Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

ON THIS PAGE

Syntax
Description
Options
Required Privilege Level
Output Fields
Sample Output
Release Information

keyboard_arrow_right

show security flow session source-prefix

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
         show security flow session source-prefix       
                    source-prefix-number                
[brief | extensive | summary]

Description

Display information about each session that uses the specified source prefix.

Options

source-prefix-number—Source IP prefix or address for which to display sessions information.

brief | extensive | summary

Display the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security flow session source-prefix command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session source-prefix Output Fields
Field Name	Field Description
`Session ID`	Number that identifies the session. You can use this ID to get additional information about the session.
`Policy name`	Policy that permitted the traffic.
`Timeout`	Idle timeout after which the session expires.
`In`	Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
`Out`	Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
`Total sessions`	Total number of sessions.
`Status`	Session status.
`Flag`	Internal flag depicting the state of the session, used for debugging purposes.
`Policy name`	Name and ID of the policy that the first packet of the session matched.
`Source NAT pool`	The name of the source pool where NAT is used.
`Application`	Name of the application.
`Maximum timeout`	Maximum session timeout.
`Current timeout`	Remaining time for the session unless traffic exists in the session.
`Session State`	Session state.
`Start time`	Time when the session was created, offset from the system start time.
`Valid sessions`	Number of valid sessions.
`Pending sessions`	Number of pending sessions.
`Invalidated sessions`	Number of invalidated sessions.
`Sessions in other states`	Number of sessions in other states.

Sample Output

show security flow session source-prefix 200.0.0.10
show security flow session source-prefix 200.0.0.10 brief
show security flow session source-prefix 200.0.0.10 extensive
show security flow session source-prefix 200.0.0.10 summary

show security flow session source-prefix 200.0.0.10

content_copy zoom_out_map
root> show security flow session source-prefix 200.0.0.10
Flow Sessions on FPC10 PIC1:
Total sessions: 0

Flow Sessions on FPC10 PIC2:

Session ID: 420000002, Policy name: p1/4, Timeout: 488, Valid
  In: 200.0.0.10/15198 --> 60.0.0.2/23;tcp, If: ge-7/1/0.0, Pkts: 9, Bytes: 507, CP Session ID: 420000002
  Out: 60.0.0.2/23 --> 200.0.0.10/15198;tcp, If: ge-7/1/1.0, Pkts: 8, Bytes: 462, CP Session ID: 420000002
Total sessions: 1

Flow Sessions on FPC10 PIC3:
Total sessions: 0

show security flow session source-prefix 200.0.0.10 brief

content_copy zoom_out_map
root> show security flow session source-prefix 200.0.0.10 brief
Flow Sessions on FPC10 PIC1:
Total sessions: 0

Flow Sessions on FPC10 PIC2:

Session ID: 420000002, Policy name: p1/4, Timeout: 482, Valid
  In: 200.0.0.10/15198 --> 60.0.0.2/23;tcp, If: ge-7/1/0.0, Pkts: 9, Bytes: 507, CP Session ID: 420000002
  Out: 60.0.0.2/23 --> 200.0.0.10/15198;tcp, If: ge-7/1/1.0, Pkts: 8, Bytes: 462, CP Session ID: 420000002
Total sessions: 1

Flow Sessions on FPC10 PIC3:
Total sessions: 0

show security flow session source-prefix 200.0.0.10 extensive

content_copy zoom_out_map
root> show security flow session source-prefix 200.0.0.10 extensive
Flow Sessions on FPC10 PIC1:
Total sessions: 0

Flow Sessions on FPC10 PIC2:

Session ID: 420000002, Status: Normal
Flags: 0x40/0x0/0x2408003, services-offload
Policy name: p1/4
Source NAT pool: Null, Application: junos-telnet/10
Dynamic application: junos:UNKNOWN, 
Encryption:  Unknown
Application traffic control rule-set: INVALID, Rule: INVALID
Maximum timeout: 1800, Current timeout: 436
Session State: Valid
Start time: 165, Duration: 1370
   In: 200.0.0.10/15198 --> 60.0.0.2/23;tcp, 
    Interface: ge-7/1/0.0, 
    Session token: 0x6, Flag: 0x42001021
    Route: 0x80010, Gateway: 200.0.0.10, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 9, Bytes: 507
    CP Session ID: 420000002
   Out: 60.0.0.2/23 --> 200.0.0.10/15198;tcp, 
    Interface: ge-7/1/1.0, 
    Session token: 0x7, Flag: 0x42001020
    Route: 0x70010, Gateway: 60.0.0.2, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 8, Bytes: 462
    CP Session ID: 420000002
Total sessions: 1

Flow Sessions on FPC10 PIC3:
Total sessions: 0

show security flow session source-prefix 200.0.0.10 summary

content_copy zoom_out_map
root> show security flow session source-prefix 200.0.0.10 summary
Flow Sessions on FPC10 PIC1:

Valid sessions: 0
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 0

Flow Sessions on FPC10 PIC2:

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 1

Flow Sessions on FPC10 PIC3:

Valid sessions: 0
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 0

Release Information

Command introduced in Junos OS Release 8.5.

Support for IPv6 addresses added in Junos OS Release 10.2. Support for IPv6 addresses in active/active chassis cluster configurations (in addition to the existing support of active/passive chassis cluster configurations) added in Junos OS Release 10.4.

Filter and view options introduced in Junos OS Release 10.2.

arrow_backward PREVIOUS show security flow session source-port

NEXT arrow_forward show security flow session ssl

footer-navigation