NSX Alert: Possible DHCP DOS Attack on Host

April 1, 2019 Jordansphere ESXi

Problem

Running NSX. 6.4.3. An error was keep appearing on one of our 6.7 ESXi hosts:

NSX Alert: Possible DHCP DOS attack on host

NSx_Dos1

 

Resolution

I believe this is a false positive from a bug in 6.4.x

To check if there are any issues log into the affected ESXi host and run the following command:

# net-swsec --host-notifications -o getVMs

NSx_Dos2

You should see No VMs under attack if its a false positive

NSX Alert, Possible DHCP DOS Attack on Host,

Powered by WordPress. Designed by elogi.