Given a sample packet (i.e. source-address, dst-address, ports, etc), the policy-test script returns the list of matching policies. This script performs a lookup in the policy table and returns the matching policies based on the search criteria.
See the document policy-test