Decomposer / 17 Errors when scanning files in a share used by EMC RepliStor with Scan Engine 5.x or SAV for NAS 5.x

Products

• Scan Engine

Issue/Introduction

Symptoms
 

• The following error appears in the Application Log of the Windows Event Viewer:
  Eventid: 103
  Source: SYMCScan
  Type: Error
  Description:
  The Scan engine has encountered an error.
  Date/Time of the event: <<date>> <<time>>
  Event severity level = Error
  Scanner = Decomposer
  Result ID = 17
  File name=\\<<name or IP>>\CHECK$\<<path where one or more folders contain hexadecimal numbers only>>\<<filename in 8.3 format>>
  Client IP=127.0.0.1
  
• Symantec Scan Engine is registered as an Antivirus scanning device with one or more EMC Celerra devices
• One or more of the EMC Celerra servers host one or more network shares in use by a third party realtime mirroring utility, such as EMC RepliStor.
• One or more of the network shares in use by a third party realtime utility have reached 100% usage of its storage capacity and have 0 bytes storage free.
• When you attempt to examine the file the event references, the file is not present on the EMC Celerra server.

 

 

Cause

Realtime storage utilizes by their nature are required to lock files while they complete a download. This causes file permission collisions, resulting in Scan Errors at the Scan Engine.

Resolution

• To significantly reduce the number of scan errors, move the RepliStor storage to a storage device which does not refer files to Scan Engine for antivirus scanning.
• Alernatively, accept that you will continue to see a large number of scan errors on an intermittent basis and disable the email notification feature within the Scan Engine interface.

To disable email notification within Scan Engine

1. In the Scan Engine web interface, click Monitors.
2. Click Alerting
3. Under SMTP Notification, in the "SMTP Notification Level" dropdown box , select "None".
4. Click the Save icon

Technical Information
 

To confirm free space at the CLI of the EMC Celerra server

1. Log in with the nasadmin account
2. At the command line interface (CLI), type: df_server server_2