Re: Has McAfee UpdateLog.txt been updated recently

Hae you considered alternative ways to get the information you seek:

Use McAfee ePolicy Orchestrator ?
Use LWP or similar agent to get the info by browsing to port 8081 (Not sure about port #)

Update:
Port 8081 confirmed. Here is what browsing to http://localhost:8081/ reveals:

McAfee Agent Activity Log

Version [3.6.0.453] Computer name [<Computername>] ePO server [<server
+name>]
View debug logs: FrameSvc current / previous, NaPrdMgr current / previ
+ous 
-------------------------------------------
Date and Time                        Type   Component Message 
-----------------------------------------------
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  Agent communication
+ session closed 
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  Agent communication
+ session started 
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  Agent is sending EV
+ENT package to ePO server 
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  Agent is connecting
+ to ePO server 
Sunday, December 17, 2006 2:51:44 PM  Info  Internet Manager  Upload s
+uccess and no package to receive 
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  No package received
+ from ePO Server 
Sunday, December 17, 2006 2:51:44 PM  Info  Agent  Agent communication
+ session closed 
...
[download]

"A closed mouth gathers no feet." --Unknown

Comment on Re: Has McAfee UpdateLog.txt been updated recently Download Code

Replies are listed 'Best First'.
Re^2: Has McAfee UpdateLog.txt been updated recently by Marza (Vicar) on Dec 22, 2006 at 04:12 UTC
I have to second the ePO suggestion. I am guessing you are running enterprise mcafee? If you have a support contract, deploy ePO. I used Perl scripts to monitor my AV setup. However, I found that since we were paying for a licenses, why not use it since it comes with the package? Some things to consider: 200 less WAN calls for updates to the DATs. Forced updates. Forced Scans. The biggest gift, you can keep your people from uninstalling or hamstringing the AV. Now, if you don't have ePO access, you might consider the TieRegistry module. I found there were certain areas of the registry is where mcafee stores DAT info, etc. Since you can access the registries remotely, I found that better then hoping shares and trying to open files. I should try and find my old level report and see about posting it in the code libraries.	[reply]

Replies are listed 'Best First'.

Re^2: Has McAfee UpdateLog.txt been updated recently
by Marza (Vicar) on Dec 22, 2006 at 04:12 UTC

Some things to consider: 200 less WAN calls for updates to the DATs. Forced updates. Forced Scans. The biggest gift, you can keep your people from uninstalling or hamstringing the AV.

Now, if you don't have ePO access, you might consider the TieRegistry module. I found there were certain areas of the registry is where mcafee stores DAT info, etc.

Since you can access the registries remotely, I found that better then hoping shares and trying to open files.

I should try and find my old level report and see about posting it in the code libraries.

[reply]