[j-nsp] Juniper "firewall policer" inner workings

[Chuck Anderson]

On Mon, Apr 04, 2011 at 03:48:11PM +0300, Martin T wrote:
> Gabriel,
> the question is, what does JUNOS "bandwidth-limit 10m" count into this
> "10m". Only they application payload? L4 header as well? Or even the
> IP header? If I send UDP traffic with 10Mbps and router policer
> "bandwidth-limit 10m" drops ~2.5% of this traffic, then I don't find
> this normal..

How does iperf count the bandwidth?  If -b 10m is causing iperf to 
send at a rate 10 Mbps of UDP payload, then the IP packet will be 
consuming more than 10 Mbps.