Degraded System Performance on Systems Running a Significant Number of Processes while SCSP Agent is installed

Article:TECH180374

Created: 2012-02-01

Updated: 2012-09-27

Article URL http://www.symantec.com/docs/TECH180374

NOTE: If you are experiencing this particular known issue, we recommend that you to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

When installing Symantec Critical System Protection agent on Unix servers with prevention feature enabled, system performance degrades noticeably when the system has a large number of active processes.

Environment

Symantec Critical System Protection version: 5.2.5 and newer

Note: Issue originally discovered on an AIX platform, but could happen on other platforms as well if there are a large number of processes running.

Cause

SCSP maintains a data structure that contains information about all the active processes and dead processes whose children are active. For every file system access call, the Symantec Critical System Protection kernel driver traverses this list of information. The traversal time of linked lists increases with the number of active processes in the system, leading to system wide performance degradation.

Solution

This issue has been resolved in SCSP Agent 5.2 RU8 MP3 HF1, 5.2 RU8 MP4 or above

www.symantec.com/docs/TECH180370

The fix replaces the linked list with a hashed list, allowing for much higher performance during information lookup. This fix reduces the access time to the data structure resulting in improved performance.

Supplemental Materials

Source	ETrack
Value	2655130