From owner-freebsd-usb@freebsd.org Tue Mar 20 06:21:38 2018 Return-Path: Delivered-To: freebsd-usb@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DCAAFF5626C for ; Tue, 20 Mar 2018 06:21:38 +0000 (UTC) (envelope-from ingegneriaforense@alice.it) Received: from smtp206.alice.it (smtp206.alice.it [82.57.200.102]) by mx1.freebsd.org (Postfix) with ESMTP id 5932781B4F for ; Tue, 20 Mar 2018 06:21:38 +0000 (UTC) (envelope-from ingegneriaforense@alice.it) Received: from portatile1 (151.55.168.46) by smtp206.alice.it (8.6.060.28) (authenticated as ingegneriaforense) id 5AB04F030022257A; Tue, 20 Mar 2018 07:21:24 +0100 From: "Vincenzo Di Salvo" To: "'Bertrand Petit'" Cc: References: <20180319230105.GK2023@memo2.memo.frmug.org> In-Reply-To: <20180319230105.GK2023@memo2.memo.frmug.org> Subject: R: usb's quirks ... how to sniff bios'es messages addressed to usb rom chip Date: Tue, 20 Mar 2018 07:20:30 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 1 (Highest) X-MSMail-Priority: High X-Mailer: Microsoft Office Outlook 12.0 Content-Language: it Importance: High Thread-Index: AdO/13s39ctIJuykR/Scc+/bO2ybdgAOVelA X-Antivirus: AVG (VPS 180319-2, 19/03/2018), Outbound message X-Antivirus-Status: Clean X-BeenThere: freebsd-usb@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: FreeBSD support for USB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2018 06:21:39 -0000 What you surmise, effectively happens. I can see the same behavior when I directly pluging and then unpluging the HD using the SATA power connector (I think that this happens for those hard= disks or usb sticks whose chip is designed to detect a such action). However, my interest is: how to detect the bit that increment the counter i= n the SMART register using usbdump(8) or wireshark. Is there a document that explain in details the usbdump output ? Regarding Wireshark what output string I need to look for (SMART ? .... POWER ?) I kindly contact you to know if someone of the list has already done this test, if he can address me on the right street among the numerous informations shown by wireshark or usbdump. Tutorials also are appreciated (if they exist). Regards. -----Messaggio originale----- Da: Bertrand Petit [mailto:elrond@phoe.frmug.org] Inviato: marted=EC 20 marzo 2018 00:01 A: Vincenzo Di Salvo Oggetto: Re: usb's quirks ... how to sniff bios'es messages addressed to us= b rom chip On Mon, Mar 19, 2018 at 07:46:57PM +0100, Vincenzo Di Salvo wrote: > > Plugging in an hard disk into the usb port (without mounting the > filesystem), I've noticed that the inserting operation was detected by th= e > chip and a counter inside the HD memory was increased by one each time th= e > hard disk was inserted. This description leads me to surmise that you are maybe observing the incrementation, by the HD itself, of a SMART register on power availability= transitions as it is designed to do. I think you will observe the same behavior when directly pluging and then unpluging the SATA power connector.= -- %!PS -- Bertrand Petit /D{def}def/E{exch}D/G{get}D/I{2 div}D/U{dup}D/L{roll}D/Y{setgray}D/N{newpath}D /O{N 0 0 moveto}D/P{pop}D/T{translate}D currentpagedevice/PageSize G U 0 G/= w E D 1 G /h E D w I h I T 0 Y 1 setlinewidth 0 1 2 { P 120 rotate 2 4 w U mul = h U mul add sqrt I 50 add {N 50 0 3 2 L 0 360 arc stroke}for}for/s{O true charpath pathbbox exch 4 -1 L E sub I 3 1 L sub I} D /l(bp)D 0.94 Y /Helvetica findfont 22 scalefont setfont l s P(x)s exch P T O l show showpage --- Questa email =E8 stata esaminata alla ricerca di virus da AVG. http://www.avg.com