conf vdom
edit root
diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <Incoming_interface>
protocol ID for TCP is 6 and UDP is 17.
Example. To check the DNS traffic from source 172.31.192.56 to 8.8.8.8, command syntax will be as below:
# diagnose firewall iprope lookup 172.31.192.56 0 8.8.8.8 53 17 port3
<src [172.31.192.56-0] dst [8.8.8.8-53] proto 17 dev port3> matches policy id: 1
To check the HTTPS traffic from source 172.31.192.56 to 208.91.113.45, command sysntax will be as below:
# diagnose firewall iprope lookup 172.31.192.56 0 208.91.113.45 443 6 port3
<src [172.31.192.56-0] dst [208.91.113.45-443] proto 6 dev port3> matches policy id: 1