Kaspersky Container Security
2.0
English

Contents

Scanning process

The scanner receives scan jobs through the image handler. The image handler is a module deployed in the Kaspersky Container Security infrastructure that forwards scan jobs to the scanner and receives the scan results from the scanner.

When scan jobs are forwarded, the current status of the scanner is determined as one of the following:

  • Free — the scanner is not processing objects and can accept a job from the image handler application if requested.
  • Busy — the scanner is currently processing a scan job. A new job from the image handler application is put in the queue.

The scan job queue includes all forwarded scan jobs and is generated in the following cases:

Jobs in the scan queue receive the following statuses:

  • Pending — status assigned by default when a job is created.
  • In progress — the job is being processed by the image handler.
  • Parsing results — the solution processes the job scanning results to display them in the interface.
  • Error— scan job failed.
  • Finished — the results of the scan job are available.

Scan jobs from the queue are submitted to the image handler in the order of their receipt. A scan job then goes to a scanner with Free status and is scanned for security issues. The scan results are sent back to the image handler. The scan job is considered completed and finished if scanning results are received. If a scan job was performed three or more times but received no results, the scan job is given the Error status.

When scanning many large objects, the solution may be slower to display scan results in the user interface. You may have to wait up to several minutes for the results to appear. During this time, the scan jobs are displayed in the Scanners section with the Parsing results status.

If you want to speed up the processing of scan results, you can allocate more resources to the scan job handler by updating the variables in Helm Chart (for more details, see Scaling).

When an error occurs, the solution displays an error message that consists of a code and a text message (for example, HNDL-004: scan time out).

Error messages are displayed in English. Examples of messages and their meanings are listed in the table below.

Examples of possible error messages when running scan jobs

Scan error messages and their meanings

Error message

Meaning of the message

HNDL-001: mdw adapter send status

Failed to send the status or result of the scan, received an error message as a response from the receiving server

HNDL-003: scanner config invalid

Scanner settings are missing or incorrect

HNDL-004: scan time out

The scanning process finished because the scan result was not received within the time limit or the scan job timed out

HNDL-005: scan params empty

Scan job parameters missing or incorrect

HNDL-006: <message text>

Error while running a subprocess or command with a description

HNDL-007: <message text>

Unexpected system error with description

HNDL-008: job id empty

Invalid scan job ID

HNDL-011: proxy URL invalid

Invalid proxy server URL

HNDL-012: last release date of databases is unknown

Malware database release date not set

HNDL-013: invalid format of databases release date

The format of the malware database release date is invalid

HNDL-014: scan policies empty

Scanner policy is not set

HNDL-015: can not get local timezone

Could not determine the current time zone of the solution

After scanning, the solution displays the scan results. If security threats are detected in an object, Kaspersky Container Security prompts you to perform one of the following actions:

Page top
[Topic 274621]