[ovs-discuss] [Port-Mirroring]

[Brent Salisbury]

Hi Hasan,

Not sure exactly what you are looking for from your message. If you want all
the traffic on the OVS host you can do something  along the lines of whats
below.

# ovs-vsctl list port

_uuid  : 9b32a383-164b-4aab-8f2d-f9f401d347d4  <---Plug in this UUID below.
bond_downdelay      : 0
bond_fake_iface     : false
bond_mode           : []
bond_updelay        : 0
external_ids        : {}
fake_bridge         : false
interfaces          : [e0dda95a-16c1-4393-a6ce-96829f79fe1d]
lacp                : []
mac                 : []
name                : "vnet0"  <---Name of the destination port to send
traffic and run tcpdump etc on.


All one command:

ovs-vsctl -- --id=@m create mirror name=m0  select_all=1
output-port=9b32a383-164b-4aab-8f2d-f9f401d347d4 -- set bridge br-int
mirrors=@m

Or broken up with "\":

ovs-vsctl -- --id=@m create mirror name=m0  select_all=1 \
output-port=9b32a383-164b-4aab-8f2d-f9f401d347d4 \
-- set bridge br-int mirrors=@m

"select_all=" uses all traffic as the source and forwards it to the output
port "vnet0" specified by the UUID as the "output-port" target. This spans
all traffic so I wouldn't recommend in a production environment unless
wearing safety goggles :)

-Ben has a nice explanation for peeling select traffic already posted here:
http://openvswitch.org/pipermail/discuss/2012-July/007802.html
-Along with some examples in the ovs-vsctl man pages on the OVS site.

I added a subject since there wasn't one so it may show up as a new thread,
apologies wasn't sure how to do that otherwise. Figured its better having a
subject for folks to query archives.

Thanks,
--Brent

----------------------------------------------------------------------------
----------------------------------


Date: Tue, 4 Dec 2012 22:22:41 +0700
From: hasan mustafa <hasan8322 at gmail.com>
Subject: [ovs-discuss] (no subject)
To: discuss at openvswitch.org
can u expalin to me. how to configuration port mirroring on open
vswitch...i have 2 physical interface (eth0, eth1) and 3 virtual interface
(tap0, tap1, tap2)..and how to capture this packet after mirroring all
interface. i'm really confused about this



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20121204/df7eec4b/attachment.html>