SRX show which traffic is hitting the deny policy

Hello,

I very often use the 'show security flow session' to see traffic being permitted and creating a session. However, What do you use to show traffic which is hitting the deny policy ??

Many Thanks,

Nick