show submission

Prev Next

Displays detailed statistics about the number of malware submissions that were analyzed during the past 24 hours.

Note

The fields for the total number of remote submissions are displayed only on a Network Security sensor or sensor-enabled integrated appliance, or an EX Series appliance that is operating in MVX "hybrid" mode.

The fields for the total number of running submissions and the total number of dynamic analysis (DA) submissions are displayed only on an integrated Network Security appliance or an EX Series appliance that is operating in MVX "integrated" (local) mode.

The URLs that are submitted for analysis on a Network Security sensor or sensor-enabled integrated appliance are given higher priority than suspicious or malicious objects.

Syntax

show submission

Parameters

None

Output fields

The following table describes the output fields for the show submission command. Fields are listed in the approximate order in which they appear in the output.

Field

Description

Total queued submissions

Total number of malware submissions that are in the queue waiting to be analyzed from the past 24 hours.

Queued submissions(url)

Total number of malware submissions for URLs that are in the queue waiting to be analyzed from the past 24 hours.

Queued submissions(file)

Total number of malware submissions for files that are in the queue waiting to be analyzed from the past 24 hours.

Total remote submissions

Total number of malware submissions that are currently being analyzed remotely from the past 24 hours.

Remote submissions (url)

Total number of malware submissions that are currently being analyzed remotely for URLs from the past 24 hours.

Remote submissions (file)

Total number of malware submissions that are currently being analyzed remotely for files from the past 24 hours.

Total running submissions

Total number of malware submissions that are currently being analyzed from the past 24 hours.

Running submissions(url)

Total number of malware submissions that are currently running for URLs from the past 24 hours.

Running submissions(file)

Total number of malware submissions that are currently running for files from the past 24 hours.

Total DA running submissions

Total number of dynamic analysis (DA) submissions that are currently running from the past 24 hours.

DA running submissions(url)

Total number of DA submissions that are currently running for URLs from the past 24 hours.

DA running submissions(file)

Total number of DA submissions that are currently running for files from the past 24 hours.

Submissions

Total number of malware submissions and the number submitted per minute in the last 24 hours.

Submissions(url)

Total number of malware submissions and the number submitted per minute for URLs in the last 24 hours.

Submissions(file)

Total number of malware submissions and the number submitted per minute for files in the last 24 hours.

Completed submissions

Total number of malware submissions that were completed and the number submitted per minute in the last 24 hours.

Completed submissions(url)

Total number of malware submissions that were completed and the number submitted per minute for URLs in the last 24 hours.

Completed submissions(file)

Total number of malware submissions that were completed and the number submitted per minute for files in the last 24 hours.

Malicious submission count

Total number of DA submissions that were detected as malicious and the number submitted per minute in the last 24 hours.

URL Dynamic Analysis verified malicious count

Total number of DA submissions that were detected as malicious and the number submitted per minute for URLs in the last 24 hours.

File Dynamic Analysis verified malicious count

Total number of DA submissions that were detected as malicious and the number submitted per minute for files in the last 24 hours.

Remote Submissions Completed

Total number of malware submissions that were completed remotely and the number submitted per minute in the last 24 hours.

Remote Malicious Submissions

Total number of malware submissions that were detected as malicious remotely and the number submitted per minute in the last 24 hours.

Examples

The following example displays the total number of malware submissions that are in process, total number of malware submissions that are in the queue waiting to be analyzed, and cumulative submission statistics for the past 24 hours:

hostname # show submission
Runtime Submission Stats:
  Total queued submission                           : 29
    Queued submissions(url)                         : 0
    Queued submissions(file)                        : 29
  Total running submissions                         : 7
    Running submissions(url)                        : 1
    Running submissions(file)                       : 6
  Total DA running submissions                      : 1
    DA running submissions(url)                     : 1
    DA running submissions(file)                    : 0
Cumulative Stats in timespan 2015-08-10 10:10:43 to 2015-08-11 10:10:43
                                                    : Total      :Rate/minute
  Submissions                                       : 22         : 0.015
    Submissions(url)                                : 22         : 0.015
    Submissions(file)                               : 0          : 0.000
  Completed submissions                             : 22         : 0.015
    Completed submissions(url)                      : 22         : 0.015
    Completed submissions(file)                     : 0          : 0.000
  Malicious submission count                        : 17         : 0.012
    URL Dynamic Analysis verified malicious count   : 17         : 0.012
    File Dynamic Analysis verified malicious count  : 0          : 0.000

The following example displays the total number of malware submissions that are in process, total number of malware submissions that are in the queue waiting to be analyzed, total number of remote submissions, and cumulative submission statistics for the past 24 hours on a Network Security sensor or sensor-enabled integrated appliance:

hostname # show submission
Runtime Submission Stats:
  Total queued submission                           : 0
    Queued submissions(url)                         : 0
    Queued submissions(file)                        : 0
Remote Submissions
  Total remote submissions                          : 26
    Remote submissions(url)                         : 13
    Remote submissions(file)                        : 13
Cumulative Stats in timespan 2017-08-27 12:22:05 to 2017-08-28 12:22:05
                                                   : Total      : Rate/minute
  Submissions                                      : 733        : 0.509
   Submissions(url)                                : 292        : 0.203
   Submissions(file)                               : 441        : 0.306
 Completed submissions                             : 707        : 0.491
   Completed submissions(url)                      : 279        : 0.194
   Completed submissions(file)                     : 428        : 0.297
 Malicious submission count                        : 487        : 0.338
   URL Dynamic Analysis verified malicious count   : 171        : 0.119
   File Dynamic Analysis verified malicious count  : 316        : 0.219
 Remote Submissions Completed                      : 556        : 0.386
 Remote Malicious Submissions                      : 367        : 0.255

User role

Administrator, Monitor, or Analyst.

Command mode

Enable

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Malware Analysis: Release 7.7. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious in Release 8.0.

  • File Protect: Release 7.7. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious in Release 8.0.

  • Network Security: Release 7.7. The command output was enhanced to include the total number of remote submissions on a Network Security sensor or sensor-enabled integrated appliance in Release 7.9. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious on a Network Security sensor or sensor-enabled integrated appliance in Release 8.0.

  • Email Security — Server: Release 7.8