Forum Discussion
StuKirby
Nimbostratus
NimbostratusAFM Drops drop_reason="Connection Flow Miss"
Hi
We have AFM logs going to a SIEM and they are generating thousands per hour drops for the reason drop_reason="Connection Flow Miss". Google yielded not much so didn't know if anyone has seen ...
Jinshu
Cirrus
CirrusHi mate,
Packets that were dropped because of a flow table miss. A flow table miss occurs when a TCP non-SYN packet does not match an existing flow.
You can disable this logging to SIEM if you would like to.
Hope this helps.
-Jinshu
