close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show security flow session protocol

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
         show security flow session protocol (           protocol-name          |            protocol-number         )
[brief | extensive | summary]

Description

Display information about each session that uses the specified protocol.

Options

protocol-name—(Optional) Protocol to use as a sessions filter. Information about sessions that use this protocol is displayed. Possible protocols are:

ah—IP Security Authentication Header
egp—Exterior gateway protocol
esp—IPsec Encapsulating Security Payload
gre—Generic routing encapsulation
icmp—Internet Control Message Protocol
igmp—Internet Group Management Protocol
ipip—IP over IP
ospf—Open Shortest Path First
pim—Protocol Independent Multicast
rsvp—Resource Reservation Protocol
sctp—Stream Control Transmission Protocol
tcp—Transmission Control Protocol
udp—User Datagram Protocol

protocol-number—(Optional) Numeric protocol value. For a complete list of possible numeric values, see RFC 1700, Assigned Numbers (for the Internet Protocol Suite).

Range: 0 through 255

brief | extensive | summary

Display the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security flow session protocol command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session protocol Output Fields
Field Name	Field Description
`Session ID`	Number that identifies the session. You can use this ID to get additional information about the session.
`Policy name`	Policy that permitted the traffic.
`Timeout`	Idle timeout after which the session expires.
`In`	Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
`Out`	Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
`Total sessions`	Total number of sessions.
`Status`	Session status.
`Flag`	Internal flag depicting the state of the session, used for debugging purposes.
`Policy name`	Name and ID of the policy that the first packet of the session matched.
`Source NAT pool`	The name of the source pool where NAT is used.
`Application`	Name of the application.
`Maximum timeout`	Maximum session timeout.
`Current timeout`	Remaining time for the session unless traffic exists in the session.
`Session State`	Session state.
`Start time`	Time when the session was created, offset from the system start time.
`Unicast-sessions`	Number of unicast sessions.
`Multicast-sessions`	Number of multicast sessions.
`Failed-sessions`	Number of failed sessions.
`Sessions-in-use`	Number of sessions in use. Valid sessions Pending sessions Invalidated sessions Sessions in other states
`Maximum-sessions`	Number of maximum sessions.

Sample Output

show security flow session protocol icmp
show security flow session protocol icmp brief
show security flow session protocol icmp extensive
show security flow session protocol icmp summary