Sniffing FC traffic
Hello,
I would like to create a setup that allows me to sniff FC traffic. Is it possible with Linux or can someone recommend a setup that works. I want to avoid buying a 120kUSD fabric analyzer.
Cheers,
Thomas
Quoted 7 lines · Thomas Glanzmann
Hello,
I would like to create a setup that allows me to sniff FC traffic. Is it possible with Linux or can someone recommend a setup that works. I want to avoid buying a 120kUSD fabric analyzer.Cheers,
Thomas
There is no way to do this using adapters and generic F/C with Linux as the O/S. The ability to enable debugging in the F/C drivers will expose some of the internals but there is no way to sniff directly as far as I am aware.
Many switches allow port level tracing facilities but inline sniffing using Linux and generic hosts is not possible.
We have Finisars for inline tracing when we have to debug host and fabric issues.
Software based FCOE using libfc and the Intel cards for example will allow Wireshark tracing but that is encapsulated F/C in Ethernet packets hence the Wireshark ability.
Thanks
Laurence
Quoted 13 lines · Laurence Oberman
Quoted 4 lines · Thomas Glanzmann
I would like to create a setup that allows me to sniff FC traffic. Is it possible with Linux or can someone recommend a setup that works. I want to avoid buying a 120kUSD fabric analyzer.
There is no way to do this using adapters and generic F/C with Linux as the O/S. The ability to enable debugging in the F/C drivers will expose some of the internals but there is no way to sniff directly as far as I am aware.
Many switches allow port level tracing facilities but inline sniffing using Linux and generic hosts is not possible.
Quoted 8 lines
We have Finisars for inline tracing when we have to debug host and fabric issues.
Software based FCOE using libfc and the Intel cards for example will allow Wireshark tracing but that is encapsulated F/C in Ethernet packets hence the Wireshark ability.
We have had some success using a (Teledyne) LeCroy analyzer. Its GUI (SierraNet) runs only on a Windows host, but it is capable of exporting a capture to Wireshark. This mostly shows just the ELS and FCP transactions; to debug low-level link issues you'd have to work with the original capture in SierraNet.
Like any other kind of analyzer the cost will be proportional to the speed of the link you're trying to sniff and the amount of capture depth you need. You may be able to save some money by getting secondhand equipment and/or running the link at lower speed when you need to debug something.
Regards,
------------------------------------------------------------------------
Steven J. Magnani "I claim this network for MARS!
www.digidescorp.com Earthling, return my space modulator!"
#include <standard.disclaimer>
Hello Steve,
Quoted 1 line
We have had some success using a (Teledyne) LeCroy analyzer. Its GUI
I found a LeCroy FC analyzer on ebay for 500 EURs. I'm not buying it yet, but keep it in mind. Much less the cost I had in mind (100 T EUR).
Cheers,
Thomas
Re: HBA recommended as FC target
In reply to Laurence ObermanHello Laurence,
Quoted 3 lines · Laurence Oberman
Any of the Qlogic qla24xx or qla25xx and higher that allow you to disable initiator mode will work. I use qla25xx 8Gbit in all my Target arrays.
thank you for your recommendations I ordered a Qlogic QLE2462-HP -PX2510401 - 4GB 2-Port Fibre on ebay.
Quoted 4 lines · Laurence Oberman
There is no way to do this using adapters and generic F/C with Linux as the O/S. The ability to enable debugging in the F/C drivers will expose some of the internals but there is no way to sniff directly as far as I am aware.
I enabled debugging in the Linux target once and I could see quiet detailed information. Probably this will be enough for me. At the time I was debugging SCSI reservations.
Quoted 2 lines
Many switches allow port level tracing facilities but inline sniffing using Linux and generic hosts is not possible.
Are you aware of facilities in entry level brocade switches that I can use. I just have to trace one port.
Cheers,
Thomas