[j-nsp] ssb NH: resolutions from x throttled

[Christoph Blecker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,
The issue appears to be a bug in the JUNOS version you are running. A
quick Google search turned up the following:

http://www.juniper.net/techpubs/software/junos/junos73/rn-sw-73/previous-releases.html

"If a router receives rapid multicast traffic from various groups or
sources that do not have entries in the forwarding table, the router
might generate the ?router-name feb NH: resolutions from iif number
throttled? system log message and might delay the installation of
forwarding table entries for some of these multicast packets. [PR/46474:
This issue has been resolved.]"

Solution would be to review your hardware and upgrade your JUNOS version
as applicable. ARP resolution is a normal and necessary funtion of the
router, and you would not want to disable it (I'm not even sure there
*is* a way to disable it withing JUNOS).

Cheers,
- -Christoph

On 10-05-17 01:43 AM, juniper at iber-x.com wrote:
> Hi there,
> 
> We have a Juniper M20 with JUNOS 7.3R1.4, old version :( .. and since
> few we have in our log these entries:
> 
> May 10 23:49:48.177 2010  xxxxx ssb NH: resolutions from iif 73 throttled
> May 10 23:50:41.168 2010  xxxxx ssb NH: resolutions from iif 88 throttled
> ..
> 
> Someone told us that maybe was a  port/ip scan on an Ethernet subnet and
> this causes a flood of ARP requests.
> We found that there is a statement to set the 'proxy-arp' option:
> 
> [edit]
> user at host# set interfaces interface-name unit logical-unit-number proxy-arp
> 
> But we can't find the opposite statement, I mean that the router doesn't
> register any arp resolution in one interface.
> 
> Also we read that it was a problem [PR/46474] solved since the version
> 7.3R3 but we have an older JUNOS version..
> 
> Does anyone know how to solve this 'problem'?
> 
> Thanks in advance,
> 
> 
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkvxCdsACgkQg4DtNh1wGhrzaQCfbYbgJQAFUg5O/Gg/KTshJBoi
pz8AnAqD659S7c2PFCE+c2XlIo1yGWQb
=wANs
-----END PGP SIGNATURE-----