diff --git a/src/experiments/rampage/campaign.cc b/src/experiments/rampage/campaign.cc
index 2d285612..0ed40c51 100644
--- a/src/experiments/rampage/campaign.cc
+++ b/src/experiments/rampage/campaign.cc
@@ -60,7 +60,7 @@ bool RAMpageCampaign::run()
 	      << address_bits << " address bits" << endl;
 
 	// systematically march through the fault space
-	for (uint64_t n = 0; n < 1024*256; ++n) {
+	for (uint64_t n = 0; n < 1024*512; ++n) {
 		uint64_t addr = reverse_bits(n) >> (64 - address_bits);
 		if (addr >= MEM_SIZE ||
 		    existing_results.find(addr) != existing_results.end()) {
@@ -72,8 +72,12 @@ bool RAMpageCampaign::run()
 		d->msg.set_mem_bit(4);
 		d->msg.set_errortype(d->msg.ERROR_STUCK_AT_1);
 		d->msg.set_empty_passes(2);
-		d->msg.set_local_timeout(1000*60*10); // 10m
-		d->msg.set_global_timeout(1000*60*50); // 50m
+		//d->msg.set_local_timeout(1000*60*10); // 10m
+		//d->msg.set_global_timeout(1000*60*50); // 50m
+		//d->msg.set_local_timeout(1000*60*20); // 20m
+		//d->msg.set_global_timeout(1000*60*90); // 90m
+		d->msg.set_local_timeout(1000*60*20); // 20m
+		d->msg.set_global_timeout(1000*60*120); // 120m
 		campaignmanager.addParam(d);
 	}
 	campaignmanager.noMoreParameters();
diff --git a/src/experiments/rampage/experimentInfo.hpp b/src/experiments/rampage/experimentInfo.hpp
index 32f691b1..210fc9e0 100644
--- a/src/experiments/rampage/experimentInfo.hpp
+++ b/src/experiments/rampage/experimentInfo.hpp
@@ -1,3 +1,3 @@
 #pragma once
 
-#define MEM_SIZE (1024*1024*1024) // the QEMU SAL doesn't supply that information yet
+#define MEM_SIZE (2047*1024*1024) // the QEMU SAL doesn't supply that information yet