close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show security flow session policy-id

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
         show security flow session policy-id policy-id-number  [brief | extensive | summary ]

Description

Display information about each session by using policy id of the session.

Options

policy-id-number—ID of the policy that the first packet of the session matches with.

Range: 1through 4294967295
brief | extensive | summary–Display the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security flow session policy-id command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session policy-id Output Fields
Field Name	Field Description
`Session ID`	Number that identifies the session. You can use this ID to get additional information about the session.
`Policy name`	Policy that permitted the traffic.
`Timeout`	Idle timeout after which the session expires.
`In`	For the input flow: Source and destination addresses and protocol tuple for the input flow. `Interface`: Input flow interface. `Session token`: Internal token derived from the virtual routing instance. `Flag`: Internal debugging flags. `Route`: Internal next hop of the route to be used by the flow. `Gateway`: Next-hop gateway of the flow. `Tunnel`: If the flow is going into a tunnel, the tunnel ID. Otherwise, 0 (zero). `Port Sequence, FIN sequence, FIN state, Cookie`: Internal TCP state tracking information.
`Out`	For the reverse flow: Source and destination addresses, and protocol tuple for the reverse flow. `Interface`: Reverse flow interface. `Session token`: Internal token derived from the virtual routing instance. `Flag`: Internal debugging flags. `Route`: Internal next hop of the route to be used by the flow. `Gateway`: Next-hop gateway of the flow. `Tunnel`: If the flow is going into a tunnel, the tunnel ID. Otherwise, 0 (zero). `Port Sequence, FIN sequence, FIN state, Cookie`: Internal TCP state tracking information.
`Total sessions`	Total number of sessions.
`Status`	Session status.
`Flag`	Internal flag depicting the state of the session, used for debugging purposes.
`Policy name`	Name and ID of the policy that the first packet of the session matched.
`Source NAT pool`	The name of the source pool where NAT is used.
`Dynamic application`	Name of the application.
`Maximum timeout`	Maximum session timeout.
`Current timeout`	Remaining time for the session unless traffic exists in the session.
`Session State`	Session state.
`Start time`	Time when the session was created, offset from the system start time.

Sample Output

show security flow session policy-id 4
show security flow session policy-id 4 extensive

show security flow session policy-id 4

content_copy zoom_out_map
root> show security flow session policy-id 4
Flow Sessions on FPC1 PIC0:

Session ID: 20093273, Policy name: p1/4, Timeout: 1784, Valid
  In: 101.0.0.2/1 --> 111.0.0.3/1;0, If: ge-0/0/0.0, Pkts: 1, Bytes: 84
  Out: 111.0.0.3/1 --> 201.0.0.1/22643;0, If: ge-0/0/1.0, Pkts: 0, Bytes: 0
Total sessions: 1

show security flow session policy-id 4 extensive

content_copy zoom_out_map
root> show security flow session policy-id 4 extensive
Flow Sessions on FPC10 PIC1:
Total sessions: 0

Flow Sessions on FPC10 PIC2:

Session ID: 420000428, Status: Normal
Flags: 0x0/0x0/0x2008003
Policy name: p1/4
Source NAT pool: interface, Application: junos-telnet/10
Dynamic application: junos:UNKNOWN, 
Encryption:  Unknown
Application traffic control rule-set: INVALID, Rule: INVALID
Maximum timeout: 1800, Current timeout: 1740
Session State: Valid
Start time: 152305, Duration: 64
   In: 200.0.0.10/15192 --> 60.0.0.2/23;tcp, 
    Interface: ge-7/1/0.0, 
    Session token: 0x6, Flag: 0xc0001021
    Route: 0x70010, Gateway: 200.0.0.10, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 40, Bytes: 2251
    CP Session ID: 420001128
   Out: 60.0.0.2/23 --> 60.0.0.1/8078;tcp, 
    Interface: ge-7/1/1.0, 
    Session token: 0x7, Flag: 0xe0001020
    Route: 0x80010, Gateway: 60.0.0.2, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 28, Bytes: 1714
    CP Session ID: 430000965
Total sessions: 1
                                        
Flow Sessions on FPC10 PIC3:
Total sessions: 0

Release Information

Command introduced in Junos OS Release 12.3X48-D10.

arrow_backward PREVIOUS show security flow session plugins

NEXT arrow_forward show security flow session pretty

Junos CLI Reference

ON THIS PAGE