Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 57 replies
  • Answers 2 answers
  • Subscribers 39 subscribers
  • Views 205836 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Avira up2date error: Is there any solution?

dempie

Hi,

since yesterday my XG-Firewall cannot download the pattern files for the AVIRA virus scanner any more. This is what I read from 'Log Viewer' under 'View Log for Admin':

2015-12-29 11:17:30 Up2Date FAILED - Failed to download file avira_1.00_1.0.12965_full.tar.gz.gpg 18030
2015-12-29 11:16:31 Up2Date FAILED - Failed to download file savi_1.00_1.0.8492_full.tar.gz.gpg 18030

This process repeats every 30 seconds and is wasting all of my Internet bandwidth, as the download starts, but cannot be finished successfully.

I disbled 'Auto Update' from System>Administration>Updates'. Nevertheless, the XG Firewall doesn't stop downloading these files.

Is there any solution?

Thanks for your help.

Best Regards



This thread was automatically locked due to age.
  • 0 in reply to dempie

    Hi dempie,

    You're my hero! I actually still had blocked port 443 in the router to prevent those continues downloads...

    So it seems removing that rule brought me half way. From the log:

    "Avira AV definitions upgraded from 1.0.12950 to 1.0.13110"

    Now I still get download failures from savi_1.00_1.0.8522_full.tar.gz.gpg. I did rename pattern once again and started over again. This time monitoring (with my limited Linux know how) the progress as you can see below. The download runs fine up to 64401 (blocks?). Then it stops and the log shows the error message.

    Does anybody have any other idea?

  • 0 in reply to dempie
    Hi dempie,
    I sent a longer post before including "you are my hero" but obviously because of a screenshot that was not posted automatically. So here is the text summary:
    - you were 100% correct. I still had a blocker on port 443 (aaargh)
    - after removing the Avira update went fine
    - the savi_1.00_1.0.8522_full.tar.gz.gpg still fails though after download 60000ish blocks
    - renaming pattern again and asking for update again did not help so far
    Do you or anybody else have another idea? (btw, ping worked fine as you can imagine because of the different port...)
  • 0 in reply to StefanZimmer
    I am now trying your second option of the original explanation. I.e. trying to find out the correct numbers for editing the pattern file...
  • 0 in reply to StefanZimmer
    Hm, kind of bad news. The filesize of 137206979 Bytes and the MD5 code of the downloaded file from the link below are the same like defined in the pattern file. So editing won't help I assumme :-(.
    This is the content of my current pattern file.
    #savi_1.00_1.0.8522_full.tar.gz.gpg#d30ncyzaneb4q0.cloudfront.net/savi_1.00_1.0.8522_full.tar.gz.gpg
  • 0 in reply to StefanZimmer
    Hm, I start thinking if the problem is either time or server related. The download once reached 110MB although most of the time stopping aborting around 67MB after pretty much exactly 28 seconds.
    Hopefully somebody has a smart idea which explains this behaviour.
  • 0 in reply to StefanZimmer

    Hi Stefan,
    there's no need to change the pattern file with other filesize- and md5-informations with v1.0.8522 of Sophos AV patterns. The pattern file for this update is correct. So this is what you already found out by manually calculating the filesze and the md5 hash.
    So it is something different.
    Did you try to download this file manually? Use a web browser to test:
    https://d30ncyzaneb4q0.cloudfront.net/savi_1.00_1.0.8522_full.tar.gz.gpg
    Does it work?
    I tested it from my office a few minutes ago and had no problems.
    Is there much traffic on your WAN link at the moment?
    Best Regards.

  • 0 in reply to PhilSchneider
    Thanks for your careful investigative work, I was leaning toward data mining from Sophos or some exploit from a hacker! You cant help think that way first when you know of the NSA, apple and various other companies doing shady stuff. good to know Sophos is not in that category.
  • 0 in reply to dempie
    Hi dempie,
    Yes I downloaded successful in order to do the MD5 calculation and get the exact file size. The WAN link was not used at all at that time. Effectively the firewall had close to 2 MByte/s download rate which is the max I can get where I live. Does not seem to be a cloud front issue either. Hm. Is it possible to upload the file to the device instead?
  • 0 in reply to StefanZimmer
    LOL. I just opened my external fw again to test at a different time of the day and it just went through without an issue. Weired. I did change nothing in between.
    Dempie, Thanks again for your awesome help!
    @Sophos: please add at least a throttling for such downloading to the XG!
    Stefan
  • 0 in reply to dempie
    Hi dempie,

    Thanks for explanation. i had use first solution, change file hosts, for stop traffic. Now i have update pattern file and revert file hosts. Pattern file now is empty but in updates status antivirus is now ok.

    There is another strange thing. Log file:

    Thu Jan 07 10:41:54 2016 Download completed for file savi_1.00_1.0.8528_full.tar.gz.gpg

    but in downloads:

    /var/u2d/downloads/savi_1.00_1.0.8492_full.tar.gz.gpg

    it happened to you?

    best regards,
Cookie Information Banner