close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show services application-identification status

date_range 25-Sep-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
show services application-identification status

Description

Displays detailed information about application identification status.

Displays the application identification details on your security device. The output includes information such as status of application identification and application system cache on your device, application signature package details, download server, and so on.

Required Privilege Level

view

Output Fields

#show-services-application-identification-status__app-detail lists the output fields for the show services application-identification status command. Output fields are listed in the approximate order in which they appear.

show services application-identification status Output Fields

Field Name	Field Description
`Status`	Status of application identification: `Enabled` or `Disabled`.
`Sessions under app detection`	Sessions undergoing application identification detection.
`Engine Version`	Application identification detector engine version. This field displays `0` when there is no JDPI-Decoder engine installed or uninstalled, and displays the JDPI-Decoder engine version when it is installed.
`Max TCP session packet memory`	Maximum number of TCP sessions that application identification maintains.
`Force packet plugin`	Force packet plugin status: `Enabled` or `Disabled`.
`Force stream plugin`	Force stream plugin status: `Enabled` or `Disabled`.
`DPI Performance mode`	DPI performance mode status. This field is displayed only if the DPI performance mode is enabled.
`Statistics collection interval`	Frequency (in minutes) for collecting statistics.
`Status`	Status of application system cache: `Enabled` or `Disabled`.
`Negative cache status`	Status on the number of sessions that reach the Unknown cache entry: `Enabled` or `Disabled`.
`Max Number of entries in cache`	Maximum number of cache entries.
`Cache timeout`	Idle timeout after which the cache entries expires.
`Download Server CGI`	Name of the server from where protocol bundle was downloaded.
`Auto Update`	Status of auto update to receive protocol bundle updates from the server: `Enabled` or `Disabled`.
Release Date	Display release date of the application signature package.
`Status`	Status of protocol bundle: `Active` or `Free`.
Application Package Version	Version of the application signature package.
`Version` Or `PB Version`	Version of protocol bundle. Note: Starting from Junos OS Release 17.4R1, the field `PB Version` is used for displaying version of the protocol bundle.
`Proxy Profile`	Display the proxy profile name. If you have disabled proxy server for downloading application signature package, the `Proxy Profile` displays `Not Configured`.
`Proxy Address`	Display the IP address and the port number of the proxy server.
`Session`	The number of active sessions.
`Micro apps version`	The version of micro-applications.
`Session`	The number of active sessions.
`Rollback version details`	Rolled back version of the application signature package details such as application package version, protocol bundle version, application identification detector engine version, micro-applications version.
`Custom-App Infra Version`	Custom application infra version.

Starting from Junos OS Release 17.4R1, Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine, is packaged along with the application signature package version 534 that includes protobundle version 1.270.0.48.005. When you upgrade to Junos OS Release 17.4R1 or later from the earlier versions of Junos OS, the application identification security package installed is of version 534.

Starting in Junos OS Release 12.3X48-D80, on SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, SRX650, SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, and SRX5800 Series devices, the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine is separated from Junos OS and allows you to download the JDPI-Decoder engine along with the protobundle. This implementation allows you to upgrade the JDPI-Decoder engine separately without upgrading Junos OS.

However, if you require latest versions of the protocol bundle, you must download and install the application signature package separately.

Starting in Junos OS Release 19.2R1, Junos OS Release 15.1X49-D200, and Junos OS Release 12.3X48-D95, the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine comes with a default application signature package version 999 that includes the protobundle version 1.380.0-64.005 and the JDPI-Decoder engine version 5.3.0-56. You can upgrade the application signature package when a new signature package version is available.

Sample Output

show services application-identification status
show services application-identification status (Junos OS Release 19.2R1 and Later)
show services application-identification status (DPI Performance Mode Enabled)
show services application-identification status (Application Identification Detector Engine Version)
show services application-identification status (Download Through Proxy Server)
show services application-identification status (Logical Systems)
show services application-identification status (Micro-Applications)
show services application-identification status (Rollback Status)
show services application-identification status (Junos OS Release 20.1 or Later)
show services application-identification status (Junos OS Release 20.3R1 or Later)
show services application-identification status (Junos OS Release 24.4R1 and Later)