6:42 a.m.
OK, now I'm confused.
For MacSpoofing we per default don't have the "macspoof" feature in the
engine am I right ?
To get that... you need to set:
engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.X
But no hook needs to be installed for this ? I don't have ping at the
momment with macspoof set on true on a VM.
2014-05-15 12:35 GMT+02:00 Itamar Heim <iheim(a)redhat.com>:
On 05/15/2014 04:26 AM, Matt . wrote:
> Itamar,
>
> On some testhost I'm updating now to 3.4(.x) I also need to install the
> hook it seems... it's not there by default.
>
> Any idea why you thought it should be ?
>
there is no need for the hook for port mirroring. you can define a vnic
profile with port mirroring via the engine and vdsm has this feature
built-in.
if you need more than just port mirroring (say, port forwarding), then you
still need the hook.
> Cheers,
>
> Matt
>
>
> 2014-05-12 14:55 GMT+02:00 Matt . <yamakasi.014(a)gmail.com
> <mailto:yamakasi.014@gmail.com>>:
>
>
> Hi,
>
> I really needed to enable the hook... Will investigate on new hosts!
>
>
> 2014-05-11 22:37 GMT+02:00 Itamar Heim <iheim(a)redhat.com
> <mailto:iheim@redhat.com>>:
>
>
> On 04/17/2014 04:08 AM, Matt . wrote:
>
> Hi Guys,
>
> I'm not able to write a howto yet as we need to check how
> this is
> running on high traffic and we are going soon. Than, we need
> to test
> some other functions before I can actually write something
> down.
>
> Because this is not all documented well indeed I'm in
> testmode and doing
> some @ life system as reallife environments are always
> coming with other
> things than your prefec test.
>
> I cannot say I needed promiscuouity, I did some things you
> would
> normally do on pfsense which fixed that part. Some old
> message you
> really need to discard instead of clicking it away was
> confusing this test.
>
>
>
> you are not supposed to need the promiscious hook for
> sniffing/mirroring - that's by now part of engine/vdsm (at vnic
> level in earlier versions, and at network profile in later
> versions iirc)
>
>
>
> 2014-04-17 9:08 GMT+02:00 Dan Kenigsberg <danken(a)redhat.com
> <mailto:danken@redhat.com>
> <mailto:danken@redhat.com <mailto:danken@redhat.com>>>:
>
>
>
> On Thu, Apr 17, 2014 at 01:11:13AM +0200, Matt . wrote:
> > OK, also this is finetuned, but it would be nice to
> have some
> more info
> > about the hooks in these cases... it's interesting
> as oVirt has
> the right
> > settings to start with but we need to know what we
> need to set
> when we have
> > a setup like this for an example.
>
> Could you explain what you have done, and what do you
> need promiscuouity
> for? oVirt has "port mirroring" that allows to mirror
> ip traffic from
> one vm network to another.
>
> >
> >
> > 2014-04-17 0:35 GMT+02:00 Matt .
> <yamakasi.014(a)gmail.com <mailto:yamakasi.014@gmail.com>
> <mailto:yamakasi.014@gmail.com
> <mailto:yamakasi.014@gmail.com>__>>:
>
>
> >
> > > Traffic issues are solved, but the advertising in
> not that well.
> > >
> > > I see on ESXi (vSphere) that you need to enable
> "Promiscuous
> Mode", but
> > > how on oVirt ?
> > >
> > >
> http://www.blissfulidiot.com/__2013/11/using-carp-with-__
> vmware-esxi.html
>
> <http://www.blissfulidiot.com/2013/11/using-carp-with-
> vmware-esxi.html>
> > >
> > > Do I need the vdsm-hook-promisc for it ? as I need
> to make real
> settings
> > > on a VM there I think the vswitch only needs the
> mode.
> > >
> > > Information is welcome!
>
>
>
>
> _________________________________________________
> Users mailing list
> Users(a)ovirt.org <mailto:Users@ovirt.org>
> http://lists.ovirt.org/__mailman/listinfo/users
> <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>
>
>