mm OK

I think that I understna sysctl value what mean..

backup:~# ping -f 10.10.0.98 -c 500
PING 10.10.0.98 (10.10.0.98) 56(84) bytes of data.
.
--- 10.10.0.98 ping statistics ---
500 packets transmitted, 499 received, 0% packet loss, time 160ms
rtt min/avg/max/mdev = 0.269/0.296/3.321/0.140 ms, ipg/ewma 0.322/0.282 ms

backup:~# ping -f 10.10.0.98 -c 600
PING 10.10.0.98 (10.10.0.98) 56(84) bytes of data.
.....................................................................................................
--- 10.10.0.98 ping statistics ---
600 packets transmitted, 499 received, 16% packet loss, time 1391ms
rtt min/avg/max/mdev = 0.227/0.302/2.523/0.104 ms, ipg/ewma 2.323/0.288 ms


What exactly mean icmp limit value?

Mikel Jimenez Fernandez wrote:
Hi

[r...@gw ~]# sysctl -a | grep icmp | grep lim
net.inet.icmp.icmplim: 500
net.inet.icmp.icmplim_output: 1
net.inet6.icmp6.errppslimit: 100


Is Okay?

I dont undertand why this loss packet, other linux hosts in the lan 0.0 % packet loss...

Scott Ullrich wrote:
On Thu, Mar 19, 2009 at 6:09 PM, Mikel Jimenez Fernandez
<[email protected]> wrote:
Hello

I have a firewall with 2 interfaces. WAN and AN and CARP

LAN = 10.10.0.99
CARP=10.10.0.100

Is this normal from lan host?


backup:~# ping -f 10.10.0.99
PING 10.10.0.99 (10.10.0.99) 56(84) bytes of data.
........................................................................................................................
--- 10.10.0.99 ping statistics ---
1118 packets transmitted, 998 received, 10% packet loss, time 1621ms
rtt min/avg/max/mdev = 0.090/0.145/0.721/0.038 ms, ipg/ewma 1.452/0.150 ms
backup:~# ping -f 10.10.0.100
PING 10.10.0.100 (10.10.0.100) 56(84) bytes of data.
.................................................................................................................................................................
--- 10.10.0.100 ping statistics ---
1658 packets transmitted, 1497 received, 9% packet loss, time 2207ms
rtt min/avg/max/mdev = 0.090/0.147/0.778/0.051 ms, ipg/ewma 1.332/0.151 ms

Why are you doing such a thing?

Sure icmp limiting would step on this?

$ sysctl -a | grep icmp | grep lim
net.inet.icmp.icmplim: 200

Scott

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to