show flows

all	Displays information about all flow types.
<sub-type>	destip <ip-address>	Displays a list of flows filtered by destination IP address.
	destport <port>	Displays a list of flows filtered by destination port.
	path-selection [full]	Displays a list of connections using path selection. Specify the full option to show a detailed list. Path selection statistics are only reported if path selection is enabled.
	path-selection site-name <site-name> [full]	Displays a list of flows using path selection to the specified site. The full option displays detailed information about the flows using path selection. Path selection statistics are only reported if path selection is enabled.
	path-selection uplink-name <uplink-name> [site-name <site-name>] [full]	Displays a list of flows using path selection over the specified uplink or, optionally, to the specifed site over the uplink.
	srcip <ip-address>	Displays a list of flows filtered by source IP address.
	srcport <port>	Displays a list of flows filtered by source port.
packet-mode	Displays information about packet-mode optimized flows.
<sub-type>	optimized	Displays the total active optimized flows.
	passthrough	Displays the total flows passed through unoptimized.
	srcip <ip-address>	Displays a list of flows filtered by source IP address.
tcp-term	Displays a list of terminated TCP optimized flows.
<sub-type>	optimized	Displays the total active optimized flows.
	passthrough	Displays the total flows passed through unoptimized.
	opening	Displays the total half-opened active connections. A half-opened connection is a TCP connection in which the connection has not been fully established. Half-opened connections count toward the connection count limit on the appliance because at any time they might become fully opened connections. If you are experiencing a large number of half-opened connections, consider deploying an appropriately sized appliance.
	closing	Displays the total half-closed active connections. A half-closed connection is a TCP connection that closed on one side. The other side of the connection can still send data. These connections count toward the appliance connection count limit. If you experience a large number of half-closed connections, consider deploying an appropriately sized appliance.
	srcip <ip-address>	Displays a list of flows filtered by source IP address.
	path-selection [full]	Displays a list of connections using path selection. Specify the full option to show a detailed list. Path selection statistics are only reported if path selection is enabled.
	path-selection site-name <site-name> [full]	Displays a list of flows using path selection to the specified site. The full option displays detailed information about the flows using path selection. Path selection statistics are only reported if path selection is enabled.
	path-selection uplink-name <uplink-name> [site-name <site-name>] [full]	Displays a list of flows using path selection over the specified uplink or, optionally, to the specified site over the uplink.
filter <string> \| filter application <app-name>	Filters the list according to the string or application. For example, to filter by IP address (such as srcip or destip), the filter string is the IP address.
sort-by <state>	Sort results by the following states: • state - Sort connections by state. • srcip - Sort connections by source IP address. • srcport - Sort connections by source port. • destip - Sort connections by destination IP address. • destport - Sort connections by destination port. • application - Sort connections by application. • peerip - Sort connections by peer IP address. • peerport - Sort connections by peer port. • protocol - Sort connections by protocol. • reduction - Sort connections by percent of reduction in bandwidth. • bytes_in - Sort connections by total number of bytes in. • bytes_out - Sort connections by total number of bytes out. • starttime - Sort connections by start time.
brief	Specifies a brief flow list.
debug	Displays debug information with each flow.
full	Displays full details on each flow.