cancel
Showing results for 
Search instead for 
Did you mean: 
epo909
Level 9

WHAM Checks and SMB bottleneck

Jump to solution

Hello.

My MVM setup runs monthly vuln scans, full WHAM checks, on groups of 100 windows assets. The batch sizes are set to 32 and the sub-scans to 10. Some of these scans take up to 8 hours to complete.

We noticed that in the first 10 minutes of the scan, after the discovery phase, the FSL scripts per minute for each batch are ~700, the CPU goes up to 25% (4 cores) and the Network occupation goes no further than 33-35%.

After the first 10 minutes the FSL per minute drops slowly to 100-200 and the CPU and Network Bandwidth drop to < 5%. (During this time the TCP retransmission level is null).

The scan engine is a dedicated MVM-3000 (scan engine only).

How can we avoid the FSL drops and why they happen?

Thanks in advance

RD

0 Kudos
1 Solution

Accepted Solutions
cgrim
Level 13

Re: WHAM Checks and SMB bottleneck

Jump to solution

Hi RD,

Sometimes this can be attributed to memory throttling.  We'd need to see the logs to be sure.

Can you open a Service Request, connect the daily log, and post the SR # here.

I can have a look at it.

-Cathy

0 Kudos
2 Replies
cgrim
Level 13

Re: WHAM Checks and SMB bottleneck

Jump to solution

Hi RD,

Sometimes this can be attributed to memory throttling.  We'd need to see the logs to be sure.

Can you open a Service Request, connect the daily log, and post the SR # here.

I can have a look at it.

-Cathy

0 Kudos
epo909
Level 9

Re: WHAM Checks and SMB bottleneck

Jump to solution

Hello Cathy.

I've PM you with the requested details.

Thanks in advance.

RD

0 Kudos