Junos OS

My users are connected through OFC, but once i ping them im getting a 200 - 300 ms delayed ping response. it should be less then 4 ms. Im facing this problem since yesterday. Please help is req in pin point direction.

[edit]
root@SRX-3600f# run ping XX.XX.XX.140
PING XX.XX.XX.140 (XX.XX.XX.140): 56 data bytes
64 bytes from XX.XX.XX.140: icmp_seq=0 ttl=64 time=277.944 ms
64 bytes from XX.XX.XX.140: icmp_seq=1 ttl=64 time=270.595 ms
64 bytes from XX.XX.XX.140: icmp_seq=3 ttl=64 time=116.722 ms
^C
--- XX.XX.XX.140 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/stddev = 116.722/233.756/277.944/67.644 ms

[edit]
root@SRX-3600# run ping XX.XX.XX.17
PING XX.XX.XX.17 (XX.XX.XX.17): 56 data bytes
64 bytes from XX.XX.XX.17: icmp_seq=0 ttl=64 time=132.856 ms
64 bytes from XX.XX.XX.17: icmp_seq=1 ttl=64 time=130.558 ms
64 bytes from XX.XX.XX.17: icmp_seq=2 ttl=64 time=270.135 ms
^C
--- XX.XX.XX.17 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 130.558/177.850/270.135/65.262 ms

[edit]
root@SRX-3600# run ping XX.XX.XX.32
PING XX.XX.XX.32 (XX.XX.XX.32): 56 data bytes
64 bytes from XX.XX.XX.32: icmp_seq=0 ttl=64 time=260.617 ms
64 bytes from XX.XX.XX.32: icmp_seq=1 ttl=64 time=143.966 ms
64 bytes from XX.XX.XX.32: icmp_seq=2 ttl=64 time=129.901 ms
^C
--- XX.XX.XX.32 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 129.901/178.161/260.617/58.587 ms

Hi janglijat,

Junos gives low priority to ICMP traffic from/to the device. Could you try pinging from any device behind SRX and check the delay?

Yes it is showing the same behaviour on all interfaces. Once traceroute is conducted, it is showing this behaviour on both sides

Did you try ICMP ping from devices behind SRX?

Lets assume the topology is as below.

A------SRX-----B

Ping from SRX to A or B can show high RTT and Latency, my request is to test PING from A to B or B to A which will go through SRX as transit traffic and check the delay.

Sir i have att the snap shot of the trace route as per ur senario....

Instead of traceroute can you do a ICMP Ping and provide the details?

The topolgy is kind of like this

A ---- SRX-3600 ---- B

Now, 

A = SRX-650

B = SRX-240

Once A sets ping to B it shows time 267.289 ms (Avg) and its goes up till 500 ms sometimes....

Hi janglijat,

Thanks for the update. In this case you are actually generating the PING from SRX and Sending to another SRX. Please initiate a PING from/to non Junos device and check the issue.

A ---- SRX-3600 ---- B , A and B should be Non-Juniper devices for this test.

Below KB explains the same.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11792&smlogin=true

Same issue. Once i ping from my Windows server to my end user / printer (end to end), through my centeral network (SRX- 650, SRX-3600, SRX-240) the ping shows the same latency problem.  traceroute also chokes in the same (SRX-3600) device.

Did you check the CPU (RE and PFE)? Are they Normal?

show chassis routing-engine | no-more

show security monitoring performance spu | no-more

Yes these i did.... Every thing seemed correct there.... 

root@SRX3600# run show security monitoring performance spu | no-more
fpc 7 pic 0
Last 60 seconds:
0: 96 1: 97 2: 97 3: 97 4: 96 5: 95
6: 95 7: 95 8: 95 9: 94 10: 95 11: 96
12: 95 13: 95 14: 96 15: 97 16: 97 17: 97
18: 97 19: 95 20: 95 21: 96 22: 97 23: 97
24: 97 25: 97 26: 95 27: 95 28: 96 29: 96
30: 96 31: 97 32: 97 33: 96 34: 96 35: 96
36: 97 37: 97 38: 96 39: 95 40: 94 41: 95
42: 95 43: 97 44: 97 45: 97 46: 96 47: 95
48: 94 49: 95 50: 96 51: 96 52: 96 53: 95
54: 94 55: 95 56: 96 57: 97 58: 96 59: 97
fpc 8 pic 0
Last 60 seconds:
0: 80 1: 80 2: 82 3: 79 4: 79 5: 76
6: 74 7: 77 8: 79 9: 77 10: 81 11: 76
12: 74 13: 76 14: 77 15: 80 16: 81 17: 80
18: 77 19: 77 20: 76 21: 75 22: 82 23: 82
24: 81 25: 79 26: 76 27: 76 28: 77 29: 81
30: 83 31: 82 32: 78 33: 77 34: 77 35: 78
36: 82 37: 83 38: 80 39: 76 40: 78 41: 74
42: 77 43: 85 44: 84 45: 82 46: 78 47: 74
48: 73 49: 78 50: 83 51: 80 52: 82 53: 77
54: 74 55: 75 56: 77 57: 80 58: 81 59: 81

[edit]
root@SRX3600# run show chassis routing-engine 
Routing Engine status:
Slot 0:
Current state Master
Election priority Master (default)
DRAM 1023 MB
Memory utilization 41 percent
CPU utilization:
User 1 percent
Background 0 percent
Kernel 7 percent
Interrupt 0 percent
Idle 92 percent
Model RE-PPC-1200-A
Uptime 238 days, 15 minutes, 51 seconds
Last reboot reason 0x1:power cycle/failure
Load averages: 1 minute 5 minute 15 minute
0.03 0.08 0.08

Your dataplane CPU is very high 95-97%, and thats the most possible reason.

0: 96 1: 97 2: 97 3: 97 4: 96 5: 95
6: 95 7: 95 8: 95 9: 94 10: 95 11: 96
12: 95 13: 95 14: 96 15: 97 16: 97 17: 97
18: 97 19: 95 20: 95 21: 96 22: 97 23: 97
24: 97 25: 97 26: 95 27: 95 28: 96 29: 96
30: 96 31: 97 32: 97 33: 96 34: 96 35: 96
36: 97 37: 97 38: 96 39: 95 40: 94 41: 95
42: 95 43: 97 44: 97 45: 97 46: 96 47: 95
48: 94 49: 95 50: 96 51: 96 52: 96 53: 95
54: 94 55: 95 56: 96 57: 97 58: 96 59: 97

Please do a monitor interface traffic and see if there is any traffic spikes or broadcast storms or open a ticket with JTAC for further troubleshooting on high Dataplane CPU

whas their a configuration change in your network "just" before these problems started ?

Yes ur right, this was choking my network. problem fixed. Thanks a million sir

we are facing similar issue in dataplane the cpu gets high for few SPC's . what was the configuration fix. the behaviour is quite random.