Prisma SD-WAN ION CLI Reference
    : inspect flow-detail
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma
    3. Prisma SD-WAN
    4. Prisma SD-WAN ION CLI Reference
    5. Use CLI Commands
    6. Inspect Commands
    7. inspect flow-detail
    Download PDF

    Prisma SD-WAN ION CLI Reference

    inspect flow-detail

    Table of Contents

    inspect flow-detail

    Use the
    inspect flow-detail
     command to inspect the details on active flows and to debug current flows matching the user-specified options. It displays existing flows and their path, and whether the path is in established or initialized state.

    Command

    inspect flow-detail (all | [prot-nm=( udp | tcp | icmp ) |prot-no=0-255] | srcv4=src-ipv4 | srcv6=src-ipv6 | srcport=src-port | dstv4=dst-ipv4 | dstv6=dst-ipv6 | dstport=dst-port )

    Options

    srcv4
    Enter the source IP address.
    dstv4
    Enter the destination IP address.
    srcv6
    Enter the source IP address.
    Release 6.2.1
    dstv6
    Enter the destination IP address.
    Release 6.2.1
    srcport
    Enter the source port.
    dstport
    Enter the destination port.
    prot-nm
    Tab to select UDP, TCP, or ICMP.
    prot-no
    Enter a protocol number ranging from 0 - 255.

    Command Notes

    Role
    Super, Read Only
    Related Commands
    —
    Introduced in
    Release 4.4.1

    Example

    inspect flow detail
SRC         	DST         	SPORT  	DPORT  	PROTOCOL   START-TIME       	APP-ID           	NET-POLICY            	PRI-POLICY            	SEC-POLICY       	SEC-ACTION         
      WANPATH-ID       	PATH                    
30.1.1.2    	10.1.1.2    	8      	0      	1      	2022-12-15 09:09:21  ping             	match icmp            	test default user     	allow any other user ALLOW              
      1665475784156002328  unknown_flow_path       
  TRAFFIC: xact    	PRIORITY: 3  DSCP: --  STATE: INIT      	IDLE: 20 	IFACE:          
  NET-POLICY:: NCTX-ID: none             	SPF-ID: none             	DPF-ID: none             	UG-INFO: 158622979242302240[CN=engineering,DC=sdwanamsteltest,DC=onmicrosoft,DC=com] 
  PRI-POLICY:: NCTX-ID: none             	SPF-ID: none             	DPF-ID: none             	UG-INFO: 1674636535551001928[sdwanamsteltest\edward@sdwanamsteltest.onmicrosoft.com]
  SEC-RULE-IDS: 1667810313551011228
    inspect flow detail dstv6=2103::13 srcv6=2201:100::2
SRC             DST             SPORT      DPORT      PROTOCOL   START-TIME           APP-ID               NET-POLICY                PRI-POLICY                SEC-POLICY           SEC-ACTION                WANPATH-ID           PATH
2201:100::2     2103::13        128        0          58         2023-03-30 10:20:56  ipv6-icmp-base       default                   default                   --                   N/A                       1670476802377011228  lan_to_l3_private_direct
  TRAFFIC: xact        PRIORITY: 3  DSCP: --  STATE: ESTABLISHED   IDLE: 20     IFACE: v-eth1
  NET-POLICY:: NCTX-ID: none                 SPF-ID: none                 DPF-ID: none                 UG-INFO: any
  PRI-POLICY:: NCTX-ID: none                 SPF-ID: none                 DPF-ID: none                 UG-INFO: any
  SEC-RULE-IDS: none

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.