show security flow session destination-prefix

Syntax

show security flow session destination-prefix destination-IP-prefix [brief | extensive | summary]

Release Information

Command introduced in Release 8.5 of Junos OS.

Support for IPv6 addresses added in Release 10.2 of Junos OS.

Filter and view options added in Release 10.2 of Junos OS.

Description

Display information about each session that matches the specified IP destination prefix.

Options

destination-IP-prefix—Destination IP prefix or address for which to display session information.

brief | extensive | summary: Display the specified level of output.

Required Privilege Level

view

List of Sample Output

show security flow session destination-prefix 30/8
show security flow session destination-prefix 30/8 brief
show security flow session destination-prefix 30/8 extensive
show security flow session destination-prefix 30/8 summary
show security flow session destination-prefix 10::10

Output Fields

Table 79 lists the output fields for the show security flow session destination-prefix command. Output fields are listed in the approximate order in which they appear.

Table 79: show security flow session destination-prefix Output Fields

Field Name	Field Description
Session ID	Number that identifies the session. You can use this ID to get additional information about the session.
Policy name	Policy that permitted the traffic.
Timeout	Idle timeout after which the session expires.
In	Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
Out	Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).
Total sessions	Total number of sessions.
Status	Session status.
Flag	Internal flag depicting the state of the session, used for debugging purposes.
Policy name	Name and ID of the policy that the first packet of the session matched.
Source NAT pool	The name of the source pool where NAT is used.
Application	Name of the application.
Maximum timeout	Maximum session timeout.
Current timeout	Remaining time for the session unless traffic exists in the session.
Session State	Session state.
Start time	Time when the session was created, offset from the system start time.
Unicast-sessions	Number of unicast sessions.
Multicast-sessions	Number of multicast sessions.
Failed-sessions	Number of failed sessions.
Sessions-in-use	Number of sessions in use. Valid sessions Pending sessions Invalidated sessions Sessions in other states
Maximum-sessions	Number of maximum sessions.

Sample Output

show security flow session destination-prefix 30/8

root> show security flow session destination-prefix
30/8

Flow Sessions on FPC4 PIC1:

Session ID: 170068346, Policy name: default-policy/2, Timeout: 1792, Valid
  In: 40.0.0.100/32782 --> 30.0.0.100/23;tcp, If: ge-0/0/2.0, Pkts: 11, Bytes: 662
  Out: 30.0.0.100/23 --> 40.0.0.100/32782;tcp, If: ge-0/0/1.0, Pkts: 11, Bytes: 708
Total sessions: 1

Flow Sessions on FPC5 PIC0:
Total sessions: 0

Flow Sessions on FPC5 PIC1:
Total sessions: 0

show security flow session destination-prefix 30/8 brief

root> show security flow session destination-prefix
30/8 brief

Flow Sessions on FPC4 PIC1:

Session ID: 170068346, Policy name: default-policy/2, Timeout: 1792, Valid
  In: 40.0.0.100/32782 --> 30.0.0.100/23;tcp, If: ge-0/0/2.0, Pkts: 11, Bytes: 662
  Out: 30.0.0.100/23 --> 40.0.0.100/32782;tcp, If: ge-0/0/1.0, Pkts: 11, Bytes: 708
Total sessions: 1

Flow Sessions on FPC5 PIC0:
Total sessions: 0

Flow Sessions on FPC5 PIC1:
Total sessions: 0

show security flow session destination-prefix 30/8 extensive

root> show security flow session destination-prefix
30/8 extensive

Flow Sessions on FPC4 PIC1:

Session ID: 170068346, Status: Normal
Flag: 0x40
Policy name: default-policy/2
Source NAT pool: Null, Application: junos-telnet/10
Maximum timeout: 1800, Current timeout: 1780
Session State: Valid
Start time: 670272, Duration: 40
   In: 40.0.0.100/32782 --> 30.0.0.100/23;tcp, 
    Interface: ge-0/0/2.0, 
    Session token: 0x180, Flag: 0x0x21
    Route: 0x60010, Gateway: 40.0.0.100, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 11, Bytes: 662
   Out: 30.0.0.100/23 --> 40.0.0.100/32782;tcp, 
    Interface: ge-0/0/1.0, 
    Session token: 0x1c0, Flag: 0x0x20
    Route: 0x70010, Gateway: 30.0.0.100, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 11, Bytes: 708
Total sessions: 1                       

Flow Sessions on FPC5 PIC0:
Total sessions: 0

Flow Sessions on FPC5 PIC1:
Total sessions: 0

show security flow session destination-prefix 30/8 summary

root> show security flow session destination-prefix
30/8 summary

Flow Sessions on FPC4 PIC1:

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 1

Flow Sessions on FPC5 PIC0:

Valid sessions: 0
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 0

Flow Sessions on FPC5 PIC1:

Valid sessions: 0
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 0

show security flow session destination-prefix 10::10

user@host> show
security flow session destination-prefix 10::10

Session ID: 50000004, Policy name: self-traffic-policy/1, Timeout: 2
In: 10::11/42756 --> 10::10/0;icmp, If: .local..0
Out: 10::10/0 --> 10::11/42756;icmp, If: ge-0/3/0.0

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 1