From owner-freebsd-usb@freebsd.org Mon Mar 19 18:47:49 2018 Return-Path: Delivered-To: freebsd-usb@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CCEDBF634DB for ; Mon, 19 Mar 2018 18:47:49 +0000 (UTC) (envelope-from ingegneriaforense@alice.it) Received: from smtp207.alice.it (smtp207.alice.it [82.57.200.103]) by mx1.freebsd.org (Postfix) with ESMTP id 1DC647EC11 for ; Mon, 19 Mar 2018 18:47:48 +0000 (UTC) (envelope-from ingegneriaforense@alice.it) Received: from portatile1 (151.55.168.46) by smtp207.alice.it (8.6.060.28) (authenticated as ingegneriaforense) id 5AADAC0300DEB280 for freebsd-usb@freebsd.org; Mon, 19 Mar 2018 19:47:47 +0100 From: "Vincenzo Di Salvo" To: Subject: usb's quirks ... how to sniff bios'es messages addressed to usb rom chip Date: Mon, 19 Mar 2018 19:46:57 +0100 Message-ID: MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AdO/sqhRGz8FZexiSN+sPEy7/dZ/WA== Content-Language: it X-Antivirus: AVG (VPS 180319-2, 19/03/2018), Outbound message X-Antivirus-Status: Clean Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: freebsd-usb@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: FreeBSD support for USB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 18:47:50 -0000 Hello guys, reading the FreeBSD forums I learned about the usb freebsd mailing list. I try to explain my question. Plugging in an hard disk into the usb port (without mounting the filesystem), I've noticed that the inserting operation was detected by the chip and a counter inside the HD memory was increased by one each time the hard disk was inserted. So a write operation has been happen !!!!!! The drive in question is a solid hard disk SSD 1TB Samsung 850 EVO Sata III= =2E This test has been done on a Linux O.S (that is a very disaster in terms of= security policy, due to the demons of the GUI !) This sounds like something done by the BIOS. Some can keep track on a wide variety of things. For example, it happens that the Bios keep track of the times when the case is opened. QUESTION: Is the FreeBSD usbdump(8) the right way to listen on events coming from bios (in this case a writing access) and show changes happened into the rom= memory of the chip of the usb HD ? Appreciated is any your help also about the correct sintax of the usbdump. Thanks in advance. Vincenzo. --- Questa email =C3=A8 stata esaminata alla ricerca di virus da AVG. http://www.avg.com