Operational Defect Database
BugZero updated this defect 54 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
VMware | 96351
NSX Network Detection and Response - SNIFFING: Warning: IOMMU enabled in the kernel boot options but not supported
Last update date:
3/26/2024
Affected products:
NSX Defender
Affected releases:
No affected releases provided.
Fixed releases:
No fixed releases provided.
Description:
Details
After upgrading hosted sensors to version 1380, lastline_test_appliance reports: > SNIFFING: Warning: IOMMU enabled in the kernel boot options but not supported And monitoring logs show this warning:
Solution
IOMMU support is not enabled on the VM settings.To fix it, on the ESXi host or vSphere go to VM > Settings > CPU > IOMMUEnabling IOMMU support will increase drastically the performance of the sniffing interfaces.With sensor 1380 we have switched the appliance to a different architecture based on the Intel DPDK framework. This leads to significant changes in appliance behavior when it comes to sniffing appliances.Note: IOMMU setting is only effective for virtual hardware 14 (ESXi 6.7 and later).
Related Information
Note: This article is applicable to the standalone NSX Network Detection and Response product (formerly Lastline) and is not intended to be applied to the NSX NDR feature of NSX-T.
