Forum Discussion

LubosDvorak's avatar
12 days ago
Solved

NetBackup Malware Scanner error

Hello,
Following the instructions in the NetBackup™ Security and Encryption Guide I installed the NetBackup Malware Scanner (Avira) on a linux host and wanted to validate the installation. The "./update.sh" worked fine.
But the test scan wrote an error to the log file:

# ./avira_lib_dir_scan "/NBAntiMalwareClient/savapi-sdk-linux64/bin/avupdate.bin" -log_path "/root/NBMalwareScanner.log" -conf_path "/NBAntiMalwareClient/savapi-sdk-linux64/bin/aviraconf.txt"

Setting Current Locale [en_US.UTF-8]
----------------------------------------------------------------
        AVE version: 8.3.70.92
        VDF version: 8.20.55.30
        savapi expire date: 20250715
        savapi vdf sigcount: 7956675

# cat "/root/NBMalwareScanner.log"
02/06/2025 17:37:14 libsavapi[29828]: [ID139847807833920] ERROR: Setting log level - ERROR

I tried this setup on three different linux hosts (RHEL, Centos) and always got the same error.
Could anybody help?

Thank you.

  • Hey

    I just did a sandbox in RH 9.6 running NBU v11.

    [root@vbox bin]# cat /etc/redhat-release 
    Red Hat Enterprise Linux release 9.6 (Plow)

    [root@vbox bin]# cat /usr/openv/netbackup/version 
    HARDWARE LINUX_RH_X86
    VERSION NetBackup 11.0
    RELEASEDATE Mon Mar 10 18:39:55 CDT 2025
    BUILDNUMBER 0055
    [root@vbox bin]# 

    See below:

    [root@vbox bin]# ./update.sh 
    Updated files:
    libsavapi.so 4.15.8.43 -> 4.15.26.305
    libapcfile.so 2.11.1.3 -> 2.11.3.209
    cacert.crt
    apc_random_id_generator 1.0.0.8 -> 1.0.0.9

    (...)

    aeoffice_mv.dat
    avupdate.bin 2.6.8.24 -> 2.7.2.160
    avupdate_msg.avr 2.6.8.24 -> 2.7.2.160
    Update finished successfully
    [root@vbox bin]# ./avira_lib_dir_scan `pwd`  -log_path /usr/openv/netbackup/logs/avira-log.log -conf_path ./aviraconf.txt 
    Setting Current Locale [en_US.UTF-8] 
        VDF version: 8.20.55.32
    [root@vbox bin]# cat /usr/openv/netbackup/logs/avira-log.log
    02/06/2025 21:00:30 libsavapi[21684]: [ID140075214965632] ERROR: Setting log level - ERROR

    [root@vbox bin]#

    I did create the eicar.com file within inspected folder

    [root@vbox bin]# ./avira_lib_dir_scan `pwd`  -log_path /usr/openv/netbackup/logs/avira-log.log -conf_path ./aviraconf.txt 
    Setting Current Locale [en_US.UTF-8] 
    [file] /usr/openv/avira/savapi-sdk-linux64/bin/eicar.com [Infected:<Eicar-Test-Signature>]
        VDF version: 8.20.55.32
    [root@vbox bin]# cat /usr/openv/netbackup/logs/avira-log.log
    02/06/2025 21:02:28 libsavapi[22009]: [ID139842379664256] ERROR: Setting log level - ERROR

    So looks like that the error in this log file can be ignored... What counts is the command outcome - without virus in given path it just returned the VDF version, with virus in given path it returns the info about what was found. To me it is working... isn't it??

     

     

3 Replies

  • Hey

    I just did a sandbox in RH 9.6 running NBU v11.

    [root@vbox bin]# cat /etc/redhat-release 
    Red Hat Enterprise Linux release 9.6 (Plow)

    [root@vbox bin]# cat /usr/openv/netbackup/version 
    HARDWARE LINUX_RH_X86
    VERSION NetBackup 11.0
    RELEASEDATE Mon Mar 10 18:39:55 CDT 2025
    BUILDNUMBER 0055
    [root@vbox bin]# 

    See below:

    [root@vbox bin]# ./update.sh 
    Updated files:
    libsavapi.so 4.15.8.43 -> 4.15.26.305
    libapcfile.so 2.11.1.3 -> 2.11.3.209
    cacert.crt
    apc_random_id_generator 1.0.0.8 -> 1.0.0.9

    (...)

    aeoffice_mv.dat
    avupdate.bin 2.6.8.24 -> 2.7.2.160
    avupdate_msg.avr 2.6.8.24 -> 2.7.2.160
    Update finished successfully
    [root@vbox bin]# ./avira_lib_dir_scan `pwd`  -log_path /usr/openv/netbackup/logs/avira-log.log -conf_path ./aviraconf.txt 
    Setting Current Locale [en_US.UTF-8] 
        VDF version: 8.20.55.32
    [root@vbox bin]# cat /usr/openv/netbackup/logs/avira-log.log
    02/06/2025 21:00:30 libsavapi[21684]: [ID140075214965632] ERROR: Setting log level - ERROR

    [root@vbox bin]#

    I did create the eicar.com file within inspected folder

    [root@vbox bin]# ./avira_lib_dir_scan `pwd`  -log_path /usr/openv/netbackup/logs/avira-log.log -conf_path ./aviraconf.txt 
    Setting Current Locale [en_US.UTF-8] 
    [file] /usr/openv/avira/savapi-sdk-linux64/bin/eicar.com [Infected:<Eicar-Test-Signature>]
        VDF version: 8.20.55.32
    [root@vbox bin]# cat /usr/openv/netbackup/logs/avira-log.log
    02/06/2025 21:02:28 libsavapi[22009]: [ID139842379664256] ERROR: Setting log level - ERROR

    So looks like that the error in this log file can be ignored... What counts is the command outcome - without virus in given path it just returned the VDF version, with virus in given path it returns the info about what was found. To me it is working... isn't it??

     

     

    • LubosDvorak's avatar
      LubosDvorak
      Level 4

      I re-run the test with eicar.com and it worked as expected.
      You are absolutely right - the error "libsavapi[22009]: [ID139842379664256] ERROR: Setting log level - ERROR" can be ignored.

      Thank you very much.

  • Hello

    Could you please elaborate more on your current config?

    What is the primary release? is it on Windows or Linux?