<?xml version="1.0"?>
<?xml-stylesheet type="text/css" href="http://www.forensicswiki.org/w/skins/common/feed.css?303"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
		<id>http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;feed=atom&amp;action=history</id>
		<title>How to intercept ATA commands using AoE - Revision history</title>
		<link rel="self" type="application/atom+xml" href="http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;feed=atom&amp;action=history"/>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;action=history"/>
		<updated>2013-05-18T16:23:13Z</updated>
		<subtitle>Revision history for this page on the wiki</subtitle>
		<generator>MediaWiki 1.20.3</generator>

	<entry>
		<id>http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;diff=9998&amp;oldid=prev</id>
		<title>.FUF: /* Client configuration */</title>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;diff=9998&amp;oldid=prev"/>
				<updated>2010-01-04T13:52:53Z</updated>
		
		<summary type="html">&lt;p&gt;‎&lt;span dir=&quot;auto&quot;&gt;&lt;span class=&quot;autocomment&quot;&gt;Client configuration&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;table class='diff diff-contentalign-left'&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
			&lt;tr style='vertical-align: top;'&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;← Older revision&lt;/td&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;Revision as of 13:52, 4 January 2010&lt;/td&gt;
			&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 31:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 31:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0 - the whole disk (corresponds to /dev/sda on the server);&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0 - the whole disk (corresponds to /dev/sda on the server);&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0p1 - first partition on the disk (corresponds to /dev/sda1 on the server);&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0p1 - first partition on the disk (corresponds to /dev/sda1 on the server);&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0p2 - second partition on the disk (corresponds to /dev/sda2 on the server).&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;* /dev/etherd/e0.0p2 - second partition on the disk (corresponds to /dev/sda2 on the server)&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;;&lt;/ins&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td colspan=&quot;2&quot;&gt;&amp;#160;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;* etc&lt;/ins&gt;.&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;== Intercepting ATA commands ==&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background: #eee; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;== Intercepting ATA commands ==&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;/table&gt;</summary>
		<author><name>.FUF</name></author>	</entry>

	<entry>
		<id>http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;diff=9997&amp;oldid=prev</id>
		<title>.FUF: Created page with 'ATA over Ethernet (''AoE'') is a network protocol designed for accessing ATA storage devices over Ethernet networks.  This &quot;How To&quot; explains the process of using ATA over Etherne…'</title>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=How_to_intercept_ATA_commands_using_AoE&amp;diff=9997&amp;oldid=prev"/>
				<updated>2010-01-04T13:42:40Z</updated>
		
		<summary type="html">&lt;p&gt;Created page with &amp;#039;ATA over Ethernet (&amp;#039;&amp;#039;AoE&amp;#039;&amp;#039;) is a network protocol designed for accessing ATA storage devices over Ethernet networks.  This &amp;quot;How To&amp;quot; explains the process of using ATA over Etherne…&amp;#039;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;ATA over Ethernet (''AoE'') is a network protocol designed for accessing ATA storage devices over Ethernet networks.&lt;br /&gt;
&lt;br /&gt;
This &amp;quot;How To&amp;quot; explains the process of using ATA over Ethernet protocol to intercept ATA commands from a Linux system (called Linux client) using [[Wireshark]] for diagnostic and testing purposes.&lt;br /&gt;
&lt;br /&gt;
== Linux server - Linux client configuration ==&lt;br /&gt;
&lt;br /&gt;
First, make sure that Linux server and Linux client are connected to the same network and can exchange packets with each other.&lt;br /&gt;
&lt;br /&gt;
=== Server configuration ===&lt;br /&gt;
&lt;br /&gt;
Make sure that your server has [http://packages.debian.org/en/lenny/vblade ''vblade''] tool installed. Then run the following command:&lt;br /&gt;
&lt;br /&gt;
 # vblade 0 0 eth0 /dev/sda&lt;br /&gt;
&lt;br /&gt;
Where:&lt;br /&gt;
* eth0 - your network interface;&lt;br /&gt;
* /dev/sda - a block device you want to be accessible through a network.&lt;br /&gt;
&lt;br /&gt;
=== Client configuration ===&lt;br /&gt;
&lt;br /&gt;
Make sure that your Linux client has [http://packages.debian.org/en/lenny/aoetools ''aoe tools''] installed. Then run the following command:&lt;br /&gt;
&lt;br /&gt;
 # modprobe aoe&lt;br /&gt;
&lt;br /&gt;
Make sure your vblade device is available on the client by running:&lt;br /&gt;
&lt;br /&gt;
 # aoe-stat&lt;br /&gt;
&lt;br /&gt;
The following block devices would be available:&lt;br /&gt;
&lt;br /&gt;
* /dev/etherd/e0.0 - the whole disk (corresponds to /dev/sda on the server);&lt;br /&gt;
* /dev/etherd/e0.0p1 - first partition on the disk (corresponds to /dev/sda1 on the server);&lt;br /&gt;
* /dev/etherd/e0.0p2 - second partition on the disk (corresponds to /dev/sda2 on the server).&lt;br /&gt;
&lt;br /&gt;
== Intercepting ATA commands ==&lt;br /&gt;
&lt;br /&gt;
Launch [[Wireshark]] on a client and start a capture on ''eth0''. You can apply the following display filter to analyse AoE packets only:&lt;br /&gt;
&lt;br /&gt;
 eth.type == 0x88a2&lt;br /&gt;
&lt;br /&gt;
Here is a screenshot of [[grml]] client running in VirtualBox:&lt;br /&gt;
&lt;br /&gt;
[[Image:Ataoe.png|thumb|none|Using [[grml]] to capture ATA commands]]&lt;br /&gt;
&lt;br /&gt;
== External Links ==&lt;br /&gt;
&lt;br /&gt;
* [http://buffalo.nas-central.org/index.php/Vblade_-_ATA_over_Ethernet Vblade - ATA over Ethernet]&lt;br /&gt;
&lt;br /&gt;
[[Category:Howtos]]&lt;/div&gt;</summary>
		<author><name>.FUF</name></author>	</entry>

	</feed>