Views:
The following are several tips for troubleshooting packet reception issues on Amazon EC2.
  • Use the Deep Discovery Inspector virtual appliance Network Traffic Dump
    On the Deep Discovery Inspector virtual appliance, go to Troubleshooting → Network Traffic Dump and capture packets to check the data port's reception.
    network-traffic-dump.png
  • Verify Network ACLs settings
    For details, see https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html.
  • Verify Security Group settings
    For details, see https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html. For the traffic mirror target, the traffic mirror target requires the allowance of VXLAN traffic (UDP port 4789) from the traffic mirror source in the security groups that are associated with the traffic mirror target.
    Note
    Note
    If you are using deploying Deep Discovery Inspector behind an NLB, you may need to allow custom traffic (TCP port 14789) to the Deep Discovery Inspector virtual appliance in the security groups that are associated with the Deep Discovery Inspector virtual appliance.