tableau-parm is a utility which runs on Linux for interaction with Tableau’s forensic write blockers.  If you use Tableau’s products and don’t run on Windows, you can use this utility to query information from the write blocker (i.e. hard drive information, HPA, DCO, etc.) and even remove HPA/DCO.  The Windows version of the utility by Tableau is called Tableau Disk Monitor.  If you use their hardware, ensure the firmware is up to date with Tableau Firmware Update.

Sample Output

Below is sample out from the T35e connected to a WD SATA hard drive:

wintermute:/home/ahoog# tableau-parm /dev/sdd
## Bridge Information ##
chan_index: 0×00
chan_type: SATA
writes_permitted: FALSE
declare_write_blocked: TRUE
declare_write_errors: TRUE
bridge_serial: 000ECC020035C00F
bridge_vendor: Tableau
bridge_model: T35e
firmware_date: Nov  6 2008
firmware_time: 14:22:38

## Drive Information ##
drive_vendor:
drive_model: WDC WD2500JD-55HBB1
drive_serial:      WD-WCAL73972498
drive_revision: 08.02D08

## Drive HPA/DCO/Security Information ##
security_in_use: FALSE
security_support: TRUE
hpa_in_use: FALSE
hpa_support: TRUE
dco_in_use: FALSE
dco_support: TRUE
drive_capacity: 488397168
hpa_capacity: 488397168
dco_capacity: 488397168