[edit] sb3959@SRX-Test# May 11 20:26:37 20:26:37.706938:CID-0:RT:<5.1.1.5/520->5.1.1.12/1;1> matched filter MatchTraffic: May 11 20:26:37 20:26:37.706938:CID-0:RT:packet [60] ipid = 18905, @0x43e8281c May 11 20:26:37 20:26:37.706938:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 15, common flag 0x0, mbuf 0x43e82600, rtbl_idx = 0 May 11 20:26:37 20:26:37.706938:CID-0:RT: flow process pak fast ifl 78 in_ifp ge-0/0/1.0 May 11 20:26:37 20:26:37.706938:CID-0:RT: ge-0/0/1.0:5.1.1.5->5.1.1.12, icmp, (8/0) May 11 20:26:37 20:26:37.706938:CID-0:RT: find flow: table 0x5d763040, hash 64166(0xffff), sa 5.1.1.5, da 5.1.1.12, sp 520, dp 1, proto 1, tok 8, conn-tag 0x00000000 May 11 20:26:37 20:26:37.706938:CID-0:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0 May 11 20:26:37 20:26:37.706938:CID-0:RT: flow_first_create_session May 11 20:26:37 20:26:37.706938:CID-0:RT:Save init hash spu id 0 to nsp and nsp2! May 11 20:26:37 20:26:37.706938:CID-0:RT:First path alloc and instl pending session, natp=0x601b4250, id=5593 May 11 20:26:37 20:26:37.706938:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 5.1.1.12, sp 520, dp 1 May 11 20:26:37 20:26:37.706938:CID-0:RT: chose interface ge-0/0/1.0 as incoming nat if. May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 5.1.1.12(1) May 11 20:26:37 20:26:37.706938:CID-0:RT:-jsf : Alloc sess plugin info for session 8589940185 May 11 20:26:37 20:26:37.706938:CID-0:RT:[JSF] Do ingress interest check. regd ingress plugins(1) May 11 20:26:37 20:26:37.706938:CID-0:RT:[JSF][0]plugins(0x0) enabled for session = 8589940185 implicit mask(0x0), service request(0x0) May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 5.1.1.5, x_dst_ip 5.1.1.12, in ifp ge-0/0/1.0, out ifp N/A sp 520, dp 1, ip_proto 1, tos 0 May 11 20:26:37 20:26:37.706938:CID-0:RT:Doing DESTINATION addr route-lookup May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_ipv4_rt_lkup success 5.1.1.12, iifl 0x4e, oifl 0x4e May 11 20:26:37 20:26:37.706938:CID-0:RT: routed (x_dst_ip 5.1.1.12) from trust (ge-0/0/1.0 in 0) to ge-0/0/1.0, Next-hop: 5.1.1.12 May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x2080001,0x1) May 11 20:26:37 20:26:37.706938:CID-0:RT:Policy lkup: vsys 0 zone(8:trust) -> zone(8:trust) scope:0 May 11 20:26:37 20:26:37.706938:CID-0:RT: 5.1.1.5/2048 -> 5.1.1.12/19283 proto 1 May 11 20:26:37 20:26:37.706938:CID-0:RT: app 0, timeout 60s, curr ageout 60s May 11 20:26:37 20:26:37.706938:CID-0:RT: permitted by policy all(6) May 11 20:26:37 20:26:37.706938:CID-0:RT: packet passed, Permitted by policy. May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_src_xlate: incoming src port is : 520. May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False. May 11 20:26:37 20:26:37.706938:CID-0:RT: dip id = 0/0, 5.1.1.5/520->5.1.1.5/520 protocol 0 May 11 20:26:37 20:26:37.706938:CID-0:RT: choose interface ge-0/0/1.0(P2P) as outgoing phy if May 11 20:26:37 20:26:37.706938:CID-0:RT:is_loop_pak: No loop: on ifp: ge-0/0/1.0, addr: 5.1.1.12, rtt_idx:0 May 11 20:26:37 20:26:37.706938:CID-0:RT:[JSF]Normal interest check. regd plugins 31, enabled impl mask 0x0 May 11 20:26:37 20:26:37.706938:CID-0:RT:+++++++++++jsf_test_plugin_data_evh: 3 May 11 20:26:37 20:26:37.706938:CID-0:RT:[JSF]Plugins(0x0, count 0) enabled for session = 8589940185, impli mask(0x0), post_nat cnt 0 svc req(0x618541e4) May 11 20:26:37 20:26:37.706938:CID-0:RT:-jsf : no plugin interested for session 8589940185, free sess plugin info May 11 20:26:37 20:26:37.706938:CID-0:RT:[JSF]Releasing plugin info blocks May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_service_lookup(): natp(0x601b4250): app_id, 0(0). May 11 20:26:37 20:26:37.706938:CID-0:RT: service lookup identified service 0. May 11 20:26:37 20:26:37.706938:CID-0:RT: flow_first_final_check: in , out May 11 20:26:37 20:26:37.706938:CID-0:RT:In flow_first_complete_session May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_first_complete_session, pak_ptr: 0x5c1dff88, nsp: 0x601b4250, in_tunnel: 0x0 May 11 20:26:37 20:26:37.706938:CID-0:RT:construct v4 vector for nsp2 and nsp May 11 20:26:37 20:26:37.706938:CID-0:RT: existing vector list 0x200-0x53ac2288. May 11 20:26:37 20:26:37.706938:CID-0:RT: existing vector list 0x200-0x53ac2288. May 11 20:26:37 20:26:37.706938:CID-0:RT: Session (id:5593) created for first pak 200 May 11 20:26:37 20:26:37.706938:CID-0:RT:first pak processing successful May 11 20:26:37 20:26:37.706938:CID-0:RT: flow_first_install_session======> 0x601b4250 May 11 20:26:37 20:26:37.706938:CID-0:RT: nsp 0x601b4250, nsp2 0x601b42e0 May 11 20:26:37 20:26:37.706938:CID-0:RT: make_nsp_ready_no_resolve() May 11 20:26:37 20:26:37.706938:CID-0:RT:flow_ipv4_rt_lkup success 5.1.1.5, iifl 0x4e, oifl 0x4e May 11 20:26:37 20:26:37.706938:CID-0:RT: route lookup: dest-ip 5.1.1.5 orig ifp ge-0/0/1.0 output_ifp ge-0/0/1.0 orig-zone 8 out-zone 8 vsd 0 May 11 20:26:37 20:26:37.706938:CID-0:RT: route to 5.1.1.5 May 11 20:26:37 20:26:37.706938:CID-0:RT:no need update ha May 11 20:26:37 20:26:37.706938:CID-0:RT:Installing c2s NP session wing May 11 20:26:37 20:26:37.706938:CID-0:RT:Installing s2c NP session wing May 11 20:26:37 20:26:37.706938:CID-0:RT:first path session installation succeeded May 11 20:26:37 20:26:37.706938:CID-0:RT: flow got session. May 11 20:26:37 20:26:37.706938:CID-0:RT: flow session id 5593 May 11 20:26:37 20:26:37.706938:CID-0:RT: vector bits 0x200 vector 0x53ac2288 May 11 20:26:37 20:26:37.706938:CID-0:RT:mbuf 0x43e82600, exit nh 0xeed60006 May 11 20:26:37 20:26:37.706938:CID-0:RT: ----- flow_process_pkt rc 0x0 (fp rc 0) May 11 20:27:37 20:27:37.611697:CID-0:RT:jsf sess close notify May 11 20:27:37 20:27:37.611697:CID-0:RT:flow_ipv4_del_flow: sess 5593, in hash 32 May 11 20:27:37 20:27:37.611697:CID-0:RT:flow_ipv4_del_flow: sess 5593, in hash 32