show security flow session brief node
Syntax
show security flow session brief node (node-id | all | local | primary)
Description
Display information about all currently active security sessions on the device for the specified node options in brief mode.
Options
node—(Optional) For chassis cluster configurations,
display session information on a specific node.
node-id—Identification number of the node. It can be 0 or 1.all—Display information about all nodes.local—Display information about the local node.primary—Display information about the primary node.
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show security flow session
brief node command. Output fields are listed in the approximate
order in which they appear.
Field Name |
Field Description |
|---|---|
|
Number that identifies the session. Use this ID to get more information about the session. |
|
Policy that permitted the traffic. |
|
Session state. |
|
Idle timeout after which the session expires. |
|
Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes). |
|
Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes). |
|
Number that identifies the central point session. Use this ID to get more information about the central point session. |
|
Total number of sessions. |
Sample Output
- show security flow session brief node 0
- show security flow session brief node 1
- show security flow session brief node all
- show security flow session brief node local
- show security flow session brief node primary
show security flow session brief node 0
root@host> show security flow session brief node 0 node0: -------------------------------------------------------------------------- Flow Sessions on FPC0 PIC1: Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Total sessions: 1 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0
show security flow session brief node 1
root@host> show security flow session brief node 1 node1: -------------------------------------------------------------------------- Flow Sessions on FPC0 PIC1: Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Total sessions: 1 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0
show security flow session brief node all
root@host> show security flow session brief node all node0: -------------------------------------------------------------------------- Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Total sessions: 1 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0 node1: -------------------------------------------------------------------------- Flow Sessions on FPC0 PIC1: Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Total sessions: 1 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0
show security flow session brief node local
root@host> show security flow session brief node local node0: -------------------------------------------------------------------------- Flow Sessions on FPC0 PIC1: Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Total sessions: 1 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0
show security flow session brief node primary
root@host> show security flow session brief node primary node0: -------------------------------------------------------------------------- Flow Sessions on FPC0 PIC1: Session ID: 10000001, Policy name: default-policy-00/2, State: Active, Timeout: 1696, Valid Resource information : FTP ALG, 1, 0 In: 203.0.113.1/60059 --> 203.0.113.2/21;tcp, If: reth0.0, Pkts: 14, Bytes: 626, CP Session ID: 10000001 Out: 203.0.113.2/21 --> 203.0.113.1/60059;tcp, If: reth1.0, Pkts: 13, Bytes: 744, CP Session ID: 10000001 Flow Sessions on FPC0 PIC2: Total sessions: 0 Flow Sessions on FPC0 PIC3: Total sessions: 0
Release Information
Command introduced in Junos OS Release 8.5; node options added in Junos OS Release 9.0. Filter options added in Junos OS Release 10.2.