Dec 30 04:41:49 04:41:49.094908:CID-0:RT:<10.254.12.2/1->75.145.78.9/22146;1,0x0> matched filter squidproxyfilter: Dec 30 04:41:49 04:41:49.094908:CID-0:RT:packet [84] ipid = 14201, @0x5ee1841c Dec 30 04:41:49 04:41:49.094908:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 15, common flag 0x0, mbuf 0x5ee18200, rtbl_idx = 0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow process pak fast ifl 75 in_ifp irb.12 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: irb.12:10.254.12.2->75.145.78.9, icmp, (8/0) Dec 30 04:41:49 04:41:49.094908:CID-0:RT: find flow: table 0x3142218, hash 28365(0xffff), sa 10.254.12.2, da 75.145.78.9, sp 1, dp 22146, proto 1, tok 14, conn-tag 0x00000000 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_create_session Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Save init hash spu id 0 to nsp and nsp2! Dec 30 04:41:49 04:41:49.094908:CID-0:RT:First path alloc and instl pending session, natp=0x9b82010, id=65104 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 75.145.78.9, sp 1, dp 22146 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: chose interface irb.12 as incoming nat if. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 75.145.78.9(22146) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:[JSF] Do ingress interest check. regd ingress plugins(1) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:[JSF][0]plugins(0x0) enabled for session = 64424574544 implicit mask(0x0), service request(0x0) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:-jsf : no plugin ingress interested for session 64424574544 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.254.12.2, x_dst_ip 75.145.78.9, in ifp irb.12, out ifp N/A sp 1, dp 22146, ip_proto 1, tos 0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Doing DESTINATION addr route-lookup Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_ipv4_rt_lkup success 75.145.78.9, iifl 0x4b, oifl 0x0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Changing out-ifp from .local..0 to ge-0/0/5.0 for dst: 75.145.78.9 in vr_id:0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: routed (x_dst_ip 75.145.78.9) from dmz (irb.12 in 0) to ge-0/0/5.0, Next-hop: 75.145.78.9 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_policy_search: policy search from zone dmz-> zone untrust (0x0,0x15682,0x5682) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Policy lkup: vsys 0 zone(14:dmz) -> zone(8:untrust) scope:0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: 10.254.12.2/2048 -> 75.145.78.9/11295 proto 1 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_policy_search: dynapp_none_policy: TRUE, is_final: 0x0, is_explicit: 0x0, policy_meta_data: 0x0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: policy has timeout 30 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: app 0, timeout 60s, curr ageout 60s Dec 30 04:41:49 04:41:49.094908:CID-0:RT: permitted by policy allow-proxy-icmp(37) Dec 30 04:41:49 04:41:49.094908:CID-0:RT: packet passed, Permitted by policy. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_src_xlate: incoming src port is : 1. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_src_xlate: src nat returns status: 1, rule/pool id: 9/2, pst_nat: False, nat_eim: False. Dec 30 04:41:49 04:41:49.094908:CID-0:RT: dip id = 2/0, 10.254.12.2/1->75.145.78.9/1252 protocol 1 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: choose interface ge-0/0/5.0(P2P) as outgoing phy if Dec 30 04:41:49 04:41:49.094908:CID-0:RT:is_loop_pak: Found loop on ifp ge-0/0/5.0, addr: 75.145.78.9, rtt_idx: 0 addr_type:0x3. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_loopback_check: Setting interface: ge-0/0/5.0 as loop ifp. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_do_jsf_plugins_interest_check JSF pre int check done and return Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_service_lookup(): natp(0x9b82010): app_id, 0(0). Dec 30 04:41:49 04:41:49.094908:CID-0:RT: service lookup identified service 0. Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_final_check: in , out Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_final_check: flow_set_xlate_vector. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:In flow_first_complete_session Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_complete_session: pak_ptr is xlated packet Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_complete_session, pak_ptr: 0x2089150, nsp: 0x9b82010, in_tunnel: 0x0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:before copy: nsp vec_list 0x0, nsp2 vec_list 0x1200 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:after copy: nsp vec_list 0x1200, nsp2 vec_list 0x1200 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:construct v4 vector for nsp2 and nsp Dec 30 04:41:49 04:41:49.094908:CID-0:RT: existing vector list 0x1200-0x66ce6ae0. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:vector index for nsp2: 1200 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: existing vector list 0x1200-0x66ce6ae0. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:vector index for nsp: 1200 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: Session (id:65104) created for first pak 1200 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:first pak processing successful Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_install_session======> 0x9b82010 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: nsp 0x9b82010, nsp2 0x9b820a8 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_proc_loop_back:In loopback session processing Dec 30 04:41:49 04:41:49.094908:CID-0:RT:duplicate_local_pak: duplicated pak has zone: Unknown, ifp: none, vsys: root-logical-system, 10.254.12.2->75.145.78.9, lports 15682, tlen 84 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_xlate_pak Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_handle_icmp_xlate Dec 30 04:41:49 04:41:49.094908:CID-0:RT:xlate_icmp_pak Dec 30 04:41:49 04:41:49.094908:CID-0:RT: post addr xlation: 75.145.78.9->75.145.78.9. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:proc_loopback_common: Found loop if ge-0/0/5.0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:check self-traffic on ge-0/0/5.0, in_tunnel 0x0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:retcode: 0x704 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:pak_for_self : proto 1, dst port 22146, action 0x4 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_create_session Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Loopback first path alloc pending session, natp=0x9ba1ed0, id=65331 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 75.145.78.9, sp 1252, dp 22146 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: chose interface ge-0/0/5.0 as incoming nat if. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_rule_dst_xlate: DST xlate: 75.145.78.9(22146) to 10.0.0.32(22146), rule/pool id 2/32771. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:[JSF] Do ingress interest check. regd ingress plugins(1) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:[JSF][0]plugins(0x0) enabled for session = 64424574771 implicit mask(0x0), service request(0x0) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:-jsf : no plugin ingress interested for session 64424574771 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 75.145.78.9, x_dst_ip 10.0.0.32, in ifp ge-0/0/5.0, out ifp N/A sp 1252, dp 22146, ip_proto 1, tos 0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Doing DESTINATION addr route-lookup Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_ipv4_rt_lkup success 10.0.0.32, iifl 0x54, oifl 0x49 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Clear MNG session flag as it's not host traffic after dst NAT Dec 30 04:41:49 04:41:49.094908:CID-0:RT: routed (x_dst_ip 10.0.0.32) from untrust (ge-0/0/5.0 in 0) to irb.10, Next-hop: 10.0.0.32 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_policy_search: policy search from zone untrust-> zone trust (0x110,0x4e45682,0x5682) Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Policy lkup: vsys 0 zone(8:untrust) -> zone(7:trust) scope:0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: 75.145.78.9/2048 -> 10.0.0.32/10044 proto 1 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:Policy lkup: vsys 0 zone(5:global) -> zone(5:global) scope:0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: 75.145.78.9/2048 -> 10.0.0.32/10044 proto 1 Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_policy_search: dynapp_none_policy: TRUE, is_final: 0x0, is_explicit: 0x0, policy_meta_data: 0x0 Dec 30 04:41:49 04:41:49.094908:CID-0:RT: app 0, timeout 60s, curr ageout 60s Dec 30 04:41:49 04:41:49.094908:CID-0:RT: packet dropped, denied by policy Dec 30 04:41:49 04:41:49.094908:CID-0:RT: denied by policy default-policy-logical-system-00(2), dropping pkt Dec 30 04:41:49 04:41:49.094908:CID-0:RT: packet dropped, policy deny. Dec 30 04:41:49 04:41:49.094908:CID-0:RT:flow_first_install_session: Loopback session processing aborted Dec 30 04:41:49 04:41:49.094908:CID-0:RT:first path session installation failed Dec 30 04:41:49 04:41:49.094908:CID-0:RT: flow find session returns error.