I'm going to check few timer-related things today afternoon. When at it I could poke the hardware some more. I'd rather not waste time on unnecessary things though so I'd like to know: - Is LPSLNK behaviour established? I mean, will it really lock the channel in ATTACK phase until LSA is reached? - Where did that EGHOLD came from? First time I see this... AFAIK that bit is undefined and not used, but then again I do know a bit that's also not mentioned and yet rather important...