Sensor collect only brodcast/multicast packets

[mohasmr]

Version

2.4.80

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Distributed

Location

airgap

Hardware Specs

Meets minimum requirements

CPU

8

RAM

32

Storage for /

300GB

Storage for /nsm

137

Network Traffic Collection

tap

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

Yes, there are salt failures (please provide detail below)

Logs

No, there are no additional clues

Detail

in the soc Console i only see the broadcast as destination ip i thinked that the problem from the sensor

so i tried to run some command to check the monitor interface and it seems okay

please help me i have 1 week with no vision on network

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[mohasmr]

i already resolved this issue please notice if you are facing this problem please keep in note that the wrong emplacement of the monitoring card related to virtual switch or secondary switch in the entreprise will receive only the broadcast packets you must focus on the switchs that forward the anycast packets