Re: [j-nsp] Troubleshooting output queue drops

2012-05-24 Thread Saku Ytti
On (2012-05-24 15:34 +), Per Granath wrote: > That's right. You would need to look at port mirroring, or sampling. Mirroring over GRE directly to your linux tshark box is quick to set up and really simply. Excellent feature indeed. Only problem is, in JNPR you cannot send L2 traffic over GRE

Re: [j-nsp] Troubleshooting output queue drops

2012-05-24 Thread Doug Hanks
This won't work for transit traffic. Thank you, -- Doug Hanks - JNCIE-ENT #213, JNCIE-SP #875 Sr. Systems Engineer Juniper Networks On 5/24/12 8:01 AM, "Per Granath" wrote: >Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that, >so: > > monitor traffic interface ge-1/0

Re: [j-nsp] Troubleshooting output queue drops

2012-05-24 Thread Per Granath
> On Thu, May 24, 2012 at 8:01 AM, Per Granath > wrote: > > Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that, > so: > > > >   monitor traffic interface ge-1/0/0 no-resolve matching "(ip and (ip[1] & > 0xfc) >> 2 == 20)" > > > > would give you DSCP with AF22. > > But wont th

Re: [j-nsp] Troubleshooting output queue drops

2012-05-24 Thread Jonathan Lassoff
On Thu, May 24, 2012 at 8:01 AM, Per Granath wrote: > Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that, so: > >   monitor traffic interface ge-1/0/0 no-resolve matching "(ip and (ip[1] & > 0xfc) >> 2 == 20)" > > would give you DSCP with AF22. But wont this only work for ke

Re: [j-nsp] Troubleshooting output queue drops

2012-05-24 Thread Per Granath
Well, this gentleman: http://mccltd.net/blog/?p=1199 has looked at that, so: monitor traffic interface ge-1/0/0 no-resolve matching "(ip and (ip[1] & 0xfc) >> 2 == 20)" would give you DSCP with AF22. > -Original Message- > From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-n

[j-nsp] Troubleshooting output queue drops

2012-05-24 Thread John Neiberger
I have a lot of spiky traffic hitting a particular queue and much of it is being dropped. I want to find out exactly what that traffic is. I would guess that some variation of "monitor traffic interface" would do the trick, but what is the best way to structure that if there is a lot of traffic and

Re: [j-nsp] what would you put in this PoP

2012-05-24 Thread Mark Tinka
On Wednesday, May 23, 2012 08:12:40 PM Tom Storey wrote: > Assuming space were not an issue, is there a reason why > you might avoid something like an M320, or maybe a T320, > being the traditional "multi-protocol" boxes? > > Im just a curious bystander, trying to learn. :-) Well, the MX can now