RE: [Declude.Virus] High CPU F-Prot

2005-04-29 Thread Dan Horne
us Free [MIME: 2 13549] I didn't find a time gap in any of the "Could not find parse string Infection" log entries I found. Bill - Original Message ----- From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CP

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
f the "Could not find parse string Infection" log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew, If you are only using F-Prot, you should be ab

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Dan Horne
Could not find parse string Infection" log entries I found.   Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
irus Free [MIME: 2 13549] > > I didn't find a time gap in any of the "Could not find parse string > Infection" log entries I found. > > Bill > - Original Message - > From: Matt > To: Declude.Virus@declude.com > Sent: Thursday, April 28, 20

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
+1 Markus     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 8:52 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus and Andrew,I think I have an idea as to possibly why.  I run Declud

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
ECTED]] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot On 28 Apr 2005 at 12:57, Matt wrote: Matt - If this becomes a real problem that you see and can monitor I would revert back to an older scan.exe to eliminate t

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
m: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew,If you are only using F-Prot, you should be able to find evidence of at least the delays by searching for "Could not fi

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Bill Landry
  I didn't find a time gap in any of the "Could not find parse string Infection" log entries I found.   Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Dan Horne
48701991704 Subject: Good day From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 1:58 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Andrew,If you are only using F-Prot, you should be able to find

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, April 28, 2005 10:58 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot Andrew, If you are only using F-Prot, you should be able to find evidence of at leas

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
Nick, I know.  I sometimes don't read carefully myself :) Matt Nick wrote: On 28 Apr 2005 at 13:50, Matt wrote: Sorry about being wrong on both counts.. but I was trying to help! -Nick Nick, Thanks for the reply, but I think you missed part of the discussion.This is an F

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
On 28 Apr 2005 at 13:50, Matt wrote: Sorry about being wrong on both counts.. but I was trying to help! -Nick > > Nick, > > Thanks for the reply, but I think you missed part of the > discussion.This is an F-Prot issue. Also, regardless of not finding a > parse string in report.txt, F-Prot is

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Colbeck, Andrew
27;t see the evidence of a space gap. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot On 28 Apr 2005 at 12:57, Matt wrote:

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
leave the office now)     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 7:48 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus,It's there (or should be).  Search for "Q7be703950112a342&qu

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
to help you out with this Matt, but with only one antivirus scanner, I don't see the evidence of a space gap. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
]] On Behalf Of Matt Sent: Thursday, April 28, 2005 7:28 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot Markus, Take the spool file name corresponding to the "could not find parse string" and look above it for the beginning of the log ent

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
Nick, Thanks for the reply, but I think you missed part of the discussion.  This is an F-Prot issue.  Also, regardless of not finding a parse string in report.txt, F-Prot isn't throwing one of the three codes that people around here consider to be a virus, i.e. 3, 6 or 8.  If it threw that cod

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Colbeck, Andrew
virus scanner, I don't see the evidence of a space gap. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot On 28 Apr 2005

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Darrell \([EMAIL PROTECTED])
Matt, I am seeing the same thing - but my server (this one) is way more loaded than it should. Scanner 2 is F-Prot as you can see there is an excessive amount of time when this issue occurs. It was so bad that I ended up disabling F-Prot until I can get to the bottom of this. Darrell 04/

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
ECTED] [incoming from x.x.x.x]04/28/2005 08:00:13 Q7be703950112a342 Subject: Re: Markus   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 7:28 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus,Take the

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
On 28 Apr 2005 at 12:57, Matt wrote: Matt - If this becomes a real problem that you see and can monitor I would revert back to an older scan.exe to eliminate the issue of versions. This is a possible clue: > " Could not find parse string Infection: in report.txt" What does this mean? Your vir

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
[EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, April 28, 2005 6:57 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot After further review, I'm pretty sure that there is an F-Prot issue going on here. My server hasn't been hit

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 6:57 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot After further review, I'm pretty sure that there is an F-Prot issue going on here.My server hasn't been hitting 100% yet today, an

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
After further review, I'm pretty sure that there is an F-Prot issue going on here. My server hasn't been hitting 100% yet today, and I also haven't seen any F-Prot timeouts, however I have found more compelling evidence that there is an issue with F-Prot that would probably lead to timeouts if

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
uot;{print $3}" %i | usort | uniq | wc -l     -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Wednesday, April 27, 2005 3:58 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Colbeck, Andrew
On Behalf Of Matt Sent: Wednesday, April 27, 2005 11:53 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Darrell \([EMAIL PROTECTED])
Parsers. - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Wednesday, April 27, 2005 6:57 PM Subject: Re: [Declude.Virus] High CPU F-Prot I did some monitoring and fpcmd.exe isn't normally causing excessive load and it's completely up

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
Sent: Wednesday, April 27, 2005 11:53 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to go. May

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Colbeck, Andrew
I've seen no change in the cpu usage on my F-Prot implementation of Declude Virus. My server picked up the most recent update an hour ago, so that may be important to you. In checking that I was confused, because the time stamp hadn't been hit yet. From viewing all three date columns in Explor

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Markus Gufler
[EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Matt > Sent: Wednesday, April 27, 2005 11:53 PM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] High CPU F-Prot > > I saw F-Prot time out 3 times today in my logs, and I can't > remember that ever happeni

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to go. Maybe this explains the issue. I think it's time to so some performance monitoring to see what is up. Matt Darrell ([EMAIL PROTEC