Mailing List Archive: Netapp: toasters

VSCAN messages

Index | Next | Previous | View Threaded

tekievb at gmail

Jan 13, 2009, 2:57 PM

Post #1 of 4 (2055 views)
Permalink

VSCAN messages

NetApp FAS270 FAS3020 and FAS3140A DOT ver 7.2.3
McAfee Vscan for NetApp Filers v7.1

I am seeing a lot of the following messages in /etc/messages

ERROR: [vscan.virus.detected:error]: CIFS: Virus Detected - <file path> in
share [Share name not available] accessed by client **unknown**
(**unknown**) running as user **unknown** is infected. The filer received
status message Error 5 ...Continuing and error code [5] from vscan
(anti-virus) server **unknown**.

The service account of the Vscan application is in the local admin group of
the filer. NetApp has recommended upgrading to DOT 7.3 but I am somewhat
hesitant since all of filers are using quotas and usermap.cfgs - have seen a
few emails concerning "panic" problems.

Has anyone else seen similar results with their Vscan application on the
filers?

Regards,

Robert.Reber at stadt

Jan 14, 2009, 12:05 AM

Post #2 of 4 (1902 views)
Permalink

AW: VSCAN messages [In reply to]

Yes, this is a known problem which should have been fixed in 7.2.3 but apparently isn´t - the workaround is

priv set diag ; setflag smb_vscan_delay_close_resp 1 ; priv set;vscan off ; vscan on

Try that - if it works, then put it in the /etc/rc of your filer(s) - works fine for us - I tried it without the workaround after the last few ONTAP-Updates since it should be fixed, but always had to put it back into /etc/rc...

Greetz,

Rob

-----Ursprüngliche Nachricht-----
Von: owner-toasters [at] mathworks [mailto:owner-toasters [at] mathworks]Im Auftrag von JamieB
Gesendet: Dienstag, 13. Januar 2009 23:57
An: toasters [at] mathworks
Betreff: VSCAN messages

NetApp FAS270 FAS3020 and FAS3140A DOT ver 7.2.3
McAfee Vscan for NetApp Filers v7.1

I am seeing a lot of the following messages in /etc/messages

ERROR: [vscan.virus.detected:error]: CIFS: Virus Detected - <file path> in share [Share name not available] accessed by client **unknown** (**unknown**) running as user **unknown** is infected. The filer received status message Error 5 ...Continuing and error code [5] from vscan (anti-virus) server **unknown**.

The service account of the Vscan application is in the local admin group of the filer. NetApp has recommended upgrading to DOT 7.3 but I am somewhat hesitant since all of filers are using quotas and usermap.cfgs - have seen a few emails concerning "panic" problems.

Has anyone else seen similar results with their Vscan application on the filers?

Regards,

Robert.Reber at stadt

Jan 14, 2009, 7:25 AM

Post #3 of 4 (1895 views)
Permalink

AW: VSCAN messages [In reply to]

Yes, it´s 250419.
The problem still appears (currently using ONTAP 7.2.5.1) though.

-----Ursprüngliche Nachricht-----
Von: Eugene Vilensky [mailto:evilensky [at] gmail]
Gesendet: Mittwoch, 14. Januar 2009 15:23
An: Reber, Robert
Cc: toasters [at] mathworks
Betreff: Re: VSCAN messages

On Wed, Jan 14, 2009 at 2:05 AM, <Robert.Reber [at] stadt> wrote:
> Yes, this is a known problem which should have been fixed in 7.2.3 but
> apparently isn´t - the workaround is

Hi,

Is there a bug ID on this?

Sureshkumar.N at netapp

Jan 15, 2009, 3:33 AM

Post #4 of 4 (1888 views)
Permalink

RE: VSCAN messages [In reply to]

There are two burts associated with this, 250419 and 301322. In a release which has both the burts fixed, there is no workaround required. But this workaround required for a release with only 250419 fixed.

Thanks!

Sureshkumar N
PPE - NAS BU
NetApp
+91-80-4184 3328 Direct
sureshkumar.n [at] netapp
www.netapp.com

-----Original Message-----
From: Robert.Reber [at] stadt [mailto:Robert.Reber [at] stadt]
Sent: Wednesday, January 14, 2009 8:55 PM
To: evilensky [at] gmail
Cc: toasters [at] mathworks
Subject: AW: VSCAN messages

Yes, it´s 250419.
The problem still appears (currently using ONTAP 7.2.5.1) though.

-----Ursprüngliche Nachricht-----
Von: Eugene Vilensky [mailto:evilensky [at] gmail]
Gesendet: Mittwoch, 14. Januar 2009 15:23
An: Reber, Robert
Cc: toasters [at] mathworks
Betreff: Re: VSCAN messages

On Wed, Jan 14, 2009 at 2:05 AM, <Robert.Reber [at] stadt> wrote:
> Yes, this is a known problem which should have been fixed in 7.2.3 but
> apparently isn´t - the workaround is

Hi,

Is there a bug ID on this?

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads