Wednesday, 2021-10-27

opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/ussuri: Bump OpenStack-Ansible Ussuri  https://review.opendev.org/c/openstack/openstack-ansible/+/81558906:34
noonedeadpunkspatel: openstack-ansible playbooks/os-neutron-install.yml --limit neutron_openvswitch_agent -e neutron_agent_serial=1 ?06:47
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch services to track stable/xena  https://review.opendev.org/c/openstack/openstack-ansible/+/81559707:07
*** dpawlik3 is now known as dpawlik08:34
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_neutron master: Implement ironic_neutron_agent and baremetal driver  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/81301110:43
opendevreviewJames Gibson proposed openstack/openstack-ansible-os_nova master: [WIP] Enable TLS for live migrations  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/81522410:59
opendevreviewJames Gibson proposed openstack/openstack-ansible-os_nova master: [WIP] Enable TLS for live migrations  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/81522411:11
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest stable/ussuri: Pin neutron-tempest-plugin to v1.6.0  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/81563112:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/ussuri: Fetch upper constraints file with curl rather than allow pip to download it  https://review.opendev.org/c/openstack/openstack-ansible/+/81563214:02
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/ussuri: Fetch upper constraints file with curl rather than allow pip to download it  https://review.opendev.org/c/openstack/openstack-ansible/+/81563214:02
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/train: Fetch upper constraints file with curl rather than allow pip to download it  https://review.opendev.org/c/openstack/openstack-ansible/+/81563314:03
spatelnoonedeadpunk thank you, does neutron_agent_serial available on stein release ?14:22
noonedeadpunkI think it should, just check neutron playbook14:22
opendevreviewJames Gibson proposed openstack/openstack-ansible-os_nova master: [WIP] Enable TLS for live migrations  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/81522414:39
spatelnoonedeadpunk i will try 14:51
spatelcan you ping this IP ?   5.15.0.330 14:51
spatelmy Linux box saying this is invalid IP 14:51
noonedeadpunkum it is invalid14:51
spateland its invalid because of 330 but its showing up in log :)14:51
spatelhow that is possible i am seeing this IP in logs 14:52
noonedeadpunkwell I can imagine this to be in UDP logs...14:53
spatelyes UDP logs of my application server14:53
noonedeadpunknothing stopps you from ip spoofing right?:)14:53
spatelhmm let me debug.. 14:54
noonedeadpunkesp in UDP14:54
noonedeadpunkreciepient will not recieve reply, but it is not what they want anyway)14:54
spatelcould be my ELK regex grepping wrong string 14:54
mgariepyhttps://www.hacksparrow.com/networking/many-faces-of-ip-address.html14:55
mgariepybut regexp in elk seems a bit more plausible :)14:56
noonedeadpunkwell eventually IP spoofing is pretty widespread thing in UDP esp for DDoS amplification but then they will put target IP instead. And here maybe target your application server and they jsut want to cause denial of service14:56
spateldamn it :)  it was regex my application version is SDK-5.15.0.33035 14:57
spatelregex think its IP address14:57
noonedeadpunklol14:57
spatelmgariepy around21:14
spatelwhy my OVS switch seeing other VM traffic.. look like ARP flood issue 21:15
spateli am running tcpdump on vm1 and i can see traffic of vm2 21:15

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!