• Adding a WAN port and a LAN port, running l2_learning, and DHCPing from a machine connected to the LAN port should work. You could simplify this even more by running forwarding.hub –proactive or whatever that is. If this doesn’t work, I think something strange is happening. I’d run Wireshark or something on the interfaces and see what’s…[Read more]

  • 1. As far as using a second OVS just to assign it an IP… okay. Though this isn’t especially necessary. If you have a single OVS, add the WAN port to it, have flow rules to allow the local port to communicate with the WAN port, and then run a DHCP client on the local port, it’ll work. Maybe your way is slightly easier.

    2. Yeah. So when…[Read more]

  • 1) Why have two OVS instances? Why not just one? And why is connecting to the internet any different than connecting to another host? You might have good answers to these questions, but I don’t think you’ve told me what they are.

    2) I am suggesting that you *modify* the proxy to do rate limiting or whatever you want. What you’re proposing…[Read more]

  • You could intercept the HTTP flows themselves. But why not just use a proxy server to this?

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 3 days, 2 hours ago

    Ah. Your hosts quite possibly don’t have the routing entries they need. You may well have one host with an entry only for 192.168.1.x, and another with only an entry for 192.168.2.x, etc. — a /24 that they happen to be on, but the other hosts are NOT on. Or they may want a gateway or something. Make sure they’re configured with just…[Read more]

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 3 days, 2 hours ago

    Before ICMP, you’d expect to see ARP. So the big question is… are you seeing the ARP packets? You should be able to check the ARP tables on both hosts, and you’d expect to *not* see an entry for the other IP, since it seems like it’s not working. So where *are* the ARP packets going (or not going)?

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 3 days, 5 hours ago

    Have you tried one of the included forwarding components, like forwarding.l2_learning? forwarding.hub? Do they work?

    Have you tried monitoring the traffic entering the switch ports with Wireshark? Can you see it exiting?

  • A not super-secure but practical way to do this that I’ve used is to monitor/interpose on DNS. When someone looks up badsite.com, you will grab the reply. You can either install rules for all the IPs it returns, or cut down the reply to have fewer results so you don’t need to install as many rules. This doesn’t help for times when a single…[Read more]

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 3 days, 9 hours ago

    Glad to hear you got OVS compiling. Hope it works out.

    I hope you’ve submitted info on the changes you needed to make somewhere!

  • Yeah, that sounds pretty weird to me too. You’re checking core.openflow_discovery.adjacency or whatever?

    I might try just watching LinkEvents and building your own adjacency list and seeing if it looks like you expect.

  • A first observation is that your MAC example doesn’t actually include the enqueue action.

    Second, Ethernet addresses in POX are of the EthAddr class (pox.lib.addresses.EthAddr) as mentioned in the manual (“Working with Addresses”). Sometimes strings work, but that can’t be relied upon. Try setting, for example, msg.match.dl_dst =…[Read more]

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 1 week, 3 days ago

    Here’s a thread where OVS on OpenWRT is discussed:

    https://mailman.stanford.edu/pipermail/openflow-discuss/2014-April/005309.html

    It’s low on technical details, but you might ask. You also might search the openflow-discuss archives, because I think there may have been other mentions.

    As far as the reference switch, this was done in the context…[Read more]

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 1 week, 4 days ago

    People have gotten OVS running on OpenWRT. Alison Chan has been posting about her experience with it recently on the openflow-discuss mailing list.

    Assuming you’re using Pantou with the reference OpenFlow switch… there were actually some QoS extensions to OpenFlow developed in the context of the reference switch, and I think these may actually…[Read more]

  • Murphy replied to the topic writing new application in NOX in the forum NOX 1 week, 5 days ago

    Usually you wouldn’t execute .libs/nox_core directly and would execute nox_core in the parent (non-hidden) directory. Does that not work either?

    I assume you’re using current NOX here (verity). In that case, your best option for support is probably making a github issue.

  • Murphy McCauley posted a new activity comment 1 week, 5 days ago

    In reply to: 陈品殿 posted an update @murphy hi,dear Mr Murphy,now I have met some problems and I hope you can give me some advice. Now I am studying how to use queue to make slices in openflow, and I refered the web as below: View

    Good luck.

    I understand you’ve got the reference switch working, but just wanted to point out that there are people using OVS on wireless devices (and getting large performance benefits). For example, see the following from just today:

    https://mailman.stanford.edu/pipermail/openflow-discuss/2014-April/005309.html

  • Murphy McCauley posted a new activity comment 1 week, 6 days ago

    In reply to: 陈品殿 posted an update @murphy hi,dear Mr Murphy,now I have met some problems and I hope you can give me some advice. Now I am studying how to use queue to make slices in openflow, and I refered the web as below: View

    I don’t really know. This page is several years old and is written about features specific to the reference datapath which I am not particularly familiar with and which I believe is unmaintained. You might be able to find someone more familiar on the openflow-discuss mailing list. You might also consider using Open vSwitch.

  • Murphy replied to the topic POX and bro-ids integration in the forum POX 1 week, 6 days ago

    I don’t know that much about Bro. Does it have rate-limiting capabilities of its own? My guess is that in such a scenario, it would usually be used to do classification, and the classification would be used to inform a separate rate-limiting mechanism. For things like you mentioned (IP address and port), you wouldn’t even necessarily need Bro,…[Read more]

  • Murphy replied to the topic Remote quueue configuration in the forum POX 1 week, 6 days ago

    The disconnecting problem is quite possibly that you’re blocking the POX cooperative thread for too long, which is making the controller appear unresponsive to the switches, and the switches are disconnecting. The root of this is that you’re using subprocess.call() which blocks until the command completes. Using a different method to run the…[Read more]

  • Murphy replied to the topic Remote quueue configuration in the forum POX 2 weeks, 2 days ago

    If you run the command *outside* of POX (just from the commandline), does the switch stay connected?

  • Glad to hear you got it working. It’s possible the POX wiki would benefit from a bit more discussion of PyPy…

  • Load More