Why are DAR bytes scanned on the Scan Detail Report different than actual bytes?
Article ID: 159968
Data Loss Prevention Network Discover
DAR bytes scanned on the scan detail report are different from the actual bytes.
The following reasons can account for having a difference between the number of DAR bytes scanned on the scan detail report and the actual number of bytes in a given share:
File exclusions: File exclusions can cause differences to the extent that there are files that get excluded from the scans
Very large files: Any files that are > 30 MB are scanned only for the first 30 MB, and this is what gets reported in the scan detail report. Any files that are larger than 30 MB cause a difference in the scan results
Directory permission errors: If a scan cannot be accessed due to credential failure, these are excluded from the scans and cause a difference