show services application-identification status
Syntax
show services application-identification status
Description
Displays detailed information about application identification status.
Required Privilege Level
view
Output Fields
#show-services-application-identification-status__app-detail lists the output fields for the show
services application-identification status command. Output fields
are listed in the approximate order in which they appear.
show services application-identification status Output Fields
Field Name |
Field Description |
|---|---|
|
Status of application identification: |
|
Sessions undergoing application identification detection. |
|
Application
identification detector engine version. This field displays |
|
Maximum number of TCP sessions that application identification maintains. |
|
Force packet
plugin status: |
|
Force stream
plugin status: |
|
DPI performance mode status. This field is displayed only if the DPI performance mode is enabled. |
|
Frequency (in minutes) for collecting statistics. |
|
Status of application system cache: |
|
Status on
the number of sessions that reach the Unknown cache entry: |
|
Maximum number of cache entries. |
|
Idle timeout after which the cache entries expires. |
|
Name of the server from where protocol bundle was downloaded. |
|
Status of auto update to receive protocol bundle updates
from the server: |
| Release Date | Display release date of the application signature package. |
|
Status of protocol bundle: |
Or
|
Version of protocol bundle. Note:
Starting from Junos OS Release 17.4R1, the field |
|
Display the proxy profile name. If you have disabled proxy server for downloading application
signature package, the |
|
Display the IP address and the port number of the proxy server. |
|
The number of active sessions. |
|
The version of micro-applications. |
|
The number of active sessions. |
|
Rolled back version of the application signature package details such as Application package version, protocol bundle version, application identification detector engine version, micro-applications version. |
| Custom-App Infra Version | Custom application infra version. |
Starting from Junos OS Release 17.4R1, Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine, is packaged along with the application signature package version 534 that includes protobundle version 1.270.0.48.005. When you upgrade to Junos OS Release 17.4R1 or later from the earlier versions of Junos OS, the application identification security package installed is of version 534.
Starting in Junos OS Release 12.3X48-D80, on SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, SRX650, SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, and SRX5800 Series devices, the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine is separated from Junos OS and allows you to download the JDPI-Decoder engine along with the protobundle. This implementation allows you to upgrade the JDPI-Decoder engine separately without upgrading Junos OS.
However, if you require latest versions of the protocol bundle, you must download and install the application signature package separately.
Starting in Junos OS Release 19.2R1, Junos OS Release 15.1X49-D200, and Junos OS Release 12.3X48-D95, the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) engine comes with a default application signature package version 999 that includes the protobundle version 1.380.0-64.005 and the JDPI-Decoder engine version 5.3.0-56. You can upgrade the application signature package when a new signature package version is available.
Sample Output
- show services application-identification status
- show services application-identification status (Junos OS Release 19.2R1 and Later)
show services application-identification status
user@host> show services application-identification status pic: 5/0 Application Identification Status Enabled Sessions under app detection 0 Engine Version 4.18.1-20 (build date Feb 15 2014) Max TCP session packet memory 30000 Force packet plugin Disabled Force stream plugin Disabled Statistics collection interval 1 (in minutes) Application System Cache Status Enabled Negative cache status Disabled Max Number of entries in cache 131072 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi AutoUpdate Disabled Slot 1: Status Active Version 1.30.4-22.005 (build date Jan 17 2014) Sessions 0 Slot 2 Status Free
show services application-identification status (Junos OS Release 19.2R1 and Later)
user@host> show services application-identification status Application Identification Status Enabled Sessions under app detection 0 Max TCP session packet memory 0 Force packet plugin Disabled Force stream plugin Disabled DPI Performance mode: Enabled Statistics collection interval 1440 (in minutes) Application System Cache Status Enabled Cache lookup security-services Enabled Cache lookup miscellaneous-services Enabled Max Number of entries in cache 0 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://devdb.secteam.juniper.net/cgi-bin/index.cgi AutoUpdate Disabled Proxy Details Proxy Profile Not Configured Slot 1: Application package version 50041 Status Active PB Version 1.380.0-64.005 (build date May 6 2019) Engine version 5.3.0-56 (build date Mar 6 2019) Micro-App Version 0 Sessions 0
Sample Output
show services application-identification status (DPI Performance Mode Enabled)
user@host> show services application-identification status pic: 2/1 Application Identification Status Enabled Sessions under app detection 0 Engine Version 4.18.2-24.006 (build date Jul 30 2014) Max TCP session packet memory 30000 Force packet plugin Disabled Force stream plugin Disabled DPI Performance mode: Enabled Statistics collection interval 1 (in minutes) Application System Cache Status Enabled Negative cache status Disabled Max Number of entries in cache 262144 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi AutoUpdate Disabled Slot 1: Application package version 2399 Status Active Version 1.40.0-26.006 (build date May 1 2014) Sessions 0 Slot 2 Application package version 0 Status Free Version Sessions 0
show services application-identification status (Application Identification Detector Engine Version)
command-name
Application Identification Status Enabled Sessions under app detection 0 Max TCP session packet memory 0 Force packet plugin Disabled Force stream plugin Disabled Statistics collection interval 1 (in minutes) Application System Cache Status Enabled Max Number of entries in cache 131072 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://indiavm-sigdb2.englab.juniper.net/cgi-bin/index.cgi AutoUpdate Disabled Slot 1: Application package version 534 Status Active PB Version 1.270.0-48.005 (build date May 22 2017) Engine version 4.20.0-49.005 (build date May 22 2017) Sessions 0
show services application-identification status (Download Through Proxy Server)
- command-name
- show services application-identification status (Logical Systems)
- show services application-identification status (Micro-Applications)
command-name
user@host> show services application-identification status
Application Identification
Status Enabled
Sessions under app detection 0
Max TCP session packet memory 0
Force packet plugin Disabled
Force stream plugin Disabled
DPI Performance mode: Enabled
Statistics collection interval 1440 (in minutes)
Application System Cache
Status Enabled
Cache lookup security-services Enabled
Cache lookup miscellaneous-services Enabled
Max Number of entries in cache 131072
Cache timeout 3600 (in seconds)
Protocol Bundle
Download Server https://signatures.juniper.net/cgi-bin/index.cgi
AutoUpdate Disabled
Proxy Details
Proxy Profile p1
Proxy Address http://5.0.0.1:3128
Slot 1:
Application package version 3058
Status Active
PB Version 1.340.0-57.005 (build date Apr 19 2018)
Engine version 4.20.0-91 (build date Feb 27 2018)
Sessions 0show services application-identification status (Logical Systems)
user@host> show services application-identification status
Application Identification
Status Enabled
Sessions under app detection 0
Max TCP session packet memory 0
Force packet plugin Disabled
Force stream plugin Disabled
DPI Performance mode: Enabled
Statistics collection interval 1440 (in minutes)
Application System Cache
Status Enabled
Cache lookup security-services Enabled
Cache lookup miscellaneous-services Enabled
Max Number of entries in cache 131072
Cache timeout 3600 (in seconds)
Protocol Bundle
Download Server https://signatures.juniper.net/cgi-bin/index.cgi
AutoUpdate Disabled
Proxy Details
Proxy Profile Not Configured
Slot 1:
Application package version 534
Status Active
PB Version 1.270.0-48.005 (build date May 22 2017)
Engine version 4.20.0-49.005 (build date May 22 2017)
Sessions 0show services application-identification status (Micro-Applications)
user@host> show services application-identification status
Application Identification
Status Enabled
Sessions under app detection 0
Max TCP session packet memory 0
Force packet plugin Disabled
Force stream plugin Disabled
Statistics collection interval 1440 (in minutes)
Application System Cache
Status Enabled
Cache lookup security-services Disabled
Cache lookup miscellaneous-services Disabled
Max Number of entries in cache 0
Cache timeout 3600 (in seconds)
Protocol Bundle
Download Server https://signatures.juniper.net/cgi-bin/index.cgi
AutoUpdate Disabled
Proxy Details
Proxy Profile Not Configured
Slot 1:
Application package version 3172
Status Active
PB Version 1.380.0-64.005 (build date May 13 2019)
Engine version 5.3.0-56 (build date May 13 2019)
Micro-App Version 1.0.0-0
Sessions 0
show services application-identification status
- show services application-identification status (Rollback Status)
- show services application-identification status (DNS-ENCRYPTED)
- show services application-identification status (DNS-ENCRYPTED)
- show services application-identification status (Junos OS Release 20.1 or Later)
- show services application-identification status (Junos OS Release 20.3R1 or Later)
show services application-identification status (Rollback Status)
user@host> show services application-identification status
pic: 0/1
Application Identification
Status Enabled
Sessions under app detection 0
Max TCP session packet memory 0
Force packet plugin Disabled
Force stream plugin Disabled
Statistics collection interval 1440 (in minutes)
Application System Cache
Status Disabled
Cache lookup security-services Disabled
Cache lookup miscellaneous-services Enabled
Max Number of entries in cache 262144
Cache timeout 3600 (in seconds)
Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi
AutoUpdate Disabled
Slot 1:
Application package version 3250
Status Active
PB Version 1.380.0-68.005 (build date Dec 9 2019)
Engine version 4.20.0-107 (build date Dec 9 2019)
Sessions 0
Slot 2:
Application package version 0
Status Free
PB Version N/A
Engine version 0
Sessions 0
Rollback version details
Application package version 3240
PB Version 1.380.0-65.005 (build date Jan 13 2020)
Engine version 5.3.0-56 (build date Jan 13 2020)
Micro-App Version 1.0.0-0show services application-identification status (DNS-ENCRYPTED)
user@host> show services application-identification status
Application Name: junos:DNS-ENCRYPTED
Application type: DNS-ENCRYPTED
Description: This application is used to represent DNS Queries over HTTPS (DoH) and DNS over Transport Layer Security (TLS)
Application ID: 33554507
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: Yes
Activation Date: N/A
Last Modified: N/A
Number of Parent Group(s): 1
Application Groups:
junos:unassigned
Application Tags:
risk : 4
subcategory : Networking
category : Infrastructure
Underlying consolidated Protocols/ports application is dependent on:
Protocols:
Protocol: junos:SSL / 199
Protocol: junos:TCP / 205
Protocol: junos:SPDY / 1469
Protocol: junos:LIBJINGLE-PSEUDOTCP / 3237
Protocol: junos:UDP / 216
Protocol: junos:STUN / 201
Protocol: junos:HTTP-PROXY / 2956
Protocol: junos:HTTPS / 68
Protocol: junos:HTTP / 67
Protocol: junos:NET-PROXY / 2629
Protocol: junos:HTTP2 / 2553
Protocol: junos:HTTP-TUNNEL / 750
Protocol: junos:HAPROXY / 3331
Protocol: junos:COTP / 22
TCP Ports:
Port: 853
Port: 443
Layer-7 Immediate Protocol(s):
Protocol: SSL / 199
show services application-identification status (DNS-ENCRYPTED)
Application Identification Status Enabled Sessions under app detection 0 Max TCP session packet memory 0 Force packet plugin Disabled Force stream plugin Disabled Statistics collection interval 1440 (in minutes) Application System Cache Status Enabled Cache lookup security-services Disabled Cache lookup miscellaneous-services Enabled Max Number of entries in cache 0 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi AutoUpdate Disabled Proxy Details Proxy Profile Not Configured Slot 1: Application package version 3345 Release date Tue Jan 12 14:55:57 2021 UTC Status Active PB Version 1.460.2-46 (build date Oct 11 2020) Engine version 5.3.0-61 (build date May 8 2020) Micro-App Version 1.1.0-0 Sessions 0 Rollback version details: Application package version 3345 PB Version 1.460.2-46 Engine version 5.3.0-61 Micro-App Version 1.1.0-0
show services application-identification status (Junos OS Release 20.1 or Later)
Application Identification Status Enabled Sessions under app detection 0 Max TCP session packet memory 2097152 Force packet plugin Disabled Force stream plugin Disabled Statistics collection interval 1440 (in minutes) Application System Cache Status Enabled Cache lookup security-services Disabled Cache lookup miscellaneous-services Enabled Max Number of entries in cache 131072 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi AutoUpdate Enabled Interval 24 (in hours) Proxy Details Proxy Profile Not Configured Slot 1: Application package version 3437 Release date Thu Nov 18 14:52:06 2021 UTC Status Active PB Version 1.530.2-40 (build date Sep 30 2021) Engine version 5.6.0-62 (build date Sep 30 2021) Micro-App Version 1.1.0-0 Sessions 0 Custom-App Infra Version 1.0.0-0
show services application-identification status (Junos OS Release 20.3R1 or Later)
Application Identification Status Enabled Sessions under app detection 0 Max TCP session packet memory 2097152 Force packet plugin Disabled Force stream plugin Disabled Statistics collection interval 1440 (in minutes) Application System Cache Status Enabled Cache lookup security-services Disabled Cache lookup miscellaneous-services Enabled Max Number of entries in cache 131072 Cache timeout 3600 (in seconds) Protocol Bundle Download Server https://signatures.juniper.net/cgi-bin/index.cgi AutoUpdate Enabled Interval 24 (in hours) Proxy Details Proxy Profile Not Configured Slot 1: Application package version 3437 Release date Thu Nov 18 14:52:06 2021 UTC Status Active PB Version 1.530.2-40 (build date Sep 30 2021) Engine version 5.6.0-62 (build date Sep 30 2021) Micro-App Version 1.1.0-0 Sessions 0 Custom-App Infra Version 1.0.0-0 Rollback version details: Application package version 3437 PB Version 1.530.2-40 Engine version 5.6.0-62 Micro-App Version 1.1.0-0 Custom-App Infra Version 1.0.0-0
Release Information
Command introduced in Junos OS Release 12.1X47-D10.
Command introduced in Junos OS Release 18.3R1 for logical systems.
Statement introduced in Junos OS Release 17.1 on MX Series.