Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents

show services application-identification application

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show services application-identification application (detail | summary)

Description

Display detailed information about a specified application signature, detailed information about all application signatures, or a summary of the existing application signatures.

Options

detail

Display detailed information for all application signatures.

summary

Display summary information for all application signatures.

Required Privilege Level

view

Output Fields

Table 1 shows the output details for the show services application-identification application detail command.

Table 1: show services application-identification application summary Output Fields

Field Name

Field Description

Application(s)

The number of applications present.

Application

Name of the custom application.

Disabled

The status of the application and whether the mapping method is currently used to identify this application.

ID

The unique ID number of an application. ID numbers 1 through 32,767 are automatically generated for applications; these IDs do not change. ID numbers for custom applications use 16,777,216 to 33,554,431.

Order

Number used to specify priority when multiple applications match the traffic. The lowest order number takes the highest priority.

show services application-identification application Output Fields lists the output fields for the show services application-identification application command. Output fields are listed in the approximate order in which they appear.

Table 2: show services application-identification application Output Fields

Field Name

Field Description

Application Name

Name of the application.

Application Type

The basic application type, such as HTTP.

Description

A description of the application.

Application ID

The unique ID number of an application signature. ID numbers 1 through 32,767 are automatically generated for application; these IDs do not change.

ID numbers for custom applications use 16,777,216 to 33,554,431.

Priority

Priority over other signature applications.

Order

Disabled

The status of the application and whether the mapping method is currently used to identify this application.

Cacheable

The status whether the application identification results caching is enabled or not for the application.

When this option is enabled, you can cache the application detection result in an ASC table.

Configurable

The status whether application is configurable or not.

Activation Date

Date when the application was activated for the first time.

Last Modified

Date when the application was last updated.

Number of Parent Group(s)

Total number of parent groups in this application signature group or cluster.

Underlying consolidated Protocols/ports application is dependent on

List of default protocols and ports for dependent applications of the specified application.

  • Protocols—List of default protocols.

  • TCP ports—List of default TCP ports.

Layer-7 Immediate Protocol(s)

List of applications over which that dynamic application can be identified.

Application Specific Ports:

The default port for this application type.

Signature:

Signature mapping criteria for application identification

Protocol

Application protocol

Port range

Port range. This option is applicable for TCP or UDP-based applications only.

Member(s)

Member name for a custom application signature.

  • Depth–Maximum number of bytes to check for context match. Byte limit for AppID to identify custom application pattern for applications running over TCP or UDP or Layer 7 applications.

  • Context–Service-specific context, such as http-header-content-type.

  • Pattern–Deterministic finite automaton (DFA) pattern matched on the context. The DFA pattern specifies the pattern to be matched for the signature.

  • Direction–Connection direction of the packets to match pattern (example : CTS [client-to-server])

Number of Parent Group

Number of parents application groups.
Application Groups Application groups names.
Application tags Application tag groups created to group related applications based on the attributes.
group-tags Name of the tag group

characteristic

characteristic of application
risk Associated risk
subcategory Subcategory of the application
category Category of the application.
Attribute

Attribute of the application. Shows Obsolete for the deprecated

application

Sample Output

show services application-identification application summary

content_copy zoom_out_map
user@host> show services application-identification application summary
Application(s): 3616
  Applications                                 Disabled         ID      Order
  junos:SLACKER                                 No               1179    1       
  junos:GOOGLE-TRUSTED-STORE                    No               2819    5       
  junos:AMJILT                                  No               2272    4       
  junos:DSI                                     No               2644    3       
  junos:HLN                                     No               2096    2       
  junos:ETSI-LI                                 No               537     1       
  junos:CRAZYSALOON                             No               1720    5       
  junos:EKSISOZLUK                              No               2436    4       
  junos:SABAH                                   No               2574    3       
  junos:AFREECA                                 No               2373    2       
  junos:SENEWEB                                 No               2068    1       
  junos:DIINO                                   No               776     5       
  junos:CARE2                                   No               376     4       
  junos:MOBAGE                                  No               1456    3       
  junos:CARTOONNETWORK                          No               982     2       
  junos:AVATARS-UNITED                          No               363     1       
  junos:CONVIVA                                 No               2015    5       
  junos:DREAMORA                                No               1725    4       
  junos:ELWATANNEWS                             No               2381    3       
  junos:REUTERS                                 No               1044    2       
  junos:BABYCENTER                              No               364     1       
  junos:SOUTHWEST                               No               289     5       
  junos:ONEDIO                                  No               2517    4       

........
........

show services application-identification application detail

content_copy zoom_out_map
user@host> show services application-identification application detail junos:FTP

Application Name: junos:FTP                                                   
Application type: FTP                                                         
Description: This signature detects the File Transfer Protocol (FTP), which provides facilities for transferring files to and from remote computer systems. It usually runs on TCP port 21.
Application ID: 45      
Priority: high    
Order: 0       
Disabled: Yes                
Cacheable: Yes  
Activation Date: 2003-05-05      
Last Modified: 2016-04-11      
Number of Parent Group(s): 1       
Application Groups:
    junos:infrastructure:file-servers            
Application Tags:
    characteristic        : Supports File Transfer                            
    characteristic        : Known Vulnerabilities                             
    characteristic        : Capable of Tunneling                              
    risk                  : 3                                                 
    subcategory           : File-Servers                                      
    category              : Infrastructure                                    
Layer-7 Protocol(s):
    Protocol: TCP         / 205        
    Protocol: SPDY        / 1469       
    Protocol: SOCKS5      / 193        
    Protocol: SOCKS4      / 192        
    Protocol: HTTPS       / 68         
    Protocol: HTTP2       / 2553       
    Protocol: HTTP        / 67         
Port Mapping:
    Default ports: TCP/21
  

show services application-identification application detail (Custom Applications)

content_copy zoom_out_map
user@host> show services application-identification application detail my-custom-app

Application Name: my-custom-app                                               
Application type: MY-CUSTOM-APP                                               
Description: custom App
Application ID: 16777216
Priority: high    
Order: 65500   
Disabled: No                 
Cacheable: No   
Activation Date: N/A             
Last Modified: N/A             
Layer-7 Protocol(s):
    Protocol: http        / http       
    Port range: N/A         
    Member(s): 1            
        Member m01       
            Context: http-header-host      
            Pattern: MY-SERVER.COM                                        
            Direction: CTS                                   
   

Sample Output

show services application-identification application detail (Unified Policies)

content_copy zoom_out_map
user@host> show services application-identification application detail 


Application Name: junos:GOOGLE
Application type: GOOGLE
Description: This signature detects SSL connections to Google.com. Google is a
             company best known for their search engine but offers many cloud
             based services.
Application ID: 54
Priority: high
Order: 0
Disabled: No
Cacheable: No
Activation Date: 2003-05-05
Last Modified: 2017-06-28
Number of Parent Group(s): 2
Application Groups:
    junos:web:applications
    junos:web:portal
Application Tags:
    characteristic        : Can Leak Information
    characteristic        : Loss of Productivity
    characteristic        : Supports File Transfer
    risk                  : 3
    subcategory           : Applications
    category              : Web
Underlying consolidated Protocols/ports application is dependent on:
    Protocols:
        Protocol: junos:GOOGLE-GEN / 943
        Protocol: junos:STUN  / 201
        Protocol: junos:UDP   / 216
        Protocol: junos:TCP   / 205
        Protocol: junos:HTTP-PROXY / 2956
        Protocol: junos:SSL   / 199
        Protocol: junos:SPDY  / 1469
        Protocol: junos:POSTGRESQL / 150
        Protocol: junos:HTTPS / 68
        Protocol: junos:HTTP  / 67
        Protocol: junos:NET-PROXY / 2629
        Protocol: junos:HTTP2 / 2553
        Protocol: junos:HTTP-TUNNEL / 750
        Protocol: junos:COTP  / 22
        Protocol: junos:RTSP  / 176
        Protocol: junos:RTP   / 175
        Protocol: junos:DTLS  / 1291
        Protocol: junos:RTMP  / 337
        Protocol: junos:QUIC  / 2521
        Protocol: junos:JABBER / 94
    TCP Ports:
        Port: 443
        Port: 554
        Port: 80
    UDP Ports:
        Port: 554
Layer-7 Immediate Protocol(s):
    Protocol: GOOGLE-GEN  / 943
Alias List:
    junos:GOOGLE-SSL
Application Specific Ports:
    Default ports: N/A
Signature:
    Port range: N/A
    Client-to-server
    Order: 1

    

show services application-identification application detail (Junos OS Release 20.2R1)

content_copy zoom_out_map
user@host> show services application-identification application detail 
Application Name: test
Application type: TEST
Description: N/A
Application ID: 16777221
Priority: high
Order: 65500
Disabled: No
Cacheable: No
Activation Date: N/A
Last Modified: N/A
Underlying consolidated Protocols/ports application is dependent on:
    Protocols:
        Protocol: junos:HTTP  / 67
        Protocol: junos:UDP   / 216
        Protocol: junos:TCP   / 205
        Protocol: junos:NET-PROXY / 2629
        Protocol: junos:SPDY  / 1469
        Protocol: junos:SSL   / 199
        Protocol: junos:LIBJINGLE-PSEUDOTCP / 3237
        Protocol: junos:STUN  / 201
        Protocol: junos:HTTPS / 68
        Protocol: junos:HTTP  / 67
        Protocol: junos:HTTP2 / 2553
        Protocol: junos:HTTP-TUNNEL / 750
        Protocol: junos:HTTP-PROXY / 2956
        Protocol: junos:HAPROXY / 3331
        Protocol: junos:COTP  / 22
    TCP Ports:
        Port: 80
        Port: 3128
        Port: 8000
        Port: 8080
Layer-7 Immediate Protocol(s):
    Protocol: HTTP        / 67
    Signature: fgnm
    Port range: N/A
    Member(s): 1
        Member m01
            Depth: 4 
            Context: http-get-url-parsed-param-parsed
            Pattern: ads
            Direction: CTS

Sample Output

show services application-identification application detail (Junos OS Release 20.3 R1)

content_copy zoom_out_map
user@host> show services application-identification application detail junos:PDF     
Application Name: junos:PDF                                                   
Application type: PDF                                                         
Description: This signature detects the download of PDF documents.
Application ID: 11046   
Priority: high    
Order: 0       
Disabled: No                 
Cacheable: Yes  
Configurable: No   
Activation Date: 1999-12-31      
Last Modified: 2019-12-31      
Application Tags:
    characteristic        : Known Vulnerabilities                             
    characteristic        : Carrier of Malware                                
    characteristic        : Bandwidth Consumer                                
    risk                  : 4                                                 
    subcategory           : Multimedia                                        
    category              : Web                                               
Layer-7 Immediate Protocol(s):
    Protocol: SPDY        / 1469       
    Protocol: HTTPS       / 68         
    Protocol: HTTP2       / 2553       
    Protocol: HTTP        / 67         
Application Specific Ports:
    Default ports: N/A
Signature:
    Port range: N/A
    Client-to-server
    Order: 3

show services application-identification application detail junos:DNS-ENCRYPTED

content_copy zoom_out_map
user@host> show services application-identification application detail junos:DNS-ENCRYPTED


Application Name: junos:DNS-ENCRYPTED                                         
Application type: DNS-ENCRYPTED                                               
Description: This application is used to represent DNS Queries over HTTPS (DoH) and DNS over Transport Layer Security (TLS)
Application ID: 33554507
Priority: high    
Order: 0       
Disabled: No                 
Cacheable: Yes  
Configurable: Yes  
Activation Date: N/A             
Last Modified: N/A             
Number of Parent Group(s): 1      
Application Groups:
    junos:unassigned                             
Application Tags:
    risk                  : 4                                                 
    subcategory           : Networking                                        
    category              : Infrastructure                                    
Underlying consolidated Protocols/ports application is dependent on:
    Protocols:
        Protocol: junos:SSL   / 199        
        Protocol: junos:TCP   / 205        
        Protocol: junos:SPDY  / 1469       
        Protocol: junos:LIBJINGLE-PSEUDOTCP / 3237       
        Protocol: junos:UDP   / 216        
        Protocol: junos:STUN  / 201        
        Protocol: junos:HTTP-PROXY / 2956       
        Protocol: junos:HTTPS / 68         
        Protocol: junos:HTTP  / 67         
        Protocol: junos:NET-PROXY / 2629       
        Protocol: junos:HTTP2 / 2553       
        Protocol: junos:HTTP-TUNNEL / 750        
        Protocol: junos:HAPROXY / 3331       
        Protocol: junos:COTP  / 22         
    TCP Ports:
        Port: 853         
        Port: 443         
Layer-7 Immediate Protocol(s):
    Protocol: SSL         / 199 

show services application-identification application detail junos:RLOGIN (Junos OS Release 21.1R1)

content_copy zoom_out_map
Application Name: junos:RLOGIN
Application type: RLOGIN
Description: This signature detects RLOGIN, a remote access protocol.
Application ID: 165
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: Yes
Activation Date: 2003-05-05
Last Modified: 2017-01-25
Number of Parent Group(s): 2
Application Groups:
    junos:all-new-apps
    junos:remote-access:command
Application Tags:
    group-tags            : new-app
    group-tags            : standardized
    group-tags            : remote_access
    group-tags            : enterprise
    characteristic        : Known Vulnerabilities
    risk                  : 1
    subcategory           : Command
    category              : Remote-Access

show services application-identification application detail junos:MXIT (Junos OS Release 21.1R1)

content_copy zoom_out_map
Application Name: junos:MXIT
Application type: MXIT
Description: This protocol plug-in is deprecated.
Application ID: 535
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: Yes
Activation Date: 2010-08-06
Last Modified: 2010-10-01
Number of Parent Group(s): 1
Application Groups:
junos:web:messaging:instant-messaging
Application Tags:
characteristic : Loss of Productivity
characteristic : Bandwidth Consumer
risk : 2
subcategory : Messaging
category : Web
attribute : Obsolete 
Alias List:
junos:MXIT-TCP
Application Specific Ports:
Default ports: N/A
Signature:
Port range: N/A
Client-to-server
Order: 3

Release Information

Command introduced in Junos OS Release 11.4.

Starting in Junos OS Release 15.1X49-D100, the options Cacheable, Activation Date, and Last modified are introduced for show services application-identification application detail command.

The Underlying consolidated Protocols/ports application is dependent on and Layer-7 Immediate Protocol(s) options are introduced in Junos OS Release 18.2R1.

footer-navigation