6.5 HP StoreAll OS CLI Reference Guide

To obtain the corresponding filename for the hash name, enter the following command if you are
not in the directory containing the file object:
getfattr -n "user.bucket_mode_key"
/fs1/dir1/2004/share1container/33b/32b/ce1be0ff4065a6e9415095c95f25f47a633cef2b
In this instance
/fs1/dir1/2004/share1container/33b/32b/ce1be0ff4065a6e9415095c95f25f47a633cef2b
is the absolute path containing the hash name.
To obtain the corresponding filename for the hash name, enter the following command if you are
in the directory containing the file object:
getfattr -n "user.bucket_mode_key" portion_of_hash_name_after_last_slash
You would enter the portion of the hash name after the last slash returned by the
ibrix_avquarantine command.
In this instance, the portion of the hash name after the last slash is
ce1be0ff4065a6e9415095c95f25f47a633cef2b, and so the user would enter the following:
getfattr -n "user.bucket_mode_key"
ce1be0ff4065a6e9415095c95f25f47a633cef2b
The command displays the following:
#file: ce1be0ff4065a6e9415095c95f25f47a633cef2b
user.bucket_mode_key="file1.txt"
In this instance, file1.txt is the corresponding object/file that is infected.
Reset quarantined files:
ibrix_avquarantine -R -f <FSNAME > [-p <name1>, <name 2> ,...]
Resets the infected bits, so that you can rescan the file.
Delete quarantined files:
ibrix_avquarantine -D -f <FSNAME > [-p <name1>, <name 2> ,...]
Deletes all infected files or specified files from a file system.
Move quarantined files:
ibrix_avquarantine -M -f <FSNAME > [-p <name1>, <name 2>, …] -d
<Destination_Directory>
Moves files outside the AV-enabled file system, so that you can clean the infected files.
NOTE: You cannot copy or move an infected file outside an AV-enabled file system by using
basic Linux commands, such as mv and cp. You must use the move option in the quarantine utility
to do so.
Options
DescriptionOption
Deletes quarantined files.-D
Lists quarantined files on a particular file system.-L
Moves quarantined files.-M
Resets quarantined files.-R
See also
ibrix_av, ibrix_avscan
24 StoreAll commands