root@srx# run show log DebugTraffic Apr 2 18:53:00 18:53:00.791052:CID-1:RT:ha_ifp: ge-0/0/5.0 Apr 2 18:53:00 18:53:00.791052:CID-1:RT:jsf sess close notify Apr 2 18:53:00 18:53:00.791052:CID-1:RT:flow_ipv4_del_flow: sess 427400, in hash 32 Apr 2 18:53:00 18:53:00.791081:CID-1:RT:flow_ipv4_del_flow: sess 427400, in hash 32 Apr 2 18:53:00 18:53:00.791081:CID-1:RT:ha_ifp: ge-0/0/5.0 Apr 2 18:53:01 18:53:01.137985:CID-1:RT:<10.10.10.5/1186->10.20.20.198/1;1> matched filter MatchTrafficReverse: Apr 2 18:53:01 18:53:01.137985:CID-1:RT:packet [92] ipid = 2711, @0x4367fdd0 Apr 2 18:53:01 18:53:01.138038:CID-1:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 1, common flag 0x0, mbuf 0x4367fb80, rtbl_idx = 0 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: in_ifp Apr 2 18:53:01 18:53:01.138054:CID-1:RT:flow_process_pkt_exception: setting rtt in lpak to 0x68ae22f8 Apr 2 18:53:01 18:53:01.138054:CID-1:RT:pkt out of tunnel.Proceed normally Apr 2 18:53:01 18:53:01.138054:CID-1:RT: ge-0/0/5.0:10.10.10.5->10.20.20.198, icmp, (8/0) Apr 2 18:53:01 18:53:01.138054:CID-1:RT: find flow: table 0x51160fa0, hash 35150(0xffff), sa 10.10.10.5, da 10.20.20.198, sp 1186, dp 1, proto 1, tok 20503 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: no session found, start first path. in_tunnel - 0x606ecd80, from_cp_flag - 0 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: flow_first_create_session Apr 2 18:53:01 18:53:01.138054:CID-1:RT: flow_first_in_dst_nat: in , out dst_adr 10.20.20.198, sp 1186, dp 1 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: chose interface N/A as incoming nat if. Apr 2 18:53:01 18:53:01.138054:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 10.20.20.198(1) Apr 2 18:53:01 18:53:01.138054:CID-1:RT:flow_first_routing: vr_id 5, call flow_route_lookup(): src_ip 10.10.10.5, x_dst_ip 10.20.20.198, in ifp ge-0/0/5.0, out ifp N/A sp 1186, dp 1, ip_proto 1, tos 0 Apr 2 18:53:01 18:53:01.138054:CID-1:RT:Doing DESTINATION addr route-lookup Apr 2 18:53:01 18:53:01.138054:CID-1:RT: routed (x_dst_ip 10.20.20.198) from dynvpn (ge-0/0/5.0 in 0) to ge-0/0/5.0, Next-hop: 222.22.42.21 Apr 2 18:53:01 18:53:01.138054:CID-1:RT:flow_first_policy_search: policy search from zone dynvpn-> zone dynvpn (0x0,0x4a20001,0x1) Apr 2 18:53:01 18:53:01.138054:CID-1:RT:Policy lkup: vsys 0 zone(23:dynvpn) -> zone(23:dynvpn) scope:0 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: 10.10.10.5/2048 -> 10.20.20.198/62300 proto 1 Apr 2 18:53:01 18:53:01.138054:CID-1:RT: app 0, timeout 60s, curr ageout 60s Apr 2 18:53:01 18:53:01.138054:CID-1:RT: permitted by policy dynvpn_POLICY_FROM_trust(133) Apr 2 18:53:01 18:53:01.138054:CID-1:RT: packet passed, Permitted by policy. Apr 2 18:53:01 18:53:01.138054:CID-1:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False Apr 2 18:53:01 18:53:01.138479:CID-1:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False. Apr 2 18:53:01 18:53:01.138479:CID-1:RT: dip id = 0/0, 10.10.10.5/1186->10.10.10.5/1186 protocol 0 Apr 2 18:53:01 18:53:01.138479:CID-1:RT: choose interface ge-0/0/5.0 as outgoing phy if Apr 2 18:53:01 18:53:01.138479:CID-1:RT:is_loop_pak: No loop: on ifp: ge-0/0/5.0, addr: 10.20.20.198, rtt_idx:5 Apr 2 18:53:01 18:53:01.138479:CID-1:RT: check nsrp pak fwd: in_tun=0x27fc0019, VSD 0 for out ifp ge-0/0/5.0 Apr 2 18:53:01 18:53:01.138479:CID-1:RT: vsd 0 is active Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf : Alloc sess plugin info for session 77309846485 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:[JSF]Normal interest check. regd plugins 19, enabled impl mask 0x0 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:ha_ifp: ge-0/0/5.0 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 2, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 3, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 5, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 6, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 7, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 8, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 12, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 15, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:+++++++++++jsf_test_plugin_data_evh: 3 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 16, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 22, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 23, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 26, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 27, svc_req 0x0, impl mask 0x0. rc 2 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf int check: plugin id 28, svc_req 0x0, impl mask 0x0. rc 4 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:[JSF]Plugins(0x0, count 0) enabled for session = 140060596, impli mask(0x12), post_nat cnt 435157 svc req(0x0) Apr 2 18:53:01 18:53:01.138479:CID-1:RT:-jsf : no plugin interested for session 77309846485, free sess plugin info Apr 2 18:53:01 18:53:01.138479:CID-1:RT:flow_first_service_lookup(): natp(0x6098f3d0): app_id, 0(0). Apr 2 18:53:01 18:53:01.138479:CID-1:RT: service lookup identified service 0. Apr 2 18:53:01 18:53:01.138479:CID-1:RT: flow_first_final_check: in , out Apr 2 18:53:01 18:53:01.138479:CID-1:RT:flow_first_complete_session, pak_ptr: 0x50a4ee38, nsp: 0x6098f3d0, in_tunnel: 0x606ecd80 Apr 2 18:53:01 18:53:01.138479:CID-1:RT:construct v4 vector for nsp2 Apr 2 18:53:01 18:53:01.138479:CID-1:RT: existing vector list 0x10224-0x49b394e8. Apr 2 18:53:01 18:53:01.138479:CID-1:RT: Session (id:435157) created for first pak 10224 Apr 2 18:53:01 18:53:01.138479:CID-1:RT: flow_first_install_session======> 0x6098f3d0 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: nsp 0x6098f3d0, nsp2 0x6098f450 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: make_nsp_ready_no_resolve() Apr 2 18:53:01 18:53:01.138970:CID-1:RT: reverse route is optional Apr 2 18:53:01 18:53:01.138970:CID-1:RT:ha_ifp: ge-0/0/5.0 Apr 2 18:53:01 18:53:01.138970:CID-1:RT:Installing s2c NP session wing Apr 2 18:53:01 18:53:01.138970:CID-1:RT: flow got session. Apr 2 18:53:01 18:53:01.138970:CID-1:RT: flow session id 435157 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: vector bits 0x10224 vector 0x49b394e8 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: vsd 0 is active Apr 2 18:53:01 18:53:01.138970:CID-1:RT:skip pre-frag: is_tunnel_if- 0, is_if_mtu_configured- 0 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: encap vector Apr 2 18:53:01 18:53:01.138970:CID-1:RT: no more encapping needed Apr 2 18:53:01 18:53:01.138970:CID-1:RT:mbuf 0x4367fb80, exit nh 0x490010 Apr 2 18:53:01 18:53:01.138970:CID-1:RT:flow_process_pkt_exception: Freeing lpak 0x50a4ee38 associated with mbuf 0x4367fb80 Apr 2 18:53:01 18:53:01.138970:CID-1:RT: ----- flow_process_pkt rc 0x0 (fp rc 0)