weaveworks / scope

Monitoring, visualisation & management for Docker & Kubernetes
https://www.weave.works/oss/scope/
Apache License 2.0
5.84k stars 708 forks source link

DNS sniffer errors on GKE #3214

Open 2opremio opened 6 years ago

2opremio commented 6 years ago

It seems that Scope doesn't inspect vxlan and sflow properly

<probe> ERRO: 2018/05/29 17:32:31.503660 DNSSnooper: error decoding packet: No decoder for layer type BFD
<probe> ERRO: 2018/05/29 17:35:04.769969 DNSSnooper: error decoding packet: No decoder for layer type SFlow
<probe> ERRO: 2018/05/29 17:41:32.694338 DNSSnooper: error decoding packet: No decoder for layer type NTP
<probe> ERRO: 2018/05/29 17:54:30.187699 DNSSnooper: error decoding packet: No decoder for layer type VXLAN
<probe> ERRO: 2018/05/29 19:40:22.200944 DNSSnooper: error decoding packet: No decoder for layer type NTP
<probe> ERRO: 2018/05/29 20:15:15.204628 DNSSnooper: error decoding packet: No decoder for layer type SFlow (reached 4 occurrences, silencing)

More context: https://weave-community.slack.com/archives/C2ND76PAA/p1527667581000108?thread_ts=1527667032.000214&cid=C2ND76PAA

2opremio commented 6 years ago

The NTP log entries are puzzling. @masterley Could it be that somehow NTP was being used on connections from or to UDP port 53?