George,

This is normal.  Akamai provides content delivery services to a lot of
large companies.

Symantec is on thier posted customer list:

http://www.akamai.com/html/en/aa/customers.html

Regards,
David

-----Original Message-----
From: George [mailto:[EMAIL PROTECTED]]
Sent: Saturday, November 03, 2001 9:37 PM
To: [EMAIL PROTECTED]
Subject: Spoofed Norton Update URL?


Hi, can someone tell me if NAV update was spoofed here? 


8/20/01, 16:00:32 PM GMT -> Progress Update: HOST_SELECTED: HostName:
"liveupdate.symantec.com" URL: "http://liveupdate.symantec.com";
HostNumber: 0 
8/20/01, 16:00:32 PM GMT -> Progress Update: UNZIP_FILE_START: Zip File:
"C:\WINDOWS\All Users\Application
Data\Symantec\LiveUpdate\Downloads\livetri.zip", Dest Folder:
"C:\WINDOWS\All Users\Application Data\Symantec\LiveUpdate\Downloads" 
8/20/01, 16:00:32 PM GMT -> Progress Update: UNZIP_FILE_FINISH: Zip
File: "C:\WINDOWS\All Users\Application
Data\Symantec\LiveUpdate\Downloads\livetri.zip", Dest Folder:
"C:\WINDOWS\All Users\Application Data\Symantec\LiveUpdate\Downloads",
HR: 0x0 
8/20/01, 16:01:02 PM GMT -> GetUpdates: Avenge 1.5 MicroDefs,
MicroDefsB.Full, English ==> ennfullb.x86 
8/20/01, 16:01:02 PM GMT -> GetUpdates: NAV95, 6.10.20, ENGLISH ==>
enna0530.x00 
8/20/01, 16:01:02 PM GMT -> Progress Update: DOWNLOAD_BATCH_START: Files
to download: 2, Estimated total size: 2970837 
8/20/01, 16:01:02 PM GMT -> Progress Update: DOWNLOAD_FILE_START: URL:
"http://a240.g.akamai.net/3/240/1271/0e8c31e2178a11/liveupdate.symantec.
com/ennfullb.x86", Estimated Size: 2722962, Destination Folder:
"C:\WINDOWS\All Users\Application Data\Symantec\LiveUpdate\Downloads" 
8/20/01, 16:01:03 PM GMT -> Progress Update: DOWNLOAD_FILE_RESUMING:
URL:
"http://a240.g.akamai.net/3/240/1271/0e8c31e2178a11/liveupdate.symantec.
com/ennfullb.x86", Full Download Path: "C:\WINDOWS\All Users\Application
Data\Symantec\LiveUpdate\Downloads\ennfullb.x86", partial size: 1157120,
full size: 1565842 


Just not sure where the http://a240.g.akamai.net came from in the middle
of this update. Is it normal? The entire log is available if it would
help. 


Thanks, 


George 
"Man performs, engenders so much more than he can or should have to
bear. That's how he finds that he can bear anything" William Faulkner. 

Reply via email to