Malware scan performance issue analysis
During malware scan, data flows from the storage server where backup resides to the scan host over NFS/SMB. For more details, refer to malware scan workflow in the NetBackup Security and Encryption guide.
Establish a baseline.
On the scan host, generate 498k files of 25Kb size each using the dd command.
Run sha256sum of the files to determine how much time it takes for file read to happen.
time find /data -type f -exec sha256sum {} \;Run the malware scanner command lines to find how much time the actual scanner takes.
Defender : MpCmdRun.exe -Scan -ScanType 3 -DisableRemediation -File "<file / folder to be scanned>" Avira : avira_lib_dir_scan -log_path <log_path> -conf_path <Avira_instation_path>/bin/aviraconf.txt "file/folder>
Compare time taken by both these commands to determine if malware scanner is a bottleneck.
Determine the time taken to access Instant Access locally and over NFS.
For locally accessing Instant Access: Take a backup of "/data" folder created in step 1. Create Instant access of the backup by running the REST API.
Login into the storage server and run the following command:
time find <IA mount path> -type f -exec sha256sum {} \;For Instant Access over NFS:
Mount the Instant Access created in the previous step on the scan host and run the following command:
time find <NFS mount path> -type f -exec sha256sum {} \;Compare time taken by both the commands to check if Instant Access or NFS transport is a bottleneck.