Security Incidents mailing list archives

Re: yes, its t0rn again


From: "Jeremy 'Circ' Charles" <circi () WWOC ORG>
Date: Sat, 6 Jan 2001 16:24:22 -0600

On Thu, 4 Jan 2001, Jeff Bachtel wrote:
I'm not even sure if its possible in the x86 world, but on Sparcs
running Solaris, at least, you can have two different controllers
access the same drive, doing this you could have a system constantly
monitor what was being written to the disk, without it being in

Having two hosts connected to a common SCSI bus with "shared" storage is
something that is done all the time in commercial failover/high
availability systems.  One problem I see happening here is SCSI-level
locks on the disks preventing both host adapters from touching the same
disk.

Or were you talking about something more like a SCSI sniffer?

Jeremy Charles
circi () wwoc org


Current thread: