*** flowtrace *** Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:<10.152.172.34/21782->10.252.252.100/445;6> matched filter f0: Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:packet [48] ipid = 13331, @4227c7be Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 1, common flag 0x0, mbuf 0x4227c600 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: in_ifp Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_process_pkt_exception: setting rtt in lpak to 47c1c7b8 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:pkt out of tunnel.Proceed normally Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: st0.1:10.152.172.34/21782->10.252.252.100/445, tcp, flag 2 syn Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: find flow: table 0x4b8f8198, hash 31113(0xffff), sa 10.152.172.34, da 10.252.252.100, sp 21782, dp 445, proto 6, tok 576 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: no session found, start first path. in_tunnel - 1263746108, from_cp_flag - 0 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow_first_create_session Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 10.252.252.100, sp 21782, dp 445 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: chose interface st0.1 as incoming nat if. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 10.252.252.100(445) Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_routing: call flow_route_lookup(): src_ip 10.152.172.34, x_dst_ip 10.252.252.100, in ifp st0.1, out ifp N/A sp 21782, dp 445, ip_proto 6, tos 0 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:Doing DESTINATION addr route-lookup Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: routed (x_dst_ip 10.252.252.100) from vpn (st0.1 in 0) to vlan.0, Next-hop: 10.252.252.100 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: policy search from zone vpn-> zone trust Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: app 21, timeout 1800s, curr ageout 20s Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_src_xlate: 10.152.172.34/21782 -> 10.252.252.100/445 | 10.252.252.100/445 -> 0.0.0.0/21782: nat_src_xlated: False, nat_src_xlate_failed: False Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_src_xlate: src nat 0.0.0.0(21782) to 10.252.252.100(445) returns status: 0, rule/pool id: 0/0, pst_nat: False. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: dip id = 0/0, 10.152.172.34/21782->10.152.172.34/21782 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_get_out_ifp: 1000 -> cone nat test Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: choose interface vlan.0 as outgoing phy if Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:is_loop_pak: No loop: on ifp: vlan.0, addr: 10.252.252.100, rtt_idx:0 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:policy is NULL (wx/pim scenario) Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:sm_flow_interest_check: app_id 0, policy 9, app_svc_en 0, flags 0x2. not interested Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:sm_flow_interest_check: app_id 1, policy 9, app_svc_en 0, flags 0x2. not interested Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_first_service_lookup(): natp(0x4ac6ebe0): local_pak(0x47e4b278.0x4227c600): TCP proxy NOT interested: 0. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: service lookup identified service 21. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow_first_final_check: in , out Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: existing vector list 6-44b1a1a8. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: Session (id:7717) created for first pak 6 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow_first_install_session======> 0x4ac6ebe0 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: nsp 0x4ac6ebe0, nsp2 0x4ac6ec4c Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: make_nsp_ready_no_resolve() Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: route lookup: dest-ip 10.152.172.34 orig ifp st0.1 output_ifp fe-0/0/0.0 orig-zone 9 out-zone 7 vsd 0 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:Reject route in make_nsp_ready_no_resolve. zone mismatch Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: route to 71.228.124.1 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:Installing s2c NP session wing Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow got session. Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: flow session id 7717 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: tcp flags 0x2, flag 0x2 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: Got syn, 10.152.172.34(21782)->10.252.252.100(445), nspflag 0x1021, 0x20 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: encap vector Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: no more encapping needed Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:mbuf 0x4227c600, exit nh 0x90010 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT:flow_process_pkt_exception: Freeing lpak 47e4b278 associated with mbuf 0x4227c600 Feb 11 06:49:19 06:49:18.1656319:CID-0:RT: ----- flow_process_pkt rc 0x0 (fp rc 0) Feb 11 06:49:19 06:49:18.1658242:CID-0:RT:<10.252.252.100/445->10.152.172.34/21782;6> matched filter f2: Feb 11 06:49:19 06:49:18.1658242:CID-0:RT:packet [48] ipid = 35771, @42233b1a Feb 11 06:49:19 06:49:18.1658242:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 13, common flag 0x0, mbuf 0x42233980 Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: flow process pak fast ifl 69 in_ifp vlan.0 Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: vlan.0:10.252.252.100/445->10.152.172.34/21782, tcp, flag 12 syn ack Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: find flow: table 0x4b8f8198, hash 15315(0xffff), sa 10.252.252.100, da 10.152.172.34, sp 445, dp 21782, proto 6, tok 384 Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: flow got session. Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: flow session id 7717 Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: route lookup failed: dest-ip 10.152.172.34 orig ifp st0.1 output_ifp fe-0/0/0.0 fto 0x44a626f0 orig-zone 9 out-zone 7 vsd 0 Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: packet dropped, pak dropped since re-route failed Feb 11 06:49:19 06:49:18.1658242:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)