 84-key AT keyboard is present, but keyscripts for keys that are
missing will never be executed.

' " '
* *key on keypad, or PrScr * key if present
, < ,
--
. > .
/ ? /
0{9 Numeric keys (top row of main keyboard)
; : ;

= + =
A{Z Alphabetic keys
BACKSPACE Backspace key (top right of main keyboard)
CAPSLOCK Caps Lock key
CONTEXT Context Menu key (104-key keyboard only)
DARROW Down arrow key (EKB only)
DEL Del (EKB only)
END End (EKB only)
ENTER Enter
ESC Esc
F1{F12 Function keys (F11, F12 are on EKB only)
HOME Home (EKB only)
INS Ins (EKB only)
KP0{KP9 Numeric keys on keypad
KPENTER Enter key on keypad (EKB only)
KPMINUS -key on keypad
KPPERIOD . key on keypad
KPPLUS + key on keypad
KPSLASH / key on keypad (EKB only)
LALT Left (or only) Alt key
LARROW Left arrow key (EKB only)
LCTRL Left (or only) Ctrl key
LSHIFT Left Shift key
LWIND Left \Windows" key (104-key keyboard only)
NUMLOCK Num Lock key
PAUSE Pause key (EKB only) | N.B. most keyboards send the \release" code for this key imme-
diately after the \press" code, rather than waiting until the user actually releases the key,
so it would not be useful to try to redene this key as a shift key
PGDN PgDn (EKB only)
PGUP PgUp (EKB only) 85
85 Page 86 87
78 Keyboard Script Language
PRSCR Print Screen key (EKB only)
RALT Right Alt key (EKB only)
RARROW Right arrow key (EKB only)
RCTRL Right Ctrl key (EKB only)
RSHIFT Right Shift key
RWIND Right \Windows" key (104-key keyboard only)
SCRLOCK Scroll Lock key
SPACE Space bar
SYSREQ Sys Req (84-key keyboard only)
TAB Tab
UARROW Up arrow key (EKB only)

[ { [

n | n
] } ]
` ~ `

In addition to the above, the following keywords dene keys that don't exist on most keyboards, for completeness
in case they are useful on special-purpose keyboards:

KEY00 Sends scan code 00 hex
KEY55 Sends scan code 55 hex
KEY56 Sends scan code 56 hex (unmarked key on some keyboards made by Focus)
KEY59 Sends scan code 59 hex
KEY5A Sends scan code 5A hex
KEY5E Sends scan code 5E hex
KEY5F Sends scan code 5F hex

A.4 Flags
The keyboard script language has a number of boolean ags, which may be used in keyscripts and DEFINE LED
commands. They are broken into two groups: read/write ags, and read-only ags.

A.4.1 Read/write ags
Read/write ags can be tested or modied by keyscripts. Their values may be used in IF expressions or DEFINE
LED commands, or they may be changed using SET, CLEAR, andTOGGLE statements. The descriptions below are
only defaults used by E11's initial keyboard denitions, the user is free to redene them at will.

CAPS Caps Lock state
FLAGn User-dened ags (n=1{4), reserved for user keyscripts
LALT Left (or only) Alt key state 86
86 Page 87 88
Keyboard Script Language 79
LCTRL Left (or only) Ctrl key state
LSHIFT Left Shift key state
NUM Num lock state
RALT Right Alt key state
RCTRL Right Ctrl key state
RSHIFT Right Shift key state
SCROLL Scroll lock state

A.4.2 Read-only ags
Read-only ags can be tested by keyscripts but not modied. Consequently they may be used in IF expressions or
DEFINE LED commands only, the values are maintained and updated by E11 itself.

ALT OR of LALT and RALT
APPKEYPAD Applications keypad mode (ESC =)
CHARSETA Character set A (UK) is currently selected
CHARSETB Character set B (US) is currently selected
CHARSET0 Character set 0 (graphics) is currently selected
CHARSET1 Character set 1 (undened) is currently selected
CTRL OR of LCTRL and RCTRL
CURSORKEY Cursor key mode (ESC [?1h)
EKB True: 101-key Enhanced (or 104-key W95) keyboard, false: 84-key AT keyboard
G0 G0 character set is selected (SI)
G1 G1 character set is selected (SO)
L1 keyboard LED 1 is lit (ESC [1q)
L2 keyboard LED 2 is lit (ESC [2q)
L3 keyboard LED 3 is lit (ESC [3q)
L4 keyboard LED 4 is lit (ESC [4q)
NEWLINE Newline mode (ESC[20h)
SHIFT OR of LSHIFT and RSHIFT
VT52 VT52 mode (ESC [?2l) 87
87 Page 88 89
Appendix B
Debugging Features
Ersatz-11 provides a full assortment of debugging commands. These can be useful for PDP-11 program development,
and can also be invaluable for troubleshooting conguration problems, or for providing detailed information to D
Bit when reporting a problem in Ersatz-11 itself.

Real PDP-11s all provide some form of programmer's console. This can be either a traditional binary \switches
and lights" front panel, an octal keypad and LED display, a simple ASCII console emulator program running
out of ROM, or the \Micro-ODT" program implemented in microcode in systems based on the LSI-11, DCF11,
and DCJ11 chip sets. Regardless of the implementation, the programmer's console provides some way to examine
and deposit memory, inspect and modify the general registers and processor status word, and control program
execution.

E11 provides all of this functionality, as well as many more features, using the interactive \E11>" command prompt,
which can be popped up at any time by pressing Shift-Enter. Most of the commands related to program debugging
can be abbreviated to one letter, to save typing, and the user can further streamline the debugging process by
binding often-used commands to a single keystroke using DEFINE KEYPRESS commands.

80 88
88 Page 89 90
Displaying and modifying memory 81
Debugging commands:
ASSEMBLE Assemble PDP-11 code into memory
C= (etc.) Set condition ag value
CALCULATE Evaluate an expression (abbreviation = \&")
CM= (etc.) Set current/previous processor mode
DEPOSIT Deposit into memory or I/O page registers
DUMP Dump memory to a le
EXAMINE Examine memory or I/O page registers
FPREGISTER Display/change oating point registers
GO Start program execution
HALT Halt program execution
INITIALIZE Initialize CPU (like RESET instruction)
LIST List disassembled PDP-11 code
LOAD Load a binary le into memory
LOG Log disk/tape/Ethernet controller commands to a le
MAP Translate virtual address to physical address
PRIO= Set processor priority
PROCEED Proceed with execution, with an optional breakpoint
R0= (etc.) Set general register value
REGISTER Display general registers and PSW elds
SET DISPLAY Set up hardware display register
SET SWITCH Set up switch register (real or virtual)
SHOW CSR Display name of any I/O page register
SHOW DISPLAY Inspect value of display register
SHOW MEMORY Show E11 memory usage
SHOW MMU Display MMU maps
SHOW VERSIONS Show version numbers of E11 and host OS
STEP Execute one (or several) single program step

B.1 Displaying and modifying memory
Memory may be displayed or modied one word at a time using the EXAMINE and DEPOSIT commands. Both can
accept switches that dene the virtual address space to use. If no switches are specied, the default is to use the
same space as the previous EXAMINE or DEPOSIT command. Any switch used on either command sets the default
for both commands.

These commands can also operate on multiple memory words. Normally when only one address is specied, the
EXAMINE command will display just one word, but if a starting and ending address is specied, that entire range,
no matter how large, is displayed on the terminal. If an EXAMINE command is given with no address whatever, it
displays eight words starting at the word following the last EXAMINE command. Multiple words can be entered into
memory by simply entering more than one number following the address in a DEPOSIT command. The numbers
are entered into consecutive words of memory starting at the specied address. For convenience, these commands
may be abbreviated to E and D. 89
89 Page 90 91
82 Breakpoints and single-stepping
B.2 Assembly and disassembly
The ASSEMBLE and LIST commands display or modify memory in very much the same way as the EXAMINE and
DEPOSIT commands, except that they accept and display assembly language source instead of octal data. Both
commands accept optional switches to set the virtual address space to use, and if no switches are specied the
default is to use the same virtual address space from the previous ASSEMBLE or LIST command.

The ASSEMBLE command starts the assembler at the specied address, or if no address is specied the default is to
continue assembly at the next address following the last line assembled by the previous ASSEMBLE command. E11
prompts for each line, giving the address where it will be entered into memory. Entering a blank line (or typing
CTRL/C) returns to the E11 command prompt.

The LIST command lists eight lines of code starting at the specied address, or if no address is specied then eight
lines of code are disassembled following the last line displayed by the previous LIST command or REGISTER display.
Two addresses can be given, to produce a disassembly of all code in that range of addresses.

B.3 Registers
The PDP-11 registers may be displayed at any time using a REGISTER command (R for short). This displays all
of the registers and PSW ags at once. Individual registers may be displayed using commands like \& R3". Any
value that is displayed by the REGISTER command may be set using the same keywords as is used in the display.
For example, if the register dump includes \C=1" and\PM=U" to indicate that the carry ag is set and the previous
mode is \user", it is possible to clear the carry ag by typing \C=0", or change the previous mode to \supervisor"
by typing \PM=S". And of course the general registers may be changed with commands such as \R3=100", or even
\SP=SP+4".

The FP11 oating point processor state may be inspected using the FPREGISTER command. However it is less
exible than the regular REGISTER command, all register values are displayed and set using octal numbers.

B.4 Breakpoints and single-stepping
The PROCEED command takes an optional numeric argument, which is a PC value. PDP-11 instruction execution
will halt whenever that address is reached. This is done using address comparison, rather than by depositing
anything into memory (regular PDP-11 debuggers do breakpoints by inserting a BPT instruction into memory),
which means it works even if the memory contents are overwritten before the breakpoint is reached.

STEP allows proceeding one instruction at a time. If a numeric argument is specied, it gives the number of steps
to perform, with a default of one step. This command can be abbreviated to S so that it may be typed quickly.
For even greater convenience, a key may be redened to enter this command with a single keystroke. For example:

def key kpplus = 'step'+chr$(13)
This will cause a step to be executed every time the keypad + key is pressed.
The GO command starts execution at full speed, with no breakpoints or single stepping. An optional starting 90
90 Page 91 92
Memory mapping 83
address may be given. If it is omitted, execution continues at the current PC value. Unlike some versions of ODT,
E11 does not issue an implied INIT pulse with either the GO or PROCEED command. If necessary the system may
be initialized, including all emulated devices and bus adapters, using a separate INITIALIZE command.

B.5 Memory mapping
E11 can display the current status of the memory management unit at any time using the SHOW MMU command.
There are two optional arguments, the mode (KERNEL, SUPERVISOR, orUSER) and the space (INSTRUCTION or DATA).
Both may be abbreviated to one letter, and the defaults are KERNEL INSTRUCTION. The display for each page gives
the starting virtual address, starting physical address, block limits, access, and the A (accessed) and W (written)
dirty bits. Also, the current values of MMR0 through MMR3 are displayed (MMR3 is omitted if the current CPU
emulation doesn't include MMR3).

The MAP command may be used to compute a physical address, given a virtual address. It takes the same switches as
the EXAMINE and DEPOSIT commands, to give the mode and space parameters for the virtual address. It displays the
resulting 22-bit physical address, as if it had been processed by the MMU during a PDP-11 instruction. However,
like the EXAMINE and DEPOSIT commands, the MMU's status is not aected by this command, so the A bit will not
be modied in this page's PDR, and no MMU abort will occur if the page is marked \no access" or the address is
outside of the range of valid blocks in that page.

The SHOW CSR command displays a one-line description of an emulated CSR on the I/O page, given its address. It
works only on devices which are currently congured.

B.6 Device logging
Although the controller LOG commands are provided mainly as an aid to reporting Ersatz-11 problems to D Bit,
they can be invaluable to users who are debugging device drivers or boot blocks. When logging is enabled for a
given disk, tape, or network controller, every command issued to that controller by the PDP-11 is recorded in the
log le with a time stamp. Other parameters such as buer addresses and lengths, unit numbers, disk addresses,
and tape record lengths, are recorded too, and for some devices the command's completion status is saved as well.
For Ethernet devices, switches on the LOG command line give independent control over logging of host commands,
transmitted packets, and received packets.

B.7 Loading and dumping memory
The LOAD and DUMP commands may be used to transfer between PDP-11 memory and les on the host system. An
optional series of address ranges may be specied to do scatter/gather transfers. If no addresses are specied, the
transfer starts at the beginning of memory and goes until the end of the les (for LOAD) or the end of memory (for
DUMP). 91
91 Page 92 93
84 Switch and display registers
B.8 Switch and display registers
The SET SWITCH and SHOW DISPLAY commands give access to emulated switch and display registers, which work
the same way as those on the binary front panels on early PDP-11 models. The switch/display register is located
at address 17777570 as long as a SET CPU SR command, or some other SET CPU nn command which includes SR,
has been issued. This provides a crude one-word I/O register which can be accessed by a program running in kernel
mode, for things like displaying checkpoint information during debugging.

Simple hardware can be attached to E11's switch register and display register emulations using SET commands. A
simple display register which connects to an LPT port is available from D Bit as a bare PC board. 92
92 Page 93 94
Appendix C
Dates and Times
Ersatz-11 has several features that facilitate passing date and time information back and forth between the host
system and the PDP-11 operating system. The PC clock can be read or written from the PDP-11, and E11 can
simulate a software bootstrap of RT-11 and RSTS/E so that these systems will pick up the current time as if they
were started with a warm boot from a monitor that was already running.

C.1 Booting
RT-11 and RSTS/E both have methods for discovering whether they were software booted by another similar
system which was running immediately before them, and if so they can \inherit" the time and date from that
system. E11's BOOT command can simulate this situation. If you use it with a /RT11 or /RSTS switch, it obtains
the current PC date and time and passes it on to the PDP-11 operating system.

E11's keyscript language has commands which allow composing a time and/or date string in almost any format, so
that it may be entered with a single keystroke. The default keyscript for the F12 key sends the current time and
date in a format accepted by recent versions of RSX, so it may be pressed in response to the date/time prompt
at system startup. See Appendix A for information on keyscript commands, and type SHOW KEY F12 at the E11
command prompt to see how the existing binding works.

Newer versions of DEC operating systems have support for the KDJ11E TOY clock, which E11 emulates using the
host operating system's clock. For example, the RSX \TIM /SYN" command will read the RSX time from the PC,
and \TIM /SETTOY" will set the PC clock from the RSX time. These commands work only if RSX has detected a
KDJ11E-based CPU (i.e. PDP-11/93 or PDP-11/94), however E11 can add the TOY clock to any CPU emulation
by adding ASR to the end of the SET CPU command (since the TOY clock is accessed through the Additional Status
Register). A TOY.TSK program is available from ftp.dbit.com which has /SYN and /SETTOY switches which work
just like the TIM command, but with no restriction on the CPU type, and it doesn't have the year 2000 problem
that TIM /SYN did in earlier versions of RSX.

85 93
93 Page 94 95
86 Dates and Times
C.2 PC clock
PCs don't have a 50/60 Hz line frequency clock, so E11 simulates the KW11L style clock by reprogramming the
PC's crystal-controlled interval timer for 50 or 60 Hz (the SET HZ command selects which frequency, the default is
60 Hz). These speeds can not be produced precisely by the PC's interval timer (it uses rather odd numbers since
its master clock is the 14.31818 MHz ISA bus clock fed into a divide-by-12 counter), so E11 programs it as close as
possible to the right value, and then uses fractional math to decide when to insert \leap ticks" so that the average
rate will be exactly 50 or 60 Hz. In practice, this is not perfectly accurate because many (or most) PCs don't have
a very accurate 14.31818 MHz clock to begin with. So their clocks tend to gain or lose time regardless of what
applications software or operating system is running.

E11's solution to this is the SET CLOCK command, which allows adjustment of the actual master clock frequency
value (which can be specied in 1 Hz increments) which E11 uses to calculate the interval clock divisor and
schedule leap ticks. There's no need to actually measure the master clock frequency on the PC's motherboard,
simply experimenting with values can greatly improve the accuracy and of course letting the system run for a while
and then checking its clock will allow you to gure out the exact drift.

C.3 Year 2000 issues
Ersatz-11 has no year 2000 issues of its own. It does very little manipulation of dates, and when dates are handled
internally it uses 16 bits to hold the year, which is enough to last until the year 65,535 AD. However problems do
occur when translating dates to and from the formats required by the various PDP-11 operating systems, the PC
operating system, and the KDJ11E TOY clock. Also the YEAR2 keyscript command sends only 2-digit years, but
it's there for the specic purpose of working with non-Y2K-compliant PDP-11 software. If the PDP-11 software
can handle 4-digit dates, use YEAR4 instead, which is what's used in the default keyscript for F12 anyway.

C.3.1 KDJ11E TOY clock
The Dallas Semiconductor DS1215 clock chip used in the KDJ11E battery-backed time-of-year (\TOY") clock
contains only two digits for the year. Therefore it inherently suers from the year 2000 bug, and so must any
accurate emulation of it, including the one in E11, otherwise it would be incompatible with PDP-11 software
designed for the real thing. However this is not as bad as it might seem. Since the TOY clock is used only to hold
the current time, the only ambiguity that the PDP-11 software has to resolve is what century it is now. Thisis
as opposed to dates held in data bases, le systems timestamps, etc., which can represent past and future dates
and so must not be ambiguous. The latest versions of the PDP-11 operating systems have been updated to use a
100-year window when interpreting the year read from the TOY clock. For example 80{99 can be taken to mean
1980{1999, and 00{79 would mean 2000{2079. Future PDP-11 operating system releases can move this window (at
this point 00{99 might as well mean 2000{2099), so this scheme can be extended indenitely.

C.3.2 Dates in RT-11 and TSX-Plus
Older versions of RT-11 used only 5 bits to store the year, as the number of years since 1972. This format stops
working on 01-Jan-2004, and the older RT-11 versions have year 2000 problems too so they've already stopped
working anyway. Newer versions of RT-11 adapt two previously unused bits in the date word to extend the year 94
94 Page 95
Dates and Times 87
oset to 7 bits, which will last until 31-Dec-2099. RT-11 V5.7 is the rst version that fully implements this change
in all utilities as well as the monitor. TSX-Plus V6.50 also supports the 7-bit year eld, so when installed on top
of RT-11 V5.7 it too will last until 31-Dec-2099.

C.3.3 Dates in RSX
RSX's internal date format uses a 16-bit word to hold the number of years since 1900. This format will last for
many millennia, and it's unusual in that it allows going back all the way to 1900 so that dates in the low 2000s
really are ambiguous when expressed in only two digits. Current versions of RSX accept four-digit years in user
commands and process them correctly, but older versions are limited to two-digit years which are all assumed to
be in the 1900s. Also, the Files-11 ODS-1 disk structure used by RSX and IAS uses only 2-digit years, stored as
ASCII digits rather than binary values. Newer versions of RSX extend this format for several more centuries by
allowing the \10s" digit to take on the value of characters which follow \9" in the ASCII code.

C.3.4 Dates in RSTS/E
RSTS/E uses the same date format as the old DOS/BATCH system. This consists of the number of years since 1970,
times 1000 (decimal), plus the day within the year, stored as a 16-bit word. In older versions of RSTS/E this word
was signed, so its maximum usable value was 32365., or 31-Dec-2002. Again, year 2000 problems with INIT.SYS's
time/date parser prevented getting even that far. Newer versions of RSTS/E have changed to using an unsigned
date word (negative values were never allowed anyhow), so now it lasts until 31-Dec-2035. Unfortunately RSTS/E's
extension to the date format is not applicable to the few remaining DOS/BATCH systems, since DOS/BATCH uses
the sign bit of the date word in directory entries to ag a le as contiguous, so it's not available for expansion of
the date word. Multiplying the year oset by 1000 makes for very sparse usage of the available date word values, so
there is room for expansion of the date format (using day-within-year values from 367 to 999) if that ever becomes
necessary, but updates to PDP-11 software will be required.

C.3.5 Dates in Fuzzball
Although the Fuzzball operating system emulates the RT-11 system calls, it actually uses its own 14-bit date format
internally instead of RT-11's format. This is encoded as the number of days since 01-Jan-1972, so it runs out in
2016. Fuzzball has year 2000 problems, but replacement modules are available from ftp.dbit.com to make it work
until 2016. The date format could be extended to 16 bits, but that would require relocating the ags that currently
go in the high 2 bits of the date word, and the .GDAT system call would require an incompatible change to support
that.

C.3.6 Dates in Unix
Unix (and Unix-compatible) systems normally store dates as a signed number containing the number of seconds
since midnight UTC on 01-Jan-1970. The type that this value is stored in (\time t") is normally a 32-bit signed
integer (in some cases this is true even on Unix systems that run on 64-bit processors), which means that this
format will run out in early 2038. This limit applies both to PDP-11 Unix systems being run under emulation, as
well as 80x86 Unix or Linux systems being used as the host environment for Ersatz-11. 95

Page Navigation Panel