Previous Topic: IP Addresses in Captured Data do not Match Workstation AddressesNext Topic: Some Files and Emails are Not Captured


NBA Applies Policy to Incomplete Data Streams

If a data stream is missing one or more data packets (or frames), the NBA will be unable to fully reassemble the email or file object. This situation can occur if the NBA is connected to a SPAN port on an Ethernet switch for passive mode operations, and the switch fails to pass all the frames to the NBA.

If you want to stop the NBA processing incomplete data streams, set the <capturepartialobjects> tag to false in the NBA policy. For details, see <capturepartialobjects>.

More information:

Passive Mode