McAfee® Network Security Platform 6.0
Troubleshooting Network Security Platform
32
4000/I-4010/M3050/M4050/M6050 and M8000.Sensor, which all have a much higher
throughput.
MySQL issues
The common symptoms that occur if your database tables become corrupt:
.MYI or .MYD errors reported in the ems.log file
Inability to acknowledge or delete faults in Operational Status
When trying to view packet log for in the Threat Analyzer, you receive an error
message:
You receive the message “No Packet log available for this alert at this time”
If you think that your MySQL database tables have become corrupt, follow the instructions
on verifying your tables, which is available in McAfee KnowledgeBase article KB60660 (Go
to
http://mysupport.mcafee.com/Eservice/
, and click
Search the KnowledgeBase
).
How Sensors handle various types of traffic
Non-ethernet frames are forwarded without inspection.
The following are the types of special traffic.
Jumbo Ethernet frames (on page
32
)
ISL frames (on page
32
)
Jumbo Ethernet frames
Sensors respond differently to jumbo frames based on which ports are receiving them.
Inspection is available for jumbo frames only for M-3050, M-4050, M-6050, and M-8000
Sensors.
10/100 (FE) ports: Jumbo frames are not supported. When a 10/100 port receives a
jumbo frame, the frame is dropped.
1000 (GE) port: The frame is passed through the Sensor, but is not subjected to IPS
inspection.
ISL frames
All McAfee
®
Network Security Sensor (Sensor) models (running all Sensor software
versions) pass ISL frames through the Sensor without IPS inspection.