---
title: "Get Session by ID"
method: GET
path: "/v3/sessions/{session_id}"
tags: ["Sessions"]
---

# Get Session by ID

`GET /v3/sessions/{session_id}`

Returns a single session by its ID, including full session metadata
and connection details.

## Path parameters

- `session_id` string, required

## Query parameters

- `scope` 'workspace' | 'demo'

## Response `200`

OK - request successful.

- Session — A network session captured by GreyNoise sensors. Sessions contain network flow data, protocol details, and enrichment metadata. The full set of fields is dynamic and can be discovered via the `/v3/sessions/fields` endpoint.
  - `_id` string — Unique session identifier.
  - `firstPacket` string, date-time — Timestamp of the first packet in the session.
  - `lastPacket` string, date-time — Timestamp of the last packet in the session.
  - `source.ip` string — Source IP address.
  - `source.port` integer — Source port number.
  - `destination.ip` string — Destination IP address.
  - `destination.port` integer — Destination port number.
  - `source.bytes` integer — Total bytes sent from source.
  - `source.packets` integer — Total packets sent from source.
  - `destination.bytes` integer — Total bytes sent from destination.
  - `destination.packets` integer — Total packets sent from destination.
  - `classification` string — GreyNoise classification of the source IP.

## Other responses

- `400` — Bad request - request syntax is invalid for the specified endpoint. Verify request syntax and try again.
- `401` — Unauthorized. Please check your API key.
- `403` — Forbidden - request is not authorized due to an invalid API key or plan limitations. If due to plan limitations, contact sales@greynoise.io to upgrade your plan and unlock full results.
- `404` — Resource not found.
- `429` — Too many requests. You've hit the rate-limit.
- `500` — Unexpected error

---

[API](https://skmtc.dev/greynoise/apis/greynoise-api.md) · [All operations](https://skmtc.dev/greynoise/apis/greynoise-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/greynoise/greynoise-api/revisions/30942574656d/schema)