Re: sniffing scsi

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2012-01-15 at 11:54 +0000, James Courtier-Dutton wrote:
> Is it possible to monitor scsi messages on a particular bus.
> E.g. Attach to /dev/sda or /dev/sr0 and capture all messages going between them.
> Ideally, in such a way that wireshark can capture it.
> We can do this for Ethernet and USB, but I cannot find SCSI bus capture.

The answer is that it depends.  You need to modify the target mode
driver for the card you have, so it doesn't quite work out of the box:
for the Obsolete parallel SCSI bus, yes if you modify the target mode
driver to pass up all packets.  For all other target mode drivers, you
can still modify them to pass up all packets they can see (this might
involve firmware programming in the HBA to put it into what networks
call promiscuous mode), but that's not necessarily all packets on the
bus: modern transport busses are effectively packet switched networks
and not all end points see all the traffic (much like modern switched
ethernet networks).

If you want to interface to wireshark, I believe you then have to write
a PCAP interface for the target driver.  It's been done for the IP
protocols and for one of the IBM target drivers, but not for STGT or LIO
I think.

James


--
To unsubscribe from this list: send the line "unsubscribe linux-scsi" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [SCSI Target Devel]     [Linux SCSI Target Infrastructure]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Linux IIO]     [Samba]     [Device Mapper]
  Powered by Linux