Kings Brandon is correct. If I remember right if you hover over the Rate Event Action in the Signature Definition it should explain that the Rate value is based on pkts per second.
Stu On Sat, Feb 13, 2010 at 7:50 AM, Kingsley Charles < [email protected]> wrote: > > > On Sat, Feb 13, 2010 at 1:19 PM, Kingsley Charles < > [email protected]> wrote: > >> Hi Brandon >> >> I am not getting your point. Are you telling that I sec is the time >> interval y default? >> >> With regards >> Kings >> >> On Sat, Feb 13, 2010 at 12:41 PM, Brandon Carroll < >> [email protected]> wrote: >> >>> Kings, >>> >>> When you set the rate limit percentage to 2 and the rate to 25 that is >>> within 1 second I believe. >>> >>> Regards, >>> >>> Brandon Carroll - CCIE #23837 >>> Senior Technical Instructor - IPexpert >>> Mailto: [email protected] >>> Telephone: +1.810.326.1444 >>> Live Assistance, Please visit: www.ipexpert.com/chat >>> eFax: +1.810.454.0130 >>> >>> IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA >>> (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, >>> Security & Service Provider) Certification Training with locations >>> throughout the United States, Europe and Australia. Be sure to check >>> out our online communities at www.ipexpert.com/communities and our >>> public website at www.ipexpert.com. >>> >>> >>> >>> >>> On Fri, Feb 12, 2010 at 10:55 PM, Kingsley Charles >>> <[email protected]> wrote: >>> > Please provide your inputs. >>> > >>> > In the lab question section 3.13, it is mentioned that one minute >>> should be >>> > the sampling time but I don't have the step in the solution provided. >>> > >>> > With regards >>> > Kings >>> > >>> > On Sat, Feb 13, 2010 at 1:31 AM, Kingsley Charles >>> > <[email protected]> wrote: >>> >> >>> >> Hi all >>> >> >>> >> I have configured sig 2152 (ICMP flood) with the rate of 23 ICMP Type >>> 8 >>> >> and defined action of rate-limit. >>> >> >>> >> The signature doesn't get triggered when I ping from a router - ping >>> >> 10.20.30.40 repeat 200 >>> >> >>> >> >>> >> What is the time interval for this ICMP rate? In the sig, I don't see >>> an >>> >> option to enter the time interval to sample ICMP requests. >>> >> >>> >> >>> >> By default, I think is one minute. Does that mean, Pings from the >>> router >>> >> are not within 1 min. But that can't be right? 200 Ping requests is >>> well >>> >> within 1 minute >>> >> >>> >> >>> >> Any thoughts? >>> >> >>> >> >>> >> >>> >> >>> >> With regards >>> >> Kings >>> >> >>> > >>> > _______________________________________________ >>> > For more information regarding industry leading CCIE Lab training, >>> please >>> > visit www.ipexpert.com >>> > >>> > >>> >> >> > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > -- Regards, Stuart Hare CCIE #25616 (Security), CCSP, Microsoft MCP Sr. Support Engineer – IPexpert, Inc. URL: http://www.IPexpert.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
