Internet Small Computer Systems Interface (iSCSI)
From RFC 3720: "The Small Computer Systems Interface (["SCSI"]) is a popular family of protocols for communicating with I/O devices, especially storage devices.... The iSCSI protocol describes a means of transporting of the SCSI packets over TCP/IP, providing for an interoperable solution which can take advantage of existing Internet infrastructure, Internet management facilities and address distance limitations."
XXX - add a brief description of PROTO history
- ["TCP"]: Typically, PROTO uses ["TCP"] as its transport protocol. The well known TCP port for iSCSI traffic is 3260.
XXX - Add example traffic here (as plain text or Ethereal screenshot).
The iSCSI dissector is partially functional. It is based on Draft 13 of the specification. The current specification is RFC 3720.
For general use, it is best to have iSCSI desegmentation on and TCP desegmentation on.
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of iSCSI display filter fields can be found in the [http://www.ethereal.com/docs/dfref/iscsi/iscsi.html display filter reference]
Show only the iSCSI based traffic:
You cannot directly filter iSCSI protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.