This command displays the malware server statistics in all scan engines for all supported file types.
Syntax:
show malwareserverstats
Sample Output:
IntruDbg#> show malwareserverstats
Packet Holder Statistics:
-------------------------
Pkt Hldr Alloc Cnt: 3979.
Pkt Hldr Free Cnt: 3969.
Pkt Hldr Alloc Error Cnt: 0.
Packet Holder Error Statistics:
-------------------------------
Pkt hlder buf in Use and allocated again: 0.
Pkt hlder buf double frees: 0.
Write Holder Statistics:
------------------------
Write Hldr Alloc Cnt: 4.
Write Hldr Free Cnt: 4.
Write Hldr Alloc Error Cnt: 0.
Session Node Statistics:
------------------------
Session Node Alloc Cnt: 1.
Session Node Free Cnt: 1.
Session Close Cnt: 1.
Session Node Alloc Error Cnt: 0.
FileManager Node Statistics:
----------------------------
FM Node Alloc Cnt: 1.
FM Node Free Cnt: 1.
FM Alloc Err Cnt: 0.
FM Free Error Cnt: 0.
Session Timer Statistics:
-------------------------
Session Timer Add Cnt: 1.
Session Timer Delete Cnt: 1.
Session Timer Trigger Cnt: 0.
Session Timer Reupdate Trigger Cnt: 0.
Ctrl Msg Session Timer Cnt: 0.
Session Timer Add Error Cnt : 0.
Scan Timer Statistics:
-----------------------
Scan Timer Add Cnt: 1.
Scan Timer Delete Cnt: 1.
Scan Timer Trigger Cnt: 0.
Ctrl Msg Scan Timer Cnt: 0.
Scan Timer Add Error Cnt: 0.
SOFA Thread Load Statistics:
-----------------------------
Server Thread Load: 0.
External Write Load: 0.
Internal Write Load: 0.
PDF-JS Scan Load: 0.
Manager Write Load: 0.
IVX Write Load: 0.
File Upload to Manager Load: 0.
Flash Scan Thread Load: 0.
SOFA Control Message Statistics:
--------------------------------
Ctrl Msg via Socket Pkt Cnt: 96.
Ctrl Msg Pkt Processed by SOFA-Server: 107.
Ctrl Msg Read Error Cnt: 0.
Ctrl Msg Sigfile Parse Msg Cnt: 0.
SOFA Protocol Statistics:
-------------------------
Sibyte to SBC Pkt Read Cnt: 220.
Sibyte to SBC Pkt Processed by SOFA-Server: 220.
Sibyte to SBC Pkt Read Discard Cnt: 0.
Sofa-Protocol New File Dwnld Req Pkt Cnt: 1.
Sofa-Protocol File Data Pkt Cnt: 217.
Sofa-Protocol Scan Req Pkt Cnt: 1.
Sofa-Protocol Error Msg In Pkt Cnt: 1.
Sofa-Protocol Pkt seq num mismatch cnt: 0.
SOFA Session Close Message Statistics:
-------------------------
Sofa Server Session time out Cnt: 0.
Sofa Server scan time out Cnt: 0.
Sofa Server Abort transfer Cnt: 0.
Sofa Client Session time out Cnt: 1.
Sofa Client scan time out Cnt: 0.
Sofa Client Abort transfer Cnt: 0.
Sofa-Protocol New File Dwnld Rsp Pkt Cnt: 0.
Sofa-Protocol Error Msg Out Pkt Cnt: 0.
Sofa-Protocol Scan Rsp Pkt Cnt: 2.
Scan Rsp File Info Pkt Cnt: 1.
Multi-Flow New File Dwnld Req Pkt Cnt: 0.
Multi-Flow File Data Pkt Cnt: 0.
Multi-Flow Scan Req Pkt Cnt: 0.
Multi-Flow Error Msg In Pkt Cnt: 0.
Multi-Flow Md5 Calculated cnt: 0.
Multi-Flow Error Msg Out Pkt Cnt: 0.
Multi-Flow Scan Rsp Pkt Cnt: 0.
Multi-Flow Scan Rsp File Info Pkt Cnt: 0.
UDF Statistics:
---------------
UDF Scan-Q Add Cnt: 1.
Scan Rsp UDF Pkt Cnt: 1.
Artemis Statistics:
-------------------
Artemis Scan-Q Add Cnt: 1.
Artemis Cache hit Cnt: 0.
Ctrl Msg Artemis Rslt Cnt: 1.
Scan Rsp Artemis Pkt Cnt: 1.
Artemis DNS Channel Request/Response Statistics:
Total No. Sofa Artemis request received: 0.
Total No. Artemis request sent out: 0.
Total No. Artemis successful response: 0.
Nameserver connectivity errors: 0.
GTI nameserver malformed replies: 0.
Files unknown to GTI: 0.
GTI no data: 0.
Queries dropped due to configuration/memory: 0.
GTI bad queries: 0.
Unknown errors: 0.
Artemis File-Rep REST Statistics:
Total Request Artemis received from SOFA: 1.
Total Request Artemis sent to curl(GTI): 1.
Total Artemis REST successful response: 1.
Total Artemis REST Unresolved Queries: 0.
Total Valid Rep Received from GTI: 1.
REST Internal GTI Server Error: 0.
REST Invalid JSON Format Error: 0.
REST Unsupported Operation Error: 0.
REST Missing mandatory parameter Error: 0.
REST Incorrect GTI protocol format Error: 0.
REST Max number of operations exceeded Error: 0.
REST Invalid protocol version Error: 0.
REST Duplicate parameter Error: 0.
REST Missing mandatory client info param Error: 0.
REST Empty mandatory parameter Error: 0.
REST Invalid mandatory parameter format Error: 0.
REST Failed to Connect Error: 0.
REST Empty Input Error: 0.
REST Empty client information parameter Error: 0.
REST Invalid client info param format Error: 0.
REST Duplicate client information parameter Error: 0.
REST Generic GTI Server error Error: 0.
REST Other GTI Server Error: 0.
REST pre CURL Error: 0.
REST Client ID Not Available: 0.
REST Manager-GUID Not Available: 0.
REST CURL perform failed Error: 0.
REST HTTP BAD REQUEST Error: 0.
REST HTTP UNAUTHORIZED Error: 0.
REST HTTP UNSUPPORTED MEDIATYPE Error: 0.
REST Other HTTP Error: 0.
REST Error in parsing JSON response object: 0.
REST Hash not found in GTI server Error: 0.
REST CA Cert validation Error: 0.
REST GTI server safemode response: 0.
REST GTI server safemode response lastseen: Thu, 01 Jan 1970 00:00:00 GMT.
IPS Analysis(pdf) Engine Statistics:
---------------------------
IPS Analysis(pdf) Scan-Q Add Cnt: 0.
IPS Analysis(pdf) Scan-DQ Cnt: 0.
IPS Analysis(pdf) Scan Discard Cnt: 0.
IPS Analysis(pdf) Scan Skip Cnt: 0.
IPS Analysis(pdf) Cache hit Cnt: 0.
IPS Analysis(pdf) Scan Skip Cnt: 0.
Ctrl Msg IPS Analysis(pdf) Rslt Cnt: 0.
Scan Rsp IPS Analysis(pdf) Pkt Cnt: 0.
IPS Analysis(flash) Engine Statistics:
---------------------------
IPS Analysis(flash) Scan-Q Add Cnt: 0.
IPS Analysis(flash) Scan-Q Skip Cnt(due to heavy load): 0.
IPS Analysis(flash) Scan Discard Cnt: 0.
IPS Analysis(flash) Cache hit Cnt: 0.
Ctrl Msg IPS Analysis(flash) Rslt Cnt: 0.
Scan Rsp IPS Analysis(flash) Pkt Cnt: 0.
Err Rsp IPS Analysis(flash) Pkt Cnt: 0.
IPS Analysis(office) Engine Statistics:
---------------------------
IPS Analysis(office) Scan-Q Add Cnt: 0.
IPS Analysis(office) Scan-Q Skip Cnt(due to heavy load): 0.
IPS Analysis(office) Scan Discard Cnt: 0.
IPS Analysis(office) Cache hit Cnt: 0.
Ctrl Msg IPS Analysis(office) Rslt Cnt: 0.
Scan Rsp IPS Analysis(office) Pkt Cnt: 0.
Err Rsp IPS Analysis(office) Pkt Cnt: 0.
File Save Statistics:
---------------------
File Save Q Add Cnt: 0.
File Save DQ Cnt: 0.
File Save Discard Cnt: 0.
Ctrl Msg File Save Rslt Cnt: 0.
Scan Rsp File Save Pkt Cnt: 0.
Gateway Anti Malware Statistics:
--------------------------------
Scan-Q Add Cnt: 0.
GAM Cache hit Cnt: 0.
Scan Rsp Pkt Cnt: 0.
Trellix Intelligent Sandbox Dynamic Analysis Statistics:
---------------------------------
Scan-Q Add Cnt: 0.
Scan Rsp Pkt Cnt: 0.
TIS Protocol Statistics:
-------------------------
Status Query Pkt Cnt: 0
New Dwnld Req Pkt Cnt: 0
File Data Pkt Cnt: 0
New Dwnld Req uncomplete Pkt Cnt: 0
Scan Req Pkt Cnt: 0
Error Msg Out Pkt Cnt: 0
Error Msg Out Pkt Err Cnt: 0
New Dwnld Rsp Pkt Cnt: 0
Scan Rsp Pkt Cnt: 0 0
Scan Rsp not received from TIS within Session time: 0
Error Msg In Pkt Cnt: 0
AV Result Cache hit Cnt: 0
Dynamic Result Cache hit Cnt: 0
TIS Cache Auto Purge Cnt: 1
TIS Delayed Response Cnt: 0
New Dwnld Req Pkt Error Cnt: 0
New Dwnld Req Session time out Cnt: 0
File Data Pkt Error Cnt: 0
Scan Req Pkt Error Cnt: 0
TIS Channel Statistics:
------------------------
Rcv Buf Null Cnt: 0.
Wrong Channel Cfg: 0.
SSL Pkt Rcv Err: 0
Keep Alive Send Err Cnt: 0
Keep Alive Miss Cnt: 0
Keep Alive Sent Cnt: 0
Keep Alive Response Cnt: 0
Channel Initialization Attempt Cnt: 0
IVX Protocol Statistics:
------------------------
Scan-Q Add Cnt: 71
Cache hit Cnt: 0
IVX Cache hit Cnt: 34
Submission Req Cnt: 36
Report Req Cnt: 69
Scan + Cache Rsp Cnt: 71
Report Rsp success Cnt: 36
Reports/Results pending Cnt: 0
Pending list free nodes Cnt: 200
Pending ignored (timedout): 0
Auth Error Cnt: 0
Report Error Cnt: 0
File submission Error Cnt: 0
SHA-256 Req Error Cnt: 0
Manager Protocol Statistics:
----------------------------------
MD5 Hash Query Pkt Cnt: 0
MD5 Hash Query Error Pkt Cnt: 0
New Dwnld Req Pkt Cnt: 0
New Dwnld Req Error Pkt Cnt: 0
File Data Pkt Cnt: 0
File Data Error Pkt Cnt: 0
End of File Pkt Cnt: 0
End of File Error Pkt Cnt: 0
New Dwnld Response Pkt Cnt: 0
New Dwnld Error Response Pkt Cnt: 0
MD5 Hash Query Response Pkt Cnt: 0
Malware Cache Statistics:
----------------------------------
Cache Utilization %%: 0.00 %
Cache Nodes utilized: 0
Cache Nodes Total available: 80000
# of times cache purged: 0
GAM Protocol Statistics:
----------------------------------
GAM New File Download Request from Manager: 0
GAM File Download Data from Manager: 0
GAM File End Request from Manager: 0
GAM File Download Err msg Sent to Manager: 0
GAM File Download Request to GAM Engine: 0
GAM File Download Request Err to GAM Engine: 0
MD5 of last file extracted: f70664bb0d45665e79dnd9113c5e4d0f4
SHA1 of last file extracted: 67cf01ee7ff0e65uhf7ec78chgf274077153add4e
SHA256 of last file extracted: 8cb40e8dce05482907ff83b39911831daf20e4a69ee63a6aac523c880eed1acf
[Trellix Intelligent Sandbox Communication]
Status: up
[Trellix SOFA Primary Manager Communication]
Status: Up
[Trellix SOFA MDR Manager Communication]
Status: Down
Down Reason: Error obtaining channel status
Applicable to:
NS-series Sensors