O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

7.17. View the Session Table

Problem

You want to examine the session table to view all the active connections through the ScreenOS gateway.

Solution

You can view the session table in ScreenOS with the get session command:

	Internal_fw-> get session

Discussion

The session table lists the active sessions that the ScreenOS gateway has permitted and is actively tracking.

Figure 7-5 illustrates a scenario, similar to Recipe 7.1, where an inter-zone policy from Trust to Secure_Servers permits Orion (192.168.4.10) to initiate an HTTP connection to the web server Andromeda (192.168.1.30).

HTTP permit policy—session table view scenario

Figure 7-5. HTTP permit policy—session table view scenario

You can view the detailed state of an active session in the session table using the get session id <session_id> command. First, to determine the session ID of the session for which you are seeking detailed information, you can use the get session command with some matching keywords:

	Internal_fw> get session src-ip 192.168.4.10 dst-ip 192.168.1.30
	dst-port 80
	alloc 1/max 4064, alloc failed 0, mcast alloc 0, di alloc failed 0
	total reserved 0, free sessions in shared pool 4063
	Total 1 sessions according filtering criteria.
	id 4057/s**,vsys 0,flag 48000040/0000/0001,policy 2,time 2, dip 0 module 0 if 11(nspflag 801801):192.168.4.10/4407>192.168.1.30/80,6, 001125150ccd,sess token 4,vlan 0,tun 0,vsd 0,route 3 if 0(nspflag 800800):192.168.4.10/4407<192.168.1.30/80,6, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required