[openstack-dev] [Tap-as-a-Service] Problem in visualizing port-mirroring information

Manik Bindlish Manik.Bindlish at nectechnologies.in
Wed Mar 1 10:57:31 UTC 2017


Hi All,
I verified and found out that with my devstack setup ( on Master) , I could not see the br-tap ( as shown in the image attached) on my All-In-One deployment.

Please let me know if this is an issue, or is this expected. If it is expected, then how can we monitor the mirrored packets without br-tap on OVS.

Regards,
Manik

From: Manik Bindlish [mailto:Manik.Bindlish at nectechnologies.in]
Sent: Tuesday, February 28, 2017 5:07 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Problem in visualizing port-mirroring information


Hi,



>  have you tried to disable port security?

I have disabled security group from both the ports. After disabling I am not able to ping on the instances.



===========================================================================



neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.

+-----------------------+-------------------------------------------------------------------------------------------------------------+

| Field                 | Value                                                                                                       |

+-----------------------+-------------------------------------------------------------------------------------------------------------+

| admin_state_up        | True                                                                                                        |

| allowed_address_pairs |                                                                                                             |

| binding:host_id       | openstack-nti-11                                                                                            |

| binding:profile       | {}                                                                                                          |

| binding:vif_details   | {"port_filter": true, "ovs_hybrid_plug": true}                                                              |

| binding:vif_type      | ovs                                                                                                         |

| binding:vnic_type     | normal                                                                                                      |

| created_at            | 2017-02-27T10:13:51Z                                                                                        |

| description           |                                                                                                             |

| device_id             | 1582911f-ed59-43d6-9711-0e505db5413b                                                                        |

| device_owner          | compute:None                                                                                                |

| extra_dhcp_opts       |                                                                                                             |

| fixed_ips             | {"subnet_id": "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.12"}                            |

|                       | {"subnet_id": "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address": "fdaa:99df:2497:0:f816:3eff:fe58:4d36"} |

| id                    | dde6689e-4f0f-4fe2-9d28-1182ef03e113                                                                        |

| mac_address           | fa:16:3e:58:4d:36                                                                                           |

| name                  |                                                                                                             |

| network_id            | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba                                                                        |

| port_security_enabled | True                                                                                                        |

| project_id            | 9c342a60b7cd4e8cacc8c5f6f92e80e6                                                                            |

| revision_number       | 13                                                                                                          |

| security_groups       |                                                                                                             |

| status                | ACTIVE                                                                                                      |

| tags                  |                                                                                                             |

| tenant_id             | 9c342a60b7cd4e8cacc8c5f6f92e80e6                                                                            |

| updated_at            | 2017-02-28T11:17:52Z                                                                                        |

+-----------------------+-------------------------------------------------------------------------------------------------------------+



ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show 19526048-98d9-4e6c-8205-dddfcaf8f2b2

neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.

+-----------------------+-------------------------------------------------------------------------------------------------------------+

| Field                 | Value                                                                                                       |

+-----------------------+-------------------------------------------------------------------------------------------------------------+

| admin_state_up        | True                                                                                                        |

| allowed_address_pairs |                                                                                                             |

| binding:host_id       | openstack-nti-11                                                                                            |

| binding:profile       | {}                                                                                                          |

| binding:vif_details   | {"port_filter": true, "ovs_hybrid_plug": true}                                                              |

| binding:vif_type      | ovs                                                                                                         |

| binding:vnic_type     | normal                                                                                                      |

| created_at            | 2017-02-22T09:59:51Z                                                                                        |

| description           |                                                                                                             |

| device_id             | 843fe80f-971a-43e3-986c-31d19bef3898                                                                        |

| device_owner          | compute:None                                                                                                |

| extra_dhcp_opts       |                                                                                                             |

| fixed_ips             | {"subnet_id": "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.3"}                             |

|                       | {"subnet_id": "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address": "fdaa:99df:2497:0:f816:3eff:feeb:52f2"} |

| id                    | 19526048-98d9-4e6c-8205-dddfcaf8f2b2                                                                        |

| mac_address           | fa:16:3e:eb:52:f2                                                                                           |

| name                  |                                                                                                             |

| network_id            | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba                                                                        |

| port_security_enabled | True                                                                                                        |

| project_id            | 9c342a60b7cd4e8cacc8c5f6f92e80e6                                                                            |

| revision_number       | 13                                                                                                          |

| security_groups       |                                                                                                             |

| status                | ACTIVE                                                                                                      |

| tags                  |                                                                                                             |

| tenant_id             | 9c342a60b7cd4e8cacc8c5f6f92e80e6                                                                            |

| updated_at            | 2017-02-28T11:16:11Z                                                                                        |

+-----------------------+-------------------------------------------------------------------------------------------------------------+





ubuntu at openstack-nti-11:/opt/stack/devstack$ sudo ip netns exec qdhcp-7fae0053-aeeb-44ac-9336-41b9cae8a9ba ping 192.168.200.250

PING 192.168.200.250 (192.168.200.250) 56(84) bytes of data.





================================



Thanks,

Manik



-----Original Message-----
From: Takashi Yamamoto [mailto:yamamoto at midokura.com]
Sent: Tuesday, February 28, 2017 3:35 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Problem in visualizing port-mirroring information



On Tue, Feb 28, 2017 at 4:05 PM, Manik Bindlish <Manik.Bindlish at nectechnologies.in<mailto:Manik.Bindlish at nectechnologies.in>> wrote:

> Hi All,

>

>

>

> I am facing an issue in visualizing port-mirroring information.

>

>

>

> 1.)    Created 2 VMs:

>

> VM1:  ubuntu3(10.0.0.3,  floating IP: 192.168.200.252) – Tap service

> created

>

> VM2:  ubuntu2(10.0.0.12,  floating ip: 192.168.200.250) – Tap flow

> created

>

> 2.)    Connected to bridge router: br-ex(192.168.200.11)

>

> 3.)    Pinging google is possible and can be check from br-ex

>

>

>

> Problem: Not able to get the packet info on ubuntu3 where tap service

> is running.

>

>

>

> Ports info:

>

> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show

> 19526048-98d9-4e6c-8205-dddfcaf8f2b2

>

> neutron CLI is deprecated and will be removed in the future. Use

> openstack CLI instead.

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

> | Field                 | Value

> |

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

> | admin_state_up        | True

> |

>

> | allowed_address_pairs |

> |

>

> | binding:host_id       | openstack-nti-11

> |

>

> | binding:profile       | {}

> |

>

> | binding:vif_details   | {"port_filter": true, "ovs_hybrid_plug": true}

> |

>

> | binding:vif_type      | ovs

> |

>

> | binding:vnic_type     | normal

> |

>

> | created_at            | 2017-02-22T09:59:51Z

> |

>

> | description           |

> |

>

> | device_id             | 843fe80f-971a-43e3-986c-31d19bef3898

> |

>

> | device_owner          | compute:None

> |

>

> | extra_dhcp_opts       |

> |

>

> | fixed_ips             | {"subnet_id":

> "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.3"}

> |

>

> |                       | {"subnet_id":

> "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address":

> "fdaa:99df:2497:0:f816:3eff:feeb:52f2"} |

>

> | id                    | 19526048-98d9-4e6c-8205-dddfcaf8f2b2

> |

>

> | mac_address           | fa:16:3e:eb:52:f2

> |

>

> | name                  |

> |

>

> | network_id            | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba

> |

>

> | port_security_enabled | True



have you tried to disable port security?



> |

>

> | project_id            | 9c342a60b7cd4e8cacc8c5f6f92e80e6

> |

>

> | revision_number       | 10

> |

>

> | security_groups       | 13e4320a-bc74-4303-a55d-67a0f092a066

> |

>

> | status                | ACTIVE

> |

>

> | tags                  |

> |

>

> | tenant_id             | 9c342a60b7cd4e8cacc8c5f6f92e80e6

> |

>

> | updated_at            | 2017-02-22T10:00:10Z

> |

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

>

>

>

>

> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show

> dde6689e-4f0f-4fe2-9d28-1182ef03e113

>

> neutron CLI is deprecated and will be removed in the future. Use

> openstack CLI instead.

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

> | Field                 | Value

> |

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

> | admin_state_up        | True

> |

>

> | allowed_address_pairs |

> |

>

> | binding:host_id       | openstack-nti-11

> |

>

> | binding:profile       | {}

> |

>

> | binding:vif_details   | {"port_filter": true, "ovs_hybrid_plug": true}

> |

>

> | binding:vif_type      | ovs

> |

>

> | binding:vnic_type     | normal

> |

>

> | created_at            | 2017-02-27T10:13:51Z

> |

>

> | description           |

> |

>

> | device_id             | 1582911f-ed59-43d6-9711-0e505db5413b

> |

>

> | device_owner          | compute:None

> |

>

> | extra_dhcp_opts       |

> |

>

> | fixed_ips             | {"subnet_id":

> "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.12"}

> |

>

> |                       | {"subnet_id":

> "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address":

> "fdaa:99df:2497:0:f816:3eff:fe58:4d36"} |

>

> | id                    | dde6689e-4f0f-4fe2-9d28-1182ef03e113

> |

>

> | mac_address           | fa:16:3e:58:4d:36

> |

>

> | name                  |

> |

>

> | network_id            | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba

> |

>

> | port_security_enabled | True

> |

>

> | project_id            | 9c342a60b7cd4e8cacc8c5f6f92e80e6

> |

>

> | revision_number       | 10

> |

>

> | security_groups       | 13e4320a-bc74-4303-a55d-67a0f092a066

> |

>

> | status                | ACTIVE

> |

>

> | tags                  |

> |

>

> | tenant_id             | 9c342a60b7cd4e8cacc8c5f6f92e80e6

> |

>

> | updated_at            | 2017-02-27T10:14:02Z

> |

>

> +-----------------------+-------------------------------------------------------------------------------------------------------------+

>

>

>

> Tap Service:

>

> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron tap-service-show

> b7415d49-c0b0-4144-bac9-1a11bda713d9

>

> neutron CLI is deprecated and will be removed in the future. Use

> openstack CLI instead.

>

> +-------------+--------------------------------------+

>

> | Field       | Value                                |

>

> +-------------+--------------------------------------+

>

> | description |                                      |

>

> | id          | b7415d49-c0b0-4144-bac9-1a11bda713d9 |

>

> | name        | tapsrvc1                             |

>

> | port_id     | 19526048-98d9-4e6c-8205-dddfcaf8f2b2 |

>

> | project_id  | 9c342a60b7cd4e8cacc8c5f6f92e80e6     |

>

> | status      | ACTIVE                               |

>

> | tenant_id   | 9c342a60b7cd4e8cacc8c5f6f92e80e6     |

>

> +-------------+--------------------------------------+

>

>

>

> Tap Flow:

>

> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron tap-flow-show

> 63c359fc-bb04-4581-831b-a041572574c6

>

> neutron CLI is deprecated and will be removed in the future. Use

> openstack CLI instead.

>

> +----------------+--------------------------------------+

>

> | Field          | Value                                |

>

> +----------------+--------------------------------------+

>

> | description    |                                      |

>

> | direction      | BOTH                                 |

>

> | id             | 63c359fc-bb04-4581-831b-a041572574c6 |

>

> | name           |                                      |

>

> | project_id     | 9c342a60b7cd4e8cacc8c5f6f92e80e6     |

>

> | source_port    | dde6689e-4f0f-4fe2-9d28-1182ef03e113 |

>

> | status         | ACTIVE                               |

>

> | tap_service_id | b7415d49-c0b0-4144-bac9-1a11bda713d9 |

>

> | tenant_id      | 9c342a60b7cd4e8cacc8c5f6f92e80e6     |

>

> +----------------+--------------------------------------+

>

>

>

>

>

>

>

>

>

> Thanks,

>

> Manik

>

>

> ______________________________________________________________________

> ____ OpenStack Development Mailing List (not for usage questions)

> Unsubscribe:

> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<mailto:OpenStack-dev-request at lists.openstack.org?subject:unsubscribe>

> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

>



__________________________________________________________________________

OpenStack Development Mailing List (not for usage questions)

Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<mailto:OpenStack-dev-request at lists.openstack.org?subject:unsubscribe>

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170301/33b61a2e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: br-tap_in_OVS.png
Type: image/png
Size: 69517 bytes
Desc: br-tap_in_OVS.png
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170301/33b61a2e/attachment-0001.png>


More information about the OpenStack-dev mailing list