Need to monitor the traffic from source to destination address within a firewall filter

Important: You can apply a firewall filter for specific flows, for example:

1. Create firewall filter:

set firewall family inet filter monitor-traffic term specific-flow from source-address <source-ip>

set firewall family inet filter monitor-traffic term specific-flow from destination-address <destination-ip>

set firewall family inet filter monitor-traffic term specific-flow then count specific-flow-count

set firewall family inet filter monitor-traffic term specific-flow then accept

set firewall family inet filter monitor-traffic term accept-all then accept

commit

2. Apply the filter to the IRB interface:

set interfaces irb unit <unit-number> family inet filter input monitor-traffic

commit

3. Monitor the counters:

show firewall filter monitor-traffic

Note: For more deeper inspection, you can use an analyzer and filter by ip address in wireshark.

set forwarding-options analyzer TEST input ingress interface ge-0/0/0

set forwarding-options analyzer TEST input egress interface ge-0/0/0

set forwarding-options analyzer TEST output interface xe-0/0/1.0   >>> laptop using wireshark

https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic-map/firewall-filter-match-condtions-and-actions-qfx.html