Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

Some network traffic is not being analzyed

Copper Contributor

I have sensors installed on 3 domain controllers and 2 of them are now saying "Some network traffic is not being analyzed. Sensor, $hostname, is receiving more network traffic than it can process. A portion of the network traffic is not analyzed." 

 

This worked for about a week before I started receiving this error message. Is there a minimum requirement for the ATP sensor to run properly? 

2 Replies
best response confirmed by Robert Wu Admin (Copper Contributor)
Solution

Hi Robert, Are these DCs running under VMWare? If so, then it's not a problem with the resource allocated to the DC, but you will need to make a change to the NIC configuration in VMWare. You will need to disable the “IPv4 TSO Offload” in the NIC.

 

Let me know if this resolves the monitoring alert.

Thanks this worked.
1 best response

Accepted Solutions
best response confirmed by Robert Wu Admin (Copper Contributor)
Solution

Hi Robert, Are these DCs running under VMWare? If so, then it's not a problem with the resource allocated to the DC, but you will need to make a change to the NIC configuration in VMWare. You will need to disable the “IPv4 TSO Offload” in the NIC.

 

Let me know if this resolves the monitoring alert.

View solution in original post