SRX

Hi everyone

I have Juniper SRX 240, JUNOS 12.1X44-D35.5

I am experiencing high interface loads. In this case, the Data Plaint CPU is above 90%. How can I see who is using the most traffic? How can I see interface load per source/destination ip?

Thank you!

You can use flow to see the sessions on a particular interface

show security flow session interface fe-0/0/0.0

The resulting table will give source/destination and volume of traffic in the current sessions.

Thank you for reply!

But can i sort the output? Because I have ~ 4000 sessions and it is difficult to choose the most active one

The byte count indicates the volume of traffic for that session. 

Is this the only way? It is difficult to quickly search among 4000 sessions...

Another option will be enable any type on sampling (ipfix/netflow) and collect this stats on collector. Then filter required info.