Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show monitor security flow

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show monitor security flow

Description

Display information about the security flow session monitoring.

Required Privilege Level

view

Output Fields

Lists the output fields for the show monitor security flow command. Output fields are listed in the approximate order in which they appear.

Table 1: show monitor security flow Output Fields

Field Name

Field Description

Monitor security flow session status

State of the security flow session monitoring: active or inactive.

Monitor security flow trace file

Name of the file for monitoring output.

Monitor security flow filters

  • conn-tag—Tag that uniquely identifies a session. The session key is expanded to include this tuple.

  • Destination Address—Address of the destination to be matched.

  • Destination Port—Name of the destination port to be matched.

  • Interface Name—Interface name to be matched.

  • Logical System Name—Logical system name to be matched.

  • Name—Name of the security flow filter.

  • Protocol—Name of the protocol to be matched.

  • Source Address—Address of the source to be matched.

  • Source Port—Name of the source port to be matched.

  • Status—State of the security flow filter: active or inactive.

Sample Output

show monitor security flow

content_copy zoom_out_map
user@host>show monitor security flow

Monitor security flow session status: Active
Monitor security flow trace file: flow
Monitor security flow filters:
  Name: server-sql 
    Status: Active
    source: 10.2.2.1 (port *), destination: 10.20.30.40 (port 1433)
    protocol: TCP
    conn-tag: 0
  Name: internet-access
    Status: Active
    source: * (port *), destination: * (port 80)
    protocol: TCP
    conn-tag: 0

Release Information

Command introduced in Junos OS Release 12.1X46-D10. This topic was updated to include the flow session conn-tag filter in Junos OS Release 15.1X49-D70.

footer-navigation