NAME

       tableau-parm - Tableau Write-blocking Bridge Query/Command Utility

SYNOPSIS

       tableau-parm [-r] device

DESCRIPTION

       tableau-parm  is  designed to interact with write-blocking forensics bridges produced by Tableau, LLC. It
       can be used to query bridges for various bridge and device data, as well as to disable DCO regions.

OPTIONS

       tableau-parm accepts the following parameters:

       -r     Directs tableau-parm to permanently remove a DCO, if it exists.  THIS WILL MODIFY THE STATE OF THE
              DRIVE.  USE  AT YOUR OWN RISK!  (It is recommended for forensics investigations, that a full drive
              image be taken before this command is run,  and  then  again  afterward  if  a  DCO  was  detected
              originally.)  Note:  after  running  this,  you'll  need  to  restart the Tableau bridge for it to
              correctly detect the changes.

       device Required argument. Specifies the device file for the bridge/drive to be queried. This  must  be  a
              device  presenting  SCSI emulation.  Under Linux, all USB and FireWire mass storage devices behave
              like SCSI devices. Once a bridge and drive are plugged in and powered on, one can  generally  find
              out what the device was dynamically mapped to by running: dmesg | tail -20

OUTPUT

       tableau-parm  generates  simple  output  with  one data value per line, interspersed with blank lines and
       section headers.  This output format is subject to change.

EXAMPLES

       To query a bridge which is mapped to /dev/sda:

            tableau-parm /dev/sda

       To remove a DCO from the hard drive on /dev/sda:

            tableau-parm -r /dev/sda

BUGS

       Older versions of ATA and SATA Tableau firmwares didn't properly handle HPA and  DCO  on  some  types  of
       drives.  Be  sure  to  upgrade your blockers' firmwares using the firmware update utility, version 4.2 or
       later, which was released on July 5, 2007.

       This is not really a bug, but something to note: when a drive has both an HPA and DCO  section,  and  the
       DCO  is  removed,  the HPA is removed with it. This is how the bridge firmware works, and isn't something
       controlled by tableau-parm. Just something to be aware of.

CREDITS

       Copyright (C) 2007,2009 Timothy D. Morgan

       Copyright (C) 1999,2001,2006,2007 D. Gilbert

       tableau-parm was written by Timothy D. Morgan using portions of SCSI example code written by D. Gilbert.

       Tableau, LLC cooperated in the development of this tool by providing  documentation  on  the  proprietary
       SCSI  interfaces  and  assisted  in testing.  Without their help, this tool would not have been possible.
       Tableau, LLC does not endorse or warrant this code in any way.

LICENSE

       Please see the file "LICENSE" included with this software distribution.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY  WARRANTY;  without  even
       the  implied  warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
       License version 3 for more details.

SEE ALSO

       hdparm(1) sdparm(1)