Re: Refusing Pings on Core Routers??? A new trend?

2006-10-20 Thread Mikael Abrahamsson
On Thu, 19 Oct 2006, Jeremy Chadwick wrote: I am absolutely fine with ICMP being prioritised last, but those scenarios induce more questions; so ICMP is prio'd last, which would mean the router is busy processing other packets, which could mean your router is over-utilised either CPU-wise or

Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Deepak Jain
This week, at least a dozen troublesome or problematic routes our NOC has investigated due to customer complaints all have double or triple digit latencies, jitter and/or packet loss. Not really that surprising... a normal week when you are looking at the entire Internet. What is

Re: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Jeremy Chadwick
On Thu, Oct 19, 2006 at 07:18:01PM -0400, Deepak Jain wrote: 1 NOC (that will remain nameless even though they should really be shamed) said the following in response to the question -- when we were trying to diagnose +50ms jumps in their latency within a single POP. Q: As part of this,

RE: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Schliesser, Benson
Q: As part of this, can you tell me why your router is prohibiting packets being sent to our interface? A: The reason you cannot hit your interface is it is blocked for security reasons. [...] What the heck is going on lately? Have we returned to the time where we've started trying

Re: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Rubens Kuhl Jr.
template response -- I hear is Well, you can't rely on traceroute because of ICMP prioritisation. When you start to explain how traceroute actually works (both ICMP-based and UDP-based (which still relies on ICMP responses, of course!)), and that ICMP prio should only affect the IP of which

Re: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Patrick W. Gilmore
On Oct 19, 2006, at 10:14 PM, Rubens Kuhl Jr. wrote: template response -- I hear is Well, you can't rely on traceroute because of ICMP prioritisation. When you start to explain how traceroute actually works (both ICMP-based and UDP-based (which still relies on ICMP responses, of course!)),

Re: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Eric Spaeth
Rubens Kuhl Jr. wrote: If I recall well, Cisco GSRs impose low priority and/or limits for all ICMP traffic flowing thru the box, not just packets to/from router itself, and there's not a knob to adjust that. There'd be no reason to limit ICMP globally -- for traffic through a router it's all

Re: Refusing Pings on Core Routers??? A new trend?

2006-10-19 Thread Fergie
IIRC, this is not news. - ferg -- Rubens Kuhl Jr. [EMAIL PROTECTED] wrote: template response -- I hear is Well, you can't rely on traceroute because of ICMP prioritisation. When you start to explain how traceroute actually works (both ICMP-based and UDP-based (which still relies on ICMP