first packet lost by iptables

[Frédéric Dreier <frederic.dreier@xxxxxxxxx>]

Hi,

I have several machines hosting kvm VMs. VMs are connected to bridges
which are connected to VLANs.

When I try to ping VM2 on hostB from VM1 on hostA, the first ping
request is silently dropped. Following pings goes through.

I see the ping request on the bridge of the hostB. But the packet is
not copied on the vnet interface (which is directly connected to the
bridge).

setting net.bridge.bridge-nf-call-iptables = 0, solve the problem but
totally disable iptable (I will need iptables later). Therefor I think
that the problem is iptables.

iptables are empty and policies are set to ACCEPT.

There is nothing in syslog (martian packets)

It is Ubuntu 11.04.

How may I debug this issue?

Regards,

Frederic
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html