1.  Home
  2. DOMINO400
  3. February 2004

Re: Tuning TrendMicro's DBSCAN

We run PUPDATE 5 times a day: 7:00, 9:45, 11:00, 16:00, 18:00.  And still 
there's a lot of hits in DBSCAN.  Scary, huh?

On the server we run this, darned near all the databases are mail files.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
Sent by: domino400-bounces@xxxxxxxxxxxx
02/05/2004 11:03 AM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: Tuning TrendMicro's DBSCAN






Rob,

Not sure if there are specific iSeries tunings, but if so we would love to 

hear it.

Here is what Trend states about the incremental scan:

"The Incremental Scanning saves considerable server time and resources. 
Incremental scanning allows selective scanning of new and newly modified 
documents only during Manual and Scheduled database scans. Documents that 
have been scanned need not be scanned again."

This should mean that you shouldn't miss anything since is is scanning new 

and modified documents since the last scan. Of course if you have a new 
virus from before the pattern update in an existing, unchanged document 
then you may have that to worry about. One thing you could do is change 
the manual dbscan to only include the mail folder and not perform 
incremental scan (this could save a little time).

How often are you running PUPDATE?

Chris Whisonant
Comporium
Senior Mid-Range Systems Administrator
IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
IBM Certified Associate System Administrator - Lotus Notes and Domino 6
803.326.7270 (W)
803.326.6142 (F)

domino400-bounces@xxxxxxxxxxxx wrote on 02/05/2004 10:12:29 AM:

> That's the same advice I just received from Trend.  I did ask to speak 
> with their AS/400 specialist to see what iSeries specific tuning 
> recommendations may be made.  I am still waiting on the call back.
> 
> Any concerns about an incremental scan missing something?  For example, 
I 
> run a DBSCAN after I've received an email with the latest and greatest 
> virus, and prior to Trend having a new pattern file for it. (Granted, 
> they're very diligent and that is a small window of opportunity, but if 
> you'd see all the hits that DBSCAN did get...).  Then I run a DBSCAN 
after 
> getting a new pattern file, it will not rescan the databases with that 
> latest virus, and I'm toast.
> 
> Rob Berendt
> -- 
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
> 
> 
> 
> 
> 
> Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
> Sent by: domino400-bounces@xxxxxxxxxxxx
> 02/05/2004 09:21 AM
> Please respond to
> Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
> 
> 
> To
> Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
> cc
> 
> Fax to
> 
> Subject
> Re: Tuning TrendMicro's DBSCAN
> 
> 
> 
> 
> 
> 
> Under the configuration for the Manual and/or Scheduled Database Scan in 


> the smconf.nsf database there is an option near the bottom for 
Incremental 
> 
> Scan. Select this option and it will scan docs that have not already 
been 
> scanned.
> 
> 4 days....WOW!!!
> 
> Chris Whisonant
> Comporium
> Senior Mid-Range Systems Administrator
> IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
> IBM Certified Associate System Administrator - Lotus Notes and Domino 6
> 803.326.7270 (W)
> 803.326.6142 (F)
> 
> domino400-bounces@xxxxxxxxxxxx wrote on 02/05/2004 09:09:12 AM:
> 
> > On a system with 677 mail files totalling around 170gb we ran DBSCAN, 
> > manually.  After 4 days of running we bounced the server for other 
> > business reasons.  Of course this aborted the scan.
> > 
> > Any way to tune that bad boy to finish in a more timely fashion?
> > 
> > This system is dedicated to domino.  As long as other domino processes 


> run 
> > I do not care about other interactive and batch processes.  The number 


> of 
> > iSeries userid's is very limited.  Strictly operations personnel. 
There 
> 
> 
> > are no 'traditional' batch jobs.  Backup is only done once a week, 
> > dedicated, from the system console.  (It's a cluster backup machine.)
> > 
> > Resource        Type-model
> > CEC01            9406-270 
> > PN01             247D 
> > MP01             25BD-000 
> > MP02             25BD-000 
> > PV01             2454-001 
> > 
> > Sys      Pool   Reserved    Max  ----DB-----  --Non-DB---  Act- Wait- 
> > Act- 
> > Pool    Size M   Size M     Act  Fault Pages  Fault Pages  Wait   Inel 


> > Inel 
> >   1     191.27    106.29  +++++     .0    .0    8.0   8.8   13.1 .0 
> > .0
> >   2    2656.01      7.05    838    1.6   3.6  157.2 350.9   4860 .0 
> > .0
> >   3     149.86       .00     58     .0    .0     .2    .3    1.0 .0 
> > .0
> >   4        .25       .00      1     .0    .0     .0    .0     .0 .0 
> > .0
> > (scan not running at this time)
> > 
> > Controlling subsystem  . . . :   QBASE
> > 
> > Rob Berendt
> > -- 
> > Group Dekko Services, LLC
> > Dept 01.073
> > PO Box 2000
> > Dock 108
> > 6928N 400E
> > Kendallville, IN 46755
> > http://www.dekko.com
> > 
> > _______________________________________________
> > This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing 
list
> > To post a message email: Domino400@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/domino400
> > or email: Domino400-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/domino400.
> > 
> _______________________________________________
> This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
> To post a message email: Domino400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/domino400.
> 
> 
> _______________________________________________
> This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
> To post a message email: Domino400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/domino400.
> 
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.

As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.