Endpoint Protection

 View Only
  • 1.  High disk I/O - SEP 12.1.2

    Posted May 24, 2013 07:20 AM

    Hi,

    I have discovered high disk load after upgrading to RU2. In resource monitor, you can see process SYSTEM that consumes all disk resources (read) for 10-20 minutes, few times a day randomly and always after system starts. It reads "random" files (DLLs, JPEGs, MP3 and so on). And no scan is logged or scheduled !

     

    According to my research:

    a) I have checked inventory SW (alitiris), windows updates a so on - no scans/updates in working hours

    b) same symtoms on all used OS ( employee's Windows XP, my own Win 8, my boss's Win 7frown) but not all computers

    c) only SEP 12.1 version RU2 and RU2 MP1 (older for example 12.1 RU1 MP1 is ok)

    d) it starts after new definitions arrive (scan after new definitions arrival is now disabled but it is still the same) and boot

    e) if it starts there are only two ways how to stop it:

    - smc.exe -stop

    - in SEP GUI - disable autoprotect (after this, high disk load stops immediately)

     

     

    Has anyone registered same problem ? Any ideas (downgrade, of course smiley) ?

     

    Thanks



  • 2.  RE: High disk I/O - SEP 12.1.2

    Posted May 24, 2013 07:24 AM

    hello,

    Check this discussion

    https://www-secure.symantec.com/connect/forums/high-disk-activity-sep-services



  • 3.  RE: High disk I/O - SEP 12.1.2
    Best Answer

    Posted May 24, 2013 07:31 AM

    Can you try disabling the option to rescan the file cache when new definitions arrive to see if this imporves performance?  This has been known to cause peformance issues in some cases.

    http://www.symantec.com/docs/HOWTO27136



  • 4.  RE: High disk I/O - SEP 12.1.2

    Posted May 24, 2013 08:13 AM

    Sounds good, I will try it.

     

    Thanks



  • 5.  RE: High disk I/O - SEP 12.1.2

    Posted May 24, 2013 08:48 AM

    Do you have the options Run an Active Scan when new definitions arrive or Allow startup scans to run when users log on checked?



  • 6.  RE: High disk I/O - SEP 12.1.2

    Posted May 24, 2013 08:58 AM

    Both options are disabled.



  • 7.  RE: High disk I/O - SEP 12.1.2

    Posted May 27, 2013 01:19 AM

     

    Hi, 

    Have you verified your HDD health status, i have faced the same and after a long research i found that HDD having some problem.

    Regards

    Ajin



  • 8.  RE: High disk I/O - SEP 12.1.2



  • 9.  RE: High disk I/O - SEP 12.1.2

    Posted May 29, 2013 05:09 AM

    Disabling rescan cache after new definitions load really solved this problem, thanks.

     

    Off-topic question, I'm just interested in, is why it has started after upgrade to RU2 ?



  • 10.  RE: High disk I/O - SEP 12.1.2

    Posted May 29, 2013 05:26 AM

    That's difficult to judge to be honest.  The rescanning of the file cache has been known to cause issues with machines with limited disk i/o for ages (as it's running a scan).  Why it's suddenly become an issue for you however, is subject to loads of variables including disk health, number of files in the cache (i.e. believed to be clean), changing definitions, reduced disk i/o rates (i.e. increased number of virtual guests), etc.