[FT] Error in "test_arp_spoof_doesnt_block_ipv6"

[Rodolfo Alonso]

Logs: https://404fa55dc27f44e0606d-9f131354b122204fb24a7b43973ed8e6.ssl.cf5.rackcdn.com/860639/22/check/neutron-functional-with-uwsgi/6a57e16/testr_results.html

Snippet: https://paste.opendev.org/show/bBI2hbch48bCHE9XgKYq/

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/870967

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Rodolfo Alonso <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/870967
Reason: This is not solving the issue reported

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/871101

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/871101
Committed: https://opendev.org/openstack/neutron/commit/f235ce8791ab31bac598a3ebb40fb48cf2e4d1ab
Submitter: "Zuul (22348)"
Branch: master

commit f235ce8791ab31bac598a3ebb40fb48cf2e4d1ab
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Jan 18 22:06:21 2023 +0100

    Add new debugging logs for ``ARPSpoofTestCase``

    In case of error, the class ``ARPSpoofTestCase`` now provides the IPv6
    and IPv4 neigh list of the source and destination ports.

    This patch also adds a retry branch on the ``assert_ping`` method. If
    enabled, if the first ping command fails, the method will try to execute
    it again.

    Related-Bug: #2003196
    Change-Id: I4d1a6c799004339489fe35b44b7682f8f744560b

[yatin (yatinkarel)]

Seen again https://3e47488f5ba579f9e43a-ef216d720cde863031e2791348aab89c.ssl.cf1.rackcdn.com/periodic/opendev.org/openstack/neutron/master/neutron-functional-with-oslo-master/d0183c5/testr_results.html after new logs added

[Rodolfo Alonso (rodolfo-alonso-hernandez)]

Hello:

Checking the log [1], all configuration seems to be correct: the isolated OVS bridge, the network namespaces, the OF rules, the ports and the IP addresses.

The only issue I see is that the OF rules related to the ICMPv6 packages (NA, table=24) are not matched (n_packets=0). That means the ping sent from port source (2000::1) to port destination (2000::2) didn't reach the second one (at least the ND package that should trigger the NA from the destination port).

A possible optimization could be to specify, in the "ping" command, the interface to be used.

If this issue persists, we can also try installing ndisc6 (https://www.remlab.net/ndisc6/) and add extra debug logs.

Regards.

[1]https://3e47488f5ba579f9e43a-ef216d720cde863031e2791348aab89c.ssl.cf1.rackcdn.com/periodic/opendev.org/openstack/neutron/master/neutron-functional-with-oslo-master/d0183c5/testr_results.html

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/928791

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Rodolfo Alonso <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/924335

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/928791
Committed: https://opendev.org/openstack/neutron/commit/291dfe95243ef91dae0a4d64292e06213ad56125
Submitter: "Zuul (22348)"
Branch: master

commit 291dfe95243ef91dae0a4d64292e06213ad56125
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Sat Sep 7 20:36:30 2024 +0000

    Add source interface in "ping" command in ``ARPSpoofTestCase``

    All ``ARPSpoofTestCase`` tests now define the source device (using
    the IP address) to be used to execute the "ping" command.

    Related-Bug: #2003196
    Change-Id: Iace245b013e10eec323c0b58bf5cdf5ee9236338