[edit security flow] root# run show log Flow-Of-Packet May 4 13:09:43 clear-log[2037]: logfile cleared May 4 13:09:46 13:09:45.1511703:CID-0:RT:<192.168.37.40/2048->192.168.1.2/12833;1> matched filter filter1: May 4 13:09:46 13:09:45.1511703:CID-0:RT:packet [60] ipid = 22708, @423f961c May 4 13:09:46 13:09:45.1511703:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f9480 May 4 13:09:46 13:09:45.1511703:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:09:46 13:09:45.1511703:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:09:46 13:09:45.1511703:CID-0:RT: find flow: table 0x50d667c8, hash 54851(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 6203, dp 768, proto 1, tok 384 May 4 13:09:46 13:09:45.1511703:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:09:46 13:09:45.1511703:CID-0:RT: flow_first_create_session May 4 13:09:46 13:09:45.1511703:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 6203, dp 768 May 4 13:09:46 13:09:45.1511703:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:09:46 13:09:45.1511703:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:09:46 13:09:45.1511703:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 6203, dp 768, ip_proto 1, tos 0 May 4 13:09:46 13:09:45.1511703:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:09:46 13:09:45.1511703:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:09:46 13:09:45.1511703:CID-0:RT: policy search from zone trust-> zone trust May 4 13:09:46 13:09:45.1511703:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:09:46 13:09:45.1511703:CID-0:RT: packet dropped, denied by policy May 4 13:09:46 13:09:45.1511703:CID-0:RT: packet dropped, policy deny. May 4 13:09:46 13:09:45.1511703:CID-0:RT: flow find session returns error. May 4 13:09:46 13:09:45.1512202:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:09:52 13:09:51.1011850:CID-0:RT:<192.168.37.40/2048->192.168.1.2/10785;1> matched filter filter1: May 4 13:09:52 13:09:51.1011850:CID-0:RT:packet [60] ipid = 22717, @423e5b9c May 4 13:09:52 13:09:51.1011850:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423e5a00 May 4 13:09:52 13:09:51.1011850:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:09:52 13:09:51.1011850:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:09:52 13:09:51.1011850:CID-0:RT: find flow: table 0x50d667c8, hash 62061(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 8251, dp 768, proto 1, tok 384 May 4 13:09:52 13:09:51.1011850:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:09:52 13:09:51.1011850:CID-0:RT: flow_first_create_session May 4 13:09:52 13:09:51.1011850:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 8251, dp 768 May 4 13:09:52 13:09:51.1011850:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:09:52 13:09:51.1011850:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:09:52 13:09:51.1011850:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 8251, dp 768, ip_proto 1, tos 0 May 4 13:09:52 13:09:51.1011850:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:09:52 13:09:51.1012275:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:09:52 13:09:51.1012275:CID-0:RT: policy search from zone trust-> zone trust May 4 13:09:52 13:09:51.1012275:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:09:52 13:09:51.1012275:CID-0:RT: packet dropped, denied by policy May 4 13:09:52 13:09:51.1012275:CID-0:RT: packet dropped, policy deny. May 4 13:09:52 13:09:51.1012275:CID-0:RT: flow find session returns error. May 4 13:09:52 13:09:51.1012275:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:09:57 13:09:56.1511825:CID-0:RT:<192.168.37.40/2048->192.168.1.2/8993;1> matched filter filter1: May 4 13:09:57 13:09:56.1511825:CID-0:RT:packet [60] ipid = 22725, @423e6c9c May 4 13:09:57 13:09:56.1511825:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423e6b00 May 4 13:09:57 13:09:56.1511825:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:09:57 13:09:56.1511825:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:09:57 13:09:56.1511825:CID-0:RT: find flow: table 0x50d667c8, hash 40054(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 10043, dp 768, proto 1, tok 384 May 4 13:09:57 13:09:56.1511825:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:09:57 13:09:56.1511825:CID-0:RT: flow_first_create_session May 4 13:09:57 13:09:56.1511825:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 10043, dp 768 May 4 13:09:57 13:09:56.1511825:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:09:57 13:09:56.1511825:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:09:57 13:09:56.1511825:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 10043, dp 768, ip_proto 1, tos 0 May 4 13:09:57 13:09:56.1511825:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:09:57 13:09:56.1511825:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:09:57 13:09:56.1511825:CID-0:RT: policy search from zone trust-> zone trust May 4 13:09:57 13:09:56.1511825:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:09:57 13:09:56.1511825:CID-0:RT: packet dropped, denied by policy May 4 13:09:57 13:09:56.1511825:CID-0:RT: packet dropped, policy deny. May 4 13:09:57 13:09:56.1511825:CID-0:RT: flow find session returns error. May 4 13:09:57 13:09:56.1512302:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:03 13:10:02.1012171:CID-0:RT:<192.168.37.40/2048->192.168.1.2/6945;1> matched filter filter1: May 4 13:10:03 13:10:02.1012171:CID-0:RT:packet [60] ipid = 22734, @423f6b9c May 4 13:10:03 13:10:02.1012171:CID-0:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 13, common flag 0x0, mbuf 0x423f6a00 May 4 13:10:03 13:10:02.1012171:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:03 13:10:02.1012171:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:03 13:10:02.1012171:CID-0:RT: find flow: table 0x50d667c8, hash 41276(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 12091, dp 768, proto 1, tok 384 May 4 13:10:03 13:10:02.1012171:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:03 13:10:02.1012171:CID-0:RT: flow_first_create_session May 4 13:10:03 13:10:02.1012171:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 12091, dp 768 May 4 13:10:03 13:10:02.1012171:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:03 13:10:02.1012171:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:03 13:10:02.1012171:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 12091, dp 768, ip_proto 1, tos 0 May 4 13:10:03 13:10:02.1012171:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:03 13:10:02.1012171:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:03 13:10:02.1012171:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:03 13:10:02.1012171:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:03 13:10:02.1012171:CID-0:RT: packet dropped, denied by policy May 4 13:10:03 13:10:02.1012171:CID-0:RT: packet dropped, policy deny. May 4 13:10:03 13:10:02.1012171:CID-0:RT: flow find session returns error. May 4 13:10:03 13:10:02.1012171:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:08 13:10:07.1512039:CID-0:RT:<192.168.37.40/2048->192.168.1.2/5153;1> matched filter filter1: May 4 13:10:08 13:10:07.1512039:CID-0:RT:packet [60] ipid = 22743, @42402f1c May 4 13:10:08 13:10:07.1512039:CID-0:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 13, common flag 0x0, mbuf 0x42402d80 May 4 13:10:08 13:10:07.1512039:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:08 13:10:07.1512039:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:08 13:10:07.1512039:CID-0:RT: find flow: table 0x50d667c8, hash 58713(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 13883, dp 768, proto 1, tok 384 May 4 13:10:08 13:10:07.1512039:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:08 13:10:07.1512039:CID-0:RT: flow_first_create_session May 4 13:10:08 13:10:07.1512039:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 13883, dp 768 May 4 13:10:08 13:10:07.1512348:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:08 13:10:07.1512348:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:08 13:10:07.1512348:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 13883, dp 768, ip_proto 1, tos 0 May 4 13:10:08 13:10:07.1512348:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:08 13:10:07.1512348:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:08 13:10:07.1512348:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:08 13:10:07.1512348:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:08 13:10:07.1512348:CID-0:RT: packet dropped, denied by policy May 4 13:10:08 13:10:07.1512348:CID-0:RT: packet dropped, policy deny. May 4 13:10:08 13:10:07.1512348:CID-0:RT: flow find session returns error. May 4 13:10:08 13:10:07.1512348:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:14 13:10:13.1012214:CID-0:RT:<192.168.37.40/2048->192.168.1.2/3105;1> matched filter filter1: May 4 13:10:14 13:10:13.1012214:CID-0:RT:packet [60] ipid = 22752, @423f961c May 4 13:10:14 13:10:13.1012214:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f9480 May 4 13:10:14 13:10:13.1012214:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:14 13:10:13.1012214:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:14 13:10:13.1012214:CID-0:RT: find flow: table 0x50d667c8, hash 39195(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 15931, dp 768, proto 1, tok 384 May 4 13:10:14 13:10:13.1012214:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:14 13:10:13.1012214:CID-0:RT: flow_first_create_session May 4 13:10:14 13:10:13.1012214:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 15931, dp 768 May 4 13:10:14 13:10:13.1012214:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:14 13:10:13.1012214:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:14 13:10:13.1012214:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 15931, dp 768, ip_proto 1, tos 0 May 4 13:10:14 13:10:13.1012214:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:14 13:10:13.1012214:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:14 13:10:13.1012214:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:14 13:10:13.1012214:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:14 13:10:13.1012214:CID-0:RT: packet dropped, denied by policy May 4 13:10:14 13:10:13.1012214:CID-0:RT: packet dropped, policy deny. May 4 13:10:14 13:10:13.1012214:CID-0:RT: flow find session returns error. May 4 13:10:14 13:10:13.1012214:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:19 13:10:18.1512299:CID-0:RT:<192.168.37.40/2048->192.168.1.2/1313;1> matched filter filter1: May 4 13:10:19 13:10:18.1512299:CID-0:RT:packet [60] ipid = 22760, @423faf9c May 4 13:10:19 13:10:18.1512299:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423fae00 May 4 13:10:19 13:10:18.1512299:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:19 13:10:18.1512299:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:19 13:10:18.1512299:CID-0:RT: find flow: table 0x50d667c8, hash 37728(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 17723, dp 768, proto 1, tok 384 May 4 13:10:19 13:10:18.1512299:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:19 13:10:18.1512299:CID-0:RT: flow_first_create_session May 4 13:10:19 13:10:18.1512299:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 17723, dp 768 May 4 13:10:19 13:10:18.1512299:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:19 13:10:18.1512299:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:19 13:10:18.1512299:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 17723, dp 768, ip_proto 1, tos 0 May 4 13:10:19 13:10:18.1512299:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:19 13:10:18.1512299:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:19 13:10:18.1512299:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:19 13:10:18.1512299:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:19 13:10:18.1512299:CID-0:RT: packet dropped, denied by policy May 4 13:10:19 13:10:18.1512299:CID-0:RT: packet dropped, policy deny. May 4 13:10:19 13:10:18.1512299:CID-0:RT: flow find session returns error. May 4 13:10:19 13:10:18.1512299:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:25 13:10:24.1012602:CID-0:RT:<192.168.37.40/2048->192.168.1.2/64800;1> matched filter filter1: May 4 13:10:25 13:10:24.1012602:CID-0:RT:packet [60] ipid = 22769, @423fb81c May 4 13:10:25 13:10:24.1012602:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423fb680 May 4 13:10:25 13:10:24.1012602:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:25 13:10:24.1012602:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:25 13:10:24.1012602:CID-0:RT: find flow: table 0x50d667c8, hash 12102(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 19771, dp 768, proto 1, tok 384 May 4 13:10:25 13:10:24.1012602:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:25 13:10:24.1012602:CID-0:RT: flow_first_create_session May 4 13:10:25 13:10:24.1012602:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 19771, dp 768 May 4 13:10:25 13:10:24.1012602:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:25 13:10:24.1012602:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:25 13:10:24.1012602:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 19771, dp 768, ip_proto 1, tos 0 May 4 13:10:25 13:10:24.1012602:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:25 13:10:24.1012602:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:25 13:10:24.1012602:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:25 13:10:24.1012602:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:25 13:10:24.1012602:CID-0:RT: packet dropped, denied by policy May 4 13:10:25 13:10:24.1012602:CID-0:RT: packet dropped, policy deny. May 4 13:10:25 13:10:24.1012602:CID-0:RT: flow find session returns error. May 4 13:10:25 13:10:24.1012602:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:30 13:10:29.1512514:CID-0:RT:<192.168.37.40/2048->192.168.1.2/63008;1> matched filter filter1: May 4 13:10:33 13:10:29.1512514:CID-0:RT:packet [60] ipid = 22777, @423fc09c May 4 13:10:33 13:10:29.1512514:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423fbf00 May 4 13:10:33 13:10:29.1512514:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:33 13:10:29.1512719:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:33 13:10:29.1512719:CID-0:RT: find flow: table 0x50d667c8, hash 38167(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 21563, dp 768, proto 1, tok 384 May 4 13:10:33 13:10:29.1512719:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:33 13:10:29.1512719:CID-0:RT: flow_first_create_session May 4 13:10:33 13:10:29.1512719:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 21563, dp 768 May 4 13:10:33 13:10:29.1512719:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:33 13:10:29.1512719:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:33 13:10:29.1512719:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 21563, dp 768, ip_proto 1, tos 0 May 4 13:10:33 13:10:29.1512719:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:33 13:10:29.1512719:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:33 13:10:29.1512719:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:33 13:10:29.1512719:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:33 13:10:29.1512719:CID-0:RT: packet dropped, denied by policy May 4 13:10:33 13:10:29.1512719:CID-0:RT: packet dropped, policy deny. May 4 13:10:33 13:10:29.1512719:CID-0:RT: flow find session returns error. May 4 13:10:33 13:10:29.1512719:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:36 13:10:35.1012649:CID-0:RT:<192.168.37.40/2048->192.168.1.2/60960;1> matched filter filter1: May 4 13:10:36 13:10:35.1012649:CID-0:RT:packet [60] ipid = 22786, @423f9e9c May 4 13:10:36 13:10:35.1012801:CID-0:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 13, common flag 0x0, mbuf 0x423f9d00 May 4 13:10:36 13:10:35.1012801:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:36 13:10:35.1012801:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:36 13:10:35.1012801:CID-0:RT: find flow: table 0x50d667c8, hash 13583(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 23611, dp 768, proto 1, tok 384 May 4 13:10:36 13:10:35.1012801:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:36 13:10:35.1012801:CID-0:RT: flow_first_create_session May 4 13:10:36 13:10:35.1012801:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 23611, dp 768 May 4 13:10:36 13:10:35.1012801:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:36 13:10:35.1012801:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:36 13:10:35.1012801:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 23611, dp 768, ip_proto 1, tos 0 May 4 13:10:36 13:10:35.1012801:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:36 13:10:35.1012801:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:36 13:10:35.1012801:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:36 13:10:35.1012801:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:36 13:10:35.1012801:CID-0:RT: packet dropped, denied by policy May 4 13:10:36 13:10:35.1012801:CID-0:RT: packet dropped, policy deny. May 4 13:10:36 13:10:35.1012801:CID-0:RT: flow find session returns error. May 4 13:10:36 13:10:35.1012801:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:40 13:10:39.1205328:CID-0:RT:<192.168.1.2/2048->192.168.37.40/19720;1> matched filter filter1: May 4 13:10:40 13:10:39.1205328:CID-0:RT:packet [60] ipid = 6461, @423e531c May 4 13:10:40 13:10:39.1205328:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423e5180 May 4 13:10:40 13:10:39.1205328:CID-0:RT: flow process pak fast ifl 65 in_ifp vlan.0 May 4 13:10:40 13:10:39.1205328:CID-0:RT: vlan.0:192.168.1.2->192.168.37.40, icmp, (8/0) May 4 13:10:40 13:10:39.1205328:CID-0:RT: find flow: table 0x50d667c8, hash 36350(0xffff), sa 192.168.1.2, da 192.168.37.40, sp 83, dp 1, proto 1, tok 384 May 4 13:10:40 13:10:39.1205328:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:40 13:10:39.1205328:CID-0:RT: flow_first_create_session May 4 13:10:40 13:10:39.1205328:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.37.40, sp 83, dp 1 May 4 13:10:40 13:10:39.1205328:CID-0:RT: chose interface vlan.0 as incoming nat if. May 4 13:10:40 13:10:39.1205328:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.37.40(1) May 4 13:10:40 13:10:39.1205328:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.1.2, x_dst_ip 192.168.37.40, in ifp vlan.0, out ifp N/A sp 83, dp 1, ip_proto 1, tos 0 May 4 13:10:40 13:10:39.1205328:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:40 13:10:39.1205328:CID-0:RT: routed (x_dst_ip 192.168.37.40) from trust (vlan.0 in 0) to vlan.100, Next-hop: 192.168.37.40 May 4 13:10:40 13:10:39.1205328:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:40 13:10:39.1205800:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:40 13:10:39.1205800:CID-0:RT: packet dropped, denied by policy May 4 13:10:40 13:10:39.1205800:CID-0:RT: packet dropped, policy deny. May 4 13:10:40 13:10:39.1205800:CID-0:RT: flow find session returns error. May 4 13:10:40 13:10:39.1205800:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:41 13:10:40.1512737:CID-0:RT:<192.168.37.40/2048->192.168.1.2/59168;1> matched filter filter1: May 4 13:10:41 13:10:40.1512737:CID-0:RT:packet [60] ipid = 22794, @423fa71c May 4 13:10:41 13:10:40.1512737:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423fa580 May 4 13:10:41 13:10:40.1512737:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:41 13:10:40.1512737:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:41 13:10:40.1512737:CID-0:RT: find flow: table 0x50d667c8, hash 11306(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 25403, dp 768, proto 1, tok 384 May 4 13:10:41 13:10:40.1512737:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:41 13:10:40.1512737:CID-0:RT: flow_first_create_session May 4 13:10:41 13:10:40.1512737:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 25403, dp 768 May 4 13:10:41 13:10:40.1512737:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:41 13:10:40.1512737:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:41 13:10:40.1512737:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 25403, dp 768, ip_proto 1, tos 0 May 4 13:10:41 13:10:40.1512737:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:41 13:10:40.1513145:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:41 13:10:40.1513145:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:41 13:10:40.1513145:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:41 13:10:40.1513145:CID-0:RT: packet dropped, denied by policy May 4 13:10:41 13:10:40.1513145:CID-0:RT: packet dropped, policy deny. May 4 13:10:41 13:10:40.1513145:CID-0:RT: flow find session returns error. May 4 13:10:41 13:10:40.1513145:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:44 13:10:44.895513:CID-0:RT:<192.168.1.2/2048->192.168.37.40/19719;1> matched filter filter1: May 4 13:10:44 13:10:44.895513:CID-0:RT:packet [60] ipid = 6469, @423e6c9c May 4 13:10:44 13:10:44.895513:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423e6b00 May 4 13:10:44 13:10:44.895513:CID-0:RT: flow process pak fast ifl 65 in_ifp vlan.0 May 4 13:10:44 13:10:44.895513:CID-0:RT: vlan.0:192.168.1.2->192.168.37.40, icmp, (8/0) May 4 13:10:44 13:10:44.895695:CID-0:RT: find flow: table 0x50d667c8, hash 25198(0xffff), sa 192.168.1.2, da 192.168.37.40, sp 84, dp 1, proto 1, tok 384 May 4 13:10:44 13:10:44.895748:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:44 13:10:44.895748:CID-0:RT: flow_first_create_session May 4 13:10:44 13:10:44.895788:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.37.40, sp 84, dp 1 May 4 13:10:44 13:10:44.895796:CID-0:RT: chose interface vlan.0 as incoming nat if. May 4 13:10:44 13:10:44.895796:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.37.40(1) May 4 13:10:44 13:10:44.895831:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.1.2, x_dst_ip 192.168.37.40, in ifp vlan.0, out ifp N/A sp 84, dp 1, ip_proto 1, tos 0 May 4 13:10:44 13:10:44.895848:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:44 13:10:44.895893:CID-0:RT: routed (x_dst_ip 192.168.37.40) from trust (vlan.0 in 0) to vlan.100, Next-hop: 192.168.37.40 May 4 13:10:44 13:10:44.895893:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:44 13:10:44.895893:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:44 13:10:44.895893:CID-0:RT: packet dropped, denied by policy May 4 13:10:44 13:10:44.895893:CID-0:RT: packet dropped, policy deny. May 4 13:10:44 13:10:44.895893:CID-0:RT: flow find session returns error. May 4 13:10:44 13:10:44.895969:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:47 13:10:46.1012899:CID-0:RT:<192.168.37.40/2048->192.168.1.2/57120;1> matched filter filter1: May 4 13:10:47 13:10:46.1012899:CID-0:RT:packet [60] ipid = 22806, @423fb81c May 4 13:10:47 13:10:46.1012899:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423fb680 May 4 13:10:47 13:10:46.1012899:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:47 13:10:46.1012899:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:47 13:10:46.1012899:CID-0:RT: find flow: table 0x50d667c8, hash 52274(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 27451, dp 768, proto 1, tok 384 May 4 13:10:47 13:10:46.1012899:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:47 13:10:46.1012899:CID-0:RT: flow_first_create_session May 4 13:10:47 13:10:46.1012899:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 27451, dp 768 May 4 13:10:47 13:10:46.1012899:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:47 13:10:46.1012899:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:47 13:10:46.1013271:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 27451, dp 768, ip_proto 1, tos 0 May 4 13:10:47 13:10:46.1013271:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:47 13:10:46.1013271:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:47 13:10:46.1013271:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:47 13:10:46.1013271:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:47 13:10:46.1013271:CID-0:RT: packet dropped, denied by policy May 4 13:10:47 13:10:46.1013271:CID-0:RT: packet dropped, policy deny. May 4 13:10:47 13:10:46.1013271:CID-0:RT: flow find session returns error. May 4 13:10:47 13:10:46.1013271:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:49 13:10:48.1528698:CID-0:RT:<192.168.1.2/2048->192.168.37.40/19718;1> matched filter filter1: May 4 13:10:49 13:10:48.1528698:CID-0:RT:packet [60] ipid = 6480, @423e5b9c May 4 13:10:49 13:10:48.1528698:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423e5a00 May 4 13:10:49 13:10:48.1528698:CID-0:RT: flow process pak fast ifl 65 in_ifp vlan.0 May 4 13:10:49 13:10:48.1528698:CID-0:RT: vlan.0:192.168.1.2->192.168.37.40, icmp, (8/0) May 4 13:10:49 13:10:48.1528698:CID-0:RT: find flow: table 0x50d667c8, hash 17246(0xffff), sa 192.168.1.2, da 192.168.37.40, sp 85, dp 1, proto 1, tok 384 May 4 13:10:49 13:10:48.1528698:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:49 13:10:48.1528698:CID-0:RT: flow_first_create_session May 4 13:10:49 13:10:48.1528698:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.37.40, sp 85, dp 1 May 4 13:10:49 13:10:48.1528698:CID-0:RT: chose interface vlan.0 as incoming nat if. May 4 13:10:49 13:10:48.1528698:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.37.40(1) May 4 13:10:49 13:10:48.1528698:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.1.2, x_dst_ip 192.168.37.40, in ifp vlan.0, out ifp N/A sp 85, dp 1, ip_proto 1, tos 0 May 4 13:10:49 13:10:48.1528698:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:49 13:10:48.1528698:CID-0:RT: routed (x_dst_ip 192.168.37.40) from trust (vlan.0 in 0) to vlan.100, Next-hop: 192.168.37.40 May 4 13:10:49 13:10:48.1529115:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:49 13:10:48.1529115:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:49 13:10:48.1529115:CID-0:RT: packet dropped, denied by policy May 4 13:10:49 13:10:48.1529115:CID-0:RT: packet dropped, policy deny. May 4 13:10:49 13:10:48.1529115:CID-0:RT: flow find session returns error. May 4 13:10:49 13:10:48.1529115:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:52 13:10:51.1512932:CID-0:RT:<192.168.37.40/2048->192.168.1.2/55328;1> matched filter filter1: May 4 13:10:52 13:10:51.1512932:CID-0:RT:packet [60] ipid = 22817, @423f9e9c May 4 13:10:52 13:10:51.1512932:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f9d00 May 4 13:10:52 13:10:51.1512932:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:52 13:10:51.1512932:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:52 13:10:51.1512932:CID-0:RT: find flow: table 0x50d667c8, hash 54581(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 29243, dp 768, proto 1, tok 384 May 4 13:10:52 13:10:51.1512932:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:52 13:10:51.1512932:CID-0:RT: flow_first_create_session May 4 13:10:52 13:10:51.1512932:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 29243, dp 768 May 4 13:10:52 13:10:51.1512932:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:52 13:10:51.1512932:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:52 13:10:51.1512932:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 29243, dp 768, ip_proto 1, tos 0 May 4 13:10:52 13:10:51.1512932:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:52 13:10:51.1512932:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:52 13:10:51.1513403:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:52 13:10:51.1513403:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:52 13:10:51.1513403:CID-0:RT: packet dropped, denied by policy May 4 13:10:52 13:10:51.1513403:CID-0:RT: packet dropped, policy deny. May 4 13:10:52 13:10:51.1513403:CID-0:RT: flow find session returns error. May 4 13:10:52 13:10:51.1513403:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:54 13:10:53.1161924:CID-0:RT:<192.168.1.2/2048->192.168.37.40/19717;1> matched filter filter1: May 4 13:10:54 13:10:53.1161924:CID-0:RT:packet [60] ipid = 6492, @423f9e9c May 4 13:10:54 13:10:53.1161924:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f9d00 May 4 13:10:54 13:10:53.1161924:CID-0:RT: flow process pak fast ifl 65 in_ifp vlan.0 May 4 13:10:54 13:10:53.1161924:CID-0:RT: vlan.0:192.168.1.2->192.168.37.40, icmp, (8/0) May 4 13:10:54 13:10:53.1161924:CID-0:RT: find flow: table 0x50d667c8, hash 8270(0xffff), sa 192.168.1.2, da 192.168.37.40, sp 86, dp 1, proto 1, tok 384 May 4 13:10:54 13:10:53.1161924:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:54 13:10:53.1161924:CID-0:RT: flow_first_create_session May 4 13:10:54 13:10:53.1161924:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.37.40, sp 86, dp 1 May 4 13:10:54 13:10:53.1162257:CID-0:RT: chose interface vlan.0 as incoming nat if. May 4 13:10:54 13:10:53.1162257:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.37.40(1) May 4 13:10:54 13:10:53.1162257:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.1.2, x_dst_ip 192.168.37.40, in ifp vlan.0, out ifp N/A sp 86, dp 1, ip_proto 1, tos 0 May 4 13:10:54 13:10:53.1162257:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:54 13:10:53.1162257:CID-0:RT: routed (x_dst_ip 192.168.37.40) from trust (vlan.0 in 0) to vlan.100, Next-hop: 192.168.37.40 May 4 13:10:54 13:10:53.1162257:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:54 13:10:53.1162257:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:54 13:10:53.1162257:CID-0:RT: packet dropped, denied by policy May 4 13:10:54 13:10:53.1162257:CID-0:RT: packet dropped, policy deny. May 4 13:10:54 13:10:53.1162257:CID-0:RT: flow find session returns error. May 4 13:10:54 13:10:53.1162257:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:58 13:10:57.1013163:CID-0:RT:<192.168.37.40/2048->192.168.1.2/53280;1> matched filter filter1: May 4 13:10:58 13:10:57.1013163:CID-0:RT:packet [60] ipid = 22829, @423f851c May 4 13:10:58 13:10:57.1013163:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f8380 May 4 13:10:58 13:10:57.1013163:CID-0:RT: flow process pak fast ifl 85 in_ifp vlan.100 May 4 13:10:58 13:10:57.1013361:CID-0:RT: vlan.100:192.168.37.40->192.168.1.2, icmp, (8/0) May 4 13:10:58 13:10:57.1013361:CID-0:RT: find flow: table 0x50d667c8, hash 27437(0xffff), sa 192.168.37.40, da 192.168.1.2, sp 31291, dp 768, proto 1, tok 384 May 4 13:10:58 13:10:57.1013361:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:58 13:10:57.1013361:CID-0:RT: flow_first_create_session May 4 13:10:58 13:10:57.1013361:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.1.2, sp 31291, dp 768 May 4 13:10:58 13:10:57.1013361:CID-0:RT: chose interface vlan.100 as incoming nat if. May 4 13:10:58 13:10:57.1013361:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.1.2(768) May 4 13:10:58 13:10:57.1013361:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.37.40, x_dst_ip 192.168.1.2, in ifp vlan.100, out ifp N/A sp 31291, dp 768, ip_proto 1, tos 0 May 4 13:10:58 13:10:57.1013361:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:58 13:10:57.1013361:CID-0:RT: routed (x_dst_ip 192.168.1.2) from trust (vlan.100 in 0) to vlan.0, Next-hop: 192.168.1.2 May 4 13:10:58 13:10:57.1013361:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:58 13:10:57.1013361:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:58 13:10:57.1013361:CID-0:RT: packet dropped, denied by policy May 4 13:10:58 13:10:57.1013361:CID-0:RT: packet dropped, policy deny. May 4 13:10:58 13:10:57.1013361:CID-0:RT: flow find session returns error. May 4 13:10:58 13:10:57.1013361:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) May 4 13:10:58 13:10:58.795075:CID-0:RT:<192.168.1.2/2048->192.168.37.40/19716;1> matched filter filter1: May 4 13:10:58 13:10:58.795075:CID-0:RT:packet [60] ipid = 6503, @423f6b9c May 4 13:10:58 13:10:58.795075:CID-0:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 13, common flag 0x0, mbuf 0x423f6a00 May 4 13:10:58 13:10:58.795075:CID-0:RT: flow process pak fast ifl 65 in_ifp vlan.0 May 4 13:10:58 13:10:58.795075:CID-0:RT: vlan.0:192.168.1.2->192.168.37.40, icmp, (8/0) May 4 13:10:58 13:10:58.795075:CID-0:RT: find flow: table 0x50d667c8, hash 318(0xffff), sa 192.168.1.2, da 192.168.37.40, sp 87, dp 1, proto 1, tok 384 May 4 13:10:58 13:10:58.795075:CID-0:RT: no session found, start first path. in_tunnel - 0, from_cp_flag - 0 May 4 13:10:58 13:10:58.795075:CID-0:RT: flow_first_create_session May 4 13:10:58 13:10:58.795075:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 192.168.37.40, sp 87, dp 1 May 4 13:10:58 13:10:58.795075:CID-0:RT: chose interface vlan.0 as incoming nat if. May 4 13:10:58 13:10:58.795075:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 192.168.37.40(1) May 4 13:10:58 13:10:58.795075:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 192.168.1.2, x_dst_ip 192.168.37.40, in ifp vlan.0, out ifp N/A sp 87, dp 1, ip_proto 1, tos 0 May 4 13:10:58 13:10:58.795075:CID-0:RT:Doing DESTINATION addr route-lookup May 4 13:10:58 13:10:58.795075:CID-0:RT: routed (x_dst_ip 192.168.37.40) from trust (vlan.0 in 0) to vlan.100, Next-hop: 192.168.37.40 May 4 13:10:58 13:10:58.795075:CID-0:RT: policy search from zone trust-> zone trust May 4 13:10:58 13:10:58.795075:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 4 13:10:58 13:10:58.795075:CID-0:RT: packet dropped, denied by policy May 4 13:10:58 13:10:58.795075:CID-0:RT: packet dropped, policy deny. May 4 13:10:58 13:10:58.795075:CID-0:RT: flow find session returns error. May 4 13:10:58 13:10:58.795530:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) [edit security flow] root#