Airgap Response File Size

Hello

I have a daily routine that generates a new airgap reponse file which I have been using for a few years now. Recently the size of the airgap response file greatly increased and I am not sure what might have changed. I find is I run the routine manually I also get a large file size. Noth has changed on my side, same sitefile list same version of the airgap tool 9.5.15, so I am thining maybe something has changed on the HCL side of the coin.

Below is a screenshot of what I am seeing, as you can see the change in the file size is quite large.

image

We’d probably need a list of the sites you’re gathering to comment more meaningfully; but I note that’s about the time we released some major updates including BigFix 10.0.2, major updates to WebUI sites, changes in Mac content to handle OS renames, and changes in several sites to update non-Flash dashboards.

1 Like

This is what we typically gather:

G::BES Asset Discovery::http://sync.bigfix.com/cgi-bin/bfgather/assetdiscovery
G::BES Inventory and License::http://sync.bigfix.com/cgi-bin/bfgather/besinventory
G::BES Support::http://sync.bigfix.com/cgi-bin/bfgather/bessupport
G::BigFix Client Compliance Configuration::http://sync.bigfix.com/cgi-bin/bfgather/clientcompliance
G::BigFix Labs::http://sync.bigfix.com/cgi-bin/bfgather/bigfixlabs
N::BigFix OS Deployment for Windows::http://sync.bigfix.com/cgi-bin/bfgather/bigfixosdeployment
G::Client Manager for Anti-Virus::http://sync.bigfix.com/cgi-bin/bfgather/avclient
G::CIS Checklist for CentOS Linux 7::http://sync.bigfix.com/cgi-bin/bfgather/ciscentoslinux7
G::DISA STIG Checklist for RHEL 6 RG03::http://sync.bigfix.com/cgi-bin/bfgather/disarhel6rg03
G::DISA STIG Checklist for RHEL 7::http://sync.bigfix.com/cgi-bin/bfgather/disarhel7
G::DISA Checklist for Windows 10::http://sync.bigfix.com/cgi-bin/bfgather/disawin10
G::DISA STIG Checklist for Windows 2016::http://sync.bigfix.com/cgi-bin/bfgather/disawin2016
G::DISA STIG Checklist for Windows 7::http://sync.bigfix.com/cgi-bin/bfgather/disawin7
G::Enterprise Security::http://sync.bigfix.com/cgi-bin/bfgather/bessecurity
G::IBM Endpoint Manager for Software Use Analysis::http://sync.bigfix.com/cgi-bin/bfgather/ibmforsua
N::IBM Software Inventory::http://sync.bigfix.com/cgi-bin/bfgather/ibmsoftwareinventory
G::Linux RPM Patching::http://sync.bigfix.com/cgi-bin/bfgather/linuxrpmpatching
N::OS Deployment::http://sync.bigfix.com/cgi-bin/bfgather/osdeployment
N::OS Deployment and Bare Metal Imaging::http://sync.bigfix.com/cgi-bin/bfgather/osimaging
G::Patches for CentOS6 Plugin R2::http://sync.bigfix.com/cgi-bin/bfgather/patchesforcentos6pluginr2
G::Patches for CentOS7 Plugin R2::http://sync.bigfix.com/cgi-bin/bfgather/patchesforcentos7pluginr2
G::Patches for CentOS 8::http://sync.bigfix.com/cgi-bin/bfgather/patchesforcentos8
G::Patches for RHEL 7::http://sync.bigfix.com/cgi-bin/bfgather/patchesforrhel7
G::Patches for RHEL 8::http://sync.bigfix.com/cgi-bin/bfgather/patchesforrhel8
G::Patches for RHEL6 Native Tools::http://sync.bigfix.com/cgi-bin/bfgather/patchesforrhel6nativetools
G::Patching Support::http://sync.bigfix.com/cgi-bin/bfgather/patchingsupport
G::Power Management::http://sync.bigfix.com/cgi-bin/bfgather/powermanagement
G::SCM Reporting::http://sync.bigfix.com/cgi-bin/bfgather/scmreporting
G::Server Automation::http://sync.bigfix.com/cgi-bin/bfgather/serverautomation
G::Software Distribution::http://sync.bigfix.com/cgi-bin/bfgather/softwaredistribution
G::Tivoli Remote Control::http://sync.bigfix.com/cgi-bin/bfgather/tivoliremotecontrol
G::Updates for Windows Applications::http://sync.bigfix.com/cgi-bin/bfgather/updateswindowsapps
G::Virtual Endpoint Manager::http://sync.bigfix.com/cgi-bin/bfgather/virtualendpointmanager
G::Vulnerabilities to Windows Systems::http://sync.bigfix.com/cgi-bin/bfgather/vulnwindows

WebUI sites

G::Profile Management::http://sync.bigfix.com/cgi-bin/bfgather/webui-profilemgmt
G::WebUI API::http://sync.bigfix.com/cgi-bin/bfgather/webui-api
G::WebUI App Admin::http://sync.bigfix.com/cgi-bin/bfgather/webui-appadmin
G::WebUI Auto Patch::http://sync.bigfix.com/cgi-bin/bfgather/webui-autopatch
G::WebUI Common::http://sync.bigfix.com/cgi-bin/bfgather/webui-common
G::WebUI Content App::http://sync.bigfix.com/cgi-bin/bfgather/webui-contentapp
G::WebUI Custom::http://sync.bigfix.com/cgi-bin/bfgather/webui-custom
G::WebUI Data Sync::http://sync.bigfix.com/cgi-bin/bfgather/webui-datasync
G::WebUI Framework::http://sync.bigfix.com/cgi-bin/bfgather/webui-framework
G::WebUI Patch::http://sync.bigfix.com/cgi-bin/bfgather/webui-patch
G::WebUI Permissions and Preferences::http://sync.bigfix.com/cgi-bin/bfgather/webui-pps
G::WebUI Query::http://sync.bigfix.com/cgi-bin/bfgather/webui-query
G::WebUI Software Distribution::http://sync.bigfix.com/cgi-bin/bfgather/webui-swdist
G::WebUI Take Action::http://sync.bigfix.com/cgi-bin/bfgather/webui-takeaction

Hello, so stopping the gather of all the WebUI sites resulted in a airgap response file that was significantly smaller. 370 MB as opposed to 1.3 GB. What the heck is in the response file for the webui sites that makes it so large and does one need to gather those sites every day or just when changes to those sites are announced?

I would suspect that the difference is delta updates vs complete updates of all subscribed/entitled external sites.

I believe WebUI pushes a lot of their app updates through site content.

If you are using the “normal” Airgap method where your server creates a request file, you should only be gathering delta updates. If you are using the “no-request” method where you manually list the sites to gather, you’ll get the full site echo time.

1 Like

At the time of 9.5.10, there were no “delta” update in Airgap. The traffic between BigFix server and clients may use delta, but Airgap did not.

1 Like