>
    Strata Copilot
    inspect flow detail
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Use CLI Commands
    4. Inspect Commands
    5. inspect flow detail
    Download PDF
    Prisma SD-WAN

    inspect flow detail

    Table of Contents

    inspect flow detail

    Use the inspect flow detail command to inspect the details on active flows and to debug current flows matching the user-specified options. It displays existing flows and their path, and whether the path is in established or initialized state.

    Command

    inspect flow detail (all | [prot-nm=( udp | tcp | icmp ) |prot-no=0-255] | srcv4=src-ipv4 | srcv6=src-ipv6 | srcport=src-port | dstv4=dst-ipv4 | dstv6=dst-ipv6 | dstport=dst-port )

    Options

    srcv4Enter the source IP address.
    dstv4Enter the destination IP address.
    srcv6Enter the source IP address. Release 6.2.1
    dstv6Enter the destination IP address. Release 6.2.1
    srcportEnter the source port.
    dstportEnter the destination port.
    prot-nmTab to select UDP, TCP, or ICMP.
    prot-noEnter a protocol number ranging from 0 - 255.

    Command Notes

    RoleSuper, Read Only
    Related Commands—
    Introduced in Release 4.4.1

    Example

    inspect  flow detail 
VRF     SRC            DST             SPORT   DPORT  PROTOCOL   START-TIME           APP-ID      NET-POLICY          PRI-POLICY                SEC-POLICY           SEC-ACTION                WANPATH-ID           PATH                     
yellow  192.168.7.100  192.168.20.100  8        0     1          2023-10-10 04:22:57  unknown     enterprise-default  1696395771321023828    lan_to_public_vpn        
  TRAFFIC: xact        
  PRIORITY: 2  
  DSCP: --  
  STATE: ESTABLISHED   
  IDLE: 20     
  IFACE: v-eth6     
  RX_VRF: yellow (965)   
  FWD_VRF: yellow (965)   
  LEAK_VRF: Global (0)
  NET-POLICY:: NCTX-ID: none                 
  SPF-ID: none                 
  DPF-ID: 1681410079845017228  
  UG-INFO: any                  
  PRI-POLICY:: NCTX-ID: none                
  SPF-ID: none                 
  DPF-ID: 1681410079905017328  
  UG-INFO: any                  
  SEC-RULE-IDS: none

    inspect flow detail
SRC         	DST         	SPORT  	DPORT  	PROTOCOL   START-TIME       	APP-ID           	NET-POLICY            	PRI-POLICY            	SEC-POLICY       	SEC-ACTION         
      WANPATH-ID       	PATH                    
30.1.1.2    	10.1.1.2    	8      	0      	1      	2022-12-15 09:09:21  ping             	match icmp            	test default user     	allow any other user ALLOW              
      1665475784156002328  unknown_flow_path       
  TRAFFIC: xact    	PRIORITY: 3  DSCP: --  STATE: INIT      	IDLE: 20 	IFACE:          
  NET-POLICY:: NCTX-ID: none             	SPF-ID: none             	DPF-ID: none             	UG-INFO: 158622979242302240[CN=engineering,DC=********test,DC=onmicrosoft,DC=com] 
  PRI-POLICY:: NCTX-ID: none             	SPF-ID: none             	DPF-ID: none             	UG-INFO: 1674636535551001928[*******test\*****@*******test.********.com]
  SEC-RULE-IDS: 1667810313551011228
    inspect flow detail
VRF                  SRC             DST                  SPORT           DPORT      PROTOCOL   START-TIME           APP-ID               NET-POLICY                PRI-POLICY                SEC-POL
ICY           SEC-ACTION                WANPATH-ID           PATH

Global               192.168.10.4    20.59.87.225         42990           443        6          2025-03-21 03:17:44  ssl-trafic-from-windows-131073 send_all_direct           default
   --                   N/A                       1694914321894014696  lan_to_public_direct
  TRAFFIC: xact        PRIORITY: 3  DSCP: --  STATE: ESTABLISHED   IDLE: 3600   IFACE: v-eth1, v-eth4 RX_VRF: Global (0) 	 FWD_VRF: Global (0),  	 NAT_PT: False 	 SGI_TAG: NA
  ERROR_CORR_TYPE::none
  NET-POLICY:: NCTX-ID: none                 SPF-ID: none                 DPF-ID: none                 UG-INFO: any                  SD-INFO: any                  DD-INFO: any
  PRI-POLICY:: NCTX-ID: none                 SPF-ID: none                 DPF-ID: none                 UG-INFO: any                  APP_ACCEL:    1 SD-INFO: any                  DD-INFO: any

  ML7-SESSION-ID: 4187 ML7-SESSION-STATE: Closed
    inspect flow detail

VRF          SRC          DST          SPORT         DPORT         PROTOCOL          START-TIME          APP-ID        NET-POLICY        PRI-POLICY          SEC-POLICY        SEC-ACTION           WANPATH-ID                      PATH

Global 172.20.50.3 8.8.8.8          48477         53                 17                2025-06-26 07:22:10    dns-base     direct_public         dns-Policy           --                        N/A    1653992553645014628  lan_to_l3_privat e_direct
TRAFFIC: xact PRIORITY: 1 DSCP: -- STATE: INIT IDLE: 3 IFACE: v-ethr6 RX_VRF: Global (0) FWD_VRF: Global (0), FEC_APPLIED: 0, APP_PROBE: 1
NET-POLICY::   NCTX-ID: none             SPF-ID: none                DPF-ID: none               UG-INFO: any
PRI-POLICY::    NCTX-ID: none             SPF-ID: none                 DPF-ID: none              UG-INFO: any
SEC-RULE-IDS: none

    © 2026 Palo Alto Networks, Inc. All rights reserved.