Sample Header Ad - 728x90

Capturing lvsadm UDP traffic on the loopback interface

1 vote
1 answer
655 views
**Problem** I am unable to capture lvsadm traffic on the loopback interface. # tcpdump -i lo -n udp port 51444 -vv tcpdump: listening on lo, link-type EN10MB (Ethernet), capture size 262144 bytes **ifconfig** # ifconfig ens192: flags=4163 mtu 1500 inet 10.0.10.136 netmask 255.255.255.0 broadcast 10.0.10.255 ether 00:50:56:ce:e3:dc txqueuelen 1000 (Ethernet) RX packets 63480807660 bytes 12508576879467 (11.3 TiB) RX errors 0 dropped 2 overruns 0 frame 0 TX packets 19861938950 bytes 5978856268385 (5.4 TiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73 mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Local Loopback) RX packets 351855 bytes 1689650676 (1.5 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 351855 bytes 1689650676 (1.5 GiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 **ipvsadm commands to set up round robin load balancing to three SIEM nodes** ipvsadm -A -u 127.0.0.1:51444 -s rr -o ipvsadm -a -u 127.0.0.1:51444 -r 10.10.10.77:514 -m -w 1 ipvsadm -a -u 127.0.0.1:51444 -r 10.10.10.78:514 -m -w 1 ipvsadm -a -u 127.0.0.1:51444 -r 10.10.10.79:514 -m -w 1 # ipvsadm IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn UDP localhost:51444 rr ops -> 10.10.10.77:syslog Masq 1 0 1 -> 10.10.10.78:syslog Masq 1 0 2 -> 10.10.10.79:syslog Masq 1 0 2 **Background** I am sucessfully sending traffic to my SIEM via ipvsadm. I was able to do this on both interfaces; ens192 and interface lo. I had no issues using tcpdump to view traffic being sent via ipvsadm on interface ens192. My problem is that when i use tcpdump on interface lo I do not see any ipvsadm traffic.
Asked by brakertech (1415 rep)
Jul 2, 2018, 09:09 PM
Last activity: Jul 10, 2018, 05:59 AM