cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
463
Views
1
Helpful
1
Replies

stealthwatch ifindex id 0

dijix1990
VIP
VIP

Does anyone know what ifindex ID 0 means in stealthwatch?

dijix1990_0-1686309801989.png

 

1 Accepted Solution

Accepted Solutions

mattrobb
Cisco Employee
Cisco Employee

An interface can show up as ifindex0 for a variety of reasons

  • When no input I/F exists for the packet, ifindex is set to zero. Example: The packet is generated on the router
  • When no output I/F exists for the packet, ifindex is set to zero. Example: The destination of the packet is the router itself
  • The packet is dropped on the router
  • Multicast traffic
  • Conversation denied by ACL rule
  • Conversation dropped by QoS
  • Router misconfiguration or bug

View solution in original post

1 Reply 1

mattrobb
Cisco Employee
Cisco Employee

An interface can show up as ifindex0 for a variety of reasons

  • When no input I/F exists for the packet, ifindex is set to zero. Example: The packet is generated on the router
  • When no output I/F exists for the packet, ifindex is set to zero. Example: The destination of the packet is the router itself
  • The packet is dropped on the router
  • Multicast traffic
  • Conversation denied by ACL rule
  • Conversation dropped by QoS
  • Router misconfiguration or bug