SAVFL - liveupdate fails at 90%

[Migration User]

New install of SAVFL (1.0.14.13) on SUSE linux.  Install went perfect.  When I try to do a liveupdate from the CLI or the GUI it fails.  From the CLI I see it download and get to 90%, then it kicks out the following error:

Command failed: Failure in post processing of micro definitions during update.
Unable to perform update.

I have tried everything I can find online, though nothing is specific to this error at 90%.  In looking at the logs, I see the downloads complete and it is after that when something goes awry.  I don't see it though.

Has anyone else run into this?  I am in the process of opening a ticket with support.

liveupdate log attached.

Thanks

Attachment(s)

liveupdt.log_.txt   31 KB 1 version

[Mithun Sanghavi]

Hello,

The logs shows - 

<IdsFileAlreadyPresent></2Ftmp/2F1385385984000/2F1385326974jtun_sav10enncur25.lin>

Suggestions - 

Delete the files shown in the log with <ldsFileAlreadyPresent> <ldsfilealreadypresent></ldsfilealreadypresent>entries, then run LiveUpdate again.

Check this Article:

Symantec AntiVirus for Linux (SAVFL) client fails to update definition through LiveUpdate

http://www.symantec.com/docs/TECH93974

Hope that helps!!

[Migration User]

Well, I deleted the entire directory located in /tmp and tried it again.  I also cleaned out the liveupdt.log to provide a clean log file.  Same result.

new log attached.

Thanks

Attachment(s)

liveupdt.log__1.txt   31 KB 1 version

[Mithun Sanghavi]

Hello,

Check these Articles:

SAV for Linux: A (Somewhat) Illustrated Guide Part 3

https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-3

Troubleshooting Java LiveUpdate 3.x

http://www.symantec.com/docs/TECH123310

Hope that helps!!

[Mick2009]

Hi jtloser,

It looks to me like the SAVFL client starts off with current defs but no hub defs:

 

Nov 25, 2013 2:58:44 PM   Avenge MicroDefs25 SavCorp10 Linux, MicroDefsB.CurDefs, SymAllLanguages, HubDefs, 0
Nov 25, 2013 2:58:44 PM   Avenge MicroDefs25 SavCorp10 Linux, MicroDefsB.CurDefs, SymAllLanguages, CurDefs, 131125003

 

It successfully downloads and processes both curdefs and hub defs....

Nov 25, 2013 2:58:55 PM Downloading 1384448648jtun_sav10ennful25.lin to /tmp/1385409524142/1384448648jtun_sav10ennful25.lin ...
....

Nov 25, 2013 2:58:55 PM The file size of /opt/content/onramp/1384448648jtun_sav10ennful25.lin reported by server is 281,540,654 bytes
Nov 25, 2013 2:58:56 PM Receiving file ...
Nov 25, 2013 3:01:38 PM Transfer completed in 163,252 ms (1,724,577 bytes/sec)
Nov 25, 2013 3:01:38 PM Checking authenticity of package /tmp/1385409524142/1384448648jtun_sav10ennful25.lin
....

Nov 25, 2013 3:01:46 PM Unzipping 1384448648jtun_sav10ennful25.lin ...
Nov 25, 2013 3:01:56 PM Making /tmp/1385409524142/1385409706279/navuphub.dis executable ...
Nov 25, 2013 3:01:56 PM Running /tmp/1385409524142/1385409706279/navuphub.dis ...

When running again, does it still say that "HubDefs, 0"?

I have only ever seen this "Failure in post processing of micro definitions during update" error on Linux machines which were out of resources... either out of space in /opt or little RAM.  As soon as more RAM was added, the large definition file was able to be successfully processed.

Please do keep this thread up-to-date with your progress!

Mick

 

 

 

[Migration User]

And, we have a winner!!  The linux box had plenty of disk space, but only 512Mb of RAM.  I kicked the memory up to 1Gb and liveupdate completed.  Thanks Mick!!!

[Mick2009]

Glad to help, jtloser! &: )

Definitely do make sure that all your Linux machines are protected by SAVFL.  In addition to threats which target Linux, we have recently seen threats which infect 3rd party tools like Tomcat, no matter what platform they are on.... for details, please see https://www-secure.symantec.com/connect/blogs/all-your-tomcat-are-belong-bad-guys