Carbon Black Cloud: Linux sensor reporting wrong netconn direction
search cancel

Carbon Black Cloud: Linux sensor reporting wrong netconn direction

book

Article ID: 287716

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

  • Netconn events reported as the wrong direction (inbound vs outbound)
  • Timestamp of netconn may be associated with a time when the sensor or endpoint was restarted
  • Endpoint may handle a very large volume of network traffic

Environment

  • Carbon Black Cloud Sensor: 2.13.1 and prior supported releases
  • Linux: All Supported Versions

Cause

Product Issue:  CBC-15399

Resolution

Upgrade to sensor version 2.13.2 which includes a fix for CBC-15399