From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:34460) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1S2Jq3-0007Vv-Vc for qemu-devel@nongnu.org; Tue, 28 Feb 2012 04:59:25 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1S2Jpv-0008CM-QZ for qemu-devel@nongnu.org; Tue, 28 Feb 2012 04:59:19 -0500 Received: from mail-lpp01m010-f45.google.com ([209.85.215.45]:37463) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1S2Jpv-0008BN-G8 for qemu-devel@nongnu.org; Tue, 28 Feb 2012 04:59:11 -0500 Received: by lahe6 with SMTP id e6so1531140lah.4 for ; Tue, 28 Feb 2012 01:59:09 -0800 (PST) MIME-Version: 1.0 Date: Tue, 28 Feb 2012 09:59:08 +0000 Message-ID: From: Stefan Hajnoczi Content-Type: text/plain; charset=ISO-8859-1 Subject: [Qemu-devel] Wireshark SCSI dissectors for new transports List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: wireshark-dev@wireshark.org Cc: Paolo Bonzini , qemu-devel , ronnie sahlberg , Cong Meng Wireshark today supports SCSI dissectors for iSCSI. In the QEMU system emulator we have an emulated SCSI target which handles devices for SCSI Parallel Interface (SPI), USB Mass Storage Device, and now supports the new virtio-scsi transport (for efficient virtual machine SCSI I/O). Cong and I would like to add pcap support to the emulated SCSI target in QEMU, making it easy to use Wireshark for SCSI debugging and analysis. I'm looking for advice on getting started because we are not familiar with Wireshark/dissector internals. I believe the SCSI dissector does not support raw CDB dissection - it requires a SCSI transport dissector (currently iSCSI). A few options come to mind: 1. Change the SCSI dissector to support top-level dissecting of raw SCSI CDBs without transport information (initiator, target, and other metadata). 2. Add virtio-scsi and perhaps SPI SCSI transport dissectors. 3. A simpler approach I'm missing? :) Suggestions appreciated. Stefan