[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openvswitch-discuss
Subject:    [ovs-discuss] help in understanding drop rules which came with out setting any manual drop rule.
From:       rprice () nicira ! com (Reid Price)
Date:       2013-06-25 18:38:20
Message-ID: CAJ-zNLDA4TZdKWEKLJhCOeW+kEqef62w2w0MOnnfF6kedCkE-g () mail ! gmail ! com
[Download RAW message or body]

For what it's worth, you are not seeing a drop "rule", you are seeing no
action being taken for this packet.

There is one way ([#1], below), and 3 or 4 typical situations in which
packets have no action:

1) Matching a flow that results in no actions (or equivalently,
'actions=drop', which is an alias for 'actions=')
2) Matching a flow that results in the NORMAL action, when L2 learning
indicates the packet should be dropped [Equivalent to (#1)]
3) Matching "no flow at all", which matches the default flow - with switch
in fail-mode=...
3a) fail-mode=secure [Equivalent to (#1)]
3b) fail-mode=standalone [Equivalent to (#2)]

  -Reid


On Tue, Jun 25, 2013 at 9:14 AM, Ben Pfaff <blp at nicira.com> wrote:

> On Tue, Jun 25, 2013 at 12:43:53PM +0530, kevin parker wrote:
> >       How can drop rule come with out setting any drop rule manually.
>
> Hard to guess, since you didn't tell us anything about how you've
> configured Open vSwitch.
> _______________________________________________
> discuss mailing list
> discuss at openvswitch.org
> http://openvswitch.org/mailman/listinfo/discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/discuss/attachments/20130625/c696aa41/attachment.htm>

[prev in list] [next in list] [prev in thread] [next in thread]