Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show services flows

Syntax

Description

Display flow session table entries.

Options

none

Display standard information about all flows.

all | brief | extensive | terse

(Optional) Display the specified level of output.

application-protocol protocol

(Optional) Display information about one of the following application protocols:

  • bootp—Bootstrap protocol

  • dce-rpc—Distributed Computing Environment-Remote Procedure Call protocols

  • dce-rpc-portmap—Distributed Computing Environment-Remote Procedure Call protocols portmap service

  • dns—Domain Name System protocol

  • exec—Exec

  • ftp—File Transfer Protocol

  • h323—H.323 standards

  • icmp—Internet Control Message Protocol

  • iiop—Internet Inter-ORB Protocol

  • login—Login

  • netbios—NetBIOS

  • netshow—NetShow

  • pptp—Point-to-Point Tunneling Protocol

  • realaudio—RealAudio

  • rpc—Remote Procedure Call protocol

  • rpc-portmap—Remote Procedure Call protocol portmap service

  • rtsp—Real-Time Streaming Protocol

  • shell—Shell

  • sip—Session Initiation Protocol

  • snmp—Simple Network Management Protocol

  • sqlnet—SQLNet

  • talk—Talk Program

  • tftp—Trivial File Transfer Protocol

  • traceroute—Traceroute

  • winframe—WinFrame

Note:

The flows for the DCE RPC ALG match the flows for the DCE RPC Portmap ALG. The flows for the RPC ALG match the flows for the RPC Portmap ALG.

count

(Optional) Display a count of the matching entries.

destination-port destination-port

(Optional) Display information for the specified destination port. The range of values is from 0 to 65535.

destination-prefix destination-prefix

(Optional) Display information for the specified destination prefix.

interface interface-name

(Optional) Display information about the specified interface. On M Series and T Series routers, interface-name can be ms-fpc/pic/port or rspnumber.

limit number

(Optional) Maximum number of entries to display.

protocol protocol

(Optional) Display information about one of the following IP types:

  • number—Numeric protocol value from 0 to 255

  • ah—IPsec Authentication Header protocol

  • egp—An exterior gateway protocol

  • esp—IPsec Encapsulating Security Payload protocol

  • gre—A generic routing encapsulation protocol

  • icmp—Internet Control Message Protocol

  • icmp6—Internet Control Message Protocol version 6

  • igmp—Internet Group Management Protocol

  • ipip—IP-within-IP Encapsulation Protocol

  • ospf—Open Shortest Path First protocol

  • pim—Protocol Independent Multicast protocol

  • rsvp—Resource Reservation Protocol

  • sctp—Stream Control Transmission Protocol

  • tcp—Transmission Control Protocol

  • udp—User Datagram Protocol

service-set service-set

(Optional) Display information for the specified service set.

source-port source-port

(Optional) Display information for the specified source port. The range of values is from 0 to 65535.

source-prefix source-prefix

(Optional) Display information for the specified source prefix.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services flows command. Output fields are listed in the approximate order in which they appear.

Table 1: show services flows Output Fields

Field Name

Field Description

Level of Output

Interface

Name of the interface.

All levels

Service set

Name of a service set. Individual empty service sets are not displayed. If no service set has any flows, a flow table header is displayed for each service set.

All levels

Flow Count

Number of flows in a session.

count only

Flow or Flow Prot

Protocol used for this flow.

All levels

Source

Source prefix of the flow in the format source-prefix:port. For ICMP flows, port information is not displayed.

All levels

Dest

Destination prefix of the flow. For ICMP flows, port information is not displayed.

All levels

State

Status of the flow:

  • Drop—Drop all packets in the flow without response.

  • Forward—Forward the packet in the flow without looking at it.

  • Reject—Drop all packets in the flow with response.

  • Watch—Inspect packets in the flow.

All levels

Dir

Direction of the flow: input (I) or output (O).

All levels

Frm count

Number of frames in the flow.

All levels

Byte count

Number of bytes in the flow.

extensive

Flow role

Flow role.

extensive

Timeout

Timeout value.

extensive

Flow path

Flow path: symmetric or asymmetric.

extensive

Sample Output

show services flows

show services flows all

show services flows brief

The output for the show services flows brief command is identical to that for the show services flows command. For sample output, see show services flows.

show services flows extensive

show services flows application-protocol

show services flows count

show services flows destination-port

show services flows destination-prefix

show services flows interface

show services flows protocol

show services flows service-set

show services flows source-port

show services flows source-prefix

Release Information

Command introduced in Junos OS Release 9.5.

all option added in Junos OS Release 11.1.

application-protocol option added in Junos OS Release 11.1.