If you wish to determine when the LLO command is going across the bus, you can run NI-Spy to capture all calls that are being made by the application.
To check to see if the device in in the RWLS (Remote with Lockout State), you can simply remove the GPIB cable. If the device now responds to front panel operations, you were likely in RWLS state.
The reason why removing the cable works is that a device automatically transitions to the LOCS (Local) state when the REN line is unasserted. To programmatically deassert the Remote Enable (REN) line on the GPIB bus. There are options in NI-488.2 (ibsre) and in VISA (viGpibControlRen) to perform this deassertion. If your application is not changeable, you can launch ibic and make the following calls:
ibfind gpib0
ibsre 0
ibonl 0
Good luck.