Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Configure TCP reassembler for IDP sensor settings.



Define the maximum TCP flow memory that the IDP sensor can handle.

  • Syntax: value—Maximum TCP flow memory in kilobytes.

  • Range: 64 through 4,294,967,295 kilobytes

  • Default: 1024 kilobytes


Define the maximum limit for queuing Syn/Ack packets with different SEQ numbers.

  • Syntax: value—Maximum synchronization acknowledgements queued with different SEQ numbers.

  • Range: 0 through 5


By default, values for IDP reassembler packet memory are established as percentages of all memory. In most cases, these default values are adequate.

If a deployment exhibits an excessive number of dropped TCP packets or retransmissions resulting in high IDP reassembly memory usage, use the max-packet-mem-ratio option to reset the percentage of available IDP memory for IDP reassembly packet memory. Acceptable values are between 5 percent and 40 percent.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.2. Packet memory ratios added in Junos OS Release 12.1X44-D20.