trace_1.5-Q2.txt
All Users
Actions

Authored By

	adestis
	Mon, Jan 5, 2:11 PM

Size

86 KB

Referenced Files

None

Subscribers

None

trace_1.5-Q2.txt
View Options

	trace id 451b0555 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 451b0555 inet trace_table trace_chain verdict continue
	trace id 451b0555 inet trace_table trace_output verdict continue
	trace id 451b0555 inet trace_table trace_output policy accept
	trace id 451b0555 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 451b0555 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 451b0555 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 451b0555 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 451b0555 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 451b0555 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 451b0555 inet trace_table trace_chain verdict continue
	trace id 451b0555 inet trace_table trace_output verdict continue
	trace id 451b0555 inet trace_table trace_output policy accept
	trace id 451b0555 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 451b0555 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 451b0555 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 451b0555 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 451b0555 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 451b0555 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 41b0f429 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 41b0f429 inet trace_table trace_chain verdict continue
	trace id 41b0f429 inet trace_table trace_output verdict continue
	trace id 41b0f429 inet trace_table trace_output policy accept
	trace id 41b0f429 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 41b0f429 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 41b0f429 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 41b0f429 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 41b0f429 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 41b0f429 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 41b0f429 inet trace_table trace_chain verdict continue
	trace id 41b0f429 inet trace_table trace_output verdict continue
	trace id 41b0f429 inet trace_table trace_output policy accept
	trace id 41b0f429 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 41b0f429 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 41b0f429 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 41b0f429 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 41b0f429 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 41b0f429 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id c0aa3400 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id c0aa3400 inet trace_table trace_chain verdict continue
	trace id c0aa3400 inet trace_table trace_output verdict continue
	trace id c0aa3400 inet trace_table trace_output policy accept
	trace id c0aa3400 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id c0aa3400 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out policy accept
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id c0aa3400 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id c0aa3400 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id c0aa3400 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id c0aa3400 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id c0aa3400 inet trace_table trace_chain verdict continue
	trace id c0aa3400 inet trace_table trace_output verdict continue
	trace id c0aa3400 inet trace_table trace_output policy accept
	trace id c0aa3400 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id c0aa3400 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id c0aa3400 inet vrf_zones vrf_zones_ct_out policy accept
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id c0aa3400 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id c0aa3400 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id c0aa3400 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 1b77f712 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 1b77f712 inet trace_table trace_chain verdict continue
	trace id 1b77f712 inet trace_table trace_output verdict continue
	trace id 1b77f712 inet trace_table trace_output policy accept
	trace id 1b77f712 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 1b77f712 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 1b77f712 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 1b77f712 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 1b77f712 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 1b77f712 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 1b77f712 inet trace_table trace_chain verdict continue
	trace id 1b77f712 inet trace_table trace_output verdict continue
	trace id 1b77f712 inet trace_table trace_output policy accept
	trace id 1b77f712 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 1b77f712 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 1b77f712 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 1b77f712 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 1b77f712 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 1b77f712 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 3a439832 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 3a439832 inet trace_table trace_chain verdict continue
	trace id 3a439832 inet trace_table trace_output verdict continue
	trace id 3a439832 inet trace_table trace_output policy accept
	trace id 3a439832 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 3a439832 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 3a439832 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 3a439832 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 3a439832 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 3a439832 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 3a439832 inet trace_table trace_chain verdict continue
	trace id 3a439832 inet trace_table trace_output verdict continue
	trace id 3a439832 inet trace_table trace_output policy accept
	trace id 3a439832 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 3a439832 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 3a439832 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 3a439832 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 3a439832 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 3a439832 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id caa43148 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id caa43148 inet trace_table trace_chain verdict continue
	trace id caa43148 inet trace_table trace_output verdict continue
	trace id caa43148 inet trace_table trace_output policy accept
	trace id caa43148 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id caa43148 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id caa43148 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id caa43148 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id caa43148 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id caa43148 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id caa43148 inet vrf_zones vrf_zones_ct_out policy accept
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id caa43148 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id caa43148 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id caa43148 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id caa43148 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id caa43148 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id caa43148 inet trace_table trace_chain verdict continue
	trace id caa43148 inet trace_table trace_output verdict continue
	trace id caa43148 inet trace_table trace_output policy accept
	trace id caa43148 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id caa43148 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id caa43148 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id caa43148 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id caa43148 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id caa43148 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id caa43148 inet vrf_zones vrf_zones_ct_out policy accept
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id caa43148 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id caa43148 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id caa43148 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id caa43148 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id ad4d3515 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id ad4d3515 inet trace_table trace_chain verdict continue
	trace id ad4d3515 inet trace_table trace_output verdict continue
	trace id ad4d3515 inet trace_table trace_output policy accept
	trace id ad4d3515 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id ad4d3515 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out policy accept
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id ad4d3515 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id ad4d3515 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id ad4d3515 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id ad4d3515 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id ad4d3515 inet trace_table trace_chain verdict continue
	trace id ad4d3515 inet trace_table trace_output verdict continue
	trace id ad4d3515 inet trace_table trace_output policy accept
	trace id ad4d3515 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id ad4d3515 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id ad4d3515 inet vrf_zones vrf_zones_ct_out policy accept
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id ad4d3515 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id ad4d3515 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id ad4d3515 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 54b8c282 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 54b8c282 inet trace_table trace_chain verdict continue
	trace id 54b8c282 inet trace_table trace_output verdict continue
	trace id 54b8c282 inet trace_table trace_output policy accept
	trace id 54b8c282 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 54b8c282 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 54b8c282 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 54b8c282 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 54b8c282 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 54b8c282 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 54b8c282 inet trace_table trace_chain verdict continue
	trace id 54b8c282 inet trace_table trace_output verdict continue
	trace id 54b8c282 inet trace_table trace_output policy accept
	trace id 54b8c282 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 54b8c282 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 54b8c282 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 54b8c282 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 54b8c282 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 54b8c282 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 51b94081 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 51b94081 inet trace_table trace_chain verdict continue
	trace id 51b94081 inet trace_table trace_output verdict continue
	trace id 51b94081 inet trace_table trace_output policy accept
	trace id 51b94081 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 51b94081 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 51b94081 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 51b94081 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 51b94081 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 51b94081 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 51b94081 inet trace_table trace_chain verdict continue
	trace id 51b94081 inet trace_table trace_output verdict continue
	trace id 51b94081 inet trace_table trace_output policy accept
	trace id 51b94081 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 51b94081 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 51b94081 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 51b94081 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 51b94081 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 51b94081 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 55e07890 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 55e07890 inet trace_table trace_chain verdict continue
	trace id 55e07890 inet trace_table trace_output verdict continue
	trace id 55e07890 inet trace_table trace_output policy accept
	trace id 55e07890 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 55e07890 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 55e07890 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 55e07890 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept
	trace id 55e07890 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
	trace id 55e07890 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
	trace id 55e07890 inet trace_table trace_chain verdict continue
	trace id 55e07890 inet trace_table trace_output verdict continue
	trace id 55e07890 inet trace_table trace_output policy accept
	trace id 55e07890 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_IGNORE verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
	trace id 55e07890 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept)
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue)
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out verdict continue
	trace id 55e07890 inet vrf_zones vrf_zones_ct_out policy accept
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
	trace id 55e07890 ip vyos_conntrack VYOS_CT_HELPER verdict return
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER verdict continue
	trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER policy accept
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept)
	trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
	trace id 55e07890 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
	trace id 55e07890 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue
	trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept

File Metadata

Mime Type: text/plain
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3209747
Default Alt Text: trace_1.5-Q2.txt (86 KB)

trace_1.5-Q2.txtAll UsersActions

trace_1.5-Q2.txtView Options

File Metadata

Event Timeline

trace_1.5-Q2.txt
All Users
Actions

trace_1.5-Q2.txt
View Options