Supported command-line options for Java-based command-line scanner

HOWTO79784
Last Updated October 20, 2014
Copy Article Title/URL
Feedback
Subscribe

Supported command-line options for Java-based command-line scanner

Table: Supported options for the Java-based command-line scanner describes the options that the command-line scanner supports.

Table: Supported options for the Java-based command-line scanner

Option

Description

-s, --server

Specify one or more Symantec Protection Engines for scanning files.

You must separate multiple entries with a semicolon and the entries should be in double quotes. If you do not specify a Symantec Protection Engine, the server option defaults to the local host that listens on the default port.

The format for each Symantec Protection Engine is <IPaddress:port>, where IPaddress is the DNS name or IP address of the computer on which Symantec Protection Engine is running, and port is the port number on which Symantec Protection Engine listens.

Note:

When more than one Symantec Protection Engine is specified, the load balancing and failover features of the API are activated automatically.

See About specifying the Symantec Protection Engine IP address and port for Java-based command-line scanner.

-a, --action

Optionally override the default antivirus scanning mode.

The scanning modes that you can select are as follows:

  • Scan

    Files are scanned, but no repair is tried. Infected files are not deleted.

  • Scanrepair

    Symantec Protection Engine tries to repair infected files. Files that cannot be repaired are not deleted.

  • Scanrepairdelete

    Symantec Protection Engine tries to repair infected files. Files that cannot be repaired are deleted. This configuration is the recommended setting.

  • Default

    If you do not specify a scanning mode, the scan policy defaults to the policy set on the Symantec Protection Engine.

See About specifying the antivirus scanning mode for Java-based command-line scanner.

-c, --clobber

Always overwrites the scanned file with server response.

-b, --verbose

Report detailed information about the file that is scanned.

When you use this option, a line of output is printed to STDOUT for each file that is scanned. The information includes both the name of the file and the result of the scan, including the final disposition of the file.

See About using the --verbose option in the java-based command-line scanner.

-p, --api

The command-line scanner now includes services for supporting Insight, better categorization of threats,and unscannable file handling features.

You can specify one of the following options:

  • 0: Scan file with legacy API's.

    This is the default value.

  • 1: Scan file with APIs (enhanced threat categorization).

  • 2: Scan file with Insight API's.

See About scanning files in Symantec Protection Engine using different services/APIs with Java-based command-line scanner.

-d, --disableinsight

Disable the Symantec Insight feature.

Note:

This service is applicable only if -p, --api = 2.

See About using Insight command options with Java-based command-line scanner.

-l, --aggressionlevel

Specify the Insight aggression level.

Note:

This service is applicable only if -p, --api = 2.

You can specify one of the following options:

  • 1: Low

    Note:

    This is the default value.

  • 2: Medium

  • 3: High

See About using Insight command options with Java-based command-line scanner.

-md5, --md5hash

Specify the MD5 value of the file.

Note:

This service is applicable only if -p, --api = 2.

See About using Insight command options with Java-based command-line scanner.

-sha, --sha256

Specify the SHA256 value of the file.

Note:

This service is applicable only if -p, --api = 2.

See About using Insight command options with Java-based command-line scanner.

-i, --sourceip

Specify the source IP of the file.

Note:

This service is applicable only if -p, --api = 2.

See About using Insight command options with Java-based command-line scanner.

-u, --sourceurl

Specify the source URL of the file.

Note:

This service is applicable only if -p, --api = 2.

See About using Insight command options with Java-based command-line scanner.

-n, --digitallysigned

Specify if the file is digitally signed.

Note:

This service is applicable only if -p, --api = 2.

You can specify one of the following options:

  • 0: File is not digitally signed.

  • 1: File is digitally signed.

See About using Insight command options with Java-based command-line scanner.

-r, --reportinsightinfo

Specify the Insight information for the file.

Note:

This service is applicable only if -p, --api = 2.

You can specify one of the following options:

  • 0: Symantec Protection Engine does not provide reputation information in ICAP response.

  • 1: Symantec Protection Engine provides information in ICAP response for Insight convicted files.

See About using Insight command options with Java-based command-line scanner.

See Java-based command-line scanner syntax and usage.

Imported Document ID: HOWTO79784
Legacy ID: v57868770_v80846623

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.