'\" -*- coding: us-ascii -*-
.if \n(.g .ds T< \\FC
.if \n(.g .ds T> \\F[\n[.fam]]
.de URL
\\$2 \(la\\$1\(ra\\$3
..
.if \n(.g .mso www.tmac
.TH tableau-parm 1 "30 September 2009" "Forensics Utilities" ""
.SH NAME
tableau-parm \- Tableau Write-blocking Bridge Query/Command Utility
.SH SYNOPSIS
\fBtableau-parm [-r] \fIdevice\fB
\fR
.SH DESCRIPTION
\fBtableau-parm\fR is designed to interact with 
write-blocking forensics 
bridges produced by Tableau, LLC. It can be used to query bridges
for various bridge and device data, as well as to disable DCO regions.
.SH OPTIONS
\fBtableau-parm\fR accepts the following parameters:
.TP 
\*(T<\fB\-r\fR\*(T> 
Directs \fBtableau-parm\fR to permanently remove 
a DCO, if it exists. 
THIS WILL MODIFY THE STATE OF THE DRIVE. USE AT YOUR OWN RISK!
(It is recommended for forensics investigations, that a full 
drive image be taken before this command is run, and then again 
afterward if a DCO was detected originally.) Note: after running 
this, you'll need to restart the Tableau bridge for it to 
correctly detect the changes.
.TP 
\fIdevice\fR 
Required argument. Specifies the device file for the bridge/drive
to be queried. This must be a device presenting SCSI emulation. 
Under Linux, all USB and FireWire mass storage devices behave like 
SCSI devices. Once a bridge and drive are plugged in and powered 
on, one can generally find out what the device was dynamically 
mapped to by running: 
\fBdmesg | tail -20\fR
.SH OUTPUT
\fBtableau-parm\fR generates simple output with one 
data value per line, interspersed with blank lines and section headers.
This output format is subject to change.
.SH EXAMPLES
To query a bridge which is mapped to \fB/dev/sda\fR:
.PP
.nf
\*(T<
	tableau\-parm /dev/sda
      \*(T>
.fi
.PP
To remove a DCO from the hard drive on \fB/dev/sda\fR:
.PP
.nf
\*(T<
	tableau\-parm \-r /dev/sda
      \*(T>
.fi
.SH BUGS
Older versions of ATA and SATA Tableau firmwares didn't properly 
handle HPA and DCO on some types of drives. Be sure to upgrade your
blockers' firmwares using the firmware update utility, version 4.2 or 
later, which was released on July 5, 2007.
.PP
This is not really a bug, but something to note: when a drive has both
an HPA and DCO section, and the DCO is removed, the HPA is removed with
it. This is how the bridge firmware works, and isn't something controlled
by \fBtableau-parm\fR. Just something to be aware of.
.SH CREDITS
Copyright (C) 2007,2009 Timothy D. Morgan
.PP
Copyright (C) 1999,2001,2006,2007 D. Gilbert
.PP
\fBtableau-parm\fR was written by Timothy D. Morgan using 
portions of SCSI example code written by D. Gilbert.
.PP
Tableau, LLC cooperated in the development of this tool by providing 
documentation on the proprietary SCSI interfaces and assisted in testing. 
Without their help, this tool would not have been possible. Tableau, LLC 
does not endorse or warrant this code in any way.
.SH LICENSE
Please see the file "LICENSE" included with this software
distribution.
.PP
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License version 3 for more details.
.SH "SEE ALSO"
hdparm(1) sdparm(1)