I took a step back and looked up the Geneve specification, in section 3.3 [0] it is stated that the UDP source port of the outer packet is selected by the originating tunnel endpoint based on hashing the encapsulated packet headers.
To me this means that there is nothing stopping the implementation from ending up with UDP source port 53 regardless of what the encapsulated packet actually is. So I wonder if we should just exclude GENEVE packets from the captures, so that we don't get these in the mix? A filter like 'port 53 and not dst port 6801' would do, and we could probably use that to filter the already captured data too. 0: https://datatracker.ietf.org/doc/html/rfc8926#section-3.3 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1959847 Title: Unknown operation (12) 0x0240 Unknown (7680)[Malformed Packet] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ovn/+bug/1959847/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
