• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 715
  • Last Modified:

Capturing Fibre Channel traffic

Hi there,

Anyone knows if there is some kind of Fibre Channel traffic capturing application/driver like Ethereal and libpcap?

It seems like Ethereal support FCP and iSCSI, however there isn't a driver level utility like libpcap that support HBA(FCP).

Any idea?

4 Solutions
I never heard of this so when I saw the links provided by kcarrim, I thought wow this is great. Perhaps I just did not look hard enough but the first link provided nothing but information, the second was for a performance monitoring product.

As far as I know ( which is not too far) there is only one way to capture Fibre Channel traffic and that is by hooking up an analyzer inline. They are very expensive and hard to use, so there are few people who have that ability.
kwseowAuthor Commented:

That's my understanding too.  I'm toying with this idea to start a PC-based anaylsis for FCP... something that is to use Ethereal and a library like libpcap.

Anyone has any suggestion(s) ?

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Duncan MeyersCommented:
It would be an interesting problem to solve - quite how you'll get around the hardware issues will be interesting. If you were going to sniff packets on an existing link you'd need to design your own fibre optic adapter so that you can sit on the wire/fibre optic cable and watch traffic. Existing FC HBAs from QLogic and Emulex do the protocol processing on the HBA itself so I think you'd have trouble using existing hardware. The card would try to perform a FLOGI whether you want it to or not....

I must admit though that I think that the market for such a sniffer wouldn't be huge - FC is a pretty esoteric protocol. It also seems to me that iSCSI (much as I think that it is an immature product now) will make big inroads in to FCP's dominance in the SAN environment.

Nevertheless, it is a very interesting idea, and full of fascinating technological problems to be solved...
kwseowAuthor Commented:
Hi meryersd.

Not too sure if I'm getting you right. Tapping of FC can be done by using Taps right? Then the next question is whether FC HBA has a "promiscuous" as in Ethernet and I can program the HBA's API to return me all frames received.


Duncan MeyersCommented:
>Then the next question is whether FC HBA has a "promiscuous"

Errr, I don't know, (I've certainly have never seen any related settings in the HBA BIOS) but I'd be surprised if they did because FC is a point-to-point protocol. Also, FC HBAs are presented to the host OS as a SCSI device.

I've been looking at QLogic's website - they aren't  exactly a fount of information. You may want to post a query with their tech support people.
kwseowAuthor Commented:
Thanks for the advise... I'll certainly take a look at what they have got to offer.
Handy HolderSaggar makers bottom knockerCommented:
How about getting a Cisco MDS 9000 switch? Has inbuilt fibrechannel protocol analyzer plus SPAN capability.
kwseowAuthor Commented:
Thanks to all who comment.


Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now