[4.1.0.0-3] contrail-flows with vmi-uuid option not working

[Ankit Jain]

The following cmd does not seem to be working:

contrail-flows --vmi-uuid d44a5c72-54a7-4ec7-937d-6ec28214e5ae --last 20m.

One of the analytics test cases in the sanity is failing because of this issue. Not sure if we still support this.

When I tried "contrail-flows --last 20m | grep d44a5c72-54a7-4ec7-937d-6ec28214e5ae" I could see the expected output as shown below:

[SRC-VR:nodei1/192.168.192.1] ingress pass (2017 Nov 22 17:17:20.774216 -- 2017 Nov 22 17:20:21.861708) ICMP default-domain:ctest-AnalyticsTestSanityWithMin-53998245:ctest-vn1-6
9465895:88.155.120.3:20956: [SRC VMI UUID:default-domain:ctest-AnalyticsTestSanityWithMin-53998245:d44a5c72-54a7-4ec7-937d-6ec28214e5ae] ---> default-domain:default-project:ip-fa
bric:88.155.120.2:0 [DST-VR:192.168.192.1] <4 P (336 B)> : SG:00000000-0000-0000-0000-000000000004 ACL:00000000-0000-0000-0000-000000000004 ca29b371-5041-4315-8ddb-c20b287c23d9
[SRC-VR:nodei1/192.168.192.1] ingress pass (2017 Nov 22 17:17:48.037033 -- 2017 Nov 22 17:20:48.202455) UDP default-domain:ctest-AnalyticsTestSanityWithMin-53998245:ctest-vn1-69
465895:88.155.120.3:33886: [SRC VMI UUID:default-domain:ctest-AnalyticsTestSanityWithMin-53998245:d44a5c72-54a7-4ec7-937d-6ec28214e5ae] ---> default-domain:ctest-AnalyticsTestSan
ityWithMin-53998245:ctest-vn1-69465895:88.155.120.2:53 [DST-VR:192.168.192.1] <1 P (76 B)> : SG:00000000-0000-0000-0000-000000000003 ACL:00000000-0000-0000-0000-000000000001 0a26
e183-b772-4d84-8a2f-aaee51127b00
[SRC-VR:nodei1/192.168.192.1] ingress pass (2017 Nov 22 17:17:49.460716 -- 2017 Nov 22 17:20:49.604598) UDP default-domain:ctest-AnalyticsTestSanityWithMin-53998245:ctest-vn1-69
465895:88.155.120.3:49246: [SRC VMI UUID:default-domain:ctest-AnalyticsTestSanityWithMin-53998245:d44a5c72-54a7-4ec7-937d-6ec28214e5ae] ---> default-domain:ctest-AnalyticsTestSan
ityWithMin-53998245:ctest-vn1-69465895:88.155.120.2:53 [DST-VR:192.168.192.1] <1 P (86 B)> : SG:00000000-0000-0000-0000-000000000003 ACL:00000000-0000-0000-0000-000000000001 f25e
ce31-c542-4bf3-8f91-e50bfafddcb7

As per the mail communication:

Sudheendra Rao
   |
Fri 24-11-2017 15:58
We don’t have equivalent of contrail-flows command for sessions, may be that is the reason to retain contrail-flows command?

Ashok Singh R
   Reply all|
Wed 22-11-2017 22:38
To:
Sudheendra Rao;
Sandip Dey;
Ankit Jain (MVI);
Anish Mehta
Cc:
Aswani Kumar Gaddam;
Hari Prasad Killi
Label: Corporate Default - 2 Years Retention (2 years) Expires: 22-11-2019 22:38
Hi Ankit/Sudheendra,

Export of flows from agent has been stopped from this commit https://github.com/Juniper/contrail-controller/commit/2f0051131bfa8a3cd028b8e5f742f7f5cd9ae407

Remove export of FlowLog messages from agent · Juniper/contrail-controller@2f00511
github.com
With the introduction of export of sessions, flow need not be logged Change-Id: Ie63b99bd95ab0356ba13f76fb49db540db3ac436 Partial-Bug: #1639789 Implements: blueprint Session Collection

I am assuming 4.1.0.0-3 which Ankit is using does not have the above commit. I am not able find source code for 4.1.0.0-3 to confirm. Is it possible to test in latest available R4.1 build?

Regarding flow-table and contrail-flows, we need to check with Analytics team. I don’t have any update on why they are still retained (if they are still retained)

Regards,
Ashok

[mkheni (mkheni)]

For 4.1, as a workaround, to use vmi-uuid option, provide full vmi with vmi-uuid option (in <domain>:<project>:<vmi_uuid> format)