The display firewall topn session packet command displays top N sessions sorted by the number of packets or the average packet rate.
display firewall topn session packet [ rate ] [ all-systems | vsys vsys-name ] [ top-number number ] [ slot slot cpu cpu ]
| Parameter | Description | Value |
|---|---|---|
rate |
Displays top N sessions sorted by the average packet rate. Average packet rate = Number of session packets/(Current time - Session creation time) |
- |
all-systems |
Displays the session ranking result of the root system and all virtual systems. |
- |
vsys-name |
Specifies the name of a virtual system. If no virtual system is specified, the session ranking result of the root system is displayed. |
The specified virtual system name must already exist. |
number |
Displays first number sessions. |
The value is an integer ranging from 10 to 50. The default value is 10. |
slot |
Specifies a slot ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter. |
- |
cpu |
Specify a CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter. |
- |
After you run the command, the system may display Top N sessions after a specific delay. The delay is determined by the session traffic volume. In case of heavy session traffic, it takes a long time for the system to collect statistics and rank them.
To view the top N ranking result of a specified virtual system, you must set the vsys parameter in the root system. You cannot specify this parameter in the virtual system.
# Display top 10 sessions by the number of packets.
<sysname> system-view [sysname] display firewall topn session packet The application succeeded. Please wait patiently! Top N packets result (Sessions): udp VPN: public --> public 192.168.1.1:137 --> 192.168.1.2:137 Session ID: a58f5e2896430d9a5258e7713a, total packets: 158439934 <--packets: 0 bytes: 0 --> packets: 158439934 bytes: 12,358,694,256 udp VPN: public --> public 10.1.1.1 :5062 --> 1.1.1.1:3000 Session ID: a58f5e2b0e8b8e177358e77140, total packets: 73804598 <--packets: 29579406 bytes: 2,173,736,804 --> packets: 44225192 bytes: 3,380,152,131 udp VPN: public --> public 10.1.1.2:1863 --> 2.2.2.2:1863 Session ID: a68f5e2426260181a1c58e77144, total packets: 69058360 <--packets: 0 bytes: 0 --> packets: 69058360 bytes: 4,393,067,912 udp VPN: public --> public 10.1.2.1:1642 --> 1.1.1.2:1863 Session ID: a58f5e2f530e05454f58e77143, total packets: 50777759 <--packets: 0 bytes: 0 --> packets: 50777759 bytes: 3,210,076,115 udp VPN: public --> public 10.1.2.2:1863 --> 1.1.2.1:1863 Session ID: a58f5e2f45568cb4ae58e77143, total packets: 47032978 <--packets: 0 bytes: 0 --> packets: 47032978 bytes: 2,974,893,718 udp VPN: public --> public 192.168.2.1:7905 --> 2.2.2.3:6062 Session ID: a58f5e2b0d650e371d58e7713f, total packets: 41436924 <--packets: 20227915 bytes: 1,553,178,317 --> packets: 21209009 bytes: 1,625,640,602 FTP VPN: public --> public 172.16.1.1:4791 +-> 2.1.1.1:21 Session ID: a58f5df700f101fdd458e77bd8, total packets: 37104987 <--packets: 18552785 bytes: 742,871,437 --> packets: 18552202 bytes: 742,247,553 udp VPN: public --> public 172.16.1.2:13900 --> 2.1.1.2:1863 Session ID: a58f5e242cc58f2c5558e77144, total packets: 34964918 <--packets: 0 bytes: 0 --> packets: 34964918 bytes: 1,936,994,723 udp VPN: public --> public 172.16.2.1:5959 --> 2.1.2.1:1462 Session ID: a58f5e28df650fea9558e7713b, total packets: 34121741 <--packets: 19585716 bytes: 1,265,479,788 --> packets: 14536025 bytes: 978,451,405 udp VPN: public --> public 172.16.2.2:3336 --> 2.1.2.2:10004 Session ID: a58f5e2e806009703a58e77142, total packets: 33253148 <--packets: 0 bytes: 0 --> packets: 33253148 bytes: 16,115,221,665 ------------------------------------------------------------------------------
# Display top 10 sessions sorted by the average packet rate.
<sysname> system-view
[sysname] display firewall topn session packet rate
The application succeeded. Please wait patiently!
Top N packets result (Sessions):
udp VPN: public --> public 10.1.1.1:35 --> 10.1.1.2:535
Session ID: a487fb032a05038fd38bb4ba6, average rate(pps): 3544
<--packets: 0 bytes: 0 --> packets: 3023635 bytes: 344,694,390
udp VPN: public --> public 10.1.2.1:35 --> 10.1.2.2:535
Session ID: a587fb03263088ce5438bb4ba6, average rate(pps): 3543
<--packets: 0 bytes: 0 --> packets: 3022451 bytes: 344,559,414
udp VPN: public --> public 172.16.1.1:35 --> 172.16.1.2:535
Session ID: a587fb032cb30ace6b38bb4ba6, average rate(pps): 3542
<--packets: 0 bytes: 0 --> packets: 3021773 bytes: 344,482,122
udp VPN: public --> public 172.16.2.1:35 --> 172.16.2.2:535
Session ID: a587fb03263f0cbdab38bb4ba6, average rate(pps): 3540
<--packets: 0 bytes: 0 --> packets: 3020265 bytes: 344,310,210
udp VPN: public --> public 192.168.1.1:234 --> 192.168.1.2:2342
Session ID: a587fb032fc18cbf8c38bb4ba6, average rate(pps): 3539
<--packets: 0 bytes: 0 --> packets: 3018833 bytes: 344,146,962
udp VPN: public --> public 10.3.1.82:234 --> 10.3.0.2:2342
Session ID: a587fb032a4d84d4a638bb4ba6, average rate(pps): 3538
<--packets: 0 bytes: 0 --> packets: 3018310 bytes: 344,087,340
udp VPN: public --> public 10.3.0.9:35 --> 10.3.1.2:535
Session ID: a587fb032bde82707c38bb4ba6, average rate(pps): 3537
<--packets: 0 bytes: 0 --> packets: 3017327 bytes: 343,975,278
udp VPN: public --> public 10.3.1.84:234 --> 10.3.0.2:2342
Session ID: a587fb032a790a2e4f38bb4ba6, average rate(pps): 3537
<--packets: 0 bytes: 0 --> packets: 3017572 bytes: 344,003,208
udp VPN: public --> public 10.3.1.81:234 --> 10.3.0.2:2342
Session ID: a587fb03266a893ab138bb4ba6, average rate(pps): 3536
<--packets: 0 bytes: 0 --> packets: 3016672 bytes: 343,900,608
udp VPN: public --> public 10.3.0.14:35 --> 10.3.1.2:535
Session ID: a587fb032a220c52c438bb4ba6, average rate(pps): 3536
<--packets: 0 bytes: 0 --> packets: 3016445 bytes: 343,874,730
------------------------------------------------------------------------------
Item |
Description |
|---|---|
Top N packets result (Sessions) |
Top N sessions by the number of packets |
udp |
Protocol name, such as UDP in this example |
VPN:public --> public |
VPN instance name: source --> destination |
Session ID |
Session ID |
total packets |
Total number of packets transmitted during the session |
average rate(pps) |
Average packet rate of the session |
<--packets: 0 bytes: 0 |
Numbers of packets and bytes in the reverse direction of the session |
--> packets: 33253148 bytes: 16,115,221,665 |
Numbers of packets and bytes in the forward direction of the session |