RSA NetWitness Netwok unsupported SFP+ module type was detected

Issue

!!!! ATTENTION !!!!
This Article can only be used in the occasion of having the need to get customer's operational running on temporary basis till a supported and approved Intel SFP is being ordered for the customer. No customer should be left in this unsupported state.
!!!! ATTENTION !!!!

- Unable to initialize the 10G capture interfaces on a packet-decoder.
- Observing error related to SFP module being unsupported while the appliance is booting as depicted below:

Cause

- This is happening due to a 3rd party SFP interface is being used other than the Intel-supported ones.

Resolution

SSH to the packet-decoder appliance with "root" account.
Edit the file /etc/modprobe.d/ixgbe.conf to have below content:

 alias ethX ixgbe
 
alias ethY ixgbe <---- Replace X & Y with actual value like eth2 or eth3
 
options ixgbe allow_unsupported_sfp=1

Reboot the appliance.
Un-load & re-load the interface using command:

 #rmmod ixgbe 
 
#modprobe ixgbe

Issue the below command to check status of interface:

 #modinfo ixgbe

use the below command to observe the amount of Rx packets on the 10G interface:

 #netstat -i

Internal Comments

Amended submission to internal-audience.

Product Details

RSA Product Set: NetWitness Network
RSA Product/Service Type: Packet Decoder
RSA Version/Condition: 10.6.x
OS Version: CentOS6

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue