Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


flow-detect-time (DDoS Flow Detection)


Hierarchy Level


(MX Series routers with only MPCs, T4000 Core Routers with only FPC5s, or EX9200 switches) Configure how much time must pass before a suspicious flow that has exceeded the bandwidth allowed for the packet type is confirmed to be a culprit flow.

Best Practice:

We recommend that you use the default value for the detection period.


seconds—Period of excessive bandwidth required for flow to be a culprit flow.

  • Range: 1 through 60 seconds

  • Default: 3 seconds

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.3.

Support for Enhanced Subscriber Management added in Junos OS Release 17.3R1.