[j-nsp] Troubleshooting output queue drops

Per Granath per.granath at gcc.com.cy
Thu May 24 11:34:53 EDT 2012


> On Thu, May 24, 2012 at 8:01 AM, Per Granath <per.granath at gcc.com.cy>
> wrote:
> > Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that,
> so:
> >
> >   monitor traffic interface ge-1/0/0 no-resolve matching "(ip and (ip[1] &
> 0xfc) >> 2 == 20)"
> >
> > would give you DSCP with AF22.
> 
> But wont this only work for kernel-bound or -sourced traffic?
> 
> Are there Juniper platforms for which one can capture transit traffic as well?
> 
> --j

That's right. You would need to look at port mirroring, or sampling.

...or use a wire-tap.



More information about the juniper-nsp mailing list