We have standlaone NAV 11.1.2/LiveUpdate 5.1.2 on Mac OS X 10.6.8
Recently when manually running LiveUpdate (Update Everyhing Now) we were notified by LittleSnitch of several atypical connection requests. There were repeated UDP connections as well as a connection to snorton.com(?). In addition the 'NIS for Machintosh Submissions Control Data' item was reported as being 62.5 K rather than the usual 60 K.
In the past the only connections requested by LIveUpdate have been to liveupdate.symantec.com and liveupdate.symantecliveupdate.com.
Any idea why things were so different for this one time?