eth2 is capturing but the link status is down

Products

• Security Analytics

Issue/Introduction

Getting alert message  "eth2 is capturing but the link status is down". The message could state any of the possible capture interfaces.

Example screenshot:

Cause

Mentioned ethernet port is not connected.

Resolution

If you start capture on the ethernet port which is not connect to the appliance then you will get this message. If you click to dismiss the message it will popup again. This is normal behavior.

To fix this, stop capture on the ethernet interface mentioned in the notification message.

1. Go to Capture > Summary
2. When you click Start Capture. The green Start Capture button becomes a red Stop Capture button.

 

Click  on the "Stop Capture" button.  It will turn green once you click on the button (the red Stop Capture button becomes a green Start Capture button)

Note: It is recommended that you not enable capture on interfaces that receive no traffic.  This can unnecessarily increase the overhead on the appliance.