Why i'm getting multicast traffic from eth1/vmbr1 but there is no cluster running?
Host has two interfaces: eth1(vmbr1) and eth3(vmbr0).
Host was upgraded from 1.9. to 2.0 a few months ago. Before upgrade host was as master without any additional slave nodes. Is there any old config somewhere and it's picking up something?
This is from firewall - alerts every ~2 minutes:
Host has two interfaces: eth1(vmbr1) and eth3(vmbr0).
Host was upgraded from 1.9. to 2.0 a few months ago. Before upgrade host was as master without any additional slave nodes. Is there any old config somewhere and it's picking up something?
This is from firewall - alerts every ~2 minutes:
Code:
2012-06-19 22:08:08 alert IP spoofing! From 100:0:600:0:e0db:100:: to ff02::1, proto 58 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:08:08 alert IP spoofing! From 0.0.0.0 to 224.0.0.1, proto 2 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:06:04 alert IP spoofing! From ::100:0:0:0 to ff02::1, proto 58 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:06:04 alert IP spoofing! From 0.0.0.0 to 224.0.0.1, proto 2 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:03:59 alert IP spoofing! From 3f06:5081:c0a8:63c8:100:: to ff02::1, proto 58 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:03:59 alert IP spoofing! From 0.0.0.0 to 224.0.0.1, proto 2 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:01:53 alert IP spoofing! From ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff to ff02::1, proto 58 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 22:01:53 alert IP spoofing! From 0.0.0.0 to 224.0.0.1, proto 2 (zone xyz, int ethernet0/5). Occurred 1 times.
2012-06-19 21:59:48 alert IP spoofing! From c0a8:102:c0a8:1fc:a49d:35:2f:9740 to ff02::1, proto 58 (zone xyz, int ethernet0/5). Occurred 1 times.
Code:
tcpdump -i eth1 -vvvv
tcpdump: WARNING: eth1: no IPv4 address assigned
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
22:43:34.372228 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 32, options (RA))
0.0.0.0 > all-systems.mcast.net: igmp query v2
22:43:34.372242 IP6 (hlim 1, next-header Options (0) payload length: 32) 3f06:55b5:c0a8:63c8:c0a8:102:c41f:1f46 > ip6-allnodes: HBH (rtalert: 0x0000) (pad1)(pad1)[icmp6 sum ok] ICMP6, multicast listener query, length 24max resp delay: 1000 addr: ::
Code:
proxmox-virt01:~# pveversion -v
pve-manager: 2.1-1 (pve-manager/2.1/f9b0f63a)
running kernel: 2.6.32-12-pve
proxmox-ve-2.6.32: 2.1-68
pve-kernel-2.6.32-4-pve: 2.6.32-33
pve-kernel-2.6.32-11-pve: 2.6.32-66
pve-kernel-2.6.32-12-pve: 2.6.32-68
pve-kernel-2.6.32-7-pve: 2.6.32-55+ovzfix-2
lvm2: 2.02.95-1pve2
clvm: 2.02.95-1pve2
corosync-pve: 1.4.3-1
openais-pve: 1.1.4-2
libqb: 0.10.1-2
redhat-cluster-pve: 3.1.8-3
resource-agents-pve: 3.9.2-3
fence-agents-pve: 3.1.7-2
pve-cluster: 1.0-26
qemu-server: 2.0-39
pve-firmware: 1.0-16
libpve-common-perl: 1.0-27
libpve-access-control: 1.0-21
libpve-storage-perl: 2.0-18
vncterm: 1.0-2
vzctl: 3.0.30-2pve5
vzprocps: 2.0.11-2
vzquota: 3.0.12-3
pve-qemu-kvm: 1.0-9
ksm-control-daemon: 1.1-1
Code:
# network interface settings
auto lo
iface lo inet loopback
auto vmbr0
iface vmbr0 inet static
address 192.168.1.2
netmask 255.255.255.0
gateway 192.168.1.254
bridge_ports eth3
bridge_stp off
bridge_fd 0
auto vmbr1
iface vmbr1 inet manual
bridge_ports eth1
bridge_stp off
bridge_fd 0
bridge_maxwait 0