Re: tcpdump <-> FCoE support
From: Loke, Chetan <hidden>
Date: 2010-07-26 18:27:56
From: Joe Eykholt [mailto:jeykholt-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org] Good question. There's no effort in progress that I know of. I find wireshark very handy and do tend to capture with tcpdump -w and then read the file with wireshark. tshark is handy if you want a CLI mode. If tcpdump interpreted FCoE frames, then we would want FC, FC-ELS, and FCP. Does it already dissect any SCSI frames (e.g., iSCSI)? I'm not sure how much work it would be, but given tshark is around, I don't think it's that important.
Oki thanks. I'll play with tshark. If tshark handles the FIP/FC discovery business then that's perfect. I don't have a FCoE target configured yet. I just sent a raw fcoe-frame to check how tcpdump responds.
It could at least be changed to print out FCoE instead of 0x8906, and FIP instead of 0x8914.
Agreed.
Joe
Chetan Loke