toasters January 2001

toasters@lists.teaparty.net

135 participants
157 discussions

RE: Anitvirus on netapp
by Jonathan Dodman 31 Jan '01

31 Jan '01

We have two F760's which have an NT4 janitor box, running Netshield 4.5. We have set Netshield up to carry out scheduled scans of the volumes on a daily basis (set up admin shares on the filers for each volume). We have also throttled the scans to low priority, so that they do not interfere with the performance of the filers. This works fine, but only if a small ammount of data is on the filers (We have about 300GB), as this provides enough time for the scans to complete within a 24 hour period. On access scanning is the main bugbear, as our users work on Citrix Metaframe on Windows 2000 Terminal servers, which does not support on access virus scanning !! Does anybody else know of a way around this ? Regards Jon Dodman Server Technology Services Office +44 (0) 1473 222445 Mobile +44 (0) 771 8149324 dodmanj(a)willis.com "Maglinger, Paul" <PMAGLINGER(a)scvl.com>@mathworks.com on 30/01/2001 21:46:34 Sent by: owner-toasters(a)mathworks.com To: "'Marianne Lindberg'" <Marianne.Lindberg(a)nsc.com> toasters(a)mathworks.com cc: bcc: Subject: RE: Anitvirus on netapp We're using our filer for data storage, so anything that goes on it has to come from workstation or server. We use Network Appliance, kinda taking a "perimeter" approach to the subject. Anything that goes on or comes off the filer has to go through a workstation or server. -----Original Message----- From: Marianne Lindberg [mailto:Marianne.Lindberg@nsc.com] Sent: Tuesday, January 30, 2001 09:28 To: toasters(a)mathworks.com Subject: Re: Anitvirus on netapp I'd be curious about what everyone (who has CIFS data on their Filers) is using as well. We're using Network Associates' (nee McAfee) Netshield from an NT Server. The Server version does allow you to scan network drives. You might find that a different version of Norton would do the same. What about everyone else? Regards, Marianne uwe_goebel(a)mentorg.com 01/30/01 03:09 AM To: toasters@mathworks.com@Internet cc: (bcc: Marianne Lindberg/Americas/NSC) Subject: Anitvirus on netapp Hi there, I'm curious how everybody is checking against viruses at the filers. We tried to use a PC were NAV is installed and configured NAV to check network drives, but unfortunatly it doesn't check the network drives. Any ideas or suggestions? Thanx --- Uwe GOEBEL System & Network Administrator Information Technology Mentor Graphics Deutschland GmbH <mailto:uwe_goebel@mentor.com> uwe_goebel(a)mentor.com ______________________________________________________________________ The information in this email and in any attachments is confidential and may be privileged. If you are not the intended recipient, please destroy this message, delete any copies held on your systems and notify the sender immediately. You should not retain, copy or use this email for any purpose, nor disclose all or any part of its content to any other person.

1 0

RE: Anitvirus on netapp
by Gifford, Josh 31 Jan '01

31 Jan '01

We use Trend Micro's OfficeScan from a Windows 2000 Pro desktop. I've written a batch file and scheduled it to run every night. I would feel more comfortable with a real-time scanning solution, so I am working with Trend to get my hands on a beta of the product that they have designed for NetApp filers. Here is the batch file if anyone is interested. net use w: \\%servername%\d$ <file://\\%servername%\d$> c:\progra~1\office~1\pcscan.exe w: /a /nm /c /zc /r=w:\ net use w: /delete Best Regards, Josh Gifford Windows NT/2000 System Engineer Siemens Power Transmission & Distribution 7000 Siemens Rd Wendell, NC 27591 Phone: (919) 365-2806; Fax: (919) 365-1080 Email: josh.gifford(a)ptd.siemens.com -----Original Message----- From: Goebel, Uwe [mailto:uwe_goebel@mentorg.com] Sent: Tuesday, January 30, 2001 2:53 AM To: toasters(a)mathworks.com Subject: Anitvirus on netapp Hi there, I'm curious how everybody is checking against viruses at the filers. We tried to use a PC were NAV is installed and configured NAV to check network drives, but unfortunatly it doesn't check the network drives. Any ideas or suggestions? Thanx --- Uwe GOEBEL System & Network Administrator Information Technology Mentor Graphics Deutschland GmbH <mailto:uwe_goebel@mentor.com> uwe_goebel(a)mentor.com

1 0

Backup Solution
by Mike Horn 31 Jan '01

31 Jan '01

I have a f740 filer currently being backed up with one DLT7000 tape drive. I'm tired of switching tapes. Does anyone have any experience with either "Sync Sort or Workstation Solutions" as the software to backup a filer? I am looking to use Spectra Logic products on the hardware side. Any input would be greatly appreciated. Thanks Michael A. Horn Associate Geophysicist Chesapeake Energy Corporation 6106 N. Western Avenue P.O. Box 18496 Oklahoma City, OK 73154-0496 405/879-9282 (office) 405/879-9577 (fax) mhorn(a)chkenergy.com

2 1

RE: Virus scans on NetApps and backups
by Coder, James (STP) 31 Jan '01

31 Jan '01

We had this problem until recently - NetApp was helpful in supplying a solution. The virus software we use cased the ctime to be changed and when using NDMP the it took it as a changed file. Run the following command on your filer and see if this helps. It did us. ndmpd ignore_ctime This was for our 760 NT filer with the NetBackup backup app. Prior to this, we were backing up every file the scan touched at night (about 20% of 1.2 TB). The only place we could find a reference to the command was in a white paper. James C. Coder UNIX Administrator Guidant Corporation Email: james.coder(a)guidant.com > -----Original Message----- > From: Steve Losen [SMTP:scl@sasha.acc.virginia.edu] > Sent: Tuesday, January 30, 2001 2:51 PM > To: toasters(a)mathworks.com > Subject: Re: Virus scans on NetApps and backups > > > > We are using Norton AV Enterprise 7.01 to scan our filer via CIFS. We > > have found that as Norton scans each file, the inode change time (i.e. > > ls -lc) gets set to the current time. I think it is due to Norton > > messing with the DOS archive bit, but I am not sure. > > > > The problem is that this turns our level 1 ndmp dumps into virtual level > > 0 dumps. It seems that ndmp uses the inode change time, not the file > > modification time, as a basis for picking which files to dump during > > level 1's. > > > > Any suggestions ? > > Dump looks at both the mtime and the ctime when deciding to > copy a file during an incremental dump. If either have changed > then the file needs to be dumped. > > The following change the ctime, but do not change any file data, > and hence do not change the mtime: > > rename file > change owner/group of file > change permissions of file > > > Some folks are unhappy when a virus scanner trips all the atimes > (last read access) on all files. You lose valuable info about > which files have not been read in a long time, because the scanner > reads them often. So some virus scanners save the atime and > put it back. But this trips the ctime, which causes all files > to be copied by an incremental dump. > > If you can configure your scanner to not preserve the atime, that would > will fix it, but all your atimes will be tripped by the scanner. > > I belive that netapp's NDMP dump has a flag or option where you can tell > it to ignore ctime and only use mtime when doing an incremental dump. The > downside is that an incremental dump will skip files that you probably > want dumped. In addition to the cases listed above, if you un-tar or > unzip an archive, the resulting files will have their old mtimes > preserved, which may cause an incremental dump to skip them. This is not > a problem when dump uses mtime and ctime, because the ctime is tripped > when tar or unzip restores a file. > > > Steve Losen scl(a)virginia.edu phone: 804-924-0640 > > University of Virginia ITC Unix Support

1 0

Strange behavior between f630 ontap5.3.6 & Solaris 7
by svawter＠c-cube.com 30 Jan '01

30 Jan '01

I must be missing something but let me bounce this off the croud... I have an f630 with ontap5.3.6 sharing out NFS data to a Solaris 7 box and in certain directories I get this error: /bin/ls -F (or -l also causes this) ls: "suid_mounts_allowed.dat": Value too large for defined data type A truss showed this: lstat64("suid_mounts_allowed.dat", 0xFFBEF958) = 0 acl("suid_mounts_allowed.dat", GETACLCNT, 0, 0x00000000) = 4 brk(0x00025E58) = 0 brk(0x00027E58) = 0 lstat64("suid_mounts_allowed.dat.old", 0xFFBEF958) Err#79 EOVERFLOW getfacl suid_mounts_allowed.dat.old doesn't show anything different than any other file in the directory... These errors don't show up on Solaris 5.5.1 or Solaris 5.6, but is consistant on different Sol7 systems. My other thought was inodes, but there are files that don't get an error with higher inodes. Anybody have an idea? Steve Vawter voice: 408-490-5310 fax: 408-490-8615 Staff UNIX Systems Administrator Steve.Vawter(a)C-Cube.COM

3 2

2 q's - quotas and tape drives
by neil lehrer 30 Jan '01

30 Jan '01

hi, q1. how much of a performance hit does keeping quotas have? i'm thinking of hard quotas for users on their home dir thru home qtree, and, quotas for groups on the shared qtree. any other issues on quotas? our groups and users are kept in NIS. q2. i am considering using a spectralogic treefrog tape unit for local ndmp backup. 2 ait2 drives, 30 slot library. any comments on the treefrog or spectralogic?? -- thanks

4 3

RE: 2 q's - quotas and tape drives
by Maglinger, Paul 30 Jan '01

30 Jan '01

Along the same lines, we're working on creating home directories for users here at the corporate office. We're wanting to limit the amount of storage per user, but from what I've read there is a limitation of 254 qtrees per volume. We're running NT, so therefore using CIFS, and using Ontap 5.3.7R2. We are also running NetIQ, but can't install the agent on the filer. We could limit the disks per volume, but smaller volumes waste more disk space. To give you an idea, we're considering limits of either 250 or 500MB per user. -----Original Message----- From: neil lehrer [mailto:nlehrer@ibb.gov] Sent: Tuesday, January 30, 2001 12:48 To: toasters Subject: 2 q's - quotas and tape drives hi, q1. how much of a performance hit does keeping quotas have? i'm thinking of hard quotas for users on their home dir thru home qtree, and, quotas for groups on the shared qtree. any other issues on quotas? our groups and users are kept in NIS. q2. i am considering using a spectralogic treefrog tape unit for local ndmp backup. 2 ait2 drives, 30 slot library. any comments on the treefrog or spectralogic?? -- thanks

2 1

RE: Backup Solution
by Loux, Linda 30 Jan '01

30 Jan '01

I have been using SpectraLogic 10000 (Bullfrog) with Veritas NetBackup for backups for several months. I've had very little problems with them. Configuring the Media servers and filers take a bit of time, but once that is established, there have been few problems. Occasionally I have had to reboot the filer and associated SpectraLogic, but have not been able to nail the problem down to which one is causing the problem. Linda Loux Systems Administrator Rosetta Inpharmatics -----Original Message----- From: Mike Horn [mailto:mhorn@chkenergy.com] Sent: Monday, January 29, 2001 2:01 PM To: 'toasters(a)mathworks.org' Subject: Backup Solution I have a f740 filer currently being backed up with one DLT7000 tape drive. I'm tired of switching tapes. Does anyone have any experience with either "Sync Sort or Workstation Solutions" as the software to backup a filer? I am looking to use Spectra Logic products on the hardware side. Any input would be greatly appreciated. Thanks Michael A. Horn Associate Geophysicist Chesapeake Energy Corporation 6106 N. Western Avenue P.O. Box 18496 Oklahoma City, OK 73154-0496 405/879-9282 (office) 405/879-9577 (fax) mhorn(a)chkenergy.com ********************************************************************** This e-mail message is the property of Rosetta Inpharmatics and may contain information that is confidential and/or privileged. If you are not the intended recipient, any use, disclosure, copying, or communication of the contents of this message is prohibited. If this message was received in error, please forward a copy to mail_admin(a)rii.com and delete the message and any attachments from your computer. Thank you. **********************************************************************

5 4

RE: Anitvirus on netapp
by Maglinger, Paul 30 Jan '01

30 Jan '01

We're using our filer for data storage, so anything that goes on it has to come from workstation or server. We use Network Appliance, kinda taking a "perimeter" approach to the subject. Anything that goes on or comes off the filer has to go through a workstation or server. -----Original Message----- From: Marianne Lindberg [mailto:Marianne.Lindberg@nsc.com] Sent: Tuesday, January 30, 2001 09:28 To: toasters(a)mathworks.com Subject: Re: Anitvirus on netapp I'd be curious about what everyone (who has CIFS data on their Filers) is using as well. We're using Network Associates' (nee McAfee) Netshield from an NT Server. The Server version does allow you to scan network drives. You might find that a different version of Norton would do the same. What about everyone else? Regards, Marianne uwe_goebel(a)mentorg.com 01/30/01 03:09 AM To: toasters@mathworks.com@Internet cc: (bcc: Marianne Lindberg/Americas/NSC) Subject: Anitvirus on netapp Hi there, I'm curious how everybody is checking against viruses at the filers. We tried to use a PC were NAV is installed and configured NAV to check network drives, but unfortunatly it doesn't check the network drives. Any ideas or suggestions? Thanx --- Uwe GOEBEL System & Network Administrator Information Technology Mentor Graphics Deutschland GmbH <mailto:uwe_goebel@mentor.com> uwe_goebel(a)mentor.com

1 0

RE: Virus scans on NetApps and backups
by Kalicak, John 30 Jan '01

30 Jan '01

You could set Norton to scan only on file access, thus minimizing your changes. -----Original Message----- From: Paul Letta [mailto:letta@jlab.org] Sent: Tuesday, January 30, 2001 2:59 PM To: toasters(a)mathworks.com Subject: Virus scans on NetApps and backups We are using Norton AV Enterprise 7.01 to scan our filer via CIFS. We have found that as Norton scans each file, the inode change time (i.e. ls -lc) gets set to the current time. I think it is due to Norton messing with the DOS archive bit, but I am not sure. The problem is that this turns our level 1 ndmp dumps into virtual level 0 dumps. It seems that ndmp uses the inode change time, not the file modification time, as a basis for picking which files to dump during level 1's. Any suggestions ? -- Paul Letta Thomas Jefferson National Accelerator Facility Computer Center Unix System Administrator EMail: letta(a)jlab.org Phone: (757)269-5106

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters January 2001