AnsweredAssumed Answered

Is it possible to detect network tap issues with Netwitness for Packets?

Question asked by David Waugh on Aug 7, 2018
Latest reply on Aug 8, 2018 by Guy Bruneau

Hi i am getting some incomplete sessions sent to our packet decoders by our taps but I don't know how big the issue is.

 

There are no packet drop messages being recorded in /var/log/messages on the decoder, so I suspect that the network taps are not forwarding us all the packets. Alternatively it could be that the network taps themselves are not seeing all the packets.

 

Is there anyway to detect missing packets in a session with Newitness?

Outcomes