Data Loss Prevention

 View Only
Back to discussions
Expand all | Collapse all

Packet capture warning log

  • 1.  Packet capture warning log

    Posted May 29, 2015 03:34 PM

    We have a client who is seeing the following errors in their PacketCapture.log file on Network Monitor to the tune of 200+ per minute.

    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18125000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 1514 byte packet.  18126000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18127000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 1514 byte packet.  18128000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18129000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18130000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18131000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18132000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18133000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 272 byte packet.  18134000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18135000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 60 byte packet.  18136000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:39 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 155 byte packet.  18137000 discarded. [CaptureProcessor.cpp(38)]
    05/29/15 11:10:41 [0x2b9d2af90940] WARN  CaptureProcessor - Discarding 1514 byte packet.  18138000 discarded. [CaptureProcessor.cpp(38)]

    In DLP console traffic we don't see any discarded packets or unprocessable components. Any ideas here? It only seems to happen when the HTTP protocol is enabled on Network Monitor.
     

    Thanks,
    Aaron