show security flow session policy-id
Syntax
show security flow session policy-id policy-id-number[brief | extensive | summary]
Description
Display information about each session by using policy id of the session.
Options
policy-id-number—ID of the policy that the first packet of the session matches with.Range: 1through 4294967295
brief | extensive | summary–Display the specified level of output.
Required Privilege Level
view
Output Fields
Table 1 lists the
output fields for the show security flow session policy-id command. Output fields are listed in the approximate order in which
they appear.
Field Name |
Field Description |
|---|---|
|
Number that identifies the session. You can use this ID to get additional information about the session. |
|
Policy that permitted the traffic. |
|
Idle timeout after which the session expires. |
|
For the input flow:
|
|
For the reverse flow:
|
|
Total number of sessions. |
|
Session status. |
|
Internal flag depicting the state of the session, used for debugging purposes. |
|
Name and ID of the policy that the first packet of the session matched. |
|
The name of the source pool where NAT is used. |
|
Name of the application. |
|
Maximum session timeout. |
|
Remaining time for the session unless traffic exists in the session. |
|
Session state. |
|
Time when the session was created, offset from the system start time. |
Sample Output
show security flow session policy-id 4
root> show security flow session policy-id 4 Flow Sessions on FPC1 PIC0: Session ID: 20093273, Policy name: p1/4, Timeout: 1784, Valid In: 101.0.0.2/1 --> 111.0.0.3/1;0, If: ge-0/0/0.0, Pkts: 1, Bytes: 84 Out: 111.0.0.3/1 --> 201.0.0.1/22643;0, If: ge-0/0/1.0, Pkts: 0, Bytes: 0 Total sessions: 1
show security flow session policy-id 4 extensive
root> show security flow session policy-id 4 extensive
Flow Sessions on FPC10 PIC1:
Total sessions: 0
Flow Sessions on FPC10 PIC2:
Session ID: 420000428, Status: Normal
Flags: 0x0/0x0/0x2008003
Policy name: p1/4
Source NAT pool: interface, Application: junos-telnet/10
Dynamic application: junos:UNKNOWN,
Encryption: Unknown
Application traffic control rule-set: INVALID, Rule: INVALID
Maximum timeout: 1800, Current timeout: 1740
Session State: Valid
Start time: 152305, Duration: 64
In: 200.0.0.10/15192 --> 60.0.0.2/23;tcp,
Interface: ge-7/1/0.0,
Session token: 0x6, Flag: 0xc0001021
Route: 0x70010, Gateway: 200.0.0.10, Tunnel: 0
Port sequence: 0, FIN sequence: 0,
FIN state: 0,
Pkts: 40, Bytes: 2251
CP Session ID: 420001128
Out: 60.0.0.2/23 --> 60.0.0.1/8078;tcp,
Interface: ge-7/1/1.0,
Session token: 0x7, Flag: 0xe0001020
Route: 0x80010, Gateway: 60.0.0.2, Tunnel: 0
Port sequence: 0, FIN sequence: 0,
FIN state: 0,
Pkts: 28, Bytes: 1714
CP Session ID: 430000965
Total sessions: 1
Flow Sessions on FPC10 PIC3:
Total sessions: 0
Release Information
Command introduced in Junos OS Release 12.3X48-D10.