Open Stack

Hi Thiago,

>  * I can see the untagged packets arriving at "brq50b13311-fa", by using "tcpdump -eni brq50b13311-fa";


Do you mind posting the packet capture from eth3 and the bridge on pastebin?

>  For example, I can not see the string "Cisco" while running "tcpdump -eni brq50b13311-fa | grep -i cisco", so, where those packets come from (that I'm seeing on tap9a546be0-d6 and within its instance - pastebin above) ???


Those are multicast packets for PVST and OSPF from the switch and router, respectively. You might try filtering by MAC on the bridge instead of using grep to isolate those packets:

tcpdump -eni brq50b13311-fa ether dst 01:00:0c:cc:cc:cd

I would expect to see those packets on eth3 as well.

>  * I CAN NOT see the untagged packets arriving at "tap9a546be0-d6", by using "tcpdump -eni tap9a546be0-d6"!


What do your security group rules look like?

>  What is driving me crazy is that, on top of this very same setup (including e1000 driver), but with different vlan tag, it works!

Is it the same eth3 interface? You may want to avoid vlan 666, anyway. Never known those numbers to be lucky.


James

> On Jul 8, 2015, at 7:41 PM, Martinx - ジェームズ <thiagocmartinsc at gmail.com> wrote:
> 
> Guys,
> 
>  What can cause packets to just disappear after arriving the bridge "brqxxxxzzzz-yy" ???
> 
>  I'm using "VLAN Provider Networks", Juno on top of Trusty.
> 
>  With Neutron ML2 + LinuxBridges, setup "all-in-one".
> 
> 
> Where:
> 
>  - eth0 is the default - api, etc;
>  - eth1 is the "external" - floating ip, etc;
>  - eth2 is the physical vlan mapped into ML2;
>  - eth3 is another physical vlan mapped into ML2;
>  - dummy0 is being used by ML2 for VXLAN.
> 
> 
> Explaining:
> 
> 
>  * I can see the tagged packets arriving at "eth3", by using "tcpdump -eni eth2 | grep "vlan 666";
> 
>  * I can see the untagged packets arriving at "brq50b13311-fa", by using "tcpdump -eni brq50b13311-fa";
> 
>  * I CAN NOT see the untagged packets arriving at "tap9a546be0-d6", by using "tcpdump -eni tap9a546be0-d6"!
> 
> 
>  "tcpdump -eni tap9a546be0-d6" only shows "alien" packets for this "tap", like this:
> 
>  http://paste.openstack.org/show/356838/ <http://paste.openstack.org/show/356838/> - While what is arriving at "brq50b13311-fa" looks completely different!
> 
>  For example, I can not see the string "Cisco" while running "tcpdump -eni brq50b13311-fa | grep -i cisco", so, where those packets come from (that I'm seeing on tap9a546be0-d6 and within its instance - pastebin above) ???
> 
> 
> Instance details:
> ---
> ...
>     <interface type='bridge'>
>       <mac address='fa:16:3e:51:16:60'/>
>       <source bridge='brq50b13311-fa'/>
>       <target dev='tap9a546be0-d6'/>
>       <model type='e1000'/>
>       <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/>
>     </interface>
> ...
> ---
> 
> "brctl show" returns:
> 
> ---
> bridge name            bridge id                   STP enabled     interfaces
> ....
> brq50b13311-fa          8000.ecf4bbd0417b           no                        eth3.666
>                                                                                            tap9a546be0-d6
> ....
> ---
> 
> "neutron net-show XXX" returns:
> 
>  http://paste.openstack.org/show/356845/ <http://paste.openstack.org/show/356845/>
> 
> -
> 
> ML2 configuration contains:
> 
> http://paste.openstack.org/show/356860/ <http://paste.openstack.org/show/356860/>
> 
> -
> 
>  Can someone please, tell me, why ~99.5% of the packets are disappearing out of nothing?
> 
>  What is driving me crazy is that, on top of this very same setup (including e1000 driver), but with different vlan tag, it works!
> 
>  I already disabled "rp_filter", ebtables, arptables, iptables, also, all files under "/proc/sys/net/bridge" have "0"...
> 
>  I really appreciate any help! I'm working on this for about 16 hours straight...
> 
> Thanks,
> Thiago
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150709/2bef161b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150709/2bef161b/attachment.sig>