https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETVIRT-415 netvirt <p>Steps followed : <br/> 1.Sending the Rogue NA packets from VM1 to VM2 using scapy tool and packets are not dropping at table=40 </p> <p> ODL </p> <div class='table-wrap'> <table class='confluenceTable'><tbody> <tr> </tr> </tbody></table> </div> <p>VM1(Attacker VM) --&gt; VM2 (Victim VM)</p> <p>VM details and default route entry 'fe80::f816:3eff:fe03:6107' :</p> <p>Attack VM1 ipv6 address : '2001:db8:2fff:0:f816:3eff:fe85:de74'<br/> Mac address : 'fa:16:3e:85:de:74'<br/> Victim VM2 ipv6 address : '2001:db8:2fff:0:f816:3eff:fee9:9284'<br/> Mac address : 'fa:16:3e:e9:92:84'<br/> Target ipv6 address ( Default -route : tgt='fe80::f816:3eff:fe03:6107' and its mac address : fa:16:3e:03:61:07</p> <p>1. Before sending the rouge NA packets to Victim VM </p> <p>root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr fa:16:3e:03:61:07 router REACHABLE</p> <p>2. After Sending the NA from VM1 to VM2 with target spoof mac using the scapy tool. 'fe80::f816:3eff:fe03:6107' and changing the mac address : 00:00:00:00:00:0c</p> <p>And in VM2 ( Victim VM) is compromising with spoof target mac address : <br/> root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr 00:00:00:00:00:0c DELAY<br/> root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr 00:00:00:00:00:0c STALE<br/> root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr 00:00:00:00:00:0c DELAY<br/> root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr 00:00:00:00:00:0c DELAY<br/> root@ubuntu-sg:~# ip neighbor show<br/> 2001:db8:2fff:0:f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe85:de74 dev ens3 lladdr fa:16:3e:85:de:74 STALE<br/> fe80::f816:3eff:fe03:6107 dev ens3 lladdr 00:00:00:00:00:0c DELAY</p> <p>its not dropping at table=40 </p> <p>Attaching the packet capture at both the VMs.</p> <p>Operating System: All<br/> Platform: All</p> NETVIRT-415

IPv6 Service :Rogue Neighbor Advertisement packets are not dropping at table=40

Bug Medium Resolved Won't Do Sridhar Gaddam mahesh loni Tue, 10 Jan 2017 09:12:15 +0000 Thu, 5 Apr 2018 21:51:49 +0000 Thu, 5 Apr 2018 21:51:49 +0000 Boron General 0 1 <p>Attachment test-pcap.7z has been added with description: both the VMs pcaps are attached</p> <p>This is on the legacy netvirt which is deprecated.</p> Development External issue ID 7503 External issue URL Rank 0|i01rnr: