HI Guru,
I've configured the flow trace as you mentioned.
@srx> show configuration | display set | match traceoptions
set security flow traceoptions file flowtrace
set security flow traceoptions file size 5m
set security flow traceoptions flag basic-datapath
set security flow traceoptions packet-filter pf1 protocol icmp
set security flow traceoptions packet-filter pf1 source-prefix 10.32.222.254/32
set security flow traceoptions packet-filter pf1 destination-prefix 10.32.43.123/32
set security flow traceoptions packet-filter pf2 protocol icmp
set security flow traceoptions packet-filter pf2 source-prefix 10.32.43.123/32
set security flow traceoptions packet-filter pf2 destination-prefix 10.32.222.254/32
@srx> show log flowtrace | find deny
Pattern not found
{primary:node0}
@srx0>
@srx> show log flowtrace | match 10.32.43.123
Jul 5 14:52:57 14:53:36.842432:CID-2:RT: route to 10.32.43.123
Jul 5 14:52:57 14:53:36.839123:CID-2:RT:<10.32.222.254/101->10.32.43.123/20374;1> matched filter pf1:
Jul 5 14:52:57 14:53:36.839191:CID-2:RT: .local..0:10.32.222.254->10.32.43.123, icmp, (8/0)
Jul 5 14:52:57 14:53:36.839191:CID-2:RT: find flow: table 0x51c672c0, hash 13383(0xffff), sa 10.32.222.254, da 10.32.43.123, sp 101, dp 20374, proto 1, tok 2
Jul 5 14:52:57 14:53:36.839191:CID-2:RT: flow_first_in_dst_nat: in <.local..0>, out <N/A> dst_adr 10.32.43.123, sp 101, dp 20374
Jul 5 14:52:57 14:53:36.839191:CID-2:RT:flow_first_rule_dst_xlate: packet 10.32.222.254->10.32.43.123 nsp2 0.0.0.0->10.32.43.123.
Jul 5 14:52:57 14:53:36.839191:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.222.254, x_dst_ip 10.32.43.123, in ifp .local..0, out ifp N/A sp 101, dp 20374, ip_proto 1, tos 0
Jul 5 14:52:57 14:53:36.839422:CID-2:RT: routed (x_dst_ip 10.32.43.123) from junos-host (.local..0 in 0) to reth2.43, Next-hop: 10.32.43.123
Jul 5 14:52:57 14:53:36.839422:CID-2:RT: 10.32.222.254/2048 -> 10.32.43.123/2424 proto 1
Jul 5 14:52:57 14:53:36.839422:CID-2:RT:is_loop_pak: No loop: on ifp: reth2.43, addr: 10.32.43.123, rtt_idx:0
Jul 5 14:52:58 14:53:37.845441:CID-2:RT:<10.32.222.254/102->10.32.43.123/20374;1> matched filter pf1:
Jul 5 14:52:58 14:53:37.845560:CID-2:RT: .local..0:10.32.222.254->10.32.43.123, icmp, (8/0)
Jul 5 14:52:58 14:53:37.845575:CID-2:RT: find flow: table 0x51c672c0, hash 5431(0xffff), sa 10.32.222.254, da 10.32.43.123, sp 102, dp 20374, proto 1, tok 2
Jul 5 14:52:58 14:53:37.845638:CID-2:RT: flow_first_in_dst_nat: in <.local..0>, out <N/A> dst_adr 10.32.43.123, sp 102, dp 20374
Jul 5 14:52:58 14:53:37.845638:CID-2:RT:flow_first_rule_dst_xlate: packet 10.32.222.254->10.32.43.123 nsp2 0.0.0.0->10.32.43.123.
Jul 5 14:52:58 14:53:37.845638:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.222.254, x_dst_ip 10.32.43.123, in ifp .local..0, out ifp N/A sp 102, dp 20374, ip_proto 1, tos 0
Jul 5 14:52:58 14:53:37.845735:CID-2:RT: routed (x_dst_ip 10.32.43.123) from junos-host (.local..0 in 0) to reth2.43, Next-hop: 10.32.43.123
Jul 5 14:52:58 14:53:37.845735:CID-2:RT: 10.32.222.254/2048 -> 10.32.43.123/60406 proto 1
Jul 5 14:52:58 14:53:37.845735:CID-2:RT:is_loop_pak: No loop: on ifp: reth2.43, addr: 10.32.43.123, rtt_idx:0
Jul 5 14:52:58 14:53:37.847777:CID-2:RT:<10.32.43.123/20374->10.32.222.254/102;1> matched filter pf2:
Jul 5 14:52:58 14:53:37.847777:CID-2:RT: reth2.222:10.32.43.123->10.32.222.254, icmp, (0/0)
Jul 5 14:52:58 14:53:37.847777:CID-2:RT: find flow: table 0x51c672c0, hash 30521(0xffff), sa 10.32.43.123, da 10.32.222.254, sp 20374, dp 102, proto 1, tok 19
Jul 5 14:52:58 14:53:37.848279:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.43.123, x_dst_ip 10.32.222.254, in ifp reth2.222, out ifp N/A sp 20374, dp 102, ip_proto 1, tos 0
Jul 5 14:52:58 14:53:37.848279:CID-2:RT: 10.32.43.123/0 -> 10.32.222.254/62454 proto 1
Jul 5 14:52:58 14:53:37.848279:CID-2:RT: dip id = 0/0, 10.32.43.123/20374->10.32.43.123/20374 protocol 0
Jul 5 14:52:58 14:53:37.848780:CID-2:RT: route lookup: dest-ip 10.32.43.123 orig ifp reth2.222 output_ifp reth2.43 orig-zone 19 out-zone 13 vsd 1
Jul 5 14:52:58 14:53:37.848780:CID-2:RT: route to 10.32.43.123
Jul 5 14:53:01 14:53:41.299517:CID-2:RT:<10.32.43.123/20388->10.32.222.254/0;1> matched filter pf2:
Jul 5 14:53:01 14:53:41.299517:CID-2:RT: reth2.222:10.32.43.123->10.32.222.254, icmp, (0/0)
Jul 5 14:53:01 14:53:41.299517:CID-2:RT: find flow: table 0x51c672c0, hash 34467(0xffff), sa 10.32.43.123, da 10.32.222.254, sp 20388, dp 0, proto 1, tok 19
Jul 5 14:53:01 14:53:41.300018:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.43.123, x_dst_ip 10.32.222.254, in ifp reth2.222, out ifp N/A sp 20388, dp 0, ip_proto 1, tos 0
Jul 5 14:53:01 14:53:41.300018:CID-2:RT: 10.32.43.123/0 -> 10.32.222.254/18710 proto 1
Jul 5 14:53:01 14:53:41.300018:CID-2:RT: dip id = 0/0, 10.32.43.123/20388->10.32.43.123/20388 protocol 0
Jul 5 14:53:01 14:53:41.300608:CID-2:RT: route lookup: dest-ip 10.32.43.123 orig ifp reth2.222 output_ifp reth2.43 orig-zone 19 out-zone 13 vsd 1
Jul 5 14:53:01 14:53:41.300671:CID-2:RT: route to 10.32.43.123
Jul 5 14:53:01 14:53:41.297230:CID-2:RT:<10.32.222.254/0->10.32.43.123/20388;1> matched filter pf1:
Jul 5 14:53:01 14:53:41.297288:CID-2:RT: .local..0:10.32.222.254->10.32.43.123, icmp, (8/0)
Jul 5 14:53:01 14:53:41.297288:CID-2:RT: find flow: table 0x51c672c0, hash 61697(0xffff), sa 10.32.222.254, da 10.32.43.123, sp 0, dp 20388, proto 1, tok 2
Jul 5 14:53:01 14:53:41.297288:CID-2:RT: flow_first_in_dst_nat: in <