Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1898

ports range in flowFilter config doesn't work

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • netobserv-1.6, netobserv-1.7-candidate, netobserv-1.6.1, netobserv-1.6.2
    • eBPF
    • False
    • None
    • False
    • NetObserv - Sprint 260
    • Critical

      Description of problem:

      When specifying below config, it still captured all the flows:
        flowFilter:
              action: Accept
              cidr: 0.0.0.0/0
              enable: true
              ports: 53-80

      Steps to Reproduce:

      1. Create flowcollector with above config
      2. All flows are still being collected
      3. logs from ebpf agent:
      
      time="2024-09-27T17:48:34Z" level=info msg="Flow filter config: &{ 0.0.0.0/0  {0 0 } {0 0 } {1 0 53-80} 0 0  Accept }" component=ebpf.FlowFetcher
      time="2024-09-27T17:48:34Z" level=info msg="Programmed filter with key: {0 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]}, value: {0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 [0 0 0 0 0 0 0 0 
      0 0 0 0 0 0 0 0]} 

      Actual results:

      port range filter is not respected and all flows are being captured

      Expected results:

      port range filter should be honored

              mmahmoud@redhat.com Mohamed Mahmoud
              rhn-support-memodi Mehul Modi
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: