Technical Documentation

show services application-aware-access-list flows

Syntax

show services application-aware-access-list flows<interface interface-name><subscriber subscriber-name>

Release Information

Command introduced in Junos OS Release 10.1.

Description

Display application-aware-access-list (AACL) flows

Options

interface interface-name: Displays AACL flows for the specified interface(s) only. The keyword, interface, must be appended to the command.
subscriber subscriber-name: Displays AACL flows for the specified subscriber(s) only. The keyword, subscriber, must be appended to the command.

Required Privilege Level

view

List of Sample Output

show services application-aware-access-list flows by interface
show services application-aware-access-list flows by subscriber

Output Fields

Table 1 lists the output fields for the show services application-aware-access-list flows command. Output fields are listed in the approximate order in which they appear.

Table 1: show services application-aware-access-list flows Output Fields

Field Name	Field Description	Level of Output
5-tuple	This field comprises five components of the given flow. The components are: Src IP Dest IP Src Port Dest Port Protocol	All levels
Application-ID	The identification number associated with the application.	All levels
Dir	The direction in terms of input or output. Input (I) Output (O)	All levels
Off	The status of offload to Packet Forwarding Engine. The various options are: Not Offloaded (-) Policer Offloaded, Flow Not Offloaded (P) Policer Not Offloaded, Flow Offloaded (F) Policer and Offloaded (P+F)	All levels
Actions	The types of actions displayed are: discard: (D) accept : A accept, count [T]: C-A or C-G or C-T accept, fwd-class [C]: FC accept, policer [P]: P accept, count [T], fwd-class [C]: C-T+FC accept, count [T], policer [P]: C-T+P accept, fwd-class [C], policer [P]: FC+P accept, count[T],fwd-class[C],policer[P]: C-T+FC+P	All levels

Sample Output

show services application-aware-access-list flows by interface

user@host>show services application-aware-access-list
flows interface ge-1/3/1.1

Interface: ge-1/3/1.1

service-set: aacl-new
service-set interface: ms-2/0/0
Currently active flows: 2
High watermark flows: 2

5–tuple														Application—ID			Dir	Off	Action
100.3.1.101		—>		100.3.1.1		,1				unknown[32767]			I		-		C-A
100.3.1.1		—>		100.3.1.101		,1				unknown[32767]			I		-		C-A

show services application-aware-access-list flows by subscriber

user@host>show services application-aware-access-list
flows subscriber user@juniper.net

Subscriber: user@juniper.net

Service-set: ss1
Service-set interface: ms-2/0/0
Currently active flows: 4
High watermark flows: 40


5–tuple															Application-ID			Dir	Off	Action

150.100.100.100:20109->160.200.200.200:80,17		junos:http [64]		I		-		C-T+FC+P
160.200.200.200:80->150.100.100.100:20109,17		junos:http [64]		O		-		C-T+FC+P
150.100.100.100:20108->160.100.100.100:80,17		junos:http [64]		I		P+F	C-T+FC+P
160.100.100.100:80->150.100.100.100:20108,17		junos:http [64]		O		P+F	C-T+FC+P