Networking issue:
To troubleshoot
1. launch wireshark, start recording
2. As before, from an admin command prompt, run
C:\inetpub\wwwroot\CBD_SignatureUpdates\do_update.bat
3. The moment it completes, stop the wireshark, save the capture
Fireshark analysis:
Update queries signature source
406 2.925720000 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx DNS 87 Standard query 0xe6db A updates2.cdc.carbonblack.io
Gets IP back for updates2
408 2.938469000 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx DNS 151 Standard query response 0xe6db A 13.224.245.106 A 13.224.245.21 A 13.224.245.2 A 13.224.245.65
Drops name and uses IP
412 2.947251000 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx HTTP 244 2097920 2097920 2097920 GET http://13.224.245.65/update2/idx/master.idx HTTP/1.1
403 denial
419 2.975380000 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx HTTP 969 64128 64128 64128 HTTP/1.1 403 Forbidden (text/html)