NAME¶
tableau-parm - Tableau Write-blocking Bridge Query/Command Utility
SYNOPSIS¶
tableau-parm [-r] device
DESCRIPTION¶
tableau-parm is designed to interact with write-blocking forensics
bridges produced by Tableau, LLC. It can be used to query bridges for various
bridge and device data, as well as to disable DCO regions.
OPTIONS¶
tableau-parm accepts the following parameters:
- -r
- Directs tableau-parm to permanently remove a DCO, if it exists.
THIS WILL MODIFY THE STATE OF THE DRIVE. USE AT YOUR OWN RISK! (It is
recommended for forensics investigations, that a full drive image be taken
before this command is run, and then again afterward if a DCO was detected
originally.) Note: after running this, you'll need to restart the Tableau
bridge for it to correctly detect the changes.
- device
- Required argument. Specifies the device file for the bridge/drive to be
queried. This must be a device presenting SCSI emulation. Under Linux, all
USB and FireWire mass storage devices behave like SCSI devices. Once a
bridge and drive are plugged in and powered on, one can generally find out
what the device was dynamically mapped to by running: dmesg | tail
-20
OUTPUT¶
tableau-parm generates simple output with one data value per line,
interspersed with blank lines and section headers. This output format is
subject to change.
EXAMPLES¶
To query a bridge which is mapped to
/dev/sda:
tableau-parm /dev/sda
To remove a DCO from the hard drive on
/dev/sda:
tableau-parm -r /dev/sda
BUGS¶
Older versions of ATA and SATA Tableau firmwares didn't properly handle HPA and
DCO on some types of drives. Be sure to upgrade your blockers' firmwares using
the firmware update utility, version 4.2 or later, which was released on July
5, 2007.
This is not really a bug, but something to note: when a drive has both an HPA
and DCO section, and the DCO is removed, the HPA is removed with it. This is
how the bridge firmware works, and isn't something controlled by
tableau-parm. Just something to be aware of.
CREDITS¶
Copyright (C) 2007,2009 Timothy D. Morgan
Copyright (C) 1999,2001,2006,2007 D. Gilbert
tableau-parm was written by Timothy D. Morgan using portions of SCSI
example code written by D. Gilbert.
Tableau, LLC cooperated in the development of this tool by providing
documentation on the proprietary SCSI interfaces and assisted in testing.
Without their help, this tool would not have been possible. Tableau, LLC does
not endorse or warrant this code in any way.
LICENSE¶
Please see the file "LICENSE" included with this software
distribution.
This program is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
A PARTICULAR PURPOSE. See the GNU General Public License version 3 for more
details.
SEE ALSO¶
hdparm(1) sdparm(1)