Skip to content
  • There are no suggestions because the search field is empty.

Unable to receive packets on a virtual log decoder interface that is using a VLAN on NetWitness Platform

Issue

Not able to see traffic that is configured on a VLAN switch being sent to a virtual log decoder.


Resolution

Check your ports configuration for your network connection.  If you are using a switch that uses multiple VLAN destinations a VLAN ID may need to be set.  Verify that the VLAN ID is not set to none, in the following screenshot you see it set to All:

VLAN
Also below is the reference on assigning a VLAN ID to an ESXi host:
https://docs.vmware.com/en/VMware-vSphere/5.5/com.vmware.vsa.doc/GUID-6A7C75BF-67F9-4517-9BC2-613E2D928CF9.html

Product Details

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.3.2.0

Summary

Assist with reference to show the configuration of a VLAN port configuration when it is configured to none.


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue