NSX Alert: Possible DHCP DOS Attack on Host

Posted on by Jordansphere

Problem

Running NSX. 6.4.3. An error was keep appearing on one of our 6.7 ESXi hosts:

NSX Alert: Possible DHCP DOS attack on host

NSx_Dos1

 

Resolution

I believe this is a false positive from a bug in 6.4.x

To check if there are any issues log into the affected ESXi host and run the following command: 

# net-swsec --host-notifications -o getVMs

NSx_Dos2

You should see No VMs under attack if its a false positive