iptables Configured ratelimit is not same as the rule shown in Rule display

"Shivegowda, Naveen (Nokia - IN/Bangalore)" <naveen.shivegowda@xxxxxxxxx> · Thu, 28 Feb 2019 09:28:28 +0000

Hi,

When I try to configure rate limit values with a certain number, in Rule display 'configured number + additional number' is shown as rate-limit value.

iptables -A TEST -p tcp -m limit --limit 300  -j ACCEPT
iptables -nvL TEST
Chain TEST (0 references)
pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 303/sec burst 5

Above behavior is same for rate-limit value starting from 295 until 303.
I wanted to know the reason behind additional number getting added to the original rate-limit value used during configuration.

Regards
Naveen S