similar to: Promiscuous mode

Hi Everyone, In order to prevent DomU from entering promiscuous mode, is it just a matter of adding these 2 rules when the vif is created? # Accept packets leaving the bridge going to the domU only if # the destination IP for that packet matches an authorized IPv4 # address for that domU. iptables -A FORWARD -m physdev --physdev-out vif1.0 \ --destination 216.146.46.43 -j ACCEPT

Can I ask you a quick question? I''ve set up bridge-networking for Xen 4.1 (xen-4.1.3-25.el5.22) and networking was being done properly for Dom0 and DomUs. However, I noticed that Dom0 receives a lot of network interrupts or network packets even when they were not actually meant for either Dom0 or DomU. Now, here are the questions: 1. Dom0 is acting in promiscuous mode, right? 2. If

Hi, I saw a nice mail about bridging in Xen at http://article.gmane.org/gmane.comp.emulators.xen.user/9538. Can I ask you a quick question? I''ve set up bridge-networking for Xen 3.0and networking was being done properly for Dom0 and DomUs. However, I noticed that Dom0 receives a lot of network interrupts or network packets even when they were not actually meant for either Dom0 or DomU.

Hi Everyone, In my HVM guest''s config file, I have given my guest 3 interface. I have called them fw1, fw2 and fw3. I have joined each interface to a bridge on the Dom0. This does appear when I do a "brctl show". However, there are 3 other interfaces also added called tapx.0,tapx.1 and tapx.2 (Where x is the domain ID for the guest). Furthermore, I am only able to run

Hi Everyone, How does one install Ubuntu 10.04 DomU in PV mode when running Xen 4.0? My Dom0 is also running 10.04. Can I still use the CD? Thanks _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users

Hi Everyone, In Xen, is a DomU able to access data in RAM which a previous DomU has stored in the past, but didn''t "zero" it? I understand that this is a problem with physical disks (using phy:/), just wondering if the same stands with RAM Thanks _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com

Hi Everyone, In Xen, is a DomU able to access data in RAM which a previous DomU has stored in the past, but didn''t "zero" it? I understand that this is a problem with physical disks (using phy:/), just wondering if the same stands with RAM Thanks _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com

Hi Everyone, I upgraded my CentOS 5.5 to Xen 3.4.2 using this guide: http://www.syntaxtechnology.com/2010/01/upgrade-xen-3-0-on-centos-5-4-x86_64-to-xen-3-4-2/ Now, using the new kernel that it gave me, the system doesn''t seem to be able to detect vt-x.. In virt-manager, Local Install Media and Network Boot are greyed out.. Any ideas? Thanks

On 03/25/09 12:30, James Carlson wrote: > Girish Moodalbail writes: > >> bash-3.2# dladm show-link >> LINK CLASS MTU STATE PROMISC OVER >> e1000g0 phys 1501 up off -- >> e1000g1 phys 1502 up on -- >> > > That (plus or minus some column alignment) seems

hi @all sometimes after a reboot the complete network is down the difference in the logs shows: in a failed reboot the eth0 does not entering promiscuous mode; in both cases the eth0 gets sucessful its ip configuration via dhcp - any idea ? the nic is a 3com 3c905C-TX/TX-M and the configuration is a suse 9.3 with xen-kernel 2.6.11.4-21.10-xen and xen 2.0.5.c ----------------[ failed reboot ]

Good day. Found strange behavior in PV-domains. Application like tcpdump or iftop require promiscuous mode for interface. And this feature is disabled by default, as I understand. message from iftop: pcap_open_live(eth0): eth0: You don''t have permission to capture on that device (socket: Address family not supported by protocol) As I understand promiscuous:on in other-config for vif

If a DomU was compramised, could the Dom0 or other DomUs be compramised? I guess I''m trying to work out how much isolated Xen gives.. Thanks _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users

Hi, I hope someone can help me, I cannot seem to get a system's ethernet interface to correctly work in promiscuous mode... I have a Centos 6.4 system with 2 bnx2 interfaces on it. I have set up eth1 in promiscuous mode and am sending traffic to it using the port mirroring configuration on a Nortel 3510-24T switch. The switch reports that it is sending a fair amount of traffic to the

Hi Everyone, I am going to get a storage server which will be connected to my Xen hosts via iSCSI/Ethernet. I wish to use LVM for the DomU disks. The storage server will have a RAID10 array, and 2 Xen hosts will connect to this (Each will have a 50% share of the RAID10 array, space wise). What is the best way to go about this? Should I: a) Split the RAID10 array into 2 partition on the

Hi there -- I want to have eth1 on my system run in promiscuous mode. I modified the /etc/sysconfig/network-scripts/ifcfg-eth1 file to read as follows: DEVICE=eth1 BOOTPROTO= ... ONBOOT= TYPE=Ethernet ... I reboote the system and when I did an /sbin/ifconfig, eth1 appeared without an ip address. I did a check in the /var/log/messages file and while eth0 is in promiscuous mode, eth1 does not

Hello, I have been using the bridging facilities provided by Linux (vanilla 2.6.7 SMP with UML skas host patch applied) to bridge a regular physical ethernet network (on interface eth0) with a virtual network (on interface tap0, cf uml_switch, http://user-mode-linux.sourceforge.net/networking.html). A couple of virtual machines (run using user-mode linux, a tool that enables you to run linux

Hi, I am trying to set up a uPnP server on a Linux box (Debian Sarge Stable kernel 2.6.8). uPnP works using multicast packages for locating servers. This does however seem to fail unless I set the relevant NIC in promiscuous mode. If I do so, it works well. I have added ip route add 224.0.0.0/4 dev eth0 and echo 1 >/proc/sys/net/ipv4/ip_forward and the kernel is set up to enable

As a heads up to everyone, VMware requires you to take special precautions when trying to put a virtual nic into promiscuous mode, which is required for Xen networking to work. I spent a fair amount of time diagnosing Xen network problems when it wasn''t Xen at all. As I was just beginning to learn Xen, I was convinced it was something I was doing wrong, when it wasn''t at

Hi, I am looking for some direction on how to configure KVM networking so that a promiscuous bridge/host nic/guest nic allows two different network monitoring packages to sniff the same physical traffic. The idea is to run a commercial package on the CentOS 6.5 host and Snort, via Security Onion, on the guest, both being fed by a physical switch SPAN or physical firewall TAP. The host has two

Hi Everyone, This is going to sound silly but... I''m just off the phone with a Microsoft SPLA reseller. They sell licenses to run Microsoft software in a hosted environment. I was asking about obtaining Windows licenses to run on my Xen VPS hosting solution. Maybe there is a big misunderstanding, but I''m faily sure she said that it was illegial for me to rent out Xen