show services flows
Syntax
Release Information
Command introduced in Junos OS Release 9.5.
all option introduced in Junos OS Release 11.1.
application-protocol option introduced in Junos OS Release 11.1.
Description
Display flow session table entries.
Options
none | — | Display standard information about all flows. |
all | brief | extensive | terse | — | (Optional) Display the specified level of output. |
application-protocol | — | (Optional) Display information about one of the following application protocols:
|
count | — | (Optional) Display a count of the matching entries. |
destination-port destination-port | — | (Optional) Display information for a particular destination port. The range of values is from 0 to 65535. |
destination-prefix destination-prefix | — | (Optional) Display information for a particular destination prefix. |
interface interface-name | — | (Optional) Display information about a particular interface. On M Series and T Series routers, interface-name can be ms-fpc/pic/port or rspnumber. On J Series routers, interface-name is ms-pim/0/port. |
limit number | — | (Optional) Maximum number of entries to display. |
protocol protocol | — | (Optional) Display information about one of the following IP types:
|
service-set service-set | — | (Optional) Display information for a particular service set. |
source-port source-port | — | (Optional) Display information for a particular source port. The range of values is from 0 to 65535. |
source-prefix source-prefix | — | (Optional) Display information for a particular source prefix. |
Required Privilege Level
view
List of Sample Output
show services flowsshow services flows all
show services flows brief
show services flows extensive
show services flows application-protocol
show services flows count
show services flows destination port
show services flows destination prefix
show services flows interface
show services flows protocol
show services flows service-set
show services flows source port
show services flows source prefix
Output Fields
Table 1 lists the output fields for the show services flows command. Output fields are listed in the approximate order in which they appear.
Table 1: show services flows Output Fields
Field Name | Field Description | Level of Output |
|---|---|---|
Interface | Name of the interface. | All levels |
Service set | Name of a service set. Individual empty service sets are not displayed. If no service set has any flows, a flow table header is displayed for each service set. | All levels |
Flow Count | Number of flows in a session. | count only |
Flow or Flow Prot | Protocol used for this flow. | All levels |
Source | Source prefix of the flow in the format source-prefix:port. For ICMP flows, port information is not displayed. | All levels |
Dest | Destination prefix of the flow. For ICMP flows, port information is not displayed. | All levels |
State | Status of the flow:
| All levels |
Dir | Direction of the flow: input (I) or output (O). | All levels |
Frm count | Number of frames in the flow. | All levels |
Byte count | Number of bytes in the flow. | extensive |
Flow role | Flow role. | extensive |
Timeout | Timeout value. | extensive |
Flow path | Flow path: symmetric or asymmetric. | extensive |
Sample Output
show services flows
user@host> show services flows Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 ICMP 10.1.1.2 -> 10.2.2.2 Forward I 102 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 102 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 97 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 97
show services flows all
user@host> show services flows all Interface: ms-2/0/0, Service set: idp-1 Flow State Dir Frm count TCP 10.1.1.2:32769 -> 20.1.1.2:80 Forward I 353431 TCP 20.1.1.2:80 -> 10.1.1.2:32769 Forward O 353429 TCP 10.1.1.2:32771 -> 20.1.1.2:80 Forward I 353562 TCP 20.1.1.2:80 -> 10.1.1.2:32771 Forward O 353560 TCP 10.1.1.2:32770 -> 20.1.1.2:80 Forward I 353577 TCP 20.1.1.2:80 -> 10.1.1.2:32770 Forward O 353575 TCP 10.1.1.2:32768 -> 20.1.1.2:80 Forward I 353610 TCP 20.1.1.2:80 -> 10.1.1.2:32768 Forward O 353608 TCP 10.1.1.2:32777 -> 20.1.1.2:80 Forward I 353625 TCP 20.1.1.2:80 -> 10.1.1.2:32777 Forward O 353624 TCP 10.1.1.2:32776 -> 20.1.1.2:80 Forward I 353643 TCP 20.1.1.2:80 -> 10.1.1.2:32776 Forward O 353642 TCP 10.1.1.2:32775 -> 20.1.1.2:80 Forward I 353658 TCP 20.1.1.2:80 -> 10.1.1.2:32775 Forward O 353657 TCP 10.1.1.2:32774 -> 20.1.1.2:80 Forward I 353676 TCP 20.1.1.2:80 -> 10.1.1.2:32774 Forward O 353674 TCP 10.1.1.2:32773 -> 20.1.1.2:80 Forward I 353692 TCP 20.1.1.2:80 -> 10.1.1.2:32773 Forward O 353690 TCP 10.1.1.2:32772 -> 20.1.1.2:80 Forward I 353704 TCP 20.1.1.2:80 -> 10.1.1.2:32772 Forward O 353702
show services flows brief
The output for the show services flows brief command is identical to that for the show services flows command. For sample output, see show services flows.
show services flows extensive
user@host> show services flows extensive Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 Byte count: 346 Flow role: Unknown, Timeout: 0, Flow path: Asymmetric TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 Byte count: 334 Flow role: Unknown, Timeout: 0, Flow path: Symmetric ICMP 10.1.1.2 -> 10.2.2.2 Forward I 144 Byte count: 12096 Flow role: Unknown, Timeout: 0, Flow path: Symmetric ICMP 10.2.2.2 -> 10.1.1.2 Forward O 144 Byte count: 12096 Flow role: Unknown, Timeout: 0, Flow path: Symmetric
show services flows application-protocol
user@router> show services flows application-protocol
dce-rpcInterface: ms-2/0/0, Service set: ss-1 Flow State Dir Frm count TCP 192.168.200.65:1260 -> 192.168.200.69:5315 Forward I 14 TCP 192.168.200.69:5315 -> 16.16.16.16:1031 Forward O 11 TCP 192.168.200.65:1251 -> 192.168.200.69:1026 Forward I 7 TCP 192.168.200.69:1026 -> 16.16.16.16:1029 Forward O 5
show services flows count
user@host> show services flows count Interface Service set Flow count ms-2/0/0 IDP 6
show services flows destination port
user@router> show services flows destination-port
80Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6
show services flows destination prefix
user@router> show services flows destination-prefix
10.1.1.2Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 137 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 132
show services flows interface
user@router> show services flows interface ms-2/0/0Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 ICMP 10.1.1.2 -> 10.2.2.2 Forward I 162 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 162 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 157 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 157
show services flows protocol
user@router> show services flows protocol icmpInterface: ms-2/0/0, Service set: IDP Flow State Dir Frm count ICMP 10.1.1.2 -> 10.2.2.2 Forward I 202 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 202 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 197 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 197
show services flows service-set
user@router> show services flows service-set
sampleInterface: ms-2/0/0, Service set: sample Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 ICMP 10.1.1.2 -> 10.2.2.2 Forward I 220 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 220 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 215 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 215
show services flows source port
user@router> show services flows source-port
0Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 ICMP 10.1.1.2 -> 10.2.2.2 Forward I 235 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 235 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 230 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 230
show services flows source prefix
user@router> show services flows source-prefix
10.2.2.2Interface: ms-2/0/0, Service set: IDP Flow State Dir Frm count TCP 10.2.2.2:33656 -> 10.1.1.2:80 Forward I 6 TCP 10.1.1.2:80 -> 10.2.2.2:33656 Forward O 5 ICMP 10.1.1.2 -> 10.2.2.2 Forward I 235 ICMP 10.2.2.2 -> 10.1.1.2 Forward O 235 ICMP 10.2.2.2 -> 10.1.1.2 Forward I 230 ICMP 10.1.1.2 -> 10.2.2.2 Forward O 230
