Endpoint Protection

 View Only

  • 1.  Lue.log files filled with error

    Posted Feb 27, 2014 05:26 AM

    Hello,

    Oftenly SEPM does not download the latest definitions.

    I tried the following steps: 

    Uninstall and reinstall liveupdate

    Repair the SEPM

    Manual update of SEPM

    Manual removal of SEPM definitions.

    Any other thoughts?

     

     



  • 2.  RE: Lue.log files filled with error

    Broadcom Employee
    Posted Feb 27, 2014 05:34 AM

    Hi,

    Thank you for posting in Symantec community.

    Could you share the exact error messag or log file itself?



  • 3.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 05:35 AM

    Most of the times it will be because of disk space, 

    if you are passing through a firewall and content filtering enabled it does not work sometimes

    are you downloading from internet or luadmin?

     



  • 4.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 05:37 AM

    Error says "Decompression failed  for package..."



  • 5.  RE: Lue.log files filled with error

    Broadcom Employee
    Posted Feb 27, 2014 05:42 AM

    Hi,

    If it's a SEPM 12.1 RU2 or any prior version of the SEPM then it can be a known issue.

    Go through the following fix id, listed in RU2 MP1 fix notes:

    LiveUpdate is unable to decompress the virus definition updates despite ample room on the system
    Fix ID: 2847004
    Symptom: Symantec Endpoint Protection client will run LiveUpdate and successfully download updated content, but occasionally cannot apply the updates.  “Decompression failed for package…” errors appear in the lue.log files.
    Solution: The updated LiveUpdate Express included in RU2 MP1 updates the decompression process to use less memory, which allows the extraction to occur.
     
    Reference: New fixes and features in Symantec Endpoint Protection 12.1 Release Update 2 Maintenance Pack 1
     
     
    I would recommend to upgrade to the most latest version of SEPM i.e. SEPM 12.1 RU4a to stay more protected.


  • 6.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 05:42 AM

    Whats the exact version of SEP? I see a bug in previous version

    LiveUpdate is unable to decompress the virus definition updates despite ample room on the system
    Fix ID: 2847004
    Symptom: Symantec Endpoint Protection client will run LiveUpdate and successfully download updated content, but occasionally cannot apply the updates.  “Decompression failed for package…” errors appear in the lue.log files.
    Solution: The updated LiveUpdate Express included in RU2 MP1 updates the decompression process to use less memory, which allows the extraction to occur.
    http://www.symantec.com/business/support/index?page=content&id=TECH204685


  • 7.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 05:47 AM

    It's on SEP 12.1 RU3 version.



  • 8.  RE: Lue.log files filled with error
    Best Answer

    Broadcom Employee
    Posted Feb 27, 2014 05:50 AM

    Still I would recommend to upgrade to the most latest version of SEPM i.e. SEPM 12.1 RU4a.

    Upgrade to the latest version and verify if issue still persist or not.



  • 9.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 05:53 AM

    Whats the version of IE?

    Does this happen all the time ?

    Do you use proxy/ firewall 
     

    SEPM is updated via internet or Luadmin?

    Do you have any winzip utility installed? anything which extracts .zip file?



  • 10.  RE: Lue.log files filled with error

    Posted Feb 27, 2014 07:14 AM

    Hi,


    For SEPM LiveUpdate troubleshooting, we need Log.LiveUpdate and SesmLu-0.log after reproduction of the issue.

    If you look the Log.Lue it's dedicated for LiveUpdate session from the SEP clients when you run the update from Internet (symantec live update servers) and not the SEPM.

     

    Kind regards,

    A. Wesker



  • 11.  RE: Lue.log files filled with error

    Posted Mar 01, 2014 09:29 PM

    Yesterday midnight we performed an upgrade and issue no longer exist now.