Dear Rubina, The outputs you include - you took them on that second test two days later ? Then it looks like session lists got wrong, so the cleaner could not traverse the sessions to clean, I suspect I might be something I missed within the session reuse logic when the table is full. Let me investigate this a bit more, I will get back to you.
--a > On 17 Sep 2018, at 13:40, Rubina Bianchi <r_bian...@outlook.com> wrote: > > Dear VPP > > I ran a test on VPP configured with permit+reflect ACl rules with t-rex. In > this test, I put two interfaces on one bridge-domain and had an ACL on all of > its input and output interfaces. The ACL had just one rule which was allowing > any traffic. I ran my test until VPP's session table was full. I run t-rex > whith following command: > "./t-rex-64 -f cap2/sfr.yaml -m 10 -d 10000" > > After a couple of days, I took another test on VPP. I tried to establish a > ssh session between two clients via my VPP. But session could not be > established. When I checked VPP trace, All of my ssh packets where dropped > due to following error: > "acl-plugin-in-ip4-l2: too many sessions to add new" > when I checked VPP's session table, I realized that it was full. No session > where deleted since my previous test and no session where going to be added > to session table.I also checked my /var/log/hawk.log file and saw following > error: > "acl_fa_node_fn:516: BUG: session LSB16(sw_if_index) and 5-tuple collision!" > > I could not fix this problem so I restarted my VPP service. After that, > I could not reproduce this state again. Does anyone have any idea on > what my problem on VPP was? > I attached my hawk.log, vpp trace, "vppctl sh acl-plugin sessions" output and > startup.conf file to this email. > > > > > <hawk.log> > <sessioncount> > <startup.conf> > <trace> > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#10519): https://lists.fd.io/g/vpp-dev/message/10519 > Mute This Topic: https://lists.fd.io/mt/25722080/675608 > Group Owner: vpp-dev+ow...@lists.fd.io > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [ayour...@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10525): https://lists.fd.io/g/vpp-dev/message/10525 Mute This Topic: https://lists.fd.io/mt/25722080/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
