Hi Frode, I went through the captures I have and effectively, if we filter out the packets where the srcport != 53 or dstport != 6081 , we end up only with valid dns traffic.
I believe this explains what we are seeing, and the other findings you did regards the missing flows, we can say with certainty that the DNS issues we are seeing are only a symptom of instances losing North-South traffic. I'm closing the bug as Invalid. $ for PCAP in *.pcap; do echo -e "$PCAP\t$(tshark -r $PCAP | grep -i "unknown" | wc -l)\t$(tshark -r $PCAP 'udp.dstport ne 6081' | grep -i unknown | wc -l)\t$(tshark -r $PCAP 'udp.srcport ne 53' | grep -i unknown | wc -l)";done dns-port-machine-0.pcap 90 0 0 dns-port-machine-10.pcap 104 0 0 dns-port-machine-11.pcap 26 0 0 dns-port-machine-12.pcap 0 0 0 dns-port-machine-13.pcap 0 0 0 dns-port-machine-2.pcap 6 0 0 dns-port-machine-3.pcap 72 0 0 dns-port-machine-4.pcap 0 0 0 dns-port-machine-5.pcap 59 0 0 dns-port-machine-6.pcap 68 0 0 dns-port-machine-7.pcap 46 0 0 dns-port-machine-8.pcap 104 0 0 dns-port-machine-9.pcap 32 0 0 ** Changed in: ovn (Ubuntu) Status: Triaged => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1959847 Title: Unknown operation (12) 0x0240 Unknown (7680)[Malformed Packet] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ovn/+bug/1959847/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs