Question & Answer
Question
Guardium message.log file shows this error: nanny: [6140]: nanny: Non-stap traffic on stap port detected or stap link failure
Cause
Every 300 seconds, a process called "nanny" wakes up in the appliance and checks the iptables on the appliance for any traffic using 16016, 16018, 9500, or 9501 as the destination port. These are all ports the appliance uses to listen to STAP traffic.
If the nanny process finds recent traffic on these ports, it checks its internal database for a legitimate STAP heartbeat.
If there is no recent STAP heartbeat, it issues the message shown above to the syslog, which is then sent to your remote syslog server.
Answer
There are 2 reasons why the system would not find a recent heartbeat in the database:
1 - The STAPs have gone down.
2 - No STAPs were ever configured for the appliance.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg22001306