Endpoint Protection

 View Only
  • 1.  SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 22, 2012 08:35 PM

    Hi All,

    I'm having a problem on my SEPM 11 which install in Windows Server 2003. Usually I download the jdb file from symantec and put it into C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming to update the definition file in SEPM and distribute to the client. But currently whenever I put the jdb file at the directory show above, my SEPM only able to update the 64bit definition file. The 32bit definition file remain on 2011 Dec 11 rev 006. (Please refer to the print screen below).

    By the way I also copy the scm-server-0.log for you guy reference for the message I have when loading in a jdb file.

    2012-02-22 16:38:12.205 FINE: lockProcessState start for owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:38:12.205 FINE: markProcessState return state:1
    2012-02-22 16:38:12.205 FINE: lockProcessState return state:1 for process owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:39:01.189 SEVERE: Unknown Exception in: com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler
    java.io.FileNotFoundException: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\tmp77ce.tmp\virscan8.dat (The system cannot find the file specified)
     at java.io.FileInputStream.open(Native Method)
     at java.io.FileInputStream.<init>(FileInputStream.java:106)
     at com.sygate.scm.util.ZipUtil.zipFiles(ZipUtil.java:445)
     at com.sygate.scm.util.ZipUtil.zipFiles(ZipUtil.java:419)
     at com.sygate.scm.util.ZipUtil.zipData(ZipUtil.java:336)
     at com.sygate.scm.util.ZipUtil.zipData(ZipUtil.java:306)
     at com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler.writeContentToOutdir(ConfigServerHandler.java:1836)
     at com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler.saveLUContent(ConfigServerHandler.java:1535)
     at com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler.processLUContent(ConfigServerHandler.java:568)
     at com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler.handleRequest(ConfigServerHandler.java:231)
     at com.sygate.scm.server.consolemanager.RequestHandler.handleRequest(RequestHandler.java:116)
     at com.sygate.scm.server.consolemanager.RequestHandler.<init>(RequestHandler.java:79)
     at com.sygate.scm.server.servlet.ConsoleServlet.doPost(ConsoleServlet.java:82)
     at com.sygate.scm.server.servlet.ConsoleServlet.doGet(ConsoleServlet.java:53)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:697)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:199)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:145)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:139)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
     at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:198)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
     at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2460)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:133)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
     at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:119)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:127)
     at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
     at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:157)
     at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
     at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
     at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
     at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
     at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
     at java.lang.Thread.run(Thread.java:595)
    2012-02-22 16:39:01.205 FINE: unlockProcessState Done for A923C3780A0800450093068A6D625287 (ConfigServerHandler.processLUContent)
    2012-02-22 16:39:01.377 FINE: lockProcessState start for owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:39:01.392 FINE: markProcessState return state:1
    2012-02-22 16:39:01.392 FINE: lockProcessState return state:1 for process owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:39:01.392 INFO: ConfigServerHandler>> Content 'SESM Virus Definitions Win64 (x64) v11 MicroDefsB.CurDefs SymAllLanguages' revision '120221002' already exists.
    2012-02-22 16:39:01.408 FINE: unlockProcessState Done for A923C3780A0800450093068A6D625287 (ConfigServerHandler.processLUContent)
    2012-02-22 16:39:01.767 INFO: RapidResponseContentTask.installContent(): Info >> return code = [0]
     Rapid response content get installed successfully.

    I have try a lot of method / workaround from the internet which are;

    • Uninstall and reinstall the SEPM
    • Clear the corrupted def file by remove all the files in "C:\Program Files\Common Files\Symantec Shared\VirusDefs", "C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32 and clear the registery file.

     

    •  


  • 2.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 24, 2012 08:50 AM

    Have you tried to update manually?



  • 3.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 24, 2012 09:05 AM


  • 4.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 03:18 AM

    Hi AJ_01,

    We cannot perform the manual Live Update because the machine did not have internet connection. Usually what we do is download the JDB file and paste it on C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming  as I mention in my first post.

     

    Hi SMLatCST,

    I have try the solution from the link before which is clear up / delete the folder / files and manually put in the JDB file into the incoming folder to update the definition file. But unfortunetly it does not work for it.

    I even follow a solution I found in Symantec forum which is removing all the related folder / files and delete the registery in the machine and it does not work as well.



  • 5.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 04:25 AM

    Hi,

    After you downloading the jdb, its in zip format.

    You can rename the extention vdxxxxx.zip to vdxxxxx.jdb.

    Then check.



  • 6.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 04:34 AM

    Hi DCOMP,

    Yes we know that. Previously (before Mid Dec 2011) all the JDB file we download and paste on the incoming folder are working fine for the 32bit definition file.

    But after Mid Dec 2011, whatever JDB file we downloaded and paste on the incoming folder, it only update the 64bit definition file and not the 32bit. I notice that there is an error message whenever we paste the JDB file on the incoming folder which show in my first posted. (Please refer to the message below)

    2012-02-22 16:38:12.205 FINE: lockProcessState start for owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:38:12.205 FINE: markProcessState return state:1
    2012-02-22 16:38:12.205 FINE: lockProcessState return state:1 for process owner:ConfigServerHandler.processLUContent toWaitForUnlock:false
    2012-02-22 16:39:01.189 SEVERE: Unknown Exception in: com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler
    java.io.FileNotFoundException: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\tmp77ce.tmp\virscan8.dat (The system cannot find the file specified)

     



  • 7.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Broadcom Employee
    Posted Feb 27, 2012 05:24 AM

    what is the SEPM version?



  • 8.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 07:06 PM

    Check the download logs. see if 32bit and 64bit have the same definition



  • 9.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 09:13 PM

    Our SEPM is in version 11.

    How to check the download logs?? Where?



  • 10.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Broadcom Employee
    Posted Feb 27, 2012 09:35 PM

    SEP 11 which MR /RU?



  • 11.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Posted Feb 27, 2012 10:44 PM

    How to check the MR / RU? What I can see is it show Version 11.0.4202.75.



  • 12.  RE: SEPM 11 unable to update the 32bit definition file using .jdb file

    Broadcom Employee
    Posted Feb 27, 2012 10:57 PM

    ok, please upgrade the SEPM to latest version.This will fix the issue.