Shulou(Shulou.com)06/01 Report--

Juniper ScreenOS Firewall looks at an IP or a Port or a

ScreenOS version:

ISG2000- > get system | in "Software Version"

Software Version: 5.4.0r6.0, Type: Firewall+ × × ×

IP/Port/Mac can be subdivided into source IP, destination IP, source Port, destination Port, source Mac, and destination Mac with the following commands:

ISG2000- > get session?

> redirect output

| | match output |

Dst-ip destination ip address

Dst-mac destination mac address

Dst-port destination port number or range

Hardware show hardware sessions only

Id show sessions with id

Ike-nat show ike-nat ALG info

Protocol protocol number or range

Rm show sessions for resource management

Service show sessions with service type

Src-ip source ip address

Src-mac source mac address

Src-port source port number or range

Tunnel show tunnel sessions

Vsd-id get vsd-id specified sessions

The following is the total number of sessions for which the source IP is 10.244.148.231:

ISG2000- > get session src-ip 10.244.148.231

Alloc 39986/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

Total reserved 0, free sessions in shared pool 484302

Slot 2: hw0 alloc 39884/max 1048575

Total 29340 sessions according filtering criteria.

Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2202, camera 0

If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35

If 64 (nspflag 800800): 10.244.150.49 get session dst-port 44295

Alloc 40045/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

Total reserved 0, free sessions in shared pool 484243

Slot 2: hw0 alloc 39942/max 1048575

Total 38375 sessions according filtering criteria.

Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2201, camera 0

If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35

If 64 (nspflag 800800): 10.244.150.49 Universe 44295 get session src-mac 00005e00010a

Alloc 39913/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

Total reserved 0, free sessions in shared pool 484375

Slot 2: hw0 alloc 39838/max 1048575

Total 39015 sessions according filtering criteria.

Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2142, camera 0

If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35

If 64 (nspflag 800800): 10.244.150.49 Universe 44295

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.