Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Mar 2018 19:46:57 +0100
From:      "Vincenzo Di Salvo" <ingegneriaforense@alice.it>
To:        <freebsd-usb@freebsd.org>
Subject:   usb's quirks ... how to sniff bios'es messages addressed to usb rom chip
Message-ID:  <!&!AAAAAAAAAAAYAAAAAAAAANB1sR69XHJMoG%2BMU1AT/qLCgAAAEAAAAP7hvnBBMjhJr%2Bv0J6Z9h1UBAAAAAA==@alice.it>

next in thread | raw e-mail | index | archive | help
Hello guys,

 

reading the FreeBSD forums I learned about the usb freebsd mailing list.

 

I try to explain my question.

 

Plugging in an hard disk into the usb port (without mounting the
filesystem), I've noticed that the inserting operation was detected by the
chip and a counter inside the HD memory was increased by one each time the
hard disk was inserted. 

So a write operation has been happen !!!!!! 

The drive in question is a solid hard disk SSD 1TB Samsung 850 EVO Sata III=
=2E


This test has been done on a Linux O.S (that is a very disaster in terms of=

security policy, due to the demons of the GUI !)

 

This sounds like something done by the BIOS. Some can keep track on a wide
variety of things. For example, it happens that the Bios keep track of the
times when the case is opened.

 

QUESTION:

 

Is the FreeBSD usbdump(8)  the right way to listen on events coming from
bios (in this case a writing access) and show changes happened into the rom=

memory of the chip of the usb HD ?

 

Appreciated is any your help also about the correct sintax of the usbdump.

 

Thanks in advance.

 

Vincenzo.



---
Questa email =C3=A8 stata esaminata alla ricerca di virus da AVG.
http://www.avg.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?!&!AAAAAAAAAAAYAAAAAAAAANB1sR69XHJMoG%2BMU1AT/qLCgAAAEAAAAP7hvnBBMjhJr%2Bv0J6Z9h1UBAAAAAA==>