"sav quarantine -l" command returns nothing
search cancel

"sav quarantine -l" command returns nothing

book

Article ID: 259563

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

"sav quarantine -l" command returns nothing, although "sav quarantine -i <ID>" command returns information about quarantined item.

[root@#### ~]# ll /var/log/sdcsslog/quarantine
total 8
-rw-r-----. 1 root root  68 Feb  9 12:03 18634212b2e.QUR
-rw-r-----. 1 root root 318 Feb  9 12:03 18634212b2e.QUR_METADATA
[root@#### ~]# /opt/Symantec/sdcssagent/AMD/tools/sav quarantine -i 18634212b2e
Item                : 18634212b2e
Description         : /root/Desktop/eicar.com
Full Path           : /root/Desktop/eicar.com
Log Line            : 0=11101,1=0,2=2,3=2,4=2,5=2,6=2,7=ScanCore,8=EICAR Test String,9=0,10=0,11=0,13=68,14=0,16=0,17=0,18=1,19=1,21=20230208.058,22=/root/Desktop/eicar.com,23=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f,24=/var/log/sdcsslog/quarantine/18634212b2e.QUR,25=12,27=3,28=100,29=33188,30=0,31=0,32=10709,33=0,
Flags               : INFECTED
Quarantined         : Wed Aug  5 01:10:12 1970
Created             : -
Last Accessed       : Thu Feb  9 12:03:54 2023
Last Modified       : Thu Feb  9 12:03:54 2023

[root@#### ~]# /opt/Symantec/sdcssagent/AMD/tools/sav quarantine -l
[root@#### ~]#

Environment

  • Symantec Endpoint Protection (SEP) for Linux agent 14.3 RU4

Resolution

This issue is fixed in Symantec Endpoint Protection 14.3 RU6. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.

Additional Information

CRE-12776