[j-nsp] is icmp unreachable generation rate-limited ?

Daniel Roesen dr at cluenet.de
Wed Sep 15 06:16:29 EDT 2004


On Wed, Sep 15, 2004 at 11:48:42AM +0400, Alexandre Snarskii wrote:
> My only idea is that juniper generates not more than some limited number
> of icmp unreachable packets per some interval, so, application not sees 
> replies and reports that as packet loss. 
> 
> Is that true ?

Yep.

> And, if so: are there any tunable which i can modify 
> in order to increase the number ? 

Unfortunately not.

> Or we should just upgrade our ancient junos version ? 

This might help, as Juniper increased the limit by a factor of 10
(if I remember correctly) to 50 pps at some point in late 5.x.

> PS: 'show pfe statistics ip icmp' shows huge amount of 'throttled icmps', 
> is that a counter of suppressed icmps ? 

Yep.


Best regards,
Daniel


More information about the juniper-nsp mailing list