Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show security flow session destination-prefix

Syntax

Description

Display information about each session that matches the specified IP destination prefix.

Options

  • destination-IP-prefix—Destination IP prefix or address for which to display session information.

  • brief | extensive | summary–Display the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security flow session destination-prefix command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session destination-prefix Output Fields

Field Name

Field Description

Session ID

Number that identifies the session. You can use this ID to get additional information about the session.

Policy name

Policy that permitted the traffic.

HA State

High Availability state of the session (Active or Warm).

Timeout

Idle timeout after which the session expires.

In

Incoming flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).

Out

Reverse flow (source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets and bytes).

Total sessions

Total number of sessions.

Status

Session status.

Flag

Internal flag depicting the state of the session, used for debugging purposes.

Policy name

Name and ID of the policy that the first packet of the session matched.

Source NAT pool

The name of the source pool where NAT is used.

Application

Name of the application.

Maximum timeout

Maximum session timeout.

Current timeout

Remaining time for the session unless traffic exists in the session.

Session State

Session state.

Start time

Time when the session was created, offset from the system start time.

Unicast-sessions

Number of unicast sessions.

Multicast-sessions

Number of multicast sessions.

Failed-sessions

Number of failed sessions.

Sessions-in-use

Number of sessions in use.

  • Valid sessions

  • Pending sessions

  • Invalidated sessions

  • Sessions in other states

Maximum-sessions

Number of maximum sessions.

Sample Output

show security flow session destination-prefix 198.51.100.1/24

show security flow session destination-prefix 198.51.100.1/24 brief

show security flow session destination-prefix 198.51.100.1/24 extensive

show security flow session destination-prefix 198.51.100.1/24 summary

show security flow session destination-prefix 2001:db8::/32

For Multinode High Availability Scenario:

show security flow session destination-prefix

Backup Node

Active Node

Release Information

Command introduced in Junos OS Release 8.5. Support.

Support for IPv6 addresses added in Junos OS Release 10.2.

Filter and view options added in Junos OS Release 10.2.