The following symptoms may indicate high session rate or session resource utilization:
First, obtain an overview of the current session usage by checking the session statistics.
Use the following command:
show security flow session
This command displays the current active sessions and provides the total number of active sessions on the device.
To view a summarized session overview, use:
show security flow session summary
This command provides high-level session statistics, including:
To check session information from the Packet Forwarding Engine (PFE) level, use:
(vty)# show usp flow session summary
This provides session statistics directly from the forwarding plane.
To monitor the session creation rate, use:
show security monitoring performance session
Run this command multiple times at different intervals to determine:
A continuously increasing session rate may indicate abnormal traffic patterns or resource exhaustion.
The command to check detailed session information depends on the SRX platform.
Branch SRX Series (SRX3xx and SRX550M)
(vty)# show octeon session detail
Data Center SRX Series (SRX1500, SRX4k), SPC3, and vSRX
(vty)# show i386 session detail
High-End SRX Series (SRX1k, SRX3k, and SRX5k)
(vty)# show xlr session detail
show security monitoring fpc 0
This command displays:
This information helps identify whether the SRX device is approaching resource limits or experiencing abnormal session creation activity.
v1