ovs-agent error while processing VIF ports on compute

[peng fei wang]

I am using the M code on Centos7.2

and recently found the following error in compute node /var/log/neutron/openvswitch-agent.log

it seems that for each serveral weeks ,there will be such an error.

--------------------------------------------------------
.ovs_neutron_agent [req-ae1d74ba-967d-48f2-8ec1-2dcfe7f20991 - - - - -] Error while processing VIF ports
.ovs_neutron_agent Traceback (most recent call last):
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py", line 2037, in rpc_loop
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py", line 1651, in process_network_ports
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 292, in setup_port_filters
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 147, in decorated_function
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 172, in prepare_devices_filter
.ovs_neutron_agent File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
.ovs_neutron_agent self.gen.next()
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 128, in defer_apply
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 833, in filter_defer_apply_off
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 818, in _remove_conntrack_entries_from_sg_updates
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 775, in _clean_deleted_sg_rule_conntrack_entries
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_conntrack.py", line 78, in delete_conntrack_state_by_rule
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ip_conntrack.py", line 72, in _delete_conntrack_state
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 116, in execute
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 102, in execute_rootwrap_daemon
.ovs_neutron_agent File "/usr/lib/python2.7/site-packages/oslo_rootwrap/client.py", line 128, in execute
.ovs_neutron_agent res = proxy.run_one_command(cmd, stdin)
.ovs_neutron_agent File "<string>", line 2, in run_one_command
.ovs_neutron_agent File "/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in _callmethod
.ovs_neutron_agent raise convert_to_error(kind, result)
.ovs_neutron_agent RemoteError:
.ovs_neutron_agent ---------------------------------------------------------------------------
.ovs_neutron_agent Unserializable message: ('#ERROR', FilterMatchNotExecutable())
.ovs_neutron_agent ---------------------------------------------------------------------------

[root@compute1 ~]# rpm -qa|grep openvswitch
openvswitch-2.5.0-2.el7.x86_64
openstack-neutron-openvswitch-8.1.2-el7.centos.noarch
python-openvswitch-2.5.0-2.el7.noarch
[root@compute1 ~]#

-------------------------------------------------------------------------

anyone run into this

[Kevin Benton (kevinbenton)]

It's trying to execute the 'conntrack' binary. Do you have it on your system?

[peng fei wang (wpf)]

Appreciated.

Failed to find the 'conntrack' in compute node, I will try to install it and verify it.

Do you know how to trigger it? create a new vm?

[root@compute1 ~]# which conntrack
/usr/bin/which: no conntrack in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin)
[root@compute1 ~]# exit
logout
Connection to compute1 closed.
[root@controller1 ~]# which conntrack
/usr/sbin/conntrack
[root@controller1 ~]#

[Rodolfo Alonso (rodolfo-alonso-hernandez)]

Bug closed due to lack of activity, please feel free to reopen if needed.