McAfee M4050 Troubleshooting Guide - Page 41

MySQL issues, How Sensors handle various types of traffic, Jumbo Ethernet frames, ISL frames

Get McAfee M4050 - Network Security Platform PDF manuals and user guides
UPC - 731944582832
View all McAfee M4050 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 41 highlights

McAfee® Network Security Platform 6.0 Troubleshooting Network Security Platform 4000/I-4010/M3050/M4050/M6050 and M8000.Sensor, which all have a much higher throughput. MySQL issues The common symptoms that occur if your database tables become corrupt:  .MYI or .MYD errors reported in the ems.log file  Inability to acknowledge or delete faults in Operational Status  When trying to view packet log for in the Threat Analyzer, you receive an error message:  You receive the message "No Packet log available for this alert at this time" If you think that your MySQL database tables have become corrupt, follow the instructions on verifying your tables, which is available in McAfee KnowledgeBase article KB60660 (Go to http://mysupport.mcafee.com/Eservice/, and click Search the KnowledgeBase). How Sensors handle various types of traffic Non-ethernet frames are forwarded without inspection. The following are the types of special traffic. Jumbo Ethernet frames (on page 32) ISL frames (on page 32) Jumbo Ethernet frames Sensors respond differently to jumbo frames based on which ports are receiving them. Inspection is available for jumbo frames only for M-3050, M-4050, M-6050, and M-8000 Sensors.  10/100 (FE) ports: Jumbo frames are not supported. When a 10/100 port receives a jumbo frame, the frame is dropped.  1000 (GE) port: The frame is passed through the Sensor, but is not subjected to IPS inspection. ISL frames All McAfee® Network Security Sensor (Sensor) models (running all Sensor software versions) pass ISL frames through the Sensor without IPS inspection. 32

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
McAfee® Network Security Platform 6.0
Troubleshooting Network Security Platform
32
4000/I-4010/M3050/M4050/M6050 and M8000.Sensor, which all have a much higher
throughput.
MySQL issues
The common symptoms that occur if your database tables become corrupt:
.MYI or .MYD errors reported in the ems.log file
Inability to acknowledge or delete faults in Operational Status
When trying to view packet log for in the Threat Analyzer, you receive an error
message:
You receive the message “No Packet log available for this alert at this time”
If you think that your MySQL database tables have become corrupt, follow the instructions
on verifying your tables, which is available in McAfee KnowledgeBase article KB60660 (Go
to
, and click
Search the KnowledgeBase
).
How Sensors handle various types of traffic
Non-ethernet frames are forwarded without inspection.
The following are the types of special traffic.
Jumbo Ethernet frames (on page
32
)
ISL frames (on page
32
)
Jumbo Ethernet frames
Sensors respond differently to jumbo frames based on which ports are receiving them.
Inspection is available for jumbo frames only for M-3050, M-4050, M-6050, and M-8000
Sensors.
10/100 (FE) ports: Jumbo frames are not supported. When a 10/100 port receives a
jumbo frame, the frame is dropped.
1000 (GE) port: The frame is passed through the Sensor, but is not subjected to IPS
inspection.
ISL frames
All McAfee
®
Network Security Sensor (Sensor) models (running all Sensor software
versions) pass ISL frames through the Sensor without IPS inspection.