[PVE-User] PX4 and IPv6
Guillaume
proxmox at shadowprojects.org
Thu Aug 18 16:12:59 CEST 2016
Sorry for the line breaks, it should be disabled now.
Here's the first results, tcpdump is coming next.
All my (previous and current) tests were done with pve-firewall disable
to avoid any firewall issue.
* Working container
~# ip -6 addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
7: eth0 at if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen
1000
inet6 2001:41d0:1007:1c79::101/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::ff:fe4d:373c/64 scope link
valid_lft forever preferred_lft forever
12: eth1 at if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen
1000
inet6 fe80::3031:36ff:fe34:3866/64 scope link
valid_lft forever preferred_lft forever
~# ss -tlnp6
State Recv-Q Send-Q
Local Address:Port
Peer Address:Port
LISTEN 0 128
:::80
:::*
users:(("nginx",pid=902,fd=7),("nginx",pid=901,fd=7),("nginx",pid=900,fd=7),("nginx",pid=899,fd=7),("nginx",pid=898,fd=7),("nginx",pid=897,fd=7),("nginx",pid=896,fd=7),("nginx",pid=895,fd=7),("nginx",pid=894,fd=7))
LISTEN 0 128
:::22
:::*
users:(("sshd",pid=18092,fd=4))
LISTEN 0 100
::1:25
:::*
users:(("master",pid=904,fd=13))
LISTEN 0 128
:::443
:::*
users:(("nginx",pid=902,fd=9),("nginx",pid=901,fd=9),("nginx",pid=900,fd=9),("nginx",pid=899,fd=9),("nginx",pid=898,fd=9),("nginx",pid=897,fd=9),("nginx",pid=896,fd=9),("nginx",pid=895,fd=9),("nginx",pid=894,fd=9))
* Non-working container
~# ip -6 addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
14: eth0 at if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen
1000
inet6 2001:41d0:1007:1c79::102/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::ff:fe79:6389/64 scope link
valid_lft forever preferred_lft forever
19: eth1 at if20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen
1000
inet6 fe80::6031:32ff:fe34:6561/64 scope link
valid_lft forever preferred_lft forever
~# ss -tlnp6
State Recv-Q Send-Q
Local Address:Port
Peer Address:Port
LISTEN 0 128
:::80
:::*
users:(("nginx",pid=907,fd=7),("nginx",pid=906,fd=7),("nginx",pid=904,fd=7),("nginx",pid=903,fd=7),("nginx",pid=902,fd=7),("nginx",pid=901,fd=7),("nginx",pid=900,fd=7),("nginx",pid=899,fd=7),("nginx",pid=898,fd=7))
LISTEN 0 128
:::22
:::*
users:(("sshd",pid=10346,fd=4))
LISTEN 0 100
::1:25
:::*
users:(("master",pid=910,fd=13))
LISTEN 0 128
:::443
:::*
users:(("nginx",pid=907,fd=9),("nginx",pid=906,fd=9),("nginx",pid=904,fd=9),("nginx",pid=903,fd=9),("nginx",pid=902,fd=9),("nginx",pid=901,fd=9),("nginx",pid=900,fd=9),("nginx",pid=899,fd=9),("nginx",pid=898,fd=9))
Le 18-08-2016 15:28, Wolfgang Bumiller a écrit :
> A couple notes:
> -) Please disable automatic line breaks in your mail client when
> sending
> dumps like that as that just makes it too hard to read
> -) Ideally you just use 'ping' and filter by 'icmp6' instead of 'ip6'
> (and perhaps include the options '-vn' in tcpdump). Because for any
> other protocol the problem would usually be a different one (firewall,
> or the server simply not listening on ipv6)
>
> It looks like your conatiner is seeing the SYN packets and is not
> responding. Can you check the running network settings (not the
> configuration from /etc) via `# ip -6 addr` and `# ip -6 route` and
> make
> sure the http server is actually listening (eg. via `# ss -tlnp6`).
> Maybe stick to pinging to rule out server configuration issues. (Iow.
> check the tcpdump of a `ping6` instead of http like mentioned above).
>
> On Thu, Aug 18, 2016 at 11:21:09AM +0200, Guillaume wrote:
> [removed linebreaks]
>> - It is the same setup, i checked twice.
>> - It is a routed setup on an OVH server indeed. NDP entries are on
>> each
>> firewall (lxc, node and datacenter).
>>
>> Maybe a reboot would help, but i'm trying to avoid that for the
>> moment.
>>
>> Here is the tcpdump logs, there seems to be no reply to the ipv6
>> requests as
>> they are showing on the container :
>> * Port 80 on working ipv6 container (2001:41d0:1007:1c79::101)
>>
>> ** host
>> ~# tcpdump -i vmbr0 ip6
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode listening on vmbr0, link-type EN10MB (Ethernet), capture size
>> 262144 bytes
>> 11:14:31.188568 IP6 fe80::caf9:f9ff:fe58:fb00.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:14:31.536156 IP6 fe80::6e50:4dff:feae:a900.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:14:35.828631 IP6 fe80::caf9:f9ff:fe58:fb00 > ff02::5: OSPFv3,
>> Hello, length 36
>> 11:14:37.568228 IP6 fe80::6e50:4dff:feae:a900.2029 > ff02::66.2029:
>> UDP, length 6
>> 11:14:41.186066 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [S], seq 4010901551, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243609104 ecr 0], length
>> 0
>> 11:14:41.186191 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.31183: Flags [S.], seq 2044967707, ack 4010901552,
>> win 28560, options [mss 1440,sackOK,TS val 182595146 ecr
>> 3243609104,nop,wscale 7], length 0
>> 11:14:41.334748 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243609254 ecr 182595146], length 0
>> 11:14:41.334927 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [F.], seq 1, ack 1, win 1026,
>> options [nop,nop,TS val 3243609254 ecr 182595146], length 0
>> 11:14:41.334981 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.31183: Flags [F.], seq 1, ack 2, win 224, options
>> [nop,nop,TS val 182595183 ecr 3243609254], length 0
>> 11:14:41.338075 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [S], seq 2137551393, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243609254 ecr 0], length
>> 0
>> 11:14:41.338186 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [S.], seq 2213057153, ack 2137551394,
>> win 28560, options [mss 1440,sackOK,TS val 182595184 ecr
>> 3243609254,nop,wscale 7], length 0
>> 11:14:41.489349 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2, win 1026, options
>> [nop,nop,TS val 3243609406 ecr 182595183], length 0
>> 11:14:41.497826 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243609410 ecr 182595184], length 0
>> 11:14:41.497928 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [P.], seq 1:68, ack 1, win 1026,
>> options [nop,nop,TS val 3243609410 ecr 182595184], length 67
>> 11:14:41.497965 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [.], ack 68, win 224, options
>> [nop,nop,TS val 182595224 ecr 3243609410], length 0
>> 11:14:41.498094 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [P.], seq 1:2273, ack 68, win 224,
>> options [nop,nop,TS val 182595224 ecr 3243609410], length 2272
>> 11:14:41.498163 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [FP.], seq 2273:2451, ack 68, win 224,
>> options [nop,nop,TS val 182595224 ecr 3243609410], length 178
>> 11:14:41.648498 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2273, win 990, options
>> [nop,nop,TS val 3243609567 ecr 182595224], length 0
>> 11:14:41.648527 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2452, win 988, options
>> [nop,nop,TS val 3243609567 ecr 182595224], length 0
>> 11:14:41.696559 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [F.], seq 68, ack 2452, win 1026,
>> options [nop,nop,TS val 3243609610 ecr 182595224], length 0
>> 11:14:41.696641 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [.], ack 69, win 224, options
>> [nop,nop,TS val 182595274 ecr 3243609610], length 0
>> 11:14:42.175057 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [S], seq 1761752329, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243610093 ecr 0], length
>> 0
>> 11:14:42.175124 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [S.], seq 477212830, ack 1761752330,
>> win 28560, options [mss 1440,sackOK,TS val 182595393 ecr
>> 3243610093,nop,wscale 7], length 0
>> 11:14:42.325261 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243610243 ecr 182595393], length 0
>> 11:14:42.325422 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 1:518, ack 1, win
>> 1026, options [nop,nop,TS val 3243610243 ecr 182595393], length 517
>> 11:14:42.325466 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 518, win 232, options
>> [nop,nop,TS val 182595431 ecr 3243610243], length 0
>> 11:14:42.333811 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 1:2857, ack 518, win 232,
>> options [nop,nop,TS val 182595433 ecr 3243610243], length 2856
>> 11:14:42.333823 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [P.], seq 2857:3449, ack 518, win 232,
>> options [nop,nop,TS val 182595433 ecr 3243610243], length 592
>> 11:14:42.483345 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 2857, win 981, options
>> [nop,nop,TS val 3243610401 ecr 182595433], length 0
>> 11:14:42.487568 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 518:676, ack 3449, win
>> 1026, options [nop,nop,TS val 3243610401 ecr 182595433], length 158
>> 11:14:42.488817 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [P.], seq 3449:3707, ack 676, win 240,
>> options [nop,nop,TS val 182595472 ecr 3243610401], length 258
>> 11:14:42.637407 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 676:775, ack 3707, win
>> 1026, options [nop,nop,TS val 3243610555 ecr 182595472], length 99
>> 11:14:42.675992 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 775, win 240, options
>> [nop,nop,TS val 182595519 ecr 3243610555], length 0
>> 11:14:42.805947 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 3707:6563, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805959 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 6563:9419, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805964 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 9419:12275, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805973 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 12275:15131, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805979 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 15131:17987, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.955114 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 6563, win 1004, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955143 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 9419, win 959, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955149 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 12275, win 1004,
>> options [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955255 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 17987:20843, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955259 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 20843:23699, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955261 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 23699:26555, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955264 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 26555:29411, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955267 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 29411:32267, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955270 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 32267:35123, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955325 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 15131, win 959, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955359 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 35123:37979, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955362 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [FP.], seq 37979:39228, ack 775, win
>> 240, options [nop,nop,TS val 182595588 ecr 3243610873], length 1249
>> 11:14:42.955415 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 17987, win 914, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:43.103510 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 20843, win 981, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.103673 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 23699, win 937, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.104046 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 26555, win 892, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105628 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 29411, win 847, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105637 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 32267, win 803, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105639 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 35123, win 791, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105820 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 37979, win 747, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105878 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 39229, win 727, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.208472 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 39229, win 1025,
>> options [nop,nop,TS val 3243611120 ecr 182595588], length 0
>> 11:14:43.220423 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [F.], seq 775, ack 39229, win
>> 1026, options [nop,nop,TS val 3243611130 ecr 182595588], length 0
>> 11:14:43.220498 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 776, win 240, options
>> [nop,nop,TS val 182595655 ecr 3243611130], length 0
>> 11:14:44.060317 IP6 fe80::6e50:4dff:feae:a900.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:14:44.920621 IP6 fe80::caf9:f9ff:fe58:fb00.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:14:45.500748 IP6 fe80::caf9:f9ff:fe58:fb00 > ff02::5: OSPFv3,
>> Hello, length 36
>>
>> ** container
>> ~# tcpdump -i eth0 ip6
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode listening on eth0, link-type EN10MB (Ethernet), capture size
>> 262144 bytes
>> 11:14:41.186126 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [S], seq 4010901551, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243609104 ecr 0], length
>> 0
>> 11:14:41.186181 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.31183: Flags [S.], seq 2044967707, ack 4010901552,
>> win 28560, options [mss 1440,sackOK,TS val 182595146 ecr
>> 3243609104,nop,wscale 7], length 0
>> 11:14:41.334787 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243609254 ecr 182595146], length 0
>> 11:14:41.334936 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [F.], seq 1, ack 1, win 1026,
>> options [nop,nop,TS val 3243609254 ecr 182595146], length 0
>> 11:14:41.334965 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.31183: Flags [F.], seq 1, ack 2, win 224, options
>> [nop,nop,TS val 182595183 ecr 3243609254], length 0
>> 11:14:41.338129 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [S], seq 2137551393, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243609254 ecr 0], length
>> 0
>> 11:14:41.338177 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [S.], seq 2213057153, ack 2137551394,
>> win 28560, options [mss 1440,sackOK,TS val 182595184 ecr
>> 3243609254,nop,wscale 7], length 0
>> 11:14:41.489387 IP6 2607:f2f8:a8e0::2.31183 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2, win 1026, options
>> [nop,nop,TS val 3243609406 ecr 182595183], length 0
>> 11:14:41.497862 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243609410 ecr 182595184], length 0
>> 11:14:41.497940 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [P.], seq 1:68, ack 1, win 1026,
>> options [nop,nop,TS val 3243609410 ecr 182595184], length 67: HTTP:
>> GET / HTTP/1.0
>> 11:14:41.497958 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [.], ack 68, win 224, options
>> [nop,nop,TS val 182595224 ecr 3243609410], length 0
>> 11:14:41.498071 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [P.], seq 1:2273, ack 68, win 224,
>> options [nop,nop,TS val 182595224 ecr 3243609410], length 2272: HTTP:
>> HTTP/1.1 301 Moved Permanently
>> 11:14:41.498138 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [FP.], seq 2273:2451, ack 68, win 224,
>> options [nop,nop,TS val 182595224 ecr 3243609410], length 178: HTTP
>> 11:14:41.648538 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2273, win 990, options
>> [nop,nop,TS val 3243609567 ecr 182595224], length 0
>> 11:14:41.648541 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [.], ack 2452, win 988, options
>> [nop,nop,TS val 3243609567 ecr 182595224], length 0
>> 11:14:41.696591 IP6 2607:f2f8:a8e0::2.22591 >
>> 2001:41d0:1007:1c79::101.http: Flags [F.], seq 68, ack 2452, win 1026,
>> options [nop,nop,TS val 3243609610 ecr 182595224], length 0
>> 11:14:41.696623 IP6 2001:41d0:1007:1c79::101.http >
>> 2607:f2f8:a8e0::2.22591: Flags [.], ack 69, win 224, options
>> [nop,nop,TS val 182595274 ecr 3243609610], length 0
>> 11:14:42.175090 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [S], seq 1761752329, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243610093 ecr 0], length
>> 0
>> 11:14:42.175120 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [S.], seq 477212830, ack 1761752330,
>> win 28560, options [mss 1440,sackOK,TS val 182595393 ecr
>> 3243610093,nop,wscale 7], length 0
>> 11:14:42.325299 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 1, win 1026, options
>> [nop,nop,TS val 3243610243 ecr 182595393], length 0
>> 11:14:42.325437 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 1:518, ack 1, win
>> 1026, options [nop,nop,TS val 3243610243 ecr 182595393], length 517
>> 11:14:42.325458 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 518, win 232, options
>> [nop,nop,TS val 182595431 ecr 3243610243], length 0
>> 11:14:42.333798 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 1:2857, ack 518, win 232,
>> options [nop,nop,TS val 182595433 ecr 3243610243], length 2856
>> 11:14:42.333820 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [P.], seq 2857:3449, ack 518, win 232,
>> options [nop,nop,TS val 182595433 ecr 3243610243], length 592
>> 11:14:42.483362 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 2857, win 981, options
>> [nop,nop,TS val 3243610401 ecr 182595433], length 0
>> 11:14:42.487600 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 518:676, ack 3449, win
>> 1026, options [nop,nop,TS val 3243610401 ecr 182595433], length 158
>> 11:14:42.488804 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [P.], seq 3449:3707, ack 676, win 240,
>> options [nop,nop,TS val 182595472 ecr 3243610401], length 258
>> 11:14:42.637441 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [P.], seq 676:775, ack 3707, win
>> 1026, options [nop,nop,TS val 3243610555 ecr 182595472], length 99
>> 11:14:42.675950 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 775, win 240, options
>> [nop,nop,TS val 182595519 ecr 3243610555], length 0
>> 11:14:42.805930 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 3707:6563, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805956 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 6563:9419, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805962 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 9419:12275, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805971 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 12275:15131, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.805977 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 15131:17987, ack 775, win 240,
>> options [nop,nop,TS val 182595551 ecr 3243610555], length 2856
>> 11:14:42.955158 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 6563, win 1004, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955209 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 17987:20843, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955217 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 20843:23699, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955161 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 9419, win 959, options
>> [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:42.955230 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 23699:26555, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955235 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], seq 26555:29411, ack 775, win 240,
>> options [nop,nop,TS val 182595588 ecr 3243610873], length 2856
>> 11:14:42.955164 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 12275, win 1004,
>> options [nop,nop,TS val 3243610873 ecr 182595551], length 0
>> 11:14:43.103533 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 20843, win 981, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.103678 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 23699, win 937, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.104058 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 26555, win 892, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105642 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 29411, win 847, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105643 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 32267, win 803, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105644 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 35123, win 791, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105833 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 37979, win 747, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.105883 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 39229, win 727, options
>> [nop,nop,TS val 3243611022 ecr 182595588], length 0
>> 11:14:43.208484 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [.], ack 39229, win 1025,
>> options [nop,nop,TS val 3243611120 ecr 182595588], length 0
>> 11:14:43.220453 IP6 2607:f2f8:a8e0::2.22592 >
>> 2001:41d0:1007:1c79::101.https: Flags [F.], seq 775, ack 39229, win
>> 1026, options [nop,nop,TS val 3243611130 ecr 182595588], length 0
>> 11:14:43.220490 IP6 2001:41d0:1007:1c79::101.https >
>> 2607:f2f8:a8e0::2.22592: Flags [.], ack 776, win 240, options
>> [nop,nop,TS val 182595655 ecr 3243611130], length 0
>>
>>
>> * Port 80 on non-working ipv6 container (2001:41d0:1007:1c79::102)
>>
>> ** host
>> ~# tcpdump -i vmbr0 'ip6'
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode listening on vmbr0, link-type EN10MB (Ethernet), capture size
>> 262144 bytes
>> 11:17:26.256927 IP6 fe80::caf9:f9ff:fe58:fb00 > ff02::5: OSPFv3,
>> Hello, length 36
>> 11:17:26.557307 IP6 fe80::caf9:f9ff:fe58:fb00.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:17:29.002166 IP6 2607:f2f8:a8e0::2.35835 >
>> 2001:41d0:1007:1c79::102.http: Flags [S], seq 2186876053, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243776920 ecr 0], length
>> 0
>> 11:17:31.021729 IP6 2607:f2f8:a8e0::2.35836 >
>> 2001:41d0:1007:1c79::102.http: Flags [S], seq 27613106, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243778940 ecr 0], length
>> 0
>> 11:17:31.366822 IP6 fe80::6e50:4dff:feae:a900.2029 > ff02::66.2029:
>> UDP, length 72
>> 11:17:33.430904 IP6 2607:f2f8:a8e0::2.35838 >
>> 2001:41d0:1007:1c79::102.https: Flags [S], seq 4010892160, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243781350 ecr 0], length
>> 0
>> 11:17:35.664950 IP6 fe80::caf9:f9ff:fe58:fb00 > ff02::5: OSPFv3,
>> Hello, length 36
>> 11:17:36.029938 IP6 2607:f2f8:a8e0::2.35840 >
>> 2001:41d0:1007:1c79::102.https: Flags [S], seq 1369235300, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243783940 ecr 0], length
>> 0
>> 11:17:41.160933 IP6 fe80::caf9:f9ff:fe58:fb00.2029 > ff02::66.2029:
>> UDP, length 72
>>
>> ** container
>> ~# tcpdump -i eth0 ip6
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode listening on eth0, link-type EN10MB (Ethernet), capture size
>> 262144 bytes
>> 11:17:29.002199 IP6 2607:f2f8:a8e0::2.35835 >
>> 2001:41d0:1007:1c79::102.http: Flags [S], seq 2186876053, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243776920 ecr 0], length
>> 0
>> 11:17:31.021757 IP6 2607:f2f8:a8e0::2.35836 >
>> 2001:41d0:1007:1c79::102.http: Flags [S], seq 27613106, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243778940 ecr 0], length
>> 0
>> 11:17:33.430934 IP6 2607:f2f8:a8e0::2.35838 >
>> 2001:41d0:1007:1c79::102.https: Flags [S], seq 4010892160, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243781350 ecr 0], length
>> 0
>> 11:17:36.029967 IP6 2607:f2f8:a8e0::2.35840 >
>> 2001:41d0:1007:1c79::102.https: Flags [S], seq 1369235300, win 65535,
>> options [mss 1440,nop,wscale 6,sackOK,TS val 3243783940 ecr 0], length
>> 0
More information about the pve-user
mailing list