SRX Services Gateway
Reply
New User
song2010
Posts: 1
Registered: ‎12-25-2010
0

SRX3400 flow debug always include VRRP message?

Hello experts,

  I'm new to the SRX, recently I'm playing with the flow debug, configuration like below

 

show security flow
traceoptions {
    file debugtraffic size 5000000 files 10 world-readable;
    flag basic-datapath;
    packet-filter M2 {
        source-prefix 1.1.1.1/32;
        destination-prefix 2.2.2.2/32;
    }
}

but  when look at the log,  VRRP messages??(224.0.0.18) were included, sw is 10.2R1.8,  appreciate your comment.

 

 

C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_rule_get_ifmip_rt: ctx_type 0, ctx-id 90
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_rule_get_ifmip_rt: ctx_type 1, ctx-id 6
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_rule_get_ifmip_rt: ctx_type 2, ctx-id 5
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_get_mapped_or_incoming_dip: map_index 0 for dst/new IP 224.0.0.18/0.0.0.0 on interface reth1.0(root)
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_get_mapped_or_incoming_dip: diff 0, calls 0
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_dst_xlate_ip_port: src-ip 192.168.19.178, dst-ip 224.0.0.18, dst_port 1
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_dst_rule_match: lsys 0, src-ip 192.168.19.178, dst-ip 224.0.0.18, dst-port 1
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_dst_rule_match: nat-rule-tree not inited, aka, no rule exists, src 0, dst 0
 
C-02:smileytongue:IC-00:THREAD_ID-30:RT:nat_dst_xlate_ip_port: no rule found...
Regards
Song
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.