Packet Capture fails to start on a Linux Network Monitor and services show "partially running" in the Data Loss Prevention (DLP) Enforce GUI.
You may see error code 1008 - packetcapture is down and error code 1302 file reader failed to start in the Enforce GUI.
This can occur if the Linux server's operating system is missing some of the required RPM's; especially "apr-util".
The Linux server is missing RPM's.
1. Verify the following RPM's are installed on the server per the Symantec_DLP_15.1_System_Requirements_Guide
*Required only for graphical installation.
Console-mode installation does not require an X server.
Login to a terminal window as "Root"
Type: RPM -qa <Name of the RPM> Example: RPM -qa apr-util
2. Restart the Vontu Monitor service after installing the missing RPM(s)