Endpoint Protection

 View Only
  • 1.  Definition date not showing in Sav info query

    Posted Feb 03, 2014 01:55 PM

    After installing the latest AV definition I entered the command "./sav info -d".  The date posted is last month's date.  However, the log file under "/var/log/iu-install.log" shows a successful update.  I have read several forum posts which stated that this is a software glitch (cosmetic so low priority) and another that stated it was a permissions issue.  Which is true?  BTW, if sav is wrong and the log file is correct this is not a cosmetic issue as it is critical to know if my definitions are current (or is there another way to determine if my definitions are updated other than the sav info command?).

    I first updated the definitions on the Linux (Red Hat) head node.  At first it showed the old date.  Then after a couple minutes of me looking through the log file, I reran the sav command and it showed the new date.  I then went to update the AV on our slave nodes, but the date never refreshed.  We even conducted a reboot of the slave node.

    Here is some info on the system:

    Product ver: 1.0.10.26

    Engine ver: 131.1.5.61

    Def ver: 01/02/2014 rev.1 [the head node updated to 01/31/2014 rev. 2]

    Red ver: Red Hat Enterprise Linux Server release 5.5 Beta (Tikanga)

    This is a closed/isolated network so autoupdater is not an option.



  • 2.  RE: Definition date not showing in Sav info query

    Posted Feb 03, 2014 01:58 PM

    Hav you tried with the latest version?

    http://www.symantec.com/docs/TECH103599



  • 3.  RE: Definition date not showing in Sav info query

    Posted Feb 03, 2014 06:04 PM

    "run this command: java -classpath /opt/Symantec/LiveUpdate/jlu.jar com.symantec.liveupdate.LiveUpdate –d  and then the liveupdt.log will have extra detailed infromation about downloading and applying definitions"

     

    https://www-secure.symantec.com/connect/forums/sav-linux-virus-definitions-not-reported-being-updated