tcpdump mailing list archives

add edk2 mm request serialization protocol


From: Gerd Hoffmann via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Thu, 8 May 2025 13:09:05 +0200

--- Begin Message --- From: Gerd Hoffmann <kraxel () redhat com>
Date: Thu, 8 May 2025 13:09:05 +0200
  Hi,

I'd like to add a new linktype: EDK2_MM

This is the request serialization protocol used by edk2 firmware to
communicate between normal mode and management mode ('MM' for short).

Qemu recently (version 10.0 released last month) got a uefi variable
store implementation, and that reuses the request serialization protocol
for firmware <-> qemu communication.

I have a patch for writing out a pcap trace of the firmware <-> qemu
communication, and I think it makes sense to get an official linktype
number assigned before sending out that patch for merge into qemu, so
here I am ;)

PRs:
 - https://github.com/the-tcpdump-group/libpcap/pull/1514
 - https://github.com/the-tcpdump-group/tcpdump-htdocs/pull/42

qemu patch:
 - https://git.kraxel.org/cgit/qemu/commit/?h=sirius/uefi-vars-pcap&id=7a5f3dd3a8eaeaad052111266470db131c061959

rust parser:
 - https://gitlab.com/kraxel/virt-firmware-rs/-/blob/main/varstore/src/pcap/parse.rs

take care,
  Gerd


--- End Message ---
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s

Current thread: