show security flow session family

Syntax

show security flow session family (inet | inet6) [brief | extensive | summary]

Release Information

Command introduced in Release 10.2 of Junos OS.

Description

Display filtered summary of information about existing sessions, including types of sessions, active and failed sessions, and the maximum allowed number of sessions.

Options

inet—Display details summary of IPv4 sessions.

inet6—Display details summary of IPv6 sessions.

brief | extensive | summary

Display the specified level of output.

Required Privilege Level

view

Related Topics

clear security flow session family

List of Sample Output

show security flow session family inet
show security flow session family inet brief
show security flow session family inet extensive
show security flow session family inet summary

Output Fields

Table 81 lists the output fields for the show security flow session family command. Output fields are listed in the approximate order in which they appear.

Table 81: show security flow session family Output Fields

Field Name

Field Description

Session ID

Number that identifies the session. Use this ID to get more information about the session.

Policy name

Policy that permitted the traffic.

Timeout

Idle timeout after which the session expires.

In

Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).

Out

Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).

Total sessions

Total number of sessions.

Status

Session status.

Flag

Internal flag depicting the state of the session, used for debugging purposes.

Policy name

Name and ID of the policy that the first packet of the session matched.

Source NAT pool

The name of the source pool where NAT is used.

Application

Name of the application.

Maximum timeout

Maximum session timeout.

Current timeout

Remaining time for the session unless traffic exists in the session.

Session State

Session state.

Start time

Time when the session was created, offset from the system start time.

Unicast-sessions

Number of unicast sessions.

Multicast-sessions

Number of multicast sessions.

Failed-sessions

Number of failed sessions.

Sessions-in-use

Number of sessions in use.

  • Valid sessions
  • Pending sessions
  • Invalidated sessions
  • Sessions in other states

Maximum-sessions

Number of maximum sessions.

Sample Output

show security flow session family inet

root> show security flow session family inet
Flow Sessions on FPC4 PIC1:

Session ID: 170067516, Policy name: self-traffic-policy/1, Timeout: 4, Valid
  In: 40.0.0.100/23 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/23;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

Flow Sessions on FPC5 PIC0:

Session ID: 200066737, Policy name: self-traffic-policy/1, Timeout: 2, Valid
  In: 40.0.0.100/21 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/21;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

Flow Sessions on FPC5 PIC1:

Session ID: 210066726, Policy name: self-traffic-policy/1, Timeout: 2, Valid
  In: 40.0.0.100/22 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/22;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

show security flow session family inet brief

root> show security flow session family inet brief
Flow Sessions on FPC4 PIC1:

Session ID: 170067516, Policy name: self-traffic-policy/1, Timeout: 4, Valid
  In: 40.0.0.100/23 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/23;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

Flow Sessions on FPC5 PIC0:

Session ID: 200066737, Policy name: self-traffic-policy/1, Timeout: 2, Valid
  In: 40.0.0.100/21 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/21;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

Flow Sessions on FPC5 PIC1:

Session ID: 210066726, Policy name: self-traffic-policy/1, Timeout: 2, Valid
  In: 40.0.0.100/22 --> 40.0.0.1/26637;icmp, If: ge-0/0/2.0, Pkts: 1, Bytes: 84
  Out: 40.0.0.1/26637 --> 40.0.0.100/22;icmp, If: .local..0, Pkts: 1, Bytes: 84
Total sessions: 1

show security flow session family inet extensive

root> show security flow session family inet extensive
Flow Sessions on FPC4 PIC1:

Session ID: 170067527, Status: Normal
Flag: 0x80000040
Policy name: self-traffic-policy/1
Source NAT pool: Null
Maximum timeout: 4, Current timeout: 2
Session State: Valid
Start time: 667332, Duration: 1
   In: 40.0.0.100/56 --> 40.0.0.1/26637;icmp, 
    Interface: ge-0/0/2.0, 
    Session token: 0x180, Flag: 0x0x21
    Route: 0x60010, Gateway: 40.0.0.100, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 1, Bytes: 84
   Out: 40.0.0.1/26637 --> 40.0.0.100/56;icmp, 
    Interface: .local..0, 
    Session token: 0x80, Flag: 0x0x30
    Route: 0xfffb0006, Gateway: 40.0.0.1, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 1, Bytes: 84
Total sessions: 1                       

Flow Sessions on FPC5 PIC0:

Session ID: 200066749, Status: Normal
Flag: 0x80000040
Policy name: self-traffic-policy/1
Source NAT pool: Null
Maximum timeout: 4, Current timeout: 4
Session State: Valid
Start time: 667329, Duration: 1
   In: 40.0.0.100/57 --> 40.0.0.1/26637;icmp, 
    Interface: ge-0/0/2.0, 
    Session token: 0x180, Flag: 0x0x21
    Route: 0x60010, Gateway: 40.0.0.100, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 1, Bytes: 84
   Out: 40.0.0.1/26637 --> 40.0.0.100/57;icmp, 
    Interface: .local..0, 
    Session token: 0x80, Flag: 0x0x30
    Route: 0xfffb0006, Gateway: 40.0.0.1, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0,                       
    Pkts: 1, Bytes: 84
Total sessions: 1

Flow Sessions on FPC5 PIC1:

Session ID: 210066737, Status: Normal
Flag: 0x80000040
Policy name: self-traffic-policy/1
Source NAT pool: Null
Maximum timeout: 4, Current timeout: 2
Session State: Valid
Start time: 667326, Duration: 3
   In: 40.0.0.100/55 --> 40.0.0.1/26637;icmp, 
    Interface: ge-0/0/2.0, 
    Session token: 0x180, Flag: 0x0x21
    Route: 0x60010, Gateway: 40.0.0.100, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 1, Bytes: 84
   Out: 40.0.0.1/26637 --> 40.0.0.100/55;icmp, 
    Interface: .local..0, 
    Session token: 0x80, Flag: 0x0x30
    Route: 0xfffb0006, Gateway: 40.0.0.1, Tunnel: 0
    Port sequence: 0, FIN sequence: 0, 
    FIN state: 0, 
    Pkts: 1, Bytes: 84
Total sessions: 1

show security flow session family inet summary

root> show security flow session family inet summary
Flow Sessions on FPC4 PIC1:

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 0
Sessions in other states: 0
Total sessions: 1

Flow Sessions on FPC5 PIC0:

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 1
Sessions in other states: 0
Total sessions: 2

Flow Sessions on FPC5 PIC1:

Valid sessions: 1
Pending sessions: 0
Invalidated sessions: 1
Sessions in other states: 0
Total sessions: 2
Copyright© 1999-2010 Juniper Networks, Inc. All rights reserved.