net.inet.ip.arpqueued

[Han Hwei Woo]

Hi,

I was doing some ARP troubleshooting, and noticed this sysctl variable, 
and was wondering what it is for? On our office firewall with just 14 
ARP entries, I see it's normally at 0 but on a busy data centre firewall 
with 1,541 ARP entries, it seems to always be at or near 100, and never 
above. This is just speculation, but it would appear that the maximum 
queue length is 100, and that ARP requests may potentially be dropped 
above that number? Can somebody confirm this? Am I currently running 
into ARP limitations, or this is indicative of other problems? Is it 
possible to increase the queue length to something larger through the 
kernel configuration or at compile time, and would this be advisable?


Thanks,
Han