Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
The FDP team is no longer accepting new bugs in Bugzilla. Please report your issues under FDP project in Jira. Thanks.

Bug 2224657

Summary: OVS Mirror doesn't work as expected when both select-dst-port and select-src-port are selected
Product: Red Hat Enterprise Linux Fast Datapath Reporter: ovs-bugzilla <ovs-bugzilla>
Component: openvswitch2.17Assignee: Mike Pattrick <mpattric>
Status: CLOSED ERRATA QA Contact: Zhiqiang Fang <zfang>
Severity: high Docs Contact:
Priority: unspecified    
Version: RHEL 8.0CC: ctrautma, jhsiao, ralongi, zfang
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openvswitch2.17-2.17.0-108.el8fdp Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-10-18 00:14:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description ovs-bugzilla 2023-07-21 20:36:11 UTC 
+++ This bug was initially created as a clone of Bug #2155579 +++

Created attachment 1933931 [details]
ovsmirrortest.diff

Created attachment 1933931 [details]
ovsmirrortest.diff

Description of problem:
While trying to add a test case related to OVS Mirror in OVN (ovn.at) we are seeing an issue when both 'select-dst-port' and 'select-src-port' are filled.

The test we are trying is very simple.

Send an ICMP echo request packet and expect an ICMP echo reply packet.
An OVS mirror is created and expected to mirror both the request and reply packets. (So both select-dst-port' and 'select-src-port' are filled appropriately)

While both ICMP request and reply we see are present (i.e. ping works fine)
But both packets are NOT getting mirrored. 
We see ONLY the ICMP request packet getting mirrored.

Alternatively if we select either 'select-dst-port' or 'select-src-port' those packets get mirrored separately well.
But when both are selected we see only the request packet getting mirrored.

I have attached the test case we used to test it and it has the OVS commands which is used to create mirrors. Please check it.

Further we also tried to create a similar environment on the actual HW setup and we do see the same issue there. So, its not just failing in test environment alone.

Version-Release number of selected component (if applicable):


How reproducible:
Please find attached the diff having the test case which uses OVS commands to create mirrors and verify it.

Actual results:
Only echo request packet is getting mirrored.

Expected results:
Both echo request and reply packets needs to be mirrored.

Additional info:
Comment 1 ovs-bugzilla 2023-07-21 20:36:15 UTC 
* Fri Jul 21 2023 Open vSwitch CI <ovs-ci> - 2.17.0-108
- Merging upstream branch-2.17 [RH git: 6ec8574cf8]
    Commit list:
    a1ca9e589f ofproto-dpif-upcall: Mirror packets that are modified. (#2155579)
Comment 5 Zhiqiang Fang 2023-10-02 17:13:56 UTC 
The issue has been reproduced on openvswitch2.17-2.17.0-106.el8fdp.x86_64,
and the fix has been verified on openvswitch2.17-2.17.0-123.el8fdp.x86_64.

The reproducer and the logs can be found in the attachment:
https://bugzilla.redhat.com/attachment.cgi?id=1991636
Comment 7 errata-xmlrpc 2023-10-18 00:14:49 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (openvswitch2.17 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:5814