SSG550(M)-> get db stream ****** packet decapsulated, type=ipsec, len=84****** ipid = 42930(a7b2), @2d652110 tunnel.1:171.74.126.8/1->146.147.28.46/16574,1(8/0) no session found flow_first_sanity_check: in , out chose interface tunnel.1 as incoming nat if. flow_first_routing: in , out search route to (tunnel.1, 171.74.126.8->10.154.8.125) in vr trust-vr for vsd-0/flag-0/ifp-null cached route 6 for 10.154.8.125 [ Dest] 6.route 10.154.8.125->10.0.4.1, to ethernet3/3 routed (x_dst_ip 10.154.8.125) from tunnel.1 (tunnel.1 in 0) to ethernet3/3 policy search from zone 1-> zone 2 policy_flow_search policy search nat_crt from zone 1-> zone 10 RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 146.147.28.46, port 10593, proto 1) No SW RPC rule match, search HW rule swrs_search_ip: policy matched id/idx/action = 17/17/0x9 Permitted by policy 17 No src xlate choose interface ethernet3/3 as outgoing phy if check nsrp pak fwd: in_tun=0x40000001, VSD 0 for out ifp ethernet3/3 no loop on ifp ethernet3/3. session application type 0, name None, nas_id 0, timeout 60sec service lookup identified service 0. flow_first_final_check: in , out existing vector list 25-b1cf2f4. Session (id:253777) created for first pak 25 flow_first_install_session======> route to 10.0.4.1 cached arp entry with MAC 001b17000111 for 10.0.4.1 arp entry found for 10.0.4.1 ifp2 ethernet3/3, out_ifp ethernet3/3, flag 00800800, tunnel ffffffff, rc 1 outgoing wing prepared, ready handle tunnel reverse route search route to (ethernet3/3, 10.154.8.125->171.74.126.8) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1 cached route 27 for 171.74.126.8 [ Dest] 27.route 171.74.126.8->198.152.3.4, to tunnel.1 route to 198.152.3.4 going into tunnel. ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000001, rc 1 flow got session. flow session id 253777 flow_main_body_vector in ifp tunnel.1 out ifp ethernet3/3 flow vector index 0x25, vector addr 0xb1cf2f4, orig vector 0xb1cf2f4 vsd 0 is active post addr xlation: 171.74.126.8->10.154.8.125. skipping pre-frag no more encapping needed packet send out to 001b17000111 through ethernet3/3 **** pak processing end. ****** packet decapsulated, type=ipsec, len=84****** ipid = 42943(a7bf), @2d53b910 tunnel.1:171.74.126.8/2->146.147.28.46/16574,1(8/0) no session found flow_first_sanity_check: in , out chose interface tunnel.1 as incoming nat if. flow_first_routing: in , out search route to (tunnel.1, 171.74.126.8->10.154.8.125) in vr trust-vr for vsd-0/flag-0/ifp-null cached route 6 for 10.154.8.125 [ Dest] 6.route 10.154.8.125->10.0.4.1, to ethernet3/3 routed (x_dst_ip 10.154.8.125) from tunnel.1 (tunnel.1 in 0) to ethernet3/3 policy search from zone 1-> zone 2 policy_flow_search policy search nat_crt from zone 1-> zone 10 RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 146.147.28.46, port 49503, proto 1) No SW RPC rule match, search HW rule swrs_search_ip: policy matched id/idx/action = 17/17/0x9 Permitted by policy 17 No src xlate choose interface ethernet3/3 as outgoing phy if check nsrp pak fwd: in_tun=0x40000001, VSD 0 for out ifp ethernet3/3 no loop on ifp ethernet3/3. session application type 0, name None, nas_id 0, timeout 60sec service lookup identified service 0. flow_first_final_check: in , out existing vector list 25-b1cf2f4. Session (id:253189) created for first pak 25 flow_first_install_session======> route to 10.0.4.1 cached arp entry with MAC 001b17000111 for 10.0.4.1 arp entry found for 10.0.4.1 ifp2 ethernet3/3, out_ifp ethernet3/3, flag 00800800, tunnel ffffffff, rc 1 outgoing wing prepared, ready handle tunnel reverse route search route to (ethernet3/3, 10.154.8.125->171.74.126.8) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1 cached route 27 for 171.74.126.8 [ Dest] 27.route 171.74.126.8->198.152.3.4, to tunnel.1 route to 198.152.3.4 going into tunnel. ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000001, rc 1 flow got session. flow session id 253189 flow_main_body_vector in ifp tunnel.1 out ifp ethernet3/3 flow vector index 0x25, vector addr 0xb1cf2f4, orig vector 0xb1cf2f4 vsd 0 is active post addr xlation: 171.74.126.8->10.154.8.125. skipping pre-frag no more encapping needed packet send out to 001b17000111 through ethernet3/3 **** pak processing end. ****** packet decapsulated, type=ipsec, len=84****** ipid = 42950(a7c6), @2d756910 tunnel.1:171.74.126.8/3->146.147.28.46/16574,1(8/0) no session found flow_first_sanity_check: in , out chose interface tunnel.1 as incoming nat if. flow_first_routing: in , out search route to (tunnel.1, 171.74.126.8->10.154.8.125) in vr trust-vr for vsd-0/flag-0/ifp-null cached route 6 for 10.154.8.125 [ Dest] 6.route 10.154.8.125->10.0.4.1, to ethernet3/3 routed (x_dst_ip 10.154.8.125) from tunnel.1 (tunnel.1 in 0) to ethernet3/3 policy search from zone 1-> zone 2 policy_flow_search policy search nat_crt from zone 1-> zone 10 RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 146.147.28.46, port 6492, proto 1) No SW RPC rule match, search HW rule swrs_search_ip: policy matched id/idx/action = 17/17/0x9 Permitted by policy 17 No src xlate choose interface ethernet3/3 as outgoing phy if check nsrp pak fwd: in_tun=0x40000001, VSD 0 for out ifp ethernet3/3 no loop on ifp ethernet3/3. session application type 0, name None, nas_id 0, timeout 60sec service lookup identified service 0. flow_first_final_check: in , out existing vector list 25-b1cf2f4. Session (id:251955) created for first pak 25 flow_first_install_session======> route to 10.0.4.1 cached arp entry with MAC 001b17000111 for 10.0.4.1 arp entry found for 10.0.4.1 ifp2 ethernet3/3, out_ifp ethernet3/3, flag 00800800, tunnel ffffffff, rc 1 outgoing wing prepared, ready handle tunnel reverse route search route to (ethernet3/3, 10.154.8.125->171.74.126.8) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1 cached route 27 for 171.74.126.8 [ Dest] 27.route 171.74.126.8->198.152.3.4, to tunnel.1 route to 198.152.3.4 going into tunnel. ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000001, rc 1 flow got session. flow session id 251955 flow_main_body_vector in ifp tunnel.1 out ifp ethernet3/3 flow vector index 0x25, vector addr 0xb1cf2f4, orig vector 0xb1cf2f4 vsd 0 is active post addr xlation: 171.74.126.8->10.154.8.125. skipping pre-frag no more encapping needed packet send out to 001b17000111 through ethernet3/3 **** pak processing end. ****** packet decapsulated, type=ipsec, len=84****** ipid = 43401(a989), @2d5d8110 tunnel.1:171.74.126.8/4->146.147.28.46/16574,1(8/0) no session found flow_first_sanity_check: in , out chose interface tunnel.1 as incoming nat if. flow_first_routing: in , out search route to (tunnel.1, 171.74.126.8->10.154.8.125) in vr trust-vr for vsd-0/flag-0/ifp-null cached route 6 for 10.154.8.125 [ Dest] 6.route 10.154.8.125->10.0.4.1, to ethernet3/3 routed (x_dst_ip 10.154.8.125) from tunnel.1 (tunnel.1 in 0) to ethernet3/3 policy search from zone 1-> zone 2 policy_flow_search policy search nat_crt from zone 1-> zone 10 RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 146.147.28.46, port 44888, proto 1) No SW RPC rule match, search HW rule swrs_search_ip: policy matched id/idx/action = 17/17/0x9 Permitted by policy 17 No src xlate choose interface ethernet3/3 as outgoing phy if check nsrp pak fwd: in_tun=0x40000001, VSD 0 for out ifp ethernet3/3 no loop on ifp ethernet3/3. session application type 0, name None, nas_id 0, timeout 60sec service lookup identified service 0. flow_first_final_check: in , out existing vector list 25-b1cf2f4. Session (id:255642) created for first pak 25 flow_first_install_session======> route to 10.0.4.1 cached arp entry with MAC 001b17000111 for 10.0.4.1 arp entry found for 10.0.4.1 ifp2 ethernet3/3, out_ifp ethernet3/3, flag 00800800, tunnel ffffffff, rc 1 outgoing wing prepared, ready handle tunnel reverse route search route to (ethernet3/3, 10.154.8.125->171.74.126.8) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1 cached route 27 for 171.74.126.8 [ Dest] 27.route 171.74.126.8->198.152.3.4, to tunnel.1 route to 198.152.3.4 going into tunnel. ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000001, rc 1 flow got session. flow session id 255642 flow_main_body_vector in ifp tunnel.1 out ifp ethernet3/3 flow vector index 0x25, vector addr 0xb1cf2f4, orig vector 0xb1cf2f4 vsd 0 is active post addr xlation: 171.74.126.8->10.154.8.125. skipping pre-frag no more encapping needed packet send out to 001b17000111 through ethernet3/3 **** pak processing end. ****** packet decapsulated, type=ipsec, len=84****** ipid = 44039(ac07), @2d547110 tunnel.1:171.74.126.8/5->146.147.28.46/16574,1(8/0) no session found flow_first_sanity_check: in , out chose interface tunnel.1 as incoming nat if. flow_first_routing: in , out search route to (tunnel.1, 171.74.126.8->10.154.8.125) in vr trust-vr for vsd-0/flag-0/ifp-null cached route 6 for 10.154.8.125 [ Dest] 6.route 10.154.8.125->10.0.4.1, to ethernet3/3 routed (x_dst_ip 10.154.8.125) from tunnel.1 (tunnel.1 in 0) to ethernet3/3 policy search from zone 1-> zone 2 policy_flow_search policy search nat_crt from zone 1-> zone 10 RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 146.147.28.46, port 23638, proto 1) No SW RPC rule match, search HW rule swrs_search_ip: policy matched id/idx/action = 17/17/0x9 Permitted by policy 17 No src xlate choose interface ethernet3/3 as outgoing phy if check nsrp pak fwd: in_tun=0x40000001, VSD 0 for out ifp ethernet3/3 no loop on ifp ethernet3/3. session application type 0, name None, nas_id 0, timeout 60sec service lookup identified service 0. flow_first_final_check: in , out existing vector list 25-b1cf2f4. Session (id:254211) created for first pak 25 flow_first_install_session======> route to 10.0.4.1 cached arp entry with MAC 001b17000111 for 10.0.4.1 arp entry found for 10.0.4.1 ifp2 ethernet3/3, out_ifp ethernet3/3, flag 00800800, tunnel ffffffff, rc 1 outgoing wing prepared, ready handle tunnel reverse route search route to (ethernet3/3, 10.154.8.125->171.74.126.8) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1 cached route 27 for 171.74.126.8 [ Dest] 27.route 171.74.126.8->198.152.3.4, to tunnel.1 route to 198.152.3.4 going into tunnel. ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000001, rc 1 flow got session. flow session id 254211 flow_main_body_vector in ifp tunnel.1 out ifp ethernet3/3 flow vector index 0x25, vector addr 0xb1cf2f4, orig vector 0xb1cf2f4 vsd 0 is active post addr xlation: 171.74.126.8->10.154.8.125. skipping pre-frag no more encapping needed packet send out to 001b17000111 through ethernet3/3 **** pak processing end. packet dropped, unkown type packet