Question about Trend Micro Signature "update failed"

[Wayne Hutchinson]

I am using latest stable release RT-5300_384-17 but have noticed the following error about Trend Micro.

I like to enable AiProtection and the last update is 11/28/2019 and if I try to update I get this error.

How to update??

Rew

 

[dave14305]

Try logging in over SSH and running these commands to see if any hints are there (post the output):

cat /tmp/sig_upgrade.log
ls -l /jffs/signature/
df /jffs
date
nslookup dlcdnets.asus.com

 

[Wayne Hutchinson]

It's been a long time since using SSH, can you recommend a windows 10 version to use?

Thanks

 

[dave14305]

It's been a long time since using SSH, can you recommend a windows 10 version to use?

Thanks

Run ssh admin@192.168.1.1 at a CMD or PowerShell prompt (replace admin and the IP with your own).

SSH is built-in now to Windows 10.

 

[Wayne Hutchinson]

OK, I tried this but I got this "ssh: connect to host 192.168.1.1 port 22: Connection refused"
I used my IP and login name for the Asus, what about password?

Thanks

 

[dave14305]

OK, I tried this but I got this "ssh: connect to host 192.168.1.1 port 22: Connection refused"
I used my IP and login name for the Asus, what about password?

Thanks

It’s the same User/Password as when you login via a browser. But first you have to enable SSH on the Administration / System tab in the webui.

 

[Wayne Hutchinson]

Does this look right
Download sig info Failure, return_code : 2
Rew452@RT-AC5300-9DD0:/tmp/home/root# ls -l /jffs/signature/
-rw-rw-rw- 1 Rew452 root 992139 Nov 27 2019 rule.trf
Rew452@RT-AC5300-9DD0:/tmp/home/root# df /jffs
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mtdblock4 65536 3436 62100 5% /jffs
Rew452@RT-AC5300-9DD0:/tmp/home/root# date
Sun Jun 21 09:53:37 DST 2020

 

[dave14305]

Does this look right
Download sig info Failure, return_code : 2
Rew452@RT-AC5300-9DD0:/tmp/home/root# ls -l /jffs/signature/
-rw-rw-rw- 1 Rew452 root 992139 Nov 27 2019 rule.trf
Rew452@RT-AC5300-9DD0:/tmp/home/root# df /jffs
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mtdblock4 65536 3436 62100 5% /jffs
Rew452@RT-AC5300-9DD0:/tmp/home/root# date
Sun Jun 21 09:53:37 DST 2020

How about the last command?
nslookup dlcdnets.asus.com

 

[Wayne Hutchinson]

Rew452@RT-AC5300-9DD0:/tmp/home/root# nslookup dlcdnets.asus.com
Server: 75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net

 

[EmeraldDeer]

The important part of an nslookup is the reply

# nslookup dlcdnets.asus.com
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      dlcdnets.asus.com
Address 1: 152.199.24.41

Here is how dnsmasq responded to the nslookup

Jun 21 10:21:19 dnsmasq[25138]: 86796 127.0.0.1/52277 query[A] dlcdnets.asus.com from 127.0.0.1
Jun 21 10:21:19 dnsmasq[25138]: 86796 127.0.0.1/52277 forwarded dlcdnets.asus.com to 127.0.1.1
Jun 21 10:21:19 dnsmasq[25138]: 86797 127.0.0.1/52277 query[AAAA] dlcdnets.asus.com from 127.0.0.1
Jun 21 10:21:19 dnsmasq[25138]: 86797 127.0.0.1/52277 forwarded dlcdnets.asus.com to 127.0.1.1
Jun 21 10:21:19 dnsmasq[25138]: 86796 127.0.0.1/52277 reply dlcdnets.asus.com is <CNAME>
Jun 21 10:21:19 dnsmasq[25138]: 86796 127.0.0.1/52277 reply wideip-dlcdnets.isoi.asia is <CNAME>
Jun 21 10:21:19 dnsmasq[25138]: 86796 127.0.0.1/52277 reply cs956197766.wpc.psicdn.net is 152.199.24.41
Jun 21 10:21:19 dnsmasq[25138]: 86797 127.0.0.1/52277 reply dlcdnets.asus.com is <CNAME>
Jun 21 10:21:19 dnsmasq[25138]: 86797 127.0.0.1/52277 reply wideip-dlcdnets.isoi.asia is <CNAME>
Jun 21 10:21:19 dnsmasq[25138]: 86797 127.0.0.1/52277 reply cs956197766.wpc.psicdn.net is NODATA-IPv6

Here is the same lookup but direct to Comcast DNS

# nslookup dlcdnets.asus.com 75.75.75.75
Server:    75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net

Name:      dlcdnets.asus.com
Address 1: 152.199.24.41

 

[dave14305]

Rew452@RT-AC5300-9DD0:/tmp/home/root# nslookup dlcdnets.asus.com
Server: 75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net

I run the same command (also Xfinity) and get this:

# nslookup dlcdnets.asus.com
Server:    75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net

Name:      dlcdnets.asus.com
Address 1: 152.199.24.41

So why doesn’t Comcast let you resolve the name?

Test a different name:

nslookup www.snbforums.com
Server:    75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net

Name:      www.snbforums.com
Address 1: 2606:4700:20::681a:942
Address 2: 172.67.69.81
Address 3: 104.26.8.66
Address 4: 104.26.9.66

Also test a different server:

nslookup dlcdnets.asus.com 9.9.9.9

 

[Wayne Hutchinson]

here is what I get
Name: www.snbforums.com
Address 1: 2606:4700:20::ac43:4551
Address 2: 104.26.9.66
Address 3: 172.67.69.81
Address 4: 104.26.8.66
Rew452@RT-AC5300-9DD0:/tmp/home/root# nslookup dlcdnets.asus.com
Server: 75.75.75.75
Address 1: 75.75.75.75 cdns01.comcast.net
Name: dlcdnets.asus.com
Address 1: 152.199.24.41
Rew452@RT-AC5300-9DD0:/tmp/home/root#

 

[Wayne Hutchinson]

So are you saying Comcast is not letting me access because it is not resolving Asus dns

 

[dave14305]

Ok. How about running this?

wget https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip -O -

So are you saying Comcast is not letting me access because it is not resolving Asus dns

Well the original output you provided didn’t show the response. The last output did, so maybe not the issue.

 

[Wayne Hutchinson]

this is what I get
--2020-06-21 10:52:40-- https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip
Resolving dlcdnets.asus.com... 152.199.24.41
Connecting to dlcdnets.asus.com|152.199.24.41|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 41 [application/zip]
Saving to: 'STDOUT'

 

[dave14305]

this is what I get
--2020-06-21 10:52:40-- https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip
Resolving dlcdnets.asus.com... 152.199.24.41
Connecting to dlcdnets.asus.com|152.199.24.41|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 41 [application/zip]
Saving to: 'STDOUT'

I get more output than you.

wget https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip -O -
--2020-06-21 10:54:20--  https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip
Resolving dlcdnets.asus.com... 152.199.24.41
Connecting to dlcdnets.asus.com|152.199.24.41|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 41 [application/zip]
Saving to: 'STDOUT'

-                            0%[                                       ]       0  --.-KB/s               WW_FULL#2.182
WW_PART#2.182
WW_WRS#2.182
-                          100%[======================================>]      41  --.-KB/s    in 0s     

2020-06-21 10:54:21 (133 KB/s) - written to stdout [41/41]

 

[Wayne Hutchinson]

sorry, I missed some
Rew452@RT-AC5300-9DD0:/tmp/home/root# wget https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.
zip -O -
--2020-06-21 10:59:21-- https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip
Resolving dlcdnets.asus.com... 152.199.24.41
Connecting to dlcdnets.asus.com|152.199.24.41|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 41 [application/zip]
Saving to: 'STDOUT'
- 0%[ ] 0 --.-KB/s WW_FULL#2.182
WW_PART#2.182
WW_WRS#2.182
- 100%[=================================================>] 41 --.-KB/s in 0s

 

[Wayne Hutchinson]

I'm thinking I will try new beta and see what I get. Maybe something was wrong with my 384.17 update.

 

[dave14305]

Seems all the pieces are there.
Try running:

sh -x /usr/sbin/sig_update.sh

Edit: got confused on the file name after looking at github.

 

[Wayne Hutchinson]

OK this is what I got
Rew452@RT-AC5300-9DD0:/tmp/home/root# sh -x /usr/sbin/sig_update.sh
+ nvram get apps_wget_timeout
+ wget_timeout=3O
+ wget_options=-q -t 2 -T 3O
+ nvram set sig_state_update=0
+ nvram set sig_state_flag=0
+ nvram set sig_state_error=0
+ nvram get rc_support
+ grep -i nt_center
+ IS_SUPPORT_NOTIFICATION_CENTER=
+ [ != ]
+ nvram get bwdpi_sig_ver
+ current_sig_ver=2.152
+ echo 2.152
+ sed s/\.//g
+ current_sig_ver=2152
+ echo 2152
2152
+ echo 2152
+ nvram get sig_type
+ sig_type=FULL
+ [ FULL == ]
+ nvram get apps_sq
+ forsq=
+ nvram get territory_code
+ tcode=US/06
+ [ US/06 == ]
+ territory_type=US/06_FULL
+ [ == 1 ]
+ echo ---- sig update real normal----
+ wget -q -t 2 -T 3O https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip -O /tmp/sig_update.txt
wget: --timeout: Invalid time period '3O'
+ r=2
+ [ 2 != 0 ]
+ echo Download sig info Failure, return_code : 2
Download sig info Failure, return_code : 2
+ echo Download sig info Failure, return_code : 2
+ nvram set sig_state_error=1
+ nvram get sig_state_info
+ update_sig_state_info=2152
+ nvram get sig_last_info
+ last_sig_state_info=
+ [ == ]
+ nvram set sig_state_error=1
+ nvram set sig_state_update=1