- Bird-users - Mailing Lists

LSA Update checksum breaks with large LSA Updates
by Neil Wilson 04 Jul '11

04 Jul '11

Using Bird 1.3.1 OSPF with 'rx buffer large' in the config. This test system is a couple of bird instances talking to each other. I've noticed that when LSA updates get above 4000 the checksum system seems to break. Before: Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: Scheduling routing table calculation Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: LSUPD packet received from 192.168.0.201 via eth0 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: length 3964 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: router 192.168.0.201 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: LSA Type: 0001, Id: 192.168.0.201, Rt: 192.168.0.201, Age: 0, Seq: 8000000a, Sum: 7113 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: LSACK packet sent via eth0 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: length 44 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: router 192.168.0.20 Jul 1 18:39:21 acer-aspire-5536 bird: cloudtest: LSA Type: 0001, Id: 192.168.0.201, Rt: 192.168.0.201, Age: 0, Seq: 8000000a, Sum: 7113 After: Jul 1 18:39:26 acer-aspire-5536 bird: cloudtest: LSUPD packet received from 192.168.0.201 via eth0 Jul 1 18:39:26 acer-aspire-5536 bird: cloudtest: length 4192 Jul 1 18:39:26 acer-aspire-5536 bird: cloudtest: router 192.168.0.201 Jul 1 18:39:26 acer-aspire-5536 bird: cloudtest: LSA Type: 0001, Id: 192.168.0.201, Rt: 192.168.0.201, Age: 1, Seq: 8000000a, Sum: b77a Jul 1 18:39:26 acer-aspire-5536 bird: Received bad lsa checksum from 192.168.0.201: 7ab7 4f5b The two processes then get stuck in a loop constantly requesting, updating and failing. Any ideas where the issue might lie? Rgs Neil Wilson

2 2

Allowas-in in BIRD - possible to implement?
by Adrian Czapek 04 Jul '11

04 Jul '11

Hello, I am in dire need to accept my own AS in AS-PATH from my upstream provider. Is there any way to achieve it using bird? Regards -- Adrian Czapek

3 4

Hold timer expired: difference between Received/Error
by Arnold Nipper 01 Jul '11

01 Jul '11

Quick question: what's the difference between 2011-04-29 18:24:36 <RMT> XXXX: Received: Hold timer expired 2011-04-30 00:05:42 <RMT> YYYY: Error: Hold timer expired We are running BIRD 1.2.5 ready. TIA and best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 152 53717690 fax: +49 6224 9259 333

3 8

Fwd: Re: ospf loading for ever...
by Tapio Haapala 29 Jun '11

29 Jun '11

I resend this because I forgot complete subscription first. So if this is duplicate message I am sorry. But to the problem: I have similar issue but I dont have multiple ip addresses or mtu problem. Looks that on some cases another side router stuck to loading state and another side is on full state. On this point I must restart this side what says that it is on full state. So looks that some how that router what ways "loading" wait something from that router what says "full" but because this "full" it does not send it any more... Or something :) wierd thing is that even stop and start this router what is on loading state it not help. I must stop and start this router what is on full state. This was reason why I just upgrade my bird on routers to 1.3.1 but looks that it does not help for this problem. This problem is random but when my network comes larger problems appears more often. I have ~170 routes from ospf and I use hello 1 and dead 10. ps. What bird does if loading routes takes more time than hello timer is? > On Thursday 24 of March 2011, Ondrej Zajicek wrote: > > On Thu, Mar 24, 2011 at 08:57:23AM +0100, Arkadiusz Miskiewicz wrote: > > > > Tou can always check it with tcpdump or wireshark on ospf lan. > > > > > > > > tcpdump -vv -nn -i<interface> host 224.0.0.5 > > > > > > I don't see bad IPs used, dump using > > > tcpdump -vv -nn -i eth0 ether host mac-addr and proto 89 > > > athttp://carme.pld-linux.org/~arekm/p/ospf.log.gz<http://carme.pld-linux.org/%7Earekm/p/ospf.log.gz> > > > > Don't you have assymetric MTU? > > > > It seems that there is MTU 9000 on x.x.5.135 and MTU 1500 on x.x.5.159 > > MTU have to be the same, otherwise x.x.5.135 would send big packets > > and x.x.5.159 would drop them. > That seem to be it, thanks! -- Kaikki viestissä ilmoitetut summat ovat alvittomia, ellei toisin ole kyseisen summan yhteydessä ilmoitettu. -- F-Solutions Oy Tapio Haapala PL 7, 90571 Oulu GSM 040-0998371 Skype burner- IRC Burner@ircnet

2 2

FW: [sidr] Announcing BRITE - BGPSEC / RPKI Interoperability Test & Evaluation system
by Spies, Sebastian Martin 29 Jun '11

29 Jun '11

This might be interesting for developers and users of bird. > -----Original Message----- > From: sidr-bounces(a)ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of > Montgomery, Douglas > Sent: Tuesday, June 28, 2011 11:07 AM > To: sidr(a)ietf.org > Cc: nanog(a)nanog.org > Subject: [sidr] Announcing BRITE - BGPSEC / RPKI Interoperability Test > & Evaluation system > > BRITE is a web-based test and evaluation framework for exercising > implementations, configurations and deployments of emerging IETF BGP > security technologies, including some components of the Resource Public > Key Infrastructure (RPKI) and routers that support BGP security > extensions. > > BRITE is currently capable of testing: RPKI validation caches and BGP > routers that perform origin validation based upon RPKI ROAs. Future > extensions will support BGP routers that support full path validation. > > BRITE currently supports the following capabilities / protocol > interfaces: > * rsync of RPKI objects from BRITE test suite repositories, > * RPKI/Router Protocol (draft-ietf-sidr-rpki-rtr-12 - TCP plain > sockets, > no SSH transport or TCP-AO) > * BGP-4 (tested interoperability with Cisco IOS, JUNOS, Quagga, > OpenBGPD > and BIRD) > > BRITE is driven by test scripts that describe carefully crafted > Test Scenarios (stimulus inputs from BRITE using the protocols above) > and > corresponding goals (expected responses from the Implementation Under > Test > (IUT) using the protocols above). BRITE allows users to login, select a > specific test case, interactively configure and run the test case and > then > browse/download detailed test reports, packet captures and log files. > > Current test scripts & data sets are available for: > * BGP routers that implement the rpki-rtr protocol and simple BGP > origin > validation route policies. > > Additional test suites & data sets are in development and will be > announced when available. > > To get additional information, browse existing test suites, or use the > BRITE system, goto: > http://brite.antd.nist.gov/ > > Questions or comments can be directed to brite-dev(a)nist.gov. > > > dougm > > -- > Doug Montgomery Mgr. Internet & Scalable Systems Research / ITL / > NIST > > > > > _______________________________________________ > sidr mailing list > sidr(a)ietf.org > https://www.ietf.org/mailman/listinfo/sidr

1 0

radv bug?
by csszep 25 Jun '11

25 Jun '11

Hello! I testing the radv protocol with bird 1.3.1, but no luck. The configuration is simple: router id 1.2.3.4; debug protocols all; protocol kernel { persist; scan time 20; export all; } protocol device { scan time 10; } protocol static { } protocol radv { #interface "eth*"; interface "dummy0"; }; In the log i see the following: Jun 24 14:12:46 router2 bird6: radv1: Starting Jun 24 14:12:46 router2 bird6: radv1: State changed to feed Jun 24 14:12:46 router2 bird6: Started Jun 24 14:12:46 router2 bird6: device1: State changed to up Jun 24 14:12:46 router2 bird6: kernel1: Connected to table master Jun 24 14:12:46 router2 bird6: kernel1: State changed to up Jun 24 14:12:46 router2 bird6: static1 < interface lo goes up Jun 24 14:12:46 router2 bird6: static1 < interface eth0 goes up Jun 24 14:12:46 router2 bird6: static1 < interface eth1 goes up Jun 24 14:12:46 router2 bird6: static1 < interface eth2 goes up Jun 24 14:12:46 router2 bird6: static1 < interface eth3 created Jun 24 14:12:46 router2 bird6: static1 < interface eth1.3 goes up Jun 24 14:12:46 router2 bird6: static1 < interface ipsec0 goes up Jun 24 14:12:46 router2 bird6: static1 < interface ipsec1 created Jun 24 14:12:46 router2 bird6: static1 < interface dummy0 goes up Jun 24 14:12:46 router2 bird6: static1: State changed to up Jun 24 14:12:46 router2 bird6: radv1 < interface lo goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address ::1/128 on interface lo added Jun 24 14:12:46 router2 bird6: radv1 < interface eth0 goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address fe80::/64 on interface eth0 added Jun 24 14:12:46 router2 bird6: radv1 < interface eth1 goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address fe80::/64 on interface eth1 added Jun 24 14:12:46 router2 bird6: radv1 < interface eth2 goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address fe80::/64 on interface eth2 added Jun 24 14:12:46 router2 bird6: radv1 < interface eth3 created Jun 24 14:12:46 router2 bird6: radv1 < interface eth1.3 goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address fe80::/64 on interface eth1.3 added Jun 24 14:12:46 router2 bird6: radv1 < interface ipsec0 goes up Jun 24 14:12:46 router2 bird6: radv1 < primary address fe80::20c:29ff:fec7:64fe/128 on interface ipsec0 added Jun 24 14:12:46 router2 bird6: radv1 < interface ipsec1 created Jun 24 14:12:46 router2 bird6: radv1 < interface dummy0 goes up Jun 24 14:12:46 router2 bird6: radv1: Adding interface dummy0 Jun 24 14:12:46 router2 bird6: radv1 < primary address 2001:db8:1::/64 on interface dummy0 added Jun 24 14:12:46 router2 bird6: radv1 < secondary address fe80::/64 on interface dummy0 added Jun 24 14:12:46 router2 bird6: radv1: State changed to up Jun 24 14:12:46 router2 bird6: kernel1: Scanning routing table Jun 24 14:12:46 router2 bird6: kernel1: Pruning table master Jun 24 14:12:46 router2 bird6: sk_set_ipv6_checksum: IPV6_CHECKSUM: Invalid argument Jun 24 14:12:46 router2 bird6: radv1: Socket open failed on interface dummy0 Jun 24 14:12:56 router2 bird6: device1: Scanning interfaces show interfaces dummy0 up (index=11) MultiAccess Broadcast Multicast AdminUp LinkUp MTU=1500 2001:db8:1::1/64 (Primary, scope univ) fe80::584a:9dff:fefe:bd0c/64 (Unselected, scope link) Same with eth* interface. The rdisc6 dummy0 command not seeing any prefix And one feature request: It would be great to support RFC6106 RDNSS and DNSSL extension in RADV- Thx Csszep

2 3

How to see routes rejected by a filter
by Mihai Claudiu Capatina 25 Jun '11

25 Jun '11

Hi, Can you please help me see the routes rejected by a filter ? I have the following problem : bird> show route preexport xxx count 9907 of 9946 routes for 9946 networks bird> show route export xxx count 9799 of 9946 routes for 9946 networks So the filter on export rejects 108 routes and i dont know why.... Thanks, Mihai Claudiu Capatina Managing Partner Vector Communications SRL Address : Aleea Cetatuia, Nr. 4, Bl. M22, Sc. 5, Et. 2, Ap. 276, Sect. 6, Bucuresti, 060834 Romania Phone: +40-729-087003 Fax: +40-318-146297 www.vector-communications.net

2 1

Error sending route to kernel
by Mihai Claudiu Capatina 25 Jun '11

25 Jun '11

Hi, We are using BIRD 1.3.1 on FreeBSD 6.2 and from time to time i see in the logs : bird: KRT: Error sending route xxx.xxx.xxx.xxx/yy to kernel Any ideas why ? Best Regards, Mihai Claudiu Capatina Managing Partner Vector Communications SRL Address : Aleea Cetatuia, Nr. 4, Bl. M22, Sc. 5, Et. 2, Ap. 276, Sect. 6, Bucuresti, 060834 Romania Phone: +40-729-087003 Fax: +40-318-146297 www.vector-communications.net

3 4

AS4 at BGP4 session open?
by Laurent GUERBY 19 Jun '11

19 Jun '11

Hi, One of our BPG4 peer is asking us to send directly an AS4 open message instead of going through transitional AS23456. We run a 32 bits ASN and our peer has a 16 bits ASN. If my reading of documentation and BIRD source code (1.2.5 and 1.3.1) is correct BIRD only starts using AS4 if the peer advertise the AS4 capability in its open message. << p->as4_session = conn->want_as4_support && conn->peer_as4_support; conn->want_as4_support = conn->bgp->cf->enable_as4 && (conn->start_state != BSS_CONNECT_NOCAP); conn->peer_as4_support = 0; // Default value, possibly changed by receiving capability. case 65: /* AS4 capability, RFC 4893 */ if (cl != 4) goto err; conn->peer_as4_support = 1; >> Our peer open doesn't currently send the AS4 capability in its open message so we're stuck for now. I don't know if hardware and software BGP4 implementations other than BIRD have this capability and what are the true implications of this request. We're using successfully so far BIRD 1.2.5 on debian squeeze to connect to our transit providers, IX route servers, and peers, thanks for providing BIRD as free software. Sincerely, Laurent GUERBY

2 3

Problem with clist
by Mihai Claudiu Capatina 16 Jun '11

16 Jun '11

Hi, We are trying to filter unwanted communities that our peering partners have forgot to remove in order not to send them to other peering parties. In order to do this we add the communities we want to a clist parameter, empty bgp_community, then add the clist back to bgp_community. The configuration is like this : function check_allow_communities() clist myc; { if ( (100,101) ~ bgp_community ) then { myc = add(myc, (100,101)); } if ( (100,102) ~ bgp_community ) then { myc = add(myc, (100,102)); } return myc; } function check_deny_communities() clist myc; { if ( (0,101) ~ bgp_community ) then { myc = add(myc, (0,101)); } if ( (0,102) ~ bgp_community ) then { myc = add(myc, (0,102)); } return myc; } filter bgp_in_100 pair set allow_communities; pair set deny_communities; { if ( is_martian() ) then { reject "Prefix filtered out by is_martian"; } else { allow_communities = check_allow_communities(); deny_communities = check_deny_communities(); bgp_community.empty; bgp_community.add((100,1000)); bgp_community.add((100,3000)); bgp_community.add(allow_communities); bgp_community.add(deny_communities); accept; } } The problem appears in the log fie : Jun 15 15:59:59 jls bird: filters, line 21: Can't add/delete to non-clist Jun 15 15:59:59 jls last message repeated 4 times Jun 15 15:59:59 jls bird: ... We are running BIRD 1.3.1 on FreeBSD 6.2. Can you please point me in the right direction ? Best Regards, Mihai Claudiu Capatina Managing Partner Vector Communications SRL Address : Aleea Cetatuia, Nr. 4, Bl. M22, Sc. 5, Et. 2, Ap. 276, Sect. 6, Bucuresti, 060834 Romania Phone: +40-729-087003 Fax: +40-318-146297 www.vector-communications.net

3 3