Some network traffic is not being analzyed

[Robert Wu Admin]

I have sensors installed on 3 domain controllers and 2 of them are now saying "Some network traffic is not being analyzed. Sensor, $hostname, is receiving more network traffic than it can process. A portion of the network traffic is not analyzed." 

This worked for about a week before I started receiving this error message. Is there a minimum requirement for the ATP sensor to run properly? 

[#2 · Accepted solution]

Hi Robert, Are these DCs running under VMWare? If so, then it's not a problem with the resource allocated to the DC, but you will need to make a change to the NIC configuration in VMWare. You will need to disable the “IPv4 TSO Offload” in the NIC.

Let me know if this resolves the monitoring alert.

[#3]

Thanks this worked.