Interface s1p7 is not receiving any packets

[Mady]

Hi Team,

Please help me on this issue. Our DC have an alert on one of our sensors stated below:

Critical Modules: 1, Normal Modules: 15, Disabled Modules:14

Module Interface Status: Interface 's1p7' is not receiving any packet

I just new in Sourcefire and I want to know what causes the interface to not receive any packets and what will I do to resolve this.

Appreciate your response alot.:)

Regards,

Mady

[yogdhanu]

Hi

I assume the sensor is a hardware sensor. Check the interface statistics by logging in to CLI or GUI of sensor itself. Physical connectivity would already have been checked I assume.

in CLI use "show traffic-statistics'

If it shows there is actually no traffic there , connect a single pc there and generate some traffic and check if there interface does receive traffic.

Sometimes issue could be with switch as well if STP is configured.

[Mady]

Hi yogdhanu,

Based on the Health monitor.

Interface status:

Name     Link            Tx               Rx

s1p7    green dot     23.5GB    266.5GB ---> red font

[Aastha Bhardwaj]

Hi ,

It seems interface is not receiving any packets. Login on CLI and check : show traffic-statistics and check if packets are increasing for this interface.

Also check for duplex settings etc from GUI and see if something has changed.

Regards,

Aastha Bhardwaj

Rate if that helps!!!