【正文】 432 6: 10153 7: 10362 8: 10078 9: 10394 10: 10134 11: 1047212: 10219 13: 10530 14: 10279 15: 10450 16: 10134 17: 1034718: 10066 19: 10312 20: 10093 21: 10400 22: 10137 23: 1038424: 10147 25: 10456 26: 10193 27: 10437 28: 10184 29: 1050730: 10265 31: 10570 32: 10314 33: 10694 34: 10467 35: 1065936: 10407 37: 10618 38: 10315 39: 10519 40: 10293 41: 1056142: 10285 43: 10555 44: 10300 45: 10540 46: 10256 47: 1057348: 10296 49: 10496 50: 10234 51: 10447 52: 10169 53: 1036454: 10115 55: 10406 56: 10140 57: 10385 58: 10155 59: 10445fpc 8 pic 0Last 60 seconds: 0: 21893 1: 21280 2: 21813 3: 21250 4: 21759 5: 21230 6: 21668 7: 21122 8: 21685 9: 21176 10: 21775 11: 2125412: 21735 13: 21272 14: 21791 15: 21155 16: 21508 17: 2093318: 21439 19: 20944 20: 21514 21: 21026 22: 21461 23: 2097024: 21540 25: 21045 26: 21494 27: 20991 28: 21684 29: 2122330: 21909 31: 21367 32: 22025 33: 21539 34: 22163 35: 2148036: 21933 37: 21282 38: 21790 39: 21194 40: 21827 41: 2131142: 21793 43: 21264 44: 21860 45: 21300 46: 21830 47: 2129248: 21762 49: 21222 50: 21607 51: 21063 52: 21449 53: 2089954: 21527 55: 21041 56: 21509 57: 21017 58: 21527 59: 21033{primary:node0} 查看防火墻所有會(huì)話條目（1）ScreenOS在CLI下命令為：get session示例：JP1000A get sessionalloc 2976/max 524288, alloc failed 0, mcast alloc 0, di alloc failed 0total reserved 0, free sessions in shared pool 521312slot 2: hw0 alloc 2976/max 524287 id 482707/s0*,vsys 0,flag 10200400/4000/0003,policy 20036,time 1302, dip 36 module 0 if 130(nspflag 0805):,6,000000000000,sess token 4,vlan 32,tun 0,vsd 0,route 17,wsf 0 if 128(nspflag 10000800):,6,000000000000,sess token 3,vlan 0,tun 0,vsd 0,route 29,wsf 0id 482709/s0*,vsys 0,flag 10200400/4000/0003,policy 20040,time 1419, dip 36 module 0 if 130(nspflag 0805):,6,000000000000,sess token 4,vlan 32,tun 0,vsd 0,route 17,wsf 0 if 128(nspflag 10000800):,6,000000000000,sess token 3,vlan 0,tun 0,vsd 0,route 29,wsf 0（2）JunOS在CLI 操作模式下命令為：show security flow session示例：syro@JP650A show security flow session Session ID: 15176, Policy name: selftrafficpolicy/1, Timeout: 60, Valid In: 。udp, If: .local..0, Pkts: 2668507, Bytes: 659764260 Out: 。udp, If: , Pkts: 0, Bytes: 0Session ID: 15264, Policy name: selftrafficpolicy/1, Timeout: 60, Valid In: 。udp, If: .local..0, Pkts: 2769763, Bytes: 668172183 Out: 。udp, If: , Pkts: 0, Bytes: 0Session ID: 15267, Policy name: selftrafficpolicy/1, Timeout: 60, Valid In: 。udp, If: .local..0, Pkts: 2668508, Bytes: 659764488 Out: 。udp, If: , Pkts: 0, Bytes: 0 按過(guò)濾條件查看會(huì)話（1）ScreenOS在CLI下使用get session命令可以按過(guò)濾條件查看會(huì)話，有以下命令選項(xiàng)：命令幫助：JP1000A get session redirect output| match outputreturndstip destination ip addressdstmac destination mac addressdstport destination port number or rangehardware show hardware sessions onlyid show sessions with idikenat show ikenat ALG infopolicyid policy idprotocol protocol number or rangerm show sessions for resource managementservice show sessions with service typesrcip source ip addresssrcmac source mac addresssrcport source port number or rangetunnel show tunnel sessionsvsdid get vsdid specified sessions示例：JP1000A get session srcip alloc 1366/max 524288, alloc failed 0, mcast alloc 0, di alloc failed 0total reserved 0, free sessions in shared pool 522922slot 2: hw0 alloc 1363/max 524287 Total 448 sessions according filtering criteria.id 517142/s0*,vsys 0,flag 00200450/0000/0081,policy 20026,time 0, dip 0 module 0 if 46(nspflag 800901):,6,00000c07ac21,sess token 4,vlan 0,tun 0,vsd 0,route 8,wsf 0 if 45(nspflag 800900):,6,00000c07ac5f,sess token 3,vlan 0,tun 0,vsd 0,route 6,wsf 0id 517222/s0*,vsys 0,flag 00200440/0000/0003,policy 20028,time 2, dip 0 module 0（2）JunOS在CLI 操作模式下使用show security flow session命令可以按過(guò)濾條件查看會(huì)話，有以下命令選項(xiàng)：syro@JP650A show security flow session Possible pletions: [Enter] Execute this mand application Application protocol name brief Show brief output (default) destinationport Destination port (1..65535) destinationprefix Destination IP prefix or address extensive Show detailed output family Show session by family idp Show idp sessions interface Name of ining or outgoing interface nat Show sessions with network address translation protocol IP protocol number resourcemanager Show sessions with resource manager sessionidentifier Show session with specified session identifier sourceport Source port (1..65535) sourceprefix Source IP prefix or address summary Show output summary tunnel Show tunnel sessions | Pipe through a mand示例：syro@JP650A show security flow session sourceprefix Session ID: 168247, Policy name: selftrafficpolicy/1, Timeout: 1800, Valid In: 。tcp, If: , Pkts: 512, Bytes: 40342 Out: 。tcp, If: .local..0, Pkts: 352, Bytes: 43885Total sessions: 1 查看會(huì)話詳細(xì)內(nèi)容（1）ScreenOSScreenOS防火墻按session id查看會(huì)話詳細(xì)信息。在CLI下命令為：get session id id數(shù)值示例：JP1000A get session id 490591id 490591(00077c5f), flag 10200400/4000/0003, vsys id 0(Root)policy id 20113, application id 0, dip