Hello,
I am trying to use ryu + mininet + snort integration everything virtualized
on KVM
Right now my goal is:
Have a Snort machine
A mininet machine.
The mininet have the ryu controller with snort integration, and the snort
machine have pigrelay, so it will comunicate with the ryucontroler.
I created a mininet network and use hwintf.py so i could add the virtual
machine interface to mininet. This is done so this machine can comunicate
to the snort machine. i use linux brigde to get it done for KVM.
So Br1 is atached to mininet and snort machine as eth1
When i use simple switch, the machine is able to comunicate without problem
but my point is to send all packed out on this interface, like port
mirroring but from al lports, so snort can analize all traffic.
The problem is, snort does not see anything... i use this FLOW action:
actions = [parser.OFPActionOutput(out_port),
parser.OFPActionOutput(self.snort_port)]
So the controller send the packtes to the port it suposed to send and to
snort.
When i ping the snort, i receive a "DUP" packect.. so i guess it is kind of
working..
But when i ping anyhost else, nothing goes to the snort, tcpdump dont see
anything.
Does anyone knows another way of getting this kind of connectionthat i want?
Or how to fix this problem?
Thanks a lot!
------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________
Ryu-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ryu-devel
