show services application-identification application
Syntax
show services application-identification application (detail | summary)
Description
Display detailed information about a specified application signature, detailed information about all application signatures, or a summary of the existing application signatures.
Options
| detail | Display detailed information for all application signatures. |
| summary | Display summary information for all application signatures. |
Required Privilege Level
view
Output Fields
Table 1 shows
the output details for the show services application-identification
application detail command.
Field Name |
Field Description |
|---|---|
|
The number of applications present. |
|
Name of the custom application. |
|
The status of the application and whether the mapping method is currently used to identify this application. |
|
The unique ID number of an application. ID numbers 1 through 32,767 are automatically generated for applications; these IDs do not change. ID numbers for custom applications use 16,777,216 to 33,554,431. |
|
Number used to specify priority when multiple applications match the traffic. The lowest order number takes the highest priority. |
show
services application-identification application Output Fields lists the
output fields for the show services application-identification
application command. Output fields are listed in the approximate order
in which they appear.
|
Field Name |
Field Description |
|---|---|
|
|
Name of the application. |
|
|
The basic application type, such as HTTP. |
|
|
A description of the application. |
|
|
The unique ID number of an application signature. ID numbers 1 through 32,767 are automatically generated for application; these IDs do not change. ID numbers for custom applications use 16,777,216 to 33,554,431. |
|
|
Priority over other signature applications. |
|
|
|
|
|
The status of the application and whether the mapping method is currently used to identify this application. |
|
|
The status whether the application identification results caching is enabled or not for the application. When this option is enabled, you can cache the application detection result in an ASC table. |
|
|
The status whether application is configurable or not. |
|
|
Date when the application was activated for the first time. |
|
|
Date when the application was last updated. |
|
|
Total number of parent groups in this application signature group or cluster. |
|
|
List of default protocols and ports for dependent applications of the specified application.
|
|
|
List of applications over which that dynamic application can be identified. |
|
|
The default port for this application type. |
|
|
Signature mapping criteria for application identification |
|
|
Application protocol |
|
|
Port range. This option is applicable for TCP or UDP-based applications only. |
|
|
Member name for a custom application signature.
|
|
Number of Parent Group |
Number of parents application groups. |
| Application Groups | Application groups names. |
| Application tags | Application tag groups created to group related applications based on the attributes. |
| group-tags | Name of the tag group |
|
characteristic |
characteristic of application |
| risk | Associated risk |
| subcategory | Subcategory of the application |
| category | Category of the application. |
| Attribute |
Attribute of the application. Shows application |
Sample Output
- show services application-identification application summary
- show services application-identification application detail
- show services application-identification application detail (Custom Applications)
show services application-identification application summary
user@host> show services application-identification application summary Application(s): 3616 Applications Disabled ID Order junos:SLACKER No 1179 1 junos:GOOGLE-TRUSTED-STORE No 2819 5 junos:AMJILT No 2272 4 junos:DSI No 2644 3 junos:HLN No 2096 2 junos:ETSI-LI No 537 1 junos:CRAZYSALOON No 1720 5 junos:EKSISOZLUK No 2436 4 junos:SABAH No 2574 3 junos:AFREECA No 2373 2 junos:SENEWEB No 2068 1 junos:DIINO No 776 5 junos:CARE2 No 376 4 junos:MOBAGE No 1456 3 junos:CARTOONNETWORK No 982 2 junos:AVATARS-UNITED No 363 1 junos:CONVIVA No 2015 5 junos:DREAMORA No 1725 4 junos:ELWATANNEWS No 2381 3 junos:REUTERS No 1044 2 junos:BABYCENTER No 364 1 junos:SOUTHWEST No 289 5 junos:ONEDIO No 2517 4 ........ ........
show services application-identification application detail
user@host> show services application-identification application detail junos:FTP
Application Name: junos:FTP
Application type: FTP
Description: This signature detects the File Transfer Protocol (FTP), which provides facilities for transferring files to and from remote computer systems. It usually runs on TCP port 21.
Application ID: 45
Priority: high
Order: 0
Disabled: Yes
Cacheable: Yes
Activation Date: 2003-05-05
Last Modified: 2016-04-11
Number of Parent Group(s): 1
Application Groups:
junos:infrastructure:file-servers
Application Tags:
characteristic : Supports File Transfer
characteristic : Known Vulnerabilities
characteristic : Capable of Tunneling
risk : 3
subcategory : File-Servers
category : Infrastructure
Layer-7 Protocol(s):
Protocol: TCP / 205
Protocol: SPDY / 1469
Protocol: SOCKS5 / 193
Protocol: SOCKS4 / 192
Protocol: HTTPS / 68
Protocol: HTTP2 / 2553
Protocol: HTTP / 67
Port Mapping:
Default ports: TCP/21
show services application-identification application detail (Custom Applications)
user@host> show services application-identification application detail my-custom-app
Application Name: my-custom-app
Application type: MY-CUSTOM-APP
Description: custom App
Application ID: 16777216
Priority: high
Order: 65500
Disabled: No
Cacheable: No
Activation Date: N/A
Last Modified: N/A
Layer-7 Protocol(s):
Protocol: http / http
Port range: N/A
Member(s): 1
Member m01
Context: http-header-host
Pattern: MY-SERVER.COM
Direction: CTS
Sample Output
- show services application-identification application detail (Unified Policies)
- show services application-identification application detail (Junos OS Release 20.2R1)
show services application-identification application detail (Unified Policies)
user@host> show services application-identification application detail
Application Name: junos:GOOGLE
Application type: GOOGLE
Description: This signature detects SSL connections to Google.com. Google is a
company best known for their search engine but offers many cloud
based services.
Application ID: 54
Priority: high
Order: 0
Disabled: No
Cacheable: No
Activation Date: 2003-05-05
Last Modified: 2017-06-28
Number of Parent Group(s): 2
Application Groups:
junos:web:applications
junos:web:portal
Application Tags:
characteristic : Can Leak Information
characteristic : Loss of Productivity
characteristic : Supports File Transfer
risk : 3
subcategory : Applications
category : Web
Underlying consolidated Protocols/ports application is dependent on:
Protocols:
Protocol: junos:GOOGLE-GEN / 943
Protocol: junos:STUN / 201
Protocol: junos:UDP / 216
Protocol: junos:TCP / 205
Protocol: junos:HTTP-PROXY / 2956
Protocol: junos:SSL / 199
Protocol: junos:SPDY / 1469
Protocol: junos:POSTGRESQL / 150
Protocol: junos:HTTPS / 68
Protocol: junos:HTTP / 67
Protocol: junos:NET-PROXY / 2629
Protocol: junos:HTTP2 / 2553
Protocol: junos:HTTP-TUNNEL / 750
Protocol: junos:COTP / 22
Protocol: junos:RTSP / 176
Protocol: junos:RTP / 175
Protocol: junos:DTLS / 1291
Protocol: junos:RTMP / 337
Protocol: junos:QUIC / 2521
Protocol: junos:JABBER / 94
TCP Ports:
Port: 443
Port: 554
Port: 80
UDP Ports:
Port: 554
Layer-7 Immediate Protocol(s):
Protocol: GOOGLE-GEN / 943
Alias List:
junos:GOOGLE-SSL
Application Specific Ports:
Default ports: N/A
Signature:
Port range: N/A
Client-to-server
Order: 1
show services application-identification application detail (Junos OS Release 20.2R1)
user@host> show services application-identification application detail
Application Name: test
Application type: TEST
Description: N/A
Application ID: 16777221
Priority: high
Order: 65500
Disabled: No
Cacheable: No
Activation Date: N/A
Last Modified: N/A
Underlying consolidated Protocols/ports application is dependent on:
Protocols:
Protocol: junos:HTTP / 67
Protocol: junos:UDP / 216
Protocol: junos:TCP / 205
Protocol: junos:NET-PROXY / 2629
Protocol: junos:SPDY / 1469
Protocol: junos:SSL / 199
Protocol: junos:LIBJINGLE-PSEUDOTCP / 3237
Protocol: junos:STUN / 201
Protocol: junos:HTTPS / 68
Protocol: junos:HTTP / 67
Protocol: junos:HTTP2 / 2553
Protocol: junos:HTTP-TUNNEL / 750
Protocol: junos:HTTP-PROXY / 2956
Protocol: junos:HAPROXY / 3331
Protocol: junos:COTP / 22
TCP Ports:
Port: 80
Port: 3128
Port: 8000
Port: 8080
Layer-7 Immediate Protocol(s):
Protocol: HTTP / 67
Signature: fgnm
Port range: N/A
Member(s): 1
Member m01
Depth: 4
Context: http-get-url-parsed-param-parsed
Pattern: ads
Direction: CTS
Sample Output
- show services application-identification application detail (Junos OS Release 20.3 R1)
- show services application-identification application detail junos:DNS-ENCRYPTED
- show services application-identification application detail junos:RLOGIN (Junos OS Release 21.1R1)
- show services application-identification application detail junos:MXIT (Junos OS Release 21.1R1)
show services application-identification application detail (Junos OS Release 20.3 R1)
user@host> show services application-identification application detail junos:PDF
Application Name: junos:PDF
Application type: PDF
Description: This signature detects the download of PDF documents.
Application ID: 11046
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: No
Activation Date: 1999-12-31
Last Modified: 2019-12-31
Application Tags:
characteristic : Known Vulnerabilities
characteristic : Carrier of Malware
characteristic : Bandwidth Consumer
risk : 4
subcategory : Multimedia
category : Web
Layer-7 Immediate Protocol(s):
Protocol: SPDY / 1469
Protocol: HTTPS / 68
Protocol: HTTP2 / 2553
Protocol: HTTP / 67
Application Specific Ports:
Default ports: N/A
Signature:
Port range: N/A
Client-to-server
Order: 3show services application-identification application detail junos:DNS-ENCRYPTED
user@host> show services application-identification application detail junos:DNS-ENCRYPTED
Application Name: junos:DNS-ENCRYPTED
Application type: DNS-ENCRYPTED
Description: This application is used to represent DNS Queries over HTTPS (DoH) and DNS over Transport Layer Security (TLS)
Application ID: 33554507
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: Yes
Activation Date: N/A
Last Modified: N/A
Number of Parent Group(s): 1
Application Groups:
junos:unassigned
Application Tags:
risk : 4
subcategory : Networking
category : Infrastructure
Underlying consolidated Protocols/ports application is dependent on:
Protocols:
Protocol: junos:SSL / 199
Protocol: junos:TCP / 205
Protocol: junos:SPDY / 1469
Protocol: junos:LIBJINGLE-PSEUDOTCP / 3237
Protocol: junos:UDP / 216
Protocol: junos:STUN / 201
Protocol: junos:HTTP-PROXY / 2956
Protocol: junos:HTTPS / 68
Protocol: junos:HTTP / 67
Protocol: junos:NET-PROXY / 2629
Protocol: junos:HTTP2 / 2553
Protocol: junos:HTTP-TUNNEL / 750
Protocol: junos:HAPROXY / 3331
Protocol: junos:COTP / 22
TCP Ports:
Port: 853
Port: 443
Layer-7 Immediate Protocol(s):
Protocol: SSL / 199
show services application-identification application detail junos:RLOGIN (Junos OS Release 21.1R1)
Application Name: junos:RLOGIN
Application type: RLOGIN
Description: This signature detects RLOGIN, a remote access protocol.
Application ID: 165
Priority: high
Order: 0
Disabled: No
Cacheable: Yes
Configurable: Yes
Activation Date: 2003-05-05
Last Modified: 2017-01-25
Number of Parent Group(s): 2
Application Groups:
junos:all-new-apps
junos:remote-access:command
Application Tags:
group-tags : new-app
group-tags : standardized
group-tags : remote_access
group-tags : enterprise
characteristic : Known Vulnerabilities
risk : 1
subcategory : Command
category : Remote-Accessshow services application-identification application detail junos:MXIT (Junos OS Release 21.1R1)
Application Name: junos:MXIT Application type: MXIT Description: This protocol plug-in is deprecated. Application ID: 535 Priority: high Order: 0 Disabled: No Cacheable: Yes Configurable: Yes Activation Date: 2010-08-06 Last Modified: 2010-10-01 Number of Parent Group(s): 1 Application Groups: junos:web:messaging:instant-messaging Application Tags: characteristic : Loss of Productivity characteristic : Bandwidth Consumer risk : 2 subcategory : Messaging category : Web attribute : Obsolete Alias List: junos:MXIT-TCP Application Specific Ports: Default ports: N/A Signature: Port range: N/A Client-to-server Order: 3
Release Information
Command introduced in Junos OS Release 11.4.
Starting in Junos OS Release 15.1X49-D100, the
options Cacheable, Activation Date, and Last modified are introduced for show services application-identification
application detail command.
The Underlying consolidated Protocols/ports
application is dependent on and Layer-7 Immediate Protocol(s) options are introduced in Junos OS Release 18.2R1.