[j-nsp] PFE_NH_RESOLVE_THROTTLED Message

Mon Aug 20 04:24:30 EDT 2007

We are seeing a large volume of the follow message
"PFE_NH_RESOLVE_THROTTLED: Next-hop resolution requests from interface
67 throttled" in the router logs.

I am struggling to understand why this is happening. The explanation
from juniper for this system message, shown below, is some what cryptic.
What is throwing me off here is the mention of ARP whereas all of the
interfaces being throttled are configured with /30 subnets and whilst
they are Ethernet interfaces only provide connectivity to a single host.
I would have expected the throttling to occur on an interface providing
access to multiple hosts.

Does anyone have any experience or opinion on this error message?

PFE_NH_RESOLVE_THROTTLED

System Log Message PFE_NH_RESOLVE_THROTTLED:

Next-hop resolution requests from interface logical-interface-index
throttled

Description The Packet Forwarding Engine throttled next-hop resolution
requests from the

indicated interface, because the high number of requests might
constitute an

attempted denial-of-service (DoS) attack. Examples of events that
generate

next-hop resolution requests include an attempt to forward a packet
without an

Address Resolution Protocol (ARP) entry and receiving a multicast data
packet with

no matching route. Normally, the Packet Forwarding Engine forwards the
requests

to the Routing Engine.

Type Event: This message reports an event, not an error

Severity info

Note: 
This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Irish Broadband and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity.


Irish Broadband Internet Services Ltd, Registered in Ireland, Number: 357181, Registered Office: Burton Court, Burton Hall Road, Sandyford Industrial Estate, Dublin 18.<o:p></o:p>