Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1109

Reporter node behaves the opposite of what it says (conversations)

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • netobserv-1.4
    • netobserv-1.3
    • None
    • None
    • False
    • None
    • False
    • NetObserv - Sprint 240, NetObserv - Sprint 241, NetObserv - Sprint 242
    • Moderate

      This is the same bug as NETOBSERV-696 but applied to conversations.

      The patch for NETOBSERV-696 was to reinterpret direction. It's not done for conversation, hence this new bug.
      Note that it is also probably necessary to update the "swap" algorithm to also swap direction in FLP.

      — Old bug recap:
      (With conversation tracking enabled, and the flow table showing conversations)
      In Network Traffic. under Query Options, the last sentence in the tooltip for "Reporter node" says:

      Cluster ingress traffic is only reported by destination nodes, and cluster egress by source nodes.

      However, the opposite is happening.

      Steps to reproduce the problem:

      1. In Network Traffic, in Query Options, select "Destination".  This is the default.
      2. Filter on a pod where you will make a web request.
      3. ssh into that pod.
      4. Make a curl request to a web site.  It's easier to see if you use an IP address to avoid DNS traffic.  Example:
        curl -kL
      1. In the Flow table, you will only see traffic from that pod going out to the Internet to dest port 443 (see 01-dest.png, 1st row).  There will be no return traffic.  This means it is the source node reporting egress traffic, even though "Destination" is selected.
      2. Now in Query Options, select "Source".  Do the same curl request.  This time, it shows only the return traffic from the web site to your pod (see 02-source.png, 1st row).  This means it is the destination node reporting ingress traffic.


        1. export-2023-08-31-13-51 conversations.csv
          2 kB
        2. export-2023-08-31-13-51 flows.csv
          4 kB
        3. image-2023-08-30-11-32-22-848.png
          141 kB
        4. image-2023-08-30-11-32-22-881.png
          190 kB
        5. image-2023-08-30-11-37-08-663.png
          178 kB
        6. image-2023-08-31-15-45-54-226.png
          85 kB
        7. image-2023-08-31-15-49-02-087.png
          232 kB
        8. reinterpret.png
          296 kB
        9. screenshot-1.png
          137 kB
        10. screenshot-2.png
          238 kB
        11. without reinterpret.png
          without reinterpret.png
          305 kB

            jtakvori Joel Takvorian
            jtakvori Joel Takvorian
            Mehul Modi Mehul Modi
            0 Vote for this issue
            3 Start watching this issue