I'm not sure what you're looking for or trying to achieve.
Can you provide more detail on exactly what you're looking for or the problem you're having?
In the CLI Guide, the show autorecovery status state that: "On data path errors Sensor goes layer2 mode and tries to auto-recover. During a datapath error, the
auto recovery feature reboots the datapath threads without interruption to traffic." So, i wonders what is the datapath and what is Layer2 mode?
Thanks and Regards!
The data path here refers to the processors, of which there are several. When one of the processors encounters an error the sensor stops inspecting traffic and tries to restart the process.
If the process can not be restarted the sensor will most likely reboot.
When the sensor is in Layer 2 mode the inspection engine is disabled and traffic flows through the sensor without any alerts being generated or action being taken.
You can manually put the sensor into Layer 2 mode when you are troubleshooting issues such as latency, you will find examples of Layer 2 mode and when it is used in the troubleshooting guide available below.
Network Security Platform documentation reference guide
Thanks for your information.
The NIC Processors(data plane) or the Central CPU(Control Plane)? Because i know that Mcafee NSP is ASIC-based.
I'm not sure of the answer to your question.
Have a look at the section on rebooting a sensor in the IDS Admin guide, it might explain the process clearer.