2022 High memory consumption McAfee scanner service

[Dwee]

Hi,

Maybe this is old news, but we have like more than 20 servers that constantly stick to 400-500 mb High memory consumption McAfee scanner service, were using ENS 10.7 latest version and epo 5.10 CU 10,

we tried reboot one server and it back to normal 47,9 mb,

the question is, do we have to reboot the rest of the server ? that's not very good solution actually,

and were already using ens config for system resource usage below 80, but that CPU not memory if im not wrong, 

- i thought mcafee already solved this "high consumption resource" in ENS 10.7, 
- if this is memory leak, isn't already solved from ens 10.6 to ens 10.7 ?

see attached files for details

Regards,

[Pravas]

Hi @Dwee ,

Its normal for McAfee Scanner Service to consume around 500MB or higher on systems with high activity.

This is unlike Memory Leak where the utilization keeps climbing.

Thanks

[harshgautam]

Hi @Dwee ,

Greeting from Trellix (formerly McAfee). Thank you for reaching out to us on community portal. 

To answer your query. CPU memory utilization for 

a) Desktop/Laptop- Under 500MB is considered to be under Threshold.

b) For servers - 750-800MB is considered to be under threshold.

Mcafee Scanner services consumes memory, as it's analyzing any read and write operation on the system and these numbers depends system to system.( Configuration, applications installed, DBs etc.) If the memory is constantly increasing and never releases the memory then there could be memory leak issue.

Now reducing the memory consumption is something which depends on what all process and activities which is running on the system.  

With all the cases and observation we have come across. Hence we are informing the system in under threshold.

However, i also see, in the screenshot, the ENS platform is from Nov 21 build and ATP is from Feb 21 build.

Kindly update the components to the same build.

Also, run the McAfee Profiler tool, it highlights the top 25 Process causing McAfee scanner services to consume that much of memory and resource. Accordingly, you can add the exclusions.
McAfee Profiler - https://support.mcafee.com/webcenter/portal/supportportal/pages_tools/toolsMcAfeeProfiler

Article - https://kc.mcafee.com/corporate/index?page=content&id=KB69683

Accordingly add the application and process for exclusion and test on a system under OnAccess Scan policy and monitor.

Was my reply helpful?

If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[Dwee · Accepted solution]

Hi Harsh,

Is there any KB's that mentioned this information about "

a) Desktop/Laptop- Under 500MB is considered to be under Threshold.

b) For servers - 750-800MB is considered to be under threshold.

[harshgautam]

Hi @Dwee ,

Thank you for your reply. As of now, we don't have any KB available publicly for the end customer. We have highlighted the KB request to our knowledge management team and soon we shall have the KB. 

Kindly sign up for  Support Notification Service , Once the KB is available publicly you will receive the email regarding the same.

Was my reply helpful?

If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!