Skip To Main Content
Support Knowledge Base

Is There a Way to Disable Malicious Driver Detection (MDD) on Intel® Ethernet Controllers E810, X710 and X722?

Content Type: Product Information & Documentation   |   Article ID: 000096445   |   Last Reviewed: 12/18/2023

Environment

Operating System

OS Independent family

Description

It was possible to disable this feature in previous Intel® Ethernet Controller 500 Series cards, but it is not possible to determine if this can be done on cards E810, X710 and X722.

Resolution

Malicious Driver Detection is a security feature to protect the hardware from malicious actors, and there is no option to disable MDD for the 700 and 800 series. MDD events are triggered by the hardware and reported to the driver. The driver will then reset the hardware.

Some general debug recommendations:

  • Ensure the card firmware (NVM) is up to date.
  • When debugging a MDD issue, it is important to understand what traffic is causing the error, ideally capturing this traffic with a packet capture (i.e. pcap) tool such as tcpdump or Wireshark.
  • One debug option for determining the area of possible cause is to try disabling the TSO offload.
    • Commonly, when MDD issues arise, it is in DPDK (development) environments. One typical cause for this is rooted in packet preparation and 0 length packets being incorrectly sent by the DPDK application. Always clarify if DPDK is present in the environment for these issues in particular.