Shows various information about the WF-500 appliance, such as available API keys, registration information, activity, recent samples that the appliance analyzed, and the virtual machine that is selected to perform analysis.
>
api-keys
— Show details about the API keys generated on the WF-500 appliance. You can view the last time the key was used, the key name, status (Enabled or Disabled), and the date/time the key was generated.
>
last-device-registration
— Show list of latest registration activities.
>
latest
— Show latest 30 activities, which include the last 30 analysis activities, the last 30 files that were analyzed, network session information on files that were analyzed and files that were uploaded to the public cloud server.
>
sample-status
— Show wildfire sample status. Enter the SHA or MD5 value of the file to view the current analysis status.
>
statistics
— Display basic wildfire statistics.
> status
— Display the status of the appliance as well as configuration information such as the Virtual Machine (VM) used for sample analysis, whether or not samples/reports are sent to the cloud, vm network, and registration information.
> vm-images
— Display the attributes of the available virtual machine images used for sample analysis. To view the current active image, run the following command:
admin@WF-500> show wildfire status
and view the Select
VM field
.
Sample Output
The following shows the output for this command.
admin@WF-500>
show wildfire api-keys all
+------------------------------------------------------------------+-------------| Apikey | Name | Status | Create Time | Last Used Time |
+---------------------+---------------+----------+--------------+----------+----------| Create Time | Src IP | Src Port | Dst IP | Dst Port | File | Device ID | App |