Endpoint Protection

  • 1.  Large Live Update Folder taking up several gigs

    Broadcom Employee
    Posted 08-09-2007 12:09 PM
    I have a simple question but from all the research I've done on my own I can't find anything out about this due primarilly to the fact that I have no clue what all these files are. To break it down a litle more, inside of %program files%/symantec/live update are a several dozen files ranging from 10mbs to 30mbs which I know some them (.x86 and uaf or something) are the actual virus definition files but there are also many other folders which contain solaris, HPUX, red hat linux, and a few others. here's a list I pulled of a few of the files with sizes and modification times. I installed SAV Server 10 around 6/30/07 and I'm posting today 8/9/07. Most of the files have not been modified since their creation nor accessed but a few have. I do not run any other os's in my whole building besides win 2k server, xp home, xp pro.
    Here's some files. Maybe seeing some will make the difference for some people. The whole list is posted here.
    Date Mod    Time             Size              Name
    07/11/2007  02:21a          52,783,173 1184101095jtun_enoracle-hpux-hppa.zip
    03/18/2007  03:06a          52,007,134 1150486906jtun_enoracle-hpux-hppa.zip
    06/30/2007  02:22a          33,284,372 1183146099jtun_enw3s-ia64.zip
    07/11/2007  02:14a          32,470,373 1184101095jtun_enoracle-solaris-sparc.zip
    03/31/2007  03:49p          32,073,231 1175286071jtun_englu-w3s-ia64.zip
    06/30/2007  02:38a          31,019,172 1183146099jtun_englu-hpux-hppa.zip
    06/30/2007  02:07a          30,586,985 1183146099jtun_enaix-ppc64.zip
    03/31/2007  03:37p          30,527,610 1175286071jtun_englu-hpux-hppa.zip
    03/17/2007  03:13a          30,122,615 1167164144jtun_enaix-ppc64.zip
    06/30/2007  02:32a          29,556,532 1183146099jtun_englu-aix-ppc64.zip
    07/11/2007  02:24a          29,375,557 1184101095jtun_enoracle-lnx-x86.zip
    03/31/2007  03:32p          29,319,290 1175286071jtun_englu-aix-ppc64.zip
     
     
    Also, something I have not searched for but can probably get answered easily from you guys. Can I have SAV automatically delete the old file definitions to save on space? I have a feeling I'm going to be answering a lot more questions regarding this issue so lay them on me. I get paid by the hour so I'll answer them all
     
    Thanks in advance guys,
    Dan


  • 2.  RE: Large Live Update Folder taking up several gigs

    Broadcom Employee
    Posted 08-09-2007 03:59 PM
    Hi Dan,
     
    Firstly, could you give us a bit more background to your installation, are you running LiveUpdate Administrator for instance, how does your SAV server get updates. etc?
     
    The reason I ask is that I've never seen LiveUpdates downloaded to that location (they would normally be Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads).  Anyway, that aside... if you open the livetri.zip file with any ZIP extractor and then inside there, open the file liveupdt.tri with notepad or similar.
     
    What you can then do is take the names of the files in that folder and search that file for them - this will give you a description of what the file is.  From looking at some of those files you appear to be download ESM policy updates as well as SAV definitions, hence my reason for asking how your configuration is organised.
     
    To answer your second question, what you are seeing here is not normal behaviour (unless you are using LiveUpdate Administrator) - my Primary server keeps the last 15 or so daily LiveUpdate downloads the downloads folder I mentioned above.
     
    hth
     
     


  • 3.  RE: Large Live Update Folder taking up several gigs

    Broadcom Employee
    Posted 08-14-2007 11:15 AM
    Thank you for taking an interest in my post firstly and to answer your question I am running SAV 10 and my server uses live update adminstration utility as far as I am aware. I'm familiar with the concepts of what's involved here but how it all actually goes down. I don't really know other than that it works. I do also have file definitions in docs & sets > all > app data > syman > downloads. I had to go in there 1 time before when I had corrupt virus definitions so I'm aware of that folder. It deletes old records like it should.  As for opening the .tri file and seeing what they are for, I am completely confident that I do not need these files and have subsequently deleted them in a dire effort to free up some space. These updates keep coming so fast and so large that it's filling my server up so it can;t increase the page file, shares are dropping due to no space, I couldn't even get access to the files remotely the other day. So I have all sorts of files that are constantly renewing themselves that I don't need. How do I make them stop? If you'd like to see the full .tri file you can go here. Let me know what other kind of information you need to help me out. Thanks for the help thus far,
    Dan


  • 4.  RE: Large Live Update Folder taking up several gigs

    Broadcom Employee
    Posted 10-15-2007 03:53 PM
    Easy, Go to your start menu, Click programs, Liveupdate Administration Utility- LiveUpdate Administration Utility. When the utility opens click on Tools, Clean up download directory. You can delete all files or remove unused files. Hope this helps.


  • 5.  RE: Large Live Update Folder taking up several gigs

    Broadcom Employee
    Posted 10-15-2007 04:30 PM
    One other thing... Please read the following post and see if this describes your issue.

    https://forums.symantec.com/syment/board/message?board.id=endpointcust&thread.id=770