Hello guys
I have this problem. I am running apinger on my freebsd router for simple monitoring the connectivity to different kind of hosts (local and internet). But when someone in the network tries very intensive pings to my router, freebsd automaticaly limits the icmp rate and thus the packets from apinger gets lost. And then I got false alarms.
Is there any way to avoid blocking of apingers packets (they are 1 packet per second)?
I know about net.inet.icmp.icmplim (default 200), but raising it is not a good option.
I am using ipfw for firewall. Is there any way to limit the icmp packets rate with ipfw somewhere under 200?
And if there is such way for limiting the rate .. will the os react first to higher rate of icmp packets or firewall will drop them first?
10x in advance
Georgi Iovchev
I have this problem. I am running apinger on my freebsd router for simple monitoring the connectivity to different kind of hosts (local and internet). But when someone in the network tries very intensive pings to my router, freebsd automaticaly limits the icmp rate and thus the packets from apinger gets lost. And then I got false alarms.
Code:
Jan 12 15:15:07 ROUTER kernel: Limiting icmp ping response from 2521 to 200 packets/sec
Jan 12 15:15:08 ROUTER kernel: Limiting icmp ping response from 2522 to 200 packets/sec
...
...
Jan 12 15:15:12 ROUTER apinger: ALARM: localhost IPv4(127.0.0.1) *** down ***
Jan 12 15:15:12 ROUTER kernel: Limiting icmp ping response from 874 to 200 packets/sec
Jan 12 15:15:13 ROUTER apinger: alarm canceled: localhost IPv4(127.0.0.1) *** down ***
Is there any way to avoid blocking of apingers packets (they are 1 packet per second)?
I know about net.inet.icmp.icmplim (default 200), but raising it is not a good option.
I am using ipfw for firewall. Is there any way to limit the icmp packets rate with ipfw somewhere under 200?
And if there is such way for limiting the rate .. will the os react first to higher rate of icmp packets or firewall will drop them first?
10x in advance
Georgi Iovchev