Dropped packets on network monitor causes missed information in detections
search cancel

Dropped packets on network monitor causes missed information in detections

book

Article ID: 230399

calendar_today

Updated On:

Products

Data Loss Prevention

Issue/Introduction

Notice some policies will miss detections or some incidents will have missed data.

Cause

Dropped packets at the network card can cause this due to NIC settings.

Resolution

Please review the NIC settings like OFFLOAD settings.  This can cause dropped packets and cause missed detections as the network monitor never receives those packets with this data.