The command displays the malware client statistics in all scan engines for all supported file types.
Syntax:
show malwareclientstats
Sample output
IntruDbg#> show malwareclientstats Core id range is not selected, Displaying ALL ----------------------------------- SOFA CLIENT FILE-ENGINE STATISTICS: ----------------------------------- SOFA CLIENT FILE TYPE scripts Files (8) STATISTICS: ----------------------------------- Dcap Start Cnt: 20 Dcap End Cnt: 20 Dcap End-At-Offset Cnt: 0 New-File-Dwnld Pkt Cnt: 20 File-Data Pkt Cnt: 0 Scan-Req Pkt Cnt: 20 Error-Out Pkt Cnt: 20 New-File-Dwnld-Rsp Pkt Cnt: 0 Scan-Rsp Pkt Cnt: 20 Error-In Pkt Cnt: 0 Session Timer Allocated: 20 Session Timer Freed: 20 Session Timer Triggered: 0 Scan Timer Allocated: 0 Scan Timer Freed: 0 Scan Timer Triggered: 0 Pkt-Hold Timer Allocated: 20 Pkt-Hold Timer Freed: 20 Pkt-Hold Timer Triggered: 0 SOFA CLIENT STATISTICS IPS Analysis(pdf) Engine FOR FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS IPS Analysis(flash) Engine FOR FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS IPS Analysis(office) Engine FOR FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS Gateway Anti-Malware ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS GTI File Reputation ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS FILE SAVE ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 20 Scan Rsp Cnt: 20 Scan Rsp Rcvd Within Pkt-Hold Tmr: 20 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS BLOCKLIST ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS Trellix Intelligent Sandbox ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 0 Scan Rsp Cnt: 0 Scan Rsp Rcvd Within Pkt-Hold Tmr: 0 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 0 Resp-Action No-Block: 0 Resp-Action Alert: 0 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 0 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 0 Malware Score Unknown: 0 SOFA CLIENT STATISTICS IVX ENGINE AND FILE TYPE scripts Files (8): Scan Req Cnt: 20 Scan Rsp Cnt: 20 Scan Rsp Rcvd Within Pkt-Hold Tmr: 20 Scan Rsp Rcvd Within Scan Tmr: 0 Scan Rsp Rcvd Within Sess Tmr: 0 Scan Rsp Discarded: 0 Error Result Cnt: 0 L7-DCAP Copy Cnt: 0 L7-DCAP Copy Error Cnt: 0 Resp-Action Block: 20 Resp-Action No-Block: 0 Resp-Action Alert: 20 Resp-Action No-Alert: 0 Resp-Action TCP-Reset: 20 Resp-Action No-TCP-Reset: 0 Clean Files: 0 Malware Score Very-Low: 0 Malware Score Low: 0 Malware Score Medium: 0 Malware Score High: 0 Malware Score Very-High: 20 Malware Score Unknown: 0
Applicable to:
NS-series Sensors