topic Hi in Network Security

Interface s1p7 is not receiving any packets

Mady — Tue, 12 Mar 2019 13:00:14 GMT

Hi Team,

Please help me on this issue. Our DC have an alert on one of our sensors stated below:

Critical Modules: 1, Normal Modules: 15, Disabled Modules:14

Module Interface Status: Interface 's1p7' is not receiving any packet

I just new in Sourcefire and I want to know what causes the interface to not receive any packets and what will I do to resolve this.

Appreciate your response alot.:)

Regards,

Mady

Hi

yogdhanu — Fri, 06 May 2016 05:27:18 GMT

I assume the sensor is a hardware sensor. Check the interface statistics by logging in to CLI or GUI of sensor itself. Physical connectivity would already have been checked I assume.

in CLI use "show traffic-statistics'

If it shows there is actually no traffic there , connect a single pc there and generate some traffic and check if there interface does receive traffic.

Sometimes issue could be with switch as well if STP is configured.

Hi yogdhanu,

Mady — Sat, 07 May 2016 02:49:49 GMT

Hi yogdhanu,

Based on the Health monitor.

Interface status:

Name Link Tx Rx

s1p7 green dot 23.5GB 266.5GB ---> red font

Hi ,

Aastha Bhardwaj — Sun, 08 May 2016 16:37:08 GMT

Hi ,

It seems interface is not receiving any packets. Login on CLI and check : show traffic-statistics and check if packets are increasing for this interface.

Also check for duplex settings etc from GUI and see if something has changed.

Regards,

Aastha Bhardwaj

Rate if that helps!!!