Component Duplication

When the latest version of a full pattern file is available for download from the Trend Micro ActiveUpdate server, 14 "incremental patterns" also become available. Incremental patterns are smaller versions of the full pattern file that account for the difference between the latest and previous full pattern file versions. For example, if the latest version is 175, incremental pattern v_173.175 contains signatures in version 175 not found in version 173 (version 173 is the previous full pattern version since pattern numbers are released in increments of 2. Incremental pattern v_171.175 contains signatures in version 175 not found in version 171.

To reduce network traffic generated when downloading the latest pattern, OfficeScan performs component duplication, a component update method where the OfficeScan server or Update Agent downloads only incremental patterns.

Component duplication applies to the following components:

Component duplication process for the OfficeScan server

Updating a component as soon as a new version is available reduces the impact of component duplication on server performance. Therefore, make sure you download components regularly.

To help explain component duplication for the server, refer to the following scenario:

Full patterns on the OfficeScan server

Current version: 171

Other versions available: 169   167   165   163   161   159

Latest version on the ActiveUpdate server

Full pattern version: 175

Incremental patterns: 173.175   171.175   169.175   167.175   165.175   163.175   161.175   159.175   157.175   155.175   153.175   151.175   149.175   147.175

 

  1. The OfficeScan server compares its current full pattern version with the latest version on the ActiveUpdate server. If the difference between the two versions is 14 or less, the server only downloads the incremental pattern that accounts for the difference between the two versions.

  2. Note: If the difference is more than 14, the server automatically downloads the full version of the pattern file and 14 incremental patterns.

To illustrate based on the example:

  1. The server merges the incremental pattern with its current full pattern to generate the latest full pattern.

To illustrate based on the example:

  1. The server generates incremental patterns based on the other full patterns available on the server. If the server does not generate these incremental patterns, clients that missed downloading earlier incremental patterns automatically downloads the full pattern file, which will consequently generate more network traffic.

To illustrate based on the example:

169.175   167.175   165.175   163.175   161.175   159.175

171.175   169.175   167.175   165.175   163.175   161.175   159.175

  1. The server keeps the last 7 full pattern versions (versions 175, 171, 169, 167, 165, 163, 161). It removes any older version (version 159).

  1. The server compares its current incremental patterns with the incremental patterns available on the ActiveUpdate server. The server downloads the incremental patterns it does not have.

To illustrate based on the example:

173.175   171.175   169.175   167.175   165.175   163.175   161.175   159.175   157.175   155.175   153.175   151.175   149.175   147.175

171.175   169.175   167.175   165.175   163.175   161.175   159.175

173.175   157.175   155.175   153.175   151.175   149.175   147.175

  1. The latest full pattern and the 14 incremental patterns are made available to clients.

Component duplication process for Update Agents

  1. The Update Agent compares its current full pattern version with the latest version on the update source. If the difference between the two versions is 14 or less, the Update Agent downloads the incremental pattern that accounts for the difference between the two versions.

  2. Note: If the difference is more than 14, the Update Agent automatically downloads the full version of the pattern file.

  1. The Update Agent merges the incremental pattern it downloaded with its current full pattern to generate the latest full pattern.

  2. The Update Agent downloads all the remaining incremental patterns on the update source.

  3. The latest full pattern and all the incremental patterns are made available to clients.