Re: [j-nsp] Update failed on J-Series

2009-03-08 Thread Matthias Gelbhardt
Hi! Perhaps the problem? The disk is 256 MB Regards, Matthias Am 08.03.2009 um 13:11 schrieb Patrik Olsson: You need to make sure you have the new larger flash to go 9.X. Whats your flashdisk size? Cheers Patrik Matthias Gelbhardt wrote: Hi! Yesterday I tried to upgrade a J-Series from

[j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Richard A Steenbergen
Is there any way to log/view some of the ICMP packets being handled by the pfe processor? I've got a router which is being hit by what appears to be a large amount of TTL expiring packets (either someones traceroute run amuck, a DoS, or a forwarding loop I suppose), but without being able to see

Re: [j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Nilesh Khambal
Richard, You can try debug icmp error from pfe. However, depending on load this might fill up the syslog buffer really fast. Messages are also throttled at 10 pps. You can disable the message generation using undebug icmp error. Before enabling debug run command show icmp statistics from

Re: [j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Richard A Steenbergen
On Sun, Mar 08, 2009 at 02:49:18PM -0700, Nilesh Khambal wrote: Richard, You can try debug icmp error from pfe. However, depending on load this might fill up the syslog buffer really fast. Messages are also throttled at 10 pps. You can disable the message generation using undebug icmp

Re: [j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Ashok Patrick Jude M
While I'm on the subject, is there any way to see and/or modify the throttle rate? I know the default changed for some FPC types in some recent version of JUNOS, but I don't remember the exact details. What platform you are using? Could you please try policer matching ttl expire packets?

Re: [j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Richard A Steenbergen
On Mon, Mar 09, 2009 at 05:00:54AM +0530, Ashok Patrick Jude M wrote: While I'm on the subject, is there any way to see and/or modify the throttle rate? I know the default changed for some FPC types in some recent version of JUNOS, but I don't remember the exact details. What platform you

Re: [j-nsp] Identifying pfe icmp throttled traffic

2009-03-08 Thread Jeff S Wheeler
On Sun, 2009-03-08 at 19:10 -0500, Richard A Steenbergen wrote: This is on a MX960. I had actually tried matching ttl [ 0 1 ] in firewall on border interfaces before as a way to limit traceroutes, but it had some unexpected impact to regularly forwarded traffic when policed which we never