Obtaining Information About Sessions By Using the Configuration show Command

You can use the following command to obtain information about configured parameters that apply to all flows, or sessions:

The show security flow configuration command displays the following information:

• allow-dns-reply—Identifies if unmatched incoming Domain Name System (DNS) reply packets are allowed.
• route-change-timeout—If enabled, displays the session timeout value to be used on a route change to a nonexistent route.
• tcp-mss—Shows the current configuration for the TCP maximum segment size value to be used for all TCP packets for network traffic.
• tcp-session—Displays all configured parameters that control session parameters, examples of which are described in Changing Session Characteristics.
• syn-flood-protection-mode—Displays the SYN Proxy mode.

For detailed information about this command, see the JUNOS Software CLI Reference.