On Fri, Nov 05, 2010 at 06:22:07PM +0100, Vladimir Ostrovskiy wrote: > tcpdump -nvi vic1 -X ip proto 47 > > 18:20:27.697032 gre 10.163.0.8 > 10.163.0.162: [] gre-proto-0x8847 (DF) (ttl > 255, id 276, len 130) > 0000: 4500 0082 0114 4000 ff2f 6449 0aa3 0008 e.....@./dI.#.. > 0010: 0aa3 00a2 0000 8847 032c 91ff 0016 4d40 .#."...G.,...M@ > 0020: 17f3 0050 5601 009e 8100 05e6 0800 4500 .s.PV......f..E. > 0030: 0054 6891 0000 ff01 3d28 0aa3 00a2 0aa3 .Th....=(.#.".# > 0040: 0008 0800 17dc c975 0000 4cd4 3cdb 000a .....\Iu..LT<[.. > 0050: a1f1 0809 0a0b 0c0d 0e0f 1011 1213 1415 !q.............. > 0060: 1617 1819 1a1b ...... > > tcpdump -nvi gre0 -X > > 18:20:27.697069 MPLS(label 13001, exp 0, ttl 255) > 0000: 032c 91ff 0016 4d40 17f3 0050 5601 009e .,....@.s.pv... > 0010: 8100 05e6 0800 4500 0054 6891 0000 ff01 ...f..E..Th.... > 0020: 3d28 0aa3 00a2 0aa3 0008 0800 17dc c975 =(.#.".#.....\Iu > 0030: 0000 4cd4 3cdb 000a a1f1 0809 0a0b 0c0d ..LT<[..!q...... > 0040: 0e0f 1011 1213 1415 1617 1819 1a1b 1c1d ................ > 0050: 1e1f 2021 2223 2425 2627 2829 2a2b 2c2d .. !"#$%&'()*+,- > 0060: 2e2f 3031 3233 3435 3637 ./01234567 >
OK, those packets look like PWE3 encapsulated ethernet frames. mpe(4) only supports L3 IP/IPv6 traffic for now. So the only way out here is to use a L3 MPLS VPN. > > On Fri, Nov 5, 2010 at 6:13 PM, Stuart Henderson <s...@spacehopper.org>wrote: > > > In gmane.os.openbsd.misc, you wrote: > > > see pcap's attached, > > > > > > On Fri, Nov 5, 2010 at 4:08 PM, Claudio Jeker <cje...@diehard.n-r-g.com > > >wrote: > > > > > >> On Fri, Nov 05, 2010 at 03:43:07PM +0100, Vladimir Ostrovskiy wrote: > > >> > Hello All, > > >> > a question: > > >> > > >> Please just include tcpdump -nvi vic1 -X and tcpdump -nvi gre0 -X > > output. > > >> Tcpdump is in base for a reason. Include route -n show -mpls as well > > >> please. > > >> > > >> AF 33 is MPLS and gre(4) so that seems to be OK. > > >> -- > > >> :wq Claudio > > > > > > [demime 1.01d removed an attachment of type application/octet-stream > > which had a name of gre0-capture.pcap] > > > > > > [demime 1.01d removed an attachment of type application/octet-stream > > which had a name of vic1-capture.pcap] > > > > > > > > > > Just include the output from the commands Claudio showed, pasted into the > > email body (i.e. in-line text, not as an attachment). > -- :wq Claudio
