Comment 3 for bug 1758037

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

TL;DR:
- test needs no change to filter
- did this work ever before (happend on 3.6 as well for me)?
- if you retest use >= 4.0.0-1ubuntu6
- did you see bad file descriptor messages, does it help you to see what we need?

After checking the default rules, the only thing your case adds tothe default "clean-traffic" rule is:
   <filterref filter="no-other-l2-traffic" />
This statement was in there by default on older versions IIRC.
But I realized this isn't needed - the default works as well to trigger the issue.

And on the guest the interface gets
 <filterref filter='clean-traffic'>
   <parameter name='CTRL_IP_LEARNING' value='dhcp'/>
 </filterref>

That guest change is enough to trigger the reported error.
I can trigger the same on 3.6.0-1ubuntu6.2 btw did this work for you in former releases or is this a new test?
This is interesting as the offending patch your fix is referring to lists 3.9

Did you see that message when you trigger the issue?
libvirtd[3593]: Warning: Kernel filter failed: Bad file descriptor
libvirtd[3593]: 2018-03-22 12:59:59.774+0000: 13506: error : virNWFilterSnoopDHCPOpen:1133 : internal error: pcap_setfilter: can't remove kernel filter: Bad file descriptor

Maybe that helps you to spot the right fix?

I can at least help you with the build issues.
I have realized your test is rather old 2018-02-28
I have packaged quite a lot of stable fixes in the meantime.
This does - among others - container the patch you referred to.

So if you retest with libvirt >= 4.0.0-1ubuntu6 you have the requested change.
Unfortunately in my sniff test this didn't help - but then I never used that in my environment, maybe it is good in your which might be prepared for this functionality.

Incomplete until retested with the version containing the suggested fix.