# run show log flow-trace
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow0: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow0: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648602:CID-1:RT:filter 0 name f0 is set
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow1: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow1: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow0: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow0: Destination ID set to 2
Jun 17 10:31:42 10:31:50.362687:CID-2:RT:filter 0 name f0 is set
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow2: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow2: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow1: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow1: Destination ID set to 2
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow3: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow3: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow2: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow2: Destination ID set to 2
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow4: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.647804:CID-1:CTRL:flow4: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow3: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow3: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow5: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow5: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow4: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358090:CID-2:CTRL:flow4: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow6: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow6: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358411:CID-2:CTRL:flow5: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358411:CID-2:CTRL:flow5: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow7: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow7: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358411:CID-2:CTRL:flow6: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358411:CID-2:CTRL:flow6: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow8: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow8: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow7: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow7: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow9: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow9: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow8: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow8: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow10: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow10: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow9: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow9: Destination ID set to 2
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow11: Rate limit changed to 0
Jun 17 10:31:42 10:31:42.648151:CID-1:CTRL:flow11: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow10: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow10: Destination ID set to 2
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow11: Rate limit changed to 0
Jun 17 10:31:42 10:31:50.358553:CID-2:CTRL:flow11: Destination ID set to 2
Jun 17 10:32:04 10:32:04.003393:CID-1:RT:<10.8.20.22/1->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:04 10:32:04.003393:CID-1:RT:packet [84] ipid = 20573, @0x4320c51c
Jun 17 10:32:04 10:32:04.003393:CID-1:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 15, common flag 0x0, mbuf 0x4320c300, rtbl_idx = 0
Jun 17 10:32:04 10:32:04.003469:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:04 10:32:04.003469:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:04 10:32:04.003469:CID-1:RT: find flow: table 0x511609a0, hash 57765(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 1, dp 6717, proto 1, tok 6
Jun 17 10:32:04 10:32:04.003469:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:04 10:32:04.003469:CID-1:RT: flow_first_create_session
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 1, dp 6717
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 1, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x11a3d,0x1a3d)
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/14389 proto 1
Jun 17 10:32:04 10:32:04.003590:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/14389 proto 1
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:04 10:32:04.003590:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:04 10:32:04.003885:CID-1:RT: flow find session returns error.
Jun 17 10:32:04 10:32:04.003885:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:04 10:32:04.384754:CID-1:RT:jsf sess close notify
Jun 17 10:32:04 10:32:04.384774:CID-1:RT:flow_ipv4_del_flow: sess 288214, in hash 32
Jun 17 10:32:04 10:32:04.384774:CID-1:RT:ha_ifp: reth1.0
Jun 17 10:32:05 10:32:05.003313:CID-1:RT:<10.8.20.22/2->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:05 10:32:05.003313:CID-1:RT:packet [84] ipid = 20574, @0x4367539c
Jun 17 10:32:05 10:32:05.003313:CID-1:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 15, common flag 0x0, mbuf 0x43675180, rtbl_idx = 0
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: find flow: table 0x511609a0, hash 49333(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 2, dp 6717, proto 1, tok 6
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: flow_first_create_session
Jun 17 10:32:05 10:32:05.003313:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 2, dp 6717
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 2, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x21a3d,0x1a3d)
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/31284 proto 1
Jun 17 10:32:05 10:32:05.003643:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/31284 proto 1
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: flow find session returns error.
Jun 17 10:32:05 10:32:05.003643:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:06 10:32:06.003356:CID-1:RT:<10.8.20.22/3->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:06 10:32:06.003356:CID-1:RT:packet [84] ipid = 20575, @0x4319dd1c
Jun 17 10:32:06 10:32:06.003356:CID-1:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 15, common flag 0x0, mbuf 0x4319db00, rtbl_idx = 0
Jun 17 10:32:06 10:32:06.003356:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: find flow: table 0x511609a0, hash 10181(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 3, dp 6717, proto 1, tok 6
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: flow_first_create_session
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 3, dp 6717
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 3, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x31a3d,0x1a3d)
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/23603 proto 1
Jun 17 10:32:06 10:32:06.003544:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/23603 proto 1
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: flow find session returns error.
Jun 17 10:32:06 10:32:06.003544:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:06 10:32:06.386710:CID-1:RT:jsf sess close notify
Jun 17 10:32:06 10:32:06.386710:CID-1:RT:flow_ipv4_del_flow: sess 287850, in hash 32
Jun 17 10:32:06 10:32:06.386728:CID-1:RT:ha_ifp: reth1.0
Jun 17 10:32:06 10:32:06.386728:CID-1:RT:jsf sess close notify
Jun 17 10:32:06 10:32:06.386728:CID-1:RT:flow_ipv4_del_flow: sess 289155, in hash 32
Jun 17 10:32:06 10:32:06.386728:CID-1:RT:ha_ifp: reth1.0
Jun 17 10:32:07 10:32:07.003295:CID-1:RT:<10.8.20.22/4->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:packet [84] ipid = 20576, @0x4319dd1c
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 15, common flag 0x0, mbuf 0x4319db00, rtbl_idx = 0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: find flow: table 0x511609a0, hash 1749(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 4, dp 6717, proto 1, tok 6
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: flow_first_create_session
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 4, dp 6717
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 4, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x41a3d,0x1a3d)
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/39218 proto 1
Jun 17 10:32:07 10:32:07.003467:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/39218 proto 1
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: flow find session returns error.
Jun 17 10:32:07 10:32:07.003467:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:<10.8.20.22/5->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:packet [84] ipid = 20577, @0x4320c51c
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:---- flow_process_pkt: (thd 3): flow_ctxt type 15, common flag 0x0, mbuf 0x4320c300, rtbl_idx = 0
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: find flow: table 0x511609a0, hash 26085(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 5, dp 6717, proto 1, tok 6
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: flow_first_create_session
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 5, dp 6717
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 5, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:08 10:32:08.003347:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:08 10:32:08.003347:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x51a3d,0x1a3d)
Jun 17 10:32:08 10:32:08.003786:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/29233 proto 1
Jun 17 10:32:08 10:32:08.003786:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/29233 proto 1
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: flow find session returns error.
Jun 17 10:32:08 10:32:08.003786:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:08 10:32:08.386970:CID-1:RT:jsf sess close notify
Jun 17 10:32:08 10:32:08.386970:CID-1:RT:flow_ipv4_del_flow: sess 290026, in hash 32
Jun 17 10:32:08 10:32:08.386970:CID-1:RT:ha_ifp: reth1.0
Jun 17 10:32:08 10:32:08.386970:CID-1:RT:jsf sess close notify
Jun 17 10:32:08 10:32:08.386970:CID-1:RT:flow_ipv4_del_flow: sess 289460, in hash 32
Jun 17 10:32:08 10:32:08.387031:CID-1:RT:ha_ifp: reth1.0
Jun 17 10:32:09 10:32:09.003377:CID-1:RT:<10.8.20.22/6->172.16.1.10/6717;1> matched filter f0:
Jun 17 10:32:09 10:32:09.003377:CID-1:RT:packet [84] ipid = 20578, @0x432dda1c
Jun 17 10:32:09 10:32:09.003377:CID-1:RT:---- flow_process_pkt: (thd 2): flow_ctxt type 15, common flag 0x0, mbuf 0x432dd800, rtbl_idx = 0
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: flow process pak fast ifl 68 in_ifp reth1.0
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: reth1.0:10.8.20.22->172.16.1.10, icmp, (8/0)
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: find flow: table 0x511609a0, hash 17653(0xffff), sa 10.8.20.22, da 172.16.1.10, sp 6, dp 6717, proto 1, tok 6
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: flow_first_create_session
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: flow_first_in_dst_nat: in <reth1.0>, out <N/A> dst_adr 172.16.1.10, sp 6, dp 6717
Jun 17 10:32:09 10:32:09.003377:CID-1:RT: chose interface reth1.0 as incoming nat if.
Jun 17 10:32:09 10:32:09.003377:CID-1:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 172.16.1.10(6717)
Jun 17 10:32:09 10:32:09.003729:CID-1:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.8.20.22, x_dst_ip 172.16.1.10, in ifp reth1.0, out ifp N/A sp 6, dp 6717, ip_proto 1, tos 0
Jun 17 10:32:09 10:32:09.003729:CID-1:RT:Doing DESTINATION addr route-lookup
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: routed (x_dst_ip 172.16.1.10) from trust (reth1.0 in 1) to reth1.0, Next-hop: 172.16.6.6
Jun 17 10:32:09 10:32:09.003729:CID-1:RT:flow_first_policy_search: policy search from zone trust-> zone trust (0x0,0x61a3d,0x1a3d)
Jun 17 10:32:09 10:32:09.003729:CID-1:RT:Policy lkup: vsys 0 zone(6:trust) -> zone(6:trust) scope:0
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/19248 proto 1
Jun 17 10:32:09 10:32:09.003729:CID-1:RT:Policy lkup: vsys 0 zone(5:Unknown) -> zone(5:Unknown) scope:0
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: 10.8.20.22/2048 -> 172.16.1.10/19248 proto 1
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: app 0, timeout 60s, curr ageout 60s
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: packet dropped, denied by policy
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: denied by policy default-policy-00(2), dropping pkt
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: packet dropped, policy deny.
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: flow find session returns error.
Jun 17 10:32:09 10:32:09.003729:CID-1:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jun 17 10:32:10 10:32:10.384859:CID-1:RT:jsf sess close notify
Jun 17 10:32:10 10:32:10.384859:CID-1:RT:flow_ipv4_del_flow: sess 288575, in hash 32
Jun 17 10:32:10 10:32:10.384878:CID-1:RT:ha_ifp: reth1.0
flow trace attached looks like some policy is dropping the packet