Skip to content

Radius PowerView Commands

Jump to bottom
akuker edited this page Jan 3, 2022 · 25 revisions

Radius Powerview: SCSI Command Set

SCOPE

This document applies to the following hardware devices:

  • Radius Powerview (Model 825-0496-03 A)

and to the following firmware revisions:

  • TBD

All numbers are expressed in hexadecimal, unless otherwise noted.

COMMAND SET SUMMARY

The following is a list of the observed SCSI commands:

  • 12 Inquiry
  • C8 UNKNOWN
  • C9 UNKNOWN
  • CA UNKNOWN
  • CB UNKNOWN
  • CC UNKNOWN

Inquiry (12)

Command: 12 00 00 00 LL 00 (LL is data length)

Function: Perform a standard SCSI Inquiry command: reference the SCSI spec for further information

Type: Input; reference the SCSI spec for the data returned

Sequence: Command->

Examples:

Command: 12 00 00 00 01 00 Direct to status phase

Command: 12 00 00 00 05 00 Data in: `03 00 01 01 05 00

Command: 12 00 00 00 4B 00 Data in:

00: 03000101 46000000 52414449 55532020
10: 506F7765 72566965 77202020 20202020
20: 56312E30 00000000 10002000 01000000
30: 00020000 00000300 00000004 00000000
40: 05000000 000643F9 0000FF

Command: 12 00 00 00 24 00 Data in:

00: 03000101 46000000 52414449 55532020
10: 506F7765 72566965 77202020 20202020
20: 56312E30

UNKNOWN (C8)

Command: C8 00 00 31 00 00 03 00

Function: Unknown at this time

Type: XXXXInput (Transitions to DATAOUT)

Host then sends: XXXX00 09 00 07 FF FF FF 00 (The last 00 might not actually be there?)

Sequence: Command->Status->Data In->Status->Msg In

Examples:

Command: C8 00 00 31 83 00 01 00 Data in: 00

Command: C8 00 00 31 00 00 03 00 Data in: 01 09 08

UNKNOWN (C9)

Command: C9 00 00 31 00 00 03 00

Function: Unknown at this time

Type: Input (Transitions to DATAOUT)

Sequence: Command->Data Out->Status->Msg In Examples:

Command: C9 00 00 31 00 00 03 00 Data out: 00 00 00

UNKNOWN (CA)

Command: XX XX XX 0d 00 00 00 06 00

Function: Unknown at this time

Type: XXXXInput (Transitions to DATAOUT)

Host then sends: XXXX00 09 00 07 FF FF FF 00 (The last 00 might not actually be there?)

Examples:

UNKNOWN (CB)

Command: XX XX XX 0d 00 00 00 06 00

Function: Unknown at this time

Type: XXXXInput (Transitions to DATAOUT)

Host then sends: XXXX00 09 00 07 FF FF FF 00 (The last 00 might not actually be there?)

Examples:

UNKNOWN (CC)

Command: CC 45 E0 00

Function: Unknown at this time

Type: Input (Transitions to DATAOUT)

Sequence: Command->Data Out->Status->Msg In

Examples:

Command: CC 45 E0 00 Data Out:

00: 00DFFBA2 208B0202 00000180 C0C0C000
10: 12504848 24002814 14140082 40101008
20: 08080400 04041842 80000000 0140A0A0
30: A0010840 40202022 11111110 41200808
40: 04040400 00000000 20008080 40404000
50: 00000084 00101008 08100000 00000080
60: 00000000 00000000 00021050 50502000
70: 28143434 34020202 00010108 00808080
80: 84401040 00002428 10101000 88080800
...
8A0: 082902A2 14040500 05000505 05004004
8B0: 04000280 00412121 200000
Clone this wiki locally