AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20090428110045.7d2c2c1d@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@onstor.com
RQ:
SSV:mail.onstor.net
NSV:
SSH:
R:<acooke@css.glasshouse.com>,<dl-cstech@onstor.com>
MAID:1
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/andys@onstor.net@exch1.onstor.net/INBOX	0	200904281512.n3SFCZL28264@mailhost-rtp.css.glasshouse.com
X-Sylpheed-End-Special-Headers: 1
Date: Tue, 28 Apr 2009 11:01:56 -0700
From: Andrew Sharp <andy.sharp@onstor.com>
To: "Alan Cooke (Glasshouse)" <acooke@css.glasshouse.com>
Cc: dl-cstech <dl-cstech@onstor.com>
Subject: Re: Questions about vscan stats - case 12270
Message-ID: <20090428110156.6dc7c8fd@ripper.onstor.net>
In-Reply-To: <200904281512.n3SFCZL28264@mailhost-rtp.css.glasshouse.com>
References: <200904281512.n3SFCZL28264@mailhost-rtp.css.glasshouse.com>
Organization: Onstor
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Tue, 28 Apr 2009 08:13:43 -0700 "Alan Cooke (Glasshouse)"
<acooke@css.glasshouse.com> wrote:

> Hi All,
> Two questions about vsanning:
>=20
> 1) I have a customer =E2=80=93 British Energy =E2=80=93 case 12270 =E2=80=
=93 where they say they are getting many error messages:
> vscan:WARNING: 2325097: 5: request on scanner 10.133.140.100 did not comp=
lete in 20 seconds (xid 7773ec0)
> They are using a McAfee virus scanner.
>=20
> Customer asks if there is a way to extend the timeout =E2=80=93 is there =
a way?
>=20
> 2) I looked at this customer=E2=80=99s overnight config and saw the vscan=
 stats output:
>=20
> <nfxshCmd cmd=3D"stats vscan" rc=3D'0'>
> Files found infected: 0
> Files successfully repaired: 0
> Number of scan requests: 15855415

That's over 15 million scan requests.  Dang.

> Bytes scanned: 1538365716638891

That's, what, 1.4 PiB?  Holy cow.

> Total time spent in virus scan (msec): 3176484403
> Average time per file: 200.340668
> Bytes per second: 484298229.886795
> Number of requests currently in progress: 0
> Maximum number of requests in progress: 3193

That's just a high water mark of the most that were in progress at
once.  Once upon a time.  But yeah, it's high.  This NAS gateway that
they're using must be some kick ass piece of equipment.

> </nfxshCmd>
>=20
> This number =E2=80=93 =E2=80=9CMaximum number of requests in progress: 31=
93=E2=80=9D
> Does that mean "this number is the maximum number of requests that have b=
een simultaneously been run since ..."
> Well that would make question 3 =E2=80=93 since when? A reset? A reboot?
> That does seem a very high number if there really were over 3000 simultan=
eous requests.
>=20
> I did look at the diag manual =E2=80=93 that says =E2=80=9C  the maximum =
number of virus scan requests that are in process.=E2=80=9D which does not =
really help much.
>=20
> Can someone advise me about this?
>=20
> Thanks =E2=80=A6 Alan.
>=20
>=20
