This read-only value reports the rate at which new sessions are being created on the device, measured in sessions per second, giving a real-time view of session churn rather than the total count. An administrator watches this for sudden spikes, which can indicate either a legitimate traffic surge or an attack pattern like a SYN flood that rapidly creates many short-lived sessions. For example, a session-creation rate that jumps far above its normal baseline in a short window, even if the total session count stays modest, could be an early sign of a connection-flood attack worth investigating.