[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-users] network traffic can't be seen by iptables when no bridge presents

In my project, I tried to use iptables, instead of bridge, to direct
networking traffics from one VM to another in one host. What I am doing is
I delete xen-br0, and I have two VMs that have IP addresses of
and I use

iptables -t mangle -A FORWARD -d -j ROUTE --oif vif1.0
iptables -t mangle -A FORWARD -d -j ROUTE --oif vif2.0

vif1.0 and vif2.0 are the virtual network interfaces of two VMs. In order
to debug the above rules, I log all the traffics:

iptables -t mangle -A PREROUTING -j LOG --log-level debug --log-prefix

I ping from and I expect to see the traffics would be
logged. However, I can't see any corresponding traffics are logging. Only
traffics looks like :

IN=lo OUT= ip-source= ip-destination=

I use tcpdump to listen on vif1.0 and I can see the icmp requsts from to

I am using the kernel linux-2.6.11-xen0. Does anybody have ideas about it?
Is it because there is no bridge presenting?


Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.