Hi Wojtek,
I've configured a flowtrace to capture a specific traffic between 10.32.43.123 and 10.32.222.254
I do see some packet dropped
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:Reject route in make_nsp_ready_no_resolve. zone mismatch
...
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: packet dropped, failed to install nsp2
Jul 6 21:49:41 srx0_tor clear-log[88080]: logfile cleared
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:<10.32.43.123/22621->10.32.222.254/0;1> matched filter pf2:
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:packet [84] ipid = 8849, @0x437a1f24
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:---- flow_process_pkt: (thd 4): flow_ctxt type 15, common flag 0x0, mbuf 0x437a1d00, rtbl_idx = 0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: flow process pak fast ifl 305 in_ifp reth2.222
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: reth2.222:10.32.43.123->10.32.222.254, icmp, (0/0)
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: find flow: table 0x51c672c0, hash 11421(0xffff), sa 10.32.43.123, da 10.32.222.254, sp 22621, dp 0, proto 1, tok 19
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:check self-traffic on reth2.222, in_tunnel 0x0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:retcode: 0x204
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:pak_for_self : proto 1, dst port 0, action 0x4
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: flow_first_create_session
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: flow_first_in_dst_nat: in <reth2.222>, out <N/A> dst_adr 10.32.222.254, sp 22621, dp 0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: chose interface reth2.222 as incoming nat if.
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 10.32.222.254(0)
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.43.123, x_dst_ip 10.32.222.254, in ifp reth2.222, out ifp N/A sp 22621, dp 0, ip_proto 1, tos 0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:Doing DESTINATION addr route-lookup
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: routed (x_dst_ip 10.32.222.254) from admin-v222 (reth2.222 in 1) to .local..0, Next-hop: 10.32.222.254
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:flow_first_policy_search: policy search from zone admin-v222-> zone junos-host (0x0,0x585d0000,0x0)
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:Policy lkup: vsys 0 zone(19:admin-v222) -> zone(2:junos-host) scope:0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: 10.32.43.123/0 -> 10.32.222.254/55412 proto 1
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: app 0, timeout 60s, curr ageout 60s
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: permitted by policy self-traffic-policy(1)
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: packet passed, Permitted by policy.
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False.
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: dip id = 0/0, 10.32.43.123/22621->10.32.43.123/22621 protocol 0
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: choose interface .local..0 as outgoing phy if
Jul 6 21:51:03 21:51:43.017760:CID-2:RT:is_loop_pak: No loop: ifp doesnt match .local..0 vs looked-up: reth2.222, addr: 10.32.222.254, rtt_idx: 0, addr_type:0x3
Jul 6 21:51:03 21:51:43.017760:CID-2:RT: check nsrp pak fwd: in_tun=0x0, VSD 0 for out ifp .local..0
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf : Alloc sess plugin info for session 25769876461
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:[JSF]Normal interest check. regd plugins 19, enabled impl mask 0x0
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 2, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 3, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 5, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 6, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 7, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 8, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 12, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 15, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:+++++++++++jsf_test_plugin_data_evh: 3
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 16, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 22, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 23, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 26, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 27, svc_req 0x0, impl mask 0x0. rc 2
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf int check: plugin id 28, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:[JSF]Plugins(0x0, count 0) enabled for session = 0, impli mask(0x6), post_nat cnt 72685 svc req(0x0)
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:-jsf : no plugin interested for session 25769876461, free sess plugin info
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:flow_first_service_lookup(): natp(0x58087440): app_id, 0(0).
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: service lookup identified service 0.
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: flow_first_final_check: in <reth2.222>, out <.local..0>
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:flow_first_complete_session, pak_ptr: 0x5126f070, nsp: 0x58087440, in_tunnel: 0x0
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:construct v4 vector for nsp2
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: existing vector list 0x220-0x4adef820.
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: Session (id:72685) created for first pak 220
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: flow_first_install_session======> 0x58087440
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: nsp 0x58087440, nsp2 0x580874c0
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: make_nsp_ready_no_resolve()
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: route lookup: dest-ip 10.32.43.123 orig ifp reth2.222 output_ifp reth2.43 orig-zone 19 out-zone 13 vsd 1
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:Reject route in make_nsp_ready_no_resolve. zone mismatch
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: route to 10.32.43.123
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:Conflict session (72729) is VALID state
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:nat_install_wing: set nat invalid 72685, timeout 1, reason 0
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: packet dropped, failed to install nsp2
Jul 6 21:51:03 21:51:43.018264:CID-2:RT:failed to install nsp2
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: flow find session returns error.
Jul 6 21:51:03 21:51:43.018264:CID-2:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jul 6 21:51:03 21:51:43.015082:CID-2:RT:<10.32.222.254/0->10.32.43.123/22621;1> matched filter pf1:
Jul 6 21:51:03 21:51:43.015082:CID-2:RT:packet [84] ipid = 27829, @0x450102d2
Jul 6 21:51:03 21:51:43.015133:CID-2:RT:---- flow_process_pkt: (thd 5): flow_ctxt type 0, common flag 0x0, mbuf 0x45004c80, rtbl_idx = 0
Jul 6 21:51:03 21:51:43.015150:CID-2:RT: in_ifp <junos-host:.local..0>
Jul 6 21:51:03 21:51:43.015150:CID-2:RT:flow_process_pkt_exception: setting rtt in lpak to 0x70053d50
Jul 6 21:51:03 21:51:43.015150:CID-2:RT:Using vr id from pfe_tag with value= 0
Jul 6 21:51:03 21:51:43.015150:CID-2:RT:Changing lpak->in_ifp from:.local..0 -> to:.local..0
Jul 6 21:51:03 21:51:43.015150:CID-2:RT:Over-riding lpak->vsys with 0
Jul 6 21:51:03 21:51:43.015150:CID-2:RT: .local..0:10.32.222.254->10.32.43.123, icmp, (8/0)
Jul 6 21:51:03 21:51:43.015207:CID-2:RT: find flow: table 0x51c672c0, hash 59873(0xffff), sa 10.32.222.254, da 10.32.43.123, sp 0, dp 22621, proto 1, tok 2
Jul 6 21:51:03 21:51:43.015253:CID-2:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jul 6 21:51:03 21:51:43.015253:CID-2:RT: flow_first_create_session
Jul 6 21:51:03 21:51:43.015276:CID-2:RT:(flow_first_create_session) usp_tagged set session as mng session
Jul 6 21:51:03 21:51:43.015276:CID-2:RT: flow_first_in_dst_nat: in <.local..0>, out <N/A> dst_adr 10.32.43.123, sp 0, dp 22621
Jul 6 21:51:03 21:51:43.015306:CID-2:RT: chose interface .local..0 as incoming nat if.
Jul 6 21:51:03 21:51:43.015306:CID-2:RT:flow_first_rule_dst_xlate: packet 10.32.222.254->10.32.43.123 nsp2 0.0.0.0->10.32.43.123.
Jul 6 21:51:03 21:51:43.015306:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.222.254, x_dst_ip 10.32.43.123, in ifp .local..0, out ifp N/A sp 0, dp 22621, ip_proto 1, tos 0
Jul 6 21:51:03 21:51:43.015372:CID-2:RT:Doing DESTINATION addr route-lookup
Jul 6 21:51:03 21:51:43.015372:CID-2:RT: routed (x_dst_ip 10.32.43.123) from junos-host (.local..0 in 0) to reth2.43, Next-hop: 10.32.43.123
Jul 6 21:51:03 21:51:43.015372:CID-2:RT:flow_first_policy_search: policy search from zone junos-host-> zone management-v43 (0x0,0x585d,0x585d)
Jul 6 21:51:03 21:51:43.015372:CID-2:RT:Policy lkup: vsys 0 zone(2:junos-host) -> zone(13:management-v43) scope:0
Jul 6 21:51:03 21:51:43.015430:CID-2:RT: 10.32.222.254/2048 -> 10.32.43.123/53364 proto 1
Jul 6 21:51:03 21:51:43.015442:CID-2:RT: app 0, timeout 60s, curr ageout 60s
Jul 6 21:51:03 21:51:43.015442:CID-2:RT: permitted by policy self-traffic-policy(1)
Jul 6 21:51:03 21:51:43.015442:CID-2:RT: packet passed, Permitted by policy.
Jul 6 21:51:03 21:51:43.015492:CID-2:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False
Jul 6 21:51:03 21:51:43.015504:CID-2:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False.
Jul 6 21:51:03 21:51:43.015504:CID-2:RT: dip id = 0/0, 10.32.222.254/0->10.32.222.254/0 protocol 0
Jul 6 21:51:03 21:51:43.015504:CID-2:RT: choose interface reth2.43 as outgoing phy if
Jul 6 21:51:03 21:51:43.015504:CID-2:RT:is_loop_pak: No loop: on ifp: reth2.43, addr: 10.32.43.123, rtt_idx:0
Jul 6 21:51:03 21:51:43.015564:CID-2:RT: check nsrp pak fwd: in_tun=0x0, VSD 1 for out ifp reth2.43
Jul 6 21:51:03 21:51:43.015578:CID-2:RT: vsd 1 is active
Jul 6 21:51:03 21:51:43.015578:CID-2:RT:-jsf : Alloc sess plugin info for session 25769876505
Jul 6 21:51:03 21:51:43.015578:CID-2:RT:[JSF]Normal interest check. regd plugins 19, enabled impl mask 0x0
Jul 6 21:51:03 21:51:43.015578:CID-2:RT:-jsf int check: plugin id 2, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 3, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 5, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 6, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 7, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 8, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 12, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 15, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:+++++++++++jsf_test_plugin_data_evh: 3
Jul 6 21:51:03 21:51:43.015627:CID-2:RT:-jsf int check: plugin id 16, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015734:CID-2:RT:-jsf int check: plugin id 22, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015755:CID-2:RT:-jsf int check: plugin id 23, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015755:CID-2:RT:-jsf int check: plugin id 26, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015755:CID-2:RT:-jsf int check: plugin id 27, svc_req 0x0, impl mask 0x0. rc 2
Jul 6 21:51:03 21:51:43.015755:CID-2:RT:-jsf int check: plugin id 28, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:03 21:51:43.015792:CID-2:RT:[JSF]Plugins(0x0, count 0) enabled for session = 22621, impli mask(0x6), post_nat cnt 72729 svc req(0x0)
Jul 6 21:51:03 21:51:43.015811:CID-2:RT:-jsf : no plugin interested for session 25769876505, free sess plugin info
Jul 6 21:51:03 21:51:43.015811:CID-2:RT:flow_first_service_lookup(): natp(0x5808c2a0): app_id, 0(0).
Jul 6 21:51:03 21:51:43.015811:CID-2:RT: service lookup identified service 0.
Jul 6 21:51:03 21:51:43.015811:CID-2:RT: flow_first_final_check: in <.local..0>, out <reth2.43>
Jul 6 21:51:03 21:51:43.015861:CID-2:RT:flow_first_complete_session, pak_ptr: 0x5128ecb8, nsp: 0x5808c2a0, in_tunnel: 0x0
Jul 6 21:51:03 21:51:43.015874:CID-2:RT:construct v4 vector for nsp2
Jul 6 21:51:03 21:51:43.015874:CID-2:RT: existing vector list 0x220-0x4adef820.
Jul 6 21:51:03 21:51:43.015874:CID-2:RT: Session (id:72729) created for first pak 220
Jul 6 21:51:03 21:51:43.015874:CID-2:RT: flow_first_install_session======> 0x5808c2a0
Jul 6 21:51:03 21:51:43.015874:CID-2:RT: nsp 0x5808c2a0, nsp2 0x5808c320
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: make_nsp_ready_no_resolve()
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: route lookup: dest-ip 10.32.222.254 orig ifp .local..0 output_ifp .local..0 orig-zone 2 out-zone 2 vsd 0
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: route to 10.32.222.254
Jul 6 21:51:03 21:51:43.015931:CID-2:RT:Installing c2s NP session wing
Jul 6 21:51:03 21:51:43.015931:CID-2:RT:Installing s2c NP session wing
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: flow got session.
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: flow session id 72729
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: vector bits 0x220 vector 0x4adef820
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: vsd 1 is active
Jul 6 21:51:03 21:51:43.015931:CID-2:RT:mbuf 0x45004c80, exit nh 0x17443c4
Jul 6 21:51:03 21:51:43.015931:CID-2:RT:flow_process_pkt_exception: Freeing lpak 0x5128ecb8 associated with mbuf 0x45004c80
Jul 6 21:51:03 21:51:43.015931:CID-2:RT: ----- flow_process_pkt rc 0x0 (fp rc 0)
Jul 6 21:51:03 21:51:43.632664:CID-2:RT:jsf sess close notify
Jul 6 21:51:03 21:51:43.632664:CID-2:RT:flow_ipv4_del_flow: sess 72685, in hash 32
Jul 6 21:51:04 21:51:44.031234:CID-2:RT:<10.32.222.254/1->10.32.43.123/22621;1> matched filter pf1:
Jul 6 21:51:04 21:51:44.031234:CID-2:RT:packet [84] ipid = 27834, @0x44ff40d2
Jul 6 21:51:04 21:51:44.031297:CID-2:RT:---- flow_process_pkt: (thd 9): flow_ctxt type 0, common flag 0x0, mbuf 0x44fb0680, rtbl_idx = 0
Jul 6 21:51:04 21:51:44.031297:CID-2:RT: in_ifp <junos-host:.local..0>
Jul 6 21:51:04 21:51:44.031297:CID-2:RT:flow_process_pkt_exception: setting rtt in lpak to 0x70053d50
Jul 6 21:51:04 21:51:44.031297:CID-2:RT:Using vr id from pfe_tag with value= 0
Jul 6 21:51:04 21:51:44.031297:CID-2:RT:Changing lpak->in_ifp from:.local..0 -> to:.local..0
Jul 6 21:51:04 21:51:44.031356:CID-2:RT:Over-riding lpak->vsys with 0
Jul 6 21:51:04 21:51:44.031356:CID-2:RT: .local..0:10.32.222.254->10.32.43.123, icmp, (8/0)
Jul 6 21:51:04 21:51:44.031377:CID-2:RT: find flow: table 0x51c672c0, hash 2769(0xffff), sa 10.32.222.254, da 10.32.43.123, sp 1, dp 22621, proto 1, tok 2
Jul 6 21:51:04 21:51:44.031377:CID-2:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jul 6 21:51:04 21:51:44.031430:CID-2:RT: flow_first_create_session
Jul 6 21:51:04 21:51:44.031444:CID-2:RT:(flow_first_create_session) usp_tagged set session as mng session
Jul 6 21:51:04 21:51:44.031444:CID-2:RT: flow_first_in_dst_nat: in <.local..0>, out <N/A> dst_adr 10.32.43.123, sp 1, dp 22621
Jul 6 21:51:04 21:51:44.031444:CID-2:RT: chose interface .local..0 as incoming nat if.
Jul 6 21:51:04 21:51:44.031444:CID-2:RT:flow_first_rule_dst_xlate: packet 10.32.222.254->10.32.43.123 nsp2 0.0.0.0->10.32.43.123.
Jul 6 21:51:04 21:51:44.031505:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.222.254, x_dst_ip 10.32.43.123, in ifp .local..0, out ifp N/A sp 1, dp 22621, ip_proto 1, tos 0
Jul 6 21:51:04 21:51:44.031516:CID-2:RT:Doing DESTINATION addr route-lookup
Jul 6 21:51:04 21:51:44.031557:CID-2:RT: routed (x_dst_ip 10.32.43.123) from junos-host (.local..0 in 0) to reth2.43, Next-hop: 10.32.43.123
Jul 6 21:51:04 21:51:44.031577:CID-2:RT:flow_first_policy_search: policy search from zone junos-host-> zone management-v43 (0x0,0x1585d,0x585d)
Jul 6 21:51:04 21:51:44.031577:CID-2:RT:Policy lkup: vsys 0 zone(2:junos-host) -> zone(13:management-v43) scope:0
Jul 6 21:51:04 21:51:44.031577:CID-2:RT: 10.32.222.254/2048 -> 10.32.43.123/46297 proto 1
Jul 6 21:51:04 21:51:44.031633:CID-2:RT: app 0, timeout 60s, curr ageout 60s
Jul 6 21:51:04 21:51:44.031633:CID-2:RT: permitted by policy self-traffic-policy(1)
Jul 6 21:51:04 21:51:44.031633:CID-2:RT: packet passed, Permitted by policy.
Jul 6 21:51:04 21:51:44.031661:CID-2:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False
Jul 6 21:51:04 21:51:44.031661:CID-2:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False.
Jul 6 21:51:04 21:51:44.031661:CID-2:RT: dip id = 0/0, 10.32.222.254/1->10.32.222.254/1 protocol 0
Jul 6 21:51:04 21:51:44.031710:CID-2:RT: choose interface reth2.43 as outgoing phy if
Jul 6 21:51:04 21:51:44.031710:CID-2:RT:is_loop_pak: No loop: on ifp: reth2.43, addr: 10.32.43.123, rtt_idx:0
Jul 6 21:51:04 21:51:44.031735:CID-2:RT: check nsrp pak fwd: in_tun=0x0, VSD 1 for out ifp reth2.43
Jul 6 21:51:04 21:51:44.031735:CID-2:RT: vsd 1 is active
Jul 6 21:51:04 21:51:44.031735:CID-2:RT:-jsf : Alloc sess plugin info for session 25769876464
Jul 6 21:51:04 21:51:44.031735:CID-2:RT:[JSF]Normal interest check. regd plugins 19, enabled impl mask 0x0
Jul 6 21:51:04 21:51:44.031785:CID-2:RT:-jsf int check: plugin id 2, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031785:CID-2:RT:-jsf int check: plugin id 3, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031797:CID-2:RT:-jsf int check: plugin id 5, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031797:CID-2:RT:-jsf int check: plugin id 6, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031797:CID-2:RT:-jsf int check: plugin id 7, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031797:CID-2:RT:-jsf int check: plugin id 8, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031859:CID-2:RT:-jsf int check: plugin id 12, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031859:CID-2:RT:-jsf int check: plugin id 15, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:+++++++++++jsf_test_plugin_data_evh: 3
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 16, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 22, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 23, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 26, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 27, svc_req 0x0, impl mask 0x0. rc 2
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:-jsf int check: plugin id 28, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.031876:CID-2:RT:[JSF]Plugins(0x0, count 0) enabled for session = 22621, impli mask(0x6), post_nat cnt 72688 svc req(0x0)
Jul 6 21:51:04 21:51:44.031970:CID-2:RT:-jsf : no plugin interested for session 25769876464, free sess plugin info
Jul 6 21:51:04 21:51:44.031970:CID-2:RT:flow_first_service_lookup(): natp(0x58087998): app_id, 0(0).
Jul 6 21:51:04 21:51:44.031970:CID-2:RT: service lookup identified service 0.
Jul 6 21:51:04 21:51:44.031970:CID-2:RT: flow_first_final_check: in <.local..0>, out <reth2.43>
Jul 6 21:51:04 21:51:44.031970:CID-2:RT:flow_first_complete_session, pak_ptr: 0x5130ecb8, nsp: 0x58087998, in_tunnel: 0x0
Jul 6 21:51:04 21:51:44.031970:CID-2:RT:construct v4 vector for nsp2
Jul 6 21:51:04 21:51:44.031970:CID-2:RT: existing vector list 0x220-0x4adef820.
Jul 6 21:51:04 21:51:44.032059:CID-2:RT: Session (id:72688) created for first pak 220
Jul 6 21:51:04 21:51:44.032067:CID-2:RT: flow_first_install_session======> 0x58087998
Jul 6 21:51:04 21:51:44.032067:CID-2:RT: nsp 0x58087998, nsp2 0x58087a18
Jul 6 21:51:04 21:51:44.032067:CID-2:RT: make_nsp_ready_no_resolve()
Jul 6 21:51:04 21:51:44.032067:CID-2:RT: route lookup: dest-ip 10.32.222.254 orig ifp .local..0 output_ifp .local..0 orig-zone 2 out-zone 2 vsd 0
Jul 6 21:51:04 21:51:44.032128:CID-2:RT: route to 10.32.222.254
Jul 6 21:51:04 21:51:44.032136:CID-2:RT:Installing c2s NP session wing
Jul 6 21:51:04 21:51:44.032136:CID-2:RT:Installing s2c NP session wing
Jul 6 21:51:04 21:51:44.032136:CID-2:RT: flow got session.
Jul 6 21:51:04 21:51:44.032136:CID-2:RT: flow session id 72688
Jul 6 21:51:04 21:51:44.032185:CID-2:RT: vector bits 0x220 vector 0x4adef820
Jul 6 21:51:04 21:51:44.032198:CID-2:RT: vsd 1 is active
Jul 6 21:51:04 21:51:44.032198:CID-2:RT:mbuf 0x44fb0680, exit nh 0x17443c4
Jul 6 21:51:04 21:51:44.032198:CID-2:RT:flow_process_pkt_exception: Freeing lpak 0x5130ecb8 associated with mbuf 0x44fb0680
Jul 6 21:51:04 21:51:44.032198:CID-2:RT: ----- flow_process_pkt rc 0x0 (fp rc 0)
Jul 6 21:51:04 21:51:44.033561:CID-2:RT:<10.32.43.123/22621->10.32.222.254/1;1> matched filter pf2:
Jul 6 21:51:04 21:51:44.033561:CID-2:RT:packet [84] ipid = 8965, @0x43a92ba4
Jul 6 21:51:04 21:51:44.033561:CID-2:RT:---- flow_process_pkt: (thd 9): flow_ctxt type 15, common flag 0x0, mbuf 0x43a92980, rtbl_idx = 0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: flow process pak fast ifl 305 in_ifp reth2.222
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: reth2.222:10.32.43.123->10.32.222.254, icmp, (0/0)
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: find flow: table 0x51c672c0, hash 11420(0xffff), sa 10.32.43.123, da 10.32.222.254, sp 22621, dp 1, proto 1, tok 19
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:check self-traffic on reth2.222, in_tunnel 0x0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:retcode: 0x204
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:pak_for_self : proto 1, dst port 1, action 0x4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: flow_first_create_session
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: flow_first_in_dst_nat: in <reth2.222>, out <N/A> dst_adr 10.32.222.254, sp 22621, dp 1
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: chose interface reth2.222 as incoming nat if.
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 10.32.222.254(1)
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:flow_first_routing: vr_id 0, call flow_route_lookup(): src_ip 10.32.43.123, x_dst_ip 10.32.222.254, in ifp reth2.222, out ifp N/A sp 22621, dp 1, ip_proto 1, tos 0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:Doing DESTINATION addr route-lookup
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: routed (x_dst_ip 10.32.222.254) from admin-v222 (reth2.222 in 1) to .local..0, Next-hop: 10.32.222.254
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:flow_first_policy_search: policy search from zone admin-v222-> zone junos-host (0x0,0x585d0001,0x1)
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:Policy lkup: vsys 0 zone(19:admin-v222) -> zone(2:junos-host) scope:0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: 10.32.43.123/0 -> 10.32.222.254/48345 proto 1
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: app 0, timeout 60s, curr ageout 60s
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: permitted by policy self-traffic-policy(1)
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: packet passed, Permitted by policy.
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:flow_first_src_xlate: nat_src_xlated: False, nat_src_xlate_failed: False
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:flow_first_src_xlate: src nat returns status: 0, rule/pool id: 0/0, pst_nat: False.
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: dip id = 0/0, 10.32.43.123/22621->10.32.43.123/22621 protocol 0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: choose interface .local..0 as outgoing phy if
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:is_loop_pak: No loop: ifp doesnt match .local..0 vs looked-up: reth2.222, addr: 10.32.222.254, rtt_idx: 0, addr_type:0x3
Jul 6 21:51:04 21:51:44.034064:CID-2:RT: check nsrp pak fwd: in_tun=0x0, VSD 0 for out ifp .local..0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf : Alloc sess plugin info for session 25769876466
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:[JSF]Normal interest check. regd plugins 19, enabled impl mask 0x0
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 2, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 3, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 5, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 6, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 7, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 8, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 12, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 15, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:+++++++++++jsf_test_plugin_data_evh: 3
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 16, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034064:CID-2:RT:-jsf int check: plugin id 22, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:-jsf int check: plugin id 23, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:-jsf int check: plugin id 26, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:-jsf int check: plugin id 27, svc_req 0x0, impl mask 0x0. rc 2
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:-jsf int check: plugin id 28, svc_req 0x0, impl mask 0x0. rc 4
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:[JSF]Plugins(0x0, count 0) enabled for session = 1, impli mask(0x6), post_nat cnt 72690 svc req(0x0)
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:-jsf : no plugin interested for session 25769876466, free sess plugin info
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:flow_first_service_lookup(): natp(0x58087d28): app_id, 0(0).
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: service lookup identified service 0.
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: flow_first_final_check: in <reth2.222>, out <.local..0>
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:flow_first_complete_session, pak_ptr: 0x5130f070, nsp: 0x58087d28, in_tunnel: 0x0
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:construct v4 vector for nsp2
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: existing vector list 0x220-0x4adef820.
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: Session (id:72690) created for first pak 220
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: flow_first_install_session======> 0x58087d28
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: nsp 0x58087d28, nsp2 0x58087da8
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: make_nsp_ready_no_resolve()
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: route lookup: dest-ip 10.32.43.123 orig ifp reth2.222 output_ifp reth2.43 orig-zone 19 out-zone 13 vsd 1
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:Reject route in make_nsp_ready_no_resolve. zone mismatch
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: route to 10.32.43.123
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:Conflict session (72688) is VALID state
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:nat_install_wing: set nat invalid 72690, timeout 1, reason 0
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: packet dropped, failed to install nsp2
Jul 6 21:51:04 21:51:44.034565:CID-2:RT:failed to install nsp2
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: flow find session returns error.
Jul 6 21:51:04 21:51:44.034565:CID-2:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Jul 6 21:51:05 21:51:45.633776:CID-2:RT:jsf sess close notify
Jul 6 21:51:05 21:51:45.633800:CID-2:RT:flow_ipv4_del_flow: sess 72690, in hash 32
Thx