[j-nsp] uRPF drops monitoring

Jared Mauch jared at puck.nether.net
Sun Sep 19 10:24:26 EDT 2004


On Sun, Sep 19, 2004 at 02:01:20PM +0200, Daniel Roesen wrote:
> On Sun, Sep 19, 2004 at 11:45:32AM +0200, Yuval Ben-Ari wrote:
> > Is it possible to see how many packets were dropped by uRPF ?
> > (I am not using a fail-filter)
> 
> You can collect those counters via SNMP (probably) and via the JunOS
> built-in accounting functions (sure):
> 
> dr at A1# set accounting-options interface-profile foo fields ?
> Possible completions:
> [...]
>   rpf-check-bytes      Bytes failing IPv4 reverse-path-forwarding check
>   rpf-check-packets    Packets failing IPv4 reverse-path-forwarding check
>   rpf-check6-bytes     Bytes failing IPv6 reverse-path-forwarding check
>   rpf-check6-packets   Packets failing IPv6 reverse-path-forwarding check

	VIA SNMP:

.1.3.6.1.4.1.2636.3.17       = rpf mib (ifindex)

	- jared

-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


More information about the juniper-nsp mailing list