在尝试扫描文件以进行vscan时、AV服务器会报告权限问题描述和运行时减载

最后更新
另存为PDF

Views:: 18

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

适用场景

ONTAP 9
Vscan
防病毒(AV)
Trellx/McAfee

问题描述

访问和打开CIFS共享速度非常慢或挂起、QoS统计信息延迟显示表示延迟来自Vscan。

::> qos statistics volume latency show -vserver SVM1 -volume Vol1 Workload ID Latency Network Cluster Data Disk QoS Max QoS Min NVRAM Cloud FlexCache SM Sync AVSCAN ------------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ------------------- vol1 12345 55.12ms 199.00us 0ms 679.00us 799.00us 0ms 0ms 0ms 0ms 0ms 0ms 53.12ms vol1 12345 252.21ms 218.00us 0ms 566.00us 60.00us 0ms 0ms 0ms 0ms 0ms 0ms 221.23ms

事件日志显示vscanConnBackPressure 和 vscanExcessiveTOs 错误：

[node-01: kernel: Nblade.vscanConnBackPressure:error]: For Vserver "svm1", AV server "172.2.3.2" is too busy to accept new scan requests. [node-01: kernel: Nblade.vscanExcessiveTOs:error]: Vscan timed-out scanning events exceeded 2000 in the last 30 minutes for Vscan server (IP: 172.2.3.4) in SVM "svm1". [node-01: kernel: Nblade.vscanExcessiveTOs:error]: Vscan timed-out scanning events exceeded 2000 in the last 30 minutes for Vscan server (IP: 172.2.3.2) in SVM "NVFILVIG003". [node-01: kernel: Nblade.vscanExcessiveTOs:error]: Vscan timed-out scanning events exceeded 2000 in the last 30 minutes for Vscan server (IP: 172.2.3.3) in SVM "svm1". [node-01: kernel: ems.engine.suppressed:debug]: Event 'Nblade.vscanConnBackPressure' suppressed 1142 times in last 608 seconds. [node-01: kernel: Nblade.vscanConnBackPressure:error]: For Vserver "svm1", AV server "172.2.3.4" is too busy to accept new scan requests.

Vscan统计信息显示了大量延迟
Vscan事件显示扫描请求超时

Node Vserver Server Event Log Time Event Type File Path node-01 svm1 1/29/2025 12:21:34 scan-timedout \user1\file0001.db node-01 svm1 1/29/2025 12:21:34 scan-timedout \user3\file0002.ERW node-01 svm1 1/29/2025 12:21:34 scan-timedout \user9\file032345.db

在尝试扫描发送给它以执行Vscan问题描述操作的文件时、Trellix Vscan扫描程序会报告"Permission Vscan (权限扫描)"：

Scan Started AVSERVER04 Scan Request Received From :127.0.0.1 File to scan : \\?\UNC\172.2.3.1\ontap_admin$\\user1\file0001.db Scan Result AVSERVER04 Failed to scan due to permission issue: \\?\UNC\172.2.3.1\ontap_admin$\\user1\file0001.db Scan Started AVSERVER04 Scan Request Received From :127.0.0.1 File to scan : \\?\UNC\172.2.3.1\ontap_admin$\\user3\file0002.ERW Scan Result AVSERVER04 Failed to scan due to permission issue: \\?\UNC\172.2.3.1\ontap_admin$\\user3\file0002.ERW