trace id 451b0555 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 451b0555 inet trace_table trace_chain verdict continue trace id 451b0555 inet trace_table trace_output verdict continue trace id 451b0555 inet trace_table trace_output policy accept trace id 451b0555 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 451b0555 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 451b0555 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 451b0555 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 451b0555 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 451b0555 inet vrf_zones vrf_zones_ct_out verdict continue trace id 451b0555 inet vrf_zones vrf_zones_ct_out policy accept trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 451b0555 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 451b0555 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 451b0555 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 451b0555 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 451b0555 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 451b0555 inet trace_table trace_chain verdict continue trace id 451b0555 inet trace_table trace_output verdict continue trace id 451b0555 inet trace_table trace_output policy accept trace id 451b0555 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 451b0555 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 451b0555 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 451b0555 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 451b0555 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 451b0555 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 451b0555 inet vrf_zones vrf_zones_ct_out verdict continue trace id 451b0555 inet vrf_zones vrf_zones_ct_out policy accept trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 451b0555 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 451b0555 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 451b0555 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 451b0555 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 46448 tcp flags == 0x12 tcp window 65160 trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 451b0555 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 41b0f429 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 41b0f429 inet trace_table trace_chain verdict continue trace id 41b0f429 inet trace_table trace_output verdict continue trace id 41b0f429 inet trace_table trace_output policy accept trace id 41b0f429 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 41b0f429 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 41b0f429 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 41b0f429 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 41b0f429 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 41b0f429 inet vrf_zones vrf_zones_ct_out verdict continue trace id 41b0f429 inet vrf_zones vrf_zones_ct_out policy accept trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 41b0f429 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 41b0f429 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 41b0f429 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 41b0f429 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 41b0f429 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 41b0f429 inet trace_table trace_chain verdict continue trace id 41b0f429 inet trace_table trace_output verdict continue trace id 41b0f429 inet trace_table trace_output policy accept trace id 41b0f429 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 41b0f429 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 41b0f429 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 41b0f429 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 41b0f429 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 41b0f429 inet vrf_zones vrf_zones_ct_out verdict continue trace id 41b0f429 inet vrf_zones vrf_zones_ct_out policy accept trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 41b0f429 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 41b0f429 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 41b0f429 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 41b0f429 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59019 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 509 trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 41b0f429 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id c0aa3400 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id c0aa3400 inet trace_table trace_chain verdict continue trace id c0aa3400 inet trace_table trace_output verdict continue trace id c0aa3400 inet trace_table trace_output policy accept trace id c0aa3400 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id c0aa3400 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id c0aa3400 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id c0aa3400 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id c0aa3400 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id c0aa3400 inet vrf_zones vrf_zones_ct_out verdict continue trace id c0aa3400 inet vrf_zones vrf_zones_ct_out policy accept trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id c0aa3400 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER policy accept trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id c0aa3400 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id c0aa3400 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id c0aa3400 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id c0aa3400 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id c0aa3400 inet trace_table trace_chain verdict continue trace id c0aa3400 inet trace_table trace_output verdict continue trace id c0aa3400 inet trace_table trace_output policy accept trace id c0aa3400 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id c0aa3400 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id c0aa3400 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id c0aa3400 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id c0aa3400 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip protocol tcp ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id c0aa3400 inet vrf_zones vrf_zones_ct_out verdict continue trace id c0aa3400 inet vrf_zones vrf_zones_ct_out policy accept trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id c0aa3400 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id c0aa3400 ip vyos_conntrack OUTPUT_HELPER policy accept trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id c0aa3400 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id c0aa3400 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59020 ip length 75 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 509 trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id c0aa3400 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 1b77f712 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 1b77f712 inet trace_table trace_chain verdict continue trace id 1b77f712 inet trace_table trace_output verdict continue trace id 1b77f712 inet trace_table trace_output policy accept trace id 1b77f712 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 1b77f712 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 1b77f712 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 1b77f712 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 1b77f712 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 1b77f712 inet vrf_zones vrf_zones_ct_out verdict continue trace id 1b77f712 inet vrf_zones vrf_zones_ct_out policy accept trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 1b77f712 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 1b77f712 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 1b77f712 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 1b77f712 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 1b77f712 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 1b77f712 inet trace_table trace_chain verdict continue trace id 1b77f712 inet trace_table trace_output verdict continue trace id 1b77f712 inet trace_table trace_output policy accept trace id 1b77f712 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 1b77f712 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 1b77f712 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 1b77f712 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 1b77f712 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 1b77f712 inet vrf_zones vrf_zones_ct_out verdict continue trace id 1b77f712 inet vrf_zones vrf_zones_ct_out policy accept trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 1b77f712 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 1b77f712 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 1b77f712 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 1b77f712 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59021 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 532 trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 1b77f712 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 3a439832 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 3a439832 inet trace_table trace_chain verdict continue trace id 3a439832 inet trace_table trace_output verdict continue trace id 3a439832 inet trace_table trace_output policy accept trace id 3a439832 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 3a439832 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 3a439832 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 3a439832 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 3a439832 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 3a439832 inet vrf_zones vrf_zones_ct_out verdict continue trace id 3a439832 inet vrf_zones vrf_zones_ct_out policy accept trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 3a439832 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 3a439832 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 3a439832 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 3a439832 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 3a439832 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 3a439832 inet trace_table trace_chain verdict continue trace id 3a439832 inet trace_table trace_output verdict continue trace id 3a439832 inet trace_table trace_output policy accept trace id 3a439832 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 3a439832 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 3a439832 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 3a439832 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 3a439832 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 3a439832 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip protocol tcp ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 3a439832 inet vrf_zones vrf_zones_ct_out verdict continue trace id 3a439832 inet vrf_zones vrf_zones_ct_out policy accept trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 3a439832 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 3a439832 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 3a439832 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 3a439832 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59022 ip length 1188 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 532 trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 3a439832 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id caa43148 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id caa43148 inet trace_table trace_chain verdict continue trace id caa43148 inet trace_table trace_output verdict continue trace id caa43148 inet trace_table trace_output policy accept trace id caa43148 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id caa43148 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id caa43148 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id caa43148 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id caa43148 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id caa43148 inet vrf_zones vrf_zones_ct_out verdict continue trace id caa43148 inet vrf_zones vrf_zones_ct_out policy accept trace id caa43148 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id caa43148 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id caa43148 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id caa43148 ip vyos_conntrack OUTPUT_HELPER policy accept trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id caa43148 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id caa43148 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id caa43148 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id caa43148 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id caa43148 inet trace_table trace_chain verdict continue trace id caa43148 inet trace_table trace_output verdict continue trace id caa43148 inet trace_table trace_output policy accept trace id caa43148 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id caa43148 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id caa43148 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id caa43148 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id caa43148 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id caa43148 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip protocol tcp ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id caa43148 inet vrf_zones vrf_zones_ct_out verdict continue trace id caa43148 inet vrf_zones vrf_zones_ct_out policy accept trace id caa43148 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id caa43148 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id caa43148 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id caa43148 ip vyos_conntrack OUTPUT_HELPER policy accept trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id caa43148 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id caa43148 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59023 ip length 1616 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id caa43148 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id ad4d3515 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id ad4d3515 inet trace_table trace_chain verdict continue trace id ad4d3515 inet trace_table trace_output verdict continue trace id ad4d3515 inet trace_table trace_output policy accept trace id ad4d3515 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id ad4d3515 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id ad4d3515 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id ad4d3515 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id ad4d3515 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id ad4d3515 inet vrf_zones vrf_zones_ct_out verdict continue trace id ad4d3515 inet vrf_zones vrf_zones_ct_out policy accept trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id ad4d3515 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER policy accept trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id ad4d3515 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id ad4d3515 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id ad4d3515 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id ad4d3515 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id ad4d3515 inet trace_table trace_chain verdict continue trace id ad4d3515 inet trace_table trace_output verdict continue trace id ad4d3515 inet trace_table trace_output policy accept trace id ad4d3515 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id ad4d3515 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id ad4d3515 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id ad4d3515 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id ad4d3515 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id ad4d3515 inet vrf_zones vrf_zones_ct_out verdict continue trace id ad4d3515 inet vrf_zones vrf_zones_ct_out policy accept trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id ad4d3515 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id ad4d3515 ip vyos_conntrack OUTPUT_HELPER policy accept trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id ad4d3515 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id ad4d3515 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59025 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id ad4d3515 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 54b8c282 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 54b8c282 inet trace_table trace_chain verdict continue trace id 54b8c282 inet trace_table trace_output verdict continue trace id 54b8c282 inet trace_table trace_output policy accept trace id 54b8c282 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 54b8c282 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 54b8c282 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 54b8c282 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 54b8c282 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 54b8c282 inet vrf_zones vrf_zones_ct_out verdict continue trace id 54b8c282 inet vrf_zones vrf_zones_ct_out policy accept trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 54b8c282 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 54b8c282 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 54b8c282 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 54b8c282 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 54b8c282 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 54b8c282 inet trace_table trace_chain verdict continue trace id 54b8c282 inet trace_table trace_output verdict continue trace id 54b8c282 inet trace_table trace_output policy accept trace id 54b8c282 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 54b8c282 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 54b8c282 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 54b8c282 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 54b8c282 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip protocol tcp ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 54b8c282 inet vrf_zones vrf_zones_ct_out verdict continue trace id 54b8c282 inet vrf_zones vrf_zones_ct_out policy accept trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 54b8c282 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 54b8c282 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 54b8c282 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 54b8c282 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59026 ip length 52 tcp sport 22 tcp dport 46448 tcp flags == ack tcp window 555 trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 54b8c282 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 51b94081 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 51b94081 inet trace_table trace_chain verdict continue trace id 51b94081 inet trace_table trace_output verdict continue trace id 51b94081 inet trace_table trace_output policy accept trace id 51b94081 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 51b94081 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 51b94081 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 51b94081 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 51b94081 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 51b94081 inet vrf_zones vrf_zones_ct_out verdict continue trace id 51b94081 inet vrf_zones vrf_zones_ct_out policy accept trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 51b94081 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 51b94081 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 51b94081 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 51b94081 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 51b94081 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 51b94081 inet trace_table trace_chain verdict continue trace id 51b94081 inet trace_table trace_output verdict continue trace id 51b94081 inet trace_table trace_output policy accept trace id 51b94081 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 51b94081 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 51b94081 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 51b94081 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 51b94081 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 51b94081 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip protocol tcp ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 51b94081 inet vrf_zones vrf_zones_ct_out verdict continue trace id 51b94081 inet vrf_zones vrf_zones_ct_out policy accept trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 51b94081 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 51b94081 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 51b94081 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 51b94081 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59027 ip length 96 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 51b94081 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 55e07890 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 55e07890 inet trace_table trace_chain verdict continue trace id 55e07890 inet trace_table trace_output verdict continue trace id 55e07890 inet trace_table trace_output policy accept trace id 55e07890 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 55e07890 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 55e07890 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 55e07890 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 55e07890 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 55e07890 inet vrf_zones vrf_zones_ct_out verdict continue trace id 55e07890 inet vrf_zones vrf_zones_ct_out policy accept trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 55e07890 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 55e07890 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 55e07890 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept trace id 55e07890 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain) trace id 55e07890 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue) trace id 55e07890 inet trace_table trace_chain verdict continue trace id 55e07890 inet trace_table trace_output verdict continue trace id 55e07890 inet trace_table trace_output policy accept trace id 55e07890 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE) trace id 55e07890 ip vyos_conntrack VYOS_CT_IGNORE verdict return trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT) trace id 55e07890 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return trace id 55e07890 ip vyos_conntrack OUTPUT rule counter packets 96680 bytes 63793652 jump FW_CONNTRACK (verdict jump FW_CONNTRACK) trace id 55e07890 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept) trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 96681 bytes 63793736 accept comment "OUT-raw default-action accept" (verdict accept) trace id 55e07890 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip protocol tcp ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 inet vrf_zones vrf_zones_ct_out rule counter packets 96738 bytes 63799228 ct original zone set oifname map @ct_iface_map (verdict continue) trace id 55e07890 inet vrf_zones vrf_zones_ct_out verdict continue trace id 55e07890 inet vrf_zones vrf_zones_ct_out policy accept trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER rule counter packets 96680 bytes 63793652 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER) trace id 55e07890 ip vyos_conntrack VYOS_CT_HELPER verdict return trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER verdict continue trace id 55e07890 ip vyos_conntrack OUTPUT_HELPER policy accept trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 96681 bytes 63793736 accept comment "OUT-filter default-action accept" (verdict accept) trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 96681 bytes 63793736 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT) trace id 55e07890 ip vyos_filter VZONE_Firewall_OUT rule oifname "eth12" counter packets 18405 bytes 7219690 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4) trace id 55e07890 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 124242 bytes 58803730 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept) trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING packet: iif "MGMT" oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 59028 ip length 104 tcp sport 22 tcp dport 46448 tcp flags == 0x18 tcp window 555 trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue trace id 55e07890 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept