Summary
You are encountering any of the following issues:
- File access becomes slow in multi-filers environment
- Filer and scan server repeats to connect/disconnect.
- Keywords “not found” or “Cannot find filer name” appears in the SPNT logs:
5316: 4896:0617111034735:SPNT(00000800):Receive VS_ScanRequest(283, \\10.172.232.18\ONTAP_ADMIN$\vol\pdbna08_v003\nafiler3_share3\ localprojects\DE1\PDB\pt\87403\terminus\bin\zeiterfass.exe) from filer [NAFILER3] 5316: 4896:0617111034735:SPNT(00000800) :GetFilerByName: pszFilerName=NAFILER3 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: szUppercaseFilerName=NAFILER3 5316: 4896:0617111034735:SPNT(00000004): CMON_GetComputerIP NAFILER3[172.18.139.7] 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: szIPAddress=172.18.139.7 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerIPAddress=10.172.232.18 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerName=nafiler3-vscan 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerIP2[i].ip_string=10.172.232.18 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerIPAddress=10.172.232.19 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerName=nafiler4-vscan 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: pFiler->m_szFilerIP2[i].ip_string=10.172.232.19 5316: 4896:0617111034735:SPNT(00000800): GetFilerByName: [NAFILER3] not found 5316: 4896:0617111034735:SPNT(00000800):!!! VS_ScanRequest(283, \\10.172.232.18\ONTAP_ADMIN$\vol \pdbna08_v003\nafiler3_share3\localprojects\DE1\PDB\pt\87403 \terminus\bin\zeiterfass.exe) from filer [NAFILER3] failed! Cannot find filer name!
- Keywords “Too many consecutive virus scan requests timed out”, “Connection terminated”, “has disconnected from the filer”in appears in the filer VScan logs:
Mon Jun 9 13:07:50 CEST [nafiler3: vscan.server.requestTimeout:error]: CIFS: Virus scan request to 10.172.232.8 for file ONTAP_ADMIN$\vol\homes03\06\antonio.notaro\ Antaro\Antonio Notaro\printkey\printkey.exe timed out. Too many consecutive virus scan requests timed out, breaking connection. Mon Jun 9 13:07:50 CEST [nafiler3: cifs.server.infoMsg:info]: CIFS: Warning for server \\VSCAN03: Connection terminated. Mon Jun 9 13:07:50 CEST [nafiler3: vscan.dropped.connection:warning]: CIFS: Virus scan server \\VSCAN03 (10.172.232.8) has disconnected from the filer. Mon Jun 9 13:07:55 CEST [nafiler3: vscan.disable:info]: CIFS: Virus scanning has been disabled. Mon Jun 9 13:08:06 CEST [nafiler3: vscan.server.connecting.successful:info]: CIFS: Vscan server \\VSCAN03 registered with the filer successfully.
Details
VScan request source doesn't match the registered filer hostname or IP, that is why it cannot be handled by the AV Scanner. This results to "Too many consecutive VScan requests timed out" in the filer. As a result, the filer has to break its connection to the AV scanner.
Do the following:
- Check if the scan server connects to multi-filers.
- Get the VScan request source and registered filer hostname or IP from SPNT.log:
Example:
VScan request source host name: nafiler3 IP:172.18.139.7
Registered filer hostname: nafiler3-vscan IP:10.172.232.18 - Register filer with the hostname[nafiler3] or IP[172.18.139.7] of the VScan request source.
- Add a host map in the hosts file under: c:\windows\system32\drivers\etc\
Example:
172.18.139.7 nafiler3-vscan
