libvirt/examples/xml/nwfilter/qemu-announce-self.xml

<filter name='qemu-announce-self' chain='root'>
    <!-- as of 4/26/2010 qemu sends out a bogus packet with
         wrong rarp protocol ID -->
    <!-- accept what is being sent now -->
    <rule action='accept' direction='out'>
        <mac protocolid='0x835'/>
    </rule>

    <!-- accept if it was changed to rarp -->
    <filterref filter='qemu-announce-self-rarp'/>
    <filterref filter='no-other-rarp-traffic'/>

</filter>
nwfilter: let qemu's after-migration packet pass Qemu currently sends an Ethernet packet with protocol id 0x835 once a VM was successfully migrated. The content of the packet looks like a gratuitous RARP, just with the wrong protocol ID, which should be 0x8035. I wrote some filters to let either one of the packets pass and am adapting the clean-traffic sample filter to use it. I am also doing some changes on the existing ARP filter which was lacking a test for source MAC address. 2010-04-27 18:50:35 +00:00			`<filter name='qemu-announce-self' chain='root'>`
			`<!-- as of 4/26/2010 qemu sends out a bogus packet with`
			`wrong rarp protocol ID -->`
			`<!-- accept what is being sent now -->`
			`<rule action='accept' direction='out'>`
			`<mac protocolid='0x835'/>`
			`</rule>`

			`<!-- accept if it was changed to rarp -->`
			`<filterref filter='qemu-announce-self-rarp'/>`
			`<filterref filter='no-other-rarp-traffic'/>`

			`</filter>`