unix update.ver 5 days behind and counting

Discussion in 'NOD32 version 2 Forum' started by stevenestrada, Feb 3, 2006.

Thread Status:
Not open for further replies.
  1. stevenestrada

    stevenestrada Registered Member

    Joined:
    Apr 13, 2004
    Posts:
    43
    The UNIX version of NOD32 at least once a month has a problem with the AV updates becoming available up to a couple of DAYS after WINDOWS. Right now we're five days behind and reports to ESET the past two days have been nothing but exercises. Hoping the folks there monitor this list and will fix. update.ver see [ENGINE2] section retrieved from the unix updater says 1.1386 .

    Per http://www.eset.com/support/info.php
    the current defs now are NOD32 - v.1.1392 (20060202).

    NOD32 Update Mirror Creator, Version 2.09,
    (C) 2004 Eset, s.r.o.
    Update started on 02-03-2006, 04:15:35.
    Checking remote update packages at 'www.nod32.com'... ok / 2k (100%)
    Checking local update packages in '/var/opt/eset/nod32/lib/mirror/'... ok (18 nups found).
    warning: File 'advheur1.nup' is obsolete or its lower level type is missing.
    warning: File 'advheur2.nup' is obsolete or its lower level type is missing.
    Local copy is up to date.
    Update finished at 04:15:35, total time: 0 sec (00:00:00).

    NOD32 Antivirus System Update, Version 2.01,
    (C) 2004 Eset, spol. s r.o.

    Installed version:
    Virus signature database version: 1.1386 (20060129)
    Virus signature database build: 6684

    Update launched: Fri Feb 3 04:15:35 2006

    +-+-------------------------------+---------------------+---------------------+
    | | Module | Available version | Installed version |
    +-+-------------------------------+---------------------+---------------------+
    | | Virus signature database | 1.1386 (6684) | 1.1386 (6684) |
    | | pwscan | 1.001 (1012) | 1.001 (1012) |
    | | utilmod | 1.009 (1067) | 1.009 (1067) |
    | | Archive support | 1.040 (1142) | 1.040 (1142) |
    | | charon | 1.005 (1040) | 1.005 (1040) |
    | | Advanced heuristics | 1.026 (1104) | 1.026 (1104) |

    --update.ver

    <snip>
    04:19:01 (2.42 MB/s) - `update.ver' saved [2852/2852]
    <snip>
    [ENGINE2]
    version=1.1386 (20060129)
    build=6684
    type=engine
    level=2
    base=6560
    date=29.01.2006
    category=engine
    buildregname=EngineBuild
    file=http://u4.eset.com/download/engine/engine2.nup
    <snip>
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    A screenshot from my Linux machine (used www.nod32.com as the update server):

    NOD32 Antivirus System Update, Version 2.51.1,
    (C) 2005 Eset, spol. s r.o.

    Installed version:
    Virus signature database version:
    Virus signature database build: 0

    Update launched: Wed Sep 28 19:07:56 2005

    +-+-------------------------------+---------------------+---------------------+
    | | Module | Available version | Installed version |
    +-+-------------------------------+---------------------+---------------------+
    |*| pwscan | 1.001 (1012) | ( 0) |
    |*| Virus signature database | 1.1392 (6721) | ( 0) |
    |*| Archive support | 1.040 (1142) | ( 0) |
    |*| charon | 1.005 (1040) | ( 0) |
    |*| Advanced heristics | 1.026 (1104) | ( 0) |
    |*| utilmod | 1.009 (1067) | ( 0) |
    +-+-------------------------------+---------------------+---------------------+

    Return code 3:
    A newer NOD32 Antivirus System update has been found
     
  3. stevenestrada

    stevenestrada Registered Member

    Joined:
    Apr 13, 2004
    Posts:
    43
    >> A screenshot from my Linux machine <<

    Mr Moderator,

    I'm happy your NOD32 is updating OK. Nine isn't apparently since 1/29/06. The updater seeems to connect OK to an ESET site but incorrectly reporting no updates available.

    Can you provide a solution to that problem?
    ESET's tech support remains silent.
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    The problem must be caused by the proxy server you connect through storing an obsolete ver file in cache. The update here works fine and the ver file actually contains information about the very latest version.
     
  5. stevenestrada

    stevenestrada Registered Member

    Joined:
    Apr 13, 2004
    Posts:
    43
    >>The problem must be caused by the proxy server you connect through storing an obsolete ver file in cache <<

    There is no proxy server here.

    wget http://www.nod32.com/nod_upd/update.ver
    --04:19:07-- http://www.nod32.com/nod_upd/update.ver
    => `update.ver'
    Resolving www.nod32.com... 209.59.135.198
    Connecting to www.nod32.com|209.59.135.198|:80... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 2,852 (2.8K) [application/octet-stream]
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could try connecting to the Internet through a different ISP by chance?
     
  7. stevenestrada

    stevenestrada Registered Member

    Joined:
    Apr 13, 2004
    Posts:
    43
    >> Could try connecting to the Internet through a different ISP by chance? <<

    Problem's with NOD32/ESET and that DNS records for www.nod32.com often change. With UNIX there's no revolving list of mirrors like windows, so when nod32.com is unreachable for whatever reason, so are nups. Windows simply finds another mirror and finishes fine.

    Last observed trouble was 3/6/06 when nod32.com zone file apparently disappeared, confirmed by dnsstuff.com

    NOD32 Update Mirror Creator, Version 2.09,
    (C) 2004 Eset, s.r.o.
    Update started on 03-06-2006, 05:04:02.
    Checking remote update packages at 'www.nod32.com'... failed.
    error: Remote update packages not checked. exitting...

    host -a nod32.com
    Trying "nod32.com"
    Host nod32.com not found: 3(NXDOMAIN)
    Received 100 bytes from 10.10.10.254#53 in 0 ms

    nslookup nod32.com
    Server: 10.10.10.254
    Address: 10.10.10.254#53
    ** server can't find nod32.com: NXDOMAIN

    nslookup www.nod32.com
    Server: 10.10.10.254
    Address: 10.10.10.254#53
    ** server can't find www.nod32.com: NXDOMAIN

    http://www.dnsstuff.com/tools/lookup.ch?name=nod32.com&type=A

    How I am searching:
    Searching for nod32.com A record at k.root-servers.net [193.0.14.129]: Got referral to k.gtld-servers.net. [took 370 ms]
    Searching for nod32.com A record at k.gtld-servers.net. [192.52.178.30]: Reports that no A records exist. [took 122 ms]

    Answer:
    No A records exist for nod32.com. [Neg TTL=172800 seconds]

    How I am searching:
    Searching for www.nod32.com A record at j.root-servers.net [192.58.128.30]: Got referral to C.GTLD-SERVERS.NET. [took 243 ms]
    Searching for www.nod32.com A record at C.GTLD-SERVERS.NET. [192.26.92.30]: Reports that no A records exist. [took 6 ms]

    Answer:
    No A records exist for www.nod32.com. [Neg TTL=172800 seconds]
     
    Last edited: May 4, 2006
  8. pc-support

    pc-support Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    285
    Location:
    Edinburgh, UK
    nod32.com is the american site. not the update site
     
  9. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    www.nod32.com redirects update attempts to other servers. The problem has been fixed and NOD32 for Linux now updates to v. 1.1519 fine.
     
  10. stevenestrada

    stevenestrada Registered Member

    Joined:
    Apr 13, 2004
    Posts:
    43
    >> Checking remote update packages at 'www.nod32.com'... failed.
    error: Remote update packages not checked. exitting... <<

    Updated to nod32 2.51.
    It includes host list for multiple update places and works well.
    A much welcomed feature.
     
    Last edited: May 29, 2006
  11. cyber plumber

    cyber plumber Registered Member

    Joined:
    May 29, 2006
    Posts:
    2
    Hi Having the same issues as above...
    Dig is OK. However My file server with 15 seats is not updating.

    Can someone please shed some light on this!!!!o_O


    NOD32 Update Mirror Creator, Version 2.07,
    (C) 2004 Eset, s.r.o.
    Update started on 05-30-2006, 12:15:06.
    Checking remote update packages at 'www.nod32.com'... failed.
    error: Remote update packages not checked. exitting...
    [root@core sbin]#

    [root@core sbin]# dig www.nod32.com

    ; <<>> DiG 9.2.2-P3 <<>> www.nod32.com
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22746
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

    ;; QUESTION SECTION:
    ;www.nod32.com. IN A

    ;; ANSWER SECTION:
    www.nod32.com. 83016 IN A 72.32.7.91

    ;; AUTHORITY SECTION:
    nod32.com. 83016 IN NS ns1.lanechange.net.
    nod32.com. 83016 IN NS ns2.lanechange.net.
    nod32.com. 83016 IN NS ns3.lanechange.net.
    nod32.com. 83016 IN NS ns4.lanechange.net.

    ;; ADDITIONAL SECTION:
    ns1.lanechange.net. 82651 IN A 64.40.110.35
    ns2.lanechange.net. 82651 IN A 198.96.220.161
    ns3.lanechange.net. 82651 IN A 209.15.85.15
    ns4.lanechange.net. 82651 IN A 216.69.172.115

    ;; Query time: 19 msec
    ;; SERVER: 192.231.203.132#53(192.231.203.132)
    ;; WHEN: Tue May 30 12:14:08 2006
    ;; MSG SIZE rcvd: 197
     
  12. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Hello,

    the best solution is to update your NOD32 for LS to v. 2.5 as it supports automatic server selection. If you do not want to upgrade, install nod32umc 2.5 at least.
     
  13. cyber plumber

    cyber plumber Registered Member

    Joined:
    May 29, 2006
    Posts:
    2
    Hi Thankx Marcos,

    Update went well, all systems go.
     
  14. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Good to see and thanks for letting us know, this no doubt help someone in the future.

    Cheers :D
     
Thread Status:
Not open for further replies.