cancel
Showing results for 
Search instead for 
Did you mean: 

Determine which file is being scanned by ENS

Jump to solution

Hi,

How can I know what are the files/processes being scanned by ENS, I'm having problems with McAfee Scanner Service which taking up alot of memory. Specially in my production servers which I cannot restart when I end the mcafee services. I've already tried the ZZZ exclusion from this kb https://kc.mcafee.com/corporate/index?page=content&id=KB89354&actp=null&viewlocale=en_US&locale=en_U...

Anyone having the same problem?

1 Solution

Accepted Solutions
McAfee Employee jess_arman
McAfee Employee
Report Inappropriate Content
Message 8 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

@braindope For more information and description regarding McAfee Profiler reporting and use, please see KB69683.

McAfee Profiler does not output performance information as it appears you're seeking; it shows frequency information, essentially. If you are looking for performance tracing then you need to use Process Monitor or Windows Performance Recorder. However, if you're just looking for what files are being scanned the most (which contributes to resource consumption), then Profiler is your desired tool and will be much clearer to read and understand. You can look to make exclusions based on what it sees in order to reduce impact.

I also advise that you review the following article for troubleshooting high CPU issues KB89354.

 

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please give kudos or select "Accept as Solution" in my reply, as appropriate, so together we can help other members?

9 Replies
denn
Level 9
Report Inappropriate Content
Message 2 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

Use McAfee Pofiler tool

Re: Determine which file is being scanned by ENS

Jump to solution
Thanks, will test it now
Pmaquoi
Level 11
Report Inappropriate Content
Message 4 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

Like Denn said,, Mcafee Profiler too is the solution and it could also be imported into ePO and launched remotely

Re: Determine which file is being scanned by ENS

Jump to solution
How can I get the data if I were to launched it via ePO? will the profiler send the data back to ePO and them I will access it via some kind of dashboard?

Re: Determine which file is being scanned by ENS

Jump to solution
McAfee Profiler tool . Use it. It is effective.

Re: Determine which file is being scanned by ENS

Jump to solution
I have test the tool, however I don't quite understand the reports, which of the reports on the profiler will tell me the file being scanned by the scanner (ex. ENS TP) and consuming the most CPU and Mem.
McAfee Employee jess_arman
McAfee Employee
Report Inappropriate Content
Message 8 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

@braindope For more information and description regarding McAfee Profiler reporting and use, please see KB69683.

McAfee Profiler does not output performance information as it appears you're seeking; it shows frequency information, essentially. If you are looking for performance tracing then you need to use Process Monitor or Windows Performance Recorder. However, if you're just looking for what files are being scanned the most (which contributes to resource consumption), then Profiler is your desired tool and will be much clearer to read and understand. You can look to make exclusions based on what it sees in order to reduce impact.

I also advise that you review the following article for troubleshooting high CPU issues KB89354.

 

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please give kudos or select "Accept as Solution" in my reply, as appropriate, so together we can help other members?

denn
Level 9
Report Inappropriate Content
Message 9 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

If you are using McAfee ENS ATP you can faced the performance issue. Affected versions 10.5.4, 10.6. 

RAM and CPU consumption. Only workaround is to remove McAfee ATP.

I have open case for ATP performance issue still waiting answer.

McAfee Employee gebenezerjc
McAfee Employee
Report Inappropriate Content
Message 10 of 10

Re: Determine which file is being scanned by ENS

Jump to solution

Hi,

Enable debug logging for threat prevention. It is verbose logging in ENS. So, it should list the files which are scanned by ENS.

 

Regards

 

Member Rewards
McAfee Community rewards active and helpful members just like you. Click here to take a look at the first community members who received a special reward and were recognized by McAfee leader, Aneel Jaeel, for their participation and trusted knowledge in the community.