IDPS PCAP host partition full Alarm
search cancel

IDPS PCAP host partition full Alarm

book

Article ID: 330444

calendar_today

Updated On:

Products

VMware vDefend Firewall

Issue/Introduction

Title: Alarm for IDPS PCAP host partition full
Event ID: distributed_ids_ips.host_pcap_partition_full
Alarm Description

  • Purpose: PCAP generation failed since the partition for PCAPs on the ESX host is full.
  • Impact: PCAP generation may fail and some PCAPs may be lost.

Environment

VMware NSX

Resolution

Steps to Resolve

For release 4.2.0 and higher

Recommended Action:

  • Review the number of NSX IDPS policies / rules.
  • Reduce the number of rules with PCAP enabled profiles.
Powered by Wolken Software