<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Thiago,<div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div dir="ltr" class=""><div class=""> * I can see the untagged packets arriving at "brq50b13311-fa", by using "tcpdump -eni brq50b13311-fa";</div></div></blockquote></div><div class=""><div dir="ltr" class=""><div class=""><br class=""></div></div></div><div class="">Do you mind posting the packet capture from eth3 and the bridge on pastebin?</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div dir="ltr" class=""><div class=""> For example, I can not see the string "Cisco" while running "tcpdump -eni brq50b13311-fa | grep -i cisco", so, where those packets come from (that I'm seeing on tap9a546be0-d6 and within its instance - pastebin above) ???</div></div></blockquote></div><div class=""><div dir="ltr" class=""><div class=""><br class=""></div></div></div><div class="">Those are multicast packets for PVST and OSPF from the switch and router, respectively. You might try filtering by MAC on the bridge instead of using grep to isolate those packets:</div><div class=""><br class=""></div><div class="">tcpdump -eni brq50b13311-fa ether dst 01:00:0c:cc:cc:cd</div><div class=""><br class=""></div><div class="">I would expect to see those packets on eth3 as well.</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div dir="ltr" class=""><div class=""> * I CAN NOT see the untagged packets arriving at "tap9a546be0-d6", by using "tcpdump -eni tap9a546be0-d6"!</div></div></blockquote></div><div class=""><div dir="ltr" class=""><div class=""><br class=""></div><div class="">What do your security group rules look like? </div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div dir="ltr" class=""><div class=""> What is driving me crazy is that, on top of this very same setup (including e1000 driver), but with different vlan tag, it works!</div></div></blockquote><div class=""><div dir="ltr" class=""><div class=""><br class=""></div><div class="">Is it the same eth3 interface? You may want to avoid vlan 666, anyway. Never known those numbers to be lucky.</div><div class=""><br class=""></div></div></div></div></div></div><div class=""><br class=""><div apple-content-edited="true" class="">
<div class=""><div class="">James</div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Jul 8, 2015, at 7:41 PM, Martinx - ジェームズ <<a href="mailto:thiagocmartinsc@gmail.com" class="">thiagocmartinsc@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class="">Guys,<div class=""><br class=""></div><div class=""> What can cause packets to just disappear after arriving the bridge "brqxxxxzzzz-yy" ???</div><div class=""><br class=""></div><div class=""> I'm using "VLAN Provider Networks", Juno on top of Trusty.</div><div class=""><br class=""></div><div class=""> With Neutron ML2 + LinuxBridges, setup "all-in-one".</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Where:</div><div class=""><br class=""></div><div class=""> - eth0 is the default - api, etc;</div><div class=""> - eth1 is the "external" - floating ip, etc;</div><div class=""> - eth2 is the physical vlan mapped into ML2;</div><div class=""> - eth3 is another physical vlan mapped into ML2;</div><div class=""> - dummy0 is being used by ML2 for VXLAN.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Explaining:</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> * I can see the tagged packets arriving at "eth3", by using "tcpdump -eni eth2 | grep "vlan 666";<br class=""></div><div class=""><br class=""></div><div class=""> * I can see the untagged packets arriving at "brq50b13311-fa", by using "tcpdump -eni brq50b13311-fa";</div><div class=""><br class=""></div><div class=""> * I CAN NOT see the untagged packets arriving at "tap9a546be0-d6", by using "tcpdump -eni tap9a546be0-d6"!</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> "tcpdump -eni tap9a546be0-d6" only shows "alien" packets for this "tap", like this:</div><div class=""><br class=""></div><div class=""> <a href="http://paste.openstack.org/show/356838/" class="">http://paste.openstack.org/show/356838/</a> - While what is arriving at "brq50b13311-fa" looks completely different!<br class=""></div><div class=""><br class=""></div><div class=""> For example, I can not see the string "Cisco" while running "tcpdump -eni brq50b13311-fa | grep -i cisco", so, where those packets come from (that I'm seeing on tap9a546be0-d6 and within its instance - pastebin above) ???</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Instance details:</div><div class="">---</div><div class="">...</div><div class=""><div class=""> <interface type='bridge'></div><div class=""> <mac address='fa:16:3e:51:16:60'/></div><div class=""> <source bridge='brq50b13311-fa'/></div><div class=""> <target dev='tap9a546be0-d6'/></div><div class=""> <model type='e1000'/></div><div class=""> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/></div><div class=""> </interface></div></div><div class="">...</div><div class="">---</div><div class=""><br class=""></div><div class="">"brctl show" returns:</div><div class=""><br class=""></div><div class="">---</div><div class=""><div class="">bridge name bridge id STP enabled interfaces</div></div><div class="">....</div><div class=""><div class="">brq50b13311-fa 8000.ecf4bbd0417b no eth3.666</div><div class=""> tap9a546be0-d6</div></div><div class="">....</div><div class="">---</div><div class=""><br class=""></div><div class="">"neutron net-show XXX" returns:</div><div class=""><br class=""></div><div class=""> <a href="http://paste.openstack.org/show/356845/" class="">http://paste.openstack.org/show/356845/</a><br class=""></div><div class=""><br class=""></div><div class="">-</div><div class=""><br class=""></div><div class="">ML2 configuration contains:</div><div class=""><br class=""></div><div class=""><a href="http://paste.openstack.org/show/356860/" class="">http://paste.openstack.org/show/356860/</a><br class=""></div><div class=""><br class=""></div><div class="">-</div><div class=""><br class=""></div><div class=""> Can someone please, tell me, why ~99.5% of the packets are disappearing out of nothing?</div><div class=""><br class=""></div><div class=""> What is driving me crazy is that, on top of this very same setup (including e1000 driver), but with different vlan tag, it works!</div><div class=""><br class=""></div><div class=""> I already disabled "rp_filter", ebtables, arptables, iptables, also, all files under "/proc/sys/net/bridge" have "0"...</div><div class=""><br class=""></div><div class=""> I really appreciate any help! I'm working on this for about 16 hours straight...</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Thiago</div></div>
_______________________________________________<br class="">Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">Post to : <a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class=""></div></blockquote></div><br class=""></div></body></html>