show security flow gate source-port

Syntax

show security flow gate source-port source-port-number [brief | summary]

Release Information

Command introduced in Release 10.2 of Junos OS.

Description

Display information about temporary openings known as pinholes or gates in the security firewall for the specified source port.

Note: Source port filter matches the gate only if the given port falls within the range of ports specified in the gate.

Options

source-port-number

Number of the source port for which to display gate information.

Range: 1 through 65,535

brief | summary

Display the specified level of output.

Required Privilege Level

view

Related Topics

show security flow gate

show security flow gate source-prefix

List of Sample Output

show security flow gate source-port brief
show security flow gate source-port summary

Output Fields

Table 72 lists the output fields for the show security flow gate source-port command. Output fields are listed in the approximate order in which they appear.

Table 72: show security flow gate source-port Output Fields

Field Name

Field Description

Hole

Range of flows permitted by the pinhole.

Translated

Tuples used to create the session if it matches the pinhole.

  • Source address and port
  • Destination address and port

Protocol

Application protocol, such as UDP or TCP.

Application

Name of the application.

Age

Idle timeout for the pinhole.

Flags

Internal debug flags for the pinhole.

Zone

Incoming zone.

Reference count

Number of resource manager references to the pinhole.

Resource

Resource manager information about the pinhole.

Valid gates

Number of valid gates.

Pending gates

Number of pending gates.

Invalidated gates

Number of invalid gates.

Gates in other states

Number of gates in other states.

Total gates

Number of gates in total.

Sample Output

show security flow gate source-port brief

root> show security flow gate source-port 5004 brief
Flow Gates on FPC4 PIC1:

Hole: 30.0.0.111-30.0.0.111/5004-5004->40.0.0.100-40.0.0.100/2646-2646
  Translated: 0.0.0.0/0->0.0.0.0/0
  Protocol: udp
  Application: RTSP ALG/0
  Age: 28 seconds
  Flags: 0x0080
  Zone: untrust
  Reference count: 1
  Resource: 0-1050869761-1050869762

Valid gates: 1
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 1

Flow Gates on FPC5 PIC0:

Valid gates: 0
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 0

Flow Gates on FPC5 PIC1:                

Valid gates: 0
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 0

show security flow gate source-port summary

root> show security flow gate source-port 5004 summary
Flow Gates on FPC4 PIC1:

Valid gates: 1
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 1

Flow Gates on FPC5 PIC0:

Valid gates: 0
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 0

Flow Gates on FPC5 PIC1:                

Valid gates: 0
Pending gates: 0
Invalidated gates: 0
Gates in other states: 0
Total gates: 0